last executing test programs: 4m5.529339911s ago: executing program 2 (id=2009): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) (async) r3 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r3, 0x80044944, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r6, &(0x7f0000000840)={0x1f, 0x0, @fixed, 0x0, 0x3}, 0xe) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x1419, 0x1}, 0x10}}, 0x0) (async) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000}]}) write$ppp(r4, &(0x7f00000001c0)="38d5", 0x2) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000ff00000000420000004000000042000000", @ANYRESDEC, @ANYBLOB="00000235f63fe61aa432521442f8569500000db15180", @ANYRES32=0x0, @ANYRES8=r4, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r7}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003, r7}, 0x38) 4m5.410543262s ago: executing program 2 (id=2010): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x5411, &(0x7f0000000100)) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000001840)={'vlan0\x00', 0x7}) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001600156f000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="140006"], 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x2f, 0x40, 0x40, 0x4, 0x4, @mcast2, @private1, 0x8, 0x80, 0x3, 0x1ff}}) unshare(0x20000400) r3 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x12, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r1, &(0x7f0000001800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001880)=@newchain={0x2cfc, 0x64, 0x2, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x7, 0x7}, {0xe, 0xc}, {0xfff1, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x9a, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x7ff}, @TCA_RATE={0x6, 0x5, {0xa, 0x2}}, @filter_kind_options=@f_bpf={{0x8}, {0x2c94, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff3, 0xf}}, @TCA_BPF_ACT={0x1bec, 0x1, [@m_vlan={0xd8, 0xe, 0x0, 0x0, {{0x9}, {0x68, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffffd, 0x5, 0x5, 0x6, 0xfffffffa}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x6, 0x8, 0x2, 0x3fa5}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x8, 0x5, 0x1, 0x5}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x45, 0x6, "d3c68bd997419553709584627aba982b8e274bb106c0d4615bb5c28066ccd05ccc38dd20a767fbd3ebc88fff6dbc0a6c832bfbf9c9e0eb30804b9d363ca09b2908"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x170, 0x1f, 0x0, 0x0, {{0xf}, {0x6c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010101}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x36}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2b}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010102}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xd5, 0x6, "3e95025632fd6445b861bfeae43be8304e2f8696ea926753819e770e513c068818ce751e0d424c1e20e5f3864656e5edf31d9f35f5ea36be49e40a3bb16939c8d275aba7c7720d81e0d8f08e57e74026e8bf79fcb544bf436becbc95a4ae9ed2c670c165ad8751f1b8ad9497d6f37da5261b97f9a421f5352ad9a6b2777d40b2089a4950ac64a744f19d4c4f81d81922d3519034c1d00a0415a5fe80b795f3bd94562bfe0d133c260cf3519eba06d84fb5ad925319b3c9a47ad99a459095de690101b27d28c4d2a420983aecb8ec221b57"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_bpf={0xbc, 0x14, 0x0, 0x0, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0xc, 0x4, [{0xd, 0x0, 0x5, 0x3}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_OPS={0x4c, 0x4, [{0x3, 0x80, 0x7}, {0x6, 0xc9, 0x0, 0x59}, {0xa0, 0x87, 0xa6, 0x1a}, {0x400, 0xff, 0x1, 0x1}, {0x3, 0x3, 0x6d, 0x6}, {0xfff, 0x8, 0x4, 0x7a}, {0xac, 0xc, 0xa8}, {0x6, 0x9, 0x2, 0x1}, {0x8, 0x4, 0x6, 0xffff}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2a, 0x8, 0x1, 0x1, 0x6}}]}, {0xc, 0x6, "76bf20034e047df9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0x170, 0x3, 0x0, 0x0, {{0x9}, {0x5c, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x11}, @TCA_MPLS_PROTO={0x6, 0x4, 0x16}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x74ba8eec, 0xffffffffffffffff, 0x52, 0xffffffff}, 0x1}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xe, 0x6, 0x20000000, 0x6, 0x2}, 0x1}}]}, {0xe9, 0x6, "cb42506c87f32827f64015290edf172f9d51808b7e3e74354f0d4d91c8459e18e43ac442f3a3d1bf06d57e272a79581e864a95009814d3b7ca18cf8bf161504b437c194c4c97b3aaf7816015c4c9248ef98d0af5b8371f3aae1e30d5e23a3560366519bc290efa0cbb3a269850821bcfc0627a7a39306d243d152c36bde00223bae787d6e68c5d46141e728d2c6e0bed4cec01fc2455a968b4aee3efc3ea656a30e7190188d958542c4eead9b6e68d64b92b927b960496de19569651c64bdd4dd508b3deacc3976258ce0a5d445d71c412c8a82354ce0d9a55895f49a8188b1de48e4b4bdb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x2}}}}, @m_ife={0x104, 0x20, 0x0, 0x0, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x8}}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_IFE_DMAC={0xa, 0x3, @random="5f829e18fbef"}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x6, 0x1, 0x9, 0x9}}}, @TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x1c, 0x4, 0x0, 0xc}}}, @TCA_IFE_METALST={0x40, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x1}, @IFE_META_PRIO={0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xfffa}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7a24}, @IFE_META_PRIO={0x8, 0x3, @val=0x9}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x20, 0x6, "1a4ea19a907320c77783aaeabad508dfae0736b66a4873e9922da498"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_police={0x1670, 0x11, 0x0, 0x0, {{0xb}, {0x1610, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x6, 0xcc, 0x6, 0x7f, 0xec7, 0x86fc, 0x9, 0x9, 0x1db5, 0x8, 0x3, 0x0, 0x4, 0x10000, 0x8, 0x2, 0x0, 0x2, 0x7fffffff, 0x8, 0x5, 0x10000, 0x10001, 0x1, 0x3ff, 0x400, 0x3ff, 0x3e3, 0x8, 0x0, 0x1, 0x9, 0x6bb, 0x6, 0x3ff, 0x9, 0x7, 0x10000, 0x0, 0x20000000, 0x4, 0x1, 0xfffffffd, 0xfffffffc, 0x3, 0x8, 0x3, 0x8, 0x6, 0x7, 0x87, 0x1, 0x8d2c, 0x2c78, 0x9, 0x80000000, 0xfffffff9, 0x101, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1000, 0xb, 0x5, 0x5, 0xd, 0x2, 0x9, 0xc, 0x80, 0x2, 0x97, 0x10001, 0x20000, 0x9, 0x8, 0x94bb, 0x8, 0x3, 0xd9f, 0x0, 0x2, 0x0, 0x3c5, 0x853, 0x3, 0x2, 0x0, 0x6d, 0x1, 0x7, 0xe, 0x4, 0x6f, 0x3, 0xfffffffb, 0x6, 0x2, 0x44a, 0x2, 0xfe, 0x7fff, 0x9, 0x1, 0x2, 0x8, 0x9, 0x7, 0x0, 0x7, 0x7771, 0x81, 0x9, 0x98f, 0x9, 0x400, 0x7, 0x7, 0x7, 0x0, 0x7, 0x791, 0x0, 0x4, 0xd, 0x10000, 0x4, 0x8, 0x5, 0x6, 0xa59, 0x4, 0x200, 0x6, 0x1, 0x8, 0x0, 0x4, 0x8f, 0x7f, 0xffffff39, 0x1, 0x5, 0x81d7, 0x7, 0x3, 0x8, 0xffffff6a, 0x9, 0x83, 0x8, 0x81, 0x4, 0x1ff, 0x6, 0xffffffff, 0x3, 0x7, 0x0, 0x15, 0x1, 0x2, 0x200000, 0x2, 0xa, 0x2, 0x6, 0x94dd182d, 0x6, 0x0, 0xd1, 0x10001, 0x7ff, 0xd, 0x5, 0x1, 0x0, 0xfffffffa, 0x21, 0x5, 0x7, 0x101, 0x6, 0xffffffea, 0x2a0b, 0x15d, 0x8, 0xe, 0x81, 0x9c6c, 0x3, 0x2, 0x36b5, 0x4, 0x95, 0x48d93d22, 0xffff, 0x80, 0x9, 0x6, 0x4, 0x5, 0x80, 0x7, 0x1990, 0x4, 0x93, 0x1ff, 0x2, 0x5, 0x60, 0x90c, 0xa3, 0x3, 0x2, 0x5, 0x4, 0xfff, 0x3, 0x7, 0x5, 0x1ff, 0x3, 0x4, 0xf, 0x2, 0x5, 0xfff, 0x6, 0x7a9f266f, 0xfffffff9, 0x6, 0x7f, 0x4, 0x13ac56c5, 0x9, 0x8, 0x3, 0x101, 0xc, 0x6, 0xe9, 0x0, 0x2, 0xfffffff2, 0x2, 0xfffffff9, 0x7fff, 0x8, 0x6, 0x8001, 0xec2]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7a}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x65f0dea6}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x2, 0x8, 0x7, {0x4, 0x1, 0x3, 0xfff9, 0x8000, 0xfff}, {0x1, 0x1, 0x3, 0x7, 0x98}, 0x0, 0x200, 0x6}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x30, 0xfffffffffffffffe, 0x6, 0x6, 0x7, {0x6b, 0x2, 0x3, 0x8400, 0x170, 0x101}, {0x3, 0x0, 0x4, 0x8, 0x0, 0x8000}, 0x4, 0x0, 0x7fffffff}}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x3f, 0x0, 0x800, 0xffff36fe, 0x4, 0x0, 0x80, 0x80, 0x7ff, 0x80000001, 0x9, 0x5fa, 0x8000, 0x9, 0x3, 0xfffffffd, 0x2, 0xff, 0x8, 0x6, 0x9, 0x3, 0x8, 0x3, 0x5, 0xb, 0x80000001, 0x2, 0x2, 0x4, 0x18352a3e, 0x1001, 0x0, 0x4, 0x9, 0x4, 0x3, 0x6, 0x4, 0x7073, 0x2, 0x6, 0x2, 0x7, 0x8f, 0xfffffff8, 0x7, 0x10000, 0x9, 0xcb, 0x1a5, 0xd, 0xeb4, 0x6, 0x4, 0x3, 0x5, 0x806, 0x0, 0xb671, 0x9, 0x10000, 0x400, 0x0, 0x0, 0x3, 0xe, 0xff, 0xc9, 0x28a8, 0x7, 0x9, 0x2, 0x400, 0xfffffff4, 0x3, 0x10001, 0x3, 0x6, 0x8, 0x9, 0x7, 0x716, 0x2c6, 0x8001, 0x0, 0x2, 0x7, 0x308, 0x6, 0x3, 0x4, 0x0, 0xfffffffe, 0x401, 0x8, 0x1, 0x7, 0x8001, 0xfffffff9, 0x0, 0x1, 0x3, 0x4, 0x4, 0x5, 0x400, 0xfffffffb, 0x74d, 0x2, 0xe, 0x5, 0x7d3, 0x3ff, 0x7f, 0x4, 0x2, 0xd4cc, 0x5, 0x9, 0xee1, 0x60000, 0x8, 0x6, 0x3, 0x10000, 0x9, 0x4, 0x9, 0x9, 0x2, 0x3ff, 0x1, 0xd30, 0xffffffff, 0x2, 0x81, 0x40, 0x9, 0x5, 0x4, 0x2, 0x7fffffff, 0x3, 0x9, 0x3, 0xd, 0x4, 0x8001, 0x3ff, 0x0, 0x0, 0x1, 0x8, 0x67, 0x5470, 0x0, 0x800, 0x1, 0xed, 0x7fff, 0x6, 0xb, 0xfffffffd, 0x3, 0x80000000, 0x9, 0x8, 0x0, 0x9, 0x0, 0x401, 0x7, 0x10, 0x7, 0x2, 0xb9f, 0x6, 0x40a, 0x100, 0xc0, 0x200, 0xe0, 0xfff, 0x2, 0xc7, 0x1, 0x6, 0xff, 0x1, 0x0, 0x10, 0x7, 0x6, 0x80000000, 0x81, 0x4bb, 0x4, 0x10000000, 0x1, 0x2, 0x3, 0x4, 0x4, 0x1, 0xeac, 0x4, 0x389, 0x1, 0x8, 0x2f24, 0x0, 0x8, 0x2, 0x5, 0x9, 0x5, 0x5, 0x8, 0x8, 0x4, 0xfffffff0, 0x8000, 0x8000, 0x8, 0xf2, 0x5a, 0x0, 0xffffff81, 0x0, 0x800, 0xfc376e0d, 0xa8, 0x1, 0x1ff, 0x8, 0x4, 0x1, 0x80000001, 0xfffffffc, 0x0, 0x7, 0xa, 0x10000, 0x10000000, 0x10001, 0x200, 0x9, 0x8, 0x80000000, 0x81, 0x9, 0x2, 0xfffffff9, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7ff}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x101, 0x4, 0x101, 0x2, 0xf, {0x2, 0x1, 0x6, 0x0, 0x1cf, 0xff}, {0x5, 0x2, 0x8, 0xe392, 0xc, 0x2}, 0x905, 0x0, 0x7f}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xdf8e, 0xfffffffffffffff7, 0x3ccca4bc, 0x1, 0x2, {0x9, 0x1, 0x4, 0x5, 0x7ff, 0x318}, {0x6, 0x1, 0xfff9, 0x4, 0x2, 0x1}, 0x2, 0x7, 0x4}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffc, 0x7, 0x7, 0xff, 0x8, {0x14, 0x2, 0x5, 0xa, 0x8, 0x7}, {0x3, 0x1, 0x8, 0x5, 0x7, 0x7fff}, 0x4, 0x41a3, 0x6dee}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb40, 0x8, 0x7f, 0x8, 0x401, 0x0, 0x7, 0x3, 0x9, 0x0, 0x4, 0x9, 0x400, 0x6, 0x3, 0x95, 0x101, 0x3, 0x9, 0x9, 0x0, 0x7, 0x531, 0xfff, 0xa8, 0x8, 0x0, 0x10000, 0x5, 0x9, 0x401, 0x5, 0x6, 0x5, 0x6, 0x8b9, 0x8, 0x40220648, 0x4, 0x6, 0x9, 0xfffffff6, 0x0, 0x1195, 0x2, 0x3, 0x3, 0xfffffff6, 0x9, 0x5, 0x0, 0x0, 0x8, 0x2acb, 0x1, 0x5eefa26c, 0x0, 0x600, 0x3, 0x2, 0xe, 0x6, 0x3, 0x5, 0x10, 0x30000, 0x200, 0x0, 0x105c, 0x23, 0x1, 0x6, 0x7, 0x7, 0x9, 0x2, 0x2, 0x40, 0x8, 0xffffffff, 0x5, 0x4, 0x0, 0x4, 0x3, 0xf, 0x9, 0x6, 0x7, 0x7, 0x2, 0x28a1156f, 0x0, 0xfa3, 0x3, 0x800, 0xfc, 0x4, 0x2, 0x22, 0x9, 0x40, 0x80, 0x7, 0x8, 0x8000, 0x6, 0x8934, 0xffffff01, 0x7fff, 0x8, 0xb, 0x6, 0x4, 0x5, 0x38000, 0x6, 0xfddf, 0x4, 0x1, 0x40, 0x80000000, 0x7, 0x6, 0x2, 0x400, 0xf, 0x3, 0x7, 0x2, 0x7fff, 0x7, 0x1, 0x6, 0xfffffffa, 0x7fff, 0x2, 0x9, 0x7, 0x7, 0x7, 0xffff, 0x9c, 0x5, 0x10000, 0x3, 0x3, 0x6, 0x7, 0x6, 0xcec1, 0x3d, 0x11b7, 0x9, 0x8, 0x30, 0x200, 0x3, 0x2, 0x6c1f, 0x7, 0x6, 0x10000, 0xa, 0xffffffff, 0x1, 0x38, 0xe59, 0x5, 0x80000001, 0x400, 0x5, 0x7ff, 0x1, 0x5, 0xffffff5b, 0x6, 0x4, 0x66c8, 0x1, 0x9, 0x5, 0x4, 0x7400, 0x443c5ee3, 0x9, 0x6, 0x9, 0x2, 0x1, 0x3, 0x76, 0x400, 0x0, 0x6, 0x3a22, 0x3, 0x2, 0x6, 0x9, 0x4, 0x3, 0x4, 0x20, 0x1, 0x9, 0x100, 0x7, 0xffffffff, 0xd9e, 0x10001, 0x8001, 0x8, 0x6, 0xfffffff7, 0x8, 0xe0, 0x7fffffff, 0x6, 0x1, 0x0, 0x9, 0xb, 0x5, 0x6, 0x6, 0x802, 0x16b, 0x5, 0x2, 0x3adf, 0xbbf, 0x6, 0xaab1, 0x4c, 0x36, 0x7fffffff, 0x6, 0xec8, 0xec43, 0x40, 0x2, 0x4, 0x6, 0xffffff52, 0xd, 0xfff, 0x6, 0x9, 0x7f60, 0x5, 0x0, 0x8eb9, 0x0, 0xaf, 0x2]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x8000, 0x10000, 0xd685, {0x40, 0x2, 0xfff8, 0x81, 0xf72e, 0x80000000}, {0x7d, 0x1, 0x7fff, 0x3, 0x8, 0x5}, 0x81, 0x4, 0x2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8001, 0x0, 0x0, 0x6, 0x7, 0x5, 0x7, 0x1, 0x65, 0x2, 0x1, 0x8c5, 0xa, 0x5, 0x4, 0x2, 0x8, 0x3dd5, 0x80, 0xe, 0xf96, 0x2, 0x100, 0x8, 0x4, 0x0, 0x10001, 0x4, 0x6, 0x5e, 0x2, 0x1, 0x7, 0x0, 0xfda5, 0x7fffffff, 0x8, 0x3, 0x10, 0xf74, 0x0, 0x2, 0x9, 0x8, 0x4, 0x6, 0xffffffc0, 0x0, 0x9, 0x9, 0xb2bf, 0x401, 0x95, 0x5, 0x1, 0x8, 0x6, 0xffffffff, 0x2, 0x8, 0x80000000, 0x10, 0xffffffff, 0x3, 0x2, 0x1000, 0x4, 0x6, 0x1, 0x5, 0xffffffff, 0x8, 0x9, 0x7, 0x7, 0x1, 0x212, 0xfffe000, 0x3, 0x1, 0x5, 0x9, 0x1, 0x200, 0xaab, 0x10001, 0xc8000000, 0x6, 0x8, 0x0, 0x0, 0xf, 0x5, 0x8, 0xbb, 0x17, 0x9, 0x3, 0x1, 0x7f, 0x6376, 0x5, 0x2, 0x8, 0x1, 0xde9, 0x5, 0x3, 0x972, 0xf2, 0x2, 0x7b, 0x401, 0x2c7, 0xcf, 0xfffff6c1, 0xfffffff1, 0x6, 0xae88, 0x5ad, 0x8, 0x32a6, 0x2, 0x96, 0x3dfa, 0x4, 0xb2, 0x6, 0x19f20f9b, 0x618e, 0x8, 0x9, 0x81, 0xfffffff4, 0x0, 0x1, 0x7f, 0xfffff695, 0x5, 0xffff, 0xd2, 0x5, 0x7, 0x9, 0x9, 0x6, 0x7, 0x9, 0x0, 0x3ff, 0x9, 0x2, 0x3, 0x32, 0x3105, 0x917a, 0x6c, 0x7f, 0x2, 0x1, 0xff, 0x9, 0x101, 0x7e5, 0xfffffffa, 0x4af, 0x7, 0x7, 0x8, 0x1ff, 0xfffffffc, 0xfff, 0x5, 0x8000, 0x7, 0x80000001, 0x7, 0x5, 0xc40, 0x3, 0x470f4bc2, 0x4, 0x8, 0x4, 0x5, 0x80000000, 0x0, 0x8, 0x0, 0x7fffffff, 0xf, 0x2, 0xffff, 0xfffffff7, 0xecb, 0x5, 0x4, 0x8, 0x3, 0x6, 0x8, 0x7fffffff, 0x9b, 0x7fff, 0x4, 0x4, 0x4, 0x0, 0x101, 0x0, 0x31, 0x7, 0x5, 0x3, 0x9, 0x0, 0xfffffff6, 0x9, 0x9, 0x7, 0x400, 0xf, 0x8, 0x2, 0x400, 0x9, 0x3, 0x33af, 0x4, 0x7fffffff, 0x50, 0x6, 0x0, 0x279, 0x8f44, 0x7, 0x5, 0x5, 0x6, 0xe0e4, 0x101, 0x1, 0x80, 0xfff, 0x3, 0x2, 0xfffffff8, 0x3, 0x9, 0x9, 0x100, 0x6682, 0x1, 0x6, 0x4, 0x80000000]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffff01}], [], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x3, 0x40, 0x3, 0x1, 0x6, 0xb82b, 0xf59f167c, 0x2, 0x3ff, 0xee, 0x4, 0x4, 0x81, 0x7, 0x9, 0x3, 0x4, 0x5, 0xb, 0x2362, 0xfff, 0x7, 0x9, 0x9, 0x6, 0x400000, 0x7, 0x6, 0x9, 0x56aeb7d1, 0x5, 0x0, 0x10, 0x7, 0x7, 0x7, 0x42f, 0x3ff, 0x7, 0x5, 0x18000000, 0x9, 0xfff, 0x73ab, 0x1, 0x7ff, 0x9, 0x4, 0x8, 0xef2, 0x7, 0x7, 0x10, 0xff, 0x1c0000, 0x1, 0x0, 0xfffffffc, 0x7, 0x7f, 0xd, 0x9, 0x9, 0x2, 0x7, 0xfffffff9, 0x0, 0x6af5, 0x6, 0x3, 0x7, 0x3, 0x8, 0x7fffffff, 0x4, 0x579c, 0x80, 0xd, 0x86e2, 0xcbb, 0x4, 0x8, 0x658, 0x7ff, 0x3, 0x5, 0x9, 0x80000001, 0x7, 0x1033, 0xba2e, 0x8, 0xf0, 0x3ebf0930, 0x9, 0x9, 0xeaf, 0x7, 0x1, 0x2, 0xc, 0x1, 0xc, 0x8, 0x25a6, 0x7fff, 0x6, 0x8, 0xffff, 0x5, 0x5, 0x4, 0x0, 0x6, 0xd, 0x9, 0x81, 0x81, 0x0, 0x7, 0x8, 0x401, 0xad, 0xd6, 0x8b, 0x1000, 0x0, 0x8, 0x3, 0x4, 0x8, 0x100, 0x5b903bb0, 0x3, 0xa4, 0x4, 0x4, 0x4, 0xee67419, 0x8, 0x563, 0x57, 0x77a8cac9, 0xf, 0x7, 0x4, 0x6, 0x7ff, 0x10, 0x4, 0x4, 0x9, 0x7, 0x2, 0x5, 0xcd, 0xfff, 0x6, 0x5, 0x5f8c, 0xb36e, 0x401, 0xe5d3, 0x996, 0x5, 0xa, 0x2, 0xe61, 0x1, 0x85, 0x10, 0x9d, 0x6, 0x1ff, 0x2, 0x86, 0x1, 0x7f, 0x20000000, 0x6, 0x5, 0x4, 0x10001, 0xa, 0x4, 0x9, 0x800, 0xffff, 0x1, 0x5, 0x3, 0x4, 0x5, 0xbd, 0x3ff, 0x0, 0x10001, 0xd352, 0xfffffffd, 0xf, 0x6, 0x7, 0x0, 0xffff, 0x4, 0x70000000, 0x7, 0x2, 0x2, 0x802a, 0x0, 0x35, 0x5, 0xff, 0x73, 0xfffff801, 0xff, 0x10, 0x7ff, 0x24, 0x6, 0x5, 0x8, 0x3, 0x0, 0x9, 0x1, 0x8, 0x8, 0x401, 0xb, 0x8, 0xbe50, 0xfff, 0x6, 0x3, 0x1, 0x6, 0x7ff, 0x101, 0x4, 0x6, 0x7, 0x6, 0xffff7fff, 0x9, 0xfffffc00, 0x4, 0xa, 0x5, 0xc0f7, 0x4, 0xfffffffc, 0x7, 0x2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}]]}, {0x36, 0x6, "22d07b142f2d23923479c313696ea545c15daa42ebe23eb82d93d4ac2938e0fb77c0661352d6266d39b8a1375d5749548dcd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x6, 0x8, 0x1, 0x5}, {0x6, 0xb, 0xfc}, {0x87, 0x1, 0x76, 0x4}, {0x1c02, 0x0, 0x40}]}}, @TCA_BPF_POLICE={0x410, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x7, 0x3, 0xeb6, 0xe9a, 0x401, 0xfff, 0xa, 0x4, 0xffffffff, 0x326a, 0x6, 0x8, 0x1ac, 0x41c6, 0xf19, 0x0, 0x2, 0x9, 0x8, 0x9, 0x8, 0x7fff, 0x7, 0x9, 0x6, 0x1, 0x10001, 0x0, 0xbbc3, 0x0, 0x400, 0x17d, 0x400, 0x5, 0x3, 0xff, 0x80000001, 0x7, 0x4, 0x0, 0x6, 0x0, 0x3ff, 0x140, 0x3, 0x2, 0x3ff, 0x6, 0x400, 0x0, 0x3, 0x1, 0x7, 0x8, 0x8, 0x5, 0x5, 0x0, 0x4, 0x7fff, 0x401, 0xfffffffb, 0x2, 0x10001, 0x2, 0x7fffffff, 0x0, 0x7, 0x8, 0x2, 0xfffffff8, 0x0, 0x3, 0x27b, 0x1, 0x6, 0x800, 0x401, 0x7, 0xfffffffd, 0xc000000, 0xfff, 0xc478, 0x6, 0x7, 0x6, 0xfff, 0x8, 0x1, 0xb81, 0x5, 0x7, 0x2cc, 0x4b, 0x8, 0xe, 0x40, 0x1ff, 0x8, 0xe2500, 0xc9, 0x8d, 0x2, 0x4, 0x10001, 0x76bd, 0x6, 0x5, 0x5, 0x6, 0x4, 0x3, 0x1, 0x9, 0xca, 0x0, 0x2d, 0x9d, 0x6, 0x400, 0x4, 0xffffffff, 0x7, 0x47280f86, 0x5, 0x800, 0x7518, 0x4, 0x5, 0x8, 0x2, 0x7, 0xc, 0x1, 0x8, 0x3ac8, 0x6, 0x0, 0x1, 0x4, 0x4, 0xfffffffb, 0xfffffbff, 0x1000, 0x40, 0x52baf4ce, 0x80000000, 0x1, 0x8, 0x10, 0x800, 0x0, 0x0, 0x170, 0x6, 0x3ff, 0x3, 0x8, 0x3, 0x1, 0x0, 0x9, 0x7fff, 0x8, 0x4, 0x6, 0xb7, 0x1, 0x2, 0x4a, 0x0, 0x80000001, 0x9, 0xd, 0x0, 0x4, 0x1000, 0x8, 0x2, 0x10000, 0x9c, 0x1, 0x80000000, 0x60, 0x1, 0x2, 0x6, 0x9, 0x10000000, 0x3, 0x6, 0x8, 0x4, 0x7, 0x40000000, 0x1ff, 0x2, 0x0, 0x8, 0xfffffff7, 0x400, 0x0, 0x3ff, 0x9, 0x9, 0x8001, 0x0, 0x280, 0x4a5c, 0x4, 0x6, 0xff, 0x400, 0x0, 0x4, 0x2cf50ca1, 0xb, 0x80, 0x3, 0x8, 0x7, 0x6, 0xe, 0x6, 0xe, 0x80000000, 0x81d2, 0x2, 0x1, 0x3, 0x7, 0x401, 0x3, 0x0, 0x1, 0x9, 0x3, 0x9, 0x1, 0x101, 0x8, 0x7, 0xfffffff0, 0x3, 0x7, 0x7, 0x40, 0x3, 0x1, 0xe61, 0x3, 0xc, 0x7, 0x6, 0x51ba]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xde}]}, @TCA_BPF_POLICE={0x850, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x9, 0xed0, 0x9, 0xffffffc0, 0xff, 0x2, 0x80000001, 0xfffffb99, 0x200, 0x182f, 0x24, 0x7fffffff, 0xfffffffd, 0x0, 0x800, 0x0, 0x0, 0x80000000, 0x7, 0x9, 0x0, 0x8, 0x8, 0x1, 0x4, 0x1, 0xf, 0x16, 0x3, 0x9, 0x0, 0x5, 0x8, 0x147, 0x6, 0xef6a, 0x2, 0xffffff7a, 0x5, 0x4, 0x9, 0xfffffff8, 0xf3f8, 0x9b6, 0x7, 0x8, 0x1, 0x8, 0x7, 0xb5, 0xffffffff, 0x1c9, 0x8, 0x4, 0xc861, 0x8001, 0x4, 0x7f, 0x800, 0x3, 0x7, 0x10, 0x800, 0x9, 0x9, 0x4, 0x9, 0x6, 0x795, 0x8, 0x3, 0x2, 0xe34ef9, 0x5, 0x7, 0x2, 0x8000, 0x7, 0x5, 0x3, 0xfffff95f, 0x5, 0xfffffffa, 0x1, 0x6, 0xff, 0x4000, 0x3, 0x6, 0xfffffffe, 0x81b, 0x81, 0x5, 0x68, 0x80, 0x9, 0xfffffffe, 0x6, 0x0, 0x1, 0x9, 0x55c, 0x1, 0x8, 0x7, 0x9, 0x9, 0x9, 0x1c00000, 0x2, 0x5, 0x9, 0x4, 0x7, 0x6, 0x6, 0x4, 0x2, 0xd22, 0x8, 0x3ff, 0x4, 0x2, 0x1, 0x5, 0x4, 0x4e, 0x1000, 0xfffffffc, 0x6, 0x6, 0x100, 0x6, 0x9, 0x7f, 0x1, 0x0, 0xe, 0x9, 0xffff79a8, 0x2, 0x44f3, 0x8, 0x4, 0x1, 0x10001, 0x9, 0x1038, 0x400, 0xff49, 0x81, 0x46b, 0x9, 0x81, 0x2, 0x4, 0x7, 0x3, 0x1, 0x601, 0xffffffb0, 0x11879013, 0x2, 0x23, 0x1, 0x10000, 0x7, 0xfff, 0xe, 0x2, 0x10000, 0x1ff, 0xffff, 0xffffffff, 0x245, 0x6, 0x6, 0x2, 0xdb, 0x81, 0x7fffffff, 0x0, 0x3, 0x2, 0x7, 0x81, 0x0, 0xd, 0x1, 0x6, 0x2, 0x2, 0x8, 0x7f, 0x3, 0xee9, 0x8, 0x6, 0x4, 0x7, 0x8, 0x3, 0x7, 0x3, 0x9, 0xfffffffb, 0x0, 0x4, 0xffffff7f, 0x0, 0x1, 0x6, 0x1, 0x7, 0x0, 0x7, 0x5, 0xffff0000, 0x9, 0x0, 0x1bf, 0x1, 0x5, 0xf, 0x5, 0x3, 0x45, 0x0, 0x5, 0xffffffff, 0x200, 0x5, 0x5, 0x401, 0x80000001, 0x7, 0xc, 0xc, 0xfffffffa, 0xe87c, 0xdcc, 0x1, 0x236, 0x7, 0x2, 0xec8, 0xff, 0x0, 0x9, 0x0, 0x5, 0x10000, 0xfff80000, 0x5, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x20000000, 0x0, 0xfffffff8, 0x2, {0x1, 0x1, 0x1, 0x7f, 0x0, 0xe}, {0x7, 0x1, 0x63dd, 0x3, 0x2, 0x1800}, 0x101, 0xffffffff, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfe0000, 0xff, 0x9, 0x4, 0x2, 0xffffff34, 0xc9c, 0x9, 0x3, 0xc01b, 0x3, 0x8, 0x3, 0x7, 0x7ff, 0x7d, 0x1ff, 0x8, 0x101, 0x2, 0x4, 0x6, 0x3, 0x3ff, 0xb, 0x4, 0x4, 0x9, 0x7, 0x2, 0x8, 0x7, 0x4, 0x9, 0x3, 0xc9f8, 0x0, 0x4, 0xfffffffa, 0x4, 0xffff1351, 0x200, 0x8, 0x9, 0x2980, 0x0, 0xfffffffc, 0x0, 0x400, 0x3, 0x8000, 0x2, 0x7, 0xc0000000, 0x10, 0xfffff6f4, 0xe, 0x9, 0xfffffff7, 0x101, 0x8000, 0x5, 0x4000000, 0xffff, 0x1, 0x9, 0x401, 0x6, 0x5, 0x2a18, 0x4, 0x800, 0x0, 0x8, 0x7, 0x3, 0x10, 0x7fffffff, 0x101, 0xeb, 0x4, 0x1ff, 0xffff, 0x6, 0x9, 0x0, 0x6, 0x2, 0x9, 0x481f85d0, 0x2, 0x6, 0xfffffffb, 0x1, 0x9, 0x0, 0xfff, 0x90ea000, 0x9, 0xe2a, 0x5, 0x6, 0x10000, 0xc, 0x4, 0x6, 0xfffffffb, 0x9, 0x7, 0x4, 0x4, 0x480, 0xfffffffc, 0x2, 0x4, 0x8, 0x7, 0xc300, 0xc1d4, 0x0, 0x80, 0x0, 0x10000, 0x6, 0x8, 0x8, 0x5a, 0x2, 0x4, 0x3, 0x5, 0x7fffffff, 0x2, 0x2, 0x3, 0x0, 0xfffff328, 0x8, 0x6, 0x9, 0x0, 0x6, 0x200, 0x9, 0x8, 0x3, 0x4, 0x6, 0x7ff, 0x5, 0x7, 0x5, 0x3, 0x3ff, 0xffff, 0x7, 0xfffffffb, 0x8000, 0x401, 0x3, 0xffffffff, 0x0, 0x80, 0x3, 0x2, 0x2, 0xc718, 0x9, 0xffe00000, 0x9, 0x471f, 0x7, 0xb, 0xea, 0x9, 0x7, 0x6, 0x6, 0x9, 0x8d, 0x2, 0x7, 0xc2, 0x747, 0x5, 0x7, 0x9, 0x8, 0x10, 0x0, 0x5, 0xfffffff9, 0x4, 0x5f2, 0x5, 0x0, 0x0, 0x6, 0x8, 0x1, 0x80, 0x80000001, 0x247b, 0x8001, 0x2, 0x8, 0x1ff, 0xa, 0xffff, 0x9, 0x7, 0xfffff9b3, 0x8, 0x5, 0xfff, 0x9, 0x2fe, 0x1000, 0x7, 0x9, 0x100, 0xff, 0x7eaf, 0x3, 0x10000, 0x5, 0x4, 0x200, 0x9, 0xf1, 0x6, 0x4, 0x4, 0x3, 0x8, 0x262, 0x8, 0x84e1, 0x6, 0x8, 0x8, 0x7, 0x7, 0xb0, 0x3, 0x9, 0x9000000, 0x5, 0x8001, 0x7, 0x8, 0x4, 0x1, 0x9, 0x7, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}]}, @TCA_BPF_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x1000, 0x2, 0x7, 0x3e4, 0x3a266dee, 0xa082, 0x4, 0x49, 0x2, 0xa1fb, 0x200, 0x7, 0x1, 0x960, 0x9, 0x2, 0x8, 0xa, 0x2, 0x7, 0x400, 0xc3b, 0x9, 0x3, 0x6, 0x3, 0xfffffff7, 0x55380000, 0x40, 0x6, 0x400, 0x1, 0x6, 0x6, 0x7, 0x80000000, 0x0, 0x1ff, 0x8000, 0xb, 0x2, 0x10, 0x8, 0xff, 0x18000, 0x7, 0xf2d, 0x1000, 0xc, 0x10, 0x10001, 0x6, 0x0, 0x4, 0x4, 0x401, 0xc0000000, 0x2, 0x0, 0x800, 0x10001, 0x5dc, 0xe, 0x8, 0xa, 0xfff, 0x1, 0xac, 0x0, 0x4af, 0x2, 0x6, 0x1, 0x5, 0x8000, 0x0, 0x100, 0x48, 0x4, 0x10, 0x4, 0xfffffc01, 0x5, 0x80000001, 0x5, 0x3ff, 0x1, 0x2, 0x0, 0x10, 0x1, 0x2, 0x1, 0x9, 0x6, 0x8001, 0x976c, 0x8, 0x39a, 0xd4a, 0x9, 0xffff, 0x5, 0x2, 0xa, 0x80000000, 0x80000001, 0x6, 0x8, 0x7f, 0x43, 0xf, 0x2, 0x800, 0x3, 0x6, 0x1, 0x2, 0xd869, 0x400, 0x10001, 0xb7d, 0x2, 0x7, 0x3, 0x6, 0x2fc, 0x1, 0xe164, 0x7, 0xffffffff, 0xfffffff9, 0x6, 0x4, 0x43ee, 0xed6, 0x3, 0x2, 0x5, 0x3, 0x4, 0x8, 0x485ca31f, 0x3, 0x1, 0x2, 0x0, 0x8, 0x100, 0x800, 0x80, 0x6, 0x5, 0x80000000, 0x2e, 0x800, 0x6, 0x6, 0x1, 0x1, 0x200, 0x0, 0x1000, 0x2, 0x40, 0x5ee31275, 0x9, 0xfffffffd, 0x5, 0x7194a0e3, 0xe2e, 0x8, 0x9, 0x7, 0x9, 0x7, 0x21, 0x5, 0x7, 0x0, 0xffffffff, 0x6b, 0x1, 0x0, 0x4, 0x7, 0x400, 0x7, 0x5, 0x84, 0x401, 0x40, 0x2e, 0x6, 0x0, 0x40, 0x10, 0x3, 0x604, 0x9, 0x1, 0x3, 0xa, 0x7, 0x9, 0xf59, 0x9, 0x8, 0x800, 0xe, 0x3ff, 0xfffffffd, 0x3, 0x7, 0x8, 0x14a, 0x9, 0x8, 0xcfe, 0x1000, 0x5, 0x1, 0x3, 0x5, 0x2, 0x6, 0xfffff6ed, 0x7f, 0x401, 0x3, 0x3, 0x7, 0xba, 0xef, 0x20000000, 0x7078, 0x10000, 0x2, 0x17, 0x3, 0x8, 0x6, 0x0, 0x9, 0xbc9e, 0x88, 0x6, 0xf, 0xce0, 0x0, 0xd, 0xfda, 0x366, 0x4, 0x10000]}]}]}}]}, 0x2cfc}, 0x1, 0x0, 0x0, 0x800}, 0x24004800) 4m5.231462497s ago: executing program 2 (id=2015): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x24008807) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x94}]}, 0x10) sendto$inet6(r4, &(0x7f0000000000)="c0", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x16}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f0000000580)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r3) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$rose(0xffffffffffffffff, &(0x7f00000002c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}, 0x40) getsockopt$IP_VS_SO_GET_TIMEOUT(r6, 0x0, 0x486, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf250400000004000d8059c0e3d467b076d75f97fec9ed8490878e12f8d759a13edb30a4c225ecbcb897e8200cfe9188ffb94a50d2d868d31872346544616ab7d871c736428d85787d9d103eccf0af3f44d9e9b52838d2caf3dd"], 0x18}, 0x1, 0x0, 0x0, 0x48009}, 0x4048000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="8b", 0x1}], 0x1}, 0x20048811) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x20, 0x2c, 0x117, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) getpeername(r3, &(0x7f0000000380)=@hci, &(0x7f0000000300)=0x80) recvmsg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)=""/225, 0xe1}], 0x1}, 0x40020123) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x400, 0x8000, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 4m4.977909341s ago: executing program 2 (id=2019): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) (async) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x1}}}}}}}, 0x0) 4m4.742469215s ago: executing program 2 (id=2021): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x78, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x78}}, 0x0) socketpair(0x22, 0x2, 0x4, &(0x7f0000005fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$x25(r1, &(0x7f00000000c0)="71b0cfe0cae0d2dc58b30cd81824ba7adc8a821a16362c7c46f12a837e5ae6ca482086b07abf67db3a4d3fa6c9f12bdf69f3707de1a1483fa3b6d85b52253d5bf317b943614b03550766288759b2f37fc51da498c59cb02a34223b67d92d9b9ded13ef3ea7795e060c0190977b7cad5c31658f831592271ff26e6fecb44170b62ffe325975f8ee18d6cbb110d4324b0d96eb74e5207784551188296a1977a8832c877a2b1bf2a27424d2745e14b33eedb16013da420f2256373a6e1a981f1c8262591b5bafa1227a392d728f3b41aefe84201914b92b8eb243407523ca8af6ff4a3f1187267c1cdb415d065ca44e141ce29c122ae09acaccd2fc9e39ad2ab3b5072d5e7f25d3ef2b86e228515d6595af7bf05992dfdc2e81fdb1d001082e70dc0cd52aa6e385af5d80d4476a50f04cbfe96fcfb97eccdcf20ac4577f1e5eb6614784000a55b4ca190ce14b29ffdab24c9c4218b29a24db49c2cf82d8476710ad4018c44863f5035d91683b57ead932c968448da20dce2b9bdf4a092b2b495f78db16d744101eba37d2d42824d49af45f4e98522353c312a162678fa9985b640354bec6f403b76109807049dc981928108ed7b5890ed68f3e1d7c6382d9457ab3e566f4ad3da4c798229e34bf21e65d3e568f1063228289c9e8797152ffeaf72d9f8034c52480f4d9d49ca4b298b4e7be435b0f0feba733456bf24ba5427a467cc93c88460fe206829fb389719a136cfa13956abcdf2c67c5ab6e4410315d57b80664ad01b0ca1ffc4cc7e88c967c46cf16f6235a87e7e46857f53a7d7f51906e0632f9fdfd4023740b81c8f567b307a80f787e828d096f1ca32783110bde2e23fd6b23e3926c0033fccea79bfd02e1ed37c233da7f9071494fbbecbab1d0a37aeaeff4086174a966e91ef1d21d5628c86b4c94b8e6595e5eeeab307b4a12f5e87608dcb36f56181a078aefe85b8cdb2921f8568b91b3e2952bbcd8220a33b616237d155d036ddc9c3fae13dffe87a2ac1874ea094065c3ba07928be901929c8d3d89e9855b109b5f94998946844bf78d181466543da9d60561fd06be2a41381346bd862b018e1b5717e0515f588067f7dcdc16ca5632383ebc0ecd2290b695cf542ff11a5d02a6a0f21efe8051e05bdbd81f78672c3f7d623cc2ebb3178d7b910e277d49d7a3c225c65e51dfcb936d730a195cda97c70cf671a9bb751f1a680ed66df8a4567d34f6fecb79e076a08eaa1457fd03bfc0eefee4cdd0afc96ddfedc2616816602eedf21e96253daafe908deab9a872d53e67b42a419e0f31d3b8704d6b56e96cb0726b4039d52f55fc5f912b8fba76d84ba0dae98963364f6c391c42e641ba81941173fe6713c2fb3dfd1f5ab11f222b2e08bce749da3e285dff7ec2f0b9fb28fb9d968e2fb66083f5f2eb268fac3d496eb2fdc6244222a2e84f4b4cde096a0b9fb25676abda9ed85351c6ebfb47950191cc39d37b622aa5d3334c5ed189546f1dca5bddf1ceef08eef5ec5f6493139de7cb8f1a6470fe6a490dfb5c0de59de8211951ffe1758368fe4cbfec1e3669f10ae92e1811049459121036af925f6cbc9d49aca9fa1b55898c157ca44029d7d0be42e06543dcab3ece59940ec258aecedebd3bc5cd5a672c103df5e4e5bcf0fd449745e85813a58e3b6c97bfe4b6a5b2f8b27235f33705c3387cc7e9cceee4f3dccd1593c34ae00e84205cfc4f724de3d87e9ca991256039315a70df75c1c14af3dd602eea22c5929fb8e80f4eba8097d594f2dad81bf79551266acb57a89f5486598b42beab017278de68f403421b946188b988b50d9eae7d127044a36a9a1ded35de124ecde5d28e69754300594a02de2d0ce7e75a61b2487f4cc049dacab932d7d2ed68dacf82a57b337548eaef2438476028a4aaf54a62d72510c3612347be267a4f06a09fc4a012927c724938f70c62000e69715d14c009ed12c65db59ef5dc06bb771dab0c1e5c69ac965b87d9775f35fe63c32d8b99aa32b4872985ed4b41fafeb08171f4a7a14b1c622f9394c0695da33938df38fbae76b01bbe4e6dbfee241cf169571f2c465234e170456128d3cbe10ca3c1819d2e35b4f952310ed2d7636a7a40efce181f1cd2488b21ef38e6fcf75427ccc3232ca2a2b7c18fbffe8abf3478e84dcb4dc173d622411550c6f199c417ee00fdd10909f7ae791b67343c7243ebec5d0be79a5457865eeb2f2e6133462610c922cfaec427632385790b9a1455c12683beb1c7423c794402c557c96602a3c95dc57490a2c32185335ed6360d856bc64cde99ae2404192d6cc2fa149c262aa478f21666fd8ec4084ac9c445367c71941630480c67be9c1bccd36950b9f88967269a020abbce40a9f86fa50679996f622d779895073f992511a6069d40db7334e97041678e6953cb219d7dee816ea7ce91f149325e0910887aecb76b981f3746f2e334a9eb935eb84103a308380fbdb7e18fdb323df70da72010cb0d9d31c4e16d000b0d04028e388966877dce550bf9b5072fbaec86595d73887170c0b26b7dac854715ab3fc40634f21ddc845d0ef8fd841e2e055869fb5df4e6d1e603684b258f655879c91847a9df0d8f8f1d68eba268dbb8bd13e1e4ba5a0efe75ed71b8bbd4e51c9299e51998891fe20b25ada43bd5a3dc84a5063d1994e690bec3920a74caf00af2c76eb44b5af7d927eaf30f77075c8baafee70f0b29f7d12c1dd6d2465faf95cdb09867d5ffab3b3d22d259eacb16357f04b82fce30b6062f1d4464ac8f4fbea5caa0bd6cd0cd81ec467b13f88982d3e301b38bc32d007dfdebe004e352fb36442467c6276fc8be26103ce35310409e5581eee692b962d9079cd2eb427b390de6c42192956b51c50c4eb236d614a2572a663221cd4ad0e420088dea32b1b6a66a0845a7cb3276958cb11bc29dd8cc994a8cb009685dc5e9be9101d07a9bb353e3ffaa9b0a2fcb4a3b604457193dae822ac2553937e1c50986e44535aec5957d5a75d471a3b8e4cd32edd6be83099658f2b4dafb695f7ab9a62314ada20ddfadd4331f21a44dd159d3a9aff0165c65446179255ae479bb2a1f4dfbbc3247b621b30d216c8817c40c27ed435a91f826f1d247f49b2d2cc8123de1eb301e5e5cb8f8a189eb8da567c48c9be49142453d73c2bff70d7f66e469a717ebf4060ff07f62a809fe55887336f96f7ff7352c5f62f4e140349a90c081b6b078627e551bfc6c962be65638bfdc7276feff63db11404d80ea33399b0891a080829ba6177b30c17d3254bf4a385253c8d61edc7be314b07b90bf94829e0fb4c4f80ea6d281b82ca945f20d0c65fef87c48e25f55cdf04bf0a6caabd53d687b0042b157254bb385b8fadfa0be5e945e91defa3dde808104b3d348f91529a4809e6b8344cb1e4298b7bb0fee863cff16b51b1232c13ce5053e2f7c158a1fb75d3cf5d57f7cb4de0e79c0ce3af1094b4888389e250dff733495f2dbc7971539fa99a6ff2f7614b88bb8608c244c0ed337eb862606c13be15dffdfa380743525871ea6585b3350303a30744268773f0c549a2762fb639b9b7e49b715274c59a053d042c556e4c12c138d48153345ccfda38809622d948b9b0024c5fa170c3feffab6dbaa8fb299b70bed3d5603061df5d81c937a2529eb5f317409f682c0c8363d33cdb971d7b128391841b72f5c40c520f1a84b1fe670d7391a8fd8ab6fe56c9bca688b5e9963b4b56d833c36fd9a4ab62d3718c6f97c751ab8dac72970a27f9ceb7c10acf385eb89495b9e7b70aab6569c60095b116468ce49c1236db46ffa90178595ade5141fe4b0d939ace0d45b18a1930e122effdea164b3f8affffb8f308dbee764ba8b5ae909069594ab654827d1582a08c5cf076c66b4c9ec9f06b4f64c982934e56f10157c2083f152ce09cf370ebcb4c177b1aa608b58bc24a25f5950575aaab1844ea99fb6402cec58818e972ad3bd7cd6947408297541fc580adf8eb827c18a4c843d8910539f7ed0cb8ade481ef0cd255b7703fbbdbde870c40cc3119a8916a94d083b725e7ef5f6c1a6bc2a02e5d03aa609794cdb48f0def776985326a13ae3dd6d6400e5106b4c58e399cacb666fdab035a0a0bdd73e8f3bca38c9dd30422a3df34c0c9a1262c2f647720a598c8f0835661a09f021197f5f7a4eaa07dbddc99011143bce30d2b26777d9fae5eb7ad660108b7b850fea49505b5b53eb345ee184979b4353b70e9359210e88fbc5e43c900ebc51ffaabd50e5e693549cf5270767be2876a24f289f1c6a125ecbea70ca754e45f9350e100a2b45c40c8e3869a0862b6b2fc54ac56feae892ee7c68a925b8e39b7b7dd74126531a3496594ad234624cd4954dc150d090f565b5bee9fd6baa831c2d91c7d5a358e93036a45140fd608ceb456335fdf4c55f34260cfd25b12796bf5099abd8954a92e88280e7a7fd4e33518f802114ed827f7ffb81bb2cd6e301335f18f24f5a460fbe44597d0027e59d73f6a4c4f43467585eb3ef061ba25bb1fc438e5ada990029152c7b313db7414da8d2394d61df9f512399caee4cb502aba1ece73e153f4e31df64597f4e2f8ccd93c7b182a934007e937419e5b0d4fb3d71636dc35a8d30459d1f34ef4acfc5d9695bcc6f5573a682479db0ad5990d6b0804ce356be223034f0a80bb0fe90ae25277fa516e36b22ccd9d31fbc374741eade63dec54555a078a6795237f3040fc1e9300f293c8a4d24725e9f1f19d9a1c8009d81edc804c7dc8e8ee9a4590d8026a3a01ee395de7390f8eceb65c9f2a7c018440287d75d4e15b68ed0be81735bc64dff7c86045924e1bdbb3ffdbe3b71575cc7d07c7a1ecd1138a7bd0b08b1136d1287fe96c31ae42457dc3526a25b9ee89830b48c34b9412a69f83d06b068aa96245bc284509c3fbc5418114b6ce4c1bb9a841a292b585538a4493a05d1292367ac87fc528a6e23e8fbaacbc959fe642c6e519ef012e5ff384871a45c0feec7484a0c76cf8650d5a250f6abc3f78035e0e3597ce6efb5eef42d4e798d77eaa2eaec4e7cb609269a092fd59486875fa039a1ad8e905f33c77d1fc5077e9dbcdfdd2e311aed599f76ae00a23f36738312cb13e9dbcd7a2270e1780f54c7278098ca3ea3eda98de46fd93a59785a6ece5bc620d9ae2fedc024379d862554054f1d12efdd8fc8f7c246e00433f67ae33a56f642cad6beac5774587817061232208845ecaa88204c0a1433c7f791ba77b234309aa34fd43a1b04145bfb2e762402e88a2efc65b181fa18755175f562b8d7ff69e6be069a1a9b2e273ed5ffb949ba17124a1aa62f17aed8d533260467dbb42b57c6c4794cacd17de12c5528cbf03f9cd72312159325793d5dec3777c0fe6ba0c48bd8665069867aeacecb28e97b39cedeb21ca6dec58e06118ef73dc642799544d6d38c92f55757796e8854e2b5142c3400533037c55fb15af239aab85299f950409bf5747a89e414ce35928a05395d7c27df59304021a4b87e28bdad58fe31191622f9acccbd195f82460a77eb1df48345c5ef929b108dfd0abd435d9c4639fb76cea3d41d973aec5a566aea7ef3fc402751f41248fa7be6b718371fecd3e889e36e98512513e6a2c1b19beac8f8d9d8d0b987e4b3adabfd014760f768ccc300cf31833d0ecf10cf04213477d6139e4d6962440af43e7cece37ed2bdf4ba1174d91b96204de4bf117cf0320c18ef213edec55a3d6691f6d4be627bca278e283507d79f4a4c66a4a6552a3d2829a802c41f4d5cb7eca843ce02e01794cd3cf468", 0x1000, 0x20000004, &(0x7f00000010c0), 0x12) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e20, 0x4, @private2, 0xb}, {0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, 0xffffffffffffffff, {[0x0, 0x7, 0x9, 0x6, 0x101, 0x716, 0x1ff, 0x1]}}, 0x5c) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@deltaction={0x34, 0x31, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000014}, 0x5) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x58, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4bc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xe81}}]}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x11}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x4c, r7, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x5b}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x14, r7, 0x100, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 4m4.397951394s ago: executing program 2 (id=2024): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108bfaffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r8 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) pread64(r8, &(0x7f0000001840)=""/4096, 0x1000, 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000001000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) connect$inet(r4, &(0x7f0000000200)={0x2, 0xce20, @remote}, 0x2) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r10, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x800) sendmmsg$alg(r12, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000080)='l3', 0x2}], 0x3}], 0x492492492492624, 0x4000010) setsockopt$packet_tx_ring(r12, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x4, 0x1, 0x1}, 0x1c) 3m49.296662475s ago: executing program 32 (id=2024): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108bfaffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r8 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) pread64(r8, &(0x7f0000001840)=""/4096, 0x1000, 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000001000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) connect$inet(r4, &(0x7f0000000200)={0x2, 0xce20, @remote}, 0x2) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r10, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x800) sendmmsg$alg(r12, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000080)='l3', 0x2}], 0x3}], 0x492492492492624, 0x4000010) setsockopt$packet_tx_ring(r12, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x4, 0x1, 0x1}, 0x1c) 1.614853549s ago: executing program 5 (id=4577): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x0, 0x1170, 0x1170, 0x1f0, 0x1170, 0x2e0, 0x1398, 0x1398, 0x2e0, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x188, 0x1f0, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff000000, 0xffffff00, 0xff], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], @ipv6=@empty, [0xffffff00, 0xffffff00], @ipv4=@local, [0xff, 0xffffff00, 0x0, 0xffff00], 0x0, 0x8, 0x8, 0x4e22, 0x4e21, 0x4e23, 0x4e20, 0x100, 0x1240}, 0x81, 0x41}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0xf5, 0x23, 0x7, '\x00', 'syz0\x00', {0xc}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) 1.552210007s ago: executing program 0 (id=4579): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="2b178e5009000000"], 0x24}}, 0x20000800) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r1, 0x622, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44804}, 0x20000000) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x9c, r1, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {{{}, {0x1}, @device_b, @broadcast, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x20, 0x2, 0x1, 0x0, {0x6, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}, 0xb08, 0x2, 0xc0}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}, @NL80211_ATTR_BEACON_TAIL={0xe, 0xf, [@gcr_ga={0xbd, 0x6, @device_b}, @supported_rates]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x9c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="2b178e5009000000"], 0x24}}, 0x20000800) (async) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r1, 0x622, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44804}, 0x20000000) (async) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x9c, r1, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {{{}, {0x1}, @device_b, @broadcast, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x20, 0x2, 0x1, 0x0, {0x6, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}, 0xb08, 0x2, 0xc0}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}, @NL80211_ATTR_BEACON_TAIL={0xe, 0xf, [@gcr_ga={0xbd, 0x6, @device_b}, @supported_rates]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x9c}}, 0x0) (async) 1.474916932s ago: executing program 3 (id=4582): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c00178004000500040004"], 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000000411f93e6b5ac12fbd413874b30ed2ebf4a981a6a1040bd3776a30e898362c572640af6d1f1a7e141450daa8408896327b50a2ef9b89f00eed402332b575f00000000000000002decf08321850699d8b3d6d40292415fe8196c3b3bba668037e51eba52c447ab0caf50abf5a5f8107d35f5e739bad9629cd2accc422ef2793ed757229eed0cf9524145aca3ddac92e7a68570cf5d264440e83484778b83ce4b5a607ddc0454f1d4ce184419a3fc253af337642382d6b2840ab54ef592162a16cafd36b410b7135b04b22081d7b64aed2f804675", @ANYRES16=r5, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r4, @ANYBLOB="08005e8004000100"], 0x24}}, 0x0) 1.43842961s ago: executing program 5 (id=4583): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x1, 0x0, 0x0, 0x11, 0x3}, @typedef={0x0, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x51}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xe1, '\x00', 0x0, r0, 0x1, 0x5}, 0x48) 1.342398437s ago: executing program 5 (id=4584): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x80000001}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x288, 0x1398, 0x1398, 0x288, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @private2, [], [0x0, 0x0, 0xff000000, 0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10, 0x61}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x16, 0x3f, 0x1, 0xe, 0x7d, 0x376d, 0x8}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x62b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000fe0000000000000008000f00fd000000", 0x24) r1 = socket$nl_audit(0x10, 0x3, 0x9) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000400)=0x0) sendmsg$AUDIT_SET(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3e9, 0x300, 0x70bd25, 0x25dfdbfd, {0x20, 0x1, 0x2, r2, 0x5, 0x121, 0x3, 0x9, 0x0, 0x4, 0x5f}, ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.320004259s ago: executing program 5 (id=4585): sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'raw\x00', 0x0, [0x0, 0x3, 0xffffffff, 0x2, 0x5]}, &(0x7f00000000c0)=0x54) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x8a, &(0x7f0000000040)=0x7e, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/208, 0xd0, 0x2080, &(0x7f0000000140)={0xa, 0x4e24, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xffffffff}, 0x1c) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000340), &(0x7f00000003c0)=0x14) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000006, 0x42073, 0xffffffffffffffff, 0x0) 1.279558194s ago: executing program 0 (id=4586): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000300)='syzkaller\x00', 0x4}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r0, @ANYBLOB="00000000000000001c002b8008000800", @ANYRES32, @ANYRES16=r1, @ANYRES32=r0], 0x44}}, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@mpls_getroute={0xa8, 0x1a, 0x800, 0x70bd2b, 0x25dfdbfb, {0x1c, 0x80, 0x14, 0x3, 0xd467d18cb8c7fec0, 0x7, 0x0, 0xa}, [@RTA_NEWDST={0x84, 0x13, [{0x137, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x98b9, 0x0, 0x1}, {0xffc00, 0x0, 0x1}, {0xffffa, 0x0, 0x1}, {0x5}, {0x3, 0x0, 0x1}, {0xffc00, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x8a1a}, {0x4}, {0x5}, {0x80, 0x0, 0x1}, {0xa433}, {0x1}, {0x8}, {0x2}, {0x77}, {0xea52}, {0x5}, {0xdb7}, {0x8, 0x0, 0x1}, {0x4}, {0x2, 0x0, 0x1}, {0x6}, {0x6}, {0x2}, {0x6}, {0x1, 0x0, 0x1}, {0xc}]}, @RTA_OIF={0x8, 0x4, r2}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x4) 1.198463963s ago: executing program 3 (id=4587): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg$qrtr(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)=""/29, 0x1d}, {&(0x7f00000008c0)=""/150, 0x96}], 0x2, 0x0, 0x0, 0x40000120}, 0x38, 0x2100) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x44005) 1.149458925s ago: executing program 0 (id=4588): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x2f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async, rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async, rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async, rerun: 32) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) (async, rerun: 32) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f6fecf0", '\x00', "44000100", "72392a24199b5903"}, 0x28) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x44}}, 0x20004055) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x6}, 0x8) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x3) (async) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="640000000001010400000000000000000200000024000105000100000000001400018008000100ffffffff08000200ac1414bb240002800c00028005000100000000001400018008000100e0000001080002007f000001080007400000ac2fe293180f43042860771566b050bf497292f12501878640c530c0df122cf16643234c2ae993ced95171f2c1c4fc951180bee6e54bdd10b96564c5d088731ff1002d9992a1d8ac83229c803e1a171b387389507e4235e32c4e15b6e31326d590518357733f1da786ba192adafa55c5c1ae01397c60e1"], 0x64}, 0x1, 0x0, 0x0, 0x404c896}, 0x0) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.148698887s ago: executing program 1 (id=4589): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x4, 0x4, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x8, &(0x7f00000000c0)=[{0x8, 0x5, 0x8, 0xb}, {0x800, 0x8, 0xe, 0x2}, {0x3, 0x1, 0x6, 0xea0}, {0xcf13, 0x3, 0x81, 0x8}, {0x88, 0xf5, 0x3, 0x4}, {0xfffd, 0x6, 0x9, 0x91d2}, {0x4, 0xe7, 0x4, 0x7}, {0x6, 0x7f, 0xfa, 0x5}]}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x8c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) bind$bt_rfcomm(r3, &(0x7f0000000380)={0x1f, @none, 0x8}, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000180)=0x81) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_emit_ethernet(0x23, &(0x7f0000000140)={@broadcast, @multicast, @val={@val={0x88a8, 0x6, 0x0, 0x2}, {0x8100, 0x1, 0x1, 0x3}}, {@generic={0x883e, "a46f91b966b173199eb2976b8f"}}}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) 975.262517ms ago: executing program 0 (id=4592): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @generic="4fffb619b45f0877ddd00f05b457a65d54acc046575978fa63c84996f91dfab8f854f66770283b1088bfc185ff58091c43079ec6138ced26654e47f46b51bfd31de4c10572ee0d3e151a33e56aa57e2294f686849277bbba3266a2ec4f4679efde8cf247ef4edee54f85ac023655a75cf5aaa9fc7b3e00a70d007ef1437aaabca2e4a82a093dde658a28be78e5e7668201c2dc09bdf4e2eee54fb4ae974dec1d5579c96a7d4612dacf994e7757204be487b87ffca2c4ec54", @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}]}, 0xe0}], 0x1}, 0x0) r2 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfff00001}, {0x16}]}, 0x10) sendto$inet6(r2, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x275a, 0xfffe) preadv(r5, &(0x7f0000000100), 0xa, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000004}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xd0, 0x14, 0x8, 0x70bd2b, 0x25dfdbfc, {0xa, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xb9, 0x1, "03e87b16f4ee149188f902afc2a336ec8c9370aa92035c3add35aed7fd25e3f10f1339e7bb5a8818c415b0166b006a1e6ffe695a89811297e5af48b3d12a68796843b22b7d1adcf3b19f1b79741eac566aac8561cd50896e61090be4d0f879f0f3dbbeb1d1a5c5d19944862a339ff44f6d6b54ff741ce0d524c82fae5e0a87c237d04ede9e8a157e736ad289261cc4c190487d01978922873c546b2e54802a58a3af4d81f5159269f60721f6243e487cfeaf3212b4"}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000c60000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800001085000000a50000008500000022000000950000000000000085100000feffffff18240000", @ANYRES32=r5, @ANYBLOB="000000007d030000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r6, 0x11c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x800, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}]}}}]}, 0x4c}}, 0x0) bind$alg(r5, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) 973.801906ms ago: executing program 5 (id=4593): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x1, &(0x7f0000000040)=0x5, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x2f) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), r1) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) unshare(0x20000400) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x3a, 0x1, 0x0, 0x300) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) connect$unix(r2, &(0x7f0000000100)=@abs={0x27}, 0x6e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80005, {0x0, 0x0, 0x0, 0x0, {}, {0x9, 0xb}, {0xe, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x9f8b8a2ee701f9b2}, 0x24008004) r5 = socket$nl_route(0x10, 0x3, 0x0) pwrite64(r3, &(0x7f0000000380)="5194edd93785a3d4b33438c6045630eda2835e941ded4568e27358400396904f545e9a221c4fe31dca559c34ac5ce467b5d6d567a3b26fcdaabbc86de03291bb0b8e05a1e3c710ded3f6c1d97b5aca690f44222a9bdd2ae2f2edf6eb681b4755d8b7c7885b3e3c5e39f771281d5f00cc63aa56bff3a07e820a2f1155e695a61690d2", 0x82, 0xd) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x200, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x6, 0x6c28, 0x5, 0xff}, 0x5, 0x0, 0x6, 0x8, 0xb7, 0x13, 0x4, 0x1f, 0x6, 0x7fff, {0x5d, 0x2, 0xfff, 0xffffffe6, 0x7, 0x800}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000180)=ANY=[@ANYRES64=r7, @ANYRES8=r6, @ANYRESDEC=r5], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 898.479537ms ago: executing program 1 (id=4595): r0 = socket(0x1d, 0x2, 0x6) getsockopt$nfc_llcp(r0, 0x6a, 0x4, 0x0, 0x200000af) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x102, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffff0700cc2f00fe8000000000000000000000000000bbff020000000000000000000000000001a60007c0650000003b08040403100700fe8000000000000000000000000000bb20010000000000000000000000000002fe800000000000000000000000000015200100000000000000000000840c04069640546d00000000000000000000ffffac14143900000000000000000000000000000001fc020000000000000000000000000001fe8000000000000000000000000000aafe88000000000000000000000000000100000000000000000000ffffac1e00010000091167000000000022eb000c90780100"/254], 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0163014030d9"}) 896.825371ms ago: executing program 0 (id=4596): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="040044800800c800e00000027a01f380a2b4c1dbd4f221c0a1fd468ca63ae97de147e5bc2d0313377dc17591b491acf18312bee324decf810970090c77ec4ca173b12577aeb13c354245be77050365697b3b4707060c00045e46d612b09c487d7c9c94f778c0a015ecfa70d229085252956142772f9ff5a61a9b7fbc6712f8e64566b7ade87d293b81bd3cd1b2ad2852dc1dbb07d54f5544759f0eb23131b5780de6354f0714b2c5b86323969d0b4f5bd8c4489e0e7471c6a84feb9dead9d156d060a9373c7f80f4f1ec2a87efdeceec8d99c9664ee184f112929fe92da18f26929f98233f18dcbe0c638c040061800400058012fc33716331943112df1a6d89852782e376609e4a38717148d34e9d36191fe607748ad822c89800b204bd5831c55511fc4e85d09c44ef3be8ce710d034d394057d88e12db87eb032cd30fdcb489cd5ac92a44f96b6e463971c730796efaab04ce1b42faea757fc0a50c4feef468c80d7cac7db3bfd67140c04f88892b1d19a91ac5d2bef2af704fed3f92e84f78f98e97b8460000602ca31cc4edb57168863fe0e930a6030e47048c91da29a2c691894cd27b28480642302c6816b308d3eaceb9c1404c696e8a2deb97c278ca9d9b1ea4aa17255b400acdda233dde73b32098f837494e43a67bbb722f105f5ae23d8e4c9586ac0ff8c1c6c330601a9c007659ce63c0387d6692d791abdb14b8b66d6b30e5556865a6e97922f3fddcfd1a7e2cbf30b30479b4f7b824b49b1a8e5cd1ec171c8fd41bc3b14ced446eadedd90178f121d6e4d3ae3031231f39fcad0501455538f57fc305f449144d0e4f1f642ff19c53dea5322d30d680f6efdce4f7310225fa8e8a3035d925f51090e4fa74346825d16d400b9cea013e88ea47db2efbbbe73c3ae0059974efa840d4ee88ae1f85d6ba36caa8df64cbf4c1716de586b6fce1424c8bc3a0218953ea42dc7e83bda5a4319b59d7926fe04553fe79056a397ea85f6255d093a345aaf5f3d91cdce17cc9d38493e7eb952b132dc8f7953706ea7b7ff81e88a2a87f18730ca7f6f16f2c23b85f549a8b0cce6f8f0ec61fa8ba01aa114fbd63373ae3189338aa5f585a6d454733937712eb5a4cbd810c91bf5f19e0a508db8a57bdd8000000960203"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) bind$bt_hci(r2, &(0x7f0000000400)={0x1f, 0xffffffffffffffff}, 0x6) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="288a0efd6dc4f915260f30", 0xb) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="5bdbd57a0e656889", 0x8}], 0x1, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x485c) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r4, 0x800448d2, &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20) recvmmsg(r3, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000540)=""/100, 0x64}], 0x1}, 0x400}], 0x1, 0x2103, 0x0) 769.263949ms ago: executing program 1 (id=4598): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1}, 0x80) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x28}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x2121, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) (async) r2 = socket(0x28, 0x5, 0x0) (async) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) (async) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r4 = accept4$unix(r3, 0x0, 0x0, 0x800) recvfrom$unix(r4, &(0x7f0000000140)=""/248, 0xf8, 0x40, 0x0, 0x0) 528.95325ms ago: executing program 4 (id=4602): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004c00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x90) r1 = socket(0x1d, 0x2, 0x6) recvfrom$rxrpc(r1, 0x0, 0x0, 0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000240), &(0x7f0000000280)=0x4) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x4}, @TCA_SAMPLE_RATE, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x4}, {0xc}, {0x6, 0x4}}}]}]}, 0x60}}, 0x0) socket$inet6(0xa, 0x80001, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x28, r4, 0x5, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0x6, 0x34, @random='Ne'}, @crypto_settings=[@NL80211_ATTR_PMK={0x4}]]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x100}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000005}, 0x84) 457.053266ms ago: executing program 4 (id=4603): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0x40}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001800010000000000000000000a00000000000000000000001800160014000100020000000000000000001000fc00010008001f"], 0x44}, 0x1, 0x0, 0x0, 0x24041004}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1412, 0x5, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x1412, 0x20, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x18}}, 0xc090) 347.193379ms ago: executing program 4 (id=4604): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff7fff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB="000000eaffffe8aaa26a8b8b8e3f8ffaffffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0240000001"], 0x48) 336.175849ms ago: executing program 3 (id=4605): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000100)=0xb, 0x4) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0xfffffffffffffca4, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @private=0xa010100}, @in6={0xa, 0x4e21, 0x7, @local, 0x9}]}, &(0x7f0000000480)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000580)={r3, @in6={{0xa, 0x4e23, 0x4, @empty, 0xc}}, 0x9, 0xb73}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000e80)=ANY=[@ANYBLOB="f43100000d0a010200000000000000000c00000274290380d013008060010180a7000100483329a2523a8b98c4cb765cadc45ed34a46d1346ec3a5fdc8ba6104a53bd98e90a8ea3dbc5b3bce69af8a75e3d9e3fe1a61adacd266df72fcfd6a0cb78cdf32f816bf14080efc38d6f79aae46296c63ed81bc92b0bc527c85008872deec2d976d36a83c62dc544eaaf725c08f9cb1c6923b9e724c12143a28a66ebae7d587531317266aabf62fadbe215631d0178bc76e49d00071ee1d285fdc548223dcc9a9e09057002c00028008000180fffffffb0900020073797a30000000000900020073797a310000000008000180fffffffb2000028008000340000000020900020073797a300000000008000180fffffffe530001006bdd4f51aa707a90b83ffebaf1228401ce3b8f8fa6a270d5d26a998d5f85c64df6035f1d09fadb9fd7cb8605b81429853833ecafba9f2f9f1db7691e8990db99ca8524e440549fc91151a5a51a4d22001400028008000180fffffffc08000180ffffffff54010180d400010034af28b29259a7bf14731945d9cc4154f7c59ee4714b81bddee5f5664328e28e812a99520b8774b57cd794c4386a6fd30779344eeebc628a7ac8cfe135ef533851ece99219079a059ad3a213f3b12538e5f2d235f1b2444f6046a46e19bfbc7c8d7f34cc2225fd47cee35d79775275244d0f1a50ca46ac0404d4d8b155417f8dbe312b1809977106df4d2196404a13b1ec5531171e534f8ba012b4a11924434459aa686be8c81747f1ccbd78c5e4489a7bcc5848cebe3bf7365f1be26b1d729566539bed63b9cf1a40c18ee86db2b8fd1300010060ddb9a9c2a3170e213a109259615d001400028008000180fffffffe080003400000000154000280080001"], 0x31f4}, 0x1, 0x0, 0x0, 0xd61fc3b143bf2ac}, 0x20000881) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000077c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="040044800800c800e00000027a01f380a2b4c1dbd4f221c0a1fd468ca63ae97de147e5bc2d0313377dc17591b491acf18312bee324decf810970090c77ec4ca173b12577aeb13c354245be77050365697b3b4707060c00045e46d612b09c487d7c9c94f778c0a015ecfa70d229085252956142772f9ff5a61a9b7fbc6712f8e64566b7ade87d293b81bd3cd1b2ad2852dc1dbb07d54f5544759f0eb23131b5780de6354f0714b2c5b86323969d0b4f5bd8c4489e0e7471c6a84feb9dead9d156d060a9373c7f80f4f1ec2a87efdeceec8d99c9664ee184f112929fe92da18f26929f98233f18dcbe0c638c040061800400058012fc33716331943112df1a6d89852782e376609e4a38717148d34e9d36191fe607748ad822c89800b204bd5831c55511fc4e85d09c44ef3be8ce710d034d394057d88e12db87eb032cd30fdcb489cd5ac92a44f96b6e463971c730796efaab04ce1b42faea757fc0a50c4feef468c80d7cac7db3bfd67140c04f88892b1d19a91ac5d2bef2af704fed3f92e84f78f98e97b8460000602ca31cc4edb57168863fe0e930a6030e47048c91da29a2c691894cd27b28480642302c6816b308d3eaceb9c1404c696e8a2deb97c278ca9d9b1ea4aa17255b400acdda233dde73b32098f837494e43a67bbb722f105f5ae23d8e4c9586ac0ff8c1c6c330601a9c007659ce63c0387d6692d791abdb14b8b66d6b30e5556865a6e97922f3fddcfd1a7e2cbf30b30479b4f7b824b49b1a8e5cd1ec171c8fd41bc3b14ced446eadedd90178f121d6e4d3ae3031231f39fcad0501455538f57fc305f449144d0e4f1f642ff19c53dea5322d30d680f6efdce4f7310225fa8e8a3035d925f51090e4fa74346825d16d400b9cea013e88ea47db2efbbbe73c3ae0059974efa840d4ee88ae1f85d6ba36caa8df64cbf4c1716de586b6fce1424c8bc3a0218953ea42dc7e83bda5a4319b59d7926fe04553fe79056a397ea85f6255d093a345aaf5f3d91cdce17cc9d38493e7eb952b132dc8f7953706ea7b7ff81e88a2a87f18730ca7f6f16f2c23b85f549a8b0cce6f8f0ec61fa8ba01aa114fbd63373ae3189338aa5f585a6d454733937712eb5a4cbd810c91bf5f19e0a508db8a57bdd8000000960203"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{}, {0x0, 0x0, 0x0, 0x745}, {}, {}, {}, {0xfffd}]}) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r6, 0x84, 0x74, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r7, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x2, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x5, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0xffe0}}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_batadv\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 297.848347ms ago: executing program 4 (id=4606): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @remote, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="340000006800010900000000000000000000000000000000060003000000000014000200ffffffffffff"], 0x34}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000100)={0x1d4, 0x8000, 0x1, 0x3, 0x5}, 0x14) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000080)=0xfffffffd, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x5, 0x400, 0xfffffff7}, 0x2, r1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @remote, @multicast1}, &(0x7f0000000040)=0xc) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="340000006800010900000000000000000000000000000000060003000000000014000200ffffffffffff"], 0x34}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000100)={0x1d4, 0x8000, 0x1, 0x3, 0x5}, 0x14) (async) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000080)=0xfffffffd, 0x4) (async) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x5, 0x400, 0xfffffff7}, 0x2, r1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) (async) 246.526667ms ago: executing program 1 (id=4607): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000500)=@ipv6_newroute={0x24, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x8}, [@RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r5, 0xd0b, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x9c}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) (async) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r5, 0xd0b, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x9c}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, r5, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x50}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000040)={0x57}) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x4) (async) r10 = socket$kcm(0x10, 0x2, 0x4) r11 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r11, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) (async) bind$inet(r11, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) sendmsg$kcm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) (async) sendmsg$kcm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)={0x1e8, r5, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0xa4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x4, 0x44, 0xfff8, 0xfff7, 0x4, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x51, 0x0, 0x4, 0x1000, 0x5, 0x0, 0x2]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x6, 0x48, 0x60, 0x6, 0x6, 0x16, 0x12, 0x12, 0x18, 0x9, 0x12, 0xc, 0x3c, 0x36, 0xc, 0xc, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x0, 0x3c, 0x13d3, 0x6, 0x1, 0x10, 0x9]}}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x9, 0xc, 0x4, 0x9, 0x3c, 0x16, 0x3, 0xc, 0x16, 0x4, 0x16, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x346f, 0x8, 0x8, 0xfffc, 0xff, 0xae, 0x8, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x130, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x473, 0x4, 0x2, 0xe, 0x2, 0x6, 0x9, 0x3ff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x1}, {0x7, 0x1}, {}, {0x1, 0xa}, {0x1, 0x7}, {0x2, 0x8}, {0x2, 0x7}, {0x2, 0x2}, {0x2, 0x3}, {0x6, 0x2}, {0x0, 0x1}, {0x0, 0xa}, {0x7, 0xa}, {0x6, 0x5}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x4}, {0x3, 0x6}, {0x4, 0x4}, {0x4, 0x8}, {0x5, 0x7}, {0x2, 0x8}, {0x0, 0x9}, {0x4, 0x6}, {0x3, 0x3}, {0x4, 0x2}, {0x1, 0x9}, {0x5, 0x6}, {0x1, 0x4}, {0x2, 0x2}, {0x5, 0xa}, {0x1, 0x8}, {0x5, 0x9}, {0x1, 0x2}, {0x7, 0x2}, {0x1, 0xa}, {0x4, 0x4}, {0x1, 0x9}, {0x1, 0x4}, {0x5, 0x8}, {0x1, 0x3}, {0x5, 0x3}, {}, {0x4, 0x1}, {0x1, 0x2}, {0x3, 0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x4}, {0x0, 0x5}, {}, {}, {0x7, 0x4}, {0x1, 0x6}, {0x0, 0x8}, {0x2}, {0x3, 0x5}, {0x2, 0x9}, {0x6, 0x1}, {0x6, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbc24, 0x4, 0x8, 0x8, 0x5, 0x8, 0x5, 0xfffd]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x10, 0x60, 0x5, 0x6d]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0x5, 0x8, 0xf5a6, 0x9, 0x1000, 0x8]}}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0x2, 0x2e, 0xe, 0x5, 0x5, 0xa00]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x36, 0x1b, 0xb, 0x9, 0xc, 0x16, 0x18, 0x36, 0x36, 0x24, 0x9, 0x4, 0x30, 0x3, 0x16, 0x0, 0x48, 0xb, 0x30, 0x12, 0x6, 0x48, 0x10]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4044040}, 0x8080) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000020000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r13}, 0xc) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074a264e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 229.82671ms ago: executing program 4 (id=4608): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x0, 0x8c, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x88, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000169500000000000000e4ea36c89cfe762e76ad383f8626fb0700000000000000d69ac9f8c2749a7b35517792ee09749605cf0ca6425d7759809de87402e7031751a4b3dc126db17efde41edc102828faa7c14a1795584ef6c64f46ff62aba8dd0c25"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000004c0)=r2}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x810000}, 0xc) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x7, [@struct={0x4, 0x8, 0x0, 0x4, 0x0, 0xafe9, [{0x1, 0x2, 0xc2c9}, {0xe, 0x1, 0xff}, {0xe, 0x2, 0x305}, {0xe, 0x4, 0x1000}, {0x10, 0x4, 0x7fffffff}, {0x0, 0x1, 0xb61}, {0x7, 0x0, 0x1}, {0x0, 0x3, 0x9}]}]}, {0x0, [0x30, 0x6f, 0x30, 0x0, 0x0]}}, &(0x7f0000000740)=""/147, 0x8b, 0x93, 0x1, 0x6}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x16, 0x9, &(0x7f0000000540)=@raw=[@alu={0x4, 0x0, 0xc, 0xa, 0x4, 0x0, 0x1}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffa}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @alu={0x4, 0x0, 0x4, 0x5, 0x7, 0x18, 0x4}], &(0x7f00000005c0)='syzkaller\x00', 0x7f7, 0x79, &(0x7f0000000600)=""/121, 0x40f00, 0x64, '\x00', r0, @flow_dissector=0x11, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000840)=[{0x4, 0x3, 0xb, 0x1}, {0x4, 0x2, 0x2, 0x4}, {0x5, 0x3, 0xb, 0x8}, {0x5, 0x5, 0xd, 0x1}, {0x2, 0x5, 0x2, 0x8}, {0x5, 0x4, 0x2, 0x5}, {0x2, 0x2, 0xc, 0x9}, {0x5, 0x5, 0x1, 0x4}], 0x10, 0x48}, 0x94) 218.186442ms ago: executing program 3 (id=4609): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r1, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41d, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x80) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 118.65219ms ago: executing program 3 (id=4610): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000680)=@delchain={0xf4, 0x2d, 0x1, 0x0, 0x0, {}, [@TCA_RATE={0x6}, @filter_kind_options=@f_flow={{0x9}, {0x3c, 0x2, [@TCA_FLOW_ACT={0x78, 0x9, 0x0, 0x1, [@m_tunnel_key={0x74, 0x0, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, {0x1c, 0x6, "eb25946ddf95959b7f8d829c69274ff122e320ac9e1cd272"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_FLOW_XOR={0x8}, @TCA_FLOW_RSHIFT={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_RATE={0x6}]}, 0xf4}}, 0x0) 115.771406ms ago: executing program 1 (id=4611): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 108.004971ms ago: executing program 4 (id=4612): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000)=0x87f4, 0x4) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40010042) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000058c0)=@newtfilter={0x38, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r5, {0x9}, {0xffff}, {0x10, 0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x40) r6 = socket(0x400000000010, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xed, 0x2, 0xe}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x4094) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg0\x00'}) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendto$packet(r11, 0x0, 0x0, 0x20008801, &(0x7f0000000200)={0x11, 0x1, r12, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x14) 88.302148ms ago: executing program 3 (id=4613): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x418, 0x330, 0x0, 0x220, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000080), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @local, @loopback, 0x8}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @empty, @loopback, @private=0xa010102, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @private=0xa010102, @empty, 0x7}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x59) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, r4, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0xc001) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0xf0, 0x10, 0x713, 0x70bd2b, 0x25dfdbfc, {{@in6=@private1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x6, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x3c}, @in=@remote, {0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x2070bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}}, 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x0) 26.938029ms ago: executing program 1 (id=4614): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000002340)=""/239, &(0x7f0000002440)=0xef) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000140)="3ae5", 0x2}], 0x1) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001340)={0x40, r9, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20000002) 26.078348ms ago: executing program 5 (id=4615): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, 0x0, 0x0) (async) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, 0x0, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x62) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) recvmsg$unix(r3, &(0x7f0000000980)={&(0x7f0000000240), 0x6e, &(0x7f0000000840)=[{&(0x7f00000002c0)=""/253, 0xfd}, {&(0x7f00000003c0)=""/227, 0xe3}, {&(0x7f00000004c0)=""/255, 0xff}, {&(0x7f0000000600)=""/155, 0x9b}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f00000007c0)=""/107, 0x6b}, {&(0x7f00000001c0)=""/28, 0x1c}], 0x7, &(0x7f00000008c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}, 0x10000) 0s ago: executing program 0 (id=4616): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x4, &(0x7f0000001c00)=ANY=[@ANYBLOB="1800000000000000000000000000000089a000fe0000000095"], &(0x7f0000001c40)='syzkaller\x00', 0xf}, 0x94) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1e, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) kernel console output (not intermixed with test programs): bute type 2 has an invalid length. [ 437.208993][T16095] __nla_validate_parse: 56 callbacks suppressed [ 437.209012][T16095] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2723'. [ 437.299497][T16101] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 437.514972][T16106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2727'. [ 437.601946][T16110] xt_ipcomp: unknown flags 1D [ 437.735174][T16112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2729'. [ 437.776470][T16112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2729'. [ 437.780757][T16115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2730'. [ 437.805807][T16117] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2731'. [ 437.818539][T16117] netlink: 'syz.4.2731': attribute type 7 has an invalid length. [ 437.843172][T16117] netlink: 'syz.4.2731': attribute type 8 has an invalid length. [ 437.873759][T16120] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2733'. [ 437.874228][T16117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2731'. [ 438.096708][T16129] tipc: Enabled bearer , priority 0 [ 438.182899][T16125] syzkaller0: entered promiscuous mode [ 438.207666][T16125] syzkaller0: entered allmulticast mode [ 438.223874][T16125] tipc: Resetting bearer [ 438.231151][T16126] tipc: Enabling of bearer rejected, already enabled [ 438.255361][T16138] netlink: 'syz.5.2738': attribute type 1 has an invalid length. [ 438.264801][T16124] tipc: Resetting bearer [ 438.358525][T16140] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2738'. [ 439.564429][T16152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2741'. [ 440.038316][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 441.593300][T16158] netlink: 'syz.3.2743': attribute type 1 has an invalid length. [ 441.826349][T16124] tipc: Disabling bearer [ 441.839519][T16138] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 441.874405][T13744] tipc: Node number set to 2033007750 [ 442.000618][T16148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 442.350162][T16186] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2751'. [ 442.482892][T16195] xt_TCPMSS: Only works on TCP SYN packets [ 442.488475][T16192] lo: Caught tx_queue_len zero misconfig [ 442.494886][T16195] netlink: 'syz.5.2754': attribute type 9 has an invalid length. [ 442.611783][T16192] netlink: 'syz.4.2753': attribute type 5 has an invalid length. [ 442.760283][T16213] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2757'. [ 443.059727][T16234] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2762'. [ 443.323820][T16240] syzkaller0: entered promiscuous mode [ 443.345976][T16240] syzkaller0: entered allmulticast mode [ 443.399602][T16247] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2765'. [ 443.459691][T16247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2765'. [ 443.469124][T16247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.515494][T16254] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.2766'. [ 443.690927][T16267] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2770'. [ 443.714026][T16267] netlink: 'syz.0.2770': attribute type 2 has an invalid length. [ 443.733232][T16267] netlink: 'syz.0.2770': attribute type 8 has an invalid length. [ 443.753505][T16267] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2770'. [ 443.822048][T16272] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2771'. [ 443.956611][T16278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2773'. [ 444.005553][T16279] netlink: 'syz.0.2774': attribute type 13 has an invalid length. [ 444.022222][T16280] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 444.284514][T16284] bond5: entered promiscuous mode [ 444.290118][T16284] bond5: entered allmulticast mode [ 444.297978][T16284] 8021q: adding VLAN 0 to HW filter on device bond5 [ 444.344280][T16287] syzkaller0: entered promiscuous mode [ 444.350570][T16287] syzkaller0: entered allmulticast mode [ 444.546013][T16304] IPVS: Error connecting to the multicast addr [ 444.889887][T16334] netlink: 'syz.0.2786': attribute type 1 has an invalid length. [ 445.039663][T16334] bond10: entered promiscuous mode [ 445.045613][T16334] bond10: entered allmulticast mode [ 445.050907][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 445.050959][ C0] lec:lec_tx_timeout: lec0 [ 445.087731][T16334] 8021q: adding VLAN 0 to HW filter on device bond10 [ 445.123939][T16343] macvlan0: entered promiscuous mode [ 445.150067][T16343] macvlan0: entered allmulticast mode [ 445.167371][T16343] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 445.644926][T16374] 8021q: adding VLAN 0 to HW filter on device bond10 [ 445.675536][T16378] bond10: option mode: unable to set because the bond device is up [ 445.722046][T16387] bond_slave_0: entered promiscuous mode [ 445.728174][T16387] bond_slave_1: entered promiscuous mode [ 