last executing test programs: 1m23.140693842s ago: executing program 4 (id=1727): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newae={0x40, 0x1e, 0x468bbc8229e18b43, 0x0, 0x0, {{}, @in6=@empty}}, 0x40}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="ca12568aad7198acdf1fa75be2c6faf6ddf15bb06db39cbd9b5668b60364faddf9775de5bd489e14def47cc35335e5823bfd44b52b3778f1220540ce3f1ec90ff78e9ea35500cce4ebbd1fa90119662eb4f588de93007ddfb7f1fafaaa66fa40959f344981d9a4ce0fc7ee4450618ad046ff4bc71cc6276cfe6ac9da7a3f6c157b1bf3bbf8dfa105ce2bd4a9d6dda43b063362b49d641010580cccdb465e5ea80741f025443935c478f17e6bacc5e2b329cf0ace781eec6c095da6c114f736aa605b2b9b5b73de92", 0xc8) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 1m23.003870287s ago: executing program 4 (id=1728): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000e40)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "ce4083d002edb8"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000140)={{0x0, 0xffffffffffff0382, 0x8, 0x4, 0x8, 0x9, 0x6, 0x1, 0xa021, 0x0, 0x100, 0xfffffffffffffffc, 0x1, 0x9, 0xc4}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001e40)={r1, r2, "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", "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"}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="02"], 0x10) socket$l2tp6(0xa, 0x2, 0x73) 1m22.847902537s ago: executing program 4 (id=1729): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[], 0x104}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000000000bc7a23ac540189cf01000200005e1affd502000000300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011000100000000000000000100"], 0x7c}, 0x1, 0x0, 0x0, 0x24048855}, 0x4000111) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000060a010400000000000000000200000008000a40000000000900010073797a30000000000900020073797a3200000000140000001100010000000000f40000000000000a"], 0x5c}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYRES16, @ANYRES16=r2, @ANYBLOB="2cb8b2377000fcdbdf008d08000300e32999fbea424105e7e924faaf032d0a497942f009526876f22a77242d838966c84af1f8bf3ca1f60211499cc483eb7bb4bc35542bbe65234a0000000000000000", @ANYRES32=r7, @ANYRES16], 0x24}, 0x1, 0x0, 0x0, 0x20044005}, 0x8080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071121e0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="108ea9fad94a6c2d67477833ae547ac3638765b4f3345ff78b8159f0514f54cc0e49ca57861e4354722ca3a1749270056780c7f4164c69e011bcdb672b6c1d730791990c9eebce091a07a8ee5266619fd1f93911f3f3f1c0632ab1cb423ef2dafc0efe72eb3183d66ae9fa198a9bb780cada83acd1fc0ab644c79db07e7f838a8a8e12f73ae010d342f6eab4dc891b642ac073627abb62a39d61f880945187127003548ac0997f80be2796ea0a040a6499c2e8c21877163047cea68a71fbcb59d87599ff3f176d445b61cc68ce2cdc6d0613f2cd4c83f4af7ff609c8c70369"], 0x10}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001000000800000001dffa65ad72cb14abf82b6f69ae6b2673d27d85991eae1f4bb00e133c9213b76c8b8a9b81db9432c1a8182da77484cac92f659a524035770c49fd5d85d8c5a4e6d5e62291ddad11f3bf42a16bf995efaced7b5d66756e3dc2b24f55bdc0afcfd478705eb103af3e8446cfd4484150c585cb857148cfd6c9951a06f8eff0c283c4bb69bd9e301fbca18e54d9ee1de9c3c921f65f61768e4b0d8c6", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r9, 0xffffffffffffffff}, &(0x7f0000001840), &(0x7f0000000100)='%pi6 \x00'}, 0x20) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000004, 0x13, r11, 0xf45f2000) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r12, 0x4030582a, &(0x7f0000000380)={0x0, 0x1, 0x10, 0x7}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r10, 0xffffffffffffffff}, 0x4) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000008000000b7080000000000007b8af8ff00000000b7080000000039000600000000000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r13, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r14, 0x0, 0xe, 0x0, &(0x7f0000000000)="40f0538ef047b21fb60068305500", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r8, 0x6a98047402e98331}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="07ef28bd7400fbdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) 1m22.668745001s ago: executing program 4 (id=1731): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) bind$bt_hci(r0, &(0x7f0000000180)={0x27}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x840, 0x100}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7fffffff, 0xc7a8}}]}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3b6, &(0x7f0000000780)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9203803afffe8000000000000000000000000000bbff020000000000000000000000000001860090780000f5000000000000000000000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af180200010000000500000000260004001818fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000180b17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f0032107ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca8374000000009f12c57f0219bdafc50000000000000000000000000000145e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c0305d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a"], 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="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", 0x189) 1m16.136430152s ago: executing program 0 (id=1161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES64=r0], 0x7c}}, 0x4008000) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES64=r0], 0x7c}}, 0x4008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x20, r2, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x880) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b040000000000000000020000003800048034000180090001007866726d000000002400028008000140000000000800044000000006050003002000000008000240000000010900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b040000000000000000020000003800048034000180090001007866726d000000002400028008000140000000000800044000000006050003002000000008000240000000010900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x3a0, 0xb, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DESC={0x364, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x80, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9938}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_CONCAT={0x68, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf98}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5c5a833d}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_CONCAT={0x104, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xae}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc903}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3d8b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd0c1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x567}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x900000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_CONCAT={0x164, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x38000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd012}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4090}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8e75}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x27}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x468}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 1m15.624061668s ago: executing program 2 (id=1110): r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$fou(0x0, r0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040)=0xfffffffc, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 1m14.890104186s ago: executing program 1 (id=669): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000060000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000500"/28], 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) sendmsg$nl_route_sched(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)=@deltclass={0xd0, 0x29, 0x2, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x8}, {0xffe0, 0xfff3}, {0x0, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xf}}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0xc}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x84, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x8000}}, @TCA_HFSC_USC={0x10, 0x3, {0xe, 0x2, 0x6}}, @TCA_HFSC_FSC={0x10, 0x2, {0x10, 0x0, 0x7}}, @TCA_HFSC_USC={0x10, 0x3, {0x528, 0x9242, 0x3}}, @TCA_HFSC_FSC={0x10, 0x2, {0x7b8, 0x4, 0x40b5}}, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0xd1, 0x7fff}}, @TCA_HFSC_USC={0x10, 0x3, {0x4, 0x7, 0x6}}, @TCA_HFSC_FSC={0x10, 0x2, {0x3, 0x80000001, 0xc7}}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket$netlink(0x10, 0x3, 0x15) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000300)={0x4, &(0x7f00000002c0)=[{0x800, 0x6, 0x0, 0x2}, {0x49, 0x1, 0x0, 0x3}, {0x7, 0xc0, 0x2, 0x6}, {0x0, 0x80, 0xf, 0xcd5}]}) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003500)=ANY=[@ANYBLOB="e0000000130001000000000000000000d8f00d2c09a739aaf9a450f21dd3ab4b0551f902cbf669a2e5ac6b1a5317c2d9532d75ff4393c8de5aed294ee89cd85a07ecb834de0e49d5bb9ff633e6425c1ba3849a0e10f972e2f4d18aabb3175c574e59c6419f3b9f60f7779c868d9c7b400f20c00ca51b4c9e29f97a9bdd9620d71a84a46d52dd3dc1661e478c9a1934d5e0cdd5f2c9076e879ddca6639824c343424bd884dc991f14b5b58ce35b1699bd64dd4e7e4e5cde2ff49723c8624f33298c16cf9d4c41b9e61c8416bd52700661880e486563693120216e05c62f000000"], 0xe0}], 0x1, 0x0, 0x0, 0xc848}, 0x4) write(r1, &(0x7f0000000040)="0d000000010001", 0x7) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x800, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x11}, 0xc000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16=r1], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m10.10537117s ago: executing program 4 (id=1731): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61153c00000000006113340000000000bfa000000000000007000000ee0016055e0301000000000025050000030000006916b80000000000bf07000000000000260507000fff0720670600003f000000140600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2474ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7166c23d28c0a7101b8b09736ecd34aa9dc1b498"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) bind$bt_hci(r0, &(0x7f0000000180)={0x27}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x840, 0x100}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7fffffff, 0xc7a8}}]}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3b6, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="105d5e55076405019e30f57ec656e9597868f6545be7c813e9de5c2f84f18e0d71ada90eecbc574f58fd2bc184bd0cacf2689726e270ce8e6ec84b06be17918be210bad62008ca48946aac13ccc43274a9d01b2dd4d268ce17862c9e69f7539090978221ad9459b48b8a5b0565798eebe5ad1bf2eb82641e83f114d304dabf376ab1c94dc5b99a8c3e07ad94b9d03fa57957ceaa71cb10c9b5f2d80c99110e0dc8532927937306b00682ee549cb8dd4af7ceb6ccfa44744c30e9666304481479e2d25d16b7c03588a6a1ed4347477eeeb259c302004354dd01146ac04d948d00aecae07717c611a0a565a9a97e637589326c23d76dc13cb8800d29aa427992e638153bc743276d4caca43122dcafadbdf778ac35c315fedffe102658f11af7096acb7dd1d99f95a49440be61f28cca3431a563707720025a9a8aedb8081d8cf068fd91ddf3681726066ad97b575ec0a00610b24d418205bcd1c6ccc6e58f3c27e557c495db90e56cb76e0238a49128c457990b8b750aac08a86567e43e35f6ac7d21961635e15cc938", 0x189) 1m5.512838859s ago: executing program 0 (id=1161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES64=r0], 0x7c}}, 0x4008000) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES64=r0], 0x7c}}, 0x4008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x20, r2, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x880) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b040000000000000000020000003800048034000180090001007866726d000000002400028008000140000000000800044000000006050003002000000008000240000000010900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b040000000000000000020000003800048034000180090001007866726d000000002400028008000140000000000800044000000006050003002000000008000240000000010900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x3a0, 0xb, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DESC={0x364, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x80, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9938}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_CONCAT={0x68, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf98}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5c5a833d}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_CONCAT={0x104, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xae}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc903}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3d8b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd0c1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x567}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x900000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_CONCAT={0x164, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x38000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd012}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4090}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8e75}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x27}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x468}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 1m3.881489859s ago: executing program 2 (id=1110): r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$fou(0x0, r0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040)=0xfffffffc, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 1m2.877577369s ago: executing program 1 (id=669): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000060000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000500"/28], 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) sendmsg$nl_route_sched(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)=@deltclass={0xd0, 0x29, 0x2, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x8}, {0xffe0, 0xfff3}, {0x0, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xf}}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0xc}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x84, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x8000}}, @TCA_HFSC_USC={0x10, 0x3, {0xe, 0x2, 0x6}}, @TCA_HFSC_FSC={0x10, 0x2, {0x10, 0x0, 0x7}}, @TCA_HFSC_USC={0x10, 0x3, {0x528, 0x9242, 0x3}}, @TCA_HFSC_FSC={0x10, 0x2, {0x7b8, 0x4, 0x40b5}}, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0xd1, 0x7fff}}, @TCA_HFSC_USC={0x10, 0x3, {0x4, 0x7, 0x6}}, @TCA_HFSC_FSC={0x10, 0x2, {0x3, 0x80000001, 0xc7}}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket$netlink(0x10, 0x3, 0x15) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000300)={0x4, &(0x7f00000002c0)=[{0x800, 0x6, 0x0, 0x2}, {0x49, 0x1, 0x0, 0x3}, {0x7, 0xc0, 0x2, 0x6}, {0x0, 0x80, 0xf, 0xcd5}]}) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003500)=ANY=[@ANYBLOB="e0000000130001000000000000000000d8f00d2c09a739aaf9a450f21dd3ab4b0551f902cbf669a2e5ac6b1a5317c2d9532d75ff4393c8de5aed294ee89cd85a07ecb834de0e49d5bb9ff633e6425c1ba3849a0e10f972e2f4d18aabb3175c574e59c6419f3b9f60f7779c868d9c7b400f20c00ca51b4c9e29f97a9bdd9620d71a84a46d52dd3dc1661e478c9a1934d5e0cdd5f2c9076e879ddca6639824c343424bd884dc991f14b5b58ce35b1699bd64dd4e7e4e5cde2ff49723c8624f33298c16cf9d4c41b9e61c8416bd52700661880e486563693120216e05c62f000000"], 0xe0}], 0x1, 0x0, 0x0, 0xc848}, 0x4) write(r1, &(0x7f0000000040)="0d000000010001", 0x7) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x800, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x11}, 0xc000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16=r1], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m1.707874048s ago: executing program 4 (id=1731): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) bind$bt_hci(r0, &(0x7f0000000180)={0x27}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x840, 0x100}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7fffffff, 0xc7a8}}]}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3b6, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="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", 0x189) 52.971171265s ago: executing program 0 (id=1161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES64=r0], 0x7c}}, 0x4008000) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES64=r0], 0x7c}}, 0x4008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x20, r2, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x880) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b040000000000000000020000003800048034000180090001007866726d000000002400028008000140000000000800044000000006050003002000000008000240000000010900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b040000000000000000020000003800048034000180090001007866726d000000002400028008000140000000000800044000000006050003002000000008000240000000010900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x3a0, 0xb, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DESC={0x364, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x80, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9938}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_CONCAT={0x68, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf98}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5c5a833d}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_CONCAT={0x104, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xae}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc903}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3d8b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd0c1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x567}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x900000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_CONCAT={0x164, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x38000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd012}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4090}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8e75}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x27}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x468}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 51.581192022s ago: executing program 2 (id=1110): r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$fou(0x0, r0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040)=0xfffffffc, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 