last executing test programs: 2m21.642872811s ago: executing program 3 (id=1808): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r1, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)={0x406a, 0x2}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0600000004"], 0x48) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x3da}], 0x1, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000700)=@req3={0x6, 0x0, 0x7, 0x8, 0x2, 0x1, 0x1}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000800)={0x7, {{0xa, 0x4e21, 0x6d7, @loopback, 0x8}}, {{0xa, 0x4e20, 0x5, @loopback, 0x6508}}}, 0x108) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRESHEX], 0x50) r5 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000980)='freezer.parent_freezing\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x2c, 0x0, 0xb, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8880) 2m21.398817987s ago: executing program 3 (id=1813): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000002540)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000240000f"], 0x0, 0x46, 0x0, 0x6}, 0x28) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24c, 0x24, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xbd1}, @TCA_STAB={0xb4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd, 0x6, 0x200, 0x9, 0x1, 0x10001, 0x8, 0x7}}, {0x12, 0x2, [0x6, 0x1800, 0x3, 0x6, 0x3, 0x6, 0x8]}}, {{0x1c, 0x1, {0x9, 0x4, 0x11, 0x7, 0x2, 0x9, 0x4, 0x6}}, {0x10, 0x2, [0xcd7, 0x71, 0x635f, 0x6, 0x0, 0x1]}}, {{0x1c, 0x1, {0x9, 0x3, 0x222, 0x0, 0x1, 0x7, 0x8, 0x6}}, {0x10, 0x2, [0xb, 0xd6c, 0x4, 0x5, 0x7, 0x7ff]}}, {{0x1c, 0x1, {0xb1, 0x2, 0x2, 0x2, 0x1, 0x8000, 0x3d, 0x4}}, {0xc, 0x2, [0x401, 0x40, 0x7, 0x8]}}]}, @TCA_STAB={0x118, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x8d, 0xfffd, 0x6ac6913b, 0x2, 0x0, 0x9, 0x6}}, {0x10, 0x2, [0x0, 0xb7, 0x7, 0x9c0, 0x1, 0x96]}}, {{0x1c, 0x1, {0xff, 0xfa, 0x3, 0x7f, 0x2, 0x2, 0x7fff, 0x6}}, {0x10, 0x2, [0x1, 0x6, 0x5, 0x7, 0x4, 0x7fd]}}, {{0x1c, 0x1, {0x2, 0x7, 0xffff, 0x14, 0x1, 0x6, 0x20ba, 0x5}}, {0xe, 0x2, [0x627, 0xfffe, 0x200, 0x55ed, 0x3]}}, {{0x1c, 0x1, {0xb, 0xa, 0x7, 0xf, 0x1, 0x9, 0x9, 0x5}}, {0xe, 0x2, [0x4, 0x400, 0x4, 0x1000, 0x1ff]}}, {{0x1c, 0x1, {0x3, 0x3, 0xc8, 0x7, 0x2, 0x8, 0x0, 0x8}}, {0x14, 0x2, [0x9, 0x1, 0x6, 0x9, 0xf, 0x2, 0x8, 0x6]}}, {{0x1c, 0x1, {0x0, 0x5, 0x2, 0x5, 0x2, 0x4, 0x1af, 0x9}}, {0x16, 0x2, [0x3, 0xb87b, 0x3, 0x8, 0x0, 0xcf68, 0x5, 0x2, 0x4e3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6c07}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x7}}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x5, 0x81, 0x6, 0x0, 0xff, 0x2, 0x5}}, {0xe, 0x2, [0x1, 0x4, 0x4, 0x8, 0xe655]}}]}]}, 0x24c}}, 0x4000081) 2m21.200155614s ago: executing program 3 (id=1817): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @loopback, 0x4}, 0x1c) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x202}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r2, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001e00)=""/229, 0xe5}, {&(0x7f0000000300)=""/127, 0x7f}, {&(0x7f0000000600)=""/103, 0x67}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000004c0)=""/15, 0xf}], 0x5}}], 0x2, 0x11, 0x0) 2m20.901300447s ago: executing program 3 (id=1823): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000002700), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x8080) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x26044881) 2m20.414062314s ago: executing program 3 (id=1826): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x20000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x12) bind$netlink(r8, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x400}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) r12 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r12, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r13 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r13, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48) r14 = socket$netlink(0x10, 0x3, 0x4) writev(r14, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 2m20.413033708s ago: executing program 3 (id=1828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300001d0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000200fe8000000000000000000000000000bb000000000000000004000400000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe880000000000000000000000000001000000000000000005000700000000000a00000000000000fc01000000000000000000000000000000000000000000000200130001"], 0xe8}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=@newtaction={0x14, 0x76, 0x1}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000090a010400000000000000001000000008000a40000000000900010073797a30000000000900020073797a32000000000800054000000033080003400000001408000c40000000000800084040"], 0x7c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x3, @private1}}}, 0x108) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6(0xa, 0x80002, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xfff3}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000740)={'syztnl2\x00', &(0x7f00000006c0)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x1, 0x80, 0x27, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x9f511262305bda1e, 0x80, 0xd20c, 0x6}}) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r11, 0x0, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0xf8, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4f, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @val={0x0, 0xa, @random="f9c51f2cc1afa3957328"}, @void, @void, @val={0x4, 0x6, {0xf1, 0x2, 0x7f, 0xa706}}, @void, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @val={0x3c, 0x4, {0x0, 0x8, 0x84, 0x2}}, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x71, 0xf, [@erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @channel_switch={0x25, 0x3, {0x0, 0x30}}, @rann={0x7e, 0x15, {{0x1, 0x9}, 0xc8, 0x6, @device_a, 0x5, 0x2, 0x2}}, @preq={0x82, 0x41, {{0x1, 0x0, 0x1, 0x0, 0x1}, 0x3, 0x10, 0x1, @broadcast, 0x2, @value=@device_b, 0x800, 0x0, 0x3, [{{0x1, 0x0, 0x1}, @device_b, 0xfffffffd}, {{0x1, 0x0, 0x1}, @device_b, 0xffffffff}, {{0x0, 0x0, 0x1}, @device_a, 0xfffffffb}]}}, @dsss={0x3, 0x1, 0xd}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x38}}) 2m5.511678297s ago: executing program 32 (id=1828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300001d0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000200fe8000000000000000000000000000bb000000000000000004000400000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe880000000000000000000000000001000000000000000005000700000000000a00000000000000fc01000000000000000000000000000000000000000000000200130001"], 0xe8}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=@newtaction={0x14, 0x76, 0x1}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000090a010400000000000000001000000008000a40000000000900010073797a30000000000900020073797a32000000000800054000000033080003400000001408000c40000000000800084040"], 0x7c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x3, @private1}}}, 0x108) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6(0xa, 0x80002, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xfff3}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000740)={'syztnl2\x00', &(0x7f00000006c0)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x1, 0x80, 0x27, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x9f511262305bda1e, 0x80, 0xd20c, 0x6}}) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r11, 0x0, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0xf8, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4f, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @val={0x0, 0xa, @random="f9c51f2cc1afa3957328"}, @void, @void, @val={0x4, 0x6, {0xf1, 0x2, 0x7f, 0xa706}}, @void, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @val={0x3c, 0x4, {0x0, 0x8, 0x84, 0x2}}, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x71, 0xf, [@erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @channel_switch={0x25, 0x3, {0x0, 0x30}}, @rann={0x7e, 0x15, {{0x1, 0x9}, 0xc8, 0x6, @device_a, 0x5, 0x2, 0x2}}, @preq={0x82, 0x41, {{0x1, 0x0, 0x1, 0x0, 0x1}, 0x3, 0x10, 0x1, @broadcast, 0x2, @value=@device_b, 0x800, 0x0, 0x3, [{{0x1, 0x0, 0x1}, @device_b, 0xfffffffd}, {{0x1, 0x0, 0x1}, @device_b, 0xffffffff}, {{0x0, 0x0, 0x1}, @device_a, 0xfffffffb}]}}, @dsss={0x3, 0x1, 0xd}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x38}}) 1m55.685675418s ago: executing program 1 (id=2125): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) recvmmsg(r0, 0x0, 0x0, 0x40000000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)=0x80) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) write(r0, &(0x7f0000000000)="661b11fd5359a18af18c4fe85bd991b321ecb9c772370a1c0c0d08c4cdd6feb159b7ea467f37a4edfd52fc56d9279685d892e35cca04d8248fde1e0183367012059343a47af00575327e0172745f2147dae4be8b977e579808af4e3f026f4e0a334bbd1fcc0a8da9874587f24a924d7d219947983d5b", 0x76) r2 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000006c0)={'ip_vti0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r5, 0x2, 0x6, @local}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x3ff}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000240)={0xc, 0x8, 0x1ff, 0x4, r7}, 0x10) r8 = socket$igmp6(0xa, 0x3, 0x2) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'dummy0\x00', 0x0}) setsockopt$sock_void(r4, 0x1, 0x3f, 0x0, 0x0) (async) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f00000002c0)={@dev={0xfe, 0x80, '\x00', 0x25}, 0x7f, r10}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x8090}, 0x0) 1m55.260827356s ago: executing program 1 (id=2130): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000640), 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x582, @local}}}, 0x66) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0600000004"], 0x48) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x35f}], 0x1, 0x9) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01001fff00000200000008000300ac0414aa00000000000710000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000700)=@req={0x1000, 0x305f, 0x2, 0x2}, 0x10) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000800)={0x7, {{0xa, 0x4e21, 0x6d7, @loopback, 0x8}}, {{0xa, 0x4e20, 0x5, @loopback, 0x6508}}}, 0x108) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[], 0x1c}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000020000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESHEX], 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000940)=""/83, 0x53}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/time\x00') sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff2}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 1m55.008875187s ago: executing program 1 (id=2133): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) (async) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x9}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4080014) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {}, 0x2}, 0x18) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x7800, 0x8, 0xddc, {{0xf, 0x4, 0x3, 0x7, 0x3c, 0x68, 0x0, 0x4, 0x29, 0x0, @multicast1, @multicast1, {[@cipso={0x86, 0x26, 0x3, [{0x1, 0xb, "cb1714e0673151ea68"}, {0x7, 0x7, "0d1bccea66"}, {0x2, 0xe, "72903df3b16dd710758b9004"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x29, 0x2, 0x0, 0xa3e, 0x49, @local, @loopback, 0x8, 0x20, 0x4, 0xe88d}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000a80)={&(0x7f0000000080), 0xc, &(0x7f0000000a40)={&(0x7f0000000c00)={0x384, 0x0, 0xe7072103a12d8ffc, 0x70bd28, 0x25dfdbfd, {}, [{{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{}, {}, {0x0, 0x4, 0x3}}, {0x0, 0x6, r9}}}, {0x3c, 0x1, @priority={{{}, {}, {0x0, 0x4, 0x3da}}, {0x0, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{}, {}, {0x0, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r10}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7, 0x4, 0x8, 0xebe4}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff9c0}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x384}, 0x1, 0x0, 0x0, 0x400c811}, 0xc0) (async) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r13, 0x29, 0x2, &(0x7f00000000c0)=0xfa0, 0x4) (async) getsockopt$inet6_buf(r13, 0x29, 0x6, &(0x7f00000002c0)=""/19, &(0x7f0000000240)=0x13) (async) r14 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r14, 0x107, 0x1, &(0x7f0000000100)={r15, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) (async) r16 = socket$netlink(0x10, 0x3, 0x0) (async) r17 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000ac0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r18, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(0x3) (async) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="82210023b4e2694043479f2401e3d72fd858956fd530e8efc1dbbc60ad730029dcad3e28bd6cddceda3d535dcc13e30fc8881ba942d6dd43c099018088f6566eb55317d6a6095c094d37d1e4225c", @ANYRES16=r1, @ANYBLOB="000400000000000000000f0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m54.785077571s ago: executing program 1 (id=2136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x10, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x9c}}, 0x20050800) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) setsockopt$inet6_int(r1, 0x29, 0x1, &(0x7f0000000040)=0xe, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="800000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010010000000280005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000009010994423fd8232aa00000008000300000000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r2], 0x80}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x10, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x9c}}, 0x20050800) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) (async) setsockopt$inet6_int(r1, 0x29, 0x1, &(0x7f0000000040)=0xe, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="800000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010010000000280005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000009010994423fd8232aa00000008000300000000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r2], 0x80}}, 0x0) (async) 1m54.564719909s ago: executing program 1 (id=2139): r0 = gettid() r1 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000003e000701feffffff00000008017c0000040042800c00018006000600800a0000100002800c001980080001"], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000240)={r4, 0x2}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a40)={0xffffffffffffffff, 0x0, 0x25, 0x8, @void}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={0x1, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="400000006800010025bd7000feffffff0a000000000000001800088014000100a432634e00000000870004001048a2f508000500", @ANYRES32=r7, @ANYBLOB="0600070006000000602d25d9589384de1a9c1e21f48a053a164343a95bd2211489c6"], 0x40}, 0x1, 0x0, 0x0, 0x20000}, 0x40040d0) r8 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000700)={'syztnl2\x00', 0x0, 0x7f38, 0x700, 0x2, 0x9, {{0x16, 0x4, 0x1, 0x7, 0x58, 0x64, 0x0, 0x6, 0x2f, 0x0, @multicast1, @multicast1, {[@generic={0x82, 0xe, "d0af3b254f65475214fbd63e"}, @cipso={0x86, 0x21, 0x0, [{0x2, 0xa, "5e0f2633b59711f6"}, {0x2, 0x11, "a6dc0235c1fd66f084503c4b7912e5"}]}, @generic={0x86, 0x12, "45ce04c5649d704a15999455f1af51c1"}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000940)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x124, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={r4, 0x70, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, @in6={0xa, 0x4e1e, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, @in6={0xa, 0x4e22, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf}, @in6={0xa, 0x4e24, 0x0, @remote, 0x3}]}, &(0x7f00000000c0)=0x10) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x50) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000000680)={{r13}, &(0x7f0000000540), 0x0}, 0x20) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x205}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r16}, @IFLA_HSR_SLAVE2={0x8, 0x2, r17}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x21, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}, @ldst={0x1, 0x0, 0x1, 0x8, 0x8, 0xffffffffffffffdf, 0x8}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}, @map_fd={0x18, 0x8, 0x1, 0x0, r12}, @map_val={0x18, 0xb, 0x2, 0x0, r13, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x7c, &(0x7f0000000480)=""/124, 0x41000, 0x4, '\x00', r16, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x3, 0x5, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x167c428f}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="049c01000750050008001300", @ANYRES32=r0, @ANYBLOB="14000300765f766962745f776966690000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 1m54.15246072s ago: executing program 1 (id=2145): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x29, 0x6, 0x0, 0x0) recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/130, 0x82}, {&(0x7f0000004740)=""/4090, 0xffa}, {&(0x7f00000001c0)=""/91, 0x5b}], 0x3}}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/4090, 0xffa}], 0x2}, 0x8}], 0x3, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r3 = socket(0x8, 0x3, 0x0) connect$netlink(r3, &(0x7f0000000000)=@unspec, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000480)=@framed={{}, [@alu={0x4, 0x1, 0x7, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1}, 0x94) 1m52.015654559s ago: executing program 5 (id=2168): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x64, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r7, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r16 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r16, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r14, 0x0, 0x3, 0x2, 0x4, {0xa, 0x4e24, 0x140000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xe}}}, 0x3a) sendmsg$nl_route_sched(r13, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_PLIMIT={0x0, 0x1, 0x5}]}}]}, 0x48}}, 0x0) 1m50.875086301s ago: executing program 5 (id=2177): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4100000010003b150400"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB], 0x40}}, 0x48010) close(r2) 1m50.738935044s ago: executing program 5 (id=2181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000240)=ANY=[@ANYBLOB="010002"]) r2 = socket(0x15, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="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", @ANYRESDEC=r1, @ANYBLOB="ce82cdce20c5cc836f7ffddc1092cd848d7a3e0c8924c656377d73ffb67aafb0a6944b32e4609d73ea3bee1f4724a5f8c99efe4c0fb05d6375e2f06524f100e55c267c11bcdc6def9dbb86", @ANYRES32=r1, @ANYRES16=r0], 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r3], 0x184}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) socket$rds(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271f, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) close(r1) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000006800010025bd7000feffffff0a000000000000000c00088005000000000000060007000700000008000500", @ANYRES32=r6, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x8810}, 0x40040d0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x1a, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574682f73797a6b616c6c657230"], 0x38}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) 1m50.234767015s ago: executing program 5 (id=2186): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="d5000000000701080000000000000000000000030900010073797a3100000000000000000000000000000004"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="d5000000000701080000000000000000000000030900010073797a3100000000000000000000000000000004"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'veth0_to_team\x00', 0x400}) (async) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'veth0_to_team\x00', 0x400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$tun(r2, &(0x7f0000000100)={@val={0x0, 0x18}, @void, @llc={@llc={0x8e, 0xf0, "8c"}}}, 0x7) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'bond0\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x3b, 0x2, [{0xbff, 0x4}, {0x400, 0x5}]}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x11, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@jmp={0x5, 0x0, 0x8, 0x8, 0x5, 0xfffffffffffffffc, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x2, 0x6, 0x6, 0x50, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x1, 0x4000000, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000500)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000540)=[{0x3, 0x3, 0x6, 0xb}, {0x1, 0x4, 0x6, 0x9}, {0x0, 0x3, 0xf, 0x6}, {0x1, 0x2, 0x2, 0xa}, {0x2, 0x1, 0xb, 0x1}, {0x5, 0x5, 0xf, 0x5}, {0x5, 0x2, 0xd, 0x1}], 0x10, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x8, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8b, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000340)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x200, 0x70bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x9, 0x2}}]}]}]}, 0x48}}, 0x24040800) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x200, 0x70bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x9, 0x2}}]}]}]}, 0x48}}, 0x24040800) 1m47.3885468s ago: executing program 5 (id=2197): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)={{0x28}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWFLOWTABLE={0x0, 0x16, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0x0, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x0, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS, @NFTA_FLOWTABLE_FLAGS={0x0, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x0, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x0, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x0, 0x7, 0x1, 0x0, 0x1}]}], {0x14}}, 0x1d8}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r2 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x27, 0x4, 0x1d2, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd70000000000002000000000000001b000000080018004e214e24"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd70000000000002000000000000001b000000080018004e214e24"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r4, 0x0, {0x1, 0xf0, 0x4}, 0x1}, 0x18) getpeername(r2, 0x0, &(0x7f0000000080)) (async) getpeername(r2, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1ffffffffffffe42}}, 0x40) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1ffffffffffffe42}}, 0x40) bind$can_j1939(r8, &(0x7f0000000340)={0x1d, r9, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) bind$can_j1939(r8, &(0x7f0000000340)={0x1d, r9, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bd4e54d45303aaaaaaaaaa000806000108000604000400ffffffffffac141400aaaaaaaaaaaae0000002"], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000440)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0xa, 0xb}}) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=@gettaction={0x14, 0x32, 0x204, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1805000000000000004b6bfe917bf2f732edf9336782604fe46a6f2483000000aa808031917791e221515010fba615d97ae821f685e89fef090c34b97599d0880db140b5ac1e3c4b0662cf8731"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES8=r12, @ANYRES32=r12, @ANYBLOB="0000000000000000380012800b000100697036746e6c0000280002800500090000000000050004008000000014000300ff"], 0x58}}, 0x0) 1m46.118064884s ago: executing program 5 (id=2213): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r0 = socket$unix(0x1, 0x1, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x15f84000) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) bind$unix(r0, &(0x7f0000003000), 0x6e) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='+', 0x5ac}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)='a', 0x1}], 0x1}}], 0x2, 0x400c404) 1m39.034514943s ago: executing program 33 (id=2145): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x29, 0x6, 0x0, 0x0) recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/130, 0x82}, {&(0x7f0000004740)=""/4090, 0xffa}, {&(0x7f00000001c0)=""/91, 0x5b}], 0x3}}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/4090, 0xffa}], 0x2}, 0x8}], 0x3, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r3 = socket(0x8, 0x3, 0x0) connect$netlink(r3, &(0x7f0000000000)=@unspec, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000480)=@framed={{}, [@alu={0x4, 0x1, 0x7, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1}, 0x94) 1m31.761968503s ago: executing program 0 (id=2340): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r10, 0x1000000, 