last executing test programs: 1m6.992966591s ago: executing program 2 (id=921): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4', @ANYRES32, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) getpeername(r1, &(0x7f0000000200)=@isdn, &(0x7f0000000100)=0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4e, &(0x7f0000003680)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0xc, 0x7, @dev={0xfe, 0x80, '\x00', 0x1c}}}}}}}, 0x0) sendmsg$nl_netfilter(r2, 0x0, 0x8000) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@mss, @sack_perm, @sack_perm, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window={0x3, 0xfffd, 0x4000}, @mss={0x2, 0xed0d}, @window={0x3, 0x3, 0x3}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={r3, 0x2000000, 0x17, 0x0, &(0x7f00000000c0)="3a1d5bd9a05eb82766a03581b25692ed5fa22942afbd5d", 0x0, 0xfffffbff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 1m5.810599599s ago: executing program 3 (id=672): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="b4000000000000006910810000000000040000000000000095000000000000007220abb1b364768c328613d20a4d2451a69f9642"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400"/15], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x15, 0x5, 0x0) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4, 0x20004}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) recvmmsg(r5, &(0x7f0000006100), 0x49f, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) close(0x4) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000340), &(0x7f0000000380)=r7}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50010000100013040000000000000000e0200001000000000000000000000000ac1e0101000000000000000000000000000000004e240000020000202b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0xa0, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_USERDATA={0x6c, 0xd, 0x1, 0x0, "a5dfdc4ad49e103eaa4609b946f921856a922493cb0ef164a1795406dd78e34a2c5a5e94956d23ceb2ab089d3ff400d69fccc2ea3364800a9bfb4e1d08a45629e03f85a60234c5fed895c09dd33a0fd0b830ae2af35b19c1c00f266dc39216462c67326acc7fd9f0"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x960, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x938, 0x3, 0x0, 0x1, [{0x1c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1bc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1f, 0x1, "13888f20591b5a5caf56f64a9b6d93878cd3c160284e5af898d90d"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x40, 0x1, "8d3a69ebc9ff7dfd76fae8dbde8c15ef0ffb79dab64485eca7f25e3808c07b81fa6745659d7b7a219e92d667cdfd52826c5bcff71dd24820bca94134"}, @NFTA_DATA_VALUE={0xfe, 0x1, "da17b078946fde0ebe041626db71ece1b0bc8566c47bbb76298b94d66381a5a8c336fe0eb906544bf94639c40b1f5bd22a5d4055126b54b36e0a8206ba51b3f8e38da268b0392a6dcce4d1b486a7c731264e488b117bb51af5f83cebf1dd300586782c5dc423b5a295325d9d81891de2d468de5355e2e94f15f9609c3c6c7963c28f6b1003bc532b3d8484049b17f31f7aa1a9d902f3a27bcdb6935d78dbed1247390ca122e0a17178778ce8db969df003875beae4eaf888b1a26399e0e9a2055e0457c0cfce405396eeb43d5ba3ae8057abea9bc78187bf0bcb150ce0e909df1af862059e51214a7022c63da45d3f5af25d3dd0d163917f992b"}, @NFTA_DATA_VALUE={0x15, 0x1, "d8c0ee53fc56931af487d57ffcad5dc0e9"}]}]}, {0x44c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xb, 0x6, 0x1, 0x0, "7551851c203ef2"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY_END={0x150, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x39, 0x1, "78a4d89623f855c2f67bbb3950b6673ca103e7d5ac703dc4e8a899e2bc460366c06cd3da2f6eab1d1fdac0cfdb9cae45dd3717ea6b"}, @NFTA_DATA_VALUE={0xb0, 0x1, "41f7f0f99f597ea686527d80148464c3c12e439b9d381119b4547961475bd65d3fb6b82b4e81cae9399adb32f855bcee6cf76498960e7e1ec83a405bed95df41c41f0cd435667b67ad54174a63b8b0a59522ee69f94dc11e7f176ad2695ad56cbb89e8c6acb28c9cd598fcd63685839df103cdba5007c9a10ce6e43d4474829363a2ec6380b54e8f491b0103f0a1047e120072c181fd994039777dc16b91b44af5ec570a7ba625e993a817e7"}]}, @NFTA_SET_ELEM_KEY={0xe4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe0, 0x1, "25cdcca06cc63e456555d2f5e689a75102b12e23d4457f2efcb667257bb775cdb643ead6676045fd350cec489af4df09b420ff1a3d21969d2f40aaee6c51af4b7e4f904a63a35a0acc9e00e02226713bfb3b9f0eedefe29e88365fd9c5627eadd48870a293797421a0303b91052b094815d5087fb6e5cc60727433d632cdf85bccdcdc15a8e88bb335ca590aacd2a2afa0ff69abb9d2797ebad8610f0f5c90516051a5dcc8edc752908e38274c6e510d90ecbf6b01c11e98301069093f71964d541e5c5808a24c926387fbe3e8b2b20d67f32e30555f0bb127f1a2fc"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @range={{0xa}, @void}}, @NFTA_SET_ELEM_KEY={0x1e8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xbf, 0x1, "363cf33acb36fc4a8733c7c34c831166074f8909ba990b57262fb9d926c0b1c95baf69da36d8b2cf26f14d528b13bfd1d3c585806bc2e56521b35d977bd8e6c89558c13b8087eef98f515d5f3bff5bec9379f630d0d6a233891eeb3e4c7646fd7732453c2533740b25fe53dfd4c79f95b90b98438ed0ae019ffbcd1daccc39e01959f3243753e0e759394561b7045d4a7fde0b25d0af02fce81d81b272828fd8d86dc1082e19e973e2a799e0f022c387697303dcefc7ff09858d3e"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x328, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_KEY_END={0x114, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000001}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xa1, 0x1, "76d851d313c6a57062ffc7e1275da6d47b8f19036019654ebd3543208af0417955b039effb86d7c53eff40323291198dc3de3252482833d963248cb7992b472821f4830e11d6cb5e9772d6d2ebe353728693917bcdcd4f43c6a1ea2cde6764b41e1a7f940f36383b16f36fb7974010dbef7900552d715205f6f9f81a627c0084e3aefbefc755e349f1d70307451f1393495f507bc7aa03d8bd799878c8"}]}, @NFTA_SET_ELEM_KEY_END={0x1f4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x99, 0x1, "ed6a81b5b02ab2220acf07fc1198d95cdf05d3c9b7e3ac87d6e7814872c3ef15e32d55c24ed94f6408711b00d6ff20d047b5b7e704f7c75e9633405b3bb2fba18bff1a21949045c8b84d311e3a328bec70cc0853d47517a25df191f29632903de668ac0e105995fb8bfaa7d12987b37ae41e7a04c20d523122929abf9042655375fb087abdd06407ec8b3ced6fbd1c5ba90ca52be4"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xe7, 0x1, "d494ced166dc6aaa1a6e5690a289a845060d7841760a210fda9252e4ddb95a785216a9c0655e35144a01758bc516e1f1b1e77148fe75cb12bbc4a8aa246e97dc4116b555b4ada50fad1ed1f8ba4223d2bb133fe7481fd68220887527356375bed3111c2489ce3010cf09320a7883f6528bec54d4cae62d56361a4c5516c53dca151799f48f77e774cc78f66c7b8ffe981b48357cf0328d5db8b8a4a99ea991580e08800cd15b353d09341efdb74c1d018649f2812eecffcfcd2c6bf2b6675eefc62f87c4f8d6cf34322f7de4c4e8a77f9980756e6f819472c753ee002d4706600d92c6"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10}}, 0xa48}}, 0x0) r8 = epoll_create1(0x0) r9 = epoll_create(0xf253e97) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000280)) 52.655394993s ago: executing program 2 (id=921): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4', @ANYRES32, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) getpeername(r1, &(0x7f0000000200)=@isdn, &(0x7f0000000100)=0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4e, &(0x7f0000003680)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0xc, 0x7, @dev={0xfe, 0x80, '\x00', 0x1c}}}}}}}, 0x0) sendmsg$nl_netfilter(r2, 0x0, 0x8000) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@mss, @sack_perm, @sack_perm, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window={0x3, 0xfffd, 0x4000}, @mss={0x2, 0xed0d}, @window={0x3, 0x3, 0x3}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={r3, 0x2000000, 0x17, 0x0, &(0x7f00000000c0)="3a1d5bd9a05eb82766a03581b25692ed5fa22942afbd5d", 0x0, 0xfffffbff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 51.418092611s ago: executing program 3 (id=672): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="b4000000000000006910810000000000040000000000000095000000000000007220abb1b364768c328613d20a4d2451a69f9642"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400"/15], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x15, 0x5, 0x0) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4, 0x20004}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) recvmmsg(r5, &(0x7f0000006100), 0x49f, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) close(0x4) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000340), &(0x7f0000000380)=r7}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50010000100013040000000000000000e0200001000000000000000000000000ac1e0101000000000000000000000000000000004e240000020000202b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0xa0, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_USERDATA={0x6c, 0xd, 0x1, 0x0, "a5dfdc4ad49e103eaa4609b946f921856a922493cb0ef164a1795406dd78e34a2c5a5e94956d23ceb2ab089d3ff400d69fccc2ea3364800a9bfb4e1d08a45629e03f85a60234c5fed895c09dd33a0fd0b830ae2af35b19c1c00f266dc39216462c67326acc7fd9f0"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x960, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x938, 0x3, 0x0, 0x1, [{0x1c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1bc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1f, 0x1, "13888f20591b5a5caf56f64a9b6d93878cd3c160284e5af898d90d"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x40, 0x1, "8d3a69ebc9ff7dfd76fae8dbde8c15ef0ffb79dab64485eca7f25e3808c07b81fa6745659d7b7a219e92d667cdfd52826c5bcff71dd24820bca94134"}, @NFTA_DATA_VALUE={0xfe, 0x1, "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"}, @NFTA_DATA_VALUE={0x15, 0x1, "d8c0ee53fc56931af487d57ffcad5dc0e9"}]}]}, {0x44c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xb, 0x6, 0x1, 0x0, "7551851c203ef2"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY_END={0x150, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x39, 0x1, "78a4d89623f855c2f67bbb3950b6673ca103e7d5ac703dc4e8a899e2bc460366c06cd3da2f6eab1d1fdac0cfdb9cae45dd3717ea6b"}, @NFTA_DATA_VALUE={0xb0, 0x1, "41f7f0f99f597ea686527d80148464c3c12e439b9d381119b4547961475bd65d3fb6b82b4e81cae9399adb32f855bcee6cf76498960e7e1ec83a405bed95df41c41f0cd435667b67ad54174a63b8b0a59522ee69f94dc11e7f176ad2695ad56cbb89e8c6acb28c9cd598fcd63685839df103cdba5007c9a10ce6e43d4474829363a2ec6380b54e8f491b0103f0a1047e120072c181fd994039777dc16b91b44af5ec570a7ba625e993a817e7"}]}, @NFTA_SET_ELEM_KEY={0xe4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe0, 0x1, "25cdcca06cc63e456555d2f5e689a75102b12e23d4457f2efcb667257bb775cdb643ead6676045fd350cec489af4df09b420ff1a3d21969d2f40aaee6c51af4b7e4f904a63a35a0acc9e00e02226713bfb3b9f0eedefe29e88365fd9c5627eadd48870a293797421a0303b91052b094815d5087fb6e5cc60727433d632cdf85bccdcdc15a8e88bb335ca590aacd2a2afa0ff69abb9d2797ebad8610f0f5c90516051a5dcc8edc752908e38274c6e510d90ecbf6b01c11e98301069093f71964d541e5c5808a24c926387fbe3e8b2b20d67f32e30555f0bb127f1a2fc"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @range={{0xa}, @void}}, @NFTA_SET_ELEM_KEY={0x1e8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xbf, 0x1, "363cf33acb36fc4a8733c7c34c831166074f8909ba990b57262fb9d926c0b1c95baf69da36d8b2cf26f14d528b13bfd1d3c585806bc2e56521b35d977bd8e6c89558c13b8087eef98f515d5f3bff5bec9379f630d0d6a233891eeb3e4c7646fd7732453c2533740b25fe53dfd4c79f95b90b98438ed0ae019ffbcd1daccc39e01959f3243753e0e759394561b7045d4a7fde0b25d0af02fce81d81b272828fd8d86dc1082e19e973e2a799e0f022c387697303dcefc7ff09858d3e"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x328, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_KEY_END={0x114, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000001}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xa1, 0x1, "76d851d313c6a57062ffc7e1275da6d47b8f19036019654ebd3543208af0417955b039effb86d7c53eff40323291198dc3de3252482833d963248cb7992b472821f4830e11d6cb5e9772d6d2ebe353728693917bcdcd4f43c6a1ea2cde6764b41e1a7f940f36383b16f36fb7974010dbef7900552d715205f6f9f81a627c0084e3aefbefc755e349f1d70307451f1393495f507bc7aa03d8bd799878c8"}]}, @NFTA_SET_ELEM_KEY_END={0x1f4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x99, 0x1, "ed6a81b5b02ab2220acf07fc1198d95cdf05d3c9b7e3ac87d6e7814872c3ef15e32d55c24ed94f6408711b00d6ff20d047b5b7e704f7c75e9633405b3bb2fba18bff1a21949045c8b84d311e3a328bec70cc0853d47517a25df191f29632903de668ac0e105995fb8bfaa7d12987b37ae41e7a04c20d523122929abf9042655375fb087abdd06407ec8b3ced6fbd1c5ba90ca52be4"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xe7, 0x1, "d494ced166dc6aaa1a6e5690a289a845060d7841760a210fda9252e4ddb95a785216a9c0655e35144a01758bc516e1f1b1e77148fe75cb12bbc4a8aa246e97dc4116b555b4ada50fad1ed1f8ba4223d2bb133fe7481fd68220887527356375bed3111c2489ce3010cf09320a7883f6528bec54d4cae62d56361a4c5516c53dca151799f48f77e774cc78f66c7b8ffe981b48357cf0328d5db8b8a4a99ea991580e08800cd15b353d09341efdb74c1d018649f2812eecffcfcd2c6bf2b6675eefc62f87c4f8d6cf34322f7de4c4e8a77f9980756e6f819472c753ee002d4706600d92c6"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10}}, 0xa48}}, 0x0) r8 = epoll_create1(0x0) r9 = epoll_create(0xf253e97) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000280)) 39.959041055s ago: executing program 2 (id=921): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4', @ANYRES32, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) getpeername(r1, &(0x7f0000000200)=@isdn, &(0x7f0000000100)=0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4e, &(0x7f0000003680)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0xc, 0x7, @dev={0xfe, 0x80, '\x00', 0x1c}}}}}}}, 0x0) sendmsg$nl_netfilter(r2, 0x0, 0x8000) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@mss, @sack_perm, @sack_perm, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window={0x3, 0xfffd, 0x4000}, @mss={0x2, 0xed0d}, @window={0x3, 0x3, 0x3}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={r3, 0x2000000, 0x17, 0x0, &(0x7f00000000c0)="3a1d5bd9a05eb82766a03581b25692ed5fa22942afbd5d", 0x0, 0xfffffbff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 38.352628804s ago: executing program 3 (id=672): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="b4000000000000006910810000000000040000000000000095000000000000007220abb1b364768c328613d20a4d2451a69f9642"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400"/15], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x15, 0x5, 0x0) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4, 0x20004}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) recvmmsg(r5, &(0x7f0000006100), 0x49f, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) close(0x4) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000340), &(0x7f0000000380)=r7}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50010000100013040000000000000000e0200001000000000000000000000000ac1e0101000000000000000000000000000000004e240000020000202b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0xa0, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_USERDATA={0x6c, 0xd, 0x1, 0x0, "a5dfdc4ad49e103eaa4609b946f921856a922493cb0ef164a1795406dd78e34a2c5a5e94956d23ceb2ab089d3ff400d69fccc2ea3364800a9bfb4e1d08a45629e03f85a60234c5fed895c09dd33a0fd0b830ae2af35b19c1c00f266dc39216462c67326acc7fd9f0"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x960, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x938, 0x3, 0x0, 0x1, [{0x1c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1bc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1f, 0x1, "13888f20591b5a5caf56f64a9b6d93878cd3c160284e5af898d90d"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x40, 0x1, "8d3a69ebc9ff7dfd76fae8dbde8c15ef0ffb79dab64485eca7f25e3808c07b81fa6745659d7b7a219e92d667cdfd52826c5bcff71dd24820bca94134"}, @NFTA_DATA_VALUE={0xfe, 0x1, "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"}, @NFTA_DATA_VALUE={0x15, 0x1, "d8c0ee53fc56931af487d57ffcad5dc0e9"}]}]}, {0x44c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xb, 0x6, 0x1, 0x0, "7551851c203ef2"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY_END={0x150, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x39, 0x1, "78a4d89623f855c2f67bbb3950b6673ca103e7d5ac703dc4e8a899e2bc460366c06cd3da2f6eab1d1fdac0cfdb9cae45dd3717ea6b"}, @NFTA_DATA_VALUE={0xb0, 0x1, "41f7f0f99f597ea686527d80148464c3c12e439b9d381119b4547961475bd65d3fb6b82b4e81cae9399adb32f855bcee6cf76498960e7e1ec83a405bed95df41c41f0cd435667b67ad54174a63b8b0a59522ee69f94dc11e7f176ad2695ad56cbb89e8c6acb28c9cd598fcd63685839df103cdba5007c9a10ce6e43d4474829363a2ec6380b54e8f491b0103f0a1047e120072c181fd994039777dc16b91b44af5ec570a7ba625e993a817e7"}]}, @NFTA_SET_ELEM_KEY={0xe4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe0, 0x1, "25cdcca06cc63e456555d2f5e689a75102b12e23d4457f2efcb667257bb775cdb643ead6676045fd350cec489af4df09b420ff1a3d21969d2f40aaee6c51af4b7e4f904a63a35a0acc9e00e02226713bfb3b9f0eedefe29e88365fd9c5627eadd48870a293797421a0303b91052b094815d5087fb6e5cc60727433d632cdf85bccdcdc15a8e88bb335ca590aacd2a2afa0ff69abb9d2797ebad8610f0f5c90516051a5dcc8edc752908e38274c6e510d90ecbf6b01c11e98301069093f71964d541e5c5808a24c926387fbe3e8b2b20d67f32e30555f0bb127f1a2fc"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @range={{0xa}, @void}}, @NFTA_SET_ELEM_KEY={0x1e8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xbf, 0x1, "363cf33acb36fc4a8733c7c34c831166074f8909ba990b57262fb9d926c0b1c95baf69da36d8b2cf26f14d528b13bfd1d3c585806bc2e56521b35d977bd8e6c89558c13b8087eef98f515d5f3bff5bec9379f630d0d6a233891eeb3e4c7646fd7732453c2533740b25fe53dfd4c79f95b90b98438ed0ae019ffbcd1daccc39e01959f3243753e0e759394561b7045d4a7fde0b25d0af02fce81d81b272828fd8d86dc1082e19e973e2a799e0f022c387697303dcefc7ff09858d3e"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x328, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_KEY_END={0x114, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000001}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xa1, 0x1, "76d851d313c6a57062ffc7e1275da6d47b8f19036019654ebd3543208af0417955b039effb86d7c53eff40323291198dc3de3252482833d963248cb7992b472821f4830e11d6cb5e9772d6d2ebe353728693917bcdcd4f43c6a1ea2cde6764b41e1a7f940f36383b16f36fb7974010dbef7900552d715205f6f9f81a627c0084e3aefbefc755e349f1d70307451f1393495f507bc7aa03d8bd799878c8"}]}, @NFTA_SET_ELEM_KEY_END={0x1f4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x99, 0x1, "ed6a81b5b02ab2220acf07fc1198d95cdf05d3c9b7e3ac87d6e7814872c3ef15e32d55c24ed94f6408711b00d6ff20d047b5b7e704f7c75e9633405b3bb2fba18bff1a21949045c8b84d311e3a328bec70cc0853d47517a25df191f29632903de668ac0e105995fb8bfaa7d12987b37ae41e7a04c20d523122929abf9042655375fb087abdd06407ec8b3ced6fbd1c5ba90ca52be4"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xe7, 0x1, "d494ced166dc6aaa1a6e5690a289a845060d7841760a210fda9252e4ddb95a785216a9c0655e35144a01758bc516e1f1b1e77148fe75cb12bbc4a8aa246e97dc4116b555b4ada50fad1ed1f8ba4223d2bb133fe7481fd68220887527356375bed3111c2489ce3010cf09320a7883f6528bec54d4cae62d56361a4c5516c53dca151799f48f77e774cc78f66c7b8ffe981b48357cf0328d5db8b8a4a99ea991580e08800cd15b353d09341efdb74c1d018649f2812eecffcfcd2c6bf2b6675eefc62f87c4f8d6cf34322f7de4c4e8a77f9980756e6f819472c753ee002d4706600d92c6"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10}}, 0xa48}}, 0x0) r8 = epoll_create1(0x0) r9 = epoll_create(0xf253e97) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000280)) 26.97888013s ago: executing program 2 (id=921): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4', @ANYRES32, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) getpeername(r1, &(0x7f0000000200)=@isdn, &(0x7f0000000100)=0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4e, &(0x7f0000003680)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0xc, 0x7, @dev={0xfe, 0x80, '\x00', 0x1c}}}}}}}, 0x0) sendmsg$nl_netfilter(r2, 0x0, 0x8000) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@mss, @sack_perm, @sack_perm, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window={0x3, 0xfffd, 0x4000}, @mss={0x2, 0xed0d}, @window={0x3, 0x3, 0x3}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={r3, 0x2000000, 0x17, 0x0, &(0x7f00000000c0)="3a1d5bd9a05eb82766a03581b25692ed5fa22942afbd5d", 0x0, 0xfffffbff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 26.010775121s ago: executing program 3 (id=672): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="b4000000000000006910810000000000040000000000000095000000000000007220abb1b364768c328613d20a4d2451a69f9642"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400"/15], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x15, 0x5, 0x0) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4, 0x20004}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) recvmmsg(r5, &(0x7f0000006100), 0x49f, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) close(0x4) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000340), &(0x7f0000000380)=r7}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50010000100013040000000000000000e0200001000000000000000000000000ac1e0101000000000000000000000000000000004e240000020000202b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f0000010000000000000000000000000200000032000000ac14140f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff03000000000000000700000000000000000000000000000000000000000000000400000000000000cc000000000000000000000000000000f60000000000000000000000fcffffff000000000a00010105000000000000005f001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800000080000000846ce2330d9fc56190ea91d916db01ae74"], 0x150}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0xa0, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_USERDATA={0x6c, 0xd, 0x1, 0x0, "a5dfdc4ad49e103eaa4609b946f921856a922493cb0ef164a1795406dd78e34a2c5a5e94956d23ceb2ab089d3ff400d69fccc2ea3364800a9bfb4e1d08a45629e03f85a60234c5fed895c09dd33a0fd0b830ae2af35b19c1c00f266dc39216462c67326acc7fd9f0"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x960, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x938, 0x3, 0x0, 0x1, [{0x1c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1bc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1f, 0x1, "13888f20591b5a5caf56f64a9b6d93878cd3c160284e5af898d90d"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x40, 0x1, "8d3a69ebc9ff7dfd76fae8dbde8c15ef0ffb79dab64485eca7f25e3808c07b81fa6745659d7b7a219e92d667cdfd52826c5bcff71dd24820bca94134"}, @NFTA_DATA_VALUE={0xfe, 0x1, "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"}, @NFTA_DATA_VALUE={0x15, 0x1, "d8c0ee53fc56931af487d57ffcad5dc0e9"}]}]}, {0x44c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xb, 0x6, 0x1, 0x0, "7551851c203ef2"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY_END={0x150, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x39, 0x1, "78a4d89623f855c2f67bbb3950b6673ca103e7d5ac703dc4e8a899e2bc460366c06cd3da2f6eab1d1fdac0cfdb9cae45dd3717ea6b"}, @NFTA_DATA_VALUE={0xb0, 0x1, "41f7f0f99f597ea686527d80148464c3c12e439b9d381119b4547961475bd65d3fb6b82b4e81cae9399adb32f855bcee6cf76498960e7e1ec83a405bed95df41c41f0cd435667b67ad54174a63b8b0a59522ee69f94dc11e7f176ad2695ad56cbb89e8c6acb28c9cd598fcd63685839df103cdba5007c9a10ce6e43d4474829363a2ec6380b54e8f491b0103f0a1047e120072c181fd994039777dc16b91b44af5ec570a7ba625e993a817e7"}]}, @NFTA_SET_ELEM_KEY={0xe4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe0, 