50.738016383s ago: executing program 1 (id=669): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000060000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000500"/28], 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) sendmsg$nl_route_sched(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)=@deltclass={0xd0, 0x29, 0x2, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x8}, {0xffe0, 0xfff3}, {0x0, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xf}}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0xc}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x84, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x8000}}, @TCA_HFSC_USC={0x10, 0x3, {0xe, 0x2, 0x6}}, @TCA_HFSC_FSC={0x10, 0x2, {0x10, 0x0, 0x7}}, @TCA_HFSC_USC={0x10, 0x3, {0x528, 0x9242, 0x3}}, @TCA_HFSC_FSC={0x10, 0x2, {0x7b8, 0x4, 0x40b5}}, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0xd1, 0x7fff}}, @TCA_HFSC_USC={0x10, 0x3, {0x4, 0x7, 0x6}}, @TCA_HFSC_FSC={0x10, 0x2, {0x3, 0x80000001, 0xc7}}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket$netlink(0x10, 0x3, 0x15) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000300)={0x4, &(0x7f00000002c0)=[{0x800, 0x6, 0x0, 0x2}, {0x49, 0x1, 0x0, 0x3}, {0x7, 0xc0, 0x2, 0x6}, {0x0, 0x80, 0xf, 0xcd5}]}) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003500)=ANY=[@ANYBLOB="e0000000130001000000000000000000d8f00d2c09a739aaf9a450f21dd3ab4b0551f902cbf669a2e5ac6b1a5317c2d9532d75ff4393c8de5aed294ee89cd85a07ecb834de0e49d5bb9ff633e6425c1ba3849a0e10f972e2f4d18aabb3175c574e59c6419f3b9f60f7779c868d9c7b400f20c00ca51b4c9e29f97a9bdd9620d71a84a46d52dd3dc1661e478c9a1934d5e0cdd5f2c9076e879ddca6639824c343424bd884dc991f14b5b58ce35b1699bd64dd4e7e4e5cde2ff49723c8624f33298c16cf9d4c41b9e61c8416bd52700661880e486563693120216e05c62f000000"], 0xe0}], 0x1, 0x0, 0x0, 0xc848}, 0x4) write(r1, &(0x7f0000000040)="0d000000010001", 0x7) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x800, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x11}, 0xc000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16=r1], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 39.57831451s ago: executing program 2 (id=1110): r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$fou(0x0, r0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040)=0xfffffffc, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 38.534556764s ago: executing program 0 (id=1161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES64=r0], 0x7c}}, 0x4008000) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES64=r0], 0x7c}}, 0x4008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x20, r2, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x880) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b040000000000000000020000003800048034000180090001007866726d000000002400028008000140000000000800044000000006050003002000000008000240000000010900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b040000000000000000020000003800048034000180090001007866726d000000002400028008000140000000000800044000000006050003002000000008000240000000010900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x3a0, 0xb, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DESC={0x364, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x80, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9938}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_CONCAT={0x68, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf98}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5c5a833d}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_CONCAT={0x104, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xae}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc903}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3d8b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd0c1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x567}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x900000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_CONCAT={0x164, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x38000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd012}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4090}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8e75}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x27}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x468}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 37.312502557s ago: executing program 1 (id=669): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000060000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000500"/28], 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) sendmsg$nl_route_sched(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)=@deltclass={0xd0, 0x29, 0x2, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x8}, {0xffe0, 0xfff3}, {0x0, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xf}}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0xc}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x84, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x8000}}, @TCA_HFSC_USC={0x10, 0x3, {0xe, 0x2, 0x6}}, @TCA_HFSC_FSC={0x10, 0x2, {0x10, 0x0, 0x7}}, @TCA_HFSC_USC={0x10, 0x3, {0x528, 0x9242, 0x3}}, @TCA_HFSC_FSC={0x10, 0x2, {0x7b8, 0x4, 0x40b5}}, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0xd1, 0x7fff}}, @TCA_HFSC_USC={0x10, 0x3, {0x4, 0x7, 0x6}}, @TCA_HFSC_FSC={0x10, 0x2, {0x3, 0x80000001, 0xc7}}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket$netlink(0x10, 0x3, 0x15) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000300)={0x4, &(0x7f00000002c0)=[{0x800, 0x6, 0x0, 0x2}, {0x49, 0x1, 0x0, 0x3}, {0x7, 0xc0, 0x2, 0x6}, {0x0, 0x80, 0xf, 0xcd5}]}) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003500)=ANY=[@ANYBLOB="e0000000130001000000000000000000d8f00d2c09a739aaf9a450f21dd3ab4b0551f902cbf669a2e5ac6b1a5317c2d9532d75ff4393c8de5aed294ee89cd85a07ecb834de0e49d5bb9ff633e6425c1ba3849a0e10f972e2f4d18aabb3175c574e59c6419f3b9f60f7779c868d9c7b400f20c00ca51b4c9e29f97a9bdd9620d71a84a46d52dd3dc1661e478c9a1934d5e0cdd5f2c9076e879ddca6639824c343424bd884dc991f14b5b58ce35b1699bd64dd4e7e4e5cde2ff49723c8624f33298c16cf9d4c41b9e61c8416bd52700661880e486563693120216e05c62f000000"], 0xe0}], 0x1, 0x0, 0x0, 0xc848}, 0x4) write(r1, &(0x7f0000000040)="0d000000010001", 0x7) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x800, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x11}, 0xc000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16=r1], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 27.148335701s ago: executing program 2 (id=1110): r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$fou(0x0, r0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040)=0xfffffffc, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 25.257741832s ago: executing program 0 (id=1161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES64=r0], 0x7c}}, 0x4008000) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES64=r0], 0x7c}}, 0x4008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x20, r2, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x880) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b040000000000000000020000003800048034000180090001007866726d000000002400028008000140000000000800044000000006050003002000000008000240000000010900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b040000000000000000020000003800048034000180090001007866726d000000002400028008000140000000000800044000000006050003002000000008000240000000010900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x3a0, 0xb, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DESC={0x364, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x80, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9938}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_CONCAT={0x68, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf98}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5c5a833d}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_CONCAT={0x104, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xae}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc903}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3d8b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd0c1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x567}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x900000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_CONCAT={0x164, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x38000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd012}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4090}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8e75}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x27}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x468}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 24.230567595s ago: executing program 1 (id=669): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000060000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000500"/28], 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) sendmsg$nl_route_sched(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)=@deltclass={0xd0, 0x29, 0x2, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x8}, {0xffe0, 0xfff3}, {0x0, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xf}}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0xc}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x84, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x8000}}, @TCA_HFSC_USC={0x10, 0x3, {0xe, 0x2, 0x6}}, @TCA_HFSC_FSC={0x10, 0x2, {0x10, 0x0, 0x7}}, @TCA_HFSC_USC={0x10, 0x3, {0x528, 0x9242, 0x3}}, @TCA_HFSC_FSC={0x10, 0x2, {0x7b8, 0x4, 0x40b5}}, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0xd1, 0x7fff}}, @TCA_HFSC_USC={0x10, 0x3, {0x4, 0x7, 0x6}}, @TCA_HFSC_FSC={0x10, 0x2, {0x3, 0x80000001, 0xc7}}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket$netlink(0x10, 0x3, 0x15) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000300)={0x4, &(0x7f00000002c0)=[{0x800, 0x6, 0x0, 0x2}, {0x49, 0x1, 0x0, 0x3}, {0x7, 0xc0, 0x2, 0x6}, {0x0, 0x80, 0xf, 0xcd5}]}) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003500)=ANY=[@ANYBLOB="e0000000130001000000000000000000d8f00d2c09a739aaf9a450f21dd3ab4b0551f902cbf669a2e5ac6b1a5317c2d9532d75ff4393c8de5aed294ee89cd85a07ecb834de0e49d5bb9ff633e6425c1ba3849a0e10f972e2f4d18aabb3175c574e59c6419f3b9f60f7779c868d9c7b400f20c00ca51b4c9e29f97a9bdd9620d71a84a46d52dd3dc1661e478c9a1934d5e0cdd5f2c9076e879ddca6639824c343424bd884dc991f14b5b58ce35b1699bd64dd4e7e4e5cde2ff49723c8624f33298c16cf9d4c41b9e61c8416bd52700661880e486563693120216e05c62f000000"], 0xe0}], 0x1, 0x0, 0x0, 0xc848}, 0x4) write(r1, &(0x7f0000000040)="0d000000010001", 0x7) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x800, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x11}, 0xc000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16=r1], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 13.72945427s ago: executing program 2 (id=1110): r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$fou(0x0, r0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040)=0xfffffffc, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 11.784191971s ago: executing program 0 (id=1161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES64=r0], 0x7c}}, 0x4008000) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES64=r0], 0x7c}}, 0x4008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x20, r2, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x880) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b040000000000000000020000003800048034000180090001007866726d000000002400028008000140000000000800044000000006050003002000000008000240000000010900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b040000000000000000020000003800048034000180090001007866726d000000002400028008000140000000000800044000000006050003002000000008000240000000010900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x3a0, 0xb, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DESC={0x364, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x80, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9938}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_CONCAT={0x68, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf98}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5c5a833d}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_CONCAT={0x104, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xae}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc903}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3d8b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd0c1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x567}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x900000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_CONCAT={0x164, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x38000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd012}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4090}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8e75}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x27}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x468}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 10.348524349s ago: executing program 1 (id=669): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000060000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000500"/28], 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) sendmsg$nl_route_sched(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)=@deltclass={0xd0, 0x29, 0x2, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x8}, {0xffe0, 0xfff3}, {0x0, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xf}}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0xc}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x84, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x8000}}, @TCA_HFSC_USC={0x10, 0x3, {0xe, 0x2, 0x6}}, @TCA_HFSC_FSC={0x10, 0x2, {0x10, 0x0, 0x7}}, @TCA_HFSC_USC={0x10, 0x3, {0x528, 0x9242, 0x3}}, @TCA_HFSC_FSC={0x10, 0x2, {0x7b8, 0x4, 0x40b5}}, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0xd1, 0x7fff}}, @TCA_HFSC_USC={0x10, 0x3, {0x4, 0x7, 0x6}}, @TCA_HFSC_FSC={0x10, 0x2, {0x3, 0x80000001, 0xc7}}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket$netlink(0x10, 0x3, 0x15) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000300)={0x4, &(0x7f00000002c0)=[{0x800, 0x6, 0x0, 0x2}, {0x49, 0x1, 0x0, 0x3}, {0x7, 0xc0, 0x2, 0x6}, {0x0, 0x80, 0xf, 0xcd5}]}) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003500)=ANY=[@ANYBLOB="e0000000130001000000000000000000d8f00d2c09a739aaf9a450f21dd3ab4b0551f902cbf669a2e5ac6b1a5317c2d9532d75ff4393c8de5aed294ee89cd85a07ecb834de0e49d5bb9ff633e6425c1ba3849a0e10f972e2f4d18aabb3175c574e59c6419f3b9f60f7779c868d9c7b400f20c00ca51b4c9e29f97a9bdd9620d71a84a46d52dd3dc1661e478c9a1934d5e0cdd5f2c9076e879ddca6639824c343424bd884dc991f14b5b58ce35b1699bd64dd4e7e4e5cde2ff49723c8624f33298c16cf9d4c41b9e61c8416bd52700661880e486563693120216e05c62f000000"], 0xe0}], 0x1, 0x0, 0x0, 0xc848}, 0x4) write(r1, &(0x7f0000000040)="0d000000010001", 0x7) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x800, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x11}, 0xc000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16=r1], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.033839934s ago: executing program 3 (id=1938): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="1100000052"], 0xfe33) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x1419, 0x1}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x20, 0x140c, 0x400, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008840}, 0x81) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x140e, 0x300, 0x70bd2d, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 816.861803ms ago: executing program 3 (id=1939): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, 0xffffffffffffffff, &(0x7f0000000080)=0x20) ioctl$int_in(r0, 0x5421, &(0x7f0000000680)=0xffffffff7fffffff) accept(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000003d0007010000000000000000047c0000040000001c00018006000600800a0000100004"], 0x34}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000000680)={{r3}, &(0x7f0000000540), 0x0}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r4, 0x0) 630.363895ms ago: executing program 3 (id=1940): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 510.890502ms ago: executing program 3 (id=1941): syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb7e00000000fe880000000000000000000000000001fc0200000000000000000000000000000002000000000000040100010100c20476"], 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x468, 0x0, 0x468, 0x0, 0x468, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000000), {[{{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@remote, 0x14, 0x28, 0x60}}}, {{@ipv6={@mcast1, @local, [0x0, 0xffffffff, 0xff000000, 0xff000000], [0x0, 0x0, 0xff, 0xff], 'vlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x62, 0x5, 0x4, 0x9}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @common=@ipv6header={{0x28}, {0x20, 0x38}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0xc}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@mh={{0x28}, {"9bdb"}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@empty, 0xf, 0x2a, 0x7}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x7, {0x75}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) 425.524516ms ago: executing program 3 (id=1942): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000078000000090a010400000000000000000100000008000a40000000000900020073797a30000000000900010073797a300000000008000540000000213c0011800a0001006c696d69740000002c0002800c000240000000000000000008000540000040000c00014000000000000004000800044000000001"], 0xc0}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x81, 0x830000, 0x48, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x40, 0x3, 0x7}}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="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"], 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}]}}}]}]}], {0x14}}, 