0x482, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$nl_generic(r11, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c009949f4aa1dad22177000fedbdf251900000008003d8004001d80c0a002282c10ff376bcccbee8d2e5973208b431776f0bd63f0715e84dbd93ebb5fd0810bda3d43a26a05ce642c613df4002f49ac314d49f137a7d9be7898cfa482fadc10ec1bc14b2e7398e5684308dd8f89ccbc33f2c6571070a4b0643739ca04f6b371803e489c2a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x840) (async) sendmsg$nl_generic(r11, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c009949f4aa1dad22177000fedbdf251900000008003d8004001d80c0a002282c10ff376bcccbee8d2e5973208b431776f0bd63f0715e84dbd93ebb5fd0810bda3d43a26a05ce642c613df4002f49ac314d49f137a7d9be7898cfa482fadc10ec1bc14b2e7398e5684308dd8f89ccbc33f2c6571070a4b0643739ca04f6b371803e489c2a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x840) 1m31.521201036s ago: executing program 0 (id=2342): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x5, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000081100000000000009500000000000000e6332fe64371c3d5a11ac3a30df31400c8fc969290ece0a169d2b6ec839aece0a0ae887c2226e5613c31a1b04c4c0eb6e214a3209ae5f58e218cbaf3237483aa753b87f363cbac92965727002a728995838256771a38472b2846a81d06654b2276c50467dd2f3113dccf425ebe1b5246daaefe0347f47195f5d56494bcf709eaf985df3e62990c63d82f89c691a3bbe06e51a95298b4ecd6cf961409de"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x94) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) socket(0x26, 0x5, 0x6) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000280)={0x9, {{0x2, 0x0, @multicast2}}, 0x1, 0x2, [{{0x2, 0x4, @broadcast}}, {{0x2, 0x4e20, @empty}}]}, 0x190) socket$nl_netfilter(0x10, 0x3, 0xc) 1m31.377418211s ago: executing program 0 (id=2343): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000040)={'virt_wifi0\x00', 0x102e}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0a7b071b4958fca68f51c939a0ed294f40000000", @ANYRES32=r3, @ANYBLOB="000000000000000020001280080001006772650014000280060011000000000006000f0056080000"], 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f00000005c0)={@val={0x800e}, @val={0x1, 0x1, 0xbb, 0x1000, 0x8000, 0x21}, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast2}, {0x0, 0x0, 0x8}}}}}}, 0x38) sendmsg$inet(r1, &(0x7f00000006c0)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000480)="cba02e1b7a071d73e9d4fdfc7ed6338e7c33f9c2f64b77f19b2a411acdf7f51e903bfdd4435b7610549100a62c3432f760ede4c0f31af44883dc5ec7afcbed2ba2685cb37223e520c691d77bc26fa312a3694dc875f148547d2b992195bd526803dabd51e8d14362132f43a2cd27452a231c06b50f3afa5915a291db79b81794e5f397ef2a6ec22821532e60ff5aa5502dece833c8025c8a481d131c2c48b0e25852eb36743467d735eab072091575320c68baa471b9f518eb57e7d29cf48c4c276192b6979b19515918496df5a35b5f88fe7e2a4c0a63e3ccf15a37f0bd3924556c4a7005ff0a6c740cfe", 0xeb}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000000380)="fb6edb9bf7160eaadbaf948dbad816ce0b4b829c34a60d092c2e24905248899351a43e65dbdfc21ede27b7c014344eac3e94f48de04814825c4e0fab45459f6571ec14cc16b78151a0c4893fd4d40d8152b5db7148368e82d0444f7d9eb9f392cea0802d0c21b66164fdc63c8a14c9dab163a03f5d2efade8551647a969d7ad23b08223688a418993de821", 0x8b}], 0x3, &(0x7f00000007c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10000}}, @ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @end, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @local}}}, @ip_retopts={{0x78, 0x0, 0x7, {[@noop, @cipso={0x86, 0x12, 0x3, [{0x7, 0xc, "aa325d6e987895dd2abc"}]}, @lsrr={0x83, 0x1b, 0xb6, [@multicast2, @rand_addr=0x64010101, @rand_addr=0x64010100, @local, @loopback, @multicast2]}, @rr={0x7, 0xb, 0x54, [@empty, @dev={0xac, 0x14, 0x14, 0x22}]}, @timestamp_addr={0x44, 0x2c, 0x6f, 0x1, 0x7, [{@private=0xa010100, 0x3}, {@empty, 0x3}, {@local, 0x9000000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@empty, 0x1ff}]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1ff}}], 0x140}, 0x4000040) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000440)={r0, &(0x7f0000000400), 0x0}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff05000700263a3a0914000600626f6e64300000400000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="8b4e0cc679cf3d5df3663dda11262e97ef19aa658c0000eb", @ANYRES16=r11, @ANYBLOB="20002cbd7000ffdbdf25010000002900070073797374656d5f753a6f626a6563745f723a69707461626c65735f636f6e665f743a7330000000002600070073797374656d5f753a6f626a6563745f723a63726f6e5f73706f6f6c5f743a733000000008000500e0000001050001000000000014000200"/134], 0x99}, 0x1, 0x0, 0x0, 0x4}, 0x40810) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e1200"], 0x44}}, 0x48000) r12 = socket(0x10, 0x3, 0x0) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) sendmmsg(r12, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m31.31355387s ago: executing program 34 (id=2213): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r0 = socket$unix(0x1, 0x1, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x15f84000) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) bind$unix(r0, &(0x7f0000003000), 0x6e) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='+', 0x5ac}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)='a', 0x1}], 0x1}}], 0x2, 0x400c404) 1m30.537047247s ago: executing program 0 (id=2350): syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000a00"}) (async, rerun: 64) socket$kcm(0x29, 0x7, 0x0) (async, rerun: 64) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000080)={0x0, 0xe8b}, 0x8) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x4) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000100)=r3) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'macvlan0\x00', 0x0}) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) pselect6(0x40, &(0x7f00000001c0)={0x7, 0x0, 0x100000000000000, 0x0, 0x400000000, 0xfffffffffffffffb, 0xffffffffffffffff, 0xffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x100005b, r4}) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069003e000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) (async) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000280)={@private0={0xfc, 0x0, '\x00', 0x1}, r4}, 0x14) 1m30.358148404s ago: executing program 0 (id=2353): r0 = socket$kcm(0x21, 0x2, 0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x5) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) socket$igmp(0x2, 0x3, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '\xfe&'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000000000000000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x20008000) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab0785e34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) socket$kcm(0x21, 0x2, 0x2) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x5) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) (async) socket$igmp(0x2, 0x3, 0x2) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '\xfe&'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000000000000000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x20008000) (async) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab0785e34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async) 1m30.168827275s ago: executing program 0 (id=2355): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0xa, 0x7, 0x9241}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x235, 0x2881}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000080}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x38}}, 0x0) ioctl$BTRFS_IOC_DEFRAG(r4, 0x50009402, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000740)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)="1b", 0x1}], 0x1, 0x0, 0x0, 0x8044044}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000500)={0x1, [0x0]}, &(0x7f00000005c0)=0x8) r7 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r7, 0x29, 0x21, &(0x7f00000000c0)=0x46, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x4000001c}]}}}]}, 0x44}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000019480)={0x48, r10, 0x1, 0x20000002, 0x4, {{}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}], @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044040}, 0x20008000) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, 0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000000c0)={r6, 0x100}, &(0x7f00000001c0)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000085ffffff00000000fe1f00009500000000000000b7080000000000007b8af8ff00000000b7080000be0e00007b8af0ff00000000afa100000000000007010000f8ffffffbfa400000000000007040000f0fffcffb72300"/100, @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x40000}, 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, r0}, 0x94) 1m15.107048598s ago: executing program 35 (id=2355): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0xa, 0x7, 0x9241}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x235, 0x2881}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000080}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x38}}, 0x0) ioctl$BTRFS_IOC_DEFRAG(r4, 0x50009402, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000740)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)="1b", 0x1}], 0x1, 0x0, 0x0, 0x8044044}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000500)={0x1, [0x0]}, &(0x7f00000005c0)=0x8) r7 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r7, 0x29, 0x21, &(0x7f00000000c0)=0x46, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x4000001c}]}}}]}, 0x44}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000019480)={0x48, r10, 0x1, 0x20000002, 0x4, {{}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}], @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044040}, 0x20008000) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, 0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000000c0)={r6, 0x100}, &(0x7f00000001c0)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000085ffffff00000000fe1f00009500000000000000b7080000000000007b8af8ff00000000b7080000be0e00007b8af0ff00000000afa100000000000007010000f8ffffffbfa400000000000007040000f0fffcffb72300"/100, @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x40000}, 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, r0}, 0x94) 1m10.768132516s ago: executing program 2 (id=2581): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000400)=@ethtool_cmd={0x3, 0x803, 0x401, 0xe681, 0x1, 0x44, 0x6c, 0xd, 0x5, 0x2, 0x400, 0x1ff, 0x2, 0x64, 0x1, 0x5aa, [0x7ffffffe, 0x3704]}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x20) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x1c}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000000901010000000000000000100000000900010073797a3000000000"], 0x20}}, 0x800) ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000880)="5e4b74f7a7614f3d6e297db300c6b73b112276fd45b644741b3dddc09d3f41836db6cac46d9ac8b63ecc8d1c96edec7faae27fbb06ad8f9bb56aaa2c9d836797c6af7f645ed557c7b448b272da414c26276e5a5ef6a49ab3c94b94b8f4dde803b35c30a0ada8f6eef1d51e3f2af91953df3bbbeae304c318a33a83c907d6f180617328c274fb69ad4f54ec817cc9252742708f43dbdc0bd99e1dd07c8ecdb9aa97d00a3d33977c465078d0cc88a050c1c40f7b2384946ad3c8103657214bbad0dae9782ef6688215d58a3f6c9e474de71f0a5e097a04f8956b78570123c1abbd233f") r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x2b, 0x1, 0xfffffffb) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="03000400000004000b2d0b24c01e3d3bda3c486200000a00000000000000", @ANYRES32, @ANYBLOB="800100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000500"/28], 0x50) socket$kcm(0xa, 0x922000000003, 0x11) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYRES16=r2, @ANYRES16=r5, @ANYRES64=r1], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r6}, &(0x7f0000000340), &(0x7f0000000540)=r8}, 0x20) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f00000001c0)={@local, r9}, 0x14) close(r4) socket$netlink(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)='/proc/sys/net/ipv6\x00\x00\x00\x00\x00\x00\x00\x00\x80=\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x30) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(r10, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) 1m10.401074786s ago: executing program 2 (id=2582): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x18, 0x3d, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x37}]}, 0x18}}, 0xc000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x0, 0x1000, {0xa, 0x0, 0x0, r2, 0x0, 0x5e}, [@NDA_DST_IPV6={0x14, 0x1, @private2}]}, 0x30}}, 0x4000040) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SECURITY(r3, 0x11, 0x4, 0x0, 0x1000000000000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x2}, 0x98) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000180)=""/205, 0x1025000, 0x1800, 0x2bd, 0x2}, 0x20) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r4, 0x891e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71187d000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m10.247766358s ago: executing program 2 (id=2586): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$alg(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="dcc4", 0x2}], 0x1, 0x0, 0x0, 0x40010}, 0x8020) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000800)="ca7a", 0x2}], 0x1) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000140)={0x5, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}}, {{0x2, 0x4e23, @multicast1}}}, 0x108) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80020001000001}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x0) 1m10.061424721s ago: executing program 2 (id=2588): syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="80000000ffffffffffff080211000000080211000000000000000000000000006400010000060202020202020100040601006707c46d2d1a0100110900000000000000d40009000f0000000008010000000b7121760603043200ff0000000000000000b158861a3951577b1452138918b12e004130da"], 0x63) syz_80211_inject_frame(&(0x7f0000000080), &(0x7f0000000340)=@data_frame={@msdu=@type01={{0x0, 0x2, 0xd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x7918}, @device_a, @initial, @device_a, {0xb, 0x3}, "", @value={0x1, 0x0, 0x3, 0x0, 0x9}}, @random="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"}, 0x8cb) 1m8.720308696s ago: executing program 2 (id=2598): r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x2, 0x6) bind$unix(r1, &(0x7f00000008c0)=@file={0x1d, './file0\x00'}, 0x6e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r7, 0x11, 0x0, 0x0, @void, @value=r6}, 0x20) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000400)={r6}, 0x42) close(r6) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)={@ifindex, r7, 0x11, 0x0, 0x0, @void, @value=r8}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@newlinkprop={0xb0, 0x6c, 0x4, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x22001, 0x20000}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x4bd33}, @IFLA_BROADCAST={0xa, 0x2, @remote}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}, @IFLA_PHYS_PORT_ID={0x1e, 0x22, "b9a44b4f75a9b3047b7fe8fd5741d7886e3320e5751e21a60a2b"}, @IFLA_IFALIAS={0x14, 0x14, 'pim6reg0\x00'}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x19}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e21}]}}}, @IFLA_PHYS_SWITCH_ID={0x16, 0x24, "abcbe14e4cf6b97c9d4465aa3f0a00a07451"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x91}, 0x2400c000) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0xf, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}]}]}}]}, 0xb0}}, 0x0) 1m8.465777211s ago: executing program 2 (id=2600): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x46, &(0x7f0000000100)=0x8, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x46, &(0x7f0000000100)=0x8, 0x4) unshare(0x6a040000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x7, 0xb, 0xfffffffe}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) (async) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) unshare(0x2a030200) 53.387276742s ago: executing program 36 (id=2600): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x46, &(0x7f0000000100)=0x8, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x46, &(0x7f0000000100)=0x8, 0x4) unshare(0x6a040000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x7, 0xb, 0xfffffffe}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) (async) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) unshare(0x2a030200) 5.163927068s ago: executing program 7 (id=3347): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000240)={0x1100, 0x2, 0x8000000b, 0x8}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqsrc(r1, 0x0, 0x21, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x6e, &(0x7f0000000600)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @local, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, @dev, @empty, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @cipso={0x86, 0xd, 0x0, [{0x0, 0x7, "4289b015b1"}]}]}}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0x3, 0x2}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r4, 0x0, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20002, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000008680)={0x4788, 0xd, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x2178, 0x3, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2fe}, @NFTA_SET_ELEM_USERDATA={0x35, 0x6, 0x1, 0x0, "5da52ffae7727db88896d34f4e98b9b4bbe4c1c2c6c83f9cfc0250edf52383b1dd72f6a7802e2f7f01e52fb186bf689889"}, @NFTA_SET_ELEM_USERDATA={0x4c, 0x6, 0x1, 0x0, "c7204ca64849308c9ec2cbaf7c3d80a275560be5a507a498ef4f26de12ea81bfa3364442c258701124316a8fdca480cdab200a47a3372b8de47290cdef19c675b78610302d9ce6d7"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x260, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x150, 0x7, 0x0, 0x1, @match={{0xa}, @val={0x140, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}, @NFTA_MATCH_NAME={0xc, 0x1, 'rateest\x00'}, @NFTA_MATCH_INFO={0x99, 0x3, "55341fa87deb09c1670f363a73302abb5293da5bbd3152f63a3eb319a2fe32d04b0d147362c32a264956f612fb51e32ec3fd165dd9a94a4d372df00caab10df99b8f7ebe9848acd75dc17f73780e120a1a2d944c5de40a76b5f6b3c2d8558762ace664bd588fceaa974bde7283f7c70746df724152709daebea51a83319b46f3dcf4567be8abe936218353431b88eff3ce49f70bb6"}, @NFTA_MATCH_INFO={0x5b, 0x3, "070f4da81ec2ba202ce5e02eaa3dec251aed43a37471719fab44a9a3efc5f0877f40cf07a979cbe7f831a333ec76c9cc59600b17de4401df3fa09cefbbd87999d45acc7939208c62496e282ee79d785f922e73a74894e6"}, @NFTA_MATCH_NAME={0xe, 0x1, 'multiport\x00'}, @NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}, @NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}]}}}, @NFTA_SET_ELEM_KEY={0x80, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x71}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xa8}, @NFTA_SET_ELEM_EXPR={0x58, 0x7, 0x0, 0x1, @rt={{0x7}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, {0x1268, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x1224, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x75, 0x1, "caa3f154399635706c768dceb78885f4eb8b3680819a85a424713f02a8204358d7cbea941b6f98f7960e14a5f5b39aad45e2a5802eba03ca21589fe85fc9dfdc5312e9b631d3db70e006b361e1296ffd2a175edcebd9e63933fcac415ee558852dd9e36811722d3149616ce043499406e6"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x25, 0x1, "f04032db9fef377e333a88143f0201de4a54d83207dc9611a5606cc7b35c3ecdf5"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x320, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x12, 0x6, 0x1, 0x0, "768aa211d72c346adafddebd9ecc"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_KEY_END={0x68, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_KEY={0x110, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xf3}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xac, 0x1, "1942cd91623237785bdf9bf280404301ebf27d2f7fb4f4ed1542c59514cf359641948c6e12801273c471da9a96d6547b2f2fbd7521dcc56093bbd8cf05dd32d2b13c0b089c8c5e17c074bbbf3c0f961ab02e8f0a160d4c41187ed175d1e711758ac92d95adf68c9515af5b1e7cbef8c3e1d88fb505be1622192fb9275b7b0178b4e4b0f6b62a979d1f8a57d637e9525e8effd01b47c47660a0e9f8de892b126993ac8a6c179f5e9b"}]}, @NFTA_SET_ELEM_DATA={0x14c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xeb, 0x1, "a4dfcd7109f7108a5902b2b841201fad383c286ec817d2fc843fef40d305903d1367e2a8c954749405d2edf0f02e3c2f95d90156801d93b826f8f6f81c3bd0a6aba38488e337d8c0bdafb28451a725cecbb23c035066c8dd750fb1680008a2633bf272743c60a1cf4e450df43a277aa711a28fcb3285fb2f35861fd802598d3d73bfd071dd4b01a0017cebfb188e2e7987e00ecc33657ed5ae355546e58f769f9d0a0f0bcabe55380863ea6cb6d3df2aff7f87ac9e537b60226ef44adebc1cbbd6e7d86e0b0b9f526cf6a8f2639ddeb74c53d11b6a25019a18f1707a500aa64cebab46ebdd2741"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xcd7}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x404, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xfc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xeb, 0x1, "44f4d3577cc588975c0a7308b3e1601101249e8be80f6557e98ac55292cebc3b98fe13fd6edc07813fdf3ff688132b581c11dd308ba488dffe5f285d0702cf418866aa5947b948a7eb57a8500fa9b37374c1e1181175f2a38a8b72498bcd57f94c327ce539e8434a2322925b54d9291932af26fed0a0f624422c8c16aee8780a5eab51e2009ca6e77031e2a38cf8b6976b67bd4de9acbb5f18595f105e3c181d8f8b4cf7f4245d350ae2cdcdc14b3b3054f9482038706830f920cacdc772114703b2da7242e0f3070dcb0c989c2e8f80f4e9f1a4d285ea4c5ac071d20090d6416b587b84593735"}]}, @NFTA_SET_ELEM_USERDATA={0xee, 0x6, 0x1, 0x0, "231e2c2381112c5afec1adb88c249e2dd133f0f42df42bc51bb7b474d26022b09868685c4eb379878b46a29d8ce2b7911fb857b1e1055d73255b6cfd3552441ecfd7d3ba1d8e8bd2e6050ec23a502fa982dabaa59b55f1e006028b98fa74447de90879a88dc73de113d24f62b1397fa5f9bc114e9894caa6e418afbd4a9ec9d797341de6b5d43e63b2500ce235e7f64d982efcac06f53c09d2a32bb4b8f883d51c008aea6386129e43100ca30b806236bee31d6f57a1053ed5751be7451587289a2a9e64eacd5098a8c0841a151d579b7afae3392ae1e38104c616b972b9fc242af43908943673ba214e"}, @NFTA_SET_ELEM_KEY={0x208, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x5a, 0x1, "93851534341852017d1277cf7e9468f1b7ee483ddbfaaadc31398d9c9e7e7e66a92a5d8b64269640e03ecf1fbfda7f5cdf6ab0816fae422ecd37165ba152f9da7e53c19955322e366c2dd2665509f29f0a909cf2c7be"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x27, 0x1, "47551b8631c2c33ba44484a520b3ef7d556c36ab7e798636c8ea95a2f9ee36131da3a9"}, @NFTA_DATA_VALUE={0xb, 0x1, "2ac8baa135e5f3"}, @NFTA_DATA_VALUE={0x87, 0x1, "fa81ea7f754843330b716a46931fb6567ff42317d6f59262fb2b91b01f01e83e3f61b9a47f6487a734f1722b03155e442f4f06c178ca832f4e230f0e1a75ff317d17a8760cf4d5ae7ba6a49cc4dbe6f77ec3467cbe467934804112424ee83d0dae19d82aff224882cc88198aa209e54424aa8cce356da48183fb9ddd4496f0a5b0f56a"}, @NFTA_DATA_VALUE={0xb5, 0x1, "e9fd452638cd0eff5b931c025eea10e39aa1afa21f4fb1c0c737e634daa6e40bc5098ca236c6066688a271edbcd6435b906bef801fe12d90cddbc38de7f5b2bb5388d00adb406a359251a1b99dd3f2a9acae8df8b813137a545b5c9b3686261163a3b0d834e0d1bea5069fbe4fc0887a08fa23b16b14703d3785e1e46d55f727c6fa9fbdc8a5a2c7786af3f81dd60a70ec843d96f5d1f0d625eee028258e272ca10faa60dc4b870816f9eec266195be598"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x4c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xc02}, @NFTA_SET_ELEM_USERDATA={0xdf, 0x6, 0x1, 0x0, "9a2e9e1a3abe17885d352e5294d7b302c8630c15d26531da0fbd1f039bbf2486b16e97856405ff64f4fe09a9a2d41f5e03c313f2606c0b4b34671f25ecbfccf1e97b7e13cac6d82ab096b1dafd9ece65095971251bc89a5227aa2a1c99ec9dd7a6060fd8c06d083a6d1488d3e57f15189f8791d2e4f4e0246f895aa61460efdc06e03413d3e77ccd4dd2386ff2e404dccb4a79b5f3497afe512b2ebb501166a0f5f07ef6f5a8db6078bb5db37acdd378a9a3fde363401c620dc7db875bffc9ab77384efb2db7429fc3c7b8942b7a69738549d87da5810d4655de55"}, @NFTA_SET_ELEM_EXPRESSIONS={0x40, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0x0, 0x4, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_SET_ELEM_DATA={0x7c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPR={0x58, 0x7, 0x0, 0x1, @ct={{0x7}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, @NFTA_SET_ELEM_KEY={0x290, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xb1, 0x1, "54bd3b5575cf13d4ce7c85ad3c3e9a81abf0d9aa08c91b39b23ccb39d73fc322ad093da0264de808ece4d8f5f44b23ab3532a983b8b2380e82b9526b5dd6b9d67ce9bd6c64675c42403937a7d891319467aea3df0e62fa7b0f8a0eecad6b41dcd0eb98d3c23e4bd9085d0ce7ae4b93ab4ed4afc72d6e6e7d63841acf99666cb903bbdf869f47b49f7782970590d4922997494d154ffcc75f34cb81e1ca295a6ba5f347909a0570082dcf6e966d"}, @NFTA_DATA_VALUE={0xb2, 0x1, "171080b099f446710989a6637d5ffedf24aa930d9046ce17ee63a25023c263335b468311a9f10025dd6565b05c473a7735ca9fa915644200e347ce2f1b28b9c299c9b60dcb8b66196a8f0a0216c47c5392f22bbe2d3a7b10f5bde33e572bf93f489ccbae69a68c4c863ccdfbefd11bf415f6a5201011fc7f71e9c69f1ed81a12c6c784b53b316683aa9fe7904e0e025d0a018d12f774dd361ec47d034970c2b52ca3edadd0b0f488b3db40e13cd5"}, @NFTA_DATA_VALUE={0xd3, 