445.741567][T16387] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 445.766444][T16387] bond10: (slave macvlan4): making interface the new active one [ 445.780477][T16387] bond10: (slave macvlan4): Enslaving as an active interface with an up link [ 446.020958][T16399] syzkaller0: entered promiscuous mode [ 446.046172][T16399] syzkaller0: entered allmulticast mode [ 447.847262][T16332] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 448.346414][T16439] syzkaller1: entered allmulticast mode [ 448.587787][T16463] netlink: 'syz.1.2814': attribute type 1 has an invalid length. [ 448.604172][T16455] erspan0: left promiscuous mode [ 448.810500][T16482] __nla_validate_parse: 6 callbacks suppressed [ 448.810952][T16482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2818'. [ 448.917601][T16482] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2818'. [ 448.938943][T16482] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2818'. [ 448.951383][T16482] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2818'. [ 448.974645][T16489] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2819'. [ 449.402374][T16507] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2824'. [ 449.456043][T16507] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2824'. [ 449.860916][T16527] syzkaller0: entered promiscuous mode [ 449.870198][T16527] syzkaller0: entered allmulticast mode [ 449.964727][T16535] netlink: 284 bytes leftover after parsing attributes in process `syz.3.2835'. [ 450.056990][T16543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2839'. [ 450.117542][T16543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2839'. [ 450.129330][T16543] netlink: 'syz.0.2839': attribute type 1 has an invalid length. [ 450.266807][T16551] netlink: 'syz.0.2845': attribute type 1 has an invalid length. [ 450.592681][T16576] bond9: option resend_igmp: invalid value (32767) [ 450.607460][T16576] bond9: option resend_igmp: allowed values 0 - 255 [ 450.650667][T16576] bond9 (unregistering): Released all slaves [ 450.936079][T16586] Cannot find add_set index 2 as target [ 450.985209][T16596] netlink: 'syz.1.2854': attribute type 1 has an invalid length. [ 451.105731][T16596] 8021q: adding VLAN 0 to HW filter on device bond6 [ 451.123817][T16606] ip6tnl0: Caught tx_queue_len zero misconfig [ 451.131749][T16599] bond6: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 451.507787][T16632] netlink: 'syz.3.2864': attribute type 3 has an invalid length. [ 451.611389][T16632] syzkaller0: entered promiscuous mode [ 451.627668][T16632] syzkaller0: entered allmulticast mode [ 453.555364][T16705] netlink: 'syz.0.2882': attribute type 10 has an invalid length. [ 453.620854][T16705] team0 (unregistering): Port device dummy0 removed [ 453.666436][T16713] bridge_slave_1: entered promiscuous mode [ 453.695234][T16706] syzkaller0: entered promiscuous mode [ 453.700991][T16706] syzkaller0: entered allmulticast mode [ 453.858564][T16721] veth11: entered promiscuous mode [ 453.863695][T16721] veth11: entered allmulticast mode [ 454.342511][T16760] __nla_validate_parse: 15 callbacks suppressed [ 454.342528][T16760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2901'. [ 454.379197][T16762] netlink: 288 bytes leftover after parsing attributes in process `syz.0.2902'. [ 454.504239][T16766] netlink: 'syz.0.2904': attribute type 3 has an invalid length. [ 454.521020][T16768] x_tables: duplicate underflow at hook 4 [ 454.530489][T16771] x_tables: duplicate underflow at hook 4 [ 454.831455][T16787] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2910'. [ 454.989067][T16795] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2914'. [ 455.163626][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 455.173518][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 455.181919][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 455.192117][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 455.199878][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 455.379835][T16814] syzkaller0: entered promiscuous mode [ 455.390811][T16814] syzkaller0: entered allmulticast mode [ 455.401756][T16815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2920'. [ 455.572422][T16816] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 455.593196][T16816] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 455.625763][T16821] tc_dump_action: action bad kind [ 455.655506][T16803] wlan1 speed is unknown, defaulting to 1000 [ 455.849492][T16828] netlink: 'syz.0.2925': attribute type 1 has an invalid length. [ 455.882540][T16828] 8021q: adding VLAN 0 to HW filter on device bond12 [ 455.965038][T16803] chnl_net:caif_netlink_parms(): no params data found [ 456.111117][T16842] xt_hashlimit: size too large, truncated to 1048576 [ 456.290710][T16803] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.315802][T16803] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.323744][T16803] bridge_slave_0: entered allmulticast mode [ 456.331189][T16803] bridge_slave_0: entered promiscuous mode [ 456.341148][T16803] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.368630][T16803] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.375875][T16803] bridge_slave_1: entered allmulticast mode [ 456.398767][T16803] bridge_slave_1: entered promiscuous mode [ 456.453463][T16803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.481831][T16803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.655615][T16803] team0: Port device team_slave_0 added [ 456.700679][T16803] team0: Port device team_slave_1 added [ 456.856054][T16874] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2934'. [ 456.936247][T16803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.945508][T16803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.015231][T16803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.079493][T16803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.086484][T16803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.143072][T16890] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2936'. [ 457.156644][T16803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.184038][T16892] syzkaller0: entered promiscuous mode [ 457.193060][T16892] syzkaller0: entered allmulticast mode [ 457.226771][T16892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2937'. [ 457.227551][ T5833] Bluetooth: hci0: command tx timeout [ 457.416097][T16803] hsr_slave_0: entered promiscuous mode [ 457.429755][T16803] hsr_slave_1: entered promiscuous mode [ 457.445488][T16907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2940'. [ 457.447824][T16803] debugfs: 'hsr0' already exists in 'hsr' [ 457.470997][T16803] Cannot create hsr debugfs directory [ 457.687564][T16921] veth0: entered promiscuous mode [ 457.721924][T16920] veth0: left promiscuous mode [ 457.963312][T16936] xt_addrtype: ipv6 does not support BROADCAST matching [ 457.969029][T16803] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.970975][T16940] xt_addrtype: ipv6 does not support BROADCAST matching [ 457.981715][T16803] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.000486][T16936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2951'. [ 458.028851][T16943] netlink: 'syz.5.2950': attribute type 3 has an invalid length. [ 458.036975][T16943] netlink: 'syz.5.2950': attribute type 3 has an invalid length. [ 458.142239][T16803] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.153577][T16803] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.249242][T16803] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.259684][T16803] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.287186][T16951] syzkaller0: entered promiscuous mode [ 458.294848][T16951] syzkaller0: entered allmulticast mode [ 458.731796][T16803] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 458.760873][T16803] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 458.776027][T16803] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 458.852430][T16803] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 458.909305][T16978] tipc: Started in network mode [ 458.914219][T16978] tipc: Node identity 2adfaf959312, cluster identity 4711 [ 458.930532][T16978] tipc: Enabled bearer , priority 0 [ 459.002979][T16983] syzkaller0: entered promiscuous mode [ 459.008657][T16983] syzkaller0: entered allmulticast mode [ 459.016785][T16983] tipc: Resetting bearer [ 459.041109][T16988] netlink: 'syz.0.2960': attribute type 4 has an invalid length. [ 459.071763][T16977] tipc: Resetting bearer [ 459.297736][T17013] x_tables: duplicate underflow at hook 2 [ 459.307475][ T5833] Bluetooth: hci0: command tx timeout [ 460.544243][T16977] tipc: Disabling bearer [ 460.556126][T17004] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 460.570578][T17013] __nla_validate_parse: 3 callbacks suppressed [ 460.570598][T17013] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.2966'. [ 460.600358][T17013] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.2966'. [ 460.621100][ T5956] tipc: Node number set to 3117264789 [ 460.806296][T16803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.846407][T16803] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.856511][T17025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2971'. [ 460.872057][ T6115] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.879317][ T6115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.888058][T17025] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 460.902305][ T6115] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.909505][ T6115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.922118][T17025] netlink: 'syz.1.2971': attribute type 4 has an invalid length. [ 460.956607][T17036] Unsupported ieee802154 address type: 0 [ 461.065715][T16803] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 461.076455][T16803] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 461.388713][ T5833] Bluetooth: hci0: command tx timeout [ 461.502360][T17071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2982'. [ 461.581788][T16803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.639173][T17076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2983'. [ 461.662835][T17076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2983'. [ 461.674890][T16803] veth0_vlan: entered promiscuous mode [ 461.688580][T17076] netlink: 'syz.4.2983': attribute type 12 has an invalid length. [ 461.705838][T17076] netlink: 'syz.4.2983': attribute type 11 has an invalid length. [ 461.719728][T16803] veth1_vlan: entered promiscuous mode [ 461.795572][T16803] veth0_macvtap: entered promiscuous mode [ 461.814888][T16803] veth1_macvtap: entered promiscuous mode [ 461.828907][T17086] netlink: 'syz.1.2987': attribute type 1 has an invalid length. [ 461.904315][T16803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.945607][T17089] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 461.983264][T17089] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 462.018590][T16803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.044469][ T6125] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.056304][ T6125] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.101284][T17086] macvlan2: entered promiscuous mode [ 462.106634][T17086] macvlan2: entered allmulticast mode [ 462.122504][T17089] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2987'. [ 462.132600][T17086] bond7: entered promiscuous mode [ 462.138891][T17089] netlink: 'syz.1.2987': attribute type 2 has an invalid length. [ 462.147952][T17086] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 462.159630][T17086] bond7: left promiscuous mode [ 462.200233][ T6125] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.212182][ T6125] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.335375][T17102] xt_CT: You must specify a L4 protocol and not use inversions on it [ 462.346566][ T4253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.361788][ T4253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.408530][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.434385][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.516388][T17109] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 462.543710][T17115] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 462.696159][T17122] bond0: (slave rose0): Error: Device can not be enslaved while up [ 462.718212][T17122] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2998'. [ 462.923467][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 462.935330][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 462.943850][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 462.954205][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 462.962378][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 462.994566][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.263300][T17130] wlan1 speed is unknown, defaulting to 1000 [ 463.467910][ T5837] Bluetooth: hci0: command tx timeout [ 463.703995][T17130] chnl_net:caif_netlink_parms(): no params data found [ 463.895565][T17176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3014'. [ 463.970816][T17130] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.978718][T17130] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.985956][T17130] bridge_slave_0: entered allmulticast mode [ 463.994093][T17130] bridge_slave_0: entered promiscuous mode [ 464.004567][T17130] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.013810][T17130] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.024337][T17130] bridge_slave_1: entered allmulticast mode [ 464.031528][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.085976][T17130] bridge_slave_1: entered promiscuous mode [ 464.188612][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.220517][T17130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.246792][T13744] IPVS: starting estimator thread 0... [ 464.271603][T17130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.368517][T17196] IPVS: using max 38 ests per chain, 91200 per kthread [ 464.431304][T17130] team0: Port device team_slave_0 added [ 464.450624][T17130] team0: Port device team_slave_1 added [ 464.516655][T17130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.534582][T17130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.570173][T17130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.605781][T17130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.617163][T17130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.644562][T17130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.756548][T17230] netlink: 'syz.3.3031': attribute type 3 has an invalid length. [ 464.784393][T17130] hsr_slave_0: entered promiscuous mode [ 464.792314][T17130] hsr_slave_1: entered promiscuous mode [ 464.800007][T17130] debugfs: 'hsr0' already exists in 'hsr' [ 464.805854][T17130] Cannot create hsr debugfs directory [ 465.001660][ T5837] Bluetooth: hci3: command tx timeout [ 465.067869][T13744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.282305][T17130] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.361358][T17249] netlink: 'syz.5.3037': attribute type 3 has an invalid length. [ 465.382129][T17249] netlink: 666 bytes leftover after parsing attributes in process `syz.5.3037'. [ 465.413707][T17250] IPv6: sit2: Disabled Multicast RS [ 465.425643][T17252] netlink: 'syz.3.3040': attribute type 3 has an invalid length. [ 465.492529][T17130] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.512910][T17258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.521840][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.629399][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.639455][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.653565][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.694954][T17130] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.830740][T17130] netdevsim netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.109355][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.189870][ T6115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.198826][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.210006][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.068167][ T5837] Bluetooth: hci3: command tx timeout [ 467.147865][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.188156][T13744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.612935][T17270] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 468.635440][T17130] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 468.680141][T17130] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 468.725407][T17130] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 468.755930][T17130] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 468.779707][T17298] netlink: 'syz.0.3049': attribute type 1 has an invalid length. [ 468.801374][T17298] __nla_validate_parse: 1 callbacks suppressed [ 468.801390][T17298] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3049'. [ 468.885093][T17296] netlink: 'syz.3.3048': attribute type 1 has an invalid length. [ 468.946377][T17296] bond1: entered promiscuous mode [ 468.974261][T17296] 8021q: adding VLAN 0 to HW filter on device bond1 [ 469.053582][T17296] bond1: (slave bridge1): making interface the new active one [ 469.081073][T17296] bridge1: entered promiscuous mode [ 469.098955][T17296] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 469.146592][T17323] syzkaller1: entered promiscuous mode [ 469.153467][ T5837] Bluetooth: hci3: command tx timeout [ 469.159736][T17323] syzkaller1: entered allmulticast mode [ 469.228176][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.236347][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.259233][T17130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.279489][T17327] tipc: Enabled bearer , priority 11 [ 469.293095][T17130] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.323464][ T6115] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.330671][ T6115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.381622][ T6115] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.388833][ T6115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.533143][T17342] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3062'. [ 469.548564][T17342] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.556985][T17342] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.857473][T17365] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3068'. [ 469.876987][T17365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3068'. [ 469.910417][T17358] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3068'. [ 469.923986][T17354] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3067'. [ 470.119470][T17358] ip6gre0: Caught tx_queue_len zero misconfig [ 470.127016][T17379] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.144692][T17373] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3070'. [ 470.166913][T17378] Bluetooth: MGMT ver 1.23 [ 470.188190][T17373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3070'. [ 470.229067][T17378] IPVS: length: 36 != 24 [ 470.274918][T13744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.493572][T17397] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3076'. [ 470.551883][T17402] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3079'. [ 470.670347][T17130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.852009][T17130] veth0_vlan: entered promiscuous mode [ 470.933367][T17130] veth1_vlan: entered promiscuous mode [ 471.021340][T17130] veth0_macvtap: entered promiscuous mode [ 471.045460][T17130] veth1_macvtap: entered promiscuous mode [ 471.113665][T17433] syzkaller0: entered promiscuous mode [ 471.122290][T17433] syzkaller0: entered allmulticast mode [ 471.137027][T17130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.178838][T17130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.195577][ T6115] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.221445][ T6115] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.231230][ T5837] Bluetooth: hci3: command tx timeout [ 471.255623][ T6115] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.272727][ T6115] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.300285][T17444] syzkaller0: entered promiscuous mode [ 471.309224][T13744] net_ratelimit: 3 callbacks suppressed [ 471.309239][T13744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.318296][T17444] syzkaller0: entered allmulticast mode [ 471.475512][T17451] bond3: invalid ARP target 0.0.0.0 specified for addition [ 471.483481][T17451] bond3: option arp_ip_target: invalid value (0) [ 471.491969][T17451] bond3 (unregistering): Released all slaves [ 471.511098][T17453] block nbd5: not configured, cannot reconfigure [ 471.707039][ T6125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.726266][ T6125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.739895][T17415] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 471.795329][T17470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.834674][ T6122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.855015][ T6122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.046098][T17491] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 472.152551][T17495] sctp: [Deprecated]: syz.3.3100 (pid 17495) Use of struct sctp_assoc_value in delayed_ack socket option. [ 472.152551][T17495] Use struct sctp_sack_info instead [ 472.267697][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.369411][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.538773][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 472.551454][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 472.560663][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 472.575727][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 472.584777][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 472.988336][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 473.388291][T13744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.494151][T17552] bond13: option arp_validate: invalid value (134217728) [ 473.510673][T17552] bond13 (unregistering): Released all slaves [ 473.614745][T17560] bond3: Unable to set down delay as MII monitoring is disabled [ 473.626612][T17560] bond3 (unregistering): Released all slaves [ 473.677928][T17514] chnl_net:caif_netlink_parms(): no params data found [ 473.737669][T17564] block nbd1: server does not support multiple connections per device. [ 473.766415][T17564] block nbd1: shutting down sockets [ 473.839324][T17570] x9: renamed from bridge_slave_0 (while UP) [ 473.893743][T17514] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.912607][T17577] sctp: [Deprecated]: syz.5.3126 (pid 17577) Use of struct sctp_assoc_value in delayed_ack socket option. [ 473.912607][T17577] Use struct sctp_sack_info instead [ 473.930406][T17514] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.938312][T17514] bridge_slave_0: entered allmulticast mode [ 473.967022][T17514] bridge_slave_0: entered promiscuous mode [ 473.975608][T17577] __nla_validate_parse: 6 callbacks suppressed [ 473.975625][T17577] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3126'. [ 473.994908][T17514] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.006623][T17514] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.014685][T17514] bridge_slave_1: entered allmulticast mode [ 474.022598][T17514] bridge_slave_1: entered promiscuous mode [ 474.151515][T17514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.208510][T17514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.303849][T17514] team0: Port device team_slave_0 added [ 474.321628][T17597] netlink: 'syz.1.3135': attribute type 1 has an invalid length. [ 474.350421][T17514] team0: Port device team_slave_1 added [ 474.376252][T17600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3136'. [ 474.406670][T17514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.415540][T17514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.443260][T17514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.444045][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.466600][T17514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.474725][T17514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.502491][T17514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.527388][T17600] syzkaller0: entered promiscuous mode [ 474.532897][T17600] syzkaller0: entered allmulticast mode [ 474.590054][T17514] hsr_slave_0: entered promiscuous mode [ 474.596607][T17514] hsr_slave_1: entered promiscuous mode [ 474.604776][T17514] debugfs: 'hsr0' already exists in 'hsr' [ 474.611062][T17514] Cannot create hsr debugfs directory [ 474.670188][ T5833] Bluetooth: hci2: command tx timeout [ 474.759526][T17514] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.770495][T17514] netdevsim netdevsim4 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 474.780360][T17514] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.844042][T17514] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.854209][T17514] netdevsim netdevsim4 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 474.864054][T17514] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.922428][T17514] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.932275][T17514] netdevsim netdevsim4 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 474.942346][T17514] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.991981][T17514] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.001790][T17514] netdevsim netdevsim4 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 475.011913][T17514] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.144309][T17514] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 475.159786][T17514] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 475.169914][T17514] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 475.179639][T17514] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 475.246484][T17514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.265871][T17514] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.279622][ T6122] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.286716][ T6122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.302214][ T6117] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.309388][ T6117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.317937][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.470466][T13742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.471507][T17514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.657776][T17514] veth0_vlan: entered promiscuous mode [ 475.670939][T17514] veth1_vlan: entered promiscuous mode [ 475.696734][T17514] veth0_macvtap: entered promiscuous mode [ 475.705878][T17514] veth1_macvtap: entered promiscuous mode [ 475.725697][T17514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.742179][T17514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.755490][ T4253] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.764789][ T4253] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.779518][ T4253] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.789317][ T4253] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.855528][ T6115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.879649][ T6115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.509875][T13744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.743706][ T4253] bond0 (unregistering): Released all slaves [ 476.745010][ T6122] smc: removing ib device syz0 [ 476.756063][ T5833] Bluetooth: hci2: command tx timeout [ 476.764399][ T4253] bond1 (unregistering): Released all slaves [ 476.859890][ T4253] bond2 (unregistering): Released all slaves [ 476.872322][ T4253] bond3 (unregistering): Released all slaves [ 476.884351][ T4253] bond4 (unregistering): Released all slaves [ 476.897612][ T4253] bond5 (unregistering): Released all slaves [ 476.912644][ T4253] bond6 (unregistering): (slave vcan0): Releasing backup interface [ 476.923339][ T4253] bond6 (unregistering): Released all slaves [ 476.940721][ T4253] bond7 (unregistering): Released all slaves [ 477.038105][ T4253] bond8 (unregistering): Released all slaves [ 477.069959][ T6125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.083200][ T6125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.261625][T17619] syzkaller0: entered promiscuous mode [ 477.267141][T17619] syzkaller0: entered allmulticast mode [ 477.286050][T17619] 0: reclassify loop, rule prio 0, protocol 800 [ 477.548665][T13744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.182214][ T4253] : left promiscuous mode [ 478.250587][ T4253] : left promiscuous mode [ 478.306569][ T4253] tipc: Disabling bearer [ 478.313057][ T4253] tipc: Disabling bearer [ 478.322856][ T4253] tipc: Left network mode [ 478.348746][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.589761][T13742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.629579][ T4253] hsr_slave_0: left promiscuous mode [ 478.635539][ T4253] hsr_slave_1: left promiscuous mode [ 478.652545][ T4253] veth1_vlan: left promiscuous mode [ 478.659800][ T4253] veth0_vlan: left promiscuous mode [ 478.770538][ T4253] team0 (unregistering): Port device batadv1 removed [ 478.834903][ T5833] Bluetooth: hci2: command tx timeout [ 479.628434][T13742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.639993][ T9949] lec:lec_start_xmit: lec0:No lecd attached [ 479.749411][ T4253] IPVS: stop unused estimator thread 0... [ 480.350486][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.668166][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.907560][ T5833] Bluetooth: hci2: command tx timeout [ 481.390474][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.708014][T13742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.747951][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.788223][T13744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.427653][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.839196][T13744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.907408][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5270 ms [ 484.915428][ C0] lec:lec_tx_timeout: lec0 [ 485.868070][T13744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.909069][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.468530][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.948098][T13744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.988042][T13744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.950526][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.028890][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.507727][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.068054][T13744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.235693][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.107681][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.147810][T13744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.189245][T13744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.267668][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.229588][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.270998][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.308117][T13742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.316458][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.348326][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.682370][T17629] IPv6: NLM_F_CREATE should be specified when creating new route [ 498.720718][T17626] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3139'. [ 498.784001][T17631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3141'. [ 498.798377][T17626] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3139'. [ 498.950996][T17626] bond3: option xmit_hash_policy: invalid value (64) [ 498.979865][T17626] bond3 (unregistering): Released all slaves [ 499.051518][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 499.069680][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 499.081662][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 499.090563][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 499.105459][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 499.311527][T17655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.320637][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.346154][T17657] netlink: 'syz.4.3147': attribute type 19 has an invalid length. [ 499.388531][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.552836][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.592457][T17671] netlink: 'syz.5.3151': attribute type 6 has an invalid length. [ 499.655854][T17676] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.3152'. [ 499.675791][T17676] netlink: Conntrack attr has 4 unknown bytes [ 499.802398][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.904112][T17646] chnl_net:caif_netlink_parms(): no params data found [ 499.927772][T17679] syzkaller1: entered promiscuous mode [ 499.933336][T17679] syzkaller1: entered allmulticast mode [ 500.079031][T17646] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.086316][T17646] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.106907][T17646] bridge_slave_0: entered allmulticast mode [ 500.122543][T17646] bridge_slave_0: entered promiscuous mode [ 500.135379][T17694] ipvlan0: entered allmulticast mode [ 500.178718][T17694] batadv_slave_1: entered allmulticast mode [ 500.191156][T17694] batman_adv: batadv0: Adding interface: ipvlan0 [ 500.212845][T17694] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.240214][T17694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.253349][T17694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.273410][T17694] batman_adv: batadv0: Interface activated: ipvlan0 [ 500.322991][T17646] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.330388][T17646] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.338227][T17646] bridge_slave_1: entered allmulticast mode [ 500.348118][T17646] bridge_slave_1: entered promiscuous mode [ 500.354067][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.376743][T17703] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3157'. [ 500.434995][T17646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.456845][T17646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.572386][T17646] team0: Port device team_slave_0 added [ 500.616880][T17646] team0: Port device team_slave_1 added [ 500.634634][T17715] netlink: 'syz.4.3161': attribute type 4 has an invalid length. [ 500.672836][T17724] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3164'. [ 500.693320][T17646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.701070][T17646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.727856][T17646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.842643][T17646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.863990][T17646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.898412][T17646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.910802][T17737] syzkaller0: entered promiscuous mode [ 500.926529][T17737] syzkaller0: entered allmulticast mode [ 501.092710][T17646] hsr_slave_0: entered promiscuous mode [ 501.128459][T17646] hsr_slave_1: entered promiscuous mode [ 501.136642][T17646] debugfs: 'hsr0' already exists in 'hsr' [ 501.149928][ T5837] Bluetooth: hci1: command tx timeout [ 501.154401][T17646] Cannot create hsr debugfs directory [ 501.345553][T17768] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3176'. [ 501.444205][T17771] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3177'. [ 501.478955][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 501.643775][T17785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3180'. [ 501.661200][T17786] pimreg: entered allmulticast mode [ 501.733950][T17794] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3184'. [ 502.022819][T17811] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 502.039570][T17811] bond0: (slave gre0): Error -95 calling set_mac_address [ 502.146590][T17646] bond0: (slave netdevsim0): Releasing backup interface [ 502.175087][T17811] bond0: (slave rose0): Error: Device can not be enslaved while up [ 502.383157][T17828] net_ratelimit: 9 callbacks suppressed [ 502.383174][T17828] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.406566][T17646] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 502.489524][T17646] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 502.510732][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.552285][T17646] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 502.612707][T17646] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 502.643843][T17842] netlink: 'syz.3.3199': attribute type 28 has an invalid length. [ 502.653083][T17842] netlink: 'syz.3.3199': attribute type 3 has an invalid length. [ 502.704478][T17856] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 502.845288][T17646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.871934][T17863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.884580][T17865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.890242][T17646] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.894316][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.908019][T17862] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 502.918814][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.925972][T17862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.965720][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.972873][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.991586][ T4253] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.998763][ T4253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.080151][T17867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.089250][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.232526][ T5837] Bluetooth: hci1: command tx timeout [ 503.583906][T17646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.685322][T17899] bond1: entered allmulticast mode [ 503.721442][T17646] veth0_vlan: entered promiscuous mode [ 503.734293][T17646] veth1_vlan: entered promiscuous mode [ 503.765079][T17646] veth0_macvtap: entered promiscuous mode [ 503.775108][T17646] veth1_macvtap: entered promiscuous mode [ 503.909743][T17908] syzkaller0: entered promiscuous mode [ 503.918137][T17908] syzkaller0: entered allmulticast mode [ 503.941489][T17646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.056180][T17646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.068721][T17919] netlink: 'syz.4.3220': attribute type 2 has an invalid length. [ 504.076623][T17919] netlink: 'syz.4.3220': attribute type 1 has an invalid length. [ 504.162106][ T6117] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.192862][ T6117] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.224899][ T6117] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.235861][ T6117] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.409082][T17932] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 504.454947][T17932] bond2 (unregistering): Released all slaves [ 504.608674][ T6122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.634843][ T6122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.755538][ T6122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.777230][ T6122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.921577][T17953] __nla_validate_parse: 10 callbacks suppressed [ 504.921593][T17953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3228'. [ 505.105988][T17965] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3230'. [ 505.151388][T17970] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3230'. [ 505.310089][ T5837] Bluetooth: hci1: command tx timeout [ 505.456706][T17983] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3234'. [ 505.489731][T17986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3235'. [ 505.751972][T17999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3239'. [ 505.769279][T17999] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3239'. [ 505.806907][T17997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3238'. [ 505.981235][T18012] netlink: 'syz.1.3243': attribute type 11 has an invalid length. [ 506.027425][T18012] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3243'. [ 506.917401][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5430 ms [ 506.925464][ C0] lec:lec_tx_timeout: lec0 [ 507.390323][ T5837] Bluetooth: hci1: command tx timeout [ 507.549527][ T9] net_ratelimit: 21 callbacks suppressed [ 507.549548][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.709171][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.016488][T18025] veth1_macvtap: renamed from veth0_macvtap [ 508.031647][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.061533][T18038] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3250'. [ 508.107967][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.445651][T18070] IPv6: NLM_F_CREATE should be specified when creating new route [ 508.581704][T18068] bond1: option resend_igmp: invalid value (32767) [ 508.595837][T18068] bond1: option resend_igmp: allowed values 0 - 255 [ 508.621520][T18068] bond1 (unregistering): Released all slaves [ 508.722066][T18071] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 508.749068][T13744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.898818][T18102] openvswitch: netlink: IP tunnel dst address not specified [ 509.149116][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.157913][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.251069][T18123] netlink: 'syz.5.3271': attribute type 16 has an invalid length. [ 509.310202][T18123] ip6gre1: entered allmulticast mode [ 509.789982][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.969965][ T5490] veth1_macvtap: left promiscuous mode [ 510.070438][T18146] sctp: [Deprecated]: syz.3.3277 (pid 18146) Use of int in maxseg socket option. [ 510.070438][T18146] Use struct sctp_assoc_value instead [ 510.197623][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.219322][T18146] __nla_validate_parse: 8 callbacks suppressed [ 510.219340][T18146] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3277'. [ 510.295623][T18146] vlan0: entered allmulticast mode [ 510.308754][T18146] bridge0: entered allmulticast mode [ 510.345011][T18163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3282'. [ 510.517041][T18175] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3285'. [ 510.551598][T18174] netlink: 'syz.3.3284': attribute type 1 has an invalid length. [ 510.645068][T18183] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3287'. [ 511.124021][T18215] 8021q: VLANs not supported on ip_vti0 [ 511.322141][T18223] team0: Port device team_slave_0 removed [ 511.414267][T18235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3303'. [ 511.600667][T18244] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3305'. [ 511.620366][T13742] IPVS: starting estimator thread 0... [ 511.629550][T18247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3306'. [ 511.640898][T18247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3306'. [ 511.666355][ T4253] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.680916][ T6117] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.700828][ T6117] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.728343][ T6117] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.737440][T18251] IPVS: using max 31 ests per chain, 74400 per kthread [ 512.067089][T18280] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3315'. [ 512.362313][T18327] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3320'. [ 512.735314][T18346] net_ratelimit: 9 callbacks suppressed [ 512.735338][T18346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.749803][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.755618][T18348] netlink: zone id is out of range [ 512.763963][T18348] netlink: zone id is out of range [ 512.769705][T18348] netlink: zone id is out of range [ 512.774834][T18348] netlink: zone id is out of range [ 512.798691][T18346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.807112][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.822056][T18348] netlink: zone id is out of range [ 512.827204][T18348] netlink: zone id is out of range [ 512.828203][T18350] netlink: 'syz.4.3330': attribute type 5 has an invalid length. [ 512.840946][T18351] netlink: 'syz.4.3330': attribute type 5 has an invalid length. [ 513.133079][T18371] netlink: 'syz.3.3335': attribute type 1 has an invalid length. [ 513.310874][T18371] bond2: (slave gretap1): making interface the new active one [ 513.363071][T18371] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 513.802861][T18412] tipc: Enabled bearer , priority 0 [ 513.821530][T18413] vlan2: entered promiscuous mode [ 513.831251][T18413] bridge0: entered promiscuous mode [ 513.866510][T18409] tipc: Disabling bearer [ 513.932719][T18423] netlink: 'syz.3.3350': attribute type 1 has an invalid length. [ 514.064194][T18428] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20000 [ 514.075479][T18434] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20000 [ 514.116455][T13744] IPVS: starting estimator thread 0... [ 514.223598][T18438] IPVS: using max 36 ests per chain, 86400 per kthread [ 515.243426][T18511] __nla_validate_parse: 8 callbacks suppressed [ 515.243446][T18511] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3373'. [ 515.682632][T18546] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3382'. [ 516.699703][T18614] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3408'. [ 516.769670][T18620] netlink: 'syz.0.3410': attribute type 3 has an invalid length. [ 516.924285][T18631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3413'. [ 516.945801][T18629] tipc: Started in network mode [ 516.954978][T18629] tipc: Node identity 2e1c8c19a63c, cluster identity 4711 [ 516.962812][T18629] tipc: Enabled bearer , priority 0 [ 517.098187][T18629] syzkaller0: entered promiscuous mode [ 517.103847][T18629] syzkaller0: entered allmulticast mode [ 517.111103][T18629] tipc: Resetting bearer [ 517.134752][T18640] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3415'. [ 517.205061][T18628] tipc: Resetting bearer [ 517.300046][T18647] netlink: 'syz.1.3416': attribute type 28 has an invalid length. [ 517.322130][T18647] netlink: 'syz.1.3416': attribute type 3 has an invalid length. [ 517.330600][T18647] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3416'. [ 518.111086][T13742] net_ratelimit: 224 callbacks suppressed [ 518.111100][T13742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.516741][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.813647][T18628] tipc: Disabling bearer [ 518.963857][T13744] tipc: Node number set to 2283834393 [ 519.005118][T18675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.019196][T18672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3422'. [ 519.019405][T18676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3424'. [ 