0x74}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002780)=@newtfilter={0x30, 0x2c, 0xd2b, 0x10000, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xffff}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40488d3}, 0x24040084) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), r2) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000002980)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002940)={&(0x7f00000028c0)={0x44, r8, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xb0}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002640)={0xffffffffffffffff, 0xe0, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000002380)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f00000023c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002400)=[0x0], 0x0, 0x4e, &(0x7f0000002440)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000002480), &(0x7f00000024c0), 0x8, 0x39, 0x8, 0x8, &(0x7f0000002500)}}, 0x10) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$inet_smc(0x2b, 0x1, 0x0) splice(r12, 0x0, r11, 0x0, 0xc, 0x0) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002680)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x7ff, '\x00', r1, r2, 0x1, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x1, 0x5, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x26d}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x401}]}, &(0x7f0000002280)='syzkaller\x00', 0x1, 0x25, &(0x7f00000022c0)=""/37, 0x41000, 0x48, '\x00', 0x0, @fallback=0x16, r10, 0x8, &(0x7f0000002300)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000002340)={0x4, 0x5, 0x9e5, 0x5}, 0x10, r9, r11, 0x3, &(0x7f0000002700)=[r3, r13, r3, r3], &(0x7f0000002740)=[{0x5, 0x5, 0xc, 0xb}, {0x0, 0x1, 0x0, 0x6}, {0x4, 0x1, 0x7, 0x3e1595ba21074374}], 0x10, 0xfffffff7, @void, @value}, 0x94) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}}, 0x2e58d4b13e6fccb4) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r15, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r16 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r16, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$TUNSETLINK(r15, 0x400454cd, 0x304) 0s ago: executing program 3 (id=1943): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x800, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$can_j1939(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)=""/46, 0x2e}, {&(0x7f00000001c0)=""/145, 0x91}, {&(0x7f0000000280)=""/147, 0x93}, {&(0x7f0000000340)=""/189, 0xbd}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x5, &(0x7f0000001480)=""/71, 0x47}, 0x40000000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001580)={r2}, 0x4) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000016c0)=@buf={0xd2, &(0x7f00000015c0)="b7594bbbc3134277f90c5188c720568c94b9015c74d8e955d273b398c1300fe7776bc1bb3767b2e7478433c3cc6987bc4dcaf70027e07e4026dfb08a785595da14a398d5c9ba4be8b487fdcd7d9d26df9027560d7075f9e2d63db9632906d0009046798c0f40bb14126d725f851af51d2839a458f63589565e01c8ca2de5243095f705a83e3ca13c2d2eee77d11cd34c04cf0e665db3c98bc1f330c7bf0b1b74e2f74a0009f714b1a118404ebc589d208fda6b5b984870fd081918af2efb2fc5027662e27bba6ba5c2b5f9646cb76375676f"}) connect$tipc(r1, &(0x7f0000001700)=@nameseq={0x1e, 0x1, 0x0, {0x43}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$tipc(r1, &(0x7f0000001740)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x2}}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001780), 0x30000, 0x0) ioctl$SIOCGSKNS(r4, 0x894c, &(0x7f00000017c0)={'hsr0\x00', 0xc00}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x2c, r0, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7fff, 0x3c}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2404c0c0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x0, &(0x7f0000001940)=0x100, 0x4) connect$tipc(r1, &(0x7f0000001980)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x3, 0x1}}, 0x10) r6 = accept4$netrom(r1, &(0x7f00000019c0)={{0x3, @rose}, [@rose, @bcast, @rose, @default, @default, @default, @default, @null]}, &(0x7f0000001a40)=0x48, 0x800) ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f0000001a80)) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), r1) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x68, r7, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x2}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x4}, @ETHTOOL_A_RINGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000081}, 0x4004000) bpf$TOKEN_CREATE(0x24, &(0x7f0000001c40)={0x0, r3}, 0x8) write$cgroup_devices(r1, &(0x7f0000001c80)={'b', ' *:* ', 'rm\x00'}, 0x9) writev(r4, &(0x7f00000021c0)=[{&(0x7f0000001cc0)="19bac895299d55da14abc5baeef998fb430136d46419950befd49d02442a6d9e7c904243532e1aea8c06225ce7c9b525cab532730bdea05e118a5a43a6c4fe98035e64d1212afa0a737965366f1c0dd3a6fa844228ac6fafbbad4e0cb8a0c8bc5dfae1b8306af18cef2668b392ef5518149accada1470d307ec271a47f3a65a092a95db992b828f428a3d45aad7334e1a37468e20f21d1f1bfb2b1ccac03f00b594e9bb033c9b119abe212fd86957fbfda60f7174318543937bf9c3947ecd4f977f2057ec54367c2ab639644f8895ffb4c", 0xd1}, {&(0x7f0000001dc0)="e99540be979fe139500b4c09e205", 0xe}, {&(0x7f0000001e00)="d1a8d03dd734aadbbb06fce986b98dda72d46634afeb65085f6d53bb5655d29c4805ca255ecbdb0f6f56d53502f4ab417b10c41ee1feb8722962813d3f18e9e0f7501afdf66248b7ab3f", 0x4a}, {&(0x7f0000001e80)="321ce9b4b3d1c7c1474c45eefd17f2073da44f45c301398554b667a6c0e51595b8f3c09e8bdc456c742e07ab54f396", 0x2f}, {&(0x7f0000001ec0)="d72aa42e9a1dd8392a9ac4bbde1272a47782ae87b242f419b989bedb85852f486c849e2ce5ffb33c3eac876090fc5bc98a19d8a617516952e388bb561016b3020716ba07d4a3576f89e227c8fde484cc556583", 0x53}, {&(0x7f0000001f40)="db0822a9f73d72aa6e4058b60ad766a584618495fbf219", 0x17}, {&(0x7f0000001f80)="e8f5d775283a79a745898a1d1131bd05dcb53f20aec328cefe97491b064814e175c37d8bbbbf7fac826147596ca22c", 0x2f}, {&(0x7f0000001fc0)="300b4d50cb744808f33e881ca7c83f3cdc4d5dbb4e1d9c4a64ff36787c55e4f93df92c45858e658e8dd13b7ecc77157899c85b040f5d66cb976e07630a0d9ae80c6d12fa558b3ff922169ef0dabc1cd3bde50350274d010377d9a0de2ae2911679a0880a2762289fa798f4cc6ccc6d6d36940238201d649739414c2155c6d2916c3b8dd49edbe36eaf8891b8f93b270de2afb63f4359003c458bbff4ce7df384244c207c87d86ef05c61519459dbae76c576b523af1010529e84c2de9db43746f27290d8ca6ef777c20bd73f580f8866e68999d849049ce936", 0xd9}, {&(0x7f00000020c0)="e75ee710eaff18fc94271b7a6b2d927914cc27ada6fed35f90d4d2efa2a36aa1f947ab27dd286dcebd0541012121b963b96f0e751268cbea8913611c026b308d9b6d0ca6ff87b1f30047a6fb45b1690c8765eb24b8d4990e7ed69ab29870d7d3f91749bd49d69f8faeeb186cc880f5c1f0e47f6f4f40", 0x76}, {&(0x7f0000002140)="5eeaac4dde6df4c37704219ee343cf2b36bd58d8addc94896c5da1da978286c3998c8b21e4d80db64dc3be87348a6480d8c8a457ac717f3d3f7a856234fdd521e4c9e186a18fce5c4880ea0e1c350bf6ab00c0225b2077e88e1c7e6169b894ab", 0x60}], 0xa) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000023c0)={'syztnl0\x00', &(0x7f0000002340)={'syztnl0\x00', 0x0, 0x4, 0x9, 0x4, 0x1ff, 0x20, @empty, @ipv4={'\x00', '\xff\xff', @remote}, 0x20, 0x7800, 0x1, 0x7ff}}) sendto$packet(r1, &(0x7f0000002280)="d50e7d9735821437e5cea4b584f284f8b65347910788c4932693cc894d1488b0234ac68bf8407178c0b70150824f77afd6d17b44457b1ce3e1b57ba22acf19b7fab79f87ee6e4eac2e904c3f49d7e0af383e93cb27a41225194c790d504b0ea85d0f1b99fdbc8362e31c27c22b9b46d0311956e22612631a2a456697c1dd7c6de3ce9eb8ecb56fdac64805961f3b304c5fc6342321b711bdb07b9d91e872a966deead5fa14bd02b3e16efb", 0xab, 0x11, &(0x7f0000002400)={0x11, 0x15, r8, 0x1, 0x2, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000002440)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000024c0)={{{@in=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@ipv4={""/10, ""/2, @empty}}}, &(0x7f00000025c0)=0xe8) sendmsg$nl_xfrm(r9, &(0x7f0000002880)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002840)={&(0x7f0000002600)=@getae={0x224, 0x1f, 0x8, 0x40, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d2, 0x2, 0x6c}, @in=@multicast2, 0x800, 0x3501}, [@replay_esn_val={0x20, 0x17, {0x1, 0x70bd25, 0x70bd26, 0x70bd29, 0x70bd27, 0x8, [0x7ee10135]}}, @etimer_thresh={0x8, 0xc, 0x4}, @policy={0xac, 0x7, {{@in6=@dev={0xfe, 0x80, '\x00', 0x21}, @in6=@mcast1, 0x4e24, 0x5, 0x4e20, 0x0, 0x2, 0x20, 0x0, 0x32, 0x0, r10}, {0x8, 0x5, 0x0, 0xff, 0x1, 0x4, 0x4, 0x8}, {0x3, 0x0, 0x3, 0x4}, 0xf, 0x6e6bbb, 0x1, 0x1, 0x1, 0x3}}, @algo_auth_trunc={0xf0, 0x14, {{'vmac64(aes-generic)\x00'}, 0x520, 0x40, "d1f2d4654b4f34b774cf028d91b7a3f14c13d71bc63ccb4394414daa22af0f26adffe08e27032effab33d3b670024ca83deeb7ded44a2697d329a431d583e4181f18e4adc4da2b4b8ae6a9c5dc1cb5e72d11d9ffd88407f5f3d84a93a95f4321e5cc9694d114c945ad17d23a1aa10429d7111dbcc41559f9e438172af801c479d657947009b5c1a5cf601337a8954bd040311c53b7870aa88461a29ebdac73d86a4079a4"}}, @offload={0xc, 0x1c, {r8, 0x3}}, @coaddr={0x14, 0xe, @in6=@private0}]}, 0x224}, 0x1, 0x0, 0x0, 0x4c010}, 0x20048021) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000002980)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x45040404}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x20, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x78}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x2000) recvmmsg(r1, &(0x7f0000003100)=[{{&(0x7f00000029c0)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002a40)=""/242, 0xf2}, {&(0x7f0000002b40)=""/148, 0x94}, {&(0x7f0000002c00)=""/136, 0x88}, {&(0x7f0000002cc0)=""/121, 0x79}, {&(0x7f0000002d40)=""/169, 0xa9}, {&(0x7f0000002e00)=""/181, 0xb5}, {&(0x7f0000002ec0)=""/160, 0xa0}], 0x7, &(0x7f0000003000)=""/204, 0xcc}, 0x8}], 0x1, 0x2, &(0x7f0000003140)) kernel console output (not intermixed with test programs): g over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.542866][T12274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.555824][T12274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.562866][T12274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.589353][T12274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.729905][T12287] chnl_net:caif_netlink_parms(): no params data found [ 399.786033][T12274] hsr_slave_0: entered promiscuous mode [ 399.802677][T12274] hsr_slave_1: entered promiscuous mode [ 399.839760][T12274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 399.850785][T12274] Cannot create hsr debugfs directory [ 399.863935][T12190] veth0_vlan: entered promiscuous mode [ 399.901325][ T5846] Bluetooth: hci3: command tx timeout [ 400.043815][T12305] __nla_validate_parse: 1 callbacks suppressed [ 400.043835][T12305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1754'. [ 400.073398][T12190] veth1_vlan: entered promiscuous mode [ 400.103853][T12305] macvtap1: entered allmulticast mode [ 400.109273][T12305] veth0_macvtap: entered allmulticast mode [ 400.161347][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 400.170465][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 400.179522][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 400.193654][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 400.201815][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 400.224421][ T5835] Bluetooth: hci0: command tx timeout [ 400.261842][T12311] xt_hashlimit: size too large, truncated to 1048576 [ 400.352174][T12315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1755'. [ 400.412120][T12287] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.422052][T12287] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.431427][T12287] bridge_slave_0: entered allmulticast mode [ 400.439267][T12287] bridge_slave_0: entered promiscuous mode [ 400.531721][T12287] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.549619][T12287] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.559597][T12287] bridge_slave_1: entered allmulticast mode [ 400.577941][T12287] bridge_slave_1: entered promiscuous mode [ 400.673799][T12287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.690456][T12287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.709887][T12190] veth0_macvtap: entered promiscuous mode [ 400.723599][T12308] virt_wifi0 speed is unknown, defaulting to 1000 [ 400.765787][T12190] veth1_macvtap: entered promiscuous mode [ 400.811883][T12274] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.835661][T12287] team0: Port device team_slave_0 added [ 400.845139][T12287] team0: Port device team_slave_1 added [ 400.851732][T12317] tipc: Bearer : already 2 bearers with priority 10 [ 400.858964][T12317] tipc: Bearer : trying with adjusted priority [ 400.872704][T12317] tipc: Enabling of bearer rejected, failed to enable media [ 400.929863][T12274] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.983551][T12287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.998156][T12287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.035553][T12287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.103764][ T5835] Bluetooth: hci1: command tx timeout [ 401.122421][T12274] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.149006][T12287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.164976][T12287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.202876][T12287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.255396][T12190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.405030][T12274] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.456478][T12287] hsr_slave_0: entered promiscuous mode [ 401.472271][T12287] hsr_slave_1: entered promiscuous mode [ 401.478444][T12287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.505634][T12287] Cannot create hsr debugfs directory [ 401.545604][T12190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.574522][T12190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.592043][T12190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.603334][T12190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.612974][T12190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.801480][T12330] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1760'. [ 401.811180][T12330] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1760'. [ 402.024725][T12308] chnl_net:caif_netlink_parms(): no params data found [ 402.196327][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1761'. [ 402.238384][T10743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.240698][T12274] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 402.250576][T10743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.294551][T12335] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1761'. [ 402.304272][ T5835] Bluetooth: hci0: command tx timeout [ 402.304666][ T5846] Bluetooth: hci4: command tx timeout [ 402.355070][T12287] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.374464][T12274] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 402.409148][T12274] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 402.511340][T12287] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.534128][T12274] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 402.594088][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.608377][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.637671][T12287] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.688895][T12308] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.699771][T12308] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.707527][T12308] bridge_slave_0: entered allmulticast mode [ 402.714873][T12308] bridge_slave_0: entered promiscuous mode [ 402.756590][T12287] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.796176][T12308] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.804612][T12308] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.813007][T12308] bridge_slave_1: entered allmulticast mode [ 402.823063][T12308] bridge_slave_1: entered promiscuous mode [ 402.985027][T12308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.029093][T12308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.137759][T12308] team0: Port device team_slave_0 added [ 403.189261][ T5846] Bluetooth: hci1: command tx timeout [ 403.199159][T12308] team0: Port device team_slave_1 added [ 403.389271][T12308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.411007][T12308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.457109][T12308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.527948][T12308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.536946][T12308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.576362][T12308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.598307][T12287] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 403.621940][T12287] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 403.643964][T12287] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 403.691529][T12287] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 403.838789][T12308] hsr_slave_0: entered promiscuous mode [ 403.862051][T12308] hsr_slave_1: entered promiscuous mode [ 403.868431][T12308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.885136][T12308] Cannot create hsr debugfs directory [ 403.956952][T12274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.002184][T12367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1764'. [ 404.075912][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 404.088442][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 404.096527][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 404.104604][T12274] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.117173][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 404.127995][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 404.176439][ T1342] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.183605][ T1342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.246116][T12371] netlink: 'syz.3.1765': attribute type 21 has an invalid length. [ 404.271837][ T1342] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.278987][ T1342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.309469][T12371] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1765'. [ 404.347580][T12368] virt_wifi0 speed is unknown, defaulting to 1000 [ 404.381564][ T5835] Bluetooth: hci0: command tx timeout [ 404.387030][ T5835] Bluetooth: hci4: command tx timeout [ 