0x1, "fcc9622c9089fea0dfc17a5fabec9b327b60c9a857130124053be7d9b897548acd1b4cb7565ad1c81cb85898e8adb33459ff6b5860d318266e67467da053ab09b6aefbf13bb40f73e2fe795192dd6b642a40f51fb666058c5d342e1de91e6dbd48f3f7efeefbc49755960d737642973092897df8e2271a157fa83d6008777b9b433e34f3a831c132e336cf9b0f914af99204e5979144a76e85d45fa5d3c007033fdda513baedd8552e0d6d5998cd4a029a602402e7fb66efae410c42712e17015f7d1d51bc461a1e40be2b841b02ae"}]}, @NFTA_SET_ELEM_USERDATA={0x17, 0x6, 0x1, 0x0, "a15581bb0cb788c054d14a167567b0deea5f55"}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x21a4, 0x3, 0x0, 0x1, [{0x3e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x2a4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xa1, 0x1, "a337ad5a37e46a926bd0630c866db7152c13a7440676c5fc4f09f57492371331f104ac8d1c0b258c024d261940bde89ea7f5ec44cd974c13d129446c884dddcd02f9b1da31e3f64a588deb20cc0dc68954687e9a11759313bdf737a714208289b7ba43acc8f553b0053edacf0ebf16bed18c2dd7d77d60361501522661727c05c22d98e0c18377b55370a0f8864eaf9c615156b42cec91032cdbdb4868"}, @NFTA_DATA_VALUE={0x8e, 0x1, "b111756888f440c1f25fa2fbb621f777667b36604fbbacc4ba2a430413722c2234af63ef4a711a8213266e3cda20787d755b3df248f1c0a36dde9df6e4765199565246f4b4f6ab20680899bcde92ed6493a821c40ea11e40487eb70685ca6f6cf967fcc5e10aae10d586e3e35f853386bb5d95ee6c1f7dc7d8eabd8c7b92305d1807bba369eafdd9a569"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x5e, 0x1, "1c8537f3a95e40c6f25037136c8155a1de28abf24695a65b0ff488cb00fbcace456e2b51290f3ea1792c921b8129e20b4e8acd0fde6c952311b894ef763cab61f8a6edc1a063d39b5c6d64c6615b3a7f9fca32ee727ddf049083"}, @NFTA_DATA_VALUE={0x7c, 0x1, "53daad361646f199b43ec8a0c2d549bbe1b2f6945536af5275595fb8392829b376a68be2b5d6bf93f35a0392e085f24b66ffdb6394b722cbf70a9d865a5502f9b12d23bf2d3dc7bcf7078369495b038cd6650d4fe9b7d199936e65a7d1f958c73512701bb25af0e252df54d912519fbebd8964c31fe69f20"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_DATA={0x12c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x70, 0x1, "44b618d398f482283546b39fa3bfba893cc29e3de067e6e6b4e0f94e2bdcbd29bcb10529c4230e3285a2b5ff9113df93b76255b320cbd204818548ea13f4c34c93284222831ede5f92bf3d111cb9a52bb22b964c5cf3ebdaa03a1cc7977653c1737a0b0a8a20f36de0ae68d6"}, @NFTA_DATA_VALUE={0x7c, 0x1, "73b8029b6e3cc27ba4450f3dd6181150cb1dac638ce9693f811076f97018a85a1f7cf87380b231c66d5dce2fae0b15703e3329eb1ca695d3e3ab1ad044aa6eae0dfa4cb085c0bdf2cff7c8f15813dbaab7d3dc4a401582bf97e973cac8c6088ff621ad5da908d13a8b9d3c8e2bb8fdba72bbbeea1f28a9e7"}, @NFTA_DATA_VALUE={0x3c, 0x1, "deccc198bc8525dbd89f00a02cc2911a6847512390ab2361d0fe59150e469ad06754f7525c693e72a4a394253ceb9468486905d7ede40c8b"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x318, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x2d4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xda, 0x1, "5aae99168761c09679131c0917ee069e8cf11d6e3edabee87e9213672b93ba07df6227d07ddc3bd4edd61f7ef62163ffd3e60121d151e6a12d9cd9875c56eb13388221f7ec73db47545e08d30224d7dec5ae08080683ceaa213ce68b11bc8aae88cad41e4ebea11115acb24952f39bb718afe2a59f6aa7ee869e457c5fcffc0c5e9076d08c2384cc8d3f0a88529e78c1422ef133777061da9ed354de9cdc149ae325f7ec8536cdbedea4642d711b968f2913f43807e6714354515885d07ae1191c898f1f539127b17a0f657ab4ebf09f5ee94bf6de88"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x56, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xa8, 0x1, "980b5c0f25c440066ee0357aff783e8b7af8db5e622557ad56dc00bb49addf325ec799ec64931b1a1c3cd3bcd45fef708fdc900fbdd2d67aabc43bcf5f2a12557c271816d9594226fc1227638a584b0eead388fa9c3148a552c9ff9c794b4ecea7672df68749e40bfd04018753836fbb332d6c71551faa75320e790c262ac7a6878869bb494800dc8668fb7ccd04f7e387ff19460284428e0d3d2bbdbe1d1ded8b94533d"}, @NFTA_DATA_VALUE={0x35, 0x1, "5e5696f3df7865bfd81e09a9461a9b2f70f8ee59b325fbe96133fdcd608b736100d0236d84e2b891b6fd27a0955b0a3b84"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_EXPR={0x2c, 0x7, 0x0, 0x1, @last={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xff}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x1308, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x250, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x56, 0x1, "2d19b36b8822c1e54625e782ea74980270fade9062ef841c6da878f82d8ee666b77ab2f99396aa911382643548bb667ecb302c858c3a2bd9438491dae2264506ee2b313f915b59f128c4bba69355009a06a7"}, @NFTA_DATA_VALUE={0xe2, 0x1, "08cddc689bae40165366267ddb6b1a01f4e96acbaf1755eadbd9480858c7ec6eb3ee2ab8cab711ea755a0fe7a4d9340ec9f40c3ae5f4dd4189bad58a2ea9b904d9e2763a521c9125450d249f2514a63f641e47f5f3928e7ea0f5cc90f9df6de6754b1f28ec601920b111de9e472b7cd39202f62083baeae3205a5849fb28ca00c6a83131a553962aa4b6afe69e021d494f33a34cf0ba706ae5bcc9fa382b1845c3c4fd87f69d68e9834319459b161f63dd48ed47aa7ac0fdd995152f388d19a56d463e2e846eb72610ad259c4e800c71a802fbb5987334982ce9d8098f86"}, @NFTA_DATA_VALUE={0x86, 0x1, "3ff101801afaa02573e5ed51d42de6c4d8b087d1794f2b0263fee03baaba7bb9ce34eb5ca5412b27e756a6eb31080ee51834a7dc24e7cc4b0cd7ef735235f91e4bbb9e32c508e0b2b950f15476feb1fd6ca9f4c10c5070b655a46299df249184b3520941d9a3be6bd42d7b0e9e9a75220009393a2f052898fe1256abafae7a4929c1"}, @NFTA_DATA_VERDICT={0x10}, @NFTA_DATA_VALUE={0x76, 0x1, "80826403542f0eb05c6583bdc226bdbed4c483308989c47387b49ba299286b1c42c84f899316adaa0874f758c3a2c0553f2a63b9e04978ad1187d3dcf38bc99da3b58c522b1aaf182cfa41e7f24eef679f082ebf06e4ae2a69ef4ea44f607c09c1a5d55ad2dc6bca28d8e7fe6b6d41f75beb"}]}, @NFTA_SET_ELEM_KEY={0x10a8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}]}, {0x7a0}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x428, 0x3, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1000}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0x6d, 0x6, 0x1, 0x0, "50735884c642146f864f4adfbb9f4ecc81980ffed90739718bdde939d4b08d534695ffa9d2cee52fb8ca21bc35f7010c1965c3f7c43b3f8b7c73594c0b05af037724ec1c761ced30ddd61924b1c992d082ebe6806fc9fe8cbacb252d16c7e4cfb2222fc53f9742d950"}]}, {0x2a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x40}, @NFTA_SET_ELEM_EXPRESSIONS={0x154, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1e}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}]}}}, {0x38, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x9}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0x4c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}]}}}, {0x40, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x24}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x22}]}}}, {0x44, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xb}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x900}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x13}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x144, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xa5, 0x1, "dd4e806910bf9835b3cb31e78a1d752da6d41dd406e663c9cb2594ad2de6559264f7aa96c952fed927f8d4e41348ac07d8ed88a81fb5fcced326196e05afa8b162950dfd0dd06339d6b9318236a4af3e6e50f19310af349106dbcf4e05d285fd92d0f9f8be2c358d03e0050b673fa28f7c325a896cb657ec4dfc9ef4578ecaa75e1bda651c1432598bf9bea0d218f1d22dafb17aa29787af42bcc87822ec498be2"}]}]}, {0xf4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xf0, 0xb, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x5}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x40, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_OSF_TTL={0x5, 0x2, 0x2}, @NFTA_OSF_TTL={0x5, 0x2, 0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x48, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x13}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x4788}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 5.046893155s ago: executing program 7 (id=3349): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'nat\x00', 0x0, [0x8, 0x7fff, 0x3, 0x0, 0x7]}, &(0x7f0000000080)=0x54) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1daa000000000000711019000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) 4.936012089s ago: executing program 8 (id=3351): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000001800)=0xffff, 0x4) readv(r0, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/217, 0xd9}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000080c0)=@newtaction={0x58, 0x31, 0x901, 0x0, 0x0, {}, [{0x44, 0x1, [@m_nat={0x40, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x15, 0x6, "02122a1364ca4168600ce2c275478c859e"}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xc8}}, 0x0) 4.923952824s ago: executing program 6 (id=3352): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0xfffffffd, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x40000000, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x80) 4.748466209s ago: executing program 6 (id=3355): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000190001000000000000000000802000080004fe0500000000"], 0x1c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800dd8d0000000000000000020000000000000500008900060015000200000014001680100008800c0003800500010001000000"], 0x38}}, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000280)=0x1, 0x4) sendmsg$802154_dgram(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20040001}, 0x20004080) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r7, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8001}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x81) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x100, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={r0}) getsockopt$EBT_SO_GET_ENTRIES(r12, 0x0, 0x81, &(0x7f0000000380)={'nat\x00', 0x0, 0x3, 0xb9, [0x1ff, 0x9, 0x3, 0x8, 0xfffffffffffffffa, 0x3], 0x3, &(0x7f0000000200)=[{}, {}, {}], &(0x7f00000002c0)=""/185}, &(0x7f0000000400)=0x78) 4.714107963s ago: executing program 9 (id=3356): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004812}, 0xc094) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001c0000000000000000000000711207000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004812}, 0xc094) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001c0000000000000000000000711207000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 4.640851951s ago: executing program 7 (id=3357): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) socket$unix(0x1, 0x1, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000900000000000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f70700008500000006000000950000000000000018110000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x1, 0x12, &(0x7f00000003c0)=""/18, 0x40f00, 0x5c, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x2, 0x6, 0x24}, 0x10, 0xffffffffffffffff, 0x0, 0x10000011, &(0x7f0000000480)=[0x1, 0xffffffffffffffff, 0x1], &(0x7f00000004c0)=[{0x2, 0x3, 0x1, 0xa}, {0x3, 0xc4c, 0xd, 0x8}], 0x10, 0x8}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000640)=r3) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000002c0)={r6, 0x3}, &(0x7f0000000300)=0x8) write$cgroup_devices(r1, &(0x7f0000000680)=ANY=[], 0xffdd) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000003a40)=@newtaction={0xec, 0x30, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [{0xd8, 0x1, [@m_ipt={0xd4, 0x1a, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x99, 0x6, "5a2d0e869135a294681ef6728f70a65a4ea0d645f71a0d1a9a99c024664f4e73dede9d72b43ee6f5534424a60fccbf0cff8dc2529390cafe31ae5e8e55770458f47742a28dc9de14a5353494a516788dde5f40b2d2c8250994240fd3480d4fa9b3074e615a9102ede5ec3696a39921db8b2af38d59d8dd9bc64c7ed82b6ea0101d87fa1a8a6b4ff8b4b9d8499e145429c162d8abca"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xec}}, 0x240200c1) recvmmsg$unix(r9, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) close(0x4) getsockopt$EBT_SO_GET_ENTRIES(r7, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x4, 0x33, [0x3, 0x6166, 0x4, 0xfffffffffffffff3, 0x7, 0x6], 0x1, &(0x7f00000000c0)=[{}], &(0x7f0000000180)=""/51}, &(0x7f0000000280)=0x78) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 4.639625527s ago: executing program 8 (id=3358): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000010000000000000000000000791204000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x48, r1, 0x1, 0x70bd27, 0xa, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x80, 0x3, 0x6, 0x0, {0x3, 0xe4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x800, 0xad36}}]}, 0x48}}, 0x0) 4.527697167s ago: executing program 8 (id=3359): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71186a000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 4.484052422s ago: executing program 9 (id=3360): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) (async) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x26ffc86098878bdf}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}]}, 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002cbd7000fcdbdf250f00000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x40008c0}, 0x24008080) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000480)={0x3, {{0xa, 0x4, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000480)={0x3, {{0xa, 0x4, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000600)={0x2, {{0xa, 0x4e24, 0xffffffff, @mcast2, 0x4}}, {{0xa, 0x4e21, 0x5, @mcast2, 0x5}}}, 0x108) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000600)={0x2, {{0xa, 0x4e24, 0xffffffff, @mcast2, 0x4}}, {{0xa, 0x4e21, 0x5, @mcast2, 0x5}}}, 0x108) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r8}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0x59b, 0x5, {}, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x3}}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 4.392970883s ago: executing program 4 (id=3361): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket(0x840000000002, 0x3, 0xff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x8084) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x6, 0xa, 0xe01, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x54}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000040)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640006000000003552bde5c064c6", 0x15}, {&(0x7f0000000600)="174640b6d80fb2eedc81ba60cc0800", 0xf}], 0x2}}], 0x1, 0x0) close(0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r5, @ANYRES64=r4, @ANYRESOCT=r4], 0x48}, 0x1, 0x0, 0x0, 0x6591552a9cebf77d}, 0x8006810) sendmmsg$inet(r4, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 4.390615812s ago: executing program 6 (id=3362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000806000003"], 0xfdef) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6}}]}, 0x30}}, 0x4000080) 4.341468706s ago: executing program 8 (id=3363): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x82, &(0x7f00000001c0)={r2, 0x40, 0x8}, 0x8) (async) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x10) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) (async) listen(0xffffffffffffffff, 0x2) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="19000000000000000000000000000000000000008dc969a3c17cd750b052d96d0bc601dd99381570e7be90cdf4382cca9420fd39731947640137a5ba30eb88c4357299d452e17d7a958cfc2ffe4295354ceed0055b9f25a022c451a957b6558054f008e28449c4ce46d78e2c426e34e1465f114e9ef3bb9bf8036ce7e9fe66000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r3, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 4.11874814s ago: executing program 9 (id=3364): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @remote, 0x0, "d009000000000000006404000000dc3f0900000000000000d800000000000400", 0x0, 0x0, 0xfffffd, 0xfffffffd}, 0x3c) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014006000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83d5f59e3d", 0xd8}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d4e3a", @ANYRESDEC=r7], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0x402a010) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r8}, &(0x7f0000000380), &(0x7f00000003c0)='%pK \x00'}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x148, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14}]}}]}, 0x148}}, 0x8004085) 3.863088302s ago: executing program 4 (id=3365): r0 = socket(0x2, 0x3, 0xff) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast2, 0xa9e}, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x4, 0x4]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}, 0x1}, 0x5c) r2 = socket(0xa, 0x3, 0x8) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x0, 0x0, @loopback, 0x8000000}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x80000]}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) r3 = socket$inet(0x10, 0x3, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e002000028008000100080000000a000900aaaaaaaaaa000000080007000000000008000500", @ANYRES32, @ANYBLOB, @ANYRESHEX=r4, @ANYBLOB="8472a88280394d636df780b778aeae598e6daff2e5971f7417ed5761aae289586b156d8d38201c606d06df892ab87d32", @ANYBLOB="8b4b92f4e8a67cbce429b96c92c8dfedf2d06ccbc4c838f505", @ANYRES8=r0], 0x60}}, 0x0) mmap(&(0x7f00002df000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, 0xffffffffffffffff, 0x482b7000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x2043, 0x0, "ee8b0e650926b46ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09242005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "00070100000000dd", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0x1) writev(r5, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r1, &(0x7f0000000080)="7681da6dd2", 0x5) r7 = socket(0x15, 0x5, 0x0) bind$x25(r7, &(0x7f0000000400), 0x12) 3.834895199s ago: executing program 9 (id=3366): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000000c0)={0x2, 0x9, 0x200, 0x3, 0x7, 0x5, 0x1, 0x5}, &(0x7f0000000100)=0x20) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x3c}}, 0x800) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x2c, 0x0, &(0x7f0000000180)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r14, 0x84, 0x7b, 0x0, &(0x7f0000000800)=0x36) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r12, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x1c}}, 0x0) write$nci(r10, &(0x7f0000000740)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x5, @f={0x3, 0x2, 0x2, 0x2, 0x1, 0x1, 0x6, {0x3, 0x1, ','}, 0x4, 0xf, 0xfc, 0x70, 0x1, 's'}}, 0x13) 3.780245569s ago: executing program 6 (id=3367): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000050000000000000000711251000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r5, 0x0, 0x1}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r7, 0x0, 0x1}, 0x18) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, 0x0, 0x20009005) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002780)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="18080400430001002c0012801100010062726964676500006c6176650000000014000580060002"], 0x4c}, 0x1, 0x0, 0x0, 0x38f54add4fcfee77}, 0x4000000) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r8, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000c40)=""/69, 0x45}], 0x1}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000e00)=""/185, 0xb9}], 0x1}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001640)=""/112, 0x70}], 0x1}}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001a80)=""/8, 0x8}], 0x1}}], 0x4, 0x400123a0, 0x0) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 3.693143517s ago: executing program 4 (id=3368): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x11) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@RTM_DELMDB={0x11, 0x55, 0x1}, 0x18}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x40, r3, 0x1, 0x70bd2f, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x3}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x7ff}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x2}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x400}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180057a400000100000000000000000000003cc74c177db1e68297732937207569002c78075ad61b7eeb47da"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 3.289516189s ago: executing program 8 (id=3369): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, 0x0) 537.831472ms ago: executing program 4 (id=3370): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000db0002060108000000000000000000000000afed2e709639888eda11000300686173683a69702c6d61726b000000000500010000000000f8a32f70708e3147162130c275daa2c943307ea780443a1daffb63a2dceb0b515324ddefd5d1d6c9e0797df085a8b80f521c0d86a2b81cd52cec1c08b83599706de37ce2ac9113f87a4074bcae7e44ad033cb509148dc21f743fb5c9bede41632a2b01927140fa04c04543aae860c3188f08909fc6937d842f53bd1f116b324750"], 0x30}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x0, @private=0xa010101}}, {{0x2, 0x0, @multicast2}}}, 0x108) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 425.009509ms ago: executing program 4 (id=3371): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x80002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000200ffff00000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0xfffffffc, 0xfffffffe, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}]}, 0x20}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) tee(r6, r7, 0x528, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}, 0x1, 0x0, 0x0, 0x44004}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x3c, r0, 0x1, 0x3, 0x0, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x3c}}, 0x0) 423.086164ms ago: executing program 6 (id=3372): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0x8000000000000000}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015f1a41a07c170450f5e46710ea2952de384f30dddbfe8cfbdee3d59b6811bb28e94cb443d0eb401468dfd6f693ecd10df1fa0000eaf451d5f4d28256b72898dd6366e669d943bb73873895221ff51bc638fa8e89f9bcdfac29ae0f689927a0b4978dc8fb1dc0b61322809e26e7dd1a22fe2d53be5937148a576dac09f6f611803190e433690d72a"], 0x4c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000520001000000000000fd00000a0000000c000600"], 0x20}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000001c0), &(0x7f0000000200)=0x4) close(r2) connect$unix(r2, &(0x7f0000000280)=@file={0x0, './file1\x00'}, 0x6e) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) 305.186076ms ago: executing program 9 (id=3373): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$bt_hci(r1, 0x11e, 0x1, 0x0, &(0x7f0000000740)) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x28, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x28, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}}, 0x0) 290.507843ms ago: executing program 7 (id=3374): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r1, 0x25, 0x2, @val=@tcx}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@newchain={0x2c, 0x64, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xfff3, 0x1}, {0xd, 0xb}, {0xe, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x68}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080001}, 0x20008840) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)) 201.157041ms ago: executing program 6 (id=3375): r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x93f, 0x4) recvfrom(r0, 0x0, 0x0, 0x40000100, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000001c0)=0x100, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 142.486554ms ago: executing program 7 (id=3376): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func]}}, 0x0, 0x26, 0x0, 0x0, 0x4}, 0x28) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x52}, 0x2) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) syz_emit_ethernet(0x86, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000088a820008100000086dd603f1060001b2f00fc000800000000000000000000000000ff0200000000000000000000000000012420810000000000fffb700000000800000086dd0800"], 0x0) 77.557545ms ago: executing program 9 (id=3377): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000180)=0x102000, 0x4) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="800000001000370401000000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="890c0400000000000500100005000000580012800900010069706970000000004800028008000200e0000001060012004e2100000600100002000000060011004e230000060010000100000008000100", @ANYRES32=0x0, @ANYBLOB="04001300057eca000400000105000a00000000001f95930d10ba75e8bc38abd3795739b28a05307ebfca3ff700e7165f22c82e5476c33e6d2b1280a94c32dda887d82a417122410f56c0d98144de83f4c2aad066c3570aaacf6e13213f7de571ce62548b0d438500e687d372fcfef649b82d8ef70d45e7b9ae7446bc39f223fa251dc83757cf04df1bc84272f06bee57525bebc4bfa959c69852f271a653e502556692fda03eee57b053e15111"], 