0x1, "25cdcca06cc63e456555d2f5e689a75102b12e23d4457f2efcb667257bb775cdb643ead6676045fd350cec489af4df09b420ff1a3d21969d2f40aaee6c51af4b7e4f904a63a35a0acc9e00e02226713bfb3b9f0eedefe29e88365fd9c5627eadd48870a293797421a0303b91052b094815d5087fb6e5cc60727433d632cdf85bccdcdc15a8e88bb335ca590aacd2a2afa0ff69abb9d2797ebad8610f0f5c90516051a5dcc8edc752908e38274c6e510d90ecbf6b01c11e98301069093f71964d541e5c5808a24c926387fbe3e8b2b20d67f32e30555f0bb127f1a2fc"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @range={{0xa}, @void}}, @NFTA_SET_ELEM_KEY={0x1e8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xbf, 0x1, "363cf33acb36fc4a8733c7c34c831166074f8909ba990b57262fb9d926c0b1c95baf69da36d8b2cf26f14d528b13bfd1d3c585806bc2e56521b35d977bd8e6c89558c13b8087eef98f515d5f3bff5bec9379f630d0d6a233891eeb3e4c7646fd7732453c2533740b25fe53dfd4c79f95b90b98438ed0ae019ffbcd1daccc39e01959f3243753e0e759394561b7045d4a7fde0b25d0af02fce81d81b272828fd8d86dc1082e19e973e2a799e0f022c387697303dcefc7ff09858d3e"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x328, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_KEY_END={0x114, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000001}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xa1, 0x1, "76d851d313c6a57062ffc7e1275da6d47b8f19036019654ebd3543208af0417955b039effb86d7c53eff40323291198dc3de3252482833d963248cb7992b472821f4830e11d6cb5e9772d6d2ebe353728693917bcdcd4f43c6a1ea2cde6764b41e1a7f940f36383b16f36fb7974010dbef7900552d715205f6f9f81a627c0084e3aefbefc755e349f1d70307451f1393495f507bc7aa03d8bd799878c8"}]}, @NFTA_SET_ELEM_KEY_END={0x1f4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x99, 0x1, "ed6a81b5b02ab2220acf07fc1198d95cdf05d3c9b7e3ac87d6e7814872c3ef15e32d55c24ed94f6408711b00d6ff20d047b5b7e704f7c75e9633405b3bb2fba18bff1a21949045c8b84d311e3a328bec70cc0853d47517a25df191f29632903de668ac0e105995fb8bfaa7d12987b37ae41e7a04c20d523122929abf9042655375fb087abdd06407ec8b3ced6fbd1c5ba90ca52be4"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xe7, 0x1, "d494ced166dc6aaa1a6e5690a289a845060d7841760a210fda9252e4ddb95a785216a9c0655e35144a01758bc516e1f1b1e77148fe75cb12bbc4a8aa246e97dc4116b555b4ada50fad1ed1f8ba4223d2bb133fe7481fd68220887527356375bed3111c2489ce3010cf09320a7883f6528bec54d4cae62d56361a4c5516c53dca151799f48f77e774cc78f66c7b8ffe981b48357cf0328d5db8b8a4a99ea991580e08800cd15b353d09341efdb74c1d018649f2812eecffcfcd2c6bf2b6675eefc62f87c4f8d6cf34322f7de4c4e8a77f9980756e6f819472c753ee002d4706600d92c6"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10}}, 0xa48}}, 0x0) r8 = epoll_create1(0x0) r9 = epoll_create(0xf253e97) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000280)) 15.035653775s ago: executing program 2 (id=921): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4', @ANYRES32, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) getpeername(r1, &(0x7f0000000200)=@isdn, &(0x7f0000000100)=0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4e, &(0x7f0000003680)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0xc, 0x7, @dev={0xfe, 0x80, '\x00', 0x1c}}}}}}}, 0x0) sendmsg$nl_netfilter(r2, 0x0, 0x8000) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@mss, @sack_perm, @sack_perm, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window={0x3, 0xfffd, 0x4000}, @mss={0x2, 0xed0d}, @window={0x3, 0x3, 0x3}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={r3, 0x2000000, 0x17, 0x0, &(0x7f00000000c0)="3a1d5bd9a05eb82766a03581b25692ed5fa22942afbd5d", 0x0, 0xfffffbff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 14.232456237s ago: executing program 3 (id=672): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="b4000000000000006910810000000000040000000000000095000000000000007220abb1b364768c328613d20a4d2451a69f9642"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400"/15], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x15, 0x5, 0x0) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4, 0x20004}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) recvmmsg(r5, &(0x7f0000006100), 0x49f, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) close(0x4) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000340), &(0x7f0000000380)=r7}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50010000100013040000000000000000e0200001000000000000000000000000ac1e0101000000000000000000000000000000004e240000020000202b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f0000010000000000000000000000000200000032000000ac14140f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff03000000000000000700000000000000000000000000000000000000000000000400000000000000cc000000000000000000000000000000f60000000000000000000000fcffffff000000000a00010105000000000000005f001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800000080000000846ce2330d9fc56190ea91d916db01ae74"], 0x150}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0xa0, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_USERDATA={0x6c, 0xd, 0x1, 0x0, "a5dfdc4ad49e103eaa4609b946f921856a922493cb0ef164a1795406dd78e34a2c5a5e94956d23ceb2ab089d3ff400d69fccc2ea3364800a9bfb4e1d08a45629e03f85a60234c5fed895c09dd33a0fd0b830ae2af35b19c1c00f266dc39216462c67326acc7fd9f0"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x960, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x938, 0x3, 0x0, 0x1, [{0x1c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1bc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1f, 0x1, "13888f20591b5a5caf56f64a9b6d93878cd3c160284e5af898d90d"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x40, 0x1, "8d3a69ebc9ff7dfd76fae8dbde8c15ef0ffb79dab64485eca7f25e3808c07b81fa6745659d7b7a219e92d667cdfd52826c5bcff71dd24820bca94134"}, @NFTA_DATA_VALUE={0xfe, 0x1, "da17b078946fde0ebe041626db71ece1b0bc8566c47bbb76298b94d66381a5a8c336fe0eb906544bf94639c40b1f5bd22a5d4055126b54b36e0a8206ba51b3f8e38da268b0392a6dcce4d1b486a7c731264e488b117bb51af5f83cebf1dd300586782c5dc423b5a295325d9d81891de2d468de5355e2e94f15f9609c3c6c7963c28f6b1003bc532b3d8484049b17f31f7aa1a9d902f3a27bcdb6935d78dbed1247390ca122e0a17178778ce8db969df003875beae4eaf888b1a26399e0e9a2055e0457c0cfce405396eeb43d5ba3ae8057abea9bc78187bf0bcb150ce0e909df1af862059e51214a7022c63da45d3f5af25d3dd0d163917f992b"}, @NFTA_DATA_VALUE={0x15, 0x1, "d8c0ee53fc56931af487d57ffcad5dc0e9"}]}]}, {0x44c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xb, 0x6, 0x1, 0x0, "7551851c203ef2"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY_END={0x150, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x39, 0x1, "78a4d89623f855c2f67bbb3950b6673ca103e7d5ac703dc4e8a899e2bc460366c06cd3da2f6eab1d1fdac0cfdb9cae45dd3717ea6b"}, @NFTA_DATA_VALUE={0xb0, 0x1, "41f7f0f99f597ea686527d80148464c3c12e439b9d381119b4547961475bd65d3fb6b82b4e81cae9399adb32f855bcee6cf76498960e7e1ec83a405bed95df41c41f0cd435667b67ad54174a63b8b0a59522ee69f94dc11e7f176ad2695ad56cbb89e8c6acb28c9cd598fcd63685839df103cdba5007c9a10ce6e43d4474829363a2ec6380b54e8f491b0103f0a1047e120072c181fd994039777dc16b91b44af5ec570a7ba625e993a817e7"}]}, @NFTA_SET_ELEM_KEY={0xe4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe0, 0x1, "25cdcca06cc63e456555d2f5e689a75102b12e23d4457f2efcb667257bb775cdb643ead6676045fd350cec489af4df09b420ff1a3d21969d2f40aaee6c51af4b7e4f904a63a35a0acc9e00e02226713bfb3b9f0eedefe29e88365fd9c5627eadd48870a293797421a0303b91052b094815d5087fb6e5cc60727433d632cdf85bccdcdc15a8e88bb335ca590aacd2a2afa0ff69abb9d2797ebad8610f0f5c90516051a5dcc8edc752908e38274c6e510d90ecbf6b01c11e98301069093f71964d541e5c5808a24c926387fbe3e8b2b20d67f32e30555f0bb127f1a2fc"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @range={{0xa}, @void}}, @NFTA_SET_ELEM_KEY={0x1e8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xbf, 0x1, "363cf33acb36fc4a8733c7c34c831166074f8909ba990b57262fb9d926c0b1c95baf69da36d8b2cf26f14d528b13bfd1d3c585806bc2e56521b35d977bd8e6c89558c13b8087eef98f515d5f3bff5bec9379f630d0d6a233891eeb3e4c7646fd7732453c2533740b25fe53dfd4c79f95b90b98438ed0ae019ffbcd1daccc39e01959f3243753e0e759394561b7045d4a7fde0b25d0af02fce81d81b272828fd8d86dc1082e19e973e2a799e0f022c387697303dcefc7ff09858d3e"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x328, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_KEY_END={0x114, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000001}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xa1, 0x1, "76d851d313c6a57062ffc7e1275da6d47b8f19036019654ebd3543208af0417955b039effb86d7c53eff40323291198dc3de3252482833d963248cb7992b472821f4830e11d6cb5e9772d6d2ebe353728693917bcdcd4f43c6a1ea2cde6764b41e1a7f940f36383b16f36fb7974010dbef7900552d715205f6f9f81a627c0084e3aefbefc755e349f1d70307451f1393495f507bc7aa03d8bd799878c8"}]}, @NFTA_SET_ELEM_KEY_END={0x1f4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x99, 0x1, "ed6a81b5b02ab2220acf07fc1198d95cdf05d3c9b7e3ac87d6e7814872c3ef15e32d55c24ed94f6408711b00d6ff20d047b5b7e704f7c75e9633405b3bb2fba18bff1a21949045c8b84d311e3a328bec70cc0853d47517a25df191f29632903de668ac0e105995fb8bfaa7d12987b37ae41e7a04c20d523122929abf9042655375fb087abdd06407ec8b3ced6fbd1c5ba90ca52be4"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xe7, 0x1, "d494ced166dc6aaa1a6e5690a289a845060d7841760a210fda9252e4ddb95a785216a9c0655e35144a01758bc516e1f1b1e77148fe75cb12bbc4a8aa246e97dc4116b555b4ada50fad1ed1f8ba4223d2bb133fe7481fd68220887527356375bed3111c2489ce3010cf09320a7883f6528bec54d4cae62d56361a4c5516c53dca151799f48f77e774cc78f66c7b8ffe981b48357cf0328d5db8b8a4a99ea991580e08800cd15b353d09341efdb74c1d018649f2812eecffcfcd2c6bf2b6675eefc62f87c4f8d6cf34322f7de4c4e8a77f9980756e6f819472c753ee002d4706600d92c6"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10}}, 0xa48}}, 0x0) r8 = epoll_create1(0x0) r9 = epoll_create(0xf253e97) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000280)) 4.039363821s ago: executing program 0 (id=1611): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xd8}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x32}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x7}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}]}, &(0x7f0000000180)='GPL\x00', 0x3, 0xc2, &(0x7f0000000680)=""/194, 0x41000, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0x3, 0xd, 0x9}, 0x10, 0x2bb03, 0xffffffffffffffff, 0x7, &(0x7f0000000840)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000880)=[{0x1, 0x445, 0xe, 0x6}, {0x4, 0x2, 0x10, 0xb}, {0x1, 0x2, 0x4, 0xc}, {0x5, 0x5, 0x1, 0x7}, {0x4, 0x2, 0xb, 0x3}, {0x2, 0x1, 0x0, 0x8}, {0x3, 0x1, 0x6, 0x6}], 0x10, 0xe28, @void, @value}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r1], 0x40c}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000400)={0x0, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x0, 0x2000000000, 0xffffffffffffffff, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x9, 0x9, 0x0, 0x0, 0x7ffffffb, 0xffffffff}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r6, 0x5760, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) 2.85533875s ago: executing program 0 (id=1615): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001ac0)={0x78, 0x19, 0x2, 0x70bd28, 0x25dfdbff, {0x1e}, [@typed={0x8, 0x56, 0x0, 0x0, @uid}, @typed={0x8, 0x105, 0x0, 0x0, @uid}, @nested={0x8, 0x6, 0x0, 0x1, [@nested={0x4, 0x38}]}, @generic="b4fc6ba26f933eecc89a7c56", @generic="6afd8108823460415de0bbb425e879cd1ae5b7dd2f3a7ce25e5d2a0ac343b560d00bc464a7507974aaa27f6bcaa6bc326107643cd7d7ef1ce36f87b443"]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x1) recvmsg$can_bcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/43, 0x2b}], 0x1}, 0x0) recvmsg$can_raw(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) 2.726191633s ago: executing program 0 (id=1617): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=@newlink={0x54, 0x10, 0x400, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_CARRIER={0x5, 0x21, 0x3}]}, 0x54}}, 0x800) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x14, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000ac425562fa35d837e4b7002a949d31ac7add480000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2002, @void, @value}, 0x94) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bond0\x00'}) (async) bind$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x1, 0x803, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r10, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0xa) r12 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r13, @ANYBLOB="01"], 0x20}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000ffff000000001b000000060021"], 0x24}}, 0x0) 2.575272316s ago: executing program 1 (id=1619): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000004c0)=ANY=[], 0x8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000580)={{0x84, @rand_addr=0x64010101, 0x4e23, 0x3, 'lc\x00', 0x2, 0x3, 0x10}, {@private=0xa010102, 0x4e20, 0x2, 0xa, 0x80012d58, 0x12d5c}}, 0x44) 2.536951623s ago: executing program 0 (id=1620): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc000001}, 0x6000c880) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) read(r0, &(0x7f00000004c0)=""/182, 0xb6) 2.434559005s ago: executing program 1 (id=1621): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2720, 0x0, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0x34, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty, 0x1}}, 0x0, 0x0, 0x4c, 0x0, "01deabb244cc4fa00711be67bd584ecd190428efc9e569f4b222158b227692cebc00924b2deea371bafa0b00000059b4b696b22e4881f40a0d8f4c2fde153cfd9221d01c790800000000000400"}, 0xd8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf41000000653600648d2700120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0400000000e000e218d1ddf66ed538f2523250", 0x78, 0x44014, 0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000001b68e3686789df5d1eee5900000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0xd, 0x0, 0x0, 0xca, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff05000050"}, 0x38) sendmsg$inet(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x2}}], 0x5}, 0x80) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r8 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$sock_buf(r8, 0x1, 0x1a, 0x0, &(0x7f0000000080)) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x10000400}, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x80000000}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) 2.221879003s ago: executing program 4 (id=1623): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x300080c3}, 0x4000050) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x2d}]}}}]}, 0x40}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x68000, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x10800) 2.221327797s ago: executing program 1 (id=1624): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x40) recvfrom$inet6(r0, &(0x7f0000000280)=""/11, 0x1a000, 0x102, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000000000000000200000f8ffffffffffffff0008"], 0x34}], 0x1}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000002b80)={0x34, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="a2e02d0254566dc7a57e0321acdd2207626205a2d236c9a409abd66137e6182a268cad9bdc789fa24460034b075919c373fdcae6684a271478812f2d5a2adbd8efee10fc59200114d927a42d0a7f46c0a155ba133bc271bb7ae3e81d9784b488b1e992adec029912e7a7bb5850e95c88912a22afd762d4ce1354f1c92b22c7c7e5dab4f39b6d", 0x86}], 0x1}, 0x0) sendmmsg$sock(r6, &(0x7f000000bb40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001740)="ee5886e0b4a7667690f1667187f548b5dd806b642c598c818297305ef94826cf43347480c352a7687efd2b88142035c05e0b12bf21ce9c302aec3dad537125bf10c5d85c7af2cac9b92bb50a62c1497041f9745be39fc73b06ccc272be3d1570557eb0a831cf68944bf8d2efcbdf362cbe33092b0d78bcc9c3967b86525d47e16d8c3adda02b695bfa52f28142e759f8dbb33476c2edbb2707ee460329afe8275aca6bc1ec8ce9bd03ff0c188e2d8cb8f741800474df71d4c2a1e21a9b52b2c90a7162e2205546a2be56164b1f172a0dce32a1fd903726c08ea3dbe194aaefe465fac3a7", 0xe4}, {&(0x7f0000001840)="b792374b149f4cc5d3f155a0451609108f52206fe2441f23b1ba334d6c15b5268b4301fd805e21e7fc62f1acb0189c2786864f8af215c4c9327efb60965faa14092ae73bd93521b4c1b8cd70ef6991a33d69741e7c7e4b06e1ea98e0543698018f28ed13370d8e43fcecfbb0a1e909f6b4b2af1a3a832c56172abb1960a6f26447066f947d368188198761c4a9b7bbaa984b18f663e6dbeb1ed88fd32ceb88a6c743f303850988", 0xa7}, {&(0x7f0000001900)="814d61e8e52c537c9998f5b84a01cfef88daee9bfe1542b6953c6521e3453264f8dad438b05944c30d60e479cf5d55c288a89dec7b0dcbe43b723ef32926423c17", 0x41}, {&(0x7f00000000c0)="c17c8b83f132c039d41275cc024ca0411772c061cbf34e34f6", 0x19}, {&(0x7f0000000540)="cd50cb276d31843728fdd1b4d9443f0493685a902bbe47543901d67a4b9add80e5c48f94808ac3bb1cc7d7525bd861267c6051fcb1fd90752bd7515a6734563e983cdddef8a40af954c51dce6d3fbd7fcb5f0e9aa5c842969251fb6e9d2e468e84cbaeab607d071abc6e59b673315473db64494f7f86a51820a131cbe13498951f45ba3274e6de36ce8ec65d50cc4dfce288fc5f23289576a1", 0x99}], 0x5}}, {{0x0, 0x0, &(0x7f0000005500)=[{&(0x7f00000050c0)="ee0e4582ba0614e5e185ee74c1ededadbe569a96b62b925667d0a392fe8c900a119fd9c2b14e91ffa24b211a903afb6f6cdd3143f507ac024293e3923d3617e0667a5902cbfce554ef481af6057c861c627557da175c76b452bc68f081f551cc55e8c52440be9529dadcca04a4c0eabf833d9c45c8d01ee6bfaa0615590126e79a9665445056", 0x86}, {&(0x7f0000005180)="b04ec075ede0fd36f1f44707f67ac022dd7e9e53fc1fb4ad288f4155d572f2619b4ce51cd5cf0ad18e429dfd8fa80afb01f25064bc8b9f6790cf42dfa95b0c2eea70b4a435", 0x45}], 0x2}}, {{0x0, 0x0, &(0x7f00000059c0)=[{&(0x7f00000056c0)="0cf3bbc86c3be13e049b7726659813f6e5002a95fbc60ada3a271d39af8445e7698c90d154b32e68f7037786e3e0baab8b3bf51033206fbb9b82c171950e2f951149c90d88f07d59e2c3a34d1b51ce18c051ad19", 0x54}, {&(0x7f0000001500)="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", 0x1b3}, {&(0x7f0000005880)="1abec9916dfc6341f205af2ddeb54033c4a8c733e1a211363dd3e77850fbcf63c394c6c0cb0f4a0c0386e79590492085d40b0bac721875e27388dc2fbafcf190d69b5a71681be3cd08117460b878f3bb42734e0dd00564dcc8c51454fd01860221bb996caac887c1af262dcfaf527916db9feda28d", 0x75}, {0x0}], 0x4}}], 0x4, 0x4000011) r7 = getpid() r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r7, @ANYBLOB="50b11941995ef6f11efa30e687eaadfabd225f4890d0424e2616b486b00604836ed3b66fcea3a6010f914f155c90"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r10, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)='1', 0x1}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=0x0, @ANYBLOB="0000000014"], 0x38, 0x40044}}], 0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r13, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0xfd31}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r14, r15}}}], 0x20, 0x4004c}}], 0x1, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000005a00)={0x1648, 0x17, 0x301, 0x2, 0x0, {0x1}, [@nested={0x1633, 0x141, 0x0, 0x1, [@generic="2456e363900ce19777292ed34c31c249cc9ec80db467dda830a13da9758d3e2eda29e94bea2a52d4b7845ea8258bf0bf7c0b9ef2f92f1bd53452358b42f76705748b58aeae66048afe1ad3ed169d8d1e5c5b6cb54a0a8972edb6ff15dd552d7b5da4121e4707c72207139869e447fa", @nested={0x1e4, 0xa8, 0x0, 0x1, [@nested={0x4, 0x1c}, @typed={0x8, 0xb, 0x0, 0x0, @pid=r7}, @generic="607cc8fbaf1b43b03c62c1e1e03f01", @typed={0x8, 0x14e, 0x0, 0x0, @uid=r12}, @generic="b704a928bdd35e72a425ddfa84ddf69bd9c16796478008f7eef82d5684e343c19b0ed6841153c8512c4560", @generic="1ff3968bc4b1dbe8182a0c3884e5fa3a1b8f66a46c4f2f5cc8ecc78e8b4672fecf5806dd74fad1ef89dc3e0f3a89ce28625d08f68eebc83491dfa595a0faae5e283565b09a84be372a115ac4a1f9cbf002872370d0699a4f79ba3e4610db60843b2d8c2b79e1130f48bea19e4790783e56d6c9f32a35dc270b94a091f661dc8fe0f12448eab6accbdc77c4fe39a3528b1777bd8983a6db1e8b2686a8200e874acf1906a528096133d1dae38f04ef251d87865e3d88318751e223cbbc1853dc77d3be745b757b825dbcf3d5448b07085128b504cbc305eedd406c462f0167bda0e62b7b89c99436cb", @nested={0x4, 0x103}, @generic="8e7ef4ac0fafc730fcb979b55a5825ef75fcd95b3304e812924352cf387bf02ac6e7c1c58f40d5a0c2ba270d4e9dd44feea58a592bebf0b56c5ded33f1796b0f0f39df8f4be1e7e26037d264f0886abfb9dace679450fb071a38fdc2cab694742a533311c75c09a4baa4a19147697a3d2f0b9b950b931c4ce9499f790240b311367b192150c7514b091e9a06b620119b900ea8b01ee4762487c1b32990e9c435eb01", @nested={0x4, 0x14d}]}, @generic="d8", @nested={0x1198, 0x113, 0x0, 0x1, [@nested={0x4, 0x6f}, @generic="cc162b4c7a41ad046300460ddffdacd6c9b72c8a05ae582e3daa35974ff3a00bce79398b1a9e48976d8fdb0056ee22c745990a46fa896100655500cd5055db5ca28bfe532d477e2111de90db532b0ba55dddc75924644b58e32376ee5c51b80e566cd7bb8513a917f83691e52541a65a7652c55246fd0dc203fcfe50c9eb3a4a53880db2e101579042d77d430f3d66437a93ffff5eeed00da32093d9b040310357f159557b4550126b5d1e00e1ef9ef4c030f7ecd5c96c8bd4875c9a1e62bfe718f77fdfb5ade22604f55f6002db1a3281f70fadaffd63c4a08756b38471d2e6e9e98e418348f4232b", @nested={0x1004, 0x9, 0x0, 