404.572287][T12308] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.690171][T12308] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.757615][T12287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.783807][ T6484] wlan1: Trigger new scan to find an IBSS to join [ 404.835487][T12308] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.870389][T12368] chnl_net:caif_netlink_parms(): no params data found [ 404.954674][T12308] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.049730][T12287] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.097619][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.104803][ T5939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.159961][T12274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.175472][T12368] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.185654][T12368] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.198838][T12368] bridge_slave_0: entered allmulticast mode [ 405.208424][T12368] bridge_slave_0: entered promiscuous mode [ 405.228611][T12368] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.244572][T12368] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.253277][T12368] bridge_slave_1: entered allmulticast mode [ 405.260963][ T5835] Bluetooth: hci1: command tx timeout [ 405.273034][T12368] bridge_slave_1: entered promiscuous mode [ 405.307578][ T6484] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.314783][ T6484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.405727][T12368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.473478][T12368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.482132][T12392] netlink: 'syz.3.1768': attribute type 1 has an invalid length. [ 405.573178][T12308] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 405.586370][T12308] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 405.628407][T12368] team0: Port device team_slave_0 added [ 405.650196][T12368] team0: Port device team_slave_1 added [ 405.672820][T12308] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 405.699385][T12274] veth0_vlan: entered promiscuous mode [ 405.767554][T12308] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 405.853296][T12368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.860279][T12368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.887166][T12368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.916152][T12274] veth1_vlan: entered promiscuous mode [ 405.936230][T12368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.948042][T12368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.013144][T12368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.199496][T12368] hsr_slave_0: entered promiscuous mode [ 406.208340][T12368] hsr_slave_1: entered promiscuous mode [ 406.215107][T12368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.223134][ T5835] Bluetooth: hci3: command tx timeout [ 406.229226][T12368] Cannot create hsr debugfs directory [ 406.324415][T12274] veth0_macvtap: entered promiscuous mode [ 406.409640][T12274] veth1_macvtap: entered promiscuous mode [ 406.461050][ T5835] Bluetooth: hci4: command tx timeout [ 406.467772][ T5835] Bluetooth: hci0: command tx timeout [ 406.738960][T12368] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.769031][T12274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.826703][T12368] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.854000][T12274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.888681][T12274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.905029][T12274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.916199][T12274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.925361][T12274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.954113][T12308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.979868][T12368] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.018480][T12287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.063769][T12368] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.106644][T12308] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.151938][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.159125][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.205931][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.213159][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.303031][T10743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.317168][T10743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.342854][ T5835] Bluetooth: hci1: command tx timeout [ 407.363975][T12287] veth0_vlan: entered promiscuous mode [ 407.419133][T12287] veth1_vlan: entered promiscuous mode [ 407.447033][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.457194][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.502547][T12368] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 407.523647][T12368] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 407.632370][T12368] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 407.646546][T12368] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 407.758263][T12287] veth0_macvtap: entered promiscuous mode [ 407.815656][T12287] veth1_macvtap: entered promiscuous mode [ 407.823111][ T6484] wlan1: Trigger new scan to find an IBSS to join [ 407.958021][T12287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.019776][T12287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.084336][T12287] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.105923][T12287] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.127573][T12287] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.136657][T12287] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.256303][T12368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.301221][ T5835] Bluetooth: hci3: command tx timeout [ 408.318949][T12308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.374075][T12368] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.399984][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.407180][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.455059][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.462238][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.491726][ T6484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.499599][ T6484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.541882][ T5835] Bluetooth: hci4: command tx timeout [ 408.583499][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.602447][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.699595][T12308] veth0_vlan: entered promiscuous mode [ 408.752483][T12308] veth1_vlan: entered promiscuous mode [ 408.776318][ T5939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.894354][T12368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.926752][T12308] veth0_macvtap: entered promiscuous mode [ 408.938716][T12308] veth1_macvtap: entered promiscuous mode [ 408.987871][T12308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.005373][T12308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.054439][T12308] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.073992][T12308] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.091706][T12308] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.100451][T12308] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.295286][T10743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.306675][T10743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.364297][ T6484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.402009][ T6484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.719537][T12368] veth0_vlan: entered promiscuous mode [ 409.766431][T12368] veth1_vlan: entered promiscuous mode [ 409.859908][T12368] veth0_macvtap: entered promiscuous mode [ 409.868676][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 409.871406][T12368] veth1_macvtap: entered promiscuous mode [ 409.883318][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 409.891980][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 409.900185][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 409.924503][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 409.952518][T12368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.975049][T12368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.008716][T12454] virt_wifi0 speed is unknown, defaulting to 1000 [ 410.012092][T12368] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.032132][T12368] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.046141][T12368] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.058846][T12368] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.357037][ T5939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.382213][ T5939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.386490][ T5846] Bluetooth: hci3: command tx timeout [ 410.599747][ T5939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.632147][ T5939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.729916][T12454] chnl_net:caif_netlink_parms(): no params data found [ 410.843716][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 410.853435][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 410.869211][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 410.887819][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 410.897160][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 410.996381][T12454] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.004781][T12454] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.012512][T12454] bridge_slave_0: entered allmulticast mode [ 411.019762][T12454] bridge_slave_0: entered promiscuous mode [ 411.032923][T12454] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.040048][T12454] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.058831][T12454] bridge_slave_1: entered allmulticast mode [ 411.066277][T12454] bridge_slave_1: entered promiscuous mode [ 411.087355][T12462] virt_wifi0 speed is unknown, defaulting to 1000 [ 411.146709][T12454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.194153][T12454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.255236][T12454] team0: Port device team_slave_0 added [ 411.275664][T12454] team0: Port device team_slave_1 added [ 411.411405][T12454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.418415][T12454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.459846][T12454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.521405][T12454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.528420][T12454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.566826][T12454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.914927][T12454] hsr_slave_0: entered promiscuous mode [ 411.938538][T12454] hsr_slave_1: entered promiscuous mode [ 411.960400][T12454] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 411.969260][T12454] Cannot create hsr debugfs directory [ 411.981529][ T5846] Bluetooth: hci0: command tx timeout [ 412.166909][T12462] chnl_net:caif_netlink_parms(): no params data found [ 412.353016][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 412.370176][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 412.383597][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 412.394080][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 412.401980][ T5153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 412.421555][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 412.430824][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 412.440077][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 412.458186][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 412.468181][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 412.580467][T12462] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.588051][T12462] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.596476][T12462] bridge_slave_0: entered allmulticast mode [ 412.607699][T12462] bridge_slave_0: entered promiscuous mode [ 412.622058][T12484] virt_wifi0 speed is unknown, defaulting to 1000 [ 412.655452][T12462] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.666281][T12462] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.674117][T12462] bridge_slave_1: entered allmulticast mode [ 412.681896][T12462] bridge_slave_1: entered promiscuous mode [ 412.765074][T12462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.802145][T12462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.859064][T12486] virt_wifi0 speed is unknown, defaulting to 1000 [ 412.913802][T12454] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.941802][ T5846] Bluetooth: hci1: command tx timeout [ 412.961141][T12462] team0: Port device team_slave_0 added [ 412.983062][T12462] team0: Port device team_slave_1 added [ 413.075800][T12454] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.114537][T12462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.125647][T12462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.155937][T12462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.198570][T12454] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.242495][T12462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.249485][T12462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.285066][T12462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.366877][T12454] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.453744][T12497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1781'. [ 413.564076][T12462] hsr_slave_0: entered promiscuous mode [ 413.570828][T12462] hsr_slave_1: entered promiscuous mode [ 413.577191][T12462] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 413.585635][T12462] Cannot create hsr debugfs directory [ 413.865976][T12484] chnl_net:caif_netlink_parms(): no params data found [ 413.963986][T12509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1783'. [ 414.021795][T12486] chnl_net:caif_netlink_parms(): no params data found [ 414.063597][ T5846] Bluetooth: hci0: command tx timeout [ 414.106291][T12454] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 414.152390][T12454] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 414.231481][T12454] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 414.298974][T12454] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 414.438984][T12484] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.446552][T12484] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.456183][T12484] bridge_slave_0: entered allmulticast mode [ 414.464850][T12484] bridge_slave_0: entered promiscuous mode [ 414.471120][ T5846] Bluetooth: hci3: command tx timeout [ 414.492297][T12525] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1785'. [ 414.541271][ T5846] Bluetooth: hci4: command tx timeout [ 414.567568][T12484] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.587645][T12484] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.597804][T12484] bridge_slave_1: entered allmulticast mode [ 414.609491][T12484] bridge_slave_1: entered promiscuous mode [ 414.686023][T12462] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.726724][T12486] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.734359][T12486] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.741839][T12486] bridge_slave_0: entered allmulticast mode [ 414.749249][T12486] bridge_slave_0: entered promiscuous mode [ 414.812601][T12486] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.819822][T12486] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.827389][T12486] bridge_slave_1: entered allmulticast mode [ 414.835712][T12486] bridge_slave_1: entered promiscuous mode [ 414.906352][T12462] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.939923][T12484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.037597][ T51] Bluetooth: hci1: command tx timeout [ 415.045299][T12462] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.075902][T12484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.123793][T12486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.137272][T12486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.175956][T12462] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.214176][T12484] team0: Port device team_slave_0 added [ 415.225508][T12484] team0: Port device team_slave_1 added [ 415.364971][T12486] team0: Port device team_slave_0 added [ 415.392830][T12486] team0: Port device team_slave_1 added [ 415.400278][T12484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.417956][T12484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.445121][T12484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.517903][T12486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.525246][T12486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.552827][T12486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.565645][T12484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.573773][T12484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.611717][T12484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.669458][T12486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.685663][T12486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.712267][T12486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.939338][T12484] hsr_slave_0: entered promiscuous mode [ 415.947725][T12484] hsr_slave_1: entered promiscuous mode [ 415.954840][T12484] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 415.963496][T12484] Cannot create hsr debugfs directory [ 415.975818][T12486] hsr_slave_0: entered promiscuous mode [ 415.983867][T12486] hsr_slave_1: entered promiscuous mode [ 415.996386][T12486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 416.004102][T12486] Cannot create hsr debugfs directory [ 416.103886][T12462] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 416.141433][ T5846] Bluetooth: hci0: command tx timeout [ 416.174722][T12462] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 416.188895][T12462] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 416.212239][T12462] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 416.277250][T12557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1792'. [ 416.331938][T12560] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1792'. [ 