0x80}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9effffff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000240)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000304000000000000000000000000dbdb0a6c8569273fc85c352f16151bc5e2ca8cc7207d174edb0785700d58c40d5f79cc3f71dacbdeabfebac16072e25880d67bf24f4d16f3b43b474b4af486571d5bca0159eba64039611066f4e4ae7231d9fc89ec3d10e193ea3edbc6f96f03aefe417e7cb8f520204ab242f7da196d5737a32bd4241c3ccd55e11bca67ec04ac0bc6943a8a1222eb7c6d9211bd0a9935201c48921b2ede77d04a0ecd8b3830751e67845eeb95", @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) 76.780395ms ago: executing program 4 (id=3378): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x5, 0x0, 0x5, 0x5}]}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 64) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv4_newrule={0x34, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x14}, [@FRA_SRC={0x8, 0x2, @multicast2}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e24}}, @FRA_FLOW={0x8}]}, 0x34}}, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'pimreg\x00', @random="f39301dff678"}) (async) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x8) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000002b000b00000000ff0f00000007000000040003000c00018006000000e948ef000c000200070001"], 0x30}}, 0x4000) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001400)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x6}]}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x140c, 0x400, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x881}, 0x20000001) sendmsg$nl_route(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@mpls_delroute={0xac, 0x19, 0x2, 0x70bd26, 0x25dfdbfc, {0x1c, 0x14, 0x20, 0xed, 0xfe, 0x4, 0xc8, 0x9}, [@RTA_NEWDST={0x84, 0x13, [{0x1}, {0x100, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x3ff}, {0x9}, {0x5, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x33}, {0x26}, {0x9}, {0xfff, 0x0, 0x1}, {0x6}, {0x9c17}, {0xd, 0x0, 0x1}, {0x2}, {0xfff, 0x0, 0x1}, {0xfff80}, {0x3, 0x0, 0x1}, {0xd}, {0x6, 0x0, 0x1}, {0xc8221}, {0x9, 0x0, 0x1}, {0x6}, {0x40, 0x0, 0x1}, {0x4}, {0x9, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x8b1, 0x0, 0x1}, {0x8}, {0x3}, {0x1, 0x0, 0x1}]}, @RTA_MULTIPATH={0xc, 0x9, {0xc1, 0x36, 0x10, r7}}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1401000026000100000000001a000000030100800c"], 0x114}], 0x1}, 0x4000040) 1.070525ms ago: executing program 8 (id=3379): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_TID={0xc}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40008c0}, 0x20000005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r5, 0x0, 0xf69}, 0x18) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 0s ago: executing program 7 (id=3380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x94, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x200}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xce}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x400}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0xf83e33784c3634d8}, 0x4048084) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delneigh={0x1c, 0x1a, 0x20, 0x8, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x8}}, 0x1c}}, 0x4000) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x894}, 0x11) kernel console output (not intermixed with test programs): tered promiscuous mode [ 245.424525][ T49] smc: removing ib device syz1 [ 245.462969][ T5926] syz1: Port: 1 Link DOWN [ 245.600826][T12196] veth1_to_bond: entered allmulticast mode [ 245.649108][T12196] bond0: (slave bond_slave_1): Releasing backup interface [ 245.681728][T12196] veth1_to_bond (unregistering): left allmulticast mode [ 245.935197][T12212] erspan0: entered promiscuous mode [ 245.944793][T12212] erspan0: left promiscuous mode [ 246.124825][T12223] netlink: 'syz.0.1839': attribute type 1 has an invalid length. [ 246.389350][T12230] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 247.148711][T12269] wg1: entered promiscuous mode [ 247.178333][T12269] wg1: entered allmulticast mode [ 247.327857][T12275] 8021q: adding VLAN 0 to HW filter on device bond4 [ 247.677466][T12304] veth0: entered promiscuous mode [ 247.689995][T12304] veth0: left promiscuous mode [ 247.768575][T12314] netlink: 'syz.4.1860': attribute type 1 has an invalid length. [ 247.787103][T12314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.813898][T12314] rdma_rxe: rxe_newlink: failed to add syz_tun [ 247.857845][T12318] syzkaller0: entered promiscuous mode [ 247.867314][T12318] syzkaller0: entered allmulticast mode [ 248.069089][T12331] wlan1 speed is unknown, defaulting to 1000 [ 248.078427][T12331] wlan1 speed is unknown, defaulting to 1000 [ 248.115411][T12331] wlan1 speed is unknown, defaulting to 1000 [ 248.507662][T12331] infiniband syz0: set down [ 248.512401][ T5967] wlan1 speed is unknown, defaulting to 1000 [ 248.512569][T12331] infiniband syz0: added wlan1 [ 248.566680][T12331] RDS/IB: syz0: added [ 248.571226][T12331] smc: adding ib device syz0 with port count 1 [ 248.577510][T12331] smc: ib device syz0 port 1 has pnetid [ 248.583722][ T980] wlan1 speed is unknown, defaulting to 1000 [ 248.590143][T12331] wlan1 speed is unknown, defaulting to 1000 [ 248.909749][T12352] __nla_validate_parse: 68 callbacks suppressed [ 248.909771][T12352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1869'. [ 248.940889][T12352] geneve2: entered promiscuous mode [ 249.043070][T12331] wlan1 speed is unknown, defaulting to 1000 [ 249.407483][T12331] wlan1 speed is unknown, defaulting to 1000 [ 249.410633][T12363] netlink: 912 bytes leftover after parsing attributes in process `syz.0.1873'. [ 249.635444][T12370] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 249.768017][T12375] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 249.842046][T12331] wlan1 speed is unknown, defaulting to 1000 [ 249.953534][T12380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1880'. [ 249.979003][T12380] xfrm1: entered promiscuous mode [ 249.984382][T12380] xfrm1: entered allmulticast mode [ 250.175867][T12391] netlink: 'syz.2.1884': attribute type 1 has an invalid length. [ 250.185271][T12391] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1884'. [ 250.270658][T12331] wlan1 speed is unknown, defaulting to 1000 [ 250.614368][T12405] veth0_to_team: entered promiscuous mode [ 250.620823][T12405] veth0_to_team: entered allmulticast mode [ 250.642477][T12365] rdma_rxe: rxe_newlink: failed to add syz_tun [ 250.743352][T12412] netlink: 'syz.2.1891': attribute type 6 has an invalid length. [ 250.752394][T12416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1892'. [ 250.752425][T12416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1892'. [ 250.773714][T12416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1892'. [ 250.789433][T12416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1892'. [ 250.806415][T12416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1892'. [ 250.817185][T12416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1892'. [ 250.968445][T12422] netlink: 'syz.1.1895': attribute type 29 has an invalid length. [ 250.978207][T12422] netlink: 'syz.1.1895': attribute type 29 has an invalid length. [ 251.902091][T12470] rdma_rxe: rxe_newlink: failed to add syz_tun [ 251.974827][T12476] netlink: 'syz.4.1908': attribute type 1 has an invalid length. [ 251.994541][T12476] netlink: 'syz.4.1908': attribute type 1 has an invalid length. [ 252.008726][T12476] netlink: 'syz.4.1908': attribute type 1 has an invalid length. [ 252.288343][T12482] netlink: 'syz.1.1911': attribute type 11 has an invalid length. [ 253.639405][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 253.742723][T12515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.787793][T12521] netlink: 'syz.4.1924': attribute type 1 has an invalid length. [ 253.918748][T12527] netlink: 'syz.2.1925': attribute type 3 has an invalid length. [ 254.170228][T12542] __nla_validate_parse: 132 callbacks suppressed [ 254.170248][T12542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1930'. [ 254.263247][T12550] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1932'. [ 254.397481][ T30] audit: type=1107 audit(1757366680.666:3): pid=12556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 254.403182][T12555] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1935'. [ 254.510839][T12555] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1935'. [ 254.528045][T12555] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1935'. [ 254.641725][T12566] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1939'. [ 254.791186][T12572] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1943'. [ 255.287249][T12590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.305254][T12593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1951'. [ 255.331339][T12595] validate_nla: 1 callbacks suppressed [ 255.331360][T12595] netlink: 'syz.2.1950': attribute type 1 has an invalid length. [ 255.495858][T12605] sctp: [Deprecated]: syz.1.1954 (pid 12605) Use of int in maxseg socket option. [ 255.495858][T12605] Use struct sctp_assoc_value instead [ 255.867931][T12626] netlink: 'syz.1.1959': attribute type 21 has an invalid length. [ 255.876340][T12626] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1959'. [ 255.980487][T12630] netlink: 'syz.1.1961': attribute type 10 has an invalid length. [ 255.989217][T12630] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.996938][T12630] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.017435][T12630] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.024888][T12630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.033132][T12630] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.040387][T12630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.053025][T12630] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 256.198849][T12636] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1963'. [ 256.214709][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 257.132044][T12688] bridge_slave_1: left allmulticast mode [ 257.139023][T12688] bridge_slave_1: left promiscuous mode [ 257.146945][T12688] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.164330][T12688] bridge_slave_0: left allmulticast mode [ 257.178899][T12688] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.248315][T12688] bond0: (slave bridge0): Releasing backup interface [ 257.477284][T12698] bond6: entered promiscuous mode [ 257.493539][T12698] bond6: entered allmulticast mode [ 257.510426][T12698] 8021q: adding VLAN 0 to HW filter on device bond6 [ 257.655981][T12718] netlink: 'syz.1.1987': attribute type 4 has an invalid length. [ 257.708266][T12716] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20000 [ 257.733328][T12716] x_tables: ip_tables: udp match: only valid for protocol 17 [ 257.999515][T12742] netlink: 'syz.1.1996': attribute type 1 has an invalid length. [ 258.277590][T12755] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 258.341007][T12755] siw: device registration error -23 [ 258.476415][T12771] netlink: 'syz.4.2004': attribute type 4 has an invalid length. [ 258.683016][T12789] bond0: option ad_select: unable to set because the bond device is up [ 259.089587][T12817] netlink: 'syz.4.2020': attribute type 3 has an invalid length. [ 259.197985][T12824] __nla_validate_parse: 11 callbacks suppressed [ 259.198007][T12824] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2022'. [ 259.239122][T12829] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2022'. [ 259.396672][T12835] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2025'. [ 259.751414][T12855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2033'. [ 259.775928][T12858] netlink: 'syz.0.2034': attribute type 21 has an invalid length. [ 259.784359][T12858] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2034'. [ 259.796819][T12855] 8021q: adding VLAN 0 to HW filter on device bond1 [ 259.805228][T12858] netlink: 'syz.0.2034': attribute type 5 has an invalid length. [ 259.814229][T12858] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2034'. [ 259.835354][T12855] netlink: 212388 bytes leftover after parsing attributes in process `syz.1.2033'. [ 259.848086][T12855] openvswitch: netlink: Message has 5 unknown bytes. [ 259.885908][T12855] vlan3: entered allmulticast mode [ 259.900553][T12855] bond1: entered allmulticast mode [ 260.281676][T12876] sctp: [Deprecated]: syz.1.2039 (pid 12876) Use of int in maxseg socket option. [ 260.281676][T12876] Use struct sctp_assoc_value instead [ 260.555025][T12882] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2042'. [ 260.687179][T12889] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2043'. [ 260.837106][T12894] IPv6: addrconf: prefix option has invalid lifetime [ 260.845835][T12892] netlink: 'syz.0.2043': attribute type 2 has an invalid length. [ 260.865588][T12895] IPv6: addrconf: prefix option has invalid lifetime [ 261.069807][T12901] netlink: 'syz.2.2047': attribute type 1 has an invalid length. [ 261.110542][T12901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2047'. [ 261.253736][ T5880] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 261.264239][ T5880] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 261.273327][ T5880] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 261.283269][ T5880] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 261.294360][ T5880] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 261.314537][ T5875] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 261.325018][ T5875] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 261.334479][ T5875] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 261.351862][ T5875] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 261.370208][ T5875] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 261.437412][T12915] wlan1 speed is unknown, defaulting to 1000 [ 261.906551][T12915] wlan1 speed is unknown, defaulting to 1000 [ 262.365359][T12953] netem: incorrect gi model size [ 262.389497][T12953] netem: change failed [ 262.514567][T12959] tipc: Enabling of bearer rejected, already enabled [ 262.963208][T12979] tipc: Started in network mode [ 262.968156][T12979] tipc: Node identity 080211000001, cluster identity 4711 [ 262.975704][T12979] tipc: Enabled bearer , priority 0 [ 262.987529][T12979] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 262.995945][T12979] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 263.004923][T12979] tipc: Resetting bearer [ 263.116891][T12915] chnl_net:caif_netlink_parms(): no params data found [ 263.399562][ T5880] Bluetooth: hci5: command tx timeout [ 263.547077][T12915] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.560530][T12915] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.568332][T12915] bridge_slave_0: entered allmulticast mode [ 263.582135][T12915] bridge_slave_0: entered promiscuous mode [ 263.591561][T12915] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.598994][T12915] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.609543][T12915] bridge_slave_1: entered allmulticast mode [ 263.618711][T12915] bridge_slave_1: entered promiscuous mode [ 263.835939][T12915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.889603][T12915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.945381][T12007] tipc: Resetting bearer [ 264.016101][T13030] netlink: 'syz.2.2078': attribute type 1 has an invalid length. [ 264.089391][ T5937] tipc: Node number set to 134418688 [ 264.176383][T12915] team0: Port device team_slave_0 added [ 264.259803][T12915] team0: Port device team_slave_1 added [ 264.553757][T13061] netlink: 'syz.2.2087': attribute type 15 has an invalid length. [ 264.563836][T13061] __nla_validate_parse: 13 callbacks suppressed [ 264.563855][T13061] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2087'. [ 264.585523][T12915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.592899][T12915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.635025][T13064] netlink: 'syz.2.2087': attribute type 15 has an invalid length. [ 264.653166][T13064] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2087'. [ 264.658838][T12915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.700142][T12915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.720683][T12915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.786393][T12915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.050482][T12915] hsr_slave_0: entered promiscuous mode [ 265.057695][T12915] hsr_slave_1: entered promiscuous mode [ 265.067683][T12915] debugfs: 'hsr0' already exists in 'hsr' [ 265.076335][T12915] Cannot create hsr debugfs directory [ 265.103164][T13086] gretap0: entered promiscuous mode [ 265.108781][T13086] vlan0: entered promiscuous mode [ 265.146741][T13087] tipc: Enabled bearer , priority 0 [ 265.202348][T13087] syzkaller0: entered promiscuous mode [ 265.207967][T13087] syzkaller0: entered allmulticast mode [ 265.221050][T13087] tipc: Resetting bearer [ 265.334688][T13085] tipc: Resetting bearer [ 265.494459][ T5880] Bluetooth: hci5: command tx timeout [ 265.494921][T13104] rdma_rxe: rxe_newlink: failed to add syz_tun [ 266.181365][ T980] tipc: Node number set to 3182997322 [ 267.227450][T13085] tipc: Disabling bearer [ 267.247713][T13097] netlink: 'syz.2.2096': attribute type 2 has an invalid length. [ 267.426324][T13108] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2098'. [ 267.486131][T13114] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 267.518569][T13116] nbd: must specify at least one socket [ 267.560125][ T5880] Bluetooth: hci5: command tx timeout [ 267.570877][T13120] syz.1.2102: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 267.610815][T13120] CPU: 1 UID: 0 PID: 13120 Comm: syz.1.2102 Not tainted syzkaller #0 PREEMPT(full) [ 267.610847][T13120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 267.610859][T13120] Call Trace: [ 267.610868][T13120] [ 267.610877][T13120] dump_stack_lvl+0x189/0x250 [ 267.610912][T13120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.610938][T13120] ? __pfx__printk+0x10/0x10 [ 267.610979][T13120] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 267.611002][T13120] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 267.611028][T13120] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 267.611055][T13120] warn_alloc+0x214/0x310 [ 267.611088][T13120] ? stack_depot_save_flags+0x40/0x860 [ 267.611118][T13120] ? __pfx_warn_alloc+0x10/0x10 [ 267.611151][T13120] ? kasan_save_track+0x4f/0x80 [ 267.611176][T13120] ? xskq_create+0x56/0x170 [ 267.611203][T13120] ? xsk_init_queue+0xb0/0x110 [ 267.611228][T13120] ? xsk_setsockopt+0x4dc/0x8d0 [ 267.611269][T13120] ? do_sock_setsockopt+0x17c/0x1b0 [ 267.611288][T13120] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 267.611307][T13120] ? do_syscall_64+0xfa/0x3b0 [ 267.611324][T13120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.611374][T13120] __vmalloc_node_range_noprof+0x125/0x12f0 [ 267.611443][T13120] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 267.611481][T13120] ? __kasan_kmalloc+0x93/0xb0 [ 267.611512][T13120] vmalloc_user_noprof+0xad/0xf0 [ 267.611542][T13120] ? xskq_create+0xbf/0x170 [ 267.611572][T13120] xskq_create+0xbf/0x170 [ 267.611605][T13120] xsk_init_queue+0xb0/0x110 [ 267.611636][T13120] xsk_setsockopt+0x4dc/0x8d0 [ 267.611668][T13120] ? __pfx_xsk_setsockopt+0x10/0x10 [ 267.611694][T13120] ? __pfx_aa_sk_perm+0x10/0x10 [ 267.611728][T13120] ? aa_sock_opt_perm+0xff/0x1b0 [ 267.611751][T13120] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 267.611772][T13120] ? __pfx_xsk_setsockopt+0x10/0x10 [ 267.611806][T13120] do_sock_setsockopt+0x17c/0x1b0 [ 267.611833][T13120] __x64_sys_setsockopt+0x13f/0x1b0 [ 267.611862][T13120] do_syscall_64+0xfa/0x3b0 [ 267.611879][T13120] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.611908][T13120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.611927][T13120] ? clear_bhb_loop+0x60/0xb0 [ 267.611952][T13120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.611997][T13120] RIP: 0033:0x7f49bfd8ebe9 [ 267.612016][T13120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.612034][T13120] RSP: 002b:00007f49c0b7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 267.612058][T13120] RAX: ffffffffffffffda RBX: 00007f49bffc5fa0 RCX: 00007f49bfd8ebe9 [ 267.612072][T13120] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 267.612085][T13120] RBP: 00007f49bfe11e19 R08: 0000000000000004 R09: 0000000000000000 [ 267.612098][T13120] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.612111][T13120] R13: 00007f49bffc6038 R14: 00007f49bffc5fa0 R15: 00007ffec1ff5548 [ 267.612147][T13120] [ 267.613718][T13120] Mem-Info: [ 267.945669][T13120] active_anon:4060 inactive_anon:0 isolated_anon:0 [ 267.945669][T13120] active_file:3079 inactive_file:39920 isolated_file:0 [ 267.945669][T13120] unevictable:768 dirty:34 writeback:0 [ 267.945669][T13120] slab_reclaimable:12470 slab_unreclaimable:175645 [ 267.945669][T13120] mapped:36119 shmem:1357 pagetables:1009 [ 267.945669][T13120] sec_pagetables:0 bounce:0 [ 267.945669][T13120] kernel_misc_reclaimable:0 [ 267.945669][T13120] free:1242135 free_pcp:12954 free_cma:0 [ 268.035228][T13120] Node 0 active_anon:16240kB inactive_anon:0kB active_file:12316kB inactive_file:159480kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144476kB dirty:132kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13176kB pagetables:3904kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 268.112253][T13120] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 268.168093][T13120] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 268.203470][T13120] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 268.211983][T13120] Node 0 DMA32 free:1059420kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16296kB inactive_anon:0kB active_file:12316kB inactive_file:157920kB unevictable:1536kB writepending:128kB present:3129332kB managed:2557432kB mlocked:0kB bounce:0kB free_pcp:35224kB local_pcp:16420kB free_cma:0kB [ 268.257776][T13120] lowmem_reserve[]: 0 0 1 1 1 [ 268.263090][T13120] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1560kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 268.332267][T12915] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 268.340783][T13120] lowmem_reserve[]: 0 0 0 0 0 [ 268.345834][T13120] Node 1 Normal free:3893512kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16448kB local_pcp:11968kB free_cma:0kB [ 268.416096][T12915] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 268.418893][T13120] lowmem_reserve[]: 0 0 0 0 0 [ 268.449409][T13120] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 268.480717][T13120] Node 0 DMA32: 601*4kB (UM) 367*8kB (ME) 107*16kB (UM) 60*32kB (ME) 2*64kB (U) 32*128kB (UM) 17*256kB (UME) 5*512kB (ME) 3*1024kB (UME) 2*2048kB (UM) 252*4096kB (M) = 1059468kB [ 268.494899][T12915] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 268.538379][T13120] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 268.573580][T13142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2105'. [ 268.585138][T13120] Node 1 Normal: 184*4kB (UME) 41*8kB (UME) 30*16kB (UME) 138*32kB (UME) 33*64kB (UME) 11*128kB (UME) 4*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3893512kB [ 268.588072][T13143] netlink: 364 bytes leftover after parsing attributes in process `syz.4.2107'. [ 268.611445][T13120] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 268.629864][T13120] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 268.639933][T13120] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 268.650107][T13120] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 268.661752][T13146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2106'. [ 268.671408][T13146] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 268.677538][T13120] 44353 total pagecache pages [ 268.683854][T13146] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.698150][T13120] 0 pages in swap cache [ 268.702536][T13120] Free swap = 124996kB [ 268.706787][T13120] Total swap = 124996kB [ 268.711304][T13120] 2097051 pages RAM [ 268.715285][T13120] 0 pages HighMem/MovableOnly [ 268.720549][T13120] 425667 pages reserved [ 268.724852][T13120] 0 pages cma reserved [ 268.738563][T12915] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 268.841993][T13157] netlink: ct family unspecified [ 268.854987][T13157] openvswitch: netlink: Actions may not be safe on all matching packets [ 269.041833][T13164] netlink: 'syz.4.2113': attribute type 6 has an invalid length. [ 269.054500][T12915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.135193][T12915] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.165168][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.172644][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.208080][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.215356][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.271580][T13173] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 