0x1, [@generic="eb6c5644e0902a1bdf1271d6f6ffbc51ac87f865afa1e1bb75b3a48a523893f7e58ea77bd453b69e66556adda799e059b731a327610fd366e21f130d7443cfd4f2b57aaba3a79a87f70a9c8960d8c0c17890f549bfe2dc17d75bb16ddb64ed59310f5e6f5ad936f89b3243235806d475b40abc1649f75bd3f85fdf1b9f86a67ecf5be971b5ba1ec9d1d93d06ea89a7b6c877a8902def322c9bea0c9738b866da2a457679b505d187fe292c90d0427433f08ccae61268fb4bc88283f0f064cc8074d755224d938565ca2fc6e627893e458e6ddc9fd0b7d3f296186b49b366878688f91ddc5cdb1f9dbafa0a966b06bfacaef2e8e50649c93235af1b0d21157b664c5f1248fc5cfd5ba4d3ded20d991900cec763f8efc9f4538c4330776eccb05361934772badfdfabbd473e3a9fa7838fa1f82021e4eeacdfd012e9ab44a5b03256a2c1ca4103f2bf55970084c9af01c280e449b8efffa0643bae565255f3a3c382ed73b80e6d4875571d4f50c0ba18ee888fd6e757737563ef64f90e194a8640bbbca884b0d97e0e140dfb56994a19c86895b4ec4a1ef60bbe50d40b331763f35980df82d0a608c6b5ef9883bc2a481b42669efeab292fa847ac94c8c6d3b2f99f98cffb4fb828cc93b13c578416a374aca766f6132cd7097b989ea4f972dbf2a78b5ba93da6d6e6fe5ee8d9984cf9268bbebc11886055f13d6d2859648f9199562aa05530acd63f7fc4007be641ea0add978468845df6bd26b1c6c2525f3d274f7eef581e6ca1d2ea55fd151878e1d53616d7d66658088ca32e90234c9cd615d3ca7e5b4808fa861525494d1cd65af3358808da39eccf13221f8fb1ea8038ed2ed6292948191a8077ac844d5112454f4b7b522359ef29bd29fba7a18854b2fe7d300bab3b0e12dcb95942a0a8faa33e715fe309948440602d281a6f99681e0b7ee3415894e5a5ee165ad934e3f3d9db834eca9e65adbddf21675c73e8aa847a2aa1d6f8d8e221cada8bcfecce9b4967035bae18f3ab8b212b72cddcde2b9473d096181cb031f5a8e3b99e892ea028a4694f1b88996fd371d10af62191fe26236c023871175ae8541b6afef99bd9c282252011b3be2bf89ec203b4f1dfb3c25ee132bad1fb0ac2c1eded97ee4c91a4cc942c1ec010f15f37ea569eb17b9fff6acf53f334b186f5c286adc5fc290b498507bcaf85a5113b303531336b63973da75247d00436374773e601f29c4a038106b492cf18f33c6da7c3a724f3190165a6e292ed0d02389be604673647490ce453f69d51f099e7ede2eea3058646582df9e0332a240d874395f82dace41e9b2b9ff0c79b30573549e19d6dad2f2886b75bc8f606d90cad2214fd70b71d2e00990d0a01892e6c4d46112ed499e93755db0523abe05ff171b99f2e26c96627f7f3fd088582633aa73db4f9b7c4d2a19294812549d2eb2ea13588606a8eb34cda1a688a0a00e49b46033000b033c5cd4ed2621af41b606be7f78c50fe5b390783286e054828cdfed3133e5a8c92906027834c57efd55b67e6d75d96d32f37fe75c68a298b657c9507773330af072a8bbba59fafa712df327b51bbf436ac1aac4da21a3fd7b055612df46d24adc345fc882ad185a4ebed85940f58fcc1bd3c6cfbd79cbdba6854650ac53f15958b82e42021b71d75f999f9936e030838f0215da14c6281e90d6310dc9a66b588de966557895a751af1e34a72b5c08d21bafe416dd602d61b1960c9356b4c10a4123f72e0fe163d16acc43c7e29ff6b717542e4da934c6407b575e331d1e6c7499663ce460372e14add1748e095530fd3eca8c67b6d18d0f0e73798ec8157efbddd765dd15544096002d8c6bd10debbd09c016016b5d6bec80c0e0bf60823ff1ddb3a649bf6f9041e64d9fff47cf7f8f916c03189cced9b73776ecb3a58a9688df5c1362499328d62fd7cd67e5b939e2fa8a2044e3dcabfc05ad10b2a1a13bfa8278ccd6eac844cf9a8ac5f24efe15bbc9b0fd6a154bffda364fcdee5ccfaae9b7339dc6c66a6efb1ef19da5bcd4ceddb91b48e2da52974cdfa9fab34c4a4343ca354b99a489eaa52ed449a58508167a825299ae65e3dec4432e420b7197868b215d4ffa714b994c4291c99641c70b447eb5c4c5633f5b48f0646ac2a6117a270f8bb9b11d474808e2bc2fd27c7c914742eb4fffae5f3397c7a354c92c133c1bc02152f7dd6360fd7c9f4e5bb017ec7a6db0c77f6de5f46928e6e260dce3fb255bad3573c1bd9829e27fe80c4963649c88302325899ff7e87819f803ca875afbccbb752c60af1366e5fa61001c3b913f640419c508d233c8d4698c3daae5c43d1f475f0d7b058bedb20c5b803b76b121ae22e0ff6ddb1cc75c7a77f73634a6ded4dfc3759edacafd2ffcbe3b64362cdded271aea2f79031552d8421518efdfbf4051c6f33cc54d186ad2c1afdefb8dae0564fa15bb488755aa84f728fc6752e2bed21b1c4b7e3e1d832b8782f10163a25ef82cfd643d274fc188e275ea431053fcacf7c6d0e516aae28ffda1a2d6a4f9391555ce774565e8df23c9f988d7d52f20a930c88545a0d2b60c5a701534f547bba4383067fad522937922a50081123dae64dec760d1c75f357cbed4f0c39b127979eaeea8880e038140b3052ab5e80df2b524835ca7a495c9fca7f1590b8489c659132c0dedbe11ea6f7929258b376f16d9e12f19597843f660d55d4b86a2ddfd2558ca6ae6e20cbea2cbcc126b688ed5446ca05efe2d0314fc69bfb6b5b4383ae7e850447891f2641cb063b5fabf0c2a0089647d584f22fd204037de52d2ca4970a6badfe8b152b57b8573510ae61016c23be4de001811e06087461702131ca3bc3c20684b58746d4119d4429beb1ad5ecbee367c33836316f2eaf4aa910c97f458fc2196821f654dd4339ebe62a6f3e74befa5861ea94bd18d95f019f526771ba57a6ac5419f400f817cc17abb026a4fbaeb97bf13717b45d1f746c1bc580f3632a4206bc1ab7c3903f64f67aeaaa9e233b0835f080e0cfa1232f81cbfd2ae942a4c2d2904f7c392eb5c414851754ab1940f09f7edb2ab138bb39310205a52fde495f051db2a12ae8c1a23136abfe7b32991a880300d48c96af152f8707f0cf0879e63046d6a52d0cf0344701a180f3b014590f57df77ecd51ccc9f472a230033c59236b121239c795deb2d928fe211988e11b05bc6636f110bb0ea023c943307c199bffac7749c5857cd7acde0e7ec7731db0b233888612b7c7e1a7f79d841f0d6ee5c7ae88b1e8374379f2a68612b4638cc9766709cc9168d123569942fc4289a7a32dfb78529b431c5b6548211398cd6a324da719d2f988b08cd7b5e1f1ec1f902e693310890a6c309c78c6fc22deb3a0b372d670d47b141d23b9b7423cfe3f1a24d9bd9600499aaac0756eb2dd42a0b3a188372f58893aedb0919dcd2f8e349a8eb64916ea3e3ddcbba534fb409fea5ba20dc7ce81de9bdc265dc492578662141a2861692253f9bc9db17850ab5f38bc68de4dca091c50e594fcb9b67da16ec1236bd79c9e765fe3257c6b640fcf162deebbef5178471c69971c0708d176a62e8f8a26885062aed1e2c529111e89fa81087dd0ddc60f6080e733ef62bcfd4c776439d25ac95118f3278c97b93d8db5544369b9dd5ab5ebb429a61f4a1d1c1f118a548c936084e99de2d1b79aaf2000d787a5af1a7f5a0fa58d7d97135dd65bd3eee7d4edeee397cdda4b88623fbdda560d62ed97277bf460da2d855df07bdbd53736923bbda8afb2dc855faa2a87eee5a0428209688dde8ac3b59ce5ce82bc0b78e228773ed905fb686c93081dea7acc5aa228c45bbb35849d78fe433273440ac764b9430884d4ea43d5076e758a36e57423366d633485f1d85c8326e5d6ac66e56cd6115cf579912ee571046811b077b9101e82af292af3f446d7bd61f464077fcae502ff0461407d01dceebcfb074eafc0976e51bb5401c952443601a5275e8676e822ae9513a4f1024bff9ebd42dd6de23151271b1ee1e79a2fc8bd7ae6d9c0567bf3a5f0949d8e51a44064a5fd3a1647bbc2857040f83d059bfbca2b399cd6331cf8e004d7e7516c8b15dad0f40b85226f5bffa6aa7874d1e90c824c2bc01dbcea9e7f5ebf6d5381b397115408a44c9f3f5ecd257ad20976c85bedb32e92129cbbd4a4aba93af00cd7af7d9becee5820fcfa70c68a92d21d4d84f53d7ba9368db3b2cfc8ebd2fd64742122e513f77d9dd48dbe1da2f8a3fa18436db4a55bbe32b936b7fede4567460f616886894dee1d9b2e9b97e22a23ccb3a1939cac3f2e022608c0ec06e6992941175d4b500714469967e09be0889e429333751e1021761029b9c14b77f1b241a3ef953a62903dd441f13ffe7aa7a1abb9c8a00c7f6549447ecfc787ff445e53fe3e98d4a8d594afa7f43ac2592bb9955976b60ad48dc43ccf0c25334223bd6617b984c5ad421aa711e2084185bf1a41ce481327485945587c39ad1899d1050c8b279937a16f2ad79a45546a13e81472ccd1b4316592f9d833a0e3b6c25ca4c111787bee8ab537c2b63a2fb45137b7871f3486d96edbd62d0debdd079465de5b7f8d41d093880b2325da2dc329c6ff82c2659cfdba4b2d0fd992366ecf7f7e03a542cb5b9a459d413b21c49688a2fb032bdee3259101301694da08a0924a96b6d4d08b0d6906e157c782c4f671a45e976c738ba156176ccd8aa1ecb585245ea6b008beac038444ac7e8ded473d504d356888c542a048fd13e69ee6b990a88d13af21da5184387667c62df9f27bf38a35115f33fddb279f7ab1a7f99c02d62d95841571be58834d5cab21c779350b75029d195eac2333b902c9bf771be677c266406d065504b53b76a9a454ccf9816b34d549a1801061c5a6cb3f35e908a23ab8b23076b26b7cd9b59bb81123af00623fbcdba3b58a61e953ba963f069ca3a3439df9057ae4f4fd45890d9187800936c76801da6d90b145f6c2a439ed317c48b31ad4b9a4a207ea6d6ea6b8b040d9f6475f92f5f9edace15916e0cd6ed179afd3b3a979d014ea212c1005a192336567e33bc90d06b69f949409964ab0c86e08d3b88e599f99d4b5405b49be8fae291f76e91dbd6307c2b7fee3358bcc8da5965d96d10e4e8f8f6599418135c9e3b37440b443be8791b33b9c70871a00d8141dcc4d6eab8304f06e38e29242da25a018c1c9fa3381dfce9477156d6c3f6ae74d19f13253c03c6108faf309bef2c387237b2ee17986bb4dfaba46712c531058d569736e1d4a55a5106d9a06018f14c238932e693b4b3f30b9a9c1c0ec53466d6779f940a150f8a508fa35c2d7c5c6b6e4728cb1214ed4294d797f36252b598516c2ef02397bddba88df3b160f4cd645ee1484ce051f379cdf1d0d515d7a0ce59a07bfda8180ae246e989445951fa58800ce083982e8abea172f18ed0d35f712c0e7717c99a08fc1c2b96f37597376c8f1ca39558c14eac7e38ed391b78e0f2d2cc5b9b47857a8a503f21fa8cc146f89a8c23b7af69f50c0a5f9734a22c813796949104050278d720a021f347e8ba437ac893fd910019b70bef8dace47c7fe8346c9c987a63706247b120503b4a98fb81db5a1b775f4093a74ee99dac34e9a509ad29d0933febf31b5c1e74063a7479b8ee6c9a76bf971f420c21493a204664257bca9a02793ce8d8c64ca8939215ebc6f049257edc584b2a7d2baaddebd3d881c25df9207250310a0f61ed3031facc5b9eb0c91824adda261531f71ff17ee10fea144fb81719b10517ad6"]}, @generic="30c9268301b821f310a24f17460b794f050751ee14d240a3e01f77af1ed510f7a1d80440d93cb7bbdb7575bc5a240ab56f34d1f2462b234637c30ec17966229316842164766d965ea0b06f04ea94d13f398fd1407af8e328e93bdb5ecfd00335aa4cf4a60783781b5222cf9fe6a915d6f9ba79645909360c70a27f8b028758657cc0e68cfe4740a1ce4f1cdb33d9638e2eb354", @typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x12a, 0x0, 0x0, @uid=r15}]}, @nested={0x197, 0x130, 0x0, 0x1, [@generic="cf2e2ab62cb0347a874790293e77db43d0f5fa4e2c78aa524c53e6bfe549bd1faa49efbee28438f0ccdf1c0c0f1a65445d9a4018318d781e0dcace85cb287215dfceea6637c55d1fc34738d65c6cd2f8d8cb5128609390e64aa4c21fbb1da60a660a93949f44529157079c9dbec729192dedc868a15af73301520484715b8375ed6a9e724385506e06c5f3", @generic="9732e5b2125890b4bd3e26192eea8d5526387bac936b76c445933f2394577cd700cf684a164296a77243f310268384578cdda2f3a61065b1206b65fcb0a53b0c36629f04f3609f48dfd7273d4903306ffcd934a4bdf2e95f8df0a8c2ad74bf39d47ff980e77c73d33a28184c2aff914c12252220acaf7f61a5bb800ea20e29d5e5b7e9b10bd5971c0f1696448eb0", @generic="0714e7b34945dbf7a2aae9632971641d0698d6b09710e6bf79552f3dca02d28a9515554bfca91292796819592831ab944166fe1651fdea90271aa2e2ebeeb4e070bc3abef3acf2943d435cf9c9b3b64cb5cc92ca03c074e2c2c4ae66993f45f49e53dfb3012e5dc789e7199b2df7c8c7cbf6f2806b45079dc89a"]}, @generic="777dab9222eac55903d8683cedf57efacd2d2cd94ca3b867da407918938853ae7724f190b5673c5887327329d6bfad6a9b350270846ba7433168a5bfd047e8bad393253ea72b328fa0f0df438416cd6edd134a52b362fcedcc9dd51e130bc8d06d4f98939e0436c2f4ab047ad2a0b32e4fce238bdaa97bad6c4aa58c764d8e515fd81fd58e764a25563c619ac0ca0cf3e48052a40d4faf28f5257d", @nested={0x8, 0x1e, 0x0, 0x1, [@nested={0x4, 0xf0}]}, @typed={0x8, 0x78, 0x0, 0x0, @ipv4=@private=0xa010102}]}]}, 0x1648}}, 0x400c880) socketpair(0x28, 0x5, 0x6, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r16, 0x1000) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x861}, 0x4000011) 2.1292537s ago: executing program 4 (id=1625): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000040)={0x1f, @none}, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet(0x2, 0x5, 0x6) r3 = socket$inet(0x2, 0x1, 0x51b) listen(r3, 0x800006) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000540), &(0x7f0000000580)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x1d0, 0x11, 0x148, 0x0, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [0xffffff00, 0xff, 0xffffff00], @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}, [0x0, 0xffffff00], @ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0xff], 0x8, 0x6, 0x5e, 0x4e21, 0x4e23, 0x4e24, 0x4e21}, 0x40, 0x8e0}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x242, 0x75f65a4e97d6873f, 0x1}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x200}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) 1.779827166s ago: executing program 4 (id=1626): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x0, 0x82, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b0f, &(0x7f0000000000)={'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r2, 0x9, 0xffff}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r2, 0x3}, 0x8) 1.615571401s ago: executing program 4 (id=1627): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001ac0)={0x80, 0x19, 0x2, 0x70bd28, 0x25dfdbff, {0x1e}, [@typed={0x8, 0x145, 0x0, 0x0, @ipv4=@private=0xa010101}, @typed={0x8, 0x56, 0x0, 0x0, @uid}, @typed={0x8, 0x105, 0x0, 0x0, @uid}, @nested={0x8, 0x6, 0x0, 0x1, [@nested={0x4, 0x38}]}, @generic="b4fc6ba26f933eecc89a7c56", @generic="6afd8108823460415de0bbb425e879cd1ae5b7dd2f3a7ce25e5d2a0ac343b560d00bc464a7507974aaa27f6bcaa6bc326107643cd7d7ef1ce36f87b443"]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x1) recvmsg$can_bcm(r1, 0x0, 0x0) recvmsg$can_raw(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) 1.593054206s ago: executing program 0 (id=1628): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x4, 0x70bd29, 0x4, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x11}, 0x840) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000140), 0x4) unshare(0x10000000) recvfrom(r1, &(0x7f0000000180)=""/4096, 0x1000, 0x0, &(0x7f0000001180)=@ieee802154={0x24, @none={0x0, 0x2}}, 0x80) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001240)={'macsec0\x00', &(0x7f0000001200)=@ethtool_sset_info={0x37, 0x3, 0xb, [0x0, 0xa]}}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000001280)={0x6, 'bond_slave_0\x00', {0x4}, 0x2}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000012c0)={r0, 0x4, 0x4, 0x1000}) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000001300)=0x4, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000001340)=0xb, 0x4) bind$bt_hci(r2, &(0x7f0000001380)={0x1f, 0x4}, 0x6) bind$l2tp(r2, &(0x7f00000013c0)={0x2, 0x0, @multicast1, 0x1}, 0x10) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000001480)={r1, r1, 0xc0c8, 0x63, &(0x7f0000001400)="ec0e279427ce61c5bfefafba1ef099e0ddcd2e96535cc6b5ad12493f6614e097bfc08707b8e9eda0f5f6e1b8c69288940a693642b2ab461db61f2ee897f5d123dba0ae862962fa10133422fd607a011ca49556cbc762c5561fd55db0d77251c8eb7176", 0x4, 0x7, 0x2, 0x8, 0x8, 0x0, 0xaf3, 'syz1\x00'}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001540)={'gretap0\x00', 0x200}) sendmsg$nl_route(r2, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)=@getneigh={0x14, 0x1e, 0x4, 0xffffffff, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008084}, 0x801) shutdown(r2, 0x1) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000001680)) unshare(0x200) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f00000016c0)=0x2, 0x4) r4 = accept(r1, &(0x7f0000001700)=@ieee802154={0x24, @short}, &(0x7f0000001780)=0x80) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000017c0)={0x140, 0xfffffff9, 0x2, 0x800, 0xffff}, 0x14) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000001800)={0x0, 0x3, 0x5, [0x981, 0x8, 0x0, 0x3, 0x2]}, &(0x7f0000001840)=0x12) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000001880)={r5, 0xfff, 0x214}, &(0x7f00000018c0)=0x8) recvfrom$l2tp(r2, &(0x7f0000001900)=""/193, 0xc1, 0x40000102, &(0x7f0000001a00)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp6(r3, &(0x7f0000001a40)=""/121, 0x79, 0x1, &(0x7f0000001ac0)={0xa, 0x0, 0x0, @remote}, 0x20) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000001b00)={0x88, @multicast1, 0x4e20, 0x4, 'rr\x00', 0x0, 0x6, 0x41}, 0x2c) socket$inet_mptcp(0x2, 0x1, 0x106) 1.530380344s ago: executing program 4 (id=1629): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000000c0)={0x1, 'pimreg\x00', 0x3}, 0x18) r1 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000180)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x0, 0x8, 0x3040, 0xffffffffffffffff, 0xfff, '\x00', r2, 0xffffffffffffffff, 0x4, 0x2, 0x3, 0xb, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x7f, r3, 0x7f00}, 0x38) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0xa, 0x0, 0x0, 0xe, 0x4, 0x1}]}, {0x0, [0x0]}}, &(0x7f0000000300)=""/108, 0x2b, 0x6c, 0x1, 0x9, 0x10000, @value}, 0x28) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x1c, 0x4, 0x41, 0x0, 0x1, 0x1, 0x11, '\x00', 0x0, r4, 0x2, 0x6, 0x0, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000040)=0x8000, 0x4) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xf, 0x810, r3, 0x1f488000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) socket$nl_crypto(0x10, 0x3, 0x15) 1.255383479s ago: executing program 1 (id=1630): r0 = epoll_create1(0x0) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380), 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000003c0)={0x40000010}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711414000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmsg(0xffffffffffffffff, 0x0, 0x20000040) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x50, 0x20}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000200)={@local, @broadcast, @val={@void, {0x8100, 0x2, 0x1}}, {@generic={0x201, "f8bb30f7"}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_DPORT={0x6}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}]}, 0x2c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYRESOCT], 0x74}}, 0xc800) r6 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={{0x14, 0x3f5}, [@NFT_MSG_DELTABLE={0xd0, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4bd0}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x6a, 0x6, "ce6ea4341e45fbde69467741716aff3fa266f0637b1fa203fb87b3cb5db2c0697db3e584660bc65af4172bd3856215738337505c15f6393a82ac3f833aad04ec9bf25a800184d14b0fbe5b616b74dbd14b6ed1c6ed4ea537085d33187908e25801521d573de0"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}], {0x14, 0x3f6}}, 0xf8}}, 0x4010) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000400)=r2, 0x4) r11 = socket(0x10, 0x3, 0x0) sendto$inet6(r11, &(0x7f0000000100)="7800000018002507b9409b14ffff0000020406050e020409430009003f000c200a0000000d0085d97084280e490840653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba866832f218d1ddf66ed538f2523250000000005c1b44cdf810a835ba743aaeb5c8844f8ed4ee42fdfe4fe0", 0x7b, 0x0, 0x0, 0x0) connect$inet(r11, &(0x7f0000000440)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="495303000000010000006700000008000300", @ANYRES32=0x0, @ANYBLOB="0c59f0e41daa009900000000005ee9042a0000000008001780"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fbdbdf256f00000008000300", @ANYRES32=r10], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r6, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0001000000000000000c7a005cc63bdc0300", @ANYRES32=r15, @ANYBLOB="0600fb000d000000"], 0x24}, 0x1, 0x0, 0x0, 0x20008050}, 0x84) 1.077054835s ago: executing program 1 (id=1631): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 929.026417ms ago: executing program 1 (id=1632): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYBLOB="07000100"], 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={r2, 0x200002, 0x30}, 0xc) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x1}], 0x1}, 0x20044800) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x50) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x1, 0xcd, 0x12d5f, 0x3}}, 0x44) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000580)={{0x84, @rand_addr=0x64010101, 0x4e23, 0x3, 'lc\x00', 0x2, 0x3, 0x10}, {@private=0xa010102, 0x4e20, 0x2, 0xa, 0x80012d58, 0x12d5c}}, 0x44) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000791247000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0xe, r6, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="6ada00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000008000"/28], 0x50) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x14) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffe0f) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 615.538819ms ago: executing program 0 (id=1633): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) pselect6(0x40, &(0x7f00000000c0)={0xfffffffffffffff3, 0x61a, 0xc8a1, 0x7, 0x5010000000000000, 0x20000000000005, 0x6, 0xff9}, &(0x7f0000000200)={0x1, 0x7, 0x6, 0x40000000000081, 0x5, 0x100000003, 0xfffffffffffffffe, 0x4}, 0x0, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x6]}, 0x8}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000a, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000000)=r5, 0x4) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000240)={0xf232, 0x4, 0xfa4e, 0x6}, 0x8) mmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0xd, 0x12, r2, 0xfffff000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@func_proto={0x0, 0x1, 0x0, 0xd, 0xa, [{0x4, 0x3}]}]}, {0x0, [0x5f, 0x5f, 0x30]}}, &(0x7f0000000f40)=""/4089, 0x31, 0xff9, 0x1, 0x0, 0x0, @void, @value}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x2, 0x3, 0x6) r7 = epoll_create(0x8001) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000100)={0x2000}) bind$inet(r6, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x4840, &(0x7f0000002400)={0x2, 0x4e20, @multicast2}, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) sendto$inet6(r1, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 597.65836ms ago: executing program 4 (id=1634): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xa, &(0x7f00000003c0)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r2) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000028000004400128009000100766c616e00000000340002800600010002000000280003800c00010000000000050000000c00010000010000800000000c0001000000000009000000080005006d6dc43a45be0017a4902d9a716853ddad8ad3a578bd9e6bcb53de8a26e1284e409a15c283f5bf0691f1c216cc5c5a8d649d60e3ea125e175bb03eb48b093a9bf56310bdd04f75396dfd82737f8d6478322732be915fc655f82b634a1bb77978576f19b491f93d2e5adb8f759ebedd2b28d1ef5f552bd7829daa5f49f97f1501a463bec37424f12f592c9bd0f7dd727c0d80a91b9396cf644726b14f7e0e9626cb10ff59935ba1d41e410944", @ANYRES32=r6, @ANYBLOB], 0x6c}}, 0x0) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r4, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}}, 0x20006800) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r7, &(0x7f0000000000)={0x1f, @any, 0xd}, 0xa) 505.518675ms ago: executing program 2 (id=921): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4', @ANYRES32, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) getpeername(r1, &(0x7f0000000200)=@isdn, &(0x7f0000000100)=0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4e, &(0x7f0000003680)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0xc, 0x7, @dev={0xfe, 0x80, '\x00', 0x1c}}}}}}}, 0x0) sendmsg$nl_netfilter(r2, 0x0, 0x8000) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@mss, @sack_perm, @sack_perm, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window={0x3, 0xfffd, 0x4000}, @mss={0x2, 0xed0d}, @window={0x3, 0x3, 0x3}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={r3, 0x2000000, 0x17, 0x0, &(0x7f00000000c0)="3a1d5bd9a05eb82766a03581b25692ed5fa22942afbd5d", 0x0, 0xfffffbff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 0s ago: executing program 3 (id=672): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="b4000000000000006910810000000000040000000000000095000000000000007220abb1b364768c328613d20a4d2451a69f9642"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400"/15], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x15, 0x5, 0x0) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4, 0x20004}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) recvmmsg(r5, &(0x7f0000006100), 0x49f, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) close(0x4) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000340), &(0x7f0000000380)=r7}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50010000100013040000000000000000e0200001000000000000000000000000ac1e0101000000000000000000000000000000004e240000020000202b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0xa0, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_USERDATA={0x6c, 0xd, 0x1, 0x0, "a5dfdc4ad49e103eaa4609b946f921856a922493cb0ef164a1795406dd78e34a2c5a5e94956d23ceb2ab089d3ff400d69fccc2ea3364800a9bfb4e1d08a45629e03f85a60234c5fed895c09dd33a0fd0b830ae2af35b19c1c00f266dc39216462c67326acc7fd9f0"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x960, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x938, 0x3, 0x0, 0x1, [{0x1c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1bc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1f, 0x1, "13888f20591b5a5caf56f64a9b6d93878cd3c160284e5af898d90d"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x40, 0x1, "8d3a69ebc9ff7dfd76fae8dbde8c15ef0ffb79dab64485eca7f25e3808c07b81fa6745659d7b7a219e92d667cdfd52826c5bcff71dd24820bca94134"}, @NFTA_DATA_VALUE={0xfe, 0x1, "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"}, @NFTA_DATA_VALUE={0x15, 0x1, "d8c0ee53fc56931af487d57ffcad5dc0e9"}]}]}, {0x44c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xb, 0x6, 0x1, 0x0, "7551851c203ef2"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY_END={0x150, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x39, 0x1, "78a4d89623f855c2f67bbb3950b6673ca103e7d5ac703dc4e8a899e2bc460366c06cd3da2f6eab1d1fdac0cfdb9cae45dd3717ea6b"}, @NFTA_DATA_VALUE={0xb0, 0x1, "41f7f0f99f597ea686527d80148464c3c12e439b9d381119b4547961475bd65d3fb6b82b4e81cae9399adb32f855bcee6cf76498960e7e1ec83a405bed95df41c41f0cd435667b67ad54174a63b8b0a59522ee69f94dc11e7f176ad2695ad56cbb89e8c6acb28c9cd598fcd63685839df103cdba5007c9a10ce6e43d4474829363a2ec6380b54e8f491b0103f0a1047e120072c181fd994039777dc16b91b44af5ec570a7ba625e993a817e7"}]}, @NFTA_SET_ELEM_KEY={0xe4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe0, 0x1, "25cdcca06cc63e456555d2f5e689a75102b12e23d4457f2efcb667257bb775cdb643ead6676045fd350cec489af4df09b420ff1a3d21969d2f40aaee6c51af4b7e4f904a63a35a0acc9e00e02226713bfb3b9f0eedefe29e88365fd9c5627eadd48870a293797421a0303b91052b094815d5087fb6e5cc60727433d632cdf85bccdcdc15a8e88bb335ca590aacd2a2afa0ff69abb9d2797ebad8610f0f5c90516051a5dcc8edc752908e38274c6e510d90ecbf6b01c11e98301069093f71964d541e5c5808a24c926387fbe3e8b2b20d67f32e30555f0bb127f1a2fc"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @range={{0xa}, @void}}, @NFTA_SET_ELEM_KEY={0x1e8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xbf, 