416.390342][T12454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.464353][T12566] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1793'. [ 416.485129][T12566] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 416.517777][T12566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1793'. [ 416.540822][ T5846] Bluetooth: hci3: command tx timeout [ 416.577879][T12566] dummy0: entered promiscuous mode [ 416.589755][T12566] dummy0: left promiscuous mode [ 416.632033][ T5846] Bluetooth: hci4: command tx timeout [ 416.662743][T12454] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.725942][T12486] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.820379][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.827502][T12570] netlink: 'syz.3.1795': attribute type 1 has an invalid length. [ 416.827633][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.865151][T12486] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.925510][T12570] 8021q: adding VLAN 0 to HW filter on device bond5 [ 416.944285][ T6484] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.951491][ T6484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.972489][T12571] bond5: (slave gretap1): making interface the new active one [ 416.982226][T12571] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 417.055947][T12486] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.101296][ T5846] Bluetooth: hci1: command tx timeout [ 417.127289][T12576] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1796'. [ 417.203175][T12486] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.254424][T12454] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 417.329116][T12462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.455192][T12462] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.562270][ T1342] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.569447][ T1342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.618400][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.625621][ T5939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.767705][T12484] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.800345][T12486] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 417.835292][T12486] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 417.847406][T12486] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 417.864351][T12486] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 417.882976][T12595] syzkaller1: entered promiscuous mode [ 417.888490][T12595] syzkaller1: entered allmulticast mode [ 417.920157][T12484] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.027037][T12484] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.058681][T12454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.235762][ T5846] Bluetooth: hci0: command tx timeout [ 418.248068][T12484] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.340222][T12454] veth0_vlan: entered promiscuous mode [ 418.384371][T12486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.469411][T12454] veth1_vlan: entered promiscuous mode [ 418.507131][T12486] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.592009][T12462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.607244][ T6484] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.614521][ T6484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.632688][ T5846] Bluetooth: hci3: command tx timeout [ 418.702273][ T5846] Bluetooth: hci4: command tx timeout [ 418.711884][T10743] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.719065][T10743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.758487][T12484] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 418.806796][T12484] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 418.832217][T12484] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 418.894669][T12484] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 418.913652][T12454] veth0_macvtap: entered promiscuous mode [ 418.976967][T12454] veth1_macvtap: entered promiscuous mode [ 419.052901][T12462] veth0_vlan: entered promiscuous mode [ 419.068856][T12454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.096946][T12454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.165241][T12462] veth1_vlan: entered promiscuous mode [ 419.183358][ T5846] Bluetooth: hci1: command tx timeout [ 419.195357][T12454] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.220855][T12454] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.229612][T12454] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.239857][T12454] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.526025][T12462] veth0_macvtap: entered promiscuous mode [ 419.558459][T12462] veth1_macvtap: entered promiscuous mode [ 419.584203][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.596797][T12486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.603479][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.627716][T12484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.703152][T12462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.746119][T12462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.758111][T12638] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 419.787408][T12484] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.824266][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.835042][T12462] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.840569][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.852613][T12462] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.870719][T12462] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.890633][T12462] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.945462][T12486] veth0_vlan: entered promiscuous mode [ 419.965713][ T1342] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.972981][ T1342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.012483][ T6484] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.019687][ T6484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.038476][T12486] veth1_vlan: entered promiscuous mode [ 420.202511][T12647] netlink: 'syz.3.1809': attribute type 49 has an invalid length. [ 420.330251][T12486] veth0_macvtap: entered promiscuous mode [ 420.369514][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.378998][T12486] veth1_macvtap: entered promiscuous mode [ 420.387097][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.431776][T12486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.528292][T12486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.606928][T12654] netlink: 'syz.3.1810': attribute type 9 has an invalid length. [ 420.615205][T12654] netlink: 211988 bytes leftover after parsing attributes in process `syz.3.1810'. [ 420.628395][T12486] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.653771][T12486] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.674319][T12486] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.708500][T12486] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.717748][ T5846] Bluetooth: hci3: command tx timeout [ 420.794257][ T51] Bluetooth: hci4: command tx timeout [ 420.820916][ T1342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.828799][ T1342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.069091][ T1342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.091924][ T1342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.136813][T12484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.170999][ T1342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.224239][ T1342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.759575][T12484] veth0_vlan: entered promiscuous mode [ 421.779446][T12484] veth1_vlan: entered promiscuous mode [ 421.815110][T12484] veth0_macvtap: entered promiscuous mode [ 421.846084][T12484] veth1_macvtap: entered promiscuous mode [ 421.904290][T12484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.942670][T12484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.975286][T12484] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.002708][T12484] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.026731][T12484] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.041484][T12484] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.282743][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.306747][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.307172][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 422.332946][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 422.347447][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 422.364162][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 422.391289][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 422.421438][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.429315][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.509853][T12664] virt_wifi0 speed is unknown, defaulting to 1000 [ 422.610414][T12668] netlink: 'syz.3.1811': attribute type 2 has an invalid length. [ 422.619666][T12668] netlink: 'syz.3.1811': attribute type 8 has an invalid length. [ 422.650940][T12668] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1811'. [ 422.989093][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 423.000837][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 423.009959][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 423.019079][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 423.027713][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 423.096334][T12672] virt_wifi0 speed is unknown, defaulting to 1000 [ 423.215375][T12664] chnl_net:caif_netlink_parms(): no params data found [ 423.613131][T12664] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.630747][T12664] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.638173][T12664] bridge_slave_0: entered allmulticast mode [ 423.646610][T12664] bridge_slave_0: entered promiscuous mode [ 423.683073][T12664] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.690263][T12664] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.711257][T12664] bridge_slave_1: entered allmulticast mode [ 423.719315][T12664] bridge_slave_1: entered promiscuous mode [ 423.814764][T12672] chnl_net:caif_netlink_parms(): no params data found [ 423.885259][T12664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.961493][T12664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.165546][T12664] team0: Port device team_slave_0 added [ 424.222654][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 424.224038][T12664] team0: Port device team_slave_1 added [ 424.241094][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 424.249226][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 424.265102][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 424.274249][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 424.409385][T12698] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1814'. [ 424.451894][T12664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.458911][T12664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.501825][ T51] Bluetooth: hci0: command tx timeout [ 424.512085][T12664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.523689][T12672] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.548574][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 424.549201][T12672] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.558427][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 424.572211][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 424.576724][T12672] bridge_slave_0: entered allmulticast mode [ 424.582589][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 424.598942][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 424.611260][T12672] bridge_slave_0: entered promiscuous mode [ 424.624628][T12672] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.639533][T12672] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.647172][T12672] bridge_slave_1: entered allmulticast mode [ 424.655449][T12672] bridge_slave_1: entered promiscuous mode [ 424.741992][T12672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.761766][T12664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.781266][T12664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.835293][T12664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.869101][T12672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.919138][T12693] virt_wifi0 speed is unknown, defaulting to 1000 [ 425.045122][T12672] team0: Port device team_slave_0 added [ 425.104649][ T51] Bluetooth: hci1: command tx timeout [ 425.125437][T12664] hsr_slave_0: entered promiscuous mode [ 425.132895][T12664] hsr_slave_1: entered promiscuous mode [ 425.139400][T12664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.147741][T12664] Cannot create hsr debugfs directory [ 425.164391][T12672] team0: Port device team_slave_1 added [ 425.171819][T12700] virt_wifi0 speed is unknown, defaulting to 1000 [ 425.297065][T12672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.304291][T12672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.348953][T12672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.437347][T12672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.444830][T12672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.488429][T12672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.688235][T12672] hsr_slave_0: entered promiscuous mode [ 425.702081][T12672] hsr_slave_1: entered promiscuous mode [ 425.708484][T12672] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.761030][T12672] Cannot create hsr debugfs directory [ 426.089925][T12722] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1819'. [ 426.340457][T12664] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.384864][ T51] Bluetooth: hci3: command tx timeout [ 426.400645][T12693] chnl_net:caif_netlink_parms(): no params data found [ 426.440081][T12664] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.576137][ T51] Bluetooth: hci0: command tx timeout [ 426.622019][ T51] Bluetooth: hci4: command tx timeout [ 426.657812][T12664] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.798371][T12664] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.890284][T12700] chnl_net:caif_netlink_parms(): no params data found [ 427.129673][T12672] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.187466][ T51] Bluetooth: hci1: command tx timeout [ 427.225478][T12693] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.232795][T12693] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.240101][T12693] bridge_slave_0: entered allmulticast mode [ 427.248837][T12693] bridge_slave_0: entered promiscuous mode [ 427.293301][T12700] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.301448][T12700] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.308707][T12700] bridge_slave_0: entered allmulticast mode [ 427.333884][T12700] bridge_slave_0: entered promiscuous mode [ 427.350783][T12693] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.371017][T12693] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.378409][T12693] bridge_slave_1: entered allmulticast mode [ 427.401834][T12693] bridge_slave_1: entered promiscuous mode [ 427.527433][T12672] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.563125][T12700] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.571688][T12700] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.579084][T12700] bridge_slave_1: entered allmulticast mode [ 427.588496][T12700] bridge_slave_1: entered promiscuous mode [ 427.603118][T12693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.640295][T12693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.698689][T12672] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.733738][T12700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.792456][T12672] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.812535][T12700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.894157][T12693] team0: Port device team_slave_0 added [ 427.949057][T12700] team0: Port device team_slave_0 added [ 427.974569][T12693] team0: Port device team_slave_1 added [ 428.013312][T12700] team0: Port device team_slave_1 added [ 428.136595][T12693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.150378][T12693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.193984][T12693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.215488][T12700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.225481][T12700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.251916][T12700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.265485][T12693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.284282][T12693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.311936][T12693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.363019][T12700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.370012][T12700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.400218][T12700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.464188][ T51] Bluetooth: hci3: command tx timeout [ 428.550460][T12769] unsupported nla_type 52263 [ 428.567295][T12700] hsr_slave_0: entered promiscuous mode [ 428.574963][T12700] hsr_slave_1: entered promiscuous mode [ 428.581564][T12700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 428.592184][T12700] Cannot create hsr debugfs directory [ 428.605794][T12693] hsr_slave_0: entered promiscuous mode [ 428.612520][T12693] hsr_slave_1: entered promiscuous mode [ 428.618799][T12693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 428.627361][ T51] Bluetooth: hci0: command tx timeout [ 428.633192][T12693] Cannot create hsr debugfs directory [ 428.700921][ T51] Bluetooth: hci4: command tx timeout [ 428.728881][T12664] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 428.832948][T12664] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 428.951486][T12773] "syz.3.1827" (12773) uses obsolete ecb(arc4) skcipher [ 428.957608][T12664] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 429.011624][T12664] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 429.193685][T12672] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 429.265263][ T51] Bluetooth: hci1: command tx timeout [ 