269.352444][T13180] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 269.549059][T13187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2117'. [ 269.641850][ T5880] Bluetooth: hci5: command tx timeout [ 269.941002][T13212] delete_channel: no stack [ 269.968855][T13207] tipc: Enabled bearer , priority 0 [ 269.993118][T13207] syzkaller0: entered promiscuous mode [ 270.014100][T13207] syzkaller0: entered allmulticast mode [ 270.063647][T13207] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 270.154542][T13207] tipc: Resetting bearer [ 270.188751][T12915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.229858][T13206] tipc: Resetting bearer [ 270.311950][T13206] tipc: Disabling bearer [ 270.484520][T13232] netlink: 'syz.2.2128': attribute type 1 has an invalid length. [ 270.513459][T13237] netlink: 'syz.2.2128': attribute type 1 has an invalid length. [ 270.533874][T13230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2128'. [ 270.544593][T13230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2128'. [ 270.556663][T13230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2128'. [ 270.919367][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 270.928308][T13257] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 271.278223][T12915] veth0_vlan: entered promiscuous mode [ 271.294030][T12915] veth1_vlan: entered promiscuous mode [ 271.418981][T13285] netlink: 'syz.2.2142': attribute type 21 has an invalid length. [ 271.463191][T13285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2142'. [ 271.473878][T12915] veth0_macvtap: entered promiscuous mode [ 271.480492][T13285] netlink: 'syz.2.2142': attribute type 21 has an invalid length. [ 271.526926][T12915] veth1_macvtap: entered promiscuous mode [ 271.548006][T13285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2142'. [ 271.582786][T13285] netlink: 'syz.2.2142': attribute type 21 has an invalid length. [ 271.614315][T13285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2142'. [ 271.669784][T13285] netlink: 'syz.2.2142': attribute type 21 has an invalid length. [ 271.684800][T12915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.715031][T13285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2142'. [ 271.727098][T13285] netlink: 'syz.2.2142': attribute type 21 has an invalid length. [ 271.735860][T13285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2142'. [ 271.745637][T13285] netlink: 'syz.2.2142': attribute type 21 has an invalid length. [ 271.767182][T12915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.779822][T13285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2142'. [ 271.779890][T13293] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 271.799433][T13297] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 271.810481][T13285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2142'. [ 271.842724][T13304] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 271.872854][T13304] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 271.981335][ T3478] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.000194][ T3478] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.078719][ T3478] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.105867][ T3478] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.138449][T13304] wlan1 speed is unknown, defaulting to 1000 [ 272.376805][T13323] validate_nla: 59 callbacks suppressed [ 272.376830][T13323] netlink: 'syz.4.2152': attribute type 14 has an invalid length. [ 272.468410][ T3478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.504356][ T3478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.685116][T12011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.718117][T12011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.956459][T13304] wlan1 speed is unknown, defaulting to 1000 [ 273.360317][T13355] netlink: 'syz.2.2163': attribute type 1 has an invalid length. [ 274.643271][T13417] rdma_rxe: rxe_newlink: failed to add syz_tun [ 275.029861][T13431] netlink: 'syz.0.2179': attribute type 11 has an invalid length. [ 275.071188][T13431] netlink: 'syz.0.2179': attribute type 11 has an invalid length. [ 275.363652][T13436] 8021q: adding VLAN 0 to HW filter on device bond2 [ 275.684379][T13455] syzkaller0: entered promiscuous mode [ 275.694418][T13455] syzkaller0: entered allmulticast mode [ 276.303780][T13478] __nla_validate_parse: 70 callbacks suppressed [ 276.303805][T13478] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2193'. [ 276.477702][T13482] netlink: 'syz.0.2194': attribute type 2 has an invalid length. [ 276.490667][T13483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2193'. [ 278.372738][T13495] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2197'. [ 278.442916][T13496] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2197'. [ 278.458289][T13497] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2197'. [ 278.753649][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a6e5000: rx timeout, send abort [ 278.820245][T13515] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 279.034227][T13532] netlink: 'syz.2.2208': attribute type 7 has an invalid length. [ 279.044492][T13532] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2208'. [ 279.076376][T13534] tipc: Enabling of bearer rejected, failed to enable media [ 279.253820][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a6e4c00: rx timeout, send abort [ 279.262708][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a6e5000: abort rx timeout. Force session deactivation [ 279.591044][T13559] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 279.630698][T13555] wlan1 speed is unknown, defaulting to 1000 [ 279.762337][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a6e4c00: abort rx timeout. Force session deactivation [ 279.818699][T13567] tipc: Enabled bearer , priority 0 [ 279.826033][T13565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2217'. [ 279.884174][T13567] syzkaller0: entered promiscuous mode [ 279.903022][T13567] syzkaller0: entered allmulticast mode [ 279.925204][T13568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2218'. [ 279.963267][T13567] tipc: Resetting bearer [ 279.985984][T13564] tipc: Resetting bearer [ 280.022478][T13564] tipc: Disabling bearer [ 280.347408][T13555] wlan1 speed is unknown, defaulting to 1000 [ 280.377635][T13586] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2224'. [ 280.392286][T13586] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2224'. [ 280.412166][T13585] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.429480][T13585] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.964735][T13585] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.975727][T13585] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.249730][T13585] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.261610][T13585] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.334245][T13585] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.347693][T13585] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.370837][T13593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.437935][T13593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.502717][T13595] vlan0: entered promiscuous mode [ 281.512436][T13593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.602864][ T59] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.611786][ T59] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.628971][ T59] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.637630][ T59] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.661299][ T3478] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.670210][ T3478] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.687137][ T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.696219][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.755110][T13597] netlink: 'syz.0.2227': attribute type 3 has an invalid length. [ 281.765024][T13597] netlink: 766 bytes leftover after parsing attributes in process `syz.0.2227'. [ 281.985819][T13601] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 282.638910][T13638] erspan0: entered promiscuous mode [ 282.645683][T13638] erspan0: entered allmulticast mode [ 282.796258][T13642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2240'. [ 282.826119][T13646] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2241'. [ 282.837821][T13648] netlink: 'syz.2.2242': attribute type 1 has an invalid length. [ 282.868596][T13651] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2241'. [ 283.706301][T13695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2257'. [ 283.729409][T13695] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2257'. [ 283.772310][T13695] bridge4: entered promiscuous mode [ 283.777687][T13695] bridge4: entered allmulticast mode [ 284.092199][T13705] syzkaller1: entered promiscuous mode [ 284.103563][T13705] syzkaller1: entered allmulticast mode [ 284.158784][T13709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2261'. [ 284.516062][T13711] tipc: Enabling of bearer rejected, already enabled [ 284.525685][T13711] batadv0: entered promiscuous mode [ 284.532478][T13711] batadv0: entered allmulticast mode [ 284.550788][T13711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2262'. [ 284.757220][T13725] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2265'. [ 284.904531][T13732] siw: device registration error -23 [ 284.985507][T13737] netlink: 'syz.2.2272': attribute type 13 has an invalid length. [ 284.994335][T13737] netlink: 'syz.2.2272': attribute type 58 has an invalid length. [ 285.006989][T13737] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2272'. [ 285.025075][T13737] dvmrp0: entered allmulticast mode [ 285.033051][T13737] dvmrp0: left allmulticast mode [ 285.035056][T13738] netlink: 'syz.4.2271': attribute type 1 has an invalid length. [ 285.328714][T13752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.799632][T13805] __nla_validate_parse: 6 callbacks suppressed [ 286.799653][T13805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2293'. [ 287.318448][T13817] netlink: 'syz.4.2296': attribute type 6 has an invalid length. [ 287.418970][T13820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2298'. [ 287.438628][T13819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2298'. [ 287.595859][ T5875] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 287.607056][ T5875] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 287.615660][ T5875] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 287.625077][ T5875] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 287.643083][ T5875] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 287.694014][T13823] wlan1 speed is unknown, defaulting to 1000 [ 287.696106][T13826] netlink: 'syz.0.2300': attribute type 18 has an invalid length. [ 288.162167][T13823] wlan1 speed is unknown, defaulting to 1000 [ 289.263649][T13823] chnl_net:caif_netlink_parms(): no params data found [ 289.535503][T13823] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.555851][T13823] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.567807][T13823] bridge_slave_0: entered allmulticast mode [ 289.587530][T13823] bridge_slave_0: entered promiscuous mode [ 289.641432][T13823] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.669685][T13823] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.677258][T13823] bridge_slave_1: entered allmulticast mode [ 289.719416][ T5880] Bluetooth: hci6: command tx timeout [ 289.727157][T13823] bridge_slave_1: entered promiscuous mode [ 289.798381][T13823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.825530][T13823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.928015][T13823] team0: Port device team_slave_0 added [ 289.937917][T13823] team0: Port device team_slave_1 added [ 290.015943][T13823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.023486][T13823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.051384][T13823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.064941][T13823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.072436][T13823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.103691][T13823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.253333][T13823] hsr_slave_0: entered promiscuous mode [ 290.261695][T13823] hsr_slave_1: entered promiscuous mode [ 290.268245][T13823] debugfs: 'hsr0' already exists in 'hsr' [ 290.279081][T13871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2312'. [ 290.288766][T13823] Cannot create hsr debugfs directory [ 291.357146][T13823] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 291.377576][T13823] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 291.406772][T13823] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 291.441971][T13823] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 291.696639][T13823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.748355][T13900] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2317'. [ 291.751769][T13823] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.800949][ T5880] Bluetooth: hci6: command tx timeout [ 291.822437][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.829879][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.910414][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.917726][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.000864][T13906] netlink: 'syz.4.2320': attribute type 1 has an invalid length. [ 292.016267][T13906] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2320'. [ 292.039431][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 292.727998][T13823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.729383][T13796] Set syz1 is full, maxelem 65536 reached [ 293.340329][T13954] nbd2: detected capacity change from 0 to 63 [ 293.366428][T13955] block nbd2: NBD_DISCONNECT [ 293.386677][T13960] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2333'. [ 293.402137][T13955] block nbd2: Disconnected due to user request. [ 293.427095][T13955] block nbd2: shutting down sockets [ 293.427880][T13823] veth0_vlan: entered promiscuous mode [ 293.454242][T13960] netlink: 'syz.4.2333': attribute type 1 has an invalid length. [ 293.470337][T13960] netlink: 15 bytes leftover after parsing attributes in process `syz.4.2333'. [ 293.485176][T13823] veth1_vlan: entered promiscuous mode [ 293.598819][T13966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2336'. [ 293.631386][T13969] nbd: must specify a size in bytes for the device [ 293.694914][T13823] veth0_macvtap: entered promiscuous mode [ 293.721944][T13823] veth1_macvtap: entered promiscuous mode [ 293.858555][T13823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.880709][ T5880] Bluetooth: hci6: command tx timeout [ 293.888291][T13823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.890947][T13978] IPVS: set_ctl: invalid protocol: 25647 0.0.0.0:12148 [ 293.915904][ T3478] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.918240][T13978] IPVS: set_ctl: invalid protocol: 25647 0.0.0.0:12148 [ 293.933528][T13978] IPVS: set_ctl: invalid protocol: 25647 0.0.0.0:12148 [ 293.941386][T13978] IPVS: set_ctl: invalid protocol: 25647 0.0.0.0:12148 [ 293.941898][ T3478] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.992232][T13978] IPVS: set_ctl: invalid protocol: 25647 0.0.0.0:12148 [ 294.007065][ T3478] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.020739][T13978] IPVS: set_ctl: invalid protocol: 25647 0.0.0.0:12148 [ 294.028143][T13978] IPVS: set_ctl: invalid protocol: 25647 0.0.0.0:12148 [ 294.038197][T13978] IPVS: set_ctl: invalid protocol: 25647 0.0.0.0:12148 [ 294.043479][ T3478] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.072355][T13978] IPVS: set_ctl: invalid protocol: 25647 0.0.0.0:12148 [ 294.103888][T13978] IPVS: set_ctl: invalid protocol: 25647 0.0.0.0:12148 [ 294.148538][T13978] IPVS: set_ctl: invalid protocol: 25647 0.0.0.0:12148 [ 294.161224][ T3478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.163307][T13978] IPVS: set_ctl: invalid protocol: 25647 0.0.0.0:12148 [ 294.185208][T13978] IPVS: set_ctl: invalid protocol: 25647 0.0.0.0:12148 [ 294.187496][ T3478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.193399][T13978] IPVS: set_ctl: invalid protocol: 25647 0.0.0.0:12148 [ 294.207927][T13978] IPVS: set_ctl: invalid protocol: 25647 0.0.0.0:12148 [ 294.215886][T13978] IPVS: set_ctl: invalid protocol: 25647 0.0.0.0:12148 [ 294.223614][T13978] IPVS: set_ctl: invalid protocol: 25647 0.0.0.0:12148 [ 294.231295][T13978] IPVS: set_ctl: invalid protocol: 25647 0.0.0.0:12148 [ 294.258910][T13978] IPVS: set_ctl: invalid protocol: 25647 0.0.0.0:12148 [ 294.267535][T13978] IPVS: set_ctl: invalid protocol: 25647 0.0.0.0:12148 [ 294.272507][ T3478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.283059][ T3478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.298672][T13978] IPVS: set_ctl: invalid protocol: 25647 0.0.0.0:12148 [ 294.308004][T13978] IPVS: set_ctl: invalid protocol: 25647 0.0.0.0:12148 [ 294.315948][T13978] IPVS: set_ctl: invalid protocol: 25647 0.0.0.0:12148 [ 294.324786][T13978] IPVS: set_ctl: invalid protocol: 25647 0.0.0.0:12148 [ 294.332662][T13978] IPVS: set_ctl: invalid protocol: 25647 0.0.0.0:12148 [ 294.341555][T13978] IPVS: set_ctl: invalid protocol: 25647 0.0.0.0:12148 [ 294.348807][T13978] IPVS: set_ctl: invalid protocol: 25647 0.0.0.0:12148 [ 294.356789][T13978] IPVS: set_ctl: invalid protocol: 25647 0.0.0.0:12148 [ 294.364930][T13978] IPVS: set_ctl: invalid protocol: 25647 0.0.0.0:12148 [ 294.381440][T13978] IPVS: set_ctl: invalid protocol: 25647 0.0.0.0:12148 [ 294.395446][T13978] IPVS: set_ctl: invalid protocol: 25647 0.0.0.0:12148 [ 294.404288][T13978] IPVS: set_ctl: invalid protocol: 25647 0.0.0.0:12148 [ 294.418859][T13978] IPVS: set_ctl: invalid protocol: 25647 0.0.0.0:12148 [ 294.645409][T14007] netlink: 'syz.0.2343': attribute type 11 has an invalid length. [ 294.721697][T14009] netlink: 'syz.0.2343': attribute type 11 has an invalid length. [ 295.060799][ T5875] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 295.086899][ T5875] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 295.097290][ T5875] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 295.106889][ T5875] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 295.117326][ T5875] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 295.200277][T14022] netlink: 304 bytes leftover after parsing attributes in process `syz.6.2347'. [ 295.376688][T14031] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2351'. [ 295.473825][T14012] wlan1 speed is unknown, defaulting to 1000 [ 295.489017][T14042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2352'. [ 295.975872][ T5880] Bluetooth: hci6: command tx timeout [ 296.030831][T14061] bridge5: entered promiscuous mode [ 296.036109][T14061] bridge5: entered allmulticast mode [ 296.153683][T14058] wlan1 speed is unknown, defaulting to 1000 [ 296.163667][T14012] wlan1 speed is unknown, defaulting to 1000 [ 296.197724][T14066] tipc: Started in network mode [ 296.204106][T14066] tipc: Node identity ceba3b41aa5b, cluster identity 4711 [ 296.224504][T14066] tipc: Enabled bearer , priority 0 [ 296.233083][T14066] syzkaller0: entered promiscuous mode [ 296.238770][T14066] syzkaller0: entered allmulticast mode [ 296.363534][T14070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2364'. [ 296.394757][T14076] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.404707][T14077] tipc: Resetting bearer [ 296.415561][T14065] tipc: Resetting bearer [ 296.535110][T14065] tipc: Disabling bearer [ 296.798706][T14089] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2367'. [ 296.815847][T14058] wlan1 speed is unknown, defaulting to 1000 [ 296.846589][T14089] veth0: entered promiscuous mode [ 296.889993][T14088] veth0: left promiscuous mode [ 297.088278][T14099] netlink: 212212 bytes leftover after parsing attributes in process `syz.2.2369'. [ 297.164390][ T5880] Bluetooth: hci7: command tx timeout [ 297.215567][T14012] chnl_net:caif_netlink_parms(): no params data found [ 297.251446][T14104] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2371'. [ 297.261251][T14104] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2371'. [ 297.587273][T14012] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.603373][T14012] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.615670][T14012] bridge_slave_0: entered allmulticast mode [ 297.624293][T14012] bridge_slave_0: entered promiscuous mode [ 297.634122][T14012] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.641820][T14012] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.656252][T14012] bridge_slave_1: entered allmulticast mode [ 297.666074][T14012] bridge_slave_1: entered promiscuous mode [ 297.744999][T14125] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2376'. [ 297.821711][T14012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.852307][T14012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.951540][T14130] veth0_to_bridge: entered promiscuous mode [ 297.962680][T14012] team0: Port device team_slave_0 added [ 297.994165][T14012] team0: Port device team_slave_1 added [ 298.074970][T14012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.083743][T14012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.112764][T14012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.135498][T14012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.147777][T14012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.184925][T14012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.403899][T14012] hsr_slave_0: entered promiscuous mode [ 298.421459][T14012] hsr_slave_1: entered promiscuous mode [ 298.428531][T14012] debugfs: 'hsr0' already exists in 'hsr' [ 298.441755][T14012] Cannot create hsr debugfs directory [ 298.452977][T14130] veth0_to_bridge: left promiscuous mode [ 298.777509][T14146] openvswitch: netlink: Multiple metadata blocks provided [ 299.007521][T14012] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 299.046136][T14012] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 299.113004][T14012] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 299.131089][T14152] netlink: zone id is out of range [ 299.137657][T14152] netlink: zone id is out of range [ 299.150836][T14012] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 299.178352][T14152] netlink: zone id is out of range [ 299.185151][T14152] netlink: zone id is out of range [ 299.185891][T14151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2385'. [ 299.191139][T14152] netlink: zone id is out of range [ 299.205420][T14152] netlink: zone id is out of range [ 299.212163][T14152] netlink: zone id is out of range [ 299.240261][ T5880] Bluetooth: hci7: command tx timeout [ 299.258760][T14152] netlink: zone id is out of range [ 299.268145][T14163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2385'. [ 299.285756][T14152] netlink: zone id is out of range [ 299.327089][ T3478] wlan0: Trigger new scan to find an IBSS to join [ 299.368411][T14166] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2388'. [ 299.388288][T14166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2388'. [ 299.545242][T14165] bridge7: port 1(veth5) entered blocking state [ 299.560146][T14165] bridge7: port 1(veth5) entered disabled state [ 299.566947][T14165] veth5: entered allmulticast mode [ 299.577485][T14165] veth5: entered promiscuous mode [ 299.612039][T14167] vlan5: entered allmulticast mode [ 299.626135][T14167] veth0_to_bond: entered allmulticast mode [ 299.654668][T14179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2388'. [ 299.654721][T14167] bridge7: port 2(vlan5) entered blocking state [ 299.672893][T14167] bridge7: port 2(vlan5) entered disabled state [ 299.682210][T14167] vlan5: entered promiscuous mode [ 299.687391][T14167] veth0_to_bond: entered promiscuous mode [ 299.900965][T14184] netlink: 'syz.4.2391': attribute type 16 has an invalid length. [ 299.917290][T14186] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2393'. [ 299.926381][T14012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.935942][T14184] netlink: 'syz.4.2391': attribute type 3 has an invalid length. [ 