0x1, "363cf33acb36fc4a8733c7c34c831166074f8909ba990b57262fb9d926c0b1c95baf69da36d8b2cf26f14d528b13bfd1d3c585806bc2e56521b35d977bd8e6c89558c13b8087eef98f515d5f3bff5bec9379f630d0d6a233891eeb3e4c7646fd7732453c2533740b25fe53dfd4c79f95b90b98438ed0ae019ffbcd1daccc39e01959f3243753e0e759394561b7045d4a7fde0b25d0af02fce81d81b272828fd8d86dc1082e19e973e2a799e0f022c387697303dcefc7ff09858d3e"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x328, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_KEY_END={0x114, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000001}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xa1, 0x1, "76d851d313c6a57062ffc7e1275da6d47b8f19036019654ebd3543208af0417955b039effb86d7c53eff40323291198dc3de3252482833d963248cb7992b472821f4830e11d6cb5e9772d6d2ebe353728693917bcdcd4f43c6a1ea2cde6764b41e1a7f940f36383b16f36fb7974010dbef7900552d715205f6f9f81a627c0084e3aefbefc755e349f1d70307451f1393495f507bc7aa03d8bd799878c8"}]}, @NFTA_SET_ELEM_KEY_END={0x1f4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x99, 0x1, "ed6a81b5b02ab2220acf07fc1198d95cdf05d3c9b7e3ac87d6e7814872c3ef15e32d55c24ed94f6408711b00d6ff20d047b5b7e704f7c75e9633405b3bb2fba18bff1a21949045c8b84d311e3a328bec70cc0853d47517a25df191f29632903de668ac0e105995fb8bfaa7d12987b37ae41e7a04c20d523122929abf9042655375fb087abdd06407ec8b3ced6fbd1c5ba90ca52be4"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xe7, 0x1, "d494ced166dc6aaa1a6e5690a289a845060d7841760a210fda9252e4ddb95a785216a9c0655e35144a01758bc516e1f1b1e77148fe75cb12bbc4a8aa246e97dc4116b555b4ada50fad1ed1f8ba4223d2bb133fe7481fd68220887527356375bed3111c2489ce3010cf09320a7883f6528bec54d4cae62d56361a4c5516c53dca151799f48f77e774cc78f66c7b8ffe981b48357cf0328d5db8b8a4a99ea991580e08800cd15b353d09341efdb74c1d018649f2812eecffcfcd2c6bf2b6675eefc62f87c4f8d6cf34322f7de4c4e8a77f9980756e6f819472c753ee002d4706600d92c6"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10}}, 0xa48}}, 0x0) r8 = epoll_create1(0x0) r9 = epoll_create(0xf253e97) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000280)) kernel console output (not intermixed with test programs): he newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 241.535220][T10338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.605912][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.613775][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.714396][T10561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1270'. [ 241.719413][T10368] veth0_macvtap: entered promiscuous mode [ 241.742612][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.752653][T10368] veth1_macvtap: entered promiscuous mode [ 241.761443][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.784150][T10563] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1271'. [ 241.831031][T10368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.857409][T10368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.867534][T10368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.878687][T10368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.912437][T10368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.960861][T10368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.974848][T10368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.986623][T10368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.999973][T10368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.038167][T10368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.049278][T10368] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.062002][T10368] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.071797][T10368] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.080750][T10368] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.292052][T10368] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 242.304158][T10368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.371625][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.395127][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.457763][T10584] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 242.503609][T10587] erspan0: left allmulticast mode [ 242.522292][T10587] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1278'. [ 242.596197][T10587] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 242.629388][T10590] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1279'. [ 242.639907][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.649477][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.710678][T10587] ªªªªª» speed is unknown, defaulting to 1000 [ 243.125733][T10597] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1281'. [ 243.139228][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.151536][T10597] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1281'. [ 243.304473][T10593] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 243.460099][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.560001][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.687306][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.884482][ T12] bridge_slave_1: left allmulticast mode [ 243.894047][ T12] bridge_slave_1: left promiscuous mode [ 243.900394][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.911432][ T12] bridge_slave_0: left allmulticast mode [ 243.918325][ T12] bridge_slave_0: left promiscuous mode [ 243.924217][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.166771][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 244.182788][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 244.199388][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 244.208520][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 244.218579][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 244.320027][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.331597][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.342191][ T12] bond0 (unregistering): Released all slaves [ 244.384811][T10612] ªªªªª» speed is unknown, defaulting to 1000 [ 244.603622][T10612] chnl_net:caif_netlink_parms(): no params data found [ 244.763970][ T12] hsr_slave_0: left promiscuous mode [ 244.783800][ T12] hsr_slave_1: left promiscuous mode [ 244.793242][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.812530][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.831159][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.859380][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.922351][ T12] veth1_macvtap: left promiscuous mode [ 244.930305][ T12] veth0_macvtap: left promiscuous mode [ 244.939997][ T12] veth1_vlan: left promiscuous mode [ 244.947581][ T12] veth0_vlan: left promiscuous mode [ 245.074331][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 245.084349][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 245.092378][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 245.100702][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 245.108983][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 245.449470][ T12] team0 (unregistering): Port device team_slave_1 removed [ 245.497664][ T12] team0 (unregistering): Port device team_slave_0 removed [ 246.068757][T10612] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.080029][T10612] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.096654][T10612] bridge_slave_0: entered allmulticast mode [ 246.117505][T10612] bridge_slave_0: entered promiscuous mode [ 246.136610][T10612] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.143952][T10612] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.165485][T10612] bridge_slave_1: entered allmulticast mode [ 246.179297][T10612] bridge_slave_1: entered promiscuous mode [ 246.270472][T10612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.285388][ T55] Bluetooth: hci2: command tx timeout [ 246.296363][T10631] ªªªªª» speed is unknown, defaulting to 1000 [ 246.304916][T10612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.315576][T10651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1291'. [ 246.382799][T10612] team0: Port device team_slave_0 added [ 246.401897][T10612] team0: Port device team_slave_1 added [ 246.502957][T10612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.510477][T10612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.549670][T10612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.670571][T10612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.702384][T10612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.745630][T10612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.820919][T10657] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1293'. [ 246.857434][T10657] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 246.963792][T10612] hsr_slave_0: entered promiscuous mode [ 246.976196][T10612] hsr_slave_1: entered promiscuous mode [ 246.988991][T10612] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.998427][T10612] Cannot create hsr debugfs directory [ 247.011580][T10654] ªªªªª» speed is unknown, defaulting to 1000 [ 247.111724][T10657] ªªªªª» speed is unknown, defaulting to 1000 [ 247.162408][ T55] Bluetooth: hci4: command tx timeout [ 247.247506][T10668] siw: device registration error -23 [ 247.279539][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.399011][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.643315][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.787102][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.863423][T10631] chnl_net:caif_netlink_parms(): no params data found [ 248.217053][T10631] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.224323][T10631] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.251915][T10631] bridge_slave_0: entered allmulticast mode [ 248.260120][T10631] bridge_slave_0: entered promiscuous mode [ 248.261046][T10682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1298'. [ 248.279761][T10631] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.290443][T10631] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.298171][T10631] bridge_slave_1: entered allmulticast mode [ 248.308050][T10631] bridge_slave_1: entered promiscuous mode [ 248.355324][ T55] Bluetooth: hci2: command tx timeout [ 248.390828][T10683] 8021q: VLANs not supported on gre0 [ 248.450407][T10631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.512211][T10631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.532314][ T12] bridge_slave_1: left allmulticast mode [ 248.539434][ T12] bridge_slave_1: left promiscuous mode [ 248.550097][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.564013][ T12] bridge_slave_0: left allmulticast mode [ 248.573193][ T12] bridge_slave_0: left promiscuous mode [ 248.580227][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.958360][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.969974][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.982914][ T12] bond0 (unregistering): Released all slaves [ 249.179171][T10631] team0: Port device team_slave_0 added [ 249.191772][T10631] team0: Port device team_slave_1 added [ 249.236539][ T55] Bluetooth: hci4: command tx timeout [ 249.301243][T10631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.311111][T10631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.340841][T10631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.354756][T10631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.364222][T10703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1302'. [ 249.365164][T10631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.399367][T10631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.471880][T10612] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 249.504675][T10612] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 249.553717][ T12] hsr_slave_0: left promiscuous mode [ 249.560609][ T12] hsr_slave_1: left promiscuous mode [ 249.566792][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.575444][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.584184][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.592592][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.672216][ T12] veth1_macvtap: left promiscuous mode [ 249.681518][ T12] veth0_macvtap: left promiscuous mode [ 249.694079][ T12] veth1_vlan: left promiscuous mode [ 249.707721][ T12] veth0_vlan: left promiscuous mode [ 249.769452][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1304'. [ 250.253046][ T12] team0 (unregistering): Port device team_slave_1 removed [ 250.291098][ T12] team0 (unregistering): Port device team_slave_0 removed [ 250.435149][ T55] Bluetooth: hci2: command tx timeout [ 250.643142][T10612] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 250.796235][T10612] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 250.825754][T10631] hsr_slave_0: entered promiscuous mode [ 250.832542][T10631] hsr_slave_1: entered promiscuous mode [ 250.866205][T10631] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.879278][T10631] Cannot create hsr debugfs directory [ 251.317261][ T55] Bluetooth: hci4: command tx timeout [ 251.352390][T10755] team0 (unregistering): left allmulticast mode [ 251.358837][T10755] team0 (unregistering): left promiscuous mode [ 251.365324][T10755] bridge0: port 1(team0) entered disabled state [ 251.624026][T10612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.682065][T10612] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.700053][ T7673] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.707434][ T7673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.820633][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.827988][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.853321][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1319'. [ 251.951469][T10772] ªªªªª» speed is unknown, defaulting to 1000 [ 252.260366][T10631] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 252.303017][T10631] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 252.360120][T10631] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 252.414204][T10631] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 252.520760][ T55] Bluetooth: hci2: command tx timeout [ 252.696734][T10631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.750839][T10631] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.797424][ T7667] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.804705][ T7667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.818931][T10787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1324'. [ 252.947652][ T7665] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.954926][ T7665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.001579][T10612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.164832][T10612] veth0_vlan: entered promiscuous mode [ 253.209884][T10612] veth1_vlan: entered promiscuous mode [ 253.300063][T10612] veth0_macvtap: entered promiscuous mode [ 253.342318][T10612] veth1_macvtap: entered promiscuous mode [ 253.395197][ T55] Bluetooth: hci4: command tx timeout [ 253.443112][T10612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.469469][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.499330][T10612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.552931][T10612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.592620][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.621697][T10612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.644390][T10612] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.658496][T10612] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.667832][T10612] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.682965][T10612] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.697524][T10810] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1329'. [ 253.707130][T10810] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 253.793065][T10631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.931652][T10612] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 253.942999][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.982948][T10819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1333'. [ 254.009654][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.028421][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.032609][T10631] veth0_vlan: entered promiscuous mode [ 254.100586][T10631] veth1_vlan: entered promiscuous mode [ 254.129155][ T7667] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.137683][ T7667] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.187202][T10825] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1335'. [ 254.188576][ T30] audit: type=1107 audit(1747081701.883:9): pid=10824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 254.244209][T10631] veth0_macvtap: entered promiscuous mode [ 254.380372][T10631] veth1_macvtap: entered promiscuous mode [ 254.440812][T10833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1339'. [ 254.565538][T10631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.600526][T10631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.639581][T10631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.641205][T10841] netlink: 'syz.1.1342': attribute type 39 has an invalid length. [ 254.659114][T10631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.686891][T10631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.704018][T10631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.718793][T10631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.729670][T10631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.740785][T10631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.752542][T10631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.810650][T10844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1342'. [ 254.829905][T10631] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.846469][T10631] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.858898][T10631] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.868302][T10631] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.083029][ T7665] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.213626][ T7665] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.244135][T10631] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 255.254583][T10631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.279942][ T7667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.288027][ T7667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.330453][ T7673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.339869][ T7673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.442166][ T7665] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.640173][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.680161][ T7665] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.790554][ T7665] bridge_slave_1: left allmulticast mode [ 255.797785][ T7665] bridge_slave_1: left promiscuous mode [ 255.803532][ T7665] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.815416][ T7665] bridge_slave_0: left allmulticast mode [ 255.821166][ T7665] bridge_slave_0: left promiscuous mode [ 255.827627][ T7665] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.222024][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1345'. [ 256.327548][ T7665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.339475][ T7665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.353234][ T7665] bond0 (unregistering): Released all slaves [ 256.510780][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 256.520104][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 256.528467][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 256.540130][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 256.548910][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 256.612500][T10859] ªªªªª» speed is unknown, defaulting to 1000 [ 256.678908][ T7665] hsr_slave_0: left promiscuous mode [ 256.684797][ T7665] hsr_slave_1: left promiscuous mode [ 256.693537][ T7665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.701294][ T7665] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.709652][ T7665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.717354][ T7665] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.739226][ T7665] veth1_macvtap: left promiscuous mode [ 256.744757][ T7665] veth0_macvtap: left promiscuous mode [ 256.750529][ T7665] veth1_vlan: left promiscuous mode [ 256.756284][ T7665] veth0_vlan: left promiscuous mode [ 257.142853][ T7665] team0 (unregistering): Port device team_slave_1 removed [ 257.177911][ T7665] team0 (unregistering): Port device team_slave_0 removed [ 257.471880][ T30] audit: type=1107 audit(1747081705.173:10): pid=10864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 257.528345][T10873] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1349'. [ 257.878364][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 257.886828][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 257.894660][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 257.916717][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 257.925800][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 258.595635][ T5847] Bluetooth: hci2: command tx timeout [ 259.955294][ T5847] Bluetooth: hci4: command tx timeout [ 260.636301][T10876] ªªªªª» speed is unknown, defaulting to 1000 [ 260.677130][ T5847] Bluetooth: hci2: command tx timeout [ 260.769594][T10859] chnl_net:caif_netlink_parms(): no params data found [ 260.912022][T10896] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 261.118210][T10859] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.129957][T10859] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.147838][T10859] bridge_slave_0: entered allmulticast mode [ 261.167521][T10859] bridge_slave_0: entered promiscuous mode [ 261.171070][ T30] audit: type=1107 audit(1747081708.863:11): pid=10908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 261.205472][T10859] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.205806][T10911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1362'. [ 261.321758][T10859] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.333319][T10859] bridge_slave_1: entered allmulticast mode [ 261.342214][T10859] bridge_slave_1: entered promiscuous mode [ 261.455362][T10859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.494343][T10859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.590709][T10876] chnl_net:caif_netlink_parms(): no params data found [ 261.599572][T10927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1367'. [ 261.637684][ T7665] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.670831][T10859] team0: Port device team_slave_0 added [ 261.694427][T10859] team0: Port device team_slave_1 added [ 261.737387][ T7665] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.755799][T10932] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1368'. [ 261.766657][T10932] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 261.826706][ T7665] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.989949][ T7665] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.010930][T10859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.035660][ T5847] Bluetooth: hci4: command tx timeout [ 262.042206][T10859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.070624][T10859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.172008][T10948] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1371'. [ 262.192931][T10859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.200806][T10859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.227795][T10859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.248370][T10939] ªªªªª» speed is unknown, defaulting to 1000 [ 262.755135][ T5847] Bluetooth: hci2: command tx timeout [ 262.763685][T10876] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.778559][T10876] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.801524][T10876] bridge_slave_0: entered allmulticast mode [ 262.815941][T10876] bridge_slave_0: entered promiscuous mode [ 262.824680][T10876] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.839548][T10876] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.850458][T10876] bridge_slave_1: entered allmulticast mode [ 262.861420][T10876] bridge_slave_1: entered promiscuous mode [ 262.892688][T10859] hsr_slave_0: entered promiscuous mode [ 262.902030][T10859] hsr_slave_1: entered promiscuous mode [ 262.912451][T10859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.925007][T10859] Cannot create hsr debugfs directory [ 262.971582][T10965] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1374'. [ 262.981051][T10965] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 263.007444][ T7665] bridge_slave_1: left allmulticast mode [ 263.013301][ T7665] bridge_slave_1: left promiscuous mode [ 263.019637][ T7665] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.030303][ T7665] bridge_slave_0: left allmulticast mode [ 263.036353][ T7665] bridge_slave_0: left promiscuous mode [ 263.042244][ T7665] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.452071][T10968] siw: device registration error -23 [ 263.480551][ T7665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.499359][ T7665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.512322][ T7665] bond0 (unregistering): Released all slaves [ 263.550058][T10876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.647758][T10876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.796765][T10972] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1375'. [ 263.866428][T10967] ªªªªª» speed is unknown, defaulting to 1000 [ 263.888396][T10876] team0: Port device team_slave_0 added [ 263.909607][T10876] team0: Port device team_slave_1 added [ 264.074738][T10876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.096659][T10876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.122868][ T5847] Bluetooth: hci4: command tx timeout [ 264.133544][T10876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.147352][T10876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.154330][T10876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.180934][T10876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.215352][ T7665] hsr_slave_0: left promiscuous mode [ 264.223675][ T7665] hsr_slave_1: left promiscuous mode [ 264.230140][ T7665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.237942][ T7665] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.252204][ T7665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.261409][ T7665] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.288517][ T7665] veth1_macvtap: left promiscuous mode [ 264.294198][ T7665] veth0_macvtap: left promiscuous mode [ 264.300216][ T7665] veth1_vlan: left promiscuous mode [ 264.309920][ T7665] veth0_vlan: left promiscuous mode [ 264.711821][ T7665] team0 (unregistering): Port device team_slave_1 removed [ 264.750242][ T7665] team0 (unregistering): Port device team_slave_0 removed [ 264.835201][ T5847] Bluetooth: hci2: command tx timeout [ 265.435352][T10876] hsr_slave_0: entered promiscuous mode [ 265.443866][T10876] hsr_slave_1: entered promiscuous mode [ 265.456259][T10876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.471577][T10876] Cannot create hsr debugfs directory [ 265.622734][T10988] ªªªªª» speed is unknown, defaulting to 1000 [ 265.988320][T10995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1383'. [ 265.998357][T10859] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 266.012418][T10859] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 266.080798][T10859] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 266.146769][T10859] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 266.189359][T11001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1385'. [ 266.199636][ T5847] Bluetooth: hci4: command tx timeout [ 266.251326][T11001] vlan3: entered allmulticast mode [ 266.265027][T11001] batadv0: entered allmulticast mode [ 266.555823][T10859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.683980][T10876] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 266.715546][T11015] sctp: [Deprecated]: syz.0.1391 (pid 11015) Use of int in max_burst socket option. [ 266.715546][T11015] Use struct sctp_assoc_value instead [ 266.733797][T11018] sctp: [Deprecated]: syz.0.1391 (pid 11018) Use of int in max_burst socket option. [ 266.733797][T11018] Use struct sctp_assoc_value instead [ 266.740589][T10876] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 266.789053][T10859] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.797992][T10876] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 266.836443][T10876] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 266.856587][ T7673] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.863800][ T7673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.887928][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.895263][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.168444][T11033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1397'. [ 267.172161][T10876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.222930][T10876] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.258750][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.266076][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.298142][ T7673] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.305487][ T7673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.617439][T10859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.755696][T11050] xt_hashlimit: size too large, truncated to 1048576 [ 267.766190][T10859] veth0_vlan: entered promiscuous mode [ 267.793045][T10859] veth1_vlan: entered promiscuous mode [ 267.898250][T10859] veth0_macvtap: entered promiscuous mode [ 267.924575][T10876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.937565][T10859] veth1_macvtap: entered promiscuous mode [ 267.989187][T10859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.003046][T10859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.023320][T10859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.068840][T10859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.090977][T10859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.104875][T10859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.139843][T10859] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.155263][T10859] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.166705][T10859] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.182305][T10859] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.275644][T10876] veth0_vlan: entered promiscuous mode [ 268.328798][T10876] veth1_vlan: entered promiscuous mode [ 268.417892][T10859] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 268.445019][T10859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.487313][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.513143][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.589535][T11077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1407'. [ 268.593689][ T3512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.614424][T10876] veth0_macvtap: entered promiscuous mode [ 268.622400][ T3512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.631108][T10876] veth1_macvtap: entered promiscuous mode [ 268.663282][T11078] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 268.672508][T11078] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 268.716757][T10876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.737139][T10876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.752109][T10876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.770411][T10876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.782708][T10876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.799600][T11077] batman_adv: batadv0: Interface deactivated: wlan0 [ 268.808044][T11077] batman_adv: batadv0: Removing interface: wlan0 [ 268.821715][T10876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.839861][T10876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.852912][T10876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.868851][T10876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.881030][T10876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.947531][T11083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1409'. [ 268.984071][T11085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1410'. [ 268.997880][T10876] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.008624][T10876] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.018162][T10876] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.027486][T10876] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.191278][ T3512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.210713][T11088] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1411'. [ 269.239145][ T3512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.239683][ T30] audit: type=1107 audit(1747081716.903:12): pid=11087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 269.404795][ T7673] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.631473][ T7673] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.689063][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.698331][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.753880][ T7673] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.200296][ T7673] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.352103][ T7673] bridge_slave_1: left allmulticast mode [ 270.359438][ T7673] bridge_slave_1: left promiscuous mode [ 270.365407][ T7673] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.374590][ T7673] bridge_slave_0: left allmulticast mode [ 270.380776][ T7673] bridge_slave_0: left promiscuous mode [ 270.386559][ T7673] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.576775][T11100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1414'. [ 270.605734][T11100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1414'. [ 270.650847][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1414'. [ 270.679539][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1414'. [ 270.946952][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 270.973383][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 270.981278][ T7673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.982053][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 271.006320][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 271.009006][ T7673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.015548][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 271.047635][ T7673] bond0 (unregistering): Released all slaves [ 271.180742][T11104] ªªªªª» speed is unknown, defaulting to 1000 [ 271.394415][ T7673] hsr_slave_0: left promiscuous mode [ 271.401211][ T7673] hsr_slave_1: left promiscuous mode [ 271.407432][ T7673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.414845][ T7673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.422752][ T7673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.432342][ T7673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.454306][ T7673] veth1_macvtap: left promiscuous mode [ 271.459962][ T7673] veth0_macvtap: left promiscuous mode [ 271.465697][ T7673] veth1_vlan: left promiscuous mode [ 271.471044][ T7673] veth0_vlan: left promiscuous mode [ 271.881565][ T7673] team0 (unregistering): Port device team_slave_1 removed [ 271.928582][ T7673] team0 (unregistering): Port device team_slave_0 removed [ 272.441321][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 272.454220][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 272.462702][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 272.471920][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 272.480887][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 272.771288][T11125] ªªªªª» speed is unknown, defaulting to 1000 [ 272.797888][T11129] netlink: 'syz.0.1419': attribute type 1 has an invalid length. [ 272.887300][T11104] chnl_net:caif_netlink_parms(): no params data found [ 273.075294][ T5847] Bluetooth: hci2: command tx timeout [ 273.190132][T11104] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.203718][T11104] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.224634][T11104] bridge_slave_0: entered allmulticast mode [ 273.231337][T11143] netlink: 'syz.4.1423': attribute type 1 has an invalid length. [ 273.237845][T11104] bridge_slave_0: entered promiscuous mode [ 273.326024][T11143] 8021q: adding VLAN 0 to HW filter on device bond4 [ 273.342090][T11104] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.359178][T11104] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.366666][T11104] bridge_slave_1: entered allmulticast mode [ 273.374455][T11104] bridge_slave_1: entered promiscuous mode [ 273.434830][ T7673] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.461731][T11146] bond4: (slave ip6gretap1): making interface the new active one [ 273.471023][T11146] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 273.538564][T11143] vlan3: left allmulticast mode [ 273.543662][T11143] batadv0: left allmulticast mode [ 273.580579][T11104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.613472][ T7673] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.673500][T11104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.788785][ T7673] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.873471][T11125] chnl_net:caif_netlink_parms(): no params data found [ 273.927959][T11104] team0: Port device team_slave_0 added [ 273.940780][T11104] team0: Port device team_slave_1 added [ 273.994623][ T7673] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.125972][T11104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.133126][T11104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.161903][T11104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.210427][T11175] ªªªªª» speed is unknown, defaulting to 1000 [ 274.258674][T11104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.275681][T11104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.321173][T11104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.465177][T11125] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.472410][T11125] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.490276][T11125] bridge_slave_0: entered allmulticast mode [ 274.510249][T11125] bridge_slave_0: entered promiscuous mode [ 274.519412][ T5847] Bluetooth: hci4: command tx timeout [ 274.529577][T11125] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.537460][T11125] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.548111][T11125] bridge_slave_1: entered allmulticast mode [ 274.556823][T11125] bridge_slave_1: entered promiscuous mode [ 274.689087][T11104] hsr_slave_0: entered promiscuous mode [ 274.696180][T11104] hsr_slave_1: entered promiscuous mode [ 274.702491][T11104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.710211][T11104] Cannot create hsr debugfs directory [ 274.730159][T11125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.759728][T11125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.826021][ T7673] bridge_slave_1: left allmulticast mode [ 274.831920][ T7673] bridge_slave_1: left promiscuous mode [ 274.838192][ T7673] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.849677][ T7673] bridge_slave_0: left allmulticast mode [ 274.855624][ T7673] bridge_slave_0: left promiscuous mode [ 274.862463][ T7673] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.158613][ T5847] Bluetooth: hci2: command tx timeout [ 275.278958][T11204] siw: device registration error -23 [ 275.287837][ T7673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.301428][ T7673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.313369][ T7673] bond0 (unregistering): Released all slaves [ 275.356151][T11200] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1436'. [ 275.376160][T11200] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 275.624403][T11208] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1437'. [ 275.661784][T11125] team0: Port device team_slave_0 added [ 275.671875][T11125] team0: Port device team_slave_1 added [ 275.774649][T11208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.785933][T11208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.795992][T11208] bond0 (unregistering): Released all slaves [ 275.919344][T11125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.926563][T11125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.952788][T11125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.966784][T11125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.973767][T11125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.002211][T11125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.169499][ T7673] hsr_slave_0: left promiscuous mode [ 276.186518][ T7673] hsr_slave_1: left promiscuous mode [ 276.202699][ T7673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.220493][ T7673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.236751][ T7673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.254416][ T7673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.312139][ T7673] veth1_macvtap: left promiscuous mode [ 276.329267][ T7673] veth0_macvtap: left promiscuous mode [ 276.335988][ T7673] veth1_vlan: left promiscuous mode [ 276.341345][ T7673] veth0_vlan: left promiscuous mode [ 276.492560][T11218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1440'. [ 276.596771][ T5847] Bluetooth: hci4: command tx timeout [ 277.064521][ T7673] team0 (unregistering): Port device team_slave_1 removed [ 277.133302][ T7673] team0 (unregistering): Port device team_slave_0 removed [ 277.237578][ T5847] Bluetooth: hci2: command tx timeout [ 277.532852][T11125] hsr_slave_0: entered promiscuous mode [ 277.539765][T11125] hsr_slave_1: entered promiscuous mode [ 277.551955][T11125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.567909][T11125] Cannot create hsr debugfs directory [ 277.801219][T11230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1443'. [ 277.814667][T11232] netlink: 'syz.0.1444': attribute type 2 has an invalid length. [ 277.846542][T11232] lave_0: entered promiscuous mode [ 278.109338][T11240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1445'. [ 278.270132][T11104] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 278.332800][T11104] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 278.346697][T11104] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 278.377809][T11104] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 278.554807][T11104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.609817][T11104] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.651886][ T2932] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.659048][ T2932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.674697][T11125] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 278.681609][ T5847] Bluetooth: hci4: command tx timeout [ 278.693011][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.700191][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.710484][T11125] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 278.722237][T11125] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 278.734242][T11125] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 278.932953][T11249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1448'. [ 279.004775][T11125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.012572][T11247] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1448'. [ 279.063951][T11125] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.118155][ T2932] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.125378][ T2932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.204635][T11253] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1449'. [ 279.234718][T11253] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 279.280910][ T2932] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.288169][ T2932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.315160][ T5847] Bluetooth: hci2: command tx timeout [ 279.448063][T11265] ªªªªª» speed is unknown, defaulting to 1000 [ 279.496889][T11269] FAULT_INJECTION: forcing a failure. [ 279.496889][T11269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.510255][T11269] CPU: 1 UID: 0 PID: 11269 Comm: syz.1.1452 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 279.510297][T11269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 279.510329][T11269] Call Trace: [ 279.510338][T11269] [ 279.510347][T11269] dump_stack_lvl+0x189/0x250 [ 279.510388][T11269] ? __lock_acquire+0xaac/0xd20 [ 279.510419][T11269] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.510447][T11269] ? __pfx__printk+0x10/0x10 [ 279.510467][T11269] ? __might_fault+0xb0/0x130 [ 279.510504][T11269] should_fail_ex+0x414/0x560 [ 279.510529][T11269] _copy_from_iter+0x1db/0x15a0 [ 279.510560][T11269] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 279.510582][T11269] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 279.510609][T11269] ? __pfx__copy_from_iter+0x10/0x10 [ 279.510635][T11269] ? __build_skb_around+0x257/0x3e0 [ 279.510664][T11269] ? netlink_sendmsg+0x642/0xb30 [ 279.510686][T11269] ? skb_put+0x11b/0x210 [ 279.510715][T11269] netlink_sendmsg+0x6b2/0xb30 [ 279.510749][T11269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.510777][T11269] ? aa_sock_msg_perm+0x94/0x160 [ 279.510800][T11269] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 279.510822][T11269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.510847][T11269] __sock_sendmsg+0x219/0x270 [ 279.510871][T11269] ____sys_sendmsg+0x505/0x830 [ 279.510903][T11269] ? __pfx_____sys_sendmsg+0x10/0x10 [ 279.510940][T11269] ? import_iovec+0x74/0xa0 [ 279.510971][T11269] ___sys_sendmsg+0x21f/0x2a0 [ 279.511000][T11269] ? __pfx____sys_sendmsg+0x10/0x10 [ 