429.353039][T12672] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 429.451048][T12672] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 429.473189][T12672] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 429.724596][T12700] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.838952][T12700] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.942535][T12700] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.988058][T12664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.083242][T12700] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.127217][T12664] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.164276][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.171490][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.245958][T12672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.266465][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.273679][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.345444][T12672] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.401885][ T6325] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.409101][ T6325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.460842][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.468101][ T5939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.541402][ T51] Bluetooth: hci3: command tx timeout [ 430.692267][T12819] netlink: 'syz.3.1834': attribute type 10 has an invalid length. [ 430.701047][ T51] Bluetooth: hci0: command tx timeout [ 430.782815][ T51] Bluetooth: hci4: command tx timeout [ 430.793708][T12693] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.851980][T12700] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 430.925547][T12693] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.989117][T12700] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 431.097792][T12693] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.184301][T12700] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 431.222748][T12700] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 431.294857][T12693] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.340836][ T51] Bluetooth: hci1: command tx timeout [ 431.428653][T12672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.568290][T12855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1839'. [ 431.738354][T12664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.806855][ T9700] virt_wifi0 speed is unknown, defaulting to 1000 [ 431.821681][ T9700] infiniband sy{0: ib_query_port failed (-19) [ 431.828069][T12693] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 431.872646][T12693] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 431.895454][T12693] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 431.907372][T12693] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 432.070073][T12672] veth0_vlan: entered promiscuous mode [ 432.134299][T12672] veth1_vlan: entered promiscuous mode [ 432.193882][T12664] veth0_vlan: entered promiscuous mode [ 432.230445][T12700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.264163][T12664] veth1_vlan: entered promiscuous mode [ 432.322738][T12700] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.344716][T12672] veth0_macvtap: entered promiscuous mode [ 432.369580][ T6325] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.376824][ T6325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.402833][T12672] veth1_macvtap: entered promiscuous mode [ 432.428213][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.435413][ T5939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.466562][T12664] veth0_macvtap: entered promiscuous mode [ 432.494505][T12693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.549603][T12664] veth1_macvtap: entered promiscuous mode [ 432.586609][T12672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.621817][ T51] Bluetooth: hci3: command tx timeout [ 432.624127][T12693] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.644729][T12672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.660122][T12700] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 432.685257][T12664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.706796][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.714060][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.730243][T12672] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.740091][T12672] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.749618][T12672] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.761405][T12672] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.787984][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.795214][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.814260][T12664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.862330][ T51] Bluetooth: hci4: command tx timeout [ 432.912046][T12664] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.936399][T12664] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.956656][T12664] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.965618][T12664] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.161051][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.168936][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.285789][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.301927][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.432661][ T6484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.452094][T12700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.455196][ T6484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.676792][T10743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.711956][T10743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.915376][T12693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.991810][T12873] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 434.027629][T12693] veth0_vlan: entered promiscuous mode [ 434.122636][T12693] veth1_vlan: entered promiscuous mode [ 434.288209][T12693] veth0_macvtap: entered promiscuous mode [ 434.332732][T12693] veth1_macvtap: entered promiscuous mode [ 434.375393][T12693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.390311][T12693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.430128][T12693] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.451697][T12693] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.460477][T12693] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.479648][T12693] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.618446][T12700] veth0_vlan: entered promiscuous mode [ 434.663272][T12700] veth1_vlan: entered promiscuous mode [ 434.855720][T12700] veth0_macvtap: entered promiscuous mode [ 434.928305][T12700] veth1_macvtap: entered promiscuous mode [ 434.961942][ T6484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.969824][ T6484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.059115][T12700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.089472][T12700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.133056][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.164593][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.174488][T12700] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.190622][T12700] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.199453][T12700] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.226804][T12700] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.367206][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 435.376908][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 435.385675][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 435.411068][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 435.441169][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 435.534669][T10743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.568097][T10743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.599347][T10743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.617995][T10743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.047849][T12886] chnl_net:caif_netlink_parms(): no params data found [ 436.125639][T12895] xt_hashlimit: Unknown mode mask 115, kernel too old? [ 436.504335][T12886] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.520751][T12886] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.528137][T12886] bridge_slave_0: entered allmulticast mode [ 436.553000][T12886] bridge_slave_0: entered promiscuous mode [ 436.574741][T12886] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.590840][T12886] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.598221][T12886] bridge_slave_1: entered allmulticast mode [ 436.624418][T12886] bridge_slave_1: entered promiscuous mode [ 436.849326][T12904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1844'. [ 436.868410][T12490] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 436.889387][T12886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.890927][T12902] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1844'. [ 436.911891][T12490] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 436.923324][T12886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.933315][T12490] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 436.953498][T12490] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 436.970344][T12904] netlink: 'syz.3.1844': attribute type 7 has an invalid length. [ 436.983144][T12490] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 436.994983][T12902] netlink: 'syz.3.1844': attribute type 7 has an invalid length. [ 437.001140][T12904] netlink: 'syz.3.1844': attribute type 8 has an invalid length. [ 437.003170][T12902] netlink: 'syz.3.1844': attribute type 8 has an invalid length. [ 437.010712][T12904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1844'. [ 437.018377][T12902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1844'. [ 437.126439][T12886] team0: Port device team_slave_0 added [ 437.176384][T12886] team0: Port device team_slave_1 added [ 437.338930][T12886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.361080][T12886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.451545][T12886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.503788][ T5846] Bluetooth: hci0: command tx timeout [ 437.528636][T12886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.549390][T12886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.559529][T12490] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 437.611568][T12490] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 437.618751][T12886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.631154][T12490] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 437.658567][T12490] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 437.671086][T12490] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 437.706187][T12914] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.760107][T12886] hsr_slave_0: entered promiscuous mode [ 437.771930][T12886] hsr_slave_1: entered promiscuous mode [ 437.778340][T12886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 437.786464][T12886] Cannot create hsr debugfs directory [ 437.822157][T12914] netlink: 284 bytes leftover after parsing attributes in process `syz.3.1846'. [ 437.931843][T12490] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 437.941277][T12490] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 437.949100][T12490] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 437.971363][T12490] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 437.980267][T12490] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 438.509430][T12925] netlink: 'syz.3.1849': attribute type 142 has an invalid length. [ 438.662718][T12886] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.854490][T12903] chnl_net:caif_netlink_parms(): no params data found [ 438.964126][T12886] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.050143][T12911] chnl_net:caif_netlink_parms(): no params data found [ 439.101204][ T5846] Bluetooth: hci1: command tx timeout [ 439.144385][T12886] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.283354][T12886] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.298441][T12903] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.306133][T12903] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.313585][T12903] bridge_slave_0: entered allmulticast mode [ 439.322974][T12903] bridge_slave_0: entered promiscuous mode [ 439.331821][T12903] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.351003][T12903] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.358472][T12903] bridge_slave_1: entered allmulticast mode [ 439.367180][T12903] bridge_slave_1: entered promiscuous mode [ 439.475934][T12903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.503964][T12903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.581355][ T5846] Bluetooth: hci0: command tx timeout [ 439.636823][T12903] team0: Port device team_slave_0 added [ 439.657750][T12911] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.667530][T12911] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.675667][T12911] bridge_slave_0: entered allmulticast mode [ 439.685224][T12911] bridge_slave_0: entered promiscuous mode [ 439.697385][T12903] team0: Port device team_slave_1 added [ 439.733657][T12917] chnl_net:caif_netlink_parms(): no params data found [ 439.743506][ T5846] Bluetooth: hci3: command tx timeout [ 439.763328][T12911] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.771878][T12911] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.779541][T12911] bridge_slave_1: entered allmulticast mode [ 439.787108][T12911] bridge_slave_1: entered promiscuous mode [ 439.812183][T12903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.819178][T12903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.846103][T12903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.939155][T12903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.947585][T12903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.982199][T12903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.012474][T12911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.061205][ T5846] Bluetooth: hci4: command tx timeout [ 440.121430][T12911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.251669][T12911] team0: Port device team_slave_0 added [ 440.288743][T12886] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 440.288897][T12963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1855'. [ 440.325617][T12903] hsr_slave_0: entered promiscuous mode [ 440.332776][T12903] hsr_slave_1: entered promiscuous mode [ 440.339117][T12903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 440.347179][T12903] Cannot create hsr debugfs directory [ 440.384089][T12911] team0: Port device team_slave_1 added [ 440.390285][T12886] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 440.404944][T12886] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 440.483560][T12917] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.494901][T12917] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.502522][T12917] bridge_slave_0: entered allmulticast mode [ 440.516507][T12966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1856'. [ 440.521384][T12917] bridge_slave_0: entered promiscuous mode [ 440.586516][T12886] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 440.599540][T12966] chnl_net:caif_netlink_parms(): no params data found [ 440.628009][T12917] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.641113][T12917] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.648516][T12917] bridge_slave_1: entered allmulticast mode [ 440.657498][T12917] bridge_slave_1: entered promiscuous mode [ 440.713441][T12911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.720437][T12911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.748329][T12911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.878042][T12911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.888348][T12911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.926019][T12911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.958063][T12968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1857'. [ 440.964681][T12917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.987822][T12917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.148597][T12911] hsr_slave_0: entered promiscuous mode [ 441.155749][T12911] hsr_slave_1: entered promiscuous mode [ 441.164086][T12911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 441.172977][T12911] Cannot create hsr debugfs directory [ 441.191142][ T5846] Bluetooth: hci1: command tx timeout [ 441.272872][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 441.315315][T12917] team0: Port device team_slave_0 added [ 441.359994][T12917] team0: Port device team_slave_1 added [ 441.506757][T12917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.514374][T12917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.541937][T12917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.573967][T12917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.583245][T12917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.615163][T12917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.661604][ T5846] Bluetooth: hci0: command tx timeout [ 441.821105][ T5846] Bluetooth: hci3: command tx timeout [ 441.829716][T12917] hsr_slave_0: entered promiscuous mode [ 441.837136][T12917] hsr_slave_1: entered promiscuous mode [ 441.844568][T12917] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 441.852351][T12917] Cannot create hsr debugfs directory [ 441.927911][T12903] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.054398][T12903] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.140921][ T5846] Bluetooth: hci4: command tx timeout [ 442.179877][T12903] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.318368][T12903] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.338463][T12989] syzkaller1: entered promiscuous mode [ 442.344371][T12989] syzkaller1: entered allmulticast mode [ 442.344528][T12990] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 