519.032822][T18675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.047024][T18675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.061818][T18679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.074924][T18679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.099357][T18676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3424'. [ 519.100488][T18679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.149256][T13744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.157410][T13744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.168503][T18685] pim6reg: entered allmulticast mode [ 519.271817][T18695] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.3429'. [ 519.332519][T18695] syzkaller0: entered promiscuous mode [ 519.340689][T18695] syzkaller0: entered allmulticast mode [ 519.553918][T18714] netlink: 'syz.4.3434': attribute type 17 has an invalid length. [ 519.696660][T18730] netlink: 'syz.4.3437': attribute type 83 has an invalid length. [ 519.856815][T18742] ipt_rpfilter: unknown options [ 520.165333][T18765] hsr_slave_0: left promiscuous mode [ 520.197858][T18765] hsr_slave_1: left promiscuous mode [ 520.346488][T18779] __nla_validate_parse: 4 callbacks suppressed [ 520.346506][T18779] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3451'. [ 520.393330][T18779] hsr_slave_0: left promiscuous mode [ 520.408770][T18785] netlink: 'syz.3.3452': attribute type 1 has an invalid length. [ 520.422598][T18779] hsr_slave_1: left promiscuous mode [ 520.433182][T18785] netlink: 'syz.3.3452': attribute type 1 has an invalid length. [ 521.053865][T18835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3468'. [ 521.097432][T18835] netlink: 'syz.3.3468': attribute type 1 has an invalid length. [ 521.105187][T18835] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3468'. [ 521.163365][T18838] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3469'. [ 521.469323][T18861] netlink: 'syz.3.3475': attribute type 23 has an invalid length. [ 521.707028][T18876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3481'. [ 521.716421][T18876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3481'. [ 522.263772][T18918] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3492'. [ 522.290179][T18921] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3491'. [ 522.343233][T18923] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3491'. [ 522.354213][T18923] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3491'. [ 522.413378][T18927] netlink: 'syz.3.3495': attribute type 1 has an invalid length. [ 522.423079][T18912] bond1 (unregistering): Released all slaves [ 522.890605][T18956] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 523.308255][T13744] net_ratelimit: 21 callbacks suppressed [ 523.308272][T13744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.379846][T18988] can: request_module (can-proto-3) failed. [ 523.508639][T18998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.531195][T18998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.601236][T18998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.623527][T19001] netlink: 'syz.3.3514': attribute type 11 has an invalid length. [ 523.626821][T18998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.652262][T19003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.662616][T19003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.673184][T19008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.698949][T19003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.708178][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.350493][T19050] Cannot find set identified by id 0 to match [ 524.369678][T19050] Cannot find add_set index 0 as target [ 524.455860][T19055] sctp: [Deprecated]: syz.0.3526 (pid 19055) Use of int in max_burst socket option deprecated. [ 524.455860][T19055] Use struct sctp_assoc_value instead [ 524.917716][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 525.173886][T19089] nbd: must specify at least one socket [ 525.201431][T19089] nbd: must specify a device to reconfigure [ 525.556388][T19103] gre0: entered promiscuous mode [ 525.591565][T19103] gre0: entered allmulticast mode [ 525.592642][T19107] netlink: 'syz.5.3539': attribute type 1 has an invalid length. [ 525.611302][T19107] xt_TPROXY: Can be used only with -p tcp or -p udp [ 525.678970][T19109] netlink: 'syz.4.3541': attribute type 5 has an invalid length. [ 526.219608][T19148] netlink: 'syz.5.3553': attribute type 83 has an invalid length. [ 526.392930][T19159] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 526.399756][T19159] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 526.405671][T19159] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 526.418072][ T9] syzkaller1: tun_net_xmit 90 [ 526.429380][T19164] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 526.465095][T19159] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 526.492971][T19159] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 526.579227][T19159] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 526.585167][T19159] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 526.618344][T19159] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 526.624399][T19159] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 526.631964][T19159] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 526.642229][T19159] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 526.651498][T19159] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 526.660003][T19182] <: renamed from vlan1 [ 526.671930][T19159] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 526.681963][T19159] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 526.702293][T19159] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 526.718013][T19159] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 526.734273][T19159] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 526.774050][T19159] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 526.788364][T19159] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 526.864791][T19159] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 526.874318][T19159] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 526.905191][T19159] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 526.915165][T19159] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 526.938123][T18281] syzkaller1: tun_net_xmit 86 [ 526.945140][T19159] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 526.962522][T19159] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 526.978729][T19159] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 526.985563][T19159] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 526.997227][T19159] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.011754][T19159] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.038844][T19159] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.044773][T19159] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.079978][T19159] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.330874][T19218] __nla_validate_parse: 14 callbacks suppressed [ 527.330892][T19218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3570'. [ 527.502752][ T5837] block nbd1: Receive control failed (result -32) [ 527.516146][T19226] netlink: 'syz.5.3573': attribute type 1 has an invalid length. [ 527.565024][T19226] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3573'. [ 527.692789][T19242] netlink: 'syz.0.3579': attribute type 1 has an invalid length. [ 527.739067][T19242] netlink: 'syz.0.3579': attribute type 3 has an invalid length. [ 527.767666][T19242] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3579'. [ 527.798487][T19242] NCSI netlink: No device for ifindex 813332851 [ 528.158366][T19275] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3585'. [ 528.315664][T19290] x_tables: duplicate underflow at hook 1 [ 528.333887][T19288] net_ratelimit: 139 callbacks suppressed [ 528.333905][T19288] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 528.508502][T13742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.828133][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.910043][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.988710][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.999414][T13742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.548298][T13744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.949214][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.108221][T13744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.589786][T13744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.822144][T19259] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 530.982482][T19295] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3592'. [ 531.479937][T19335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3606'. [ 531.503449][T19335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3606'. [ 531.525117][T19335] netlink: 'syz.3.3606': attribute type 15 has an invalid length. [ 531.593526][T19335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3606'. [ 531.597332][T18293] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 531.648175][T18293] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 531.664330][T19335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3606'. [ 531.685404][T18293] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 531.695619][T19335] netlink: 'syz.3.3606': attribute type 15 has an invalid length. [ 531.729574][T19348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3607'. [ 531.738688][T18293] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 532.019378][T19364] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 532.365826][T19387] __nla_validate_parse: 3 callbacks suppressed [ 532.365845][T19387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3621'. [ 532.614193][T19405] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 532.621484][T19405] IPv6: NLM_F_CREATE should be set when creating new route [ 532.752540][T19411] xt_TCPMSS: Only works on TCP SYN packets [ 532.892551][T19424] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3632'. [ 532.949705][T19426] xt_ecn: cannot match TCP bits for non-tcp packets [ 533.113988][T19438] erspan0: entered promiscuous mode [ 533.121203][T19438] erspan0: entered allmulticast mode [ 533.145875][T19442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3636'. [ 533.569064][T19466] net_ratelimit: 11 callbacks suppressed [ 533.569082][T19466] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 533.707755][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.800958][T19478] Bluetooth: MGMT ver 1.23 [ 533.993921][T19488] bond3: Removing last arp target with arp_interval on [ 534.111952][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.406520][T19525] sch_fq: defrate 0 ignored. [ 534.536375][T19538] netlink: 'syz.5.3662': attribute type 1 has an invalid length. [ 534.558429][T19538] netlink: 'syz.5.3662': attribute type 3 has an invalid length. [ 534.576484][T19538] netlink: 212 bytes leftover after parsing attributes in process `syz.5.3662'. [ 534.610400][T19538] syzkaller0: entered promiscuous mode [ 534.615924][T19538] syzkaller0: entered allmulticast mode [ 534.671197][T19545] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 534.732061][T19545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3663'. [ 534.760385][T13742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.908047][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.039209][T19564] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 535.092737][T19564] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3669'. [ 535.119215][T19567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3670'. [ 535.148194][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.319509][T19577] netlink: 149952 bytes leftover after parsing attributes in process `syz.0.3672'. [ 535.669266][T19604] netlink: 'syz.0.3681': attribute type 15 has an invalid length. [ 535.691907][T19604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3681'. [ 535.723929][T19604] netlink: 'syz.0.3681': attribute type 15 has an invalid length. [ 535.729378][T19606] netlink: 'syz.0.3681': attribute type 1 has an invalid length. [ 535.756172][T19604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3681'. [ 535.760722][T19609] netlink: 'syz.1.3683': attribute type 29 has an invalid length. [ 535.791736][T13742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.839374][T19604] netlink: 'syz.0.3681': attribute type 15 has an invalid length. [ 535.851749][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.924578][T19606] 8021q: adding VLAN 0 to HW filter on device bond1 [ 535.959421][T19609] netlink: 'syz.1.3683': attribute type 29 has an invalid length. [ 536.064668][T19629] syzkaller1: entered promiscuous mode [ 536.079686][T19629] syzkaller1: entered allmulticast mode [ 536.126855][T19635] netlink: 'syz.5.3688': attribute type 1 has an invalid length. [ 536.188682][T13742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.196837][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.339672][T19649] netlink: 'syz.3.3691': attribute type 1 has an invalid length. [ 536.453559][T19645] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.460934][T19645] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.544502][T19645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.559053][T19645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.669945][T19645] batman_adv: batadv0: Interface deactivated: ipvlan0 [ 536.725623][T19655] bond3: (slave gretap1): making interface the new active one [ 536.733857][T19655] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 536.748995][T18311] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 536.773663][T18311] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.809382][T18311] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 536.844401][T18311] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.864853][T18311] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 536.884191][T18311] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.913504][T18311] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 536.922884][T18311] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.949832][T19634] delete_channel: no stack [ 537.789029][T19691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.896714][T19703] __nla_validate_parse: 8 callbacks suppressed [ 537.896735][T19703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3702'. [ 537.915003][T19691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.070175][T19706] vcan0: entered allmulticast mode [ 538.203848][T19714] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3705'. [ 538.213252][T19714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3705'. [ 538.222743][T19714] netlink: 31 bytes leftover after parsing attributes in process `syz.0.3705'. [ 538.232326][T19714] netlink: 31 bytes leftover after parsing attributes in process `syz.0.3705'. [ 538.912317][ T5896] net_ratelimit: 6 callbacks suppressed [ 538.912337][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.951875][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.961752][T18311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.971579][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.983079][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.155668][T19684] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 540.165892][T19692] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 540.256783][T19717] validate_nla: 6 callbacks suppressed [ 540.256801][T19717] netlink: 'syz.1.3706': attribute type 64 has an invalid length. [ 540.401438][T19725] syzkaller1: entered promiscuous mode [ 540.409515][T19725] syzkaller1: entered allmulticast mode [ 540.427625][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.503750][T19736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3712'. [ 540.716412][T19749] team_slave_0: entered promiscuous mode [ 540.722523][T19749] team_slave_1: entered promiscuous mode [ 540.732565][T19749] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 540.744555][T19749] team0: Device macvlan2 is already an upper device of the team interface [ 540.757316][T19749] team_slave_0: left promiscuous mode [ 540.762849][T19749] team_slave_1: left promiscuous mode [ 540.993003][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.014371][T19769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.023202][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.072769][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.127244][T19782] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 541.150846][T19771] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 541.258889][T19788] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3723'. [ 541.282527][T19791] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3725'. [ 541.350470][T19798] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 541.534730][T19803] netlink: 'syz.0.3726': attribute type 4 has an invalid length. [ 541.538403][T19802] netlink: 'syz.4.3727': attribute type 83 has an invalid length. [ 541.882049][T19821] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 541.891227][T19821] bond4: option packets_per_slave: allowed values 0 - 65535 [ 541.913659][T19821] bond4 (unregistering): Released all slaves [ 541.985281][T19831] sctp: [Deprecated]: syz.0.3733 (pid 19831) Use of struct sctp_assoc_value in delayed_ack socket option. [ 541.985281][T19831] Use struct sctp_sack_info instead [ 542.040315][T19835] netlink: 'syz.4.3736': attribute type 11 has an invalid length. [ 542.127951][T19838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3737'. [ 542.284558][T19854] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3739'. [ 542.421393][T19862] syzkaller0: entered promiscuous mode [ 542.427104][T19862] syzkaller0: entered allmulticast mode [ 542.441713][T19862] tipc: Started in network mode [ 542.446749][T19862] tipc: Node identity 8a5d6409be45, cluster identity 4711 [ 542.459942][T19862] tipc: Enabled bearer , priority 0 [ 542.530481][T19872] syzkaller1: entered promiscuous mode [ 542.546898][T19872] syzkaller1: entered allmulticast mode [ 542.693400][T19879] IPVS: set_ctl: invalid protocol: 30768 48.48.48.48:12336 [ 542.963765][T19904] __nla_validate_parse: 4 callbacks suppressed [ 542.963783][T19904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3757'. [ 543.001578][T19904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3757'. [ 543.061649][T19909] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3760'. [ 543.343528][T19862] tipc: Resetting bearer [ 543.400814][T19862] tipc: Disabling bearer [ 543.496745][T19937] syzkaller0: entered promiscuous mode [ 543.502930][T19937] syzkaller0: entered allmulticast mode [ 543.802713][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802fabc800: rx timeout, send abort [ 543.821460][T19949] netlink: 'syz.4.3772': attribute type 6 has an invalid length. [ 543.910136][ T9949] lec:lec_start_xmit: lec0:No lecd attached [ 544.305805][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802fabd000: rx timeout, send abort [ 544.314446][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802fabc800: abort rx timeout. Force session deactivation [ 544.394741][T19959] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3776'. [ 544.404170][T19960] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3776'. [ 544.814069][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802fabd000: abort rx timeout. Force session deactivation [ 545.392149][T19949] ip6gre1: entered promiscuous mode [ 545.397978][T19949] ip6gre1: entered allmulticast mode [ 545.515330][T19964] team0: Device gtp0 is up. Set it down before adding it as a team port [ 545.692769][T19977] bond4: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 545.722633][T19980] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3782'. [ 545.725203][T19982] netlink: 'syz.0.3783': attribute type 1 has an invalid length. [ 545.906852][T19984] 8021q: adding VLAN 0 to HW filter on device bond4 [ 545.967023][T19992] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3787'. [ 546.156026][T20012] netlink: 'syz.4.3791': attribute type 4 has an invalid length. [ 546.200290][T20012] netlink: 'syz.4.3791': attribute type 2 has an invalid length. [ 546.243011][T20012] netlink: 'syz.4.3791': attribute type 2 has an invalid length. [ 546.263546][T20012] netlink: 'syz.4.3791': attribute type 1 has an invalid length. [ 546.272878][T20012] netlink: 'syz.4.3791': attribute type 2 has an invalid length. [ 546.284102][T20012] netlink: 'syz.4.3791': attribute type 1 has an invalid length. [ 546.366813][T20025] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3797'. [ 546.495674][T20025] syzkaller0: entered promiscuous mode [ 546.501591][T20025] syzkaller0: entered allmulticast mode [ 546.512446][T20025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3797'. [ 546.513990][T20033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3796'. [ 546.696673][T20046] veth0_to_team: entered promiscuous mode [ 546.706984][T20046] veth0_to_team: left promiscuous mode [ 547.142136][T20078] netlink: 'syz.5.3812': attribute type 7 has an invalid length. [ 547.301447][T20083] bond5: (slave gretap0): Device is not bonding slave [ 547.316256][T20083] bond5: option active_slave: invalid value (gretap0) [ 547.336962][T20083] bond5 (unregistering): Released all slaves [ 547.586893][T20091] bond2: option lacp_rate: invalid value (255) [ 547.611616][T20091] bond2 (unregistering): Released all slaves [ 547.682078][T20114] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 547.796862][T20116] netlink: 'syz.1.3818': attribute type 1 has an invalid length. [ 547.835793][T20116] netlink: 'syz.1.3818': attribute type 1 has an invalid length. [ 548.071391][T20123] __nla_validate_parse: 11 callbacks suppressed [ 548.071414][T20123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3820'. [ 548.086816][T20128] syzkaller0: entered promiscuous mode [ 548.104111][T20128] syzkaller0: entered allmulticast mode [ 548.160233][T20128] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3822'. [ 548.172666][T20128] netlink: 4152 bytes leftover after parsing attributes in process `syz.5.3822'. [ 548.360476][T20142] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3825'. [ 548.392252][T20149] lo speed is unknown, defaulting to 1000 [ 548.462522][T20142] bond5: (slave ip6_vti0): Device is not bonding slave [ 548.566846][T20142] bond5: option active_slave: invalid value (ip6_vti0) [ 548.595387][T20142] bond5 (unregistering): Released all slaves [ 548.628643][T20149] lo speed is unknown, defaulting to 1000 [ 548.635319][T20149] lo speed is unknown, defaulting to 1000 [ 548.917318][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 548.925356][ C0] lec:lec_tx_timeout: lec0 [ 548.950619][T20149] infiniband syz0: set down [ 548.955233][T20149] infiniband syz0: added lo [ 548.960110][ T5956] lo speed is unknown, defaulting to 1000 [ 549.011441][T20184] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3835'. [ 549.023168][T20184] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3835'. [ 549.066262][T20149] RDS/IB: syz0: added [ 549.076778][T20149] smc: adding ib device syz0 with port count 1 [ 549.124335][T20149] smc: ib device syz0 port 1 has no pnetid [ 549.167703][ T9] lo speed is unknown, defaulting to 1000 [ 549.184921][T20149] lo speed is unknown, defaulting to 1000 [ 549.252843][T20194] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3838'. [ 549.271501][T20192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3836'. [ 549.280743][T20192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3836'. [ 