279.511064][T11269] ? __fget_files+0x2a/0x420 [ 279.511089][T11269] ? __fget_files+0x3a0/0x420 [ 279.511125][T11269] __x64_sys_sendmsg+0x19b/0x260 [ 279.511156][T11269] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 279.511201][T11269] ? do_syscall_64+0xba/0x210 [ 279.511225][T11269] do_syscall_64+0xf6/0x210 [ 279.511245][T11269] ? clear_bhb_loop+0x45/0xa0 [ 279.511269][T11269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.511288][T11269] RIP: 0033:0x7fc9ff58e969 [ 279.511305][T11269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.511322][T11269] RSP: 002b:00007fca00338038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.511342][T11269] RAX: ffffffffffffffda RBX: 00007fc9ff7b6080 RCX: 00007fc9ff58e969 [ 279.511363][T11269] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000003 [ 279.511376][T11269] RBP: 00007fca00338090 R08: 0000000000000000 R09: 0000000000000000 [ 279.511387][T11269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.511398][T11269] R13: 0000000000000001 R14: 00007fc9ff7b6080 R15: 00007ffe8e4d0d58 [ 279.511428][T11269] [ 279.826180][T11125] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 280.072148][T11104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.165507][T11278] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1454'. [ 280.176422][T11278] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 280.216416][T11104] veth0_vlan: entered promiscuous mode [ 280.434817][T11104] veth1_vlan: entered promiscuous mode [ 280.541450][T11125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.633518][T11104] veth0_macvtap: entered promiscuous mode [ 280.680156][T11104] veth1_macvtap: entered promiscuous mode [ 280.775172][ T5847] Bluetooth: hci4: command tx timeout [ 280.843579][T11104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.896183][T11104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.908540][T11104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.948164][T11104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.980511][T11104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.002062][T11104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.011630][T11125] veth0_vlan: entered promiscuous mode [ 281.036841][T11104] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.045782][T11104] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.054508][T11104] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.063916][T11104] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.096545][T11125] veth1_vlan: entered promiscuous mode [ 281.180732][T11306] netlink: 10196 bytes leftover after parsing attributes in process `syz.4.1461'. [ 281.290413][T11125] veth0_macvtap: entered promiscuous mode [ 281.312362][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.323861][T11308] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1461'. [ 281.346493][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.372008][T11306] netlink: 'syz.4.1461': attribute type 1 has an invalid length. [ 281.410226][T11125] veth1_macvtap: entered promiscuous mode [ 281.455874][T11306] 8021q: adding VLAN 0 to HW filter on device bond5 [ 281.464821][ T3430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.476248][ T3430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.560531][T11125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.583666][T11125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.593803][T11125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.604606][T11125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.616563][T11125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.657893][T11125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.684752][T11125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.695114][T11125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.705907][T11125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.726256][T11125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.740519][T11322] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1466'. [ 281.753657][T11322] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 281.820394][T11125] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.842650][T11125] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.860837][T11125] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.881854][T11125] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.058797][T11331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1468'. [ 282.092685][ T3430] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.331688][T11327] ªªªªª» speed is unknown, defaulting to 1000 [ 282.366398][T11330] siw: device registration error -23 [ 282.486486][ T3430] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.626524][ T3430] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.718106][ T3430] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.756613][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.764456][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.806554][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.814419][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.090502][ T3430] bridge_slave_1: left allmulticast mode [ 283.096302][ T3430] bridge_slave_1: left promiscuous mode [ 283.102113][ T3430] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.112384][ T3430] bridge_slave_0: left allmulticast mode [ 283.118253][ T3430] bridge_slave_0: left promiscuous mode [ 283.123970][ T3430] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.440378][ T3430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.459461][ T3430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.477374][ T3430] bond0 (unregistering): Released all slaves [ 283.687259][T11338] pim6reg0: tun_chr_ioctl cmd 35111 [ 283.707252][T11338] macsec1: entered promiscuous mode [ 283.712699][T11338] macsec1: entered allmulticast mode [ 283.723064][T11338] veth1_macvtap: entered allmulticast mode [ 283.731164][T11338] veth1_macvtap: left allmulticast mode [ 283.869356][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 283.879599][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 283.888223][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 283.914866][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 283.922879][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 283.948920][ T3430] hsr_slave_0: left promiscuous mode [ 283.961738][ T3430] hsr_slave_1: left promiscuous mode [ 283.968309][ T3430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.976629][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.984596][ T3430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.992605][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.014206][ T3430] veth1_macvtap: left promiscuous mode [ 284.020065][ T3430] veth0_macvtap: left promiscuous mode [ 284.025790][ T3430] veth1_vlan: left promiscuous mode [ 284.031128][ T3430] veth0_vlan: left promiscuous mode [ 284.412870][ T3430] team0 (unregistering): Port device team_slave_1 removed [ 284.449023][ T3430] team0 (unregistering): Port device team_slave_0 removed [ 284.788330][T11339] ªªªªª» speed is unknown, defaulting to 1000 [ 285.400278][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 285.410288][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 285.419273][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 285.429879][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 285.449039][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 285.499641][T11363] ªªªªª» speed is unknown, defaulting to 1000 [ 285.629215][ T3430] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.677394][T11339] chnl_net:caif_netlink_parms(): no params data found [ 285.739094][ T3430] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.787132][T11371] ªªªªª» speed is unknown, defaulting to 1000 [ 285.872396][ T3430] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.955463][ T5847] Bluetooth: hci2: command tx timeout [ 285.972253][T11339] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.979665][T11339] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.987335][T11339] bridge_slave_0: entered allmulticast mode [ 285.995185][T11339] bridge_slave_0: entered promiscuous mode [ 286.031863][ T3430] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.056448][T11339] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.063737][T11339] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.071426][T11339] bridge_slave_1: entered allmulticast mode [ 286.080256][T11339] bridge_slave_1: entered promiscuous mode [ 286.153456][T11339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.229726][T11339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.333494][T11339] team0: Port device team_slave_0 added [ 286.367924][T11339] team0: Port device team_slave_1 added [ 286.458379][T11339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.469188][T11339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.495556][T11339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.564104][T11363] chnl_net:caif_netlink_parms(): no params data found [ 286.576541][T11339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.583514][T11339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.585278][ T9] syzkaller0: tun_net_xmit 76 [ 286.624907][T11339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.646891][T11397] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 286.652835][T11397] syzkaller0: Linktype set failed because interface is up [ 286.678845][ T3430] bridge_slave_1: left allmulticast mode [ 286.684756][ T3430] bridge_slave_1: left promiscuous mode [ 286.690804][ T3430] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.705299][ T3430] bridge_slave_0: left allmulticast mode [ 286.711009][ T3430] bridge_slave_0: left promiscuous mode [ 286.717307][ T3430] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.986572][ T5834] syzkaller0: tun_net_xmit 76 [ 287.000594][ T3430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.012557][ T3430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.023870][ T3430] bond0 (unregistering): Released all slaves [ 287.273010][T11402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1480'. [ 287.486235][ T5847] Bluetooth: hci4: command tx timeout [ 288.045097][ T5847] Bluetooth: hci2: command tx timeout [ 288.352502][T11339] hsr_slave_0: entered promiscuous mode [ 288.359536][T11339] hsr_slave_1: entered promiscuous mode [ 288.377795][T11339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.395353][T11339] Cannot create hsr debugfs directory [ 288.620422][T11363] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.634545][T11363] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.645130][T11363] bridge_slave_0: entered allmulticast mode [ 288.652991][T11363] bridge_slave_0: entered promiscuous mode [ 288.665883][T11363] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.673325][T11363] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.681046][T11363] bridge_slave_1: entered allmulticast mode [ 288.689511][T11363] bridge_slave_1: entered promiscuous mode [ 288.753054][T11415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1485'. [ 288.827280][ T3430] hsr_slave_0: left promiscuous mode [ 288.835336][ T3430] hsr_slave_1: left promiscuous mode [ 288.841174][ T3430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.870332][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.879491][ T3430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.891208][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.912779][ T3430] veth1_macvtap: left promiscuous mode [ 288.918787][ T3430] veth0_macvtap: left promiscuous mode [ 288.924429][ T3430] veth1_vlan: left promiscuous mode [ 288.930302][ T3430] veth0_vlan: left promiscuous mode [ 289.463659][ T3430] team0 (unregistering): Port device team_slave_1 removed [ 289.525831][ T3430] team0 (unregistering): Port device team_slave_0 removed [ 289.567545][ T5847] Bluetooth: hci4: command tx timeout [ 289.621088][T11434] netlink: 'syz.4.1488': attribute type 7 has an invalid length. [ 289.948282][T11415] gretap0: left allmulticast mode [ 289.953447][T11415] gretap0: left promiscuous mode [ 289.962341][T11415] bridge0: port 3(gretap0) entered disabled state [ 289.973687][T11415] bridge_slave_1: left allmulticast mode [ 289.980982][T11415] bridge_slave_1: left promiscuous mode [ 289.987186][T11415] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.998039][T11415] bridge_slave_0: left allmulticast mode [ 290.003735][T11415] bridge_slave_0: left promiscuous mode [ 290.010867][T11415] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.115210][ T5847] Bluetooth: hci2: command tx timeout [ 290.150151][T11363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.176716][T11363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.268623][T11363] team0: Port device team_slave_0 added [ 290.292256][T11363] team0: Port device team_slave_1 added [ 290.468730][T11363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.500692][T11363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.513681][T11445] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 290.528348][T11363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.541748][T11447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1491'. [ 290.562344][T11363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.574295][T11363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.600954][T11363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.629410][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1491'. [ 290.641814][T11445] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1491'. [ 290.750978][T11449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1492'. [ 290.768500][T11363] hsr_slave_0: entered promiscuous mode [ 290.777066][T11363] hsr_slave_1: entered promiscuous mode [ 290.783591][T11363] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.792757][T11363] Cannot create hsr debugfs directory [ 291.148568][T11339] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 291.169343][T11339] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 291.229803][T11466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1497'. [ 291.263065][T11339] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 291.294319][T11468] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1498'. [ 291.302070][T11470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1497'. [ 291.326052][T11339] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 291.333299][T11471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1499'. [ 291.505944][T11339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.623192][T11339] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.645686][ T5847] Bluetooth: hci4: command tx timeout [ 291.685392][T11363] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 291.706349][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.713578][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.756229][T11363] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 291.774064][ T7665] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.781301][ T7665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.803741][T11363] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 291.832179][T11363] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 292.173652][T11363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.195479][ T5847] Bluetooth: hci2: command tx timeout [ 292.218298][T11363] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.294323][ T7665] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.301595][ T7665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.365895][T11489] __nla_validate_parse: 1 callbacks suppressed [ 292.365915][T11489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1504'. [ 292.384709][ T7665] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.391992][ T7665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.455204][T11489] tun0: tun_chr_ioctl cmd 1074025677 [ 292.462643][T11489] tun0: linktype set to 804 [ 292.515003][T11482] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 292.522431][T11482] tipc: Enabled bearer , priority 10 [ 292.568997][T11339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.645203][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 292.653558][T11494] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1505'. [ 292.662732][T11494] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 292.735142][T11339] veth0_vlan: entered promiscuous mode [ 292.759025][T11496] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1506'. [ 292.791978][T11339] veth1_vlan: entered promiscuous mode [ 292.870770][T11500] ªªªªª» speed is unknown, defaulting to 1000 [ 292.925035][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 293.079313][T11339] veth0_macvtap: entered promiscuous mode [ 293.091886][T11339] veth1_macvtap: entered promiscuous mode [ 293.117304][T11339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.128003][T11339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.145937][T11339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.213243][T11339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.247350][T11339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.281074][T11339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.311305][T11339] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.332450][T11339] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.346820][T11339] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.359413][T11339] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.372333][T11510] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 293.403520][T11510] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 293.418280][T11510] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 293.426755][T11510] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 293.443651][T11510] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 293.461388][T11363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.716638][ T5847] Bluetooth: hci4: command tx timeout [ 293.746022][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.753966][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.834641][T11519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1511'. [ 293.894233][ T2932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.910906][ T2932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.964883][T11363] veth0_vlan: entered promiscuous mode [ 294.056066][T11363] veth1_vlan: entered promiscuous mode [ 294.224394][T11363] veth0_macvtap: entered promiscuous mode [ 294.247565][T11363] veth1_macvtap: entered promiscuous mode [ 294.270260][T11363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.281850][T11363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.294632][T11363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.313165][T11363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.336945][T11363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.371410][T11363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.383697][T11363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.399472][T11363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.411204][T11363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.423459][T11535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1512'. [ 294.434773][T11363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.443036][T11535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1512'. [ 294.452956][T11537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1514'. [ 294.464469][T11535] netlink: 'syz.0.1512': attribute type 15 has an invalid length. [ 294.474030][T11532] pim6reg1: entered allmulticast mode [ 294.511613][T11363] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.523757][T11363] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.533989][T11363] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.543201][T11363] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.763855][ T3512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.780659][ T3512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.801057][T11547] netlink: 'syz.4.1518': attribute type 1 has an invalid length. [ 294.883238][T11551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1517'. [ 295.028434][ T3512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.056020][T11554] xt_CT: You must specify a L4 protocol and not use inversions on it [ 295.082163][ T3512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.173281][ T2932] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.216389][T11556] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1520'. [ 295.348283][ T2932] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.521549][ T2932] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.543896][T11563] ªªªªª» speed is unknown, defaulting to 1000 [ 295.696924][ T2932] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.073228][ T2932] bridge_slave_1: left allmulticast mode [ 296.086221][ T2932] bridge_slave_1: left promiscuous mode [ 296.092053][ T2932] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.112416][ T2932] bridge_slave_0: left allmulticast mode [ 296.125200][ T2932] bridge_slave_0: left promiscuous mode [ 296.131193][ T2932] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.223357][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 296.233513][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 296.251531][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 296.270666][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 296.289545][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 296.530971][ T2932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.542130][ T2932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.555129][ T2932] bond0 (unregistering): Released all slaves [ 296.599965][T11570] ªªªªª» speed is unknown, defaulting to 1000 [ 296.827693][T11570] chnl_net:caif_netlink_parms(): no params data found [ 296.874147][ T2932] hsr_slave_0: left promiscuous mode [ 296.881988][ T2932] hsr_slave_1: left promiscuous mode [ 296.889501][ T2932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.897135][ T2932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.905216][ T2932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.912655][ T2932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.934810][ T2932] veth1_macvtap: left promiscuous mode [ 296.940578][ T2932] veth0_macvtap: left promiscuous mode [ 296.946393][ T2932] veth1_vlan: left promiscuous mode [ 296.952616][ T2932] veth0_vlan: left promiscuous mode [ 297.308643][T11581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1523'. [ 297.502254][T11589] net_ratelimit: 30 callbacks suppressed [ 297.502274][T11589] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 297.526295][T11590] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 