442.565964][T12886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.648989][T12911] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.731508][T12886] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.785596][T12911] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.836880][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.844135][ T5939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.863987][T12999] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 442.877032][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.884238][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.934323][T12911] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.015081][T12911] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.260965][ T5846] Bluetooth: hci1: command tx timeout [ 443.305379][T12903] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 443.356742][T12917] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.378856][T12903] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 443.405123][T12903] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 443.418356][T12903] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 443.470452][T12917] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.549070][T12917] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.586587][T12886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.646719][T12917] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.741409][ T5846] Bluetooth: hci0: command tx timeout [ 443.793961][T12886] veth0_vlan: entered promiscuous mode [ 443.801027][T13011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1865'. [ 443.839042][T12903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.879079][T12886] veth1_vlan: entered promiscuous mode [ 443.902331][ T5846] Bluetooth: hci3: command tx timeout [ 444.002135][T12903] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.027379][T13015] team_slave_0: mtu greater than device maximum [ 444.072138][ T176] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.079335][ T176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.112764][T12911] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 444.125754][T12911] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 444.146241][T12911] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 444.175816][ T176] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.183058][ T176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.221345][ T5846] Bluetooth: hci4: command tx timeout [ 444.283828][T12911] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 444.316150][T12886] veth0_macvtap: entered promiscuous mode [ 444.364383][T12886] veth1_macvtap: entered promiscuous mode [ 444.532636][T12886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.563433][T13029] Bluetooth: MGMT ver 1.23 [ 444.588076][T12917] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 444.617443][T12886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.642792][T13029] netlink: 'syz.3.1869': attribute type 4 has an invalid length. [ 444.667913][T12917] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 444.698466][T12917] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 444.754586][T12917] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 444.824476][T12886] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.840841][T12886] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.849619][T12886] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.872936][T13035] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1870'. [ 444.884145][T12886] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.178371][T12911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.306111][T12903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.320770][T10743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.328728][T10743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.344178][ T5846] Bluetooth: hci1: command tx timeout [ 445.391349][T12911] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.398971][T13048] netlink: 'syz.3.1872': attribute type 7 has an invalid length. [ 445.455183][ T176] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.462397][ T176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.542258][T13053] netlink: 'syz.3.1873': attribute type 3 has an invalid length. [ 445.543331][T10743] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.557291][T10743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.571546][ T6484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.579406][ T6484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.580224][T12917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.669295][T12903] veth0_vlan: entered promiscuous mode [ 445.723754][T12917] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.780265][T12903] veth1_vlan: entered promiscuous mode [ 445.827490][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.834719][ T5939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.951972][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.959251][ T5939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.982581][ T5846] Bluetooth: hci3: command tx timeout [ 446.144206][T12903] veth0_macvtap: entered promiscuous mode [ 446.205720][T12903] veth1_macvtap: entered promiscuous mode [ 446.302315][ T5846] Bluetooth: hci4: command tx timeout [ 446.320423][T12903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.373336][T12903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.463731][T12903] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.500543][T12903] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.533298][T12903] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.562044][T12903] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.648012][T12911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.876582][ T176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.900965][ T176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.931345][T12911] veth0_vlan: entered promiscuous mode [ 446.949177][T12917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.998302][T12911] veth1_vlan: entered promiscuous mode [ 447.054718][ T6484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.071047][ T6484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.196267][T12911] veth0_macvtap: entered promiscuous mode [ 447.216675][T12911] veth1_macvtap: entered promiscuous mode [ 447.328253][T12911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.365156][T12911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.412378][T12911] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.422377][T12911] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.438697][T12911] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.448997][T12911] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.659804][T12917] veth0_vlan: entered promiscuous mode [ 447.828406][T12917] veth1_vlan: entered promiscuous mode [ 447.951815][ T5939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.959690][ T5939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.066119][T12917] veth0_macvtap: entered promiscuous mode [ 448.076901][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.097662][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.097870][T12917] veth1_macvtap: entered promiscuous mode [ 448.166228][T12917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.186676][T12917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.233133][T12917] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.253067][T12917] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.261920][T12917] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.270973][T12917] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.591031][ T6484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.598942][ T6484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.639781][T12490] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 448.663384][T12490] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 448.671979][T12490] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 448.680029][T12490] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 448.691730][T12490] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 448.743565][ T6484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.777389][ T6484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.368506][T13078] chnl_net:caif_netlink_parms(): no params data found [ 449.571071][T12490] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 449.598168][T12490] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 449.611823][T12490] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 449.621982][T12490] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 449.629813][T12490] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 449.713968][T13078] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.732009][T13078] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.743387][T13078] bridge_slave_0: entered allmulticast mode [ 449.765051][T13078] bridge_slave_0: entered promiscuous mode [ 449.775605][T13078] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.796946][T13078] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.805173][T13078] bridge_slave_1: entered allmulticast mode [ 449.813596][T13078] bridge_slave_1: entered promiscuous mode [ 449.912502][T13078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.944613][T13078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.075828][T13078] team0: Port device team_slave_0 added [ 450.106111][T13078] team0: Port device team_slave_1 added [ 450.236711][T13078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.247642][T13078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.248333][T12490] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 450.274405][T13078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.313474][T12490] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 450.322006][T12490] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 450.330163][T12490] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 450.338479][T13078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.345707][T13078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.361067][T12490] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 450.391371][ C1] vcan0: j1939_tp_rxtimer: 0xffff888068ac5000: rx timeout, send abort [ 450.410340][T13078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.579862][T13078] hsr_slave_0: entered promiscuous mode [ 450.592525][T13078] hsr_slave_1: entered promiscuous mode [ 450.622463][T13078] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 450.630071][T13078] Cannot create hsr debugfs directory [ 450.781023][T12490] Bluetooth: hci0: command tx timeout [ 450.899654][ C1] vcan0: j1939_tp_rxtimer: 0xffff888068ac5000: abort rx timeout. Force session deactivation [ 450.934303][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 450.945628][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 450.953775][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 450.962096][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 450.971842][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 451.063075][T13099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1878'. [ 451.404388][T13078] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.466944][T13087] chnl_net:caif_netlink_parms(): no params data found [ 451.663976][T12490] Bluetooth: hci1: command tx timeout [ 451.664572][T13108] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1880'. [ 451.694778][T13078] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.873860][T13078] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.027251][T13078] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.064097][T13092] chnl_net:caif_netlink_parms(): no params data found [ 452.078191][T13087] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.086345][T13087] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.093873][T13087] bridge_slave_0: entered allmulticast mode [ 452.102021][T13087] bridge_slave_0: entered promiscuous mode [ 452.127074][T13087] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.139767][T13087] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.152086][T13087] bridge_slave_1: entered allmulticast mode [ 452.162536][T13087] bridge_slave_1: entered promiscuous mode [ 452.265643][T13087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.309521][T13087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.436553][T13087] team0: Port device team_slave_0 added [ 452.461209][T12490] Bluetooth: hci3: command tx timeout [ 452.505890][T13087] team0: Port device team_slave_1 added [ 452.668869][T13092] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.686909][T13092] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.695349][T13092] bridge_slave_0: entered allmulticast mode [ 452.705372][T13092] bridge_slave_0: entered promiscuous mode [ 452.729027][T13087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.736310][T13087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.836118][T13087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.861408][T12490] Bluetooth: hci0: command tx timeout [ 452.876348][T13092] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.900954][T13092] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.911213][T13092] bridge_slave_1: entered allmulticast mode [ 452.919308][T13092] bridge_slave_1: entered promiscuous mode [ 453.008692][T13087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.016184][T13087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.021621][T12490] Bluetooth: hci4: command tx timeout [ 453.049333][T13087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.100444][T13092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.117426][T13092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.148400][T13096] chnl_net:caif_netlink_parms(): no params data found [ 453.176050][T13078] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 453.297181][T13078] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 453.326380][T13092] team0: Port device team_slave_0 added [ 453.346656][T13092] team0: Port device team_slave_1 added [ 453.386807][T13087] hsr_slave_0: entered promiscuous mode [ 453.397892][T13087] hsr_slave_1: entered promiscuous mode [ 453.412868][T13087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 453.420542][T13087] Cannot create hsr debugfs directory [ 453.452069][T13078] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 453.477567][T13078] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 453.634361][T13092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.651222][T13092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.689815][T13092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.734558][T13092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.742300][T12490] Bluetooth: hci1: command tx timeout [ 453.747862][T13092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.790228][T13092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.885447][T13147] netlink: 'syz.3.1886': attribute type 1 has an invalid length. [ 453.893492][T13147] netlink: 'syz.3.1886': attribute type 2 has an invalid length. [ 453.906951][T13147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1886'. [ 454.102601][T13096] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.109869][T13096] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.123430][T13096] bridge_slave_0: entered allmulticast mode [ 454.133092][T13096] bridge_slave_0: entered promiscuous mode [ 454.199345][T13096] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.206892][T13096] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.214863][T13096] bridge_slave_1: entered allmulticast mode [ 454.226154][T13096] bridge_slave_1: entered promiscuous mode [ 454.309778][T13092] hsr_slave_0: entered promiscuous mode [ 454.327486][T13092] hsr_slave_1: entered promiscuous mode [ 454.340361][T13092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 454.353625][T13092] Cannot create hsr debugfs directory [ 454.525158][T13096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.541147][T12490] Bluetooth: hci3: command tx timeout [ 454.616215][T13096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.782738][T13087] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.846775][T13096] team0: Port device team_slave_0 added [ 454.912166][T13096] team0: Port device team_slave_1 added [ 454.938107][T13087] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.941689][T12490] Bluetooth: hci0: command tx timeout [ 455.077610][T13087] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.096280][T13096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.101154][T12490] Bluetooth: hci4: command tx timeout [ 455.111361][T13096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.111569][T13096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.187831][T13087] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.205598][T13096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.222581][T13096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.249190][T13096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.282597][T13078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.504315][T13096] hsr_slave_0: entered promiscuous mode [ 455.528288][T13096] hsr_slave_1: entered promiscuous mode [ 455.535688][T13164] nbd: must specify at least one socket [ 455.550823][T13096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 455.558430][T13096] Cannot create hsr debugfs directory [ 455.625748][T13078] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.783691][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.790964][ T5939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.821729][T12490] Bluetooth: hci1: command tx timeout [ 455.873989][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.881245][ T5939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.152351][T13092] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.173194][T13087] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 456.185587][T13087] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 