299.966998][T14012] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.996742][T12007] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.004365][T12007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.054687][T12007] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.062022][T12007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.180668][T14197] tap0: tun_chr_ioctl cmd 1074025672 [ 300.186035][T14197] tap0: ignored: set checksum disabled [ 300.381278][T14203] 8021q: VLANs not supported on tunl0 [ 300.575532][T14211] netlink: 'syz.4.2399': attribute type 1 has an invalid length. [ 300.664607][T14211] 8021q: adding VLAN 0 to HW filter on device bond8 [ 300.733909][T14211] bond8: (slave ip6erspan0): making interface the new active one [ 300.808887][T14211] bond8: (slave ip6erspan0): Enslaving as an active interface with an up link [ 301.009058][T14227] netlink: 'syz.4.2402': attribute type 5 has an invalid length. [ 301.051539][T14012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.320425][ T5880] Bluetooth: hci7: command tx timeout [ 301.409779][T14236] pim6reg1: entered promiscuous mode [ 301.423304][T14236] pim6reg1: entered allmulticast mode [ 302.174454][T14259] __nla_validate_parse: 4 callbacks suppressed [ 302.174478][T14259] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2406'. [ 302.328535][T14264] netlink: 'syz.4.2408': attribute type 1 has an invalid length. [ 302.337483][T14265] netlink: 'syz.4.2408': attribute type 1 has an invalid length. [ 302.347814][T14264] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2408'. [ 302.368609][T14265] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2408'. [ 302.373686][T14012] veth0_vlan: entered promiscuous mode [ 302.413712][T14012] veth1_vlan: entered promiscuous mode [ 302.484340][T14012] veth0_macvtap: entered promiscuous mode [ 302.506843][T14012] veth1_macvtap: entered promiscuous mode [ 302.515710][T14269] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2409'. [ 302.536669][T14271] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 302.592906][T14012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.634922][T14012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.663798][ T59] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.677145][ T59] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.712534][ T59] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.730509][ T59] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.927916][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.956734][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.164703][ T3521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.203673][ T3521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.286513][T14293] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2416'. [ 303.301630][T14295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2415'. [ 303.401395][ T5880] Bluetooth: hci7: command tx timeout [ 303.508370][T14303] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 303.519848][T14303] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 303.643741][T14323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2422'. [ 303.750821][T14326] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 303.754435][T14327] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2424'. [ 303.779850][T14327] net_ratelimit: 16 callbacks suppressed [ 303.779925][T14327] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 303.795849][T14327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.810954][T14328] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2424'. [ 303.820478][T14328] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2424'. [ 303.930290][T14332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.022926][T14333] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.125253][T14340] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20000 [ 304.186051][T14345] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20000 [ 304.200069][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 304.362338][ T3521] wlan0: Trigger new scan to find an IBSS to join [ 304.465863][T14357] openvswitch: netlink: Missing key (keys=40, expected=100) [ 304.636837][T14365] batman_adv: batadv0: Adding interface: ipvlan3 [ 304.647966][T14365] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.675138][T14365] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active [ 304.715058][T14367] dvmrp0: entered allmulticast mode [ 305.061091][T14381] netlink: 'syz.7.2444': attribute type 10 has an invalid length. [ 305.124285][T14381] batman_adv: batadv0: Adding interface: team0 [ 305.131473][T14381] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.157578][T14381] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 305.480996][ T5880] Bluetooth: hci7: command tx timeout [ 305.574818][T14404] openvswitch: netlink: Actions may not be safe on all matching packets [ 305.796098][T14420] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 305.804675][ T980] IPVS: starting estimator thread 0... [ 305.919492][T14426] IPVS: using max 30 ests per chain, 72000 per kthread [ 305.934583][T14431] tipc: Enabling of bearer rejected, failed to enable media [ 306.180244][T14439] tipc: Started in network mode [ 306.185184][T14439] tipc: Node identity 8ea6bfe9542c, cluster identity 4711 [ 306.193615][T14439] tipc: Enabled bearer , priority 0 [ 306.205475][T14439] syzkaller0: entered promiscuous mode [ 306.215569][T14439] syzkaller0: entered allmulticast mode [ 306.289953][T14439] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 306.404866][T14439] tipc: Resetting bearer [ 306.424844][T14438] tipc: Resetting bearer [ 306.447531][T14438] tipc: Disabling bearer [ 306.746221][ T9709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.066130][T14481] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 307.157915][T14481] bond1: entered promiscuous mode [ 307.172567][T14481] bond1: entered allmulticast mode [ 307.178644][T14481] 8021q: adding VLAN 0 to HW filter on device bond1 [ 307.362133][T14505] __nla_validate_parse: 10 callbacks suppressed [ 307.362157][T14505] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2485'. [ 307.478399][T14517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2487'. [ 307.537643][T14522] ipvlan0: entered promiscuous mode [ 307.545484][T14522] ipvlan0: entered allmulticast mode [ 307.566937][T14522] veth0_vlan: entered allmulticast mode [ 307.759789][T14533] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2491'. [ 308.018744][T14548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2496'. [ 308.289921][T14559] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2497'. [ 308.411271][T14563] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2500'. [ 308.426968][T14561] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 308.434555][T14561] IPv6: NLM_F_CREATE should be set when creating new route [ 308.448368][T14561] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 308.448988][T14563] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2500'. [ 308.618014][T14576] nbd: must specify an index to disconnect [ 308.668288][T14578] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2505'. [ 308.681138][T14578] bridge_slave_1: left allmulticast mode [ 308.699396][T14578] bridge_slave_1: left promiscuous mode [ 308.709223][T14578] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.722895][T14578] bridge_slave_0: left allmulticast mode [ 308.731017][T14578] bridge_slave_0: left promiscuous mode [ 308.739234][T14578] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.038810][T14596] syzkaller1: entered promiscuous mode [ 309.045818][T14596] syzkaller1: entered allmulticast mode [ 309.211970][T14609] blkio.reset_stats is deprecated [ 309.453411][T14617] can: request_module (can-proto-0) failed. [ 310.102261][T14649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2523'. [ 310.322104][T14659] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2525'. [ 310.547000][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.622614][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.751378][T14671] netlink: 'syz.6.2529': attribute type 1 has an invalid length. [ 310.790146][T14674] netlink: 'syz.6.2529': attribute type 1 has an invalid length. [ 311.267460][ T5875] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 311.281229][ T5875] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 311.290100][ T5875] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 311.298465][ T5875] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 311.320286][ T5875] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 311.475395][T14691] wlan1 speed is unknown, defaulting to 1000 [ 311.850064][T14720] dvmrp1: entered allmulticast mode [ 312.037895][T14725] sctp: [Deprecated]: syz.7.2547 (pid 14725) Use of int in maxseg socket option. [ 312.037895][T14725] Use struct sctp_assoc_value instead [ 312.085738][T14691] wlan1 speed is unknown, defaulting to 1000 [ 312.163364][T14729] IPVS: length: 157 != 24 [ 312.343340][T14741] netlink: 'syz.4.2552': attribute type 1 has an invalid length. [ 312.591645][T14756] __nla_validate_parse: 4 callbacks suppressed [ 312.591668][T14756] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2554'. [ 312.918499][T14775] tipc: Enabling of bearer rejected, already enabled [ 312.989012][T14777] tipc: Enabling of bearer rejected, already enabled [ 313.302270][T14691] chnl_net:caif_netlink_parms(): no params data found [ 313.364217][T14793] sock: sock_timestamping_bind_phc: sock not bind to device [ 313.393027][T14793] netlink: 64985 bytes leftover after parsing attributes in process `syz.6.2563'. [ 313.402322][ T5880] Bluetooth: hci8: command tx timeout [ 313.473001][T14794] openvswitch: netlink: Key type 85 is out of range max 32 [ 313.481489][T14796] openvswitch: netlink: Key type 85 is out of range max 32 [ 313.681999][T14691] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.690727][T14691] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.698132][T14691] bridge_slave_0: entered allmulticast mode [ 313.742583][T14691] bridge_slave_0: entered promiscuous mode [ 313.772234][T14691] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.809528][T14691] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.828620][T14691] bridge_slave_1: entered allmulticast mode [ 313.849892][T14691] bridge_slave_1: entered promiscuous mode [ 314.055600][T14691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.093468][T14691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.296556][T14821] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2571'. [ 314.313363][T14691] team0: Port device team_slave_0 added [ 314.324618][T14824] C: entered allmulticast mode [ 314.350782][T14691] team0: Port device team_slave_1 added [ 314.595716][T14691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.596069][T14840] netdevsim netdevsim7: Direct firmware load for failed with error -2 [ 314.611597][T14691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.636243][T14846] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2576'. [ 314.661605][T14840] netdevsim netdevsim7: Falling back to sysfs fallback for: [ 314.703203][T14691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.743865][T14691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.760187][T14691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.793270][T14691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.988025][T14691] hsr_slave_0: entered promiscuous mode [ 315.022219][T14691] hsr_slave_1: entered promiscuous mode [ 315.039917][T14691] debugfs: 'hsr0' already exists in 'hsr' [ 315.047855][T14691] Cannot create hsr debugfs directory [ 315.480688][ T5880] Bluetooth: hci8: command tx timeout [ 315.738618][T14897] netlink: zone id is out of range [ 315.744368][T14897] netlink: zone id is out of range [ 315.751724][T14897] netlink: zone id is out of range [ 315.756886][T14897] netlink: zone id is out of range [ 315.763737][T14897] netlink: zone id is out of range [ 315.777619][T14897] netlink: zone id is out of range [ 315.803987][T14897] netlink: zone id is out of range [ 315.818778][T14897] netlink: zone id is out of range [ 316.391994][T14900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.417748][T14691] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 316.458869][T14691] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 316.514571][T14691] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 316.535439][T14908] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2590'. [ 316.538815][T14691] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 316.677777][T14908] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2590'. [ 316.690487][T14908] chnl_net:caif_netlink_parms(): no params data found [ 316.729106][T14910] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2591'. [ 316.951616][T14691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.025788][T14691] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.097341][T11993] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.104809][T11993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.124724][T11993] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.132000][T11993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.160002][T14940] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2596'. [ 317.194692][T14939] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2598'. [ 317.218152][T14943] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2599'. [ 317.560556][ T5880] Bluetooth: hci8: command tx timeout [ 317.617314][T14951] wlan1 speed is unknown, defaulting to 1000 [ 317.711001][T14961] __nla_validate_parse: 1 callbacks suppressed [ 317.711024][T14961] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2603'. [ 317.955097][T14691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.183882][T14979] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2607'. [ 318.415552][T14951] wlan1 speed is unknown, defaulting to 1000 [ 318.797931][T14997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2611'. [ 319.123615][T14691] veth0_vlan: entered promiscuous mode [ 319.255263][T14691] veth1_vlan: entered promiscuous mode [ 319.411985][T14691] veth0_macvtap: entered promiscuous mode [ 319.444227][T14691] veth1_macvtap: entered promiscuous mode [ 319.623152][T14691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.641962][ T5880] Bluetooth: hci8: command tx timeout [ 319.689664][T14691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.763007][T11998] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.787584][T11998] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.818318][T11998] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.845226][T11998] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.098859][T12006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.107426][T12006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.294731][T15028] : renamed from hsr0 [ 320.313752][T11998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.332257][T11998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.417932][T15030] tipc: Enabled bearer , priority 0 [ 320.465641][T15030] syzkaller0: entered promiscuous mode [ 320.472222][T15030] syzkaller0: entered allmulticast mode [ 320.604151][T15030] tipc: Resetting bearer [ 320.632100][T15029] tipc: Resetting bearer [ 320.665900][T15044] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2621'. [ 320.676612][T15029] tipc: Disabling bearer [ 320.695051][T15049] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2622'. [ 320.946020][T15051] netlink: 'syz.7.2623': attribute type 32 has an invalid length. [ 320.957536][T15051] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2623'. [ 321.227795][T15051] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 321.382014][T15075] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2629'. [ 321.392125][T15075] netlink: 272 bytes leftover after parsing attributes in process `syz.6.2629'. [ 321.402368][T15075] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2629'. [ 321.732892][T15089] net_ratelimit: 15 callbacks suppressed [ 321.732917][T15089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 322.059831][T15092] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.067970][T15092] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.372030][T15092] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 322.398589][T15091] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 322.400250][T15112] netlink: 'syz.6.2640': attribute type 3 has an invalid length. [ 322.424574][T15110] netlink: 9 bytes leftover after parsing attributes in process `syz.7.2639'. [ 322.487479][T15101] syzkaller1: entered promiscuous mode [ 322.496209][T15101] syzkaller1: entered allmulticast mode [ 322.579017][T15115] netlink: 'syz.6.2641': attribute type 1 has an invalid length. [ 322.628738][T15117] dvmrp0: entered allmulticast mode [ 322.653136][T15117] dvmrp0: left allmulticast mode [ 322.754300][T15122] team_slave_0: entered promiscuous mode [ 322.760132][T15122] team_slave_1: entered promiscuous mode [ 322.905812][T15124] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2645'. [ 322.918837][T15124] netlink: 'syz.4.2645': attribute type 1 has an invalid length. [ 322.928506][T15124] netlink: 'syz.4.2645': attribute type 3 has an invalid length. [ 322.940273][T15124] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2645'. [ 323.092026][T15137] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2648'. [ 323.113429][T15137] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2648'. [ 323.137856][T15140] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2649'. [ 323.540881][T15168] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2656'. [ 323.584367][T15168] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2656'. [ 323.666971][T15174] netlink: zone id is out of range [ 323.678446][T15174] netlink: zone id is out of range [ 323.701608][T15174] netlink: zone id is out of range [ 323.843499][T15179] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2662'. [ 323.992386][T15188] netlink: 'syz.6.2665': attribute type 11 has an invalid length. [ 324.003350][T15189] netlink: 380 bytes leftover after parsing attributes in process `syz.7.2666'. [ 324.015331][T15189] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2666'. [ 324.153178][T15198] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20002 [ 324.396004][T15209] xt_policy: neither incoming nor outgoing policy selected [ 324.683704][T15227] netlink: 'syz.7.2678': attribute type 9 has an invalid length. [ 325.664063][ T5875] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 325.678346][ T5875] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 325.688345][ T5875] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 325.698089][ T5875] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 325.708377][ T5875] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 325.795923][T15258] wlan1 speed is unknown, defaulting to 1000 [ 325.914487][T15266] netlink: 'syz.7.2689': attribute type 10 has an invalid length. [ 325.994909][T15267] netlink: 'syz.7.2689': attribute type 1 has an invalid length. [ 325.997076][T15266] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 326.187774][T15258] wlan1 speed is unknown, defaulting to 1000 [ 326.192668][T15273] netlink: 'syz.8.2691': attribute type 1 has an invalid length. [ 326.257318][T15273] bond1 (unregistering): Released all slaves [ 326.360563][T15280] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 326.681629][T15291] netlink: 'syz.7.2696': attribute type 2 has an invalid length. [ 326.740384][T15291] netlink: 'syz.7.2696': attribute type 1 has an invalid length. [ 326.777503][T15291] netlink: 'syz.7.2696': attribute type 1 has an invalid length. [ 327.109362][T15258] chnl_net:caif_netlink_parms(): no params data found [ 327.190637][T15310] nbd: must specify at least one socket [ 327.394933][T15258] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.410872][T15258] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.418406][T15258] bridge_slave_0: entered allmulticast mode [ 327.428450][T15258] bridge_slave_0: entered promiscuous mode [ 327.438653][T15258] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.446322][T15258] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.453785][T15258] bridge_slave_1: entered allmulticast mode [ 327.462539][T15258] bridge_slave_1: entered promiscuous mode [ 327.557768][T15258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.593941][T15258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.713717][T15325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.734109][T15258] team0: Port device team_slave_0 added [ 327.758280][T15258] team0: Port device team_slave_1 added [ 327.799556][ T5875] Bluetooth: hci1: command tx timeout [ 327.877695][T15258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.891695][T15258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.918586][T15258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.933686][T15258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.942344][T15258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.987041][T15258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.086785][T15333] tipc: Enabling of bearer rejected, failed to enable media [ 328.251224][T15258] hsr_slave_0: entered promiscuous mode [ 328.260131][T15258] hsr_slave_1: entered promiscuous mode [ 328.267928][T15258] debugfs: 'hsr0' already exists in 'hsr' [ 328.275387][T15258] Cannot create hsr debugfs directory [ 328.291189][T15339] __nla_validate_parse: 11 callbacks suppressed [ 328.291213][T15339] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2709'. [ 328.447818][T15342] netlink: 1036 bytes leftover after parsing attributes in process `syz.8.2710'. [ 328.461119][T15342] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 328.497434][T15342] netlink: 1036 bytes leftover after parsing attributes in process `syz.8.2710'. [ 328.510095][T15342] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 328.559330][T15344] syzkaller0: entered promiscuous mode [ 328.565142][T15344] syzkaller0: entered allmulticast mode [ 328.874343][T15358] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2715'. [ 328.888611][T15258] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.965286][T15363] sctp: [Deprecated]: syz.6.2718 (pid 15363) Use of struct sctp_assoc_value in delayed_ack socket option. [ 328.965286][T15363] Use struct sctp_sack_info instead [ 329.044860][T15258] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.137061][T15258] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.195744][T15373] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 329.203068][T15373] IPv6: NLM_F_CREATE should be set when creating new route [ 329.226308][T15258] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.353315][T15378] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2724'. [ 329.374838][T15378] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2724'. [ 329.398265][T15380] netlink: 1 bytes leftover after parsing attributes in process `syz.7.2725'. [ 329.518982][T15258] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 329.546528][T15258] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 329.563929][T15258] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 329.581381][T15258] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 329.851387][T15258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.879763][ T5875] Bluetooth: hci1: command tx timeout [ 329.928774][T15258] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.959655][T15398] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2729'. [ 329.986032][T12001] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.993310][T12001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.011416][T12001] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.018819][T12001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.032683][T15398] 8021q: VLANs not supported on gre0 [ 330.182877][T15404] TC_ACT_REPEAT abuse ? [ 330.189394][T15404] TC_ACT_REPEAT abuse ? [ 330.194115][T15404] TC_ACT_REPEAT abuse ? [ 330.223135][T15404] TC_ACT_REPEAT abuse ? [ 330.227860][T15404] TC_ACT_REPEAT abuse ? [ 330.232586][T15404] TC_ACT_REPEAT abuse ? [ 330.334254][T15404] TC_ACT_REPEAT abuse ? [ 330.338963][T15404] TC_ACT_REPEAT abuse ? [ 330.343691][T15404] TC_ACT_REPEAT abuse ? [ 330.829072][T15258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.946773][T15432] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2737'. [ 331.078554][T15432] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2737'. [ 331.715058][T15258] veth0_vlan: entered