297.561963][T11589] netlink: 'syz.0.1528': attribute type 1 has an invalid length. [ 297.580460][T11589] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1528'. [ 297.601351][T11594] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1527'. [ 297.770234][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 297.782231][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 297.790569][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 297.791214][ T2932] team0 (unregistering): Port device team_slave_1 removed [ 297.815483][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 297.833162][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 297.871413][ T2932] team0 (unregistering): Port device team_slave_0 removed [ 298.365077][ T5847] Bluetooth: hci2: command tx timeout [ 298.427852][T11599] ªªªªª» speed is unknown, defaulting to 1000 [ 298.443823][T11570] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.455235][T11570] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.462524][T11570] bridge_slave_0: entered allmulticast mode [ 298.473149][T11570] bridge_slave_0: entered promiscuous mode [ 298.482088][T11570] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.490160][T11570] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.498134][T11570] bridge_slave_1: entered allmulticast mode [ 298.506761][T11570] bridge_slave_1: entered promiscuous mode [ 298.520551][T11605] ªªªªª» speed is unknown, defaulting to 1000 [ 298.641391][T11570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.668362][T11570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.819552][T11570] team0: Port device team_slave_0 added [ 298.847049][T11570] team0: Port device team_slave_1 added [ 298.921380][T11604] delete_channel: no stack [ 298.980441][T11570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.994426][T11570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.037285][T11570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.056106][T11570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.063106][T11570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.094809][T11570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.130335][T11627] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1533'. [ 299.224663][T11623] ªªªªª» speed is unknown, defaulting to 1000 [ 299.290872][T11633] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1535'. [ 299.300905][T11633] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 299.348539][T11570] hsr_slave_0: entered promiscuous mode [ 299.355417][T11570] hsr_slave_1: entered promiscuous mode [ 299.361826][T11570] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.369596][T11570] Cannot create hsr debugfs directory [ 299.602108][ T2932] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.698908][T11599] chnl_net:caif_netlink_parms(): no params data found [ 299.718973][T11638] ªªªªª» speed is unknown, defaulting to 1000 [ 299.826922][ T2932] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.875706][ T5847] Bluetooth: hci4: command tx timeout [ 299.960221][ T2932] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.087580][T11645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1537'. [ 300.110635][T11645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1537'. [ 300.131678][T11645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1537'. [ 300.152546][ T2932] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.288005][T11599] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.306980][T11599] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.320831][T11599] bridge_slave_0: entered allmulticast mode [ 300.332014][T11599] bridge_slave_0: entered promiscuous mode [ 300.370248][T11599] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.381453][T11599] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.388939][T11599] bridge_slave_1: entered allmulticast mode [ 300.405253][T11599] bridge_slave_1: entered promiscuous mode [ 300.436693][ T5847] Bluetooth: hci2: command tx timeout [ 300.473649][T11599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.509523][T11599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.593934][ T2932] bridge_slave_1: left allmulticast mode [ 300.605307][ T2932] bridge_slave_1: left promiscuous mode [ 300.611106][ T2932] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.631096][ T2932] bridge_slave_0: left allmulticast mode [ 300.637088][ T2932] bridge_slave_0: left promiscuous mode [ 300.642864][ T2932] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.914744][T11655] sctp: [Deprecated]: syz.1.1539 (pid 11655) Use of int in max_burst socket option. [ 300.914744][T11655] Use struct sctp_assoc_value instead [ 300.932157][T11656] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1540'. [ 300.941241][T11655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1539'. [ 301.219995][ T2932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.232421][ T2932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.243779][ T2932] bond0 (unregistering): Released all slaves [ 301.262214][T11599] team0: Port device team_slave_0 added [ 301.271966][T11599] team0: Port device team_slave_1 added [ 301.355757][T11655] vlan2: entered promiscuous mode [ 301.512071][T11599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.519333][T11599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.545708][T11599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.608006][T11599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.634785][T11599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.670495][T11599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.719064][T11660] ªªªªª» speed is unknown, defaulting to 1000 [ 301.851693][T11674] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1544'. [ 301.920380][T11599] hsr_slave_0: entered promiscuous mode [ 301.927742][T11599] hsr_slave_1: entered promiscuous mode [ 301.937716][T11599] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.947663][T11599] Cannot create hsr debugfs directory [ 301.965382][ T5847] Bluetooth: hci4: command tx timeout [ 301.986297][ T2932] hsr_slave_0: left promiscuous mode [ 301.993590][ T2932] hsr_slave_1: left promiscuous mode [ 302.008995][ T2932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.027986][ T2932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.048314][ T2932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.060260][ T2932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.085862][ T2932] veth1_macvtap: left promiscuous mode [ 302.092124][ T2932] veth0_macvtap: left promiscuous mode [ 302.103101][ T2932] veth1_vlan: left promiscuous mode [ 302.109636][ T2932] veth0_vlan: left promiscuous mode [ 302.515907][ T5847] Bluetooth: hci2: command tx timeout [ 302.659192][ T2932] team0 (unregistering): Port device team_slave_1 removed [ 302.703219][ T2932] team0 (unregistering): Port device team_slave_0 removed [ 303.287322][T11570] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 303.345134][T11570] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 303.363246][T11570] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 303.412977][T11570] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 303.716568][T11570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.829842][T11570] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.880175][T11699] x_tables: duplicate underflow at hook 2 [ 303.908713][ T3430] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.915950][ T3430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.023008][ T7673] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.030186][ T7673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.047744][ T55] Bluetooth: hci4: command tx timeout [ 304.289392][T11599] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 304.300776][T11712] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1556'. [ 304.320254][T11599] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 304.350040][T11599] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 304.370680][T11599] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 304.596303][ T55] Bluetooth: hci2: command tx timeout [ 304.716411][T11599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.770414][T11728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1559'. [ 304.782990][T11599] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.811642][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.819003][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.854377][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.861624][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.942806][T11570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.084563][T11570] veth0_vlan: entered promiscuous mode [ 305.110576][T11570] veth1_vlan: entered promiscuous mode [ 305.189991][T11570] veth0_macvtap: entered promiscuous mode [ 305.220162][T11570] veth1_macvtap: entered promiscuous mode [ 305.279534][T11570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.311222][T11570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.325977][T11570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.369184][T11570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.390656][T11570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.408204][T11570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.431850][T11570] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.442039][T11570] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.459391][T11570] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.471062][T11570] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.504899][T11599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.717193][T11599] veth0_vlan: entered promiscuous mode [ 305.745873][ T2932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.764253][ T2932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.826149][T11599] veth1_vlan: entered promiscuous mode [ 305.860597][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.883020][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.894690][T11755] ªªªªª» speed is unknown, defaulting to 1000 [ 305.996624][T11599] veth0_macvtap: entered promiscuous mode [ 306.027721][T11599] veth1_macvtap: entered promiscuous mode [ 306.112703][T11760] netlink: 'syz.0.1567': attribute type 4 has an invalid length. [ 306.121029][ T55] Bluetooth: hci4: command 0x0419 tx timeout [ 306.134644][T11599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.146225][T11599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.156851][T11599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.168165][T11599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.179549][T11761] netlink: 'syz.0.1567': attribute type 4 has an invalid length. [ 306.181591][T11599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.221168][T11599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.245349][T11599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.256001][T11599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.267837][T11599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.288794][T11599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.322196][T11599] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.341364][T11599] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.361522][T11599] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.380480][T11599] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.459381][T11765] xt_hashlimit: max too large, truncated to 1048576 [ 306.504339][T11765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1569'. [ 306.504344][T11766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1569'. [ 306.637758][T11765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.650996][T11765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.659700][T11775] netlink: 'syz.1.1572': attribute type 21 has an invalid length. [ 306.683428][T11775] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1572'. [ 306.709187][ T7673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.720849][ T7673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.785929][T11777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1572'. [ 306.801856][ T7667] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.813857][ T7667] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.113905][ T3512] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.428347][ T3512] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.685792][ T3512] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.743202][T11793] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20001 [ 307.840746][ T3512] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.979143][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 307.992111][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 308.000670][ T3512] bridge_slave_1: left allmulticast mode [ 308.002568][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 308.010522][ T3512] bridge_slave_1: left promiscuous mode [ 308.014804][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 308.019914][ T3512] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.027100][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 308.043312][ T3512] bridge_slave_0: left allmulticast mode [ 308.049396][ T3512] bridge_slave_0: left promiscuous mode [ 308.056793][ T3512] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.373539][ T3512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.384826][ T3512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.397020][ T3512] bond0 (unregistering): Released all slaves [ 308.430414][T11794] ªªªªª» speed is unknown, defaulting to 1000 [ 308.641791][ T3512] hsr_slave_0: left promiscuous mode [ 308.649493][ T3512] hsr_slave_1: left promiscuous mode [ 308.656521][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.663956][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.674781][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.682997][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.705608][ T3512] veth1_macvtap: left promiscuous mode [ 308.711180][ T3512] veth0_macvtap: left promiscuous mode [ 308.717007][ T3512] veth1_vlan: left promiscuous mode [ 308.722375][ T3512] veth0_vlan: left promiscuous mode [ 309.236443][ T3512] team0 (unregistering): Port device team_slave_1 removed [ 309.318504][ T3512] team0 (unregistering): Port device team_slave_0 removed [ 309.622838][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 309.638028][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 309.653185][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 309.665170][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 309.673342][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 310.115827][ T5847] Bluetooth: hci2: command tx timeout [ 310.159215][T11794] chnl_net:caif_netlink_parms(): no params data found [ 310.261550][T11820] syzkaller1: entered promiscuous mode [ 310.283310][T11820] syzkaller1: entered allmulticast mode [ 310.285667][T11821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1579'. [ 310.333584][T11820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1579'. [ 310.348349][T11820] openvswitch: netlink: nsh attribute has 65520 unknown bytes. [ 310.358009][T11816] ªªªªª» speed is unknown, defaulting to 1000 [ 310.412948][T11820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.433672][T11829] sctp: [Deprecated]: syz.4.1581 (pid 11829) Use of int in max_burst socket option. [ 310.433672][T11829] Use struct sctp_assoc_value instead [ 310.559996][T11794] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.567556][T11794] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.581365][T11794] bridge_slave_0: entered allmulticast mode [ 310.593639][T11794] bridge_slave_0: entered promiscuous mode [ 310.619852][T11794] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.629055][T11794] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.638131][T11794] bridge_slave_1: entered allmulticast mode [ 310.648223][T11794] bridge_slave_1: entered promiscuous mode [ 310.672567][T11833] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1583'. [ 310.697168][T11833] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 310.807703][T11794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.836136][T11833] ªªªªª» speed is unknown, defaulting to 1000 [ 310.972032][T11794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.094072][T11794] team0: Port device team_slave_0 added [ 311.122107][T11794] team0: Port device team_slave_1 added [ 311.239403][ T3512] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.448387][T11851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1586'. [ 311.500997][ T3512] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.554489][T11794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.568960][T11794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.608508][T11794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.719353][ T5847] Bluetooth: hci4: command tx timeout [ 311.735480][ T3512] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.757079][T11865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1587'. [ 311.800455][T11794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.814510][T11794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.882824][T11794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.980505][ T3512] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.160141][T11880] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1589'. [ 312.179971][T11880] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1589'. [ 312.195480][ T5847] Bluetooth: hci2: command tx timeout [ 312.335128][T11878] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1591'. [ 312.344542][T11878] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 312.419112][T11882] lo: left promiscuous mode [ 312.472079][T11882] tunl0: left promiscuous mode [ 312.480232][T11882] gre0: left promiscuous mode [ 312.489529][T11882] ip_vti0: left promiscuous mode [ 312.494810][T11882] ip6_vti0: left promiscuous mode [ 312.500255][T11882] sit0: left promiscuous mode [ 312.509092][T11882] ip6tnl0: left promiscuous mode [ 312.514379][T11882] ip6gre0: left promiscuous mode [ 312.520342][T11882] ip6gretap0: left promiscuous mode [ 312.530131][T11882] dummy0: left promiscuous mode [ 312.535526][T11882] nlmon0: left promiscuous mode [ 312.540774][T11882] caif0: left promiscuous mode [ 312.551154][T11882] batadv0: left promiscuous mode [ 312.556598][T11882] vxcan0: left promiscuous mode [ 312.561869][T11882] vxcan1: left promiscuous mode [ 312.571204][T11882] wg1: left promiscuous mode [ 312.581446][T11882] wg2: left promiscuous mode [ 312.600886][T11882] veth0_to_bridge: left promiscuous mode [ 312.622655][T11882] bridge_slave_0: left promiscuous mode [ 312.643022][T11882] veth1_to_bridge: left promiscuous mode [ 312.655315][T11882] bridge_slave_1: left promiscuous mode [ 312.674413][T11882] veth0_to_bond: left promiscuous mode [ 312.700989][T11882] bond_slave_0: left promiscuous mode [ 312.716408][T11882] veth1_to_bond: left promiscuous mode [ 312.725768][T11882] bond_slave_1: left promiscuous mode [ 312.732349][T11882] veth0_to_team: left promiscuous mode [ 312.739284][T11882] team_slave_0: left promiscuous mode [ 312.745929][T11882] veth1_to_team: left promiscuous mode [ 312.753615][T11882] team_slave_1: left promiscuous mode [ 312.760112][T11882] veth0_to_batadv: left promiscuous mode [ 312.766669][T11882] batadv_slave_0: left promiscuous mode [ 312.772674][T11882] veth1_to_batadv: left promiscuous mode [ 312.779178][T11882] batadv_slave_1: left promiscuous mode [ 312.785409][T11882] xfrm0: left promiscuous mode [ 312.790690][T11882] veth0_to_hsr: left promiscuous mode [ 312.797131][T11882] veth1_to_hsr: left promiscuous mode [ 312.803410][T11882] hsr0: left promiscuous mode [ 312.808867][T11882] veth1_virt_wifi: left promiscuous mode [ 312.815412][T11882] veth0_virt_wifi: left promiscuous mode [ 312.823184][T11882] vlan0: left promiscuous mode [ 312.829316][T11882] vlan1: left promiscuous mode [ 312.835844][T11882] macvlan1: left promiscuous mode [ 312.841512][T11882] ipvlan0: left promiscuous mode [ 312.848085][T11882] ipvlan1: left promiscuous mode [ 312.855627][T11882] macvtap0: left promiscuous mode [ 312.861483][T11882] geneve0: left promiscuous mode [ 312.867130][T11882] geneve1: left promiscuous mode [ 312.872543][T11882] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 312.882142][T11882] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 312.889955][T11882] netdevsim netdevsim1 netdevsim2: left promiscuous mode [ 312.897768][T11882] netdevsim netdevsim1 netdevsim3: left promiscuous mode [ 312.927564][T11882] macvlan2: left promiscuous mode [ 312.933187][T11882] ip6gretap1: left promiscuous mode [ 312.939167][T11882] bond1: left promiscuous mode [ 312.944589][T11882] bridge1: left promiscuous mode [ 312.951794][T11882] veth2: left promiscuous mode [ 312.958659][T11882] veth3: left promiscuous mode [ 312.964246][T11882] bond2: left promiscuous mode [ 312.969883][T11882] bond3: left promiscuous mode [ 312.976418][T11882] geneve2: left promiscuous mode [ 312.981394][T11882] geneve2: left allmulticast mode [ 312.989575][T11882] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.999117][T11882] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.008112][T11882] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.017065][T11882] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.052964][T11882] macvtap1: left promiscuous mode [ 313.060319][T11882] macvtap1: left allmulticast mode [ 313.139950][T11886] ªªªªª» speed is unknown, defaulting to 1000 [ 313.158179][T11794] hsr_slave_0: entered promiscuous mode [ 313.196298][T11794] hsr_slave_1: entered promiscuous mode [ 313.215946][T11794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.226811][T11794] Cannot create hsr debugfs directory [ 313.342721][T11816] chnl_net:caif_netlink_parms(): no params data found [ 313.384342][T11894] xt_hashlimit: size too large, truncated to 1048576 [ 313.552280][ T3512] bridge_slave_1: left allmulticast mode [ 313.558248][ T3512] bridge_slave_1: left promiscuous mode [ 313.564188][ T3512] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.581363][ T3512] bridge_slave_0: left allmulticast mode [ 313.599021][ T3512] bridge_slave_0: left promiscuous mode [ 313.620020][ T3512] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.795374][ T5847] Bluetooth: hci4: command tx timeout [ 313.961045][ T3512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.972787][ T3512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.984782][ T3512] bond0 (unregistering): Released all slaves [ 314.275516][ T5847] Bluetooth: hci2: command tx timeout [ 314.426639][T11816] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.434080][T11816] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.443158][ T30] audit: type=1107 audit(1747081762.133:13): pid=11912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 314.448243][T11816] bridge_slave_0: entered allmulticast mode [ 314.493064][T11915] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1598'. [ 314.548808][T11816] bridge_slave_0: entered promiscuous mode [ 314.567811][T11816] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.575586][T11816] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.582992][T11816] bridge_slave_1: entered allmulticast mode [ 314.591012][T11816] bridge_slave_1: entered promiscuous mode [ 314.708659][ T3512] hsr_slave_0: left promiscuous mode [ 314.714670][ T3512] hsr_slave_1: left promiscuous mode [ 314.725420][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.732931][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.741562][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.750722][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.777985][ T3512] veth1_macvtap: left promiscuous mode [ 314.783683][ T3512] veth0_macvtap: left promiscuous mode [ 314.789577][ T3512] veth1_vlan: left promiscuous mode [ 314.795595][ T3512] veth0_vlan: left promiscuous mode [ 315.119533][T11924] Bluetooth: MGMT ver 1.23 [ 315.387082][ T3512] team0 (unregistering): Port device team_slave_1 removed [ 315.430175][ T3512] team0 (unregistering): Port device team_slave_0 removed [ 315.884718][T11816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.897061][ T5847] Bluetooth: hci4: command tx timeout [ 315.924829][T11816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.980608][T11937] netlink: 'syz.0.1603': attribute type 1 has an invalid length. [ 316.013746][T11937] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1603'. [ 316.070280][T11816] team0: Port device team_slave_0 added [ 316.092260][T11816] team0: Port device team_slave_1 added [ 316.220424][T11816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.227746][T11816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.255055][T11816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.275719][T11948] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1606'. [ 316.355174][ T5847] Bluetooth: hci2: command tx timeout [ 316.374530][T11945] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1605'. [ 316.384333][T11945] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 316.425748][T11816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.432828][T11816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.460032][T11816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.631865][T11948] ªªªªª» speed is unknown, defaulting to 1000 [ 316.800036][T11953] ªªªªª» speed is unknown, defaulting to 1000 [ 316.820891][T11816] hsr_slave_0: entered promiscuous mode [ 316.840854][T11816] hsr_slave_1: entered promiscuous mode [ 316.847795][T11816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.855588][T11816] Cannot create hsr debugfs directory [ 316.966993][T11945] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 317.254310][T11960] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1608'. [ 317.314746][T11794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 317.354446][T11794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 317.369001][T11794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 317.409747][T11794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 317.577287][T11965] FAULT_INJECTION: forcing a failure. [ 317.577287][T11965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.602546][T11965] CPU: 0 UID: 0 PID: 11965 Comm: syz.0.1610 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 317.602575][T11965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 317.602591][T11965] Call Trace: [ 317.602603][T11965] [ 317.602612][T11965] dump_stack_lvl+0x189/0x250 [ 317.602650][T11965] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.602686][T11965] ? __pfx__printk+0x10/0x10 [ 317.602721][T11965] should_fail_ex+0x414/0x560 [ 317.602747][T11965] _copy_to_user+0x31/0xb0 [ 317.602779][T11965] simple_read_from_buffer+0xe1/0x170 [ 317.602810][T11965] proc_fail_nth_read+0x1df/0x250 [ 317.602842][T11965] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 317.602883][T11965] ? rw_verify_area+0x258/0x650 [ 317.602902][T11965] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 317.602940][T11965] vfs_read+0x1fd/0x980 [ 317.602963][T11965] ? __pfx___mutex_lock+0x10/0x10 [ 317.602981][T11965] ? __pfx_vfs_read+0x10/0x10 [ 317.603001][T11965] ? __fget_files+0x2a/0x420 [ 317.603027][T11965] ? __fget_files+0x3a0/0x420 [ 317.603048][T11965] ? __fget_files+0x2a/0x420 [ 317.603077][T11965] ksys_read+0x145/0x250 [ 317.603098][T11965] ? __pfx_ksys_read+0x10/0x10 [ 317.603121][T11965] ? do_syscall_64+0xba/0x210 [ 317.603141][T11965] do_syscall_64+0xf6/0x210 [ 317.603159][T11965] ? clear_bhb_loop+0x45/0xa0 [ 317.603180][T11965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.603196][T11965] RIP: 0033:0x7f2052b8d37c [ 317.603212][T11965] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 317.603227][T11965] RSP: 002b:00007f2053a13030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 317.603245][T11965] RAX: ffffffffffffffda RBX: 00007f2052db5fa0 RCX: 00007f2052b8d37c [ 317.603257][T11965] RDX: 000000000000000f RSI: 00007f2053a130a0 RDI: 0000000000000004 [ 317.603267][T11965] RBP: 00007f2053a13090 R08: 0000000000000000 R09: 0000000000000000 [ 317.603277][T11965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.603287][T11965] R13: 0000000000000000 R14: 00007f2052db5fa0 R15: 00007ffd21151da8 [ 317.603314][T11965] [ 317.849964][T11967] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1611'. [ 317.863120][T11967] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 317.900097][T11794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.927500][T11794] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.955261][ T5847] Bluetooth: hci4: command tx timeout [ 317.983128][ T3512] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.990380][ T3512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.103845][T11969] ªªªªª» speed is unknown, defaulting to 1000 [ 318.117802][ T3512] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.125131][ T3512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.557001][T11816] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 318.588945][T11816] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 318.607009][T11816] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 318.629934][T11816] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 319.091930][T11794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.143756][T11816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.250381][T11816] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.291331][ T3430] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.298609][ T3430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.349170][ T3430] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.356539][ T3430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.397493][T11794] veth0_vlan: entered promiscuous mode [ 319.454111][T11794] veth1_vlan: entered promiscuous mode [ 319.568177][T12006] netlink: 'syz.1.1621': attribute type 5 has an invalid length. [ 319.597468][T11794] veth0_macvtap: entered promiscuous mode [ 319.628010][T11794] veth1_macvtap: entered promiscuous mode [ 319.686331][T11794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.700445][T11794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.728658][T11794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.753607][T11794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.776782][T11794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.800657][T11794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.828542][T11794] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.856483][T11794] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.872025][T11794] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.881483][T11794] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.892673][T12013] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1624'. [ 319.909479][T12019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1625'. [ 319.933368][T12019] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1625'. [ 320.016639][T12016] xt_hashlimit: max too large, truncated to 1048576 [ 320.052560][T12016] macsec0: entered allmulticast mode [ 320.059842][T12016] veth1_macvtap: entered allmulticast mode [ 320.069797][T12016] macsec0: left allmulticast mode [ 320.075423][T12016] veth1_macvtap: left allmulticast mode [ 320.121917][T11816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.193523][ T3512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.214191][ T3512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.248080][T11816] veth0_vlan: entered promiscuous mode [ 320.274774][ T7667] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.281383][T11816] veth1_vlan: entered promiscuous mode [ 320.297891][ T7667] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.398230][T11816] veth0_macvtap: entered promiscuous mode [ 320.442990][T11816] veth1_macvtap: entered promiscuous mode [ 320.478551][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.490392][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.500528][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.511117][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.530079][T12033] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20000 [ 320.539677][T11816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.547794][T12031] IPVS: Unknown mcast interface: pimreg [ 320.578353][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.591459][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.618558][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.629110][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.651411][T11816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.673974][T11816] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.674847][T12035] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1630'. [ 320.696971][T11816] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.707338][T11816] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.717873][T11816] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.729756][T12036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1630'. [ 320.848129][ T7665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.860077][ T7665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.911537][ T7665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.920313][ T7665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.482338][ T7667] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.918052][ T7667] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.168438][ T7667] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.195539][ C1] ================================================================== [ 322.203662][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 322.211570][ C1] Read of size 2 at addr ffff888033a0a42a by task swapper/1/0 [ 322.219034][ C1] [ 322.221366][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 322.221386][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 322.221396][ C1] Call Trace: [ 322.221403][ C1] [ 322.221409][ C1] dump_stack_lvl+0x189/0x250 [ 322.221435][ C1] ? __virt_addr_valid+0x18c/0x540 [ 322.221456][ C1] ? rcu_is_watching+0x15/0xb0 [ 322.221480][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.221501][ C1] ? rcu_is_watching+0x15/0xb0 [ 322.221524][ C1] ? lock_release+0x4b/0x3e0 [ 322.221547][ C1] ? __virt_addr_valid+0x18c/0x540 [ 322.221567][ C1] ? __virt_addr_valid+0x469/0x540 [ 322.221594][ C1] print_report+0xb4/0x290 [ 322.221613][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 322.221629][ C1] kasan_report+0x118/0x150 [ 322.221650][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 322.221673][ C1] rose_timer_expiry+0x471/0x4b0 [ 322.221691][ C1] call_timer_fn+0x17b/0x5f0 [ 322.221712][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 322.221747][ C1] ? call_timer_fn+0xbe/0x5f0 [ 322.221767][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 322.221792][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 322.221815][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.221839][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 322.221857][ C1] __run_timer_base+0x61a/0x860 [ 322.221876][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 322.221902][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 322.221928][ C1] run_timer_softirq+0xb7/0x180 [ 322.221948][ C1] handle_softirqs+0x283/0x870 [ 322.221964][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 322.221980][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 322.221996][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 322.222017][ C1] __irq_exit_rcu+0xca/0x1f0 [ 322.222031][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 322.222049][ C1] irq_exit_rcu+0x9/0x30 [ 322.222061][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 322.222085][ C1] [ 322.222090][ C1] [ 322.222096][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 322.222114][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 322.222139][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 eb 10 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 322.222153][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 322.222168][ C1] RAX: c16331d28db83300 RBX: ffffffff81974f28 RCX: c16331d28db83300 [ 322.222181][ C1] RDX: 0000000000000001 RSI: ffffffff8d7517fa RDI: ffffffff8bc1d4a0 [ 322.222193][ C1] RBP: ffffc90000197f20 R08: ffff8880b8932b5b R09: 1ffff1101712656b [ 322.222205][ C1] R10: dffffc0000000000 R11: ffffed101712656c R12: ffffffff8f7f2d70 [ 322.222217][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110038deb40 [ 322.222230][ C1] ? do_idle+0x1e8/0x510 [ 322.222249][ C1] default_idle+0x13/0x20 [ 322.222265][ C1] default_idle_call+0x74/0xb0 [ 322.222282][ C1] do_idle+0x1e8/0x510 [ 322.222299][ C1] ? __pfx_do_idle+0x10/0x10 [ 322.222321][ C1] cpu_startup_entry+0x44/0x60 [ 322.222336][ C1] start_secondary+0x101/0x110 [ 322.222352][ C1] common_startup_64+0x13e/0x147 [ 322.222389][ C1] [ 322.222395][ C1] [ 322.533958][ C1] Allocated by task 11599: [ 322.538365][ C1] kasan_save_track+0x3e/0x80 [ 322.543047][ C1] __kasan_kmalloc+0x93/0xb0 [ 322.547652][ C1] __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 322.554079][ C1] kmemdup_noprof+0x2b/0x70 [ 322.558583][ C1] cache_create_net+0x2f/0x260 [ 322.563353][ C1] ip_map_cache_create+0x56/0x100 [ 322.568390][ C1] sunrpc_init_net+0x49/0x160 [ 322.573094][ C1] ops_init+0x359/0x5c0 [ 322.577259][ C1] setup_net+0x219/0x4b0 [ 322.581512][ C1] copy_net_ns+0x32e/0x590 [ 322.585942][ C1] create_new_namespaces+0x3d3/0x700 [ 322.591244][ C1] unshare_nsproxy_namespaces+0x11c/0x170 [ 322.596970][ C1] ksys_unshare+0x4c8/0x8c0 [ 322.601478][ C1] __x64_sys_unshare+0x38/0x50 [ 322.606245][ C1] do_syscall_64+0xf6/0x210 [ 322.610745][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.616636][ C1] [ 322.618953][ C1] Freed by task 3512: [ 322.622922][ C1] kasan_save_track+0x3e/0x80 [ 322.627698][ C1] kasan_save_free_info+0x46/0x50 [ 322.632731][ C1] __kasan_slab_free+0x62/0x70 [ 322.637498][ C1] kfree+0x193/0x440 [ 322.641393][ C1] sunrpc_exit_net+0x38/0x90 [ 322.645981][ C1] ops_undo_list+0x497/0x990 [ 322.650682][ C1] cleanup_net+0x4c5/0x8a0 [ 322.655120][ C1] process_scheduled_works+0xadb/0x17a0 [ 322.660689][ C1] worker_thread+0x8a0/0xda0 [ 322.665309][ C1] kthread+0x70e/0x8a0 [ 322.669379][ C1] ret_from_fork+0x4b/0x80 [ 322.673810][ C1] ret_from_fork_asm+0x1a/0x30 [ 322.678598][ C1] [ 322.680943][ C1] The buggy address belongs to the object at ffff888033a0a400 [ 322.680943][ C1] which belongs to the cache kmalloc-512 of size 512 [ 322.695003][ C1] The buggy address is located 42 bytes inside of [ 322.695003][ C1] freed 512-byte region [ffff888033a0a400, ffff888033a0a600) [ 322.708715][ C1] [ 322.711035][ C1] The buggy address belongs to the physical page: [ 322.717541][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888033a0a000 pfn:0x33a08 [ 322.727631][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 322.736180][ C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 322.745232][ C1] page_type: f5(slab) [ 322.749216][ C1] raw: 00fff00000000240 ffff88801a041c80 ffffea00009d1410 ffffea0001999410 [ 322.757803][ C1] raw: ffff888033a0a000 000000000010000f 00000000f5000000 0000000000000000 [ 322.766389][ C1] head: 00fff00000000240 ffff88801a041c80 ffffea00009d1410 ffffea0001999410 [ 322.775058][ C1] head: ffff888033a0a000 000000000010000f 00000000f5000000 0000000000000000 [ 322.783728][ C1] head: 00fff00000000002 ffffea0000ce8201 00000000ffffffff 00000000ffffffff [ 322.792407][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 322.801075][ C1] page dumped because: kasan: bad access detected [ 322.807512][ C1] page_owner tracks the page as allocated [ 322.813265][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5482, tgid 5482 (S35iptables), ts 51486432435, free_ts 51287123141 [ 322.833767][ C1] post_alloc_hook+0x1d8/0x230 [ 322.838561][ C1] get_page_from_freelist+0x21e0/0x22c0 [ 322.844134][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 322.849962][ C1] alloc_pages_mpol+0x232/0x4a0 [ 322.854834][ C1] allocate_slab+0x8a/0x3b0 [ 322.859355][ C1] ___slab_alloc+0xbfc/0x1480 [ 322.864046][ C1] __kmalloc_noprof+0x305/0x4f0 [ 322.868920][ C1] tomoyo_init_log+0x1a6e/0x1f70 [ 322.873865][ C1] tomoyo_supervisor+0x340/0x1480 [ 322.878910][ C1] tomoyo_path_permission+0x25a/0x380 [ 322.884283][ C1] tomoyo_path_perm+0x392/0x4b0 [ 322.889137][ C1] security_inode_getattr+0x12f/0x330 [ 322.894550][ C1] __x64_sys_newfstat+0xfe/0x200 [ 322.899511][ C1] do_syscall_64+0xf6/0x210 [ 322.904017][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.909912][ C1] page last free pid 5479 tgid 5479 stack trace: [ 322.916250][ C1] __free_frozen_pages+0xb14/0xce0 [ 322.921370][ C1] __slab_free+0x326/0x400 [ 322.925785][ C1] qlist_free_all+0x9a/0x140 [ 322.930382][ C1] kasan_quarantine_reduce+0x148/0x160 [ 322.935930][ C1] __kasan_slab_alloc+0x22/0x80 [ 322.940788][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 322.946245][ C1] jbd2__journal_start+0x146/0x5b0 [ 322.951360][ C1] __ext4_journal_start_sb+0x227/0x5c0 [ 322.956820][ C1] ext4_dirty_inode+0x93/0x110 [ 322.961585][ C1] __mark_inode_dirty+0x2ce/0xdf0 [ 322.966616][ C1] touch_atime+0x59b/0x6d0 [ 322.971032][ C1] filemap_read+0x1024/0x11d0 [ 322.975706][ C1] __kernel_read+0x469/0x8c0 [ 322.980314][ C1] integrity_kernel_read+0x89/0xd0 [ 322.985421][ C1] ima_calc_file_hash+0x152c/0x18d0 [ 322.990633][ C1] ima_collect_measurement+0x42e/0x8e0 [ 322.996116][ C1] [ 322.998456][ C1] Memory state around the buggy address: [ 323.004079][ C1] ffff888033a0a300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 323.012140][ C1] ffff888033a0a380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 323.020205][ C1] >ffff888033a0a400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 323.028260][ C1] ^ [ 323.033649][ C1] ffff888033a0a480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 323.041707][ C1] ffff888033a0a500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 323.049782][ C1] ================================================================== [ 323.057916][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 323.065137][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 323.076794][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 323.086878][ C1] Call Trace: [ 323.090182][ C1] [ 323.093055][ C1] dump_stack_lvl+0x99/0x250 [ 323.097694][ C1] ? __asan_memcpy+0x40/0x70 [ 323.102331][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.107597][ C1] ? __pfx__printk+0x10/0x10 [ 323.112195][ C1] panic+0x2db/0x790 [ 323.116097][ C1] ? __pfx_panic+0x10/0x10 [ 323.120534][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 323.126433][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 323.132343][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 323.138673][ C1] ? print_memory_metadata+0x314/0x400 [ 323.144129][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 323.149342][ C1] check_panic_on_warn+0x89/0xb0 [ 323.154278][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 323.159386][ C1] end_report+0x78/0x160 [ 323.163630][ C1] kasan_report+0x129/0x150 [ 323.168133][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 323.173240][ C1] rose_timer_expiry+0x471/0x4b0 [ 323.178179][ C1] call_timer_fn+0x17b/0x5f0 [ 323.182769][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 323.188246][ C1] ? call_timer_fn+0xbe/0x5f0 [ 323.192939][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 323.198426][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 323.203631][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 323.208838][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 323.214299][ C1] __run_timer_base+0x61a/0x860 [ 323.219148][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 323.224351][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 323.229724][ C1] run_timer_softirq+0xb7/0x180 [ 323.234667][ C1] handle_softirqs+0x283/0x870 [ 323.239434][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 323.244218][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 323.249500][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 323.254702][ C1] __irq_exit_rcu+0xca/0x1f0 [ 323.259288][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 323.264482][ C1] irq_exit_rcu+0x9/0x30 [ 323.268721][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 323.274368][ C1] [ 323.277333][ C1] [ 323.280277][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 323.286257][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 323.291987][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 eb 10 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 323.311596][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 323.317684][ C1] RAX: c16331d28db83300 RBX: ffffffff81974f28 RCX: c16331d28db83300 [ 323.325653][ C1] RDX: 0000000000000001 RSI: ffffffff8d7517fa RDI: ffffffff8bc1d4a0 [ 323.333614][ C1] RBP: ffffc90000197f20 R08: ffff8880b8932b5b R09: 1ffff1101712656b [ 323.341670][ C1] R10: dffffc0000000000 R11: ffffed101712656c R12: ffffffff8f7f2d70 [ 323.349638][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110038deb40 [ 323.357622][ C1] ? do_idle+0x1e8/0x510 [ 323.361883][ C1] default_idle+0x13/0x20 [ 323.366216][ C1] default_idle_call+0x74/0xb0 [ 323.370971][ C1] do_idle+0x1e8/0x510 [ 323.375036][ C1] ? __pfx_do_idle+0x10/0x10 [ 323.379628][ C1] cpu_startup_entry+0x44/0x60 [ 323.384393][ C1] start_secondary+0x101/0x110 [ 323.389154][ C1] common_startup_64+0x13e/0x147 [ 323.394105][ C1] [ 323.397485][ C1] Kernel Offset: disabled [ 323.401817][ C1] Rebooting in 86400 seconds..