549.376784][T20204] xt_CT: You must specify a L4 protocol and not use inversions on it [ 549.547809][T20214] x9: renamed from bridge_slave_0 [ 549.901883][T20233] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3845'. [ 550.002925][T20238] bond5: option arp_missed_max: invalid value (0) [ 550.010119][T20238] bond5: option arp_missed_max: allowed values 1 - 255 [ 550.043586][T20238] bond5 (unregistering): Released all slaves [ 550.108256][T20149] lo speed is unknown, defaulting to 1000 [ 550.865764][T20274] syzkaller1: entered promiscuous mode [ 550.874348][T20274] syzkaller1: entered allmulticast mode [ 550.926570][T20277] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 1647 [ 551.014002][T20149] lo speed is unknown, defaulting to 1000 [ 551.046091][T20274] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 551.055722][T20274] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 551.064919][T20274] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 551.231689][T20290] wireguard1: entered promiscuous mode [ 551.238076][T20290] wireguard1: entered allmulticast mode [ 551.421773][T20149] lo speed is unknown, defaulting to 1000 [ 551.509562][T20304] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 551.925786][T20307] net_ratelimit: 8 callbacks suppressed [ 551.925801][T20307] A link change request failed with some changes committed already. Interface 1x9 may have been left with an inconsistent configuration, please check. [ 552.012465][T20149] lo speed is unknown, defaulting to 1000 [ 552.060109][T20313] sctp: [Deprecated]: syz.5.3867 (pid 20313) Use of struct sctp_assoc_value in delayed_ack socket option. [ 552.060109][T20313] Use struct sctp_sack_info instead [ 552.177100][T20316] syzkaller0: entered promiscuous mode [ 552.186065][T20316] syzkaller0: entered allmulticast mode [ 552.279875][T20316] tipc: Enabled bearer , priority 0 [ 552.306538][T20316] validate_nla: 2 callbacks suppressed [ 552.306559][T20316] netlink: 'syz.1.3868': attribute type 1 has an invalid length. [ 552.413894][T20314] tipc: Resetting bearer [ 552.489161][T20314] tipc: Disabling bearer [ 552.614415][T20149] lo speed is unknown, defaulting to 1000 [ 552.647213][T20340] netlink: 'syz.5.3876': attribute type 4 has an invalid length. [ 553.282689][T18311] dvmrp6 (unregistering): left allmulticast mode [ 553.713095][T18311] bond1 (unregistering): Released all slaves [ 553.725236][T18311] bond0 (unregistering): Released all slaves [ 553.836764][T18311] bond2 (unregistering): (slave veth7): Releasing active interface [ 553.846235][T18311] bond2 (unregistering): Released all slaves [ 553.966794][T18311] bond3 (unregistering): Released all slaves [ 554.083888][T18311] bond4 (unregistering): Released all slaves [ 554.195268][T18311] bond5 (unregistering): Released all slaves [ 554.307805][T18311] bond6 (unregistering): Released all slaves [ 554.321413][T18311] bond7 (unregistering): Released all slaves [ 554.347929][T20149] lo speed is unknown, defaulting to 1000 [ 554.481928][T20351] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 554.490437][T18311] tipc: Left network mode [ 554.495861][T20351] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 554.591457][T20377] __nla_validate_parse: 8 callbacks suppressed [ 554.591475][T20377] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3887'. [ 554.917690][T20351] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 554.942941][T20351] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 554.954209][T20149] lo speed is unknown, defaulting to 1000 [ 554.984393][T20351] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 555.008502][T20351] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 555.184963][T20351] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 555.200663][T20351] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 555.397964][T20351] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 555.403905][T20351] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 555.493579][T20403] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3892'. [ 555.536344][T20393] lo speed is unknown, defaulting to 1000 [ 555.567061][T20403] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3892'. [ 555.605897][T20403] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3892'. [ 555.663994][T20403] gretap0: entered promiscuous mode [ 555.707245][T20403] gretap0: left promiscuous mode [ 555.966356][T20419] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3896'. [ 556.033521][T20424] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3897'. [ 556.107200][T20427] lo: entered promiscuous mode [ 556.148359][T20427] netlink: 'syz.4.3898': attribute type 2 has an invalid length. [ 556.184596][T20427] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 556.265913][T20434] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3900'. [ 556.307718][T20434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3900'. [ 556.462568][T20441] netlink: 'syz.4.3901': attribute type 13 has an invalid length. [ 556.694243][T20457] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 556.737718][T20458] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 556.861980][T20441] gretap0: refused to change device tx_queue_len [ 556.879596][T20441] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 557.096930][T18311] hsr_slave_0: left promiscuous mode [ 557.126512][T18311] hsr_slave_1: left promiscuous mode [ 557.146346][T18311] batman_adv: batadv0: Interface deactivated: dummy0 [ 557.167425][T18311] batman_adv: batadv0: Removing interface: dummy0 [ 557.182796][T18311] veth1_vlan: left allmulticast mode [ 557.279275][T18311] team0 (unregistering): Port device batadv1 removed [ 557.322773][T18311] pim6reg (unregistering): left allmulticast mode [ 558.310876][T20474] : renamed from bond0 [ 558.345628][T20486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3912'. [ 558.620648][T20511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3917'. [ 558.631163][T20508] netlink: 'syz.3.3916': attribute type 1 has an invalid length. [ 558.655716][T20508] netlink: 'syz.3.3916': attribute type 1 has an invalid length. [ 558.896460][T20535] .: renamed from bridge_slave_1 (while UP) [ 559.200023][T20545] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 559.255756][T20560] IPv6: sit1: Disabled Multicast RS [ 559.289325][T20560] sit1: entered allmulticast mode [ 559.610719][T20577] lec0: mtu less than device minimum [ 559.616490][T20577] lec:lec_atm_send: lec0: change_mtu to 0 failed [ 559.659060][T20527] lec:lec_atm_close: lec0: Shut down! [ 559.888974][T20588] __nla_validate_parse: 4 callbacks suppressed [ 559.888992][T20588] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3934'. [ 560.350437][T20619] netlink: 'syz.4.3941': attribute type 1 has an invalid length. [ 560.400216][T20625] netlink: 'syz.1.3942': attribute type 1 has an invalid length. [ 560.412354][T20625] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3942'. [ 560.422822][T20625] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3942'. [ 560.437533][T20625] netlink: 658 bytes leftover after parsing attributes in process `syz.1.3942'. [ 560.570311][T20630] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 560.597227][T20630] syzkaller1: Refused to change device type [ 560.609337][T20636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3945'. [ 560.671003][T20641] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 560.861594][T20651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3950'. [ 560.904255][T18311] IPVS: stop unused estimator thread 0... [ 561.008763][T20662] macvlan0: entered promiscuous mode [ 561.112604][T20675] openvswitch: netlink: Flow actions attr not present in new flow. [ 561.165269][T20681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3954'. [ 561.186175][T20681] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3954'. [ 561.215644][T20684] netlink: 'syz.4.3956': attribute type 83 has an invalid length. [ 561.217967][T20680] vlan2: entered promiscuous mode [ 561.237542][T20680] vlan2: entered allmulticast mode [ 561.242702][T20680] hsr_slave_1: entered allmulticast mode [ 561.288298][T20680] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3955'. [ 561.318864][T20680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3955'. [ 561.848778][T20730] sctp: [Deprecated]: syz.3.3969 (pid 20730) Use of int in max_burst socket option. [ 561.848778][T20730] Use struct sctp_assoc_value instead [ 561.879161][T20734] sctp: [Deprecated]: syz.5.3971 (pid 20734) Use of struct sctp_assoc_value in delayed_ack socket option. [ 561.879161][T20734] Use struct sctp_sack_info instead [ 562.191812][T20756] IPVS: ip_vs_add_dest(): server weight less than zero [ 562.258725][T20760] tipc: Enabling of bearer rejected, failed to enable media [ 562.263083][T20759] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 562.275958][T20760] netlink: 'syz.4.3979': attribute type 29 has an invalid length. [ 562.286750][T20761] netlink: 'syz.4.3979': attribute type 29 has an invalid length. [ 562.300708][T20760] netlink: 'syz.4.3979': attribute type 29 has an invalid length. [ 562.425609][T20772] sctp: [Deprecated]: syz.5.3983 (pid 20772) Use of int in max_burst socket option. [ 562.425609][T20772] Use struct sctp_assoc_value instead [ 562.456640][T20772] syzkaller1: left promiscuous mode [ 562.470885][T20772] syzkaller1: left allmulticast mode [ 562.496444][T20765] team0: Device gtp1 is up. Set it down before adding it as a team port [ 562.659503][T20786] ipt_ECN: cannot use operation on non-tcp rule [ 562.698041][T20788] x_tables: duplicate underflow at hook 1 [ 562.775777][T20793] bridge0: port 3(batadv1) entered blocking state [ 562.785605][T20796] ip6t_srh: unknown srh match flags 4000 [ 562.808340][T20793] bridge0: port 3(batadv1) entered disabled state [ 562.816202][T20793] batadv1: entered allmulticast mode [ 562.824368][T20793] batadv1: entered promiscuous mode [ 562.853781][T20794] bridge0: port 4(batadv2) entered blocking state [ 562.867674][T20794] bridge0: port 4(batadv2) entered disabled state [ 562.879007][T20794] batadv2: entered allmulticast mode [ 562.886549][T20794] batadv2: entered promiscuous mode [ 563.072891][T20811] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 563.080947][T20811] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.268405][T18315] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 563.278178][T18315] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 563.337483][T18275] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 563.346759][T18275] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 563.347048][T20843] netlink: 'syz.1.4001': attribute type 4 has an invalid length. [ 563.549824][T20849] 8021q: VLANs not supported on gre0 [ 564.148521][T20884] bridge0: port 3(ipvlan2) entered blocking state [ 564.155168][T20884] bridge0: port 3(ipvlan2) entered disabled state [ 564.163254][T20884] ipvlan2: entered allmulticast mode [ 564.180916][T20884] bridge0: entered allmulticast mode [ 564.189421][T20884] ipvlan2: left allmulticast mode [ 564.194632][T20884] bridge0: left allmulticast mode [ 564.401533][T20908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 564.430253][T20908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.546423][T20910] bond0: (slave rose0): Error: Device can not be enslaved while up [ 564.565590][T20924] netlink: 'syz.3.4029': attribute type 1 has an invalid length. [ 564.650824][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805954ac00: rx timeout, send abort [ 564.736850][T20931] x_tables: unsorted entry at hook 2 [ 564.779868][T20933] syzkaller1: entered promiscuous mode [ 564.785646][T20933] syzkaller1: entered allmulticast mode [ 564.907433][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5250 ms [ 564.915521][ C0] lec:lec_tx_timeout: lec0 [ 564.920683][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 564.927581][T20941] netlink: 'syz.4.4033': attribute type 2 has an invalid length. [ 565.150963][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805954bc00: rx timeout, send abort [ 565.159914][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805954ac00: abort rx timeout. Force session deactivation [ 565.293582][T20960] __nla_validate_parse: 15 callbacks suppressed [ 565.293602][T20960] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4037'. [ 565.562744][T20979] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4045'. [ 565.659355][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805954bc00: abort rx timeout. Force session deactivation [ 566.498044][T21034] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4056'. [ 566.542082][T21045] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4059'. [ 566.617205][T21034] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4056'. [ 566.686767][T21048] syzkaller1: entered promiscuous mode [ 566.694320][T21048] syzkaller1: entered allmulticast mode [ 566.719711][T21034] IPVS: set_ctl: invalid protocol: 47 172.20.20.21:20004 [ 567.014914][T21074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4066'. [ 567.043202][T21074] .: left allmulticast mode [ 567.060275][T21074] .: left promiscuous mode [ 567.065146][T21074] bridge0: port 2(.) entered disabled state [ 567.096831][T21074] bridge_slave_0: left allmulticast mode [ 567.109318][T21074] bridge_slave_0: left promiscuous mode [ 567.118641][T21074] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.139489][T21080] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4067'. [ 567.333096][T21089] netlink: 'syz.5.4070': attribute type 1 has an invalid length. [ 567.376356][T21089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.508971][T21090] bond0: (slave veth0_to_bond): making interface the new active one [ 567.524774][T21102] xt_TCPMSS: Only works on TCP SYN packets [ 567.549468][T21090] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 567.561493][T21102] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.4073'. [ 567.586969][T21089] bond0: entered promiscuous mode [ 567.595566][T21089] veth0_to_bond: entered promiscuous mode [ 567.608339][T21089] bond0: entered allmulticast mode [ 567.616298][T21089] veth0_to_bond: entered allmulticast mode [ 567.629032][T21107] xt_TCPMSS: Only works on TCP SYN packets [ 567.641589][T21105] netlink: zone id is out of range [ 567.666837][T21105] netlink: zone id is out of range [ 567.693242][T21109] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4074'. [ 567.711967][T21105] netlink: zone id is out of range [ 567.717111][T21105] netlink: zone id is out of range [ 567.723213][T21112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4075'. [ 567.777575][T21105] netlink: zone id is out of range [ 567.782741][T21105] netlink: zone id is out of range [ 567.807352][T21113] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 567.826124][T21105] netlink: zone id is out of range [ 567.863830][T21105] netlink: set zone limit has 4 unknown bytes [ 567.911864][T21128] netlink: 'syz.3.4080': attribute type 10 has an invalid length. [ 567.970202][T21128] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.992729][T21128] bond0: (slave team0): Enslaving as an active interface with an up link [ 568.103830][T21138] bond5: entered promiscuous mode [ 568.109578][T21138] bond5: entered allmulticast mode [ 568.115138][T21138] 8021q: adding VLAN 0 to HW filter on device bond5 [ 568.593440][T21172] lo speed is unknown, defaulting to 1000 [ 568.814362][T21181] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 569.075956][T21199] openvswitch: netlink: VXLAN extension 111 out of range max 1 [ 569.420034][T21215] netlink: 'syz.0.4107': attribute type 5 has an invalid length. [ 569.458437][T21217] netlink: 'syz.0.4107': attribute type 21 has an invalid length. [ 569.927553][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 569.935641][ C0] lec:lec_tx_timeout: lec0 [ 570.022763][T21250] atomic_op ffff888078493998 conn xmit_atomic 0000000000000000 [ 570.348055][T21266] IPVS: ip_vs_edit_dest(): server weight less than zero [ 570.474761][T21273] tipc: Enabling of bearer rejected, failed to enable media [ 570.630226][T21285] __nla_validate_parse: 14 callbacks suppressed [ 570.630451][T21285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4127'. [ 570.651513][T21289] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4126'. [ 570.699521][T21289] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.910097][T21303] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4132'. [ 570.937937][T21305] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4133'. [ 570.959181][T21305] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4133'. [ 570.989779][T21310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4132'. [ 571.054250][T21311] netlink: 'syz.5.4133': attribute type 61 has an invalid length. [ 571.098095][T21311] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4133'. [ 571.201190][T21321] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4136'. [ 571.201326][T21320] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4135'. [ 571.228231][T21320] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4135'. [ 571.260259][T21323] netlink: 'syz.1.4137': attribute type 23 has an invalid length. [ 571.805118][T21355] : renamed from veth1_vlan (while UP) [ 572.227188][T21390] netlink: 'syz.0.4152': attribute type 30 has an invalid length. [ 572.227188][T21395] netlink: 'syz.0.4152': attribute type 30 has an invalid length. [ 572.349430][T21399] syzkaller1: entered promiscuous mode [ 572.354949][T21399] syzkaller1: entered allmulticast mode [ 572.593657][T21417] vcan0 (unregistering): left allmulticast mode [ 572.699800][T21422] netlink: 'syz.1.4160': attribute type 15 has an invalid length. [ 573.163768][T21460] netlink: 'syz.4.4167': attribute type 3 has an invalid length. [ 573.226392][T21464] netlink: 'syz.5.4168': attribute type 1 has an invalid length. [ 573.234870][T21464] netlink: 'syz.5.4168': attribute type 11 has an invalid length. [ 573.371920][T21478] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 573.609436][T21468] syzkaller1: entered promiscuous mode [ 573.614950][T21468] syzkaller1: entered allmulticast mode [ 573.636191][T21489] net_ratelimit: 2 callbacks suppressed [ 573.636210][T21489] openvswitch: netlink: Unknown key attributes 2 [ 574.377920][T21512] syzkaller0: entered promiscuous mode [ 574.383438][T21512] syzkaller0: entered allmulticast mode [ 574.475646][T21512] netlink: 'syz.5.4179': attribute type 13 has an invalid length. [ 574.695673][T21525] tipc: Enabled bearer , priority 0 [ 574.733803][T21510] tipc: Resetting bearer [ 574.979144][T21510] tipc: Disabling bearer [ 575.136808][T21547] lo speed is unknown, defaulting to 1000 [ 575.532192][T21560] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 575.695232][T21563] __nla_validate_parse: 17 callbacks suppressed [ 575.695254][T21563] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4192'. [ 575.770918][T21563] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4192'. [ 576.021357][T21573] netlink: 'syz.5.4194': attribute type 5 has an invalid length. [ 576.342824][T21584] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 576.356706][T21585] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 576.376001][T21577] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4197'. [ 576.526020][T21587] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4200'. [ 576.593137][T21587] netlink: 'syz.4.4200': attribute type 7 has an invalid length. [ 576.617519][T21594] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4199'. [ 576.647132][T21587] netlink: 'syz.4.4200': attribute type 8 has an invalid length. [ 576.706460][T21587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4200'. [ 576.759410][T21597] netlink: 'syz.0.4201': attribute type 21 has an invalid length. [ 576.780619][T21594] team1: entered promiscuous mode [ 576.785767][T21594] team1: entered allmulticast mode [ 576.842996][T21597] IPv6: NLM_F_CREATE should be specified when creating new route [ 576.877918][T21597] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 576.885211][T21597] IPv6: NLM_F_CREATE should be set when creating new route [ 576.892530][T21597] IPv6: NLM_F_CREATE should be set when creating new route [ 576.899809][T21597] IPv6: NLM_F_CREATE should be set when creating new route [ 577.106914][T21609] netlink: 'syz.5.4205': attribute type 28 has an invalid length. [ 577.152863][T21611] netlink: 'syz.4.4206': attribute type 13 has an invalid length. [ 577.160904][T21609] netlink: 'syz.5.4205': attribute type 3 has an invalid length. [ 577.180349][T21609] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4205'. [ 577.210708][T21614] netlink: 'syz.5.4205': attribute type 2 has an invalid length. [ 577.459307][T21614] 9: entered promiscuous mode [ 577.681311][T21640] netlink: 'syz.0.4212': attribute type 33 has an invalid length. [ 577.689733][T21640] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4212'. [ 577.739936][T21645] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4212'. [ 577.896759][T21653] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4216'. [ 578.112878][T21666] tipc: Can't bind to reserved service type 0 [ 578.168136][T21668] syz_tun: entered allmulticast mode [ 578.178931][T21668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 578.251137][T21665] syz_tun: left allmulticast mode [ 579.633830][T21763] netlink: 'syz.3.4254': attribute type 21 has an invalid length. [ 579.668988][T21763] netlink: 'syz.3.4254': attribute type 1 has an invalid length. [ 579.693260][T21768] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 579.769266][T21778] batadv_slave_1: entered promiscuous mode [ 579.781829][T21778] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.810639][T21778] bridge_slave_1: left allmulticast mode [ 579.816429][T21778] bridge_slave_1: left promiscuous mode [ 579.877512][T21778] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.905496][T21778] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 579.919658][T21776] batadv_slave_1: left promiscuous mode [ 580.081081][T21796] IPVS: set_ctl: invalid protocol: 137 172.20.20.28:20004 [ 580.170562][T21800] bridge0: port 5(macsec0) entered blocking state [ 580.190540][T21800] bridge0: port 5(macsec0) entered disabled state [ 580.200992][T21800] macsec0: entered allmulticast mode [ 580.206320][T21800] veth1_macvtap: entered allmulticast mode [ 580.224808][T21800] macsec0: entered promiscuous mode [ 580.236546][T21800] bridge0: port 5(macsec0) entered blocking state [ 580.243462][T21800] bridge0: port 5(macsec0) entered forwarding state [ 580.256906][T21806] 8021q: VLANs not supported on gre0 [ 580.308442][T21811] TCP: TCP_TX_DELAY enabled [ 580.709207][T21834] __nla_validate_parse: 10 callbacks suppressed [ 580.709229][T21834] netlink: 124 bytes leftover after parsing attributes in process `syz.3.4278'. [ 581.175973][T21867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4290'. [ 581.196511][T21867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4290'. [ 581.523170][T21895] netlink: 51 bytes leftover after parsing attributes in process `syz.0.4296'. [ 581.565604][T21899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4297'. [ 581.744511][T21905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4299'. [ 581.763778][T21905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4299'. [ 581.787496][T21905] validate_nla: 6 callbacks suppressed [ 581.787514][T21905] netlink: 'syz.0.4299': attribute type 15 has an invalid length. [ 