promiscuous mode [ 331.735160][T15258] veth1_vlan: entered promiscuous mode [ 331.798774][T15258] veth0_macvtap: entered promiscuous mode [ 331.854531][T15258] veth1_macvtap: entered promiscuous mode [ 331.906474][T15476] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 331.969734][ T5875] Bluetooth: hci1: command tx timeout [ 331.997652][T15258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.024600][T15258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.092093][T12006] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.124971][T12006] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.177807][T12006] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.198451][T12006] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.480944][T11998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.488905][T11998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.554504][T15499] netlink: 'syz.7.2755': attribute type 6 has an invalid length. [ 332.654301][T11993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.680826][T11993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.719570][T15504] net_ratelimit: 46 callbacks suppressed [ 332.719593][T15504] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.740210][T15506] netlink: 'syz.6.2757': attribute type 10 has an invalid length. [ 332.812994][T15506] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.870316][T15506] bridge_slave_1: left allmulticast mode [ 332.876128][T15506] bridge_slave_1: left promiscuous mode [ 332.891818][T15506] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.955218][T15506] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 333.634653][ T5880] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 333.640795][ C0] TC_ACT_REPEAT abuse ? [ 333.672701][ T5880] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 333.684396][ T5880] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 333.694868][ T5880] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 333.706742][ T5880] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 333.983307][T15544] wlan1 speed is unknown, defaulting to 1000 [ 334.055168][ T5880] Bluetooth: hci1: command tx timeout [ 334.308834][T15558] __nla_validate_parse: 5 callbacks suppressed [ 334.308857][T15558] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2770'. [ 334.367867][T15565] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2771'. [ 334.490585][T15565] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2771'. [ 334.535653][T15573] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2773'. [ 334.788899][T15544] wlan1 speed is unknown, defaulting to 1000 [ 334.844909][T15588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2776'. [ 334.852919][T15587] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2775'. [ 335.163511][T15598] netlink: 'syz.6.2778': attribute type 4 has an invalid length. [ 335.255911][T15599] netlink: 'syz.6.2778': attribute type 4 has an invalid length. [ 335.310293][T15597] tipc: Enabling not permitted [ 335.327150][T15597] tipc: Enabling of bearer rejected, failed to enable media [ 335.707993][ T30] audit: type=1107 audit(1757366761.976:4): pid=15625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='4[G?4dNn, priority 0 [ 336.140007][T15639] syzkaller0: entered promiscuous mode [ 336.150497][T15639] syzkaller0: entered allmulticast mode [ 336.213605][T15638] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2789'. [ 336.231034][T15638] tipc: Resetting bearer [ 336.263696][T15637] tipc: Resetting bearer [ 336.314327][T15637] tipc: Disabling bearer [ 336.473747][T15544] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.498686][T15651] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2793'. [ 336.504994][T15544] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.532960][T15544] bridge_slave_0: entered allmulticast mode [ 336.554402][T15544] bridge_slave_0: entered promiscuous mode [ 336.609064][T15651] wg1: entered promiscuous mode [ 336.638630][T15544] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.659568][T15544] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.669022][T15544] bridge_slave_1: entered allmulticast mode [ 336.672925][T15655] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 336.683315][T15655] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 336.691570][T15655] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 336.700123][T15655] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 336.703708][T15544] bridge_slave_1: entered promiscuous mode [ 336.708135][T15655] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 336.722292][T15655] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 336.730454][T15655] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 336.738538][T15655] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 336.891308][T15544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.906975][T15544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.984529][T15664] IPVS: Unknown mcast interface: nr0 [ 337.235172][T15544] team0: Port device team_slave_0 added [ 337.260410][T15674] netlink: 'syz.6.2800': attribute type 10 has an invalid length. [ 337.267549][T15544] team0: Port device team_slave_1 added [ 337.345556][T15674] team_slave_0: left promiscuous mode [ 337.352528][T15674] team_slave_1: left promiscuous mode [ 337.363342][T15674] batman_adv: batadv0: Adding interface: team0 [ 337.370146][T15674] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.437303][T15674] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 337.527112][T15544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.540384][T15544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.584077][T15544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.607685][T15544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.623542][T15544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.675268][T15544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.860395][T15692] netlink: 'syz.8.2804': attribute type 4 has an invalid length. [ 337.887748][ T5880] Bluetooth: hci9: command tx timeout [ 337.905847][T15544] hsr_slave_0: entered promiscuous mode [ 337.918493][T15544] hsr_slave_1: entered promiscuous mode [ 337.932439][T15693] netlink: 'syz.8.2804': attribute type 4 has an invalid length. [ 337.937837][T15544] debugfs: 'hsr0' already exists in 'hsr' [ 337.946097][T15544] Cannot create hsr debugfs directory [ 338.811834][T15722] netlink: 'syz.4.2813': attribute type 1 has an invalid length. [ 338.877759][T15722] veth3: entered promiscuous mode [ 338.961107][T15726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.970451][T15726] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.994108][T15730] net_ratelimit: 46 callbacks suppressed [ 338.994140][T15730] TC_ACT_REPEAT abuse ? [ 338.998115][T15726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.001390][ C0] TC_ACT_REPEAT abuse ? [ 339.017742][T15726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.023105][T15730] TC_ACT_REPEAT abuse ? [ 339.043525][T11998] TC_ACT_REPEAT abuse ? [ 339.059571][ C1] TC_ACT_REPEAT abuse ? [ 339.067008][T15726] batman_adv: batadv0: Removing interface: team0 [ 339.253520][T15729] netlink: 'syz.6.2814': attribute type 1 has an invalid length. [ 339.339292][T15732] TC_ACT_REPEAT abuse ? [ 339.345248][ C0] TC_ACT_REPEAT abuse ? [ 339.401640][T12007] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 339.618344][T15544] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 339.654342][T15544] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 339.688743][T15544] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 339.717775][T15753] __nla_validate_parse: 37 callbacks suppressed [ 339.717797][T15753] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2820'. [ 339.764454][T15754] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2820'. [ 339.777545][T15544] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 339.969907][ T5880] Bluetooth: hci9: command tx timeout [ 340.025889][T15770] veth7: entered allmulticast mode [ 340.041484][ T121] TC_ACT_REPEAT abuse ? [ 340.284739][T15544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.364990][T15544] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.428671][T15793] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2833'. [ 340.522302][T12007] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.529618][T12007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.590997][T12007] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.598629][T12007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.681120][ T121] TC_ACT_REPEAT abuse ? [ 341.652617][T15851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.723163][T15544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.955062][T15856] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 342.049289][ T5875] Bluetooth: hci9: command tx timeout [ 342.178288][T15871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2857'. [ 342.202807][T15866] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2856'. [ 342.877575][T15544] veth0_vlan: entered promiscuous mode [ 342.913035][T15544] veth1_vlan: entered promiscuous mode [ 343.013194][T15544] veth0_macvtap: entered promiscuous mode [ 343.054214][T15544] veth1_macvtap: entered promiscuous mode [ 343.135798][T15544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.144923][T15917] netlink: 'syz.8.2867': attribute type 1 has an invalid length. [ 343.173147][T15917] netlink: 244 bytes leftover after parsing attributes in process `syz.8.2867'. [ 343.184970][T15544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.265222][T11998] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.293096][T15919] netlink: 512 bytes leftover after parsing attributes in process `syz.6.2869'. [ 343.317997][T11998] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.366087][T15923] netlink: 'syz.7.2870': attribute type 8 has an invalid length. [ 343.371297][T11998] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.433080][T11998] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.504931][T15929] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2872'. [ 343.675710][T14750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.697209][T14750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.786207][T14750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.800844][T14750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.811989][T15935] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2877'. [ 343.826430][T15935] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2877'. [ 344.933599][T16000] IPVS: set_ctl: invalid protocol: 33 172.20.20.38:20001 [ 345.072395][T16009] net_ratelimit: 1 callbacks suppressed [ 345.072414][T16009] TC_ACT_REPEAT abuse ? [ 345.083841][ C1] TC_ACT_REPEAT abuse ? [ 345.234412][T16016] __nla_validate_parse: 4 callbacks suppressed [ 345.234437][T16016] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2901'. [ 345.401759][T16022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2904'. [ 345.427253][T16022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2904'. [ 345.737003][T16033] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.744966][T16033] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.081462][T16033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.097982][T16033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.299539][T11992] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.319019][T11992] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.386173][T11992] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.453673][T14750] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.580819][T16062] gtp0: entered promiscuous mode [ 346.586786][T16062] gtp0: entered allmulticast mode [ 346.722962][T16073] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2919'. [ 346.741186][T16073] netlink: 'syz.9.2919': attribute type 1 has an invalid length. [ 346.827209][T16078] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2919'. [ 346.905932][T16073] bond1 (unregistering): Released all slaves [ 346.977188][T16078] wg2: entered promiscuous mode [ 346.986797][T16078] wg2: entered allmulticast mode [ 347.131184][T16090] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2923'. [ 347.255775][T16090] 8021q: adding VLAN 0 to HW filter on device bond1 [ 347.326943][T16094] 8021q: adding VLAN 0 to HW filter on device bond1 [ 347.334872][T16094] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 347.355630][T16094] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 347.364006][T16101] tipc: Can't bind to reserved service type 1 [ 347.418229][T16104] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2925'. [ 347.448549][T16099] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2925'. [ 347.512963][T16098] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 347.775941][T16122] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 347.883696][T16131] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2934'. [ 348.105463][T16143] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2938'. [ 348.838384][T16186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.017527][T16198] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 349.053035][T16198] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 349.713743][T16229] tipc: Started in network mode [ 349.718727][T16229] tipc: Node identity 4623142eacfd, cluster identity 4711 [ 349.727393][T16229] tipc: Enabled bearer , priority 0 [ 349.737543][T16238] netlink: 'syz.6.2966': attribute type 10 has an invalid length. [ 349.753096][T16229] syzkaller0: entered promiscuous mode [ 349.758935][T16229] syzkaller0: entered allmulticast mode [ 349.775870][T16229] sit0: entered promiscuous mode [ 349.781885][T16229] netlink: 'syz.9.2965': attribute type 1 has an invalid length. [ 349.857057][T16229] tipc: Resetting bearer [ 349.870562][T16244] syzkaller0: entered promiscuous mode [ 349.876104][T16244] syzkaller0: entered allmulticast mode [ 349.887164][T16228] tipc: Resetting bearer [ 349.931489][T16246] netlink: 'syz.7.2969': attribute type 6 has an invalid length. [ 349.944643][T16246] netlink: 'syz.7.2969': attribute type 5 has an invalid length. [ 349.958800][T16228] tipc: Disabling bearer [ 349.974982][T16244] tipc: Started in network mode [ 349.980504][T16244] tipc: Node identity f24864c50e6f, cluster identity 4711 [ 349.988272][T16244] tipc: Enabled bearer , priority 0 [ 349.998418][T16244] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 349.999185][T16246] netlink: 'syz.7.2969': attribute type 1 has an invalid length. [ 350.086771][T16244] tipc: Resetting bearer [ 350.107452][T16243] tipc: Resetting bearer [ 350.147884][T16243] tipc: Disabling bearer [ 350.468700][T16278] __nla_validate_parse: 12 callbacks suppressed [ 350.468721][T16278] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2977'. [ 350.638232][T16284] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2979'. [ 350.651981][T16284] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2979'. [ 350.841191][T16292] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2982'. [ 351.301075][T16310] tipc: Enabling of bearer rejected, failed to enable media [ 351.512986][T16322] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2993'. [ 351.520625][T16326] syz.7.2995: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 351.546290][T16319] bond1: entered promiscuous mode [ 351.551685][T16319] bond1: entered allmulticast mode [ 351.552216][T16326] CPU: 0 UID: 0 PID: 16326 Comm: syz.7.2995 Not tainted syzkaller #0 PREEMPT(full) [ 351.552239][T16326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 351.552249][T16326] Call Trace: [ 351.552258][T16326] [ 351.552265][T16326] dump_stack_lvl+0x189/0x250 [ 351.552295][T16326] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.552316][T16326] ? __pfx__printk+0x10/0x10 [ 351.552339][T16326] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 351.552360][T16326] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 351.552381][T16326] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 351.552403][T16326] warn_alloc+0x214/0x310 [ 351.552429][T16326] ? stack_depot_save_flags+0x40/0x860 [ 351.552454][T16326] ? __pfx_warn_alloc+0x10/0x10 [ 351.552481][T16326] ? kasan_save_track+0x4f/0x80 [ 351.552502][T16326] ? xskq_create+0x56/0x170 [ 351.552523][T16326] ? xsk_init_queue+0xb0/0x110 [ 351.552542][T16326] ? xsk_setsockopt+0x4dc/0x8d0 [ 351.552561][T16326] ? do_sock_setsockopt+0x17c/0x1b0 [ 351.552578][T16326] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 351.552593][T16326] ? do_syscall_64+0xfa/0x3b0 [ 351.552607][T16326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.552633][T16326] __vmalloc_node_range_noprof+0x125/0x12f0 [ 351.552690][T16326] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 351.552714][T16326] ? xskq_create+0x56/0x170 [ 351.552739][T16326] ? __kasan_kmalloc+0x93/0xb0 [ 351.552772][T16326] vmalloc_user_noprof+0xad/0xf0 [ 351.552796][T16326] ? xskq_create+0xbf/0x170 [ 351.552819][T16326] xskq_create+0xbf/0x170 [ 351.552846][T16326] xsk_init_queue+0xb0/0x110 [ 351.552871][T16326] xsk_setsockopt+0x4dc/0x8d0 [ 351.552896][T16326] ? __pfx_xsk_setsockopt+0x10/0x10 [ 351.552918][T16326] ? __pfx_aa_sk_perm+0x10/0x10 [ 351.552946][T16326] ? aa_sock_opt_perm+0xff/0x1b0 [ 351.552967][T16326] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 351.552985][T16326] ? __pfx_xsk_setsockopt+0x10/0x10 [ 351.553008][T16326] do_sock_setsockopt+0x17c/0x1b0 [ 351.553032][T16326] __x64_sys_setsockopt+0x13f/0x1b0 [ 351.553056][T16326] do_syscall_64+0xfa/0x3b0 [ 351.553070][T16326] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.553092][T16326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.553108][T16326] ? clear_bhb_loop+0x60/0xb0 [ 351.553129][T16326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.553145][T16326] RIP: 0033:0x7f2243b8ebe9 [ 351.553161][T16326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.553175][T16326] RSP: 002b:00007f2244a81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 351.553194][T16326] RAX: ffffffffffffffda RBX: 00007f2243dc5fa0 RCX: 00007f2243b8ebe9 [ 351.553206][T16326] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 351.553216][T16326] RBP: 00007f2243c11e19 R08: 0000000000000004 R09: 0000000000000000 [ 351.553227][T16326] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.553236][T16326] R13: 00007f2243dc6038 R14: 00007f2243dc5fa0 R15: 00007ffc61fd3be8 [ 351.553267][T16326] [ 351.553273][T16326] Mem-Info: [ 351.557383][T16319] 8021q: adding VLAN 0 to HW filter on device bond1 [ 351.586785][T16326] active_anon:8061 inactive_anon:0 isolated_anon:0 [ 351.586785][T16326] active_file:3079 inactive_file:39964 isolated_file:0 [ 351.586785][T16326] unevictable:768 dirty:87 writeback:0 [ 351.586785][T16326] slab_reclaimable:13659 slab_unreclaimable:202609 [ 351.586785][T16326] mapped:59524 shmem:4227 pagetables:1241 [ 351.586785][T16326] sec_pagetables:0 bounce:0 [ 351.586785][T16326] kernel_misc_reclaimable:0 [ 351.586785][T16326] free:1159884 free_pcp:13730 free_cma:0 [ 352.009693][T16326] Node 0 active_anon:32344kB inactive_anon:0kB active_file:12316kB inactive_file:159656kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:238096kB dirty:344kB writeback:0kB shmem:15372kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15864kB pagetables:4932kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 352.062912][T16344] netlink: 'syz.6.2998': attribute type 29 has an invalid length. [ 352.072271][T16341] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2997'. [ 352.103382][T16326] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 352.136052][T16326] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 352.168166][T16326] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 352.196366][T16326] Node 0 DMA32 free:728532kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32400kB inactive_anon:0kB active_file:12316kB inactive_file:158096kB unevictable:1536kB writepending:340kB present:3129332kB managed:2557432kB mlocked:0kB bounce:0kB free_pcp:39720kB local_pcp:21160kB free_cma:0kB [ 352.242174][T16326] lowmem_reserve[]: 0 0 1 1 1 [ 352.247303][T16326] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1560kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 352.250993][T16343] Can't find ip_set type bitmap:ip,mac [ 352.277141][T16326] lowmem_reserve[]: 0 0 0 0 0 [ 352.302973][T16326] Node 1 Normal free:3895180kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14688kB local_pcp:3328kB free_cma:0kB [ 352.335554][T16326] lowmem_reserve[]: 0 0 0 0 0 [ 352.343361][T16326] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 352.357507][T16326] Node 0 DMA32: 551*4kB (UM) 293*8kB (UME) 45*16kB (UM) 24*32kB (UME) 10*64kB (M) 5*128kB (UM) 5*256kB (UM) 6*512kB (UM) 4*1024kB (UME) 2*2048kB (UM) 173*4096kB (UM) = 728468kB [ 352.376514][T16326] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 352.389357][T16326] Node 1 Normal: 177*4kB (UME) 41*8kB (UME) 30*16kB (UME) 177*32kB (UME) 40*64kB (UME) 11*128kB (UME) 4*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3895180kB [ 352.424955][T16326] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 352.435516][T16326] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 352.452778][T16326] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 352.462785][T16326] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 352.474035][T16326] 47269 total pagecache pages [ 352.478831][T16326] 0 pages in swap cache [ 352.486690][T16326] Free swap = 124996kB [ 352.495428][T16326] Total swap = 124996kB [ 352.501266][T16326] 2097051 pages RAM [ 352.505454][T16326] 0 pages HighMem/MovableOnly [ 352.510887][T16352] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2999'. [ 352.520867][T16326] 425667 pages reserved [ 352.525319][T16326] 0 pages cma reserved [ 352.765263][T16360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3002'. [ 352.784934][T16359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3002'. [ 353.012270][T16369] netlink: 'syz.7.3004': attribute type 1 has an invalid length. [ 353.021896][T16369] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3004'. [ 353.590251][T16401] bond2: entered promiscuous mode [ 353.595677][T16401] bond2: entered allmulticast mode [ 353.601633][T16401] 8021q: adding VLAN 0 to HW filter on device bond2 [ 353.609819][T16403] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 353.928894][T16418] bridge0: port 3(vlan2) entered blocking state [ 353.972295][T16418] bridge0: port 3(vlan2) entered disabled state [ 354.001179][T16418] vlan2: entered allmulticast mode [ 354.013746][T16418] bridge0: entered allmulticast mode [ 354.029916][T16418] vlan2: left allmulticast mode [ 354.035902][T16418] bridge0: left allmulticast mode [ 355.158226][T16484] tipc: Enabled bearer , priority 0 [ 355.174142][T16488] syzkaller0: entered promiscuous mode [ 355.180603][T16488] syzkaller0: entered allmulticast mode [ 355.227368][T16484] syzkaller0: entered promiscuous mode [ 355.238974][T16484] syzkaller0: entered allmulticast mode [ 355.332163][T16495] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 355.456838][T16484] tipc: Resetting bearer [ 355.534772][T16484] tipc: Disabling bearer [ 355.605215][T16511] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 356.098915][T16545] tipc: Started in network mode [ 356.104885][T16545] tipc: Node identity 2684c6d230e7, cluster identity 4711 [ 356.113172][T16545] tipc: Enabled bearer , priority 0 [ 356.122018][T16545] syzkaller0: entered promiscuous mode [ 356.128569][T16545] syzkaller0: entered allmulticast mode [ 356.157273][T16545] tipc: Resetting bearer [ 356.222654][T16541] tipc: Resetting bearer [ 356.353186][T16541] tipc: Disabling bearer [ 356.403386][T16557] netlink: 'syz.8.3065': attribute type 1 has an invalid length. [ 356.418767][T16557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.565694][T16554] 8021q: adding VLAN 0 to HW filter on device bond3 [ 356.632797][T16570] __nla_validate_parse: 11 callbacks suppressed [ 356.632821][T16570] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3066'. [ 357.136432][T16606] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3073'. [ 357.195043][T16606] xfrm1: entered promiscuous mode [ 357.215394][T16606] xfrm1: entered allmulticast mode [ 357.252147][T16611] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3073'. [ 357.348635][T16617] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 357.923278][T16651] 8021q: VLANs not supported on wg2 [ 357.941729][T16653] syz_tun: entered allmulticast mode [ 357.950819][T16651] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3086'. [ 357.984806][T16653] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3089'. [ 358.265067][T16674] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 358.398845][T16683] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3091'. [ 358.408315][T16683] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 358.416497][T16683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.263456][T16709] netlink: 'syz.7.3103': attribute type 1 has an invalid length. [ 359.353699][T16709] 8021q: adding VLAN 0 to HW filter on device bond4 [ 359.394019][T16712] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3104'. [ 359.465103][T16719] netlink: 'syz.8.3107': attribute type 1 has an invalid length. [ 359.480147][T16719] netlink: 'syz.8.3107': attribute type 3 has an invalid length. [ 359.488120][T16719] netlink: 224 bytes leftover after parsing attributes in process `syz.8.3107'. [ 359.621079][T16723] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3109'. [ 359.690297][T16729] netlink: 'syz.8.3111': attribute type 1 has an invalid length. [ 359.819334][T16735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3112'. [ 360.196460][T16756] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 360.197105][T16758] netlink: 'syz.9.3121': attribute type 178 has an invalid length. [ 361.051709][T16798] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20002 [ 361.422108][T16819] netlink: 'syz.9.3137': attribute type 30 has an invalid length. [ 362.050693][T16843] __nla_validate_parse: 7 callbacks suppressed [ 362.050718][T16843] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3142'. [ 362.376956][T16857] netlink: 'syz.7.3144': attribute type 1 has an invalid length. [ 362.546036][T16857] 8021q: adding VLAN 0 to HW filter on device bond5 [ 362.651999][T16860] bond5: (slave veth7): Enslaving as an active interface with a down link [ 362.712213][T16864] bond5: (slave veth0_to_bond): making interface the new active one [ 362.742602][T16864] veth0_to_bond: entered promiscuous mode [ 362.750797][T16864] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 362.885536][T16857] bond5: (slave veth9): Enslaving as an active interface with a down link [ 363.093874][T16893] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3153'. [ 363.238392][T16904] netlink: 'syz.8.3155': attribute type 32 has an invalid length. [ 363.259710][T16904] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3155'. [ 363.383872][T16888] team0 (unregistering): Port device team_slave_0 removed [ 363.395905][T16888] team0 (unregistering): Port device team_slave_1 removed [ 363.430958][T16902] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.448923][T16904] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 363.702238][ T5967] IPVS: starting estimator thread 0... [ 363.789620][T16924] IPVS: using max 26 ests per chain, 62400 per kthread [ 363.812457][T16926] netlink: 'syz.9.3161': attribute type 1 has an invalid length. [ 363.843170][T16926] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3161'. [ 363.917023][T16926] netlink: 'syz.9.3161': attribute type 1 has an invalid length. [ 363.923322][T16930] tipc: Enabled bearer , priority 0 [ 363.946203][T16933] netlink: 'syz.6.3164': attribute type 2 has an invalid length. [ 364.125916][T16935] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 364.170122][T16935] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 364.183964][T16935] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 364.258676][T16955] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3162'. [ 364.302522][T16939] syzkaller0: entered promiscuous mode [ 364.318943][T16939] syzkaller0: entered allmulticast mode [ 364.384035][T16949] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 364.407686][T16954] tipc: Resetting bearer [ 364.434813][T16929] tipc: Resetting bearer [ 364.510581][T16929] tipc: Disabling bearer [ 364.567035][T16965] netlink: 596 bytes leftover after parsing attributes in process `syz.8.3169'. [ 364.687541][T16967] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3170'. [ 364.816577][T16970] veth5: entered allmulticast mode [ 364.831154][T16972] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3173'. [ 364.843478][T16972] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3173'. [ 365.026758][T16980] netlink: 'syz.8.3174': attribute type 19 has an invalid length. [ 365.026758][T16981] netlink: 'syz.8.3174': attribute type 19 has an invalid length. [ 365.152470][T16980] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3174'. [ 365.304529][T16995] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 365.375150][T17001] netlink: 'syz.8.3180': attribute type 1 has an invalid length. [ 365.580619][T17010] sctp: [Deprecated]: syz.4.3184 (pid 17010) Use of struct sctp_assoc_value in delayed_ack socket option. [ 365.580619][T17010] Use struct sctp_sack_info instead [ 365.649982][T17010] sctp: [Deprecated]: syz.4.3184 (pid 17010) Use of struct sctp_assoc_value in delayed_ack socket option. [ 365.649982][T17010] Use struct sctp_sack_info instead [ 366.171902][T17042] netlink: 'syz.9.3190': attribute type 10 has an invalid length. [ 366.272313][T17042] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.336424][T17042] bond0: (slave team0): Enslaving as an active interface with an up link [ 366.440223][ T5875] Bluetooth: hci9: command tx timeout [ 367.298515][T17090] netlink: 'syz.8.3203': attribute type 1 has an invalid length. [ 367.407460][T17099] __nla_validate_parse: 36 callbacks suppressed [ 367.407483][T17099] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3204'. [ 367.453662][T17098] netlink: 'syz.8.3203': attribute type 1 has an invalid length. [ 367.468141][T17098] nbd: error processing sock list [ 367.507085][T17098] block nbd1: shutting down sockets [ 367.769817][T17109] syzkaller0: entered promiscuous mode [ 367.775973][T17109] syzkaller0: entered allmulticast mode [ 368.352192][T17141] netlink: 'syz.8.3209': attribute type 10 has an invalid length. [ 368.618439][T17152] x_tables: ip_tables: udp match: only valid for protocol 17 [ 368.685924][T17153] x_tables: ip_tables: udp match: only valid for protocol 17 [ 371.421248][T17141] batman_adv: batadv0: Adding interface: team0 [ 371.427653][T17141] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.455717][T17141] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 371.735381][T17170] netlink: 'syz.9.3217': attribute type 6 has an invalid length. [ 371.774263][T17177] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3218'. [ 371.815597][T17178] netlink: 'syz.4.3219': attribute type 21 has an invalid length. [ 371.869395][T17178] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3219'. [ 371.878657][T17178] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3219'. [ 372.604430][T17215] netlink: 'syz.4.3229': attribute type 33 has an invalid length. [ 372.627996][T17215] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 372.691299][T12005] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 372.743939][T17219] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3231'. [ 372.789768][T17219] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3231'. [ 372.835610][T17219] tipc: Enabled bearer , priority 0 [ 372.988315][T17231] syzkaller0: entered promiscuous mode [ 373.011738][T17231] syzkaller0: entered allmulticast mode [ 373.049602][T17233] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3236'. [ 373.084950][T17219] tipc: Resetting bearer [ 373.123030][T17218] tipc: Resetting bearer [ 373.187902][T17218] tipc: Disabling bearer [ 373.228422][T17233] netlink: 'syz.6.3236': attribute type 25 has an invalid length. [ 373.401945][T17249] netlink: 'syz.4.3240': attribute type 2 has an invalid length. [ 373.453477][T17249] netlink: 'syz.4.3240': attribute type 8 has an invalid length. [ 373.497229][T17249] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3240'. [ 373.810650][T16593] veth0_to_bond: left promiscuous mode [ 373.871227][T17273] netlink: 'syz.9.3245': attribute type 28 has an invalid length. [ 373.911875][T17273] netlink: 'syz.9.3245': attribute type 3 has an invalid length. [ 373.923044][T17272] geneve2: entered promiscuous mode [ 373.937447][T17272] geneve2: entered allmulticast mode [ 373.944557][T17273] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3245'. [ 373.963455][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 374.395964][T17299] openvswitch: netlink: Message has -1 unknown bytes. [ 374.427600][T17299] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3254'. [ 374.517101][T17307] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.3255'. [ 374.674478][T17316] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3258'. [ 374.677114][T17299] macsec0: entered promiscuous mode [ 374.746111][T17318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3258'. [ 374.786417][T17318] netlink: 'syz.4.3258': attribute type 2 has an invalid length. [ 374.815193][T17318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3258'. [ 376.483322][T17394] netlink: 'syz.9.3285': attribute type 2 has an invalid length. [ 376.732158][T17408] tipc: Enabled bearer , priority 0 [ 376.752935][T17408] syzkaller0: entered promiscuous mode [ 376.758559][T17408] syzkaller0: entered allmulticast mode [ 376.830405][T17407] tipc: Resetting bearer [ 376.995541][T17407] tipc: Disabling bearer [ 377.344889][T17440] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 377.376419][T17447] netlink: 'syz.9.3296': attribute type 4 has an invalid length. [ 377.545734][T17451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.852394][T17466] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 377.873984][T17466] __nla_validate_parse: 15 callbacks suppressed [ 377.874007][T17466] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3307'. [ 378.073601][T17476] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3309'. [ 378.282681][T17476] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3309'. [ 378.497225][T17489] tipc: Enabling of bearer rejected, failed to enable media [ 378.560040][T17496] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3316'. [ 378.789856][T17506] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 378.807267][T17501] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3317'. [ 378.982452][T17518] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3323'. [ 379.013820][T17521] bridge: RTM_NEWNEIGH with invalid ether address [ 379.037902][T17520] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3321'. [ 379.086047][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 379.111341][T17525] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 379.375268][T17538] netlink: zone id is out of range [ 379.433115][T17538] netlink: zone id is out of range [ 379.438308][T17538] netlink: zone id is out of range [ 379.479707][T17538] netlink: zone id is out of range [ 379.505849][T17538] netlink: del zone limit has 4 unknown bytes [ 379.542408][T17542] netlink: 'syz.4.3330': attribute type 17 has an invalid length. [ 379.568707][T17542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3330'. [ 379.593753][T17546] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3331'. [ 379.599776][T17542] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3330'. [ 379.643537][T17547] netlink: 'syz.4.3330': attribute type 1 has an invalid length. [ 380.170839][T17584] netlink: 'syz.4.3340': attribute type 1 has an invalid length. [ 380.311481][T17594] netlink: 'syz.6.3343': attribute type 3 has an invalid length. [ 380.323101][T17592] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 380.336464][T17592] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 380.346556][T17590] netlink: 'syz.6.3343': attribute type 3 has an invalid length. [ 381.597074][T17660] netlink: 'syz.8.3363': attribute type 39 has an invalid length. [ 381.767988][T17664] netlink: 'syz.9.3364': attribute type 21 has an invalid length. [ 381.923763][ T36] syzkaller0: tun_net_xmit 76 [ 381.935018][ T36] syzkaller0: tun_net_xmit 48 [ 381.961578][ T5937] syzkaller0: tun_net_xmit 76 [ 381.970150][T17666] netlink: 'syz.4.3365': attribute type 9 has an invalid length. [ 382.340691][T12007] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 385.178573][T17676] __nla_validate_parse: 15 callbacks suppressed [ 385.178596][T17676] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3367'. [ 385.242470][T17688] tipc: Enabled bearer , priority 0 [ 385.287552][T17689] syzkaller0: entered promiscuous mode [ 385.293944][T17689] syzkaller0: entered allmulticast mode [ 385.333913][T17697] tipc: Resetting bearer [ 385.397200][T17686] tipc: Resetting bearer [ 385.412308][T17705] netlink: 'syz.6.3372': attribute type 11 has an invalid length. [ 385.445740][T17705] netlink: 'syz.6.3372': attribute type 11 has an invalid length. [ 385.455110][T17703] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3371'. [ 385.465885][T17705] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3372'. [ 385.494654][T17703] netlink: 'syz.4.3371': attribute type 7 has an invalid length. [ 385.511360][T17686] tipc: Disabling bearer [ 385.527271][T17703] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3371'. [ 385.806015][T17721] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3377'. [ 385.867419][T17721] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3377'. [ 385.880317][T12188] unregister_netdevice: waiting for syz_tun to become free. Usage count = 2 [ 385.919286][T17720] netlink: 'syz.4.3378': attribute type 1 has an invalid length. [ 385.920810][T12188] ref_tracker: netdev@ffff88805b52c610 has 1/1 users at [ 385.920810][T12188] ib_device_set_netdev+0x31f/0x6d0 [ 385.920810][T12188] rxe_register_device+0x1c7/0x310 [ 385.920810][T12188] rxe_net_add+0x81/0x110 [ 385.920810][T12188] rxe_newlink+0xdd/0x190 [ 385.920810][T12188] nldev_newlink+0x4a5/0x5a0 [ 385.920810][T12188] rdma_nl_rcv+0x6ab/0x980 [ 385.920810][T12188] netlink_unicast+0x82c/0x9e0 [ 385.920810][T12188] netlink_sendmsg+0x805/0xb30 [ 385.920810][T12188] __sock_sendmsg+0x21c/0x270 [ 385.920810][T12188] ____sys_sendmsg+0x505/0x830 [ 385.920810][T12188] ___sys_sendmsg+0x21f/0x2a0 [ 385.920810][T12188] __x64_sys_sendmsg+0x19b/0x260 [ 385.920810][T12188] do_syscall_64+0xfa/0x3b0 [ 385.920810][T12188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.920810][T12188] [ 386.012306][T17720] netlink: 'syz.4.3378': attribute type 1 has an invalid length. [ 392.519569][ T31] INFO: task kworker/u8:3:49 blocked for more than 143 seconds. [ 392.527471][ T31] Not tainted syzkaller #0 [ 392.532866][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 392.542523][ T31] task:kworker/u8:3 state:D stack:23656 pid:49 tgid:49 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 392.554969][ T31] Workqueue: ib-unreg-wq ib_unregister_work [ 392.561479][ T31] Call Trace: [ 392.564874][ T31] [ 392.567931][ T31] __schedule+0x1798/0x4cc0 [ 392.572627][ T31] ? finish_task_switch+0x266/0x950 [ 392.577960][ T31] ? rcu_is_watching+0x15/0xb0 [ 392.583242][ T31] ? __lock_acquire+0xab9/0xd20 [ 392.588249][ T31] ? __pfx___schedule+0x10/0x10 [ 392.593454][ T31] ? schedule+0x91/0x360 [ 392.597760][ T31] schedule+0x165/0x360 [ 392.602495][ T31] schedule_timeout+0x9a/0x270 [ 392.607380][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 392.613165][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 392.618591][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.623931][ T31] ? wait_for_completion+0x267/0x5d0 [ 392.629984][ T31] wait_for_completion+0x2bf/0x5d0 [ 392.635260][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 392.641963][ T31] ? up_write+0x1c4/0x420 [ 392.646689][ T31] ? remove_client_context+0xc0/0x1e0 [ 392.652617][ T31] disable_device+0x1c6/0x320 [ 392.657517][ T31] ? __pfx_disable_device+0x10/0x10 [ 392.662878][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 392.668369][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 392.674006][ T31] ib_unregister_work+0x19/0x30 [ 392.678993][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 392.685459][ T31] process_scheduled_works+0xae1/0x17b0 [ 392.691441][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 392.697464][ T31] worker_thread+0x8a0/0xda0 [ 392.702413][ T31] kthread+0x70e/0x8a0 [ 392.706522][ T31] ? __pfx_worker_thread+0x10/0x10 [ 392.711974][ T31] ? __pfx_kthread+0x10/0x10 [ 392.716616][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 392.722229][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.727899][ T31] ? __pfx_kthread+0x10/0x10 [ 392.732848][ T31] ret_from_fork+0x3fc/0x770 [ 392.737750][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 392.743714][ T31] ? __switch_to_asm+0x39/0x70 [ 392.748560][ T31] ? __switch_to_asm+0x33/0x70 [ 392.753474][ T31] ? __pfx_kthread+0x10/0x10 [ 392.758128][ T31] ret_from_fork_asm+0x1a/0x30 [ 392.763446][ T31] [ 392.766667][ T31] [ 392.766667][ T31] Showing all locks held in the system: [ 392.774927][ T31] 1 lock held by khungtaskd/31: [ 392.781394][ T31] #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 392.791525][ T31] 3 locks held by kworker/u8:3/49: [ 392.796995][ T31] #0: ffff888144ea0148 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 392.808961][ T31] #1: ffffc90000b97bc0 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 392.823094][ T31] #2: ffff88801d698700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 392.834885][ T31] 2 locks held by getty/5624: [ 392.840100][ T31] #0: ffff88803008b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 392.850783][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 392.861341][ T31] 2 locks held by syz.1.2145/13304: [ 392.866741][ T31] #0: ffffffff8f52c450 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 392.876559][ T31] #1: ffff88801d698700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 392.888102][ T31] 2 locks held by syz.5.2213/13555: [ 392.893661][ T31] #0: ffffffff8f52c450 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 392.903286][ T31] #1: ffff88801d698700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 392.914724][ T31] 2 locks held by syz.0.2355/14058: [ 392.922930][ T31] #0: ffffffff8f52c450 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 392.932533][ T31] #1: ffff88801d698700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 392.944507][ T31] 2 locks held by syz.2.2600/14951: [ 392.950759][ T31] #0: ffffffff8f52c450 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 392.960821][ T31] #1: ffff88801d698700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 392.972352][ T31] [ 392.974707][ T31] ============================================= [ 392.974707][ T31] [ 392.984358][ T31] NMI backtrace for cpu 1 [ 392.984383][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 392.984404][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 392.984415][ T31] Call Trace: [ 392.984423][ T31] [ 392.984431][ T31] dump_stack_lvl+0x189/0x250 [ 392.984474][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.984503][ T31] ? __pfx__printk+0x10/0x10 [ 392.984542][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 392.984571][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 392.984598][ T31] ? __pfx__printk+0x10/0x10 [ 392.984629][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 392.984661][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 392.984689][ T31] watchdog+0xf93/0xfe0 [ 392.984722][ T31] ? watchdog+0x1de/0xfe0 [ 392.984754][ T31] kthread+0x70e/0x8a0 [ 392.984782][ T31] ? __pfx_watchdog+0x10/0x10 [ 392.984806][ T31] ? __pfx_kthread+0x10/0x10 [ 392.984832][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 392.984857][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.984883][ T31] ? __pfx_kthread+0x10/0x10 [ 392.984907][ T31] ret_from_fork+0x3fc/0x770 [ 392.984931][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 392.984958][ T31] ? __switch_to_asm+0x39/0x70 [ 392.984980][ T31] ? __switch_to_asm+0x33/0x70 [ 392.985002][ T31] ? __pfx_kthread+0x10/0x10 [ 392.985027][ T31] ret_from_fork_asm+0x1a/0x30 [ 392.985068][ T31] [ 392.985076][ T31] Sending NMI from CPU 1 to CPUs 0: [ 393.133928][ C0] NMI backtrace for cpu 0 [ 393.133948][ C0] CPU: 0 UID: 0 PID: 12007 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT(full) [ 393.133966][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 393.133977][ C0] Workqueue: bat_events batadv_nc_worker [ 393.134004][ C0] RIP: 0010:lockdep_hardirqs_on_prepare+0xa0/0x2a0 [ 393.134027][ C0] Code: 85 8c 01 00 00 83 3d 8e 8c 0e 18 00 75 1c 80 3d ea 0e 06 0e 01 0f 84 a5 01 00 00 65 8b 05 54 76 03 11 85 c0 0f 85 c8 01 00 00 <65> 48 8b 1c 25 08 80 a0 92 48 8b 83 e0 0a 00 00 48 89 83 c8 0a 00 [ 393.134040][ C0] RSP: 0018:ffffc9001c9878a0 EFLAGS: 00000046 [ 393.134052][ C0] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 8160c7c94271ca00 [ 393.134063][ C0] RDX: 0000000000000000 RSI: ffffffff8be33860 RDI: ffffffff8be33820 [ 393.134074][ C0] RBP: ffffc9001c987978 R08: ffffffff8fa39737 R09: 1ffffffff1f472e6 [ 393.134085][ C0] R10: dffffc0000000000 R11: fffffbfff1f472e7 R12: ffffffff8b47f2c8 [ 393.134095][ C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: 1ffff92003930f1c [ 393.134107][ C0] FS: 0000000000000000(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 393.134119][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 393.134130][ C0] CR2: 00007fff900a6e78 CR3: 0000000077568000 CR4: 00000000003526f0 [ 393.134146][ C0] Call Trace: [ 393.134152][ C0] [ 393.134160][ C0] ? batadv_nc_purge_paths+0x318/0x3b0 [ 393.134180][ C0] trace_hardirqs_on+0x28/0x40 [ 393.134199][ C0] __local_bh_enable_ip+0x12d/0x1c0 [ 393.134214][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 393.134230][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 393.134248][ C0] ? batadv_nc_purge_paths+0x318/0x3b0 [ 393.134266][ C0] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10 [ 393.134287][ C0] batadv_nc_purge_paths+0x318/0x3b0 [ 393.134312][ C0] batadv_nc_worker+0x369/0x610 [ 393.134332][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 393.134348][ C0] process_scheduled_works+0xae1/0x17b0 [ 393.134376][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 393.134398][ C0] worker_thread+0x8a0/0xda0 [ 393.134425][ C0] kthread+0x70e/0x8a0 [ 393.134444][ C0] ? __pfx_worker_thread+0x10/0x10 [ 393.134459][ C0] ? __pfx_kthread+0x10/0x10 [ 393.134476][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 393.134495][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 393.134514][ C0] ? __pfx_kthread+0x10/0x10 [ 393.134532][ C0] ret_from_fork+0x3fc/0x770 [ 393.134549][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 393.134566][ C0] ? __switch_to_asm+0x39/0x70 [ 393.134593][ C0] ? __switch_to_asm+0x33/0x70 [ 393.134609][ C0] ? __pfx_kthread+0x10/0x10 [ 393.134626][ C0] ret_from_fork_asm+0x1a/0x30 [ 393.134652][ C0] [ 393.137952][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 393.411598][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 393.420970][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 393.431318][ T31] Call Trace: [ 393.434622][ T31] [ 393.437570][ T31] dump_stack_lvl+0x99/0x250 [ 393.442219][ T31] ? __asan_memcpy+0x40/0x70 [ 393.446803][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.452100][ T31] ? __pfx__printk+0x10/0x10 [ 393.456719][ T31] vpanic+0x281/0x750 [ 393.461266][ T31] ? __pfx_vpanic+0x10/0x10 [ 393.465812][ T31] ? preempt_schedule+0xae/0xc0 [ 393.470768][ T31] ? preempt_schedule_common+0x83/0xd0 [ 393.476780][ T31] panic+0xb9/0xc0 [ 393.480501][ T31] ? __pfx_panic+0x10/0x10 [ 393.484922][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 393.490308][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 393.496589][ T31] watchdog+0xfd2/0xfe0 [ 393.501219][ T31] ? watchdog+0x1de/0xfe0 [ 393.505573][ T31] kthread+0x70e/0x8a0 [ 393.509644][ T31] ? __pfx_watchdog+0x10/0x10 [ 393.514427][ T31] ? __pfx_kthread+0x10/0x10 [ 393.519047][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 393.524367][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 393.529749][ T31] ? __pfx_kthread+0x10/0x10 [ 393.534365][ T31] ret_from_fork+0x3fc/0x770 [ 393.539042][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 393.544660][ T31] ? __switch_to_asm+0x39/0x70 [ 393.549445][ T31] ? __switch_to_asm+0x33/0x70 [ 393.554323][ T31] ? __pfx_kthread+0x10/0x10 [ 393.558935][ T31] ret_from_fork_asm+0x1a/0x30 [ 393.563885][ T31] [ 393.567405][ T31] Kernel Offset: disabled [ 393.572002][ T31] Rebooting in 86400 seconds..