581.874446][T18311] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 581.884766][T21905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4299'. [ 581.916650][T18311] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 581.934653][T21905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4299'. [ 581.948267][T18312] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 581.973012][T18312] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 581.974554][T21905] netlink: 'syz.0.4299': attribute type 15 has an invalid length. [ 582.082858][T21924] lo speed is unknown, defaulting to 1000 [ 582.192909][T21929] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4304'. [ 582.621680][T21960] siw: device registration error -23 [ 582.638170][T21965] siw: device registration error -23 [ 582.681292][T21955] tap0: tun_chr_ioctl cmd 1074025676 [ 582.698711][T21955] tap0: owner set to 0 [ 583.261166][T22005] pim6reg1: entered promiscuous mode [ 583.274117][T22005] pim6reg1: entered allmulticast mode [ 583.539695][T22023] netlink: 'syz.5.4330': attribute type 61 has an invalid length. [ 583.635487][T22031] netlink: 'syz.5.4330': attribute type 61 has an invalid length. [ 583.858282][T22049] lo: Caught tx_queue_len zero misconfig [ 584.002126][T22057] netlink: 'syz.1.4342': attribute type 1 has an invalid length. [ 584.250525][T22077] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 584.545832][T22105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.576723][T22104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.599075][T22104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.619091][T22104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.638663][T22104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.660376][T22104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.677874][T22104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.690723][T22104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.703145][T22104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.713161][T22104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.723726][T22104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.733799][T22104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.744256][T22104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.773804][T22104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.787899][T22104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.798626][T22104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.808735][T22104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.818594][T22104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.880363][T22121] netlink: 'syz.4.4363': attribute type 33 has an invalid length. [ 584.947087][T22121] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 584.999302][T22121] bond8 (unregistering): Released all slaves [ 585.034665][T22129] xt_hashlimit: size too large, truncated to 1048576 [ 585.803580][T22183] __nla_validate_parse: 42 callbacks suppressed [ 585.803598][T22183] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4382'. [ 585.830473][T22181] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4381'. [ 586.006311][T22189] team0: Device ip6gre2 is of different type [ 586.063306][T22199] netlink: 'syz.0.4387': attribute type 2 has an invalid length. [ 586.072519][T22195] xt_ecn: cannot match TCP bits for non-tcp packets [ 586.081881][T22199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4387'. [ 586.102812][T22199] netlink: 'syz.0.4387': attribute type 2 has an invalid length. [ 586.124614][T22199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4387'. [ 586.152609][T22195] bond4: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 586.198776][T22195] bond4 (unregistering): Released all slaves [ 586.204270][T22207] netlink: 'syz.4.4391': attribute type 1 has an invalid length. [ 586.271328][T22209] netlink: 13 bytes leftover after parsing attributes in process `syz.1.4392'. [ 586.307650][T22212] bond8: (slave ip6gretap1): making interface the new active one [ 586.317005][T22212] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 586.388168][T22219] x_tables: duplicate underflow at hook 3 [ 586.559038][T22230] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4395'. [ 586.773500][T22237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4398'. [ 586.799391][T22237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4398'. [ 586.809074][T22246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4400'. [ 586.861611][T22248] netlink: 'syz.4.4402': attribute type 1 has an invalid length. [ 586.919743][T22248] 8021q: adding VLAN 0 to HW filter on device bond9 [ 586.988835][T22253] bond9: (slave veth3): Enslaving as an active interface with a down link [ 587.064449][T22248] bond9: (slave veth5): Enslaving as an active interface with a down link [ 587.075222][T22248] netlink: 'syz.4.4402': attribute type 1 has an invalid length. [ 587.093850][T22255] syzkaller0: entered promiscuous mode [ 587.113555][T22265] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4406'. [ 587.118031][T22255] syzkaller0: entered allmulticast mode [ 587.130652][T22248] netlink: 'syz.4.4402': attribute type 2 has an invalid length. [ 587.370726][T22274] lo speed is unknown, defaulting to 1000 [ 588.048576][T22328] lo: Caught tx_queue_len zero misconfig [ 588.129696][T22325] lo speed is unknown, defaulting to 1000 [ 588.839394][T22361] netlink: 'syz.0.4433': attribute type 83 has an invalid length. [ 588.921411][T22363] lo speed is unknown, defaulting to 1000 [ 589.216911][T22381] syzkaller0: entered promiscuous mode [ 589.223672][T22381] syzkaller0: entered allmulticast mode [ 589.421005][T22389] IPVS: set_ctl: invalid protocol: 33 224.0.0.1:20000 [ 589.838138][T22415] syzkaller1: entered promiscuous mode [ 589.843648][T22415] syzkaller1: entered allmulticast mode [ 590.181941][T22433] tls_set_device_offload: netdev not found [ 590.340477][T22448] netlink: 'syz.4.4461': attribute type 12 has an invalid length. [ 590.590496][T22464] syzkaller0: entered promiscuous mode [ 590.596068][T22464] syzkaller0: entered allmulticast mode [ 590.637059][T22454] lo speed is unknown, defaulting to 1000 [ 590.772540][T22476] netlink: 'syz.0.4468': attribute type 1 has an invalid length. [ 591.305122][T22494] __nla_validate_parse: 13 callbacks suppressed [ 591.305171][T22494] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4472'. [ 591.485452][T22505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4474'. [ 591.668510][T22510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4476'. [ 591.820516][T22513] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4477'. [ 592.034035][T22521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4480'. [ 592.086854][T22521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4480'. [ 592.167701][T22521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4480'. [ 592.206246][T22521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4480'. [ 592.236095][T22531] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4484'. [ 592.243344][T22521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4480'. [ 592.434091][T22540] xt_hashlimit: size too large, truncated to 1048576 [ 592.503766][T22549] netlink: 'syz.0.4488': attribute type 1 has an invalid length. [ 592.672353][T22549] 8021q: adding VLAN 0 to HW filter on device bond3 [ 592.794138][T22544] bond3: (slave veth3): Enslaving as an active interface with a down link [ 592.843584][T22559] bond3: (slave veth0_to_bond): making interface the new active one [ 592.877650][T22559] veth0_to_bond: entered promiscuous mode [ 592.883856][T22559] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 593.222419][T22592] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.249506][T22592] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.257548][T22593] netlink: 'syz.0.4500': attribute type 16 has an invalid length. [ 593.285714][T22593] netlink: 'syz.0.4500': attribute type 17 has an invalid length. [ 593.322781][T22598] netlink: 'syz.1.4502': attribute type 6 has an invalid length. [ 593.350360][T22592] bridge0: port 5(macsec0) entered disabled state [ 593.405986][T22593] gre0: left promiscuous mode [ 593.419987][T22593] gre0: left allmulticast mode [ 593.426841][T22593] erspan0: left promiscuous mode [ 593.432439][T22593] erspan0: left allmulticast mode [ 593.454682][T22593] net_ratelimit: 33 callbacks suppressed [ 593.454692][T22593] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 593.511501][ T5911] lo speed is unknown, defaulting to 1000 [ 593.527420][ T5911] syz0: Port: 1 Link ACTIVE [ 593.532734][ T5911] lo speed is unknown, defaulting to 1000 [ 593.668096][T22612] openvswitch: netlink: Duplicate key (type 32). [ 593.802815][T22624] netlink: 'syz.4.4510': attribute type 1 has an invalid length. [ 594.373407][T22658] ip6gre2: entered promiscuous mode [ 594.382882][T22658] ip6gre2: entered allmulticast mode [ 594.485563][T22664] openvswitch: netlink: IP tunnel dst address not specified [ 595.083443][T22697] tipc: Resetting bearer [ 595.359269][T22706] 8021q: adding VLAN 0 to HW filter on device bond10 [ 595.386533][T22733] sctp: [Deprecated]: syz.5.4538 (pid 22733) Use of int in maxseg socket option. [ 595.386533][T22733] Use struct sctp_assoc_value instead [ 595.390118][T22714] bond_slave_0: entered promiscuous mode [ 595.406646][T22714] bond_slave_1: entered promiscuous mode [ 595.413027][T22714] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 595.422376][T22714] bond10: (slave macvlan2): making interface the new active one [ 595.431155][T22714] bond10: (slave macvlan2): Enslaving as an active interface with an up link [ 595.440154][T18312] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.461329][T22735] netlink: 'syz.5.4538': attribute type 2 has an invalid length. [ 595.510035][T22716] syzkaller0: entered promiscuous mode [ 595.515568][T22716] syzkaller0: entered allmulticast mode [ 595.542138][T18312] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.580653][T18312] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.292224][T22754] team0: Device ip6gre3 is of different type [ 597.376633][T22769] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 597.421745][T22771] netlink: 'syz.5.4549': attribute type 1 has an invalid length. [ 597.429910][T22771] netlink: 'syz.5.4549': attribute type 3 has an invalid length. [ 597.438174][T22771] __nla_validate_parse: 45 callbacks suppressed [ 597.438190][T22771] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4549'. [ 597.456559][T22771] bond0: Caught tx_queue_len zero misconfig [ 597.560971][T22775] netlink: 'syz.3.4551': attribute type 1 has an invalid length. [ 597.579871][T22775] netlink: 'syz.3.4551': attribute type 3 has an invalid length. [ 597.601686][T22775] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4551'. [ 597.623534][T22782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4554'. [ 597.710655][T22782] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 597.716182][T22793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4556'. [ 597.763276][T22792] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4556'. [ 597.894652][T22799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4558'. [ 597.924388][T22808] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 597.939697][T22808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4562'. [ 598.096777][T22824] openvswitch: netlink: IP tunnel dst address not specified [ 598.125061][T22824] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4565'. [ 598.310703][T22835] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4571'. [ 598.328006][T22836] x_tables: duplicate underflow at hook 1 [ 598.489336][T22852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4576'. [ 598.502998][T22843] bond2: entered allmulticast mode [ 598.643277][T22868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.662345][T22869] xt_CT: You must specify a L4 protocol and not use inversions on it [ 598.737167][T22879] netlink: 'syz.4.4580': attribute type 1 has an invalid length. [ 598.778714][T22868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.834187][T22880] IPv6: sit1: Disabled Multicast RS [ 598.843755][T22880] sit1: entered allmulticast mode [ 598.908983][T22891] netlink: 'syz.0.4586': attribute type 3 has an invalid length. [ 599.279568][T22922] netlink: 'syz.0.4596': attribute type 1 has an invalid length. [ 599.301206][T22923] @0: renamed from bond_slave_1 (while UP) [ 599.420128][ T5910] IPVS: starting estimator thread 0... [ 599.479729][T22937] C: renamed from lo (while UP) [ 599.487030][T22937] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 599.506860][T22937] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 599.522617][T22933] IPVS: using max 41 ests per chain, 98400 per kthread [ 599.633338][T22944] x_tables: duplicate underflow at hook 4 [ 599.642118][T22944] netlink: 'syz.4.4602': attribute type 3 has an invalid length. [ 599.849962][T22950] netlink: 'syz.3.4605': attribute type 1 has an invalid length. [ 599.861319][T22950] netlink: 'syz.3.4605': attribute type 1 has an invalid length. [ 599.884454][T22957] IPv6: NLM_F_REPLACE set, but no existing node found! [ 600.093744][T22970] x_tables: duplicate underflow at hook 1 [ 600.169226][T22973] ------------[ cut here ]------------ [ 600.175146][T22973] msk->pm.local_addr_used == 0 [ 600.175172][T22973] WARNING: net/mptcp/pm_kernel.c:1070 at mptcp_pm_nl_del_addr_doit+0xfb7/0x1420, CPU#1: syz.1.4614/22973 [ 600.191250][T22973] Modules linked in: [ 600.195531][T22973] CPU: 1 UID: 0 PID: 22973 Comm: syz.1.4614 Not tainted syzkaller #0 PREEMPT(full) [ 600.205051][T22973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 600.215193][T22973] RIP: 0010:mptcp_pm_nl_del_addr_doit+0xfb7/0x1420 [ 600.221780][T22973] Code: 01 00 00 49 89 c6 e8 68 33 3e f6 e9 26 fb ff ff e8 5e 33 3e f6 48 89 df be 03 00 00 00 e8 d1 72 1a f9 eb a4 e8 4a 33 3e f6 90 <0f> 0b 90 e9 ad fe ff ff 89 d9 80 e1 07 38 c1 0f 8c 12 fb ff ff 48 [ 600.241460][T22973] RSP: 0018:ffffc90004fdf160 EFLAGS: 00010287 [ 600.247585][T22973] RAX: ffffffff8b864406 RBX: 0000000000000000 RCX: 0000000000080000 [ 600.255590][T22973] RDX: ffffc9000d1b9000 RSI: 0000000000003083 RDI: 0000000000003084 [ 600.263633][T22973] RBP: ffffc90004fdf3b0 R08: ffff88802ee7fb37 R09: 1ffff11005dcff66 [ 600.271646][T22973] R10: dffffc0000000000 R11: ffffed1005dcff67 R12: 1ffff11005dcff65 [ 600.279655][T22973] R13: ffff888084bed200 R14: ffff88802ee7f080 R15: ffff88802ee7fb28 [ 600.287686][T22973] FS: 00007f26c629c6c0(0000) GS:ffff8881257f5000(0000) knlGS:0000000000000000 [ 600.296636][T22973] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 600.303289][T22973] CR2: 000000110c3531f0 CR3: 0000000030b22000 CR4: 00000000003526f0 [ 600.311304][T22973] Call Trace: [ 600.314597][T22973] [ 600.317600][T22973] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 600.323805][T22973] ? rcu_is_watching+0x15/0xb0 [ 600.328647][T22973] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 600.335022][T22973] genl_family_rcv_msg_doit+0x22a/0x330 [ 600.340654][T22973] ? __asan_memcpy+0x40/0x70 [ 600.345276][T22973] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 600.351440][T22973] ? bpf_lsm_capable+0x9/0x20 [ 600.356156][T22973] ? security_capable+0x7e/0x2c0 [ 600.361484][T22973] genl_rcv_msg+0x61c/0x7a0 [ 600.366021][T22973] ? __pfx_genl_rcv_msg+0x10/0x10 [ 600.371126][T22973] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 600.371584][T22984] openvswitch: netlink: Multiple metadata blocks provided [ 600.377325][T22973] ? __pfx_ref_tracker_free+0x10/0x10 [ 600.377437][T22973] netlink_rcv_skb+0x232/0x4b0 [ 600.377464][T22973] ? __pfx_genl_rcv_msg+0x10/0x10 [ 600.399796][T22973] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 600.405101][T22973] ? genl_rcv+0x19/0x40 [ 600.409313][T22973] ? down_read+0x272/0x2e0 [ 600.413751][T22973] ? genl_rcv+0xd/0x40 [ 600.414952][T22978] IPVS: length: 239 != 24 [ 600.417892][T22973] genl_rcv+0x28/0x40 [ 600.417923][T22973] netlink_unicast+0x80f/0x9b0 [ 600.417960][T22973] ? __pfx_netlink_unicast+0x10/0x10 [ 600.417987][T22973] ? __alloc_skb+0x193/0x390 [ 600.418013][T22973] ? netlink_sendmsg+0x650/0xb40 [ 600.418033][T22973] ? skb_put+0x11b/0x210 [ 600.418062][T22973] netlink_sendmsg+0x813/0xb40 [ 600.418095][T22973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 600.418123][T22973] ? aa_sock_msg_perm+0xf1/0x1b0 [ 600.418152][T22973] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 600.418179][T22973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 600.418201][T22973] ____sys_sendmsg+0xa68/0xad0 [ 600.418229][T22973] ? __might_fault+0xaf/0x130 [ 600.418262][T22973] ? __pfx_____sys_sendmsg+0x10/0x10 [ 600.418297][T22973] ? import_iovec+0x73/0xa0 [ 600.418331][T22973] ___sys_sendmsg+0x2a5/0x360 [ 600.418355][T22973] ? __lock_acquire+0x6b5/0x2cf0 [ 600.418386][T22973] ? __pfx____sys_sendmsg+0x10/0x10 [ 600.418416][T22973] ? futex_wait+0x29a/0x380 [ 600.514582][T22973] ? __fget_files+0x2a/0x420 [ 600.519221][T22973] ? __fget_files+0x3a0/0x420 [ 600.523925][T22973] __x64_sys_sendmsg+0x1bd/0x2a0 [ 600.528920][T22973] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 600.534411][T22973] ? rcu_is_watching+0x15/0xb0 [ 600.539243][T22973] do_syscall_64+0xe2/0xf80 [ 600.543769][T22973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.549907][T22973] ? trace_irq_disable+0x37/0x100 [ 600.554942][T22973] ? clear_bhb_loop+0x60/0xb0 [ 600.559656][T22973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.565562][T22973] RIP: 0033:0x7f26c539bf79 [ 600.570009][T22973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.589648][T22973] RSP: 002b:00007f26c629c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 600.598091][T22973] RAX: ffffffffffffffda RBX: 00007f26c5615fa0 RCX: 00007f26c539bf79 [ 600.606085][T22973] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000008 [ 600.614148][T22973] RBP: 00007f26c54327e0 R08: 0000000000000000 R09: 0000000000000000 [ 600.622148][T22973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.630149][T22973] R13: 00007f26c5616038 R14: 00007f26c5615fa0 R15: 00007ffe5ded0018 [ 600.638185][T22973] [ 600.641212][T22973] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 600.648486][T22973] CPU: 1 UID: 0 PID: 22973 Comm: syz.1.4614 Not tainted syzkaller #0 PREEMPT(full) [ 600.657865][T22973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 600.667915][T22973] Call Trace: [ 600.671186][T22973] [ 600.674105][T22973] vpanic+0x1e0/0x670 [ 600.678087][T22973] panic+0xc5/0xd0 [ 600.681801][T22973] ? __pfx_panic+0x10/0x10 [ 600.686221][T22973] __warn+0x315/0x4a0 [ 600.690192][T22973] ? mptcp_pm_nl_del_addr_doit+0xfb7/0x1420 [ 600.696076][T22973] ? mptcp_pm_nl_del_addr_doit+0xfb7/0x1420 [ 600.701968][T22973] __report_bug+0x29a/0x540 [ 600.706468][T22973] ? mptcp_pm_nl_del_addr_doit+0xfb7/0x1420 [ 600.712353][T22973] ? __pfx___report_bug+0x10/0x10 [ 600.717372][T22973] ? __lock_acquire+0x6b5/0x2cf0 [ 600.722323][T22973] ? __lock_sock_fast+0x45/0xe0 [ 600.727169][T22973] ? mptcp_pm_nl_del_addr_doit+0xfb7/0x1420 [ 600.733078][T22973] report_bug+0x16a/0x220 [ 600.737401][T22973] ? mptcp_pm_nl_del_addr_doit+0xfb7/0x1420 [ 600.743293][T22973] ? mptcp_pm_nl_del_addr_doit+0xfb9/0x1420 [ 600.749261][T22973] handle_bug+0x98/0x200 [ 600.753513][T22973] exc_invalid_op+0x1a/0x50 [ 600.758025][T22973] asm_exc_invalid_op+0x1a/0x20 [ 600.762879][T22973] RIP: 0010:mptcp_pm_nl_del_addr_doit+0xfb7/0x1420 [ 600.769381][T22973] Code: 01 00 00 49 89 c6 e8 68 33 3e f6 e9 26 fb ff ff e8 5e 33 3e f6 48 89 df be 03 00 00 00 e8 d1 72 1a f9 eb a4 e8 4a 33 3e f6 90 <0f> 0b 90 e9 ad fe ff ff 89 d9 80 e1 07 38 c1 0f 8c 12 fb ff ff 48 [ 600.789074][T22973] RSP: 0018:ffffc90004fdf160 EFLAGS: 00010287 [ 600.795139][T22973] RAX: ffffffff8b864406 RBX: 0000000000000000 RCX: 0000000000080000 [ 600.803099][T22973] RDX: ffffc9000d1b9000 RSI: 0000000000003083 RDI: 0000000000003084 [ 600.811061][T22973] RBP: ffffc90004fdf3b0 R08: ffff88802ee7fb37 R09: 1ffff11005dcff66 [ 600.819024][T22973] R10: dffffc0000000000 R11: ffffed1005dcff67 R12: 1ffff11005dcff65 [ 600.826989][T22973] R13: ffff888084bed200 R14: ffff88802ee7f080 R15: ffff88802ee7fb28 [ 600.834963][T22973] ? mptcp_pm_nl_del_addr_doit+0xfb6/0x1420 [ 600.840865][T22973] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 600.847028][T22973] ? rcu_is_watching+0x15/0xb0 [ 600.851790][T22973] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 600.858117][T22973] genl_family_rcv_msg_doit+0x22a/0x330 [ 600.863660][T22973] ? __asan_memcpy+0x40/0x70 [ 600.868249][T22973] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 600.874409][T22973] ? bpf_lsm_capable+0x9/0x20 [ 600.879085][T22973] ? security_capable+0x7e/0x2c0 [ 600.884022][T22973] genl_rcv_msg+0x61c/0x7a0 [ 600.888537][T22973] ? __pfx_genl_rcv_msg+0x10/0x10 [ 600.893580][T22973] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 600.899743][T22973] ? __pfx_ref_tracker_free+0x10/0x10 [ 600.905129][T22973] netlink_rcv_skb+0x232/0x4b0 [ 600.909896][T22973] ? __pfx_genl_rcv_msg+0x10/0x10 [ 600.914919][T22973] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 600.920197][T22973] ? genl_rcv+0x19/0x40 [ 600.924363][T22973] ? down_read+0x272/0x2e0 [ 600.928771][T22973] ? genl_rcv+0xd/0x40 [ 600.932833][T22973] genl_rcv+0x28/0x40 [ 600.936805][T22973] netlink_unicast+0x80f/0x9b0 [ 600.941574][T22973] ? __pfx_netlink_unicast+0x10/0x10 [ 600.946853][T22973] ? __alloc_skb+0x193/0x390 [ 600.951438][T22973] ? netlink_sendmsg+0x650/0xb40 [ 600.956365][T22973] ? skb_put+0x11b/0x210 [ 600.960600][T22973] netlink_sendmsg+0x813/0xb40 [ 600.965361][T22973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 600.970646][T22973] ? aa_sock_msg_perm+0xf1/0x1b0 [ 600.975593][T22973] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 600.980870][T22973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 600.986148][T22973] ____sys_sendmsg+0xa68/0xad0 [ 600.990909][T22973] ? __might_fault+0xaf/0x130 [ 600.995617][T22973] ? __pfx_____sys_sendmsg+0x10/0x10 [ 601.000903][T22973] ? import_iovec+0x73/0xa0 [ 601.005456][T22973] ___sys_sendmsg+0x2a5/0x360 [ 601.010127][T22973] ? __lock_acquire+0x6b5/0x2cf0 [ 601.015069][T22973] ? __pfx____sys_sendmsg+0x10/0x10 [ 601.020277][T22973] ? futex_wait+0x29a/0x380 [ 601.024809][T22973] ? __fget_files+0x2a/0x420 [ 601.029494][T22973] ? __fget_files+0x3a0/0x420 [ 601.034263][T22973] __x64_sys_sendmsg+0x1bd/0x2a0 [ 601.039203][T22973] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 601.044671][T22973] ? rcu_is_watching+0x15/0xb0 [ 601.049465][T22973] do_syscall_64+0xe2/0xf80 [ 601.053965][T22973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.060019][T22973] ? trace_irq_disable+0x37/0x100 [ 601.065035][T22973] ? clear_bhb_loop+0x60/0xb0 [ 601.069708][T22973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.075590][T22973] RIP: 0033:0x7f26c539bf79 [ 601.080001][T22973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.099599][T22973] RSP: 002b:00007f26c629c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 601.108006][T22973] RAX: ffffffffffffffda RBX: 00007f26c5615fa0 RCX: 00007f26c539bf79 [ 601.115965][T22973] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000008 [ 601.124013][T22973] RBP: 00007f26c54327e0 R08: 0000000000000000 R09: 0000000000000000 [ 601.131971][T22973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 601.139934][T22973] R13: 00007f26c5616038 R14: 00007f26c5615fa0 R15: 00007ffe5ded0018 [ 601.147913][T22973] [ 601.151268][T22973] Kernel Offset: disabled [ 601.155603][T22973] Rebooting in 86400 seconds..