456.229336][T13092] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.274704][T13087] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 456.291162][T13087] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 456.349891][T13092] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.478095][T13092] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.629518][T12490] Bluetooth: hci3: command tx timeout [ 456.784240][T13096] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.964353][T13096] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.028421][T12490] Bluetooth: hci0: command tx timeout [ 457.034989][T13078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.075422][T13087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.121501][T13193] netlink: 'syz.3.1897': attribute type 1 has an invalid length. [ 457.129304][T13193] netlink: 'syz.3.1897': attribute type 2 has an invalid length. [ 457.142429][T13096] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.169659][T13193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1897'. [ 457.181066][T12490] Bluetooth: hci4: command tx timeout [ 457.198155][T13087] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.273219][T13096] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.316321][ T176] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.323539][ T176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.385221][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.392425][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.445899][T13078] veth0_vlan: entered promiscuous mode [ 457.558390][T13078] veth1_vlan: entered promiscuous mode [ 457.705839][T13096] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 457.726929][T13078] veth0_macvtap: entered promiscuous mode [ 457.753804][T13096] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 457.907738][T12490] Bluetooth: hci1: command tx timeout [ 457.941079][T13078] veth1_macvtap: entered promiscuous mode [ 457.950673][T13096] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 457.990195][T13096] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 458.354743][T13078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.368917][T13078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.380280][T13078] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.412756][T13078] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.421606][T13078] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.430315][T13078] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.448141][T13092] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 458.467068][T13092] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 458.511241][T13092] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 458.623434][T13092] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 458.647627][T13087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.701520][ T5846] Bluetooth: hci3: command tx timeout [ 458.929960][T13233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1905'. [ 459.022677][ T6325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.040996][ T6325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.091865][T13087] veth0_vlan: entered promiscuous mode [ 459.150114][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.167603][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.238723][T13096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.263229][ T5846] Bluetooth: hci4: command tx timeout [ 459.276039][T13087] veth1_vlan: entered promiscuous mode [ 459.486319][T13096] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.503170][T13092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.526498][T13087] veth0_macvtap: entered promiscuous mode [ 459.561559][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.568765][ T5939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.592109][T13244] netlink: 'syz.3.1908': attribute type 1 has an invalid length. [ 459.619295][T13087] veth1_macvtap: entered promiscuous mode [ 459.624347][T13244] netlink: 'syz.3.1908': attribute type 2 has an invalid length. [ 459.644939][T13245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1908'. [ 459.666861][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.674111][ T5939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.770336][T13092] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.802190][T13087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.865840][T13087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.897983][ T6484] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.905204][ T6484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.970125][ T6484] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.977390][ T6484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.008603][T13087] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.031927][T13087] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.040969][T13087] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.049697][T13087] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.355762][ T6325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.392672][ T6325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.493628][ T5939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.513397][ T5939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.790960][T13096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.006950][T13092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.175387][T13092] veth0_vlan: entered promiscuous mode [ 461.229131][T13092] veth1_vlan: entered promiscuous mode [ 461.367884][T13092] veth0_macvtap: entered promiscuous mode [ 461.389008][T13092] veth1_macvtap: entered promiscuous mode [ 461.499336][T13092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.526511][T13092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.570211][T13092] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.585566][T13092] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.594411][T13092] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.603683][T13092] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.622210][T13096] veth0_vlan: entered promiscuous mode [ 461.672406][T13096] veth1_vlan: entered promiscuous mode [ 461.854680][T13096] veth0_macvtap: entered promiscuous mode [ 461.890663][ T6484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.898547][ T6484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.929524][T13096] veth1_macvtap: entered promiscuous mode [ 462.023969][T13096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.050420][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.079945][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.080163][T13096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.128097][T12490] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 462.128843][T13096] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.145581][T13096] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.146795][T12490] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 462.154867][T13096] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.180092][T13096] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.181200][T12490] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 462.203466][T12490] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 462.212919][T12490] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 462.592068][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.599952][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.709038][T10743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.717353][T10743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.878254][T13261] chnl_net:caif_netlink_parms(): no params data found [ 463.480852][T12490] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 463.489330][T13261] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.499151][T12490] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 463.516060][T12490] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 463.534366][T13261] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.545908][T12490] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 463.562638][T12490] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 463.569948][T13261] bridge_slave_0: entered allmulticast mode [ 463.584378][T13261] bridge_slave_0: entered promiscuous mode [ 463.619528][T13261] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.627134][T13261] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.637623][T13261] bridge_slave_1: entered allmulticast mode [ 463.654077][T13261] bridge_slave_1: entered promiscuous mode [ 463.940269][T13261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.964053][T13261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.133948][T13261] team0: Port device team_slave_0 added [ 464.184400][T13261] team0: Port device team_slave_1 added [ 464.305341][T12490] Bluetooth: hci0: command tx timeout [ 464.401170][T13261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.408181][T13261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.461501][T13261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.501643][T13261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.508645][T13261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.565129][T13261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.577799][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 464.586598][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 464.594531][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 464.603314][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 464.611209][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 464.857691][T13261] hsr_slave_0: entered promiscuous mode [ 464.890216][T13261] hsr_slave_1: entered promiscuous mode [ 464.920090][T13261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 464.952688][T13261] Cannot create hsr debugfs directory [ 465.271326][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 465.280347][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 465.291267][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 465.301881][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 465.309703][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 465.452762][T13297] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1912'. [ 465.584201][T12490] Bluetooth: hci1: command tx timeout [ 465.633326][T13273] chnl_net:caif_netlink_parms(): no params data found [ 466.036241][T13273] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.045106][T13273] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.053063][T13273] bridge_slave_0: entered allmulticast mode [ 466.073278][T13273] bridge_slave_0: entered promiscuous mode [ 466.157016][T13261] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.185375][T13273] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.193334][T13273] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.201237][T13273] bridge_slave_1: entered allmulticast mode [ 466.209461][T13273] bridge_slave_1: entered promiscuous mode [ 466.318194][T13261] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.353968][T13273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.387978][T12490] Bluetooth: hci0: command tx timeout [ 466.396209][T13273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.459594][T13261] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.589416][T13284] chnl_net:caif_netlink_parms(): no params data found [ 466.628629][T13261] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.687800][T13273] team0: Port device team_slave_0 added [ 466.705129][T12490] Bluetooth: hci3: command tx timeout [ 466.708781][T13273] team0: Port device team_slave_1 added [ 466.808616][T13321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1917'. [ 467.051640][T13273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.058639][T13273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.112935][T13273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.126948][T13273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.134096][T13273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.161095][T13273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.351926][T12490] Bluetooth: hci4: command tx timeout [ 467.356958][T13284] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.365568][T13284] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.374099][T13284] bridge_slave_0: entered allmulticast mode [ 467.382759][T13284] bridge_slave_0: entered promiscuous mode [ 467.400387][T13284] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.411979][T13284] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.419490][T13284] bridge_slave_1: entered allmulticast mode [ 467.428564][T13284] bridge_slave_1: entered promiscuous mode [ 467.489760][T13293] chnl_net:caif_netlink_parms(): no params data found [ 467.528867][T13336] netlink: 'syz.3.1919': attribute type 1 has an invalid length. [ 467.537803][T13336] netlink: 'syz.3.1919': attribute type 2 has an invalid length. [ 467.548961][T13336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1919'. [ 467.614168][T13273] hsr_slave_0: entered promiscuous mode [ 467.621886][T13273] hsr_slave_1: entered promiscuous mode [ 467.628481][T13273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 467.636302][T13273] Cannot create hsr debugfs directory [ 467.660789][T12490] Bluetooth: hci1: command tx timeout [ 467.775389][T13284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.797940][T13284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.058022][T13284] team0: Port device team_slave_0 added [ 468.146152][T13261] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 468.159289][T13261] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 468.183468][T13284] team0: Port device team_slave_1 added [ 468.244236][T13261] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 468.362375][T13261] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 468.454318][T13284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.461810][T12490] Bluetooth: hci0: command tx timeout [ 468.474573][T13284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.501361][T13284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.539509][T13293] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.548331][T13293] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.562845][T13293] bridge_slave_0: entered allmulticast mode [ 468.571421][T13293] bridge_slave_0: entered promiscuous mode [ 468.607011][T13284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.615441][T13284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.652894][T13284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.721296][T13293] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.751015][T13293] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.758684][T13293] bridge_slave_1: entered allmulticast mode [ 468.767396][T13293] bridge_slave_1: entered promiscuous mode [ 468.809503][T12490] Bluetooth: hci3: command tx timeout [ 468.881988][T13358] : entered promiscuous mode [ 469.001826][T13284] hsr_slave_0: entered promiscuous mode [ 469.009414][T13284] hsr_slave_1: entered promiscuous mode [ 469.016166][T13284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 469.026576][T13284] Cannot create hsr debugfs directory [ 469.081859][T13293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.104938][T13293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.230316][T13273] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.265227][T13293] team0: Port device team_slave_0 added [ 469.279784][T13293] team0: Port device team_slave_1 added [ 469.404981][T13273] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.426284][T12490] Bluetooth: hci4: command tx timeout [ 469.458592][T13293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.467619][T13293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.497652][T13293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.562092][T13293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.569074][T13293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.613009][T13293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.639755][T13273] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.753033][T12490] Bluetooth: hci1: command tx timeout [ 469.802575][T13273] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.881630][T13293] hsr_slave_0: entered promiscuous mode [ 469.891386][T13293] hsr_slave_1: entered promiscuous mode [ 469.898026][T13293] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 469.906417][T13293] Cannot create hsr debugfs directory [ 470.307633][T13261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.448042][T13261] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.485497][T13273] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 470.529703][T13284] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.547789][T12490] Bluetooth: hci0: command tx timeout [ 470.616339][T13273] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 470.635156][T10743] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.642473][T10743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.686761][T13375] netlink: 'syz.3.1930': attribute type 1 has an invalid length. [ 470.696191][T13375] netlink: 'syz.3.1930': attribute type 2 has an invalid length. [ 470.712493][T13375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1930'. [ 470.737946][T13284] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.759329][T13273] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 470.785362][T13273] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 470.801955][T10743] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.809251][T10743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.861207][T12490] Bluetooth: hci3: command tx timeout [ 470.926872][T13284] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.102181][T13284] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.156213][T13261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 471.408324][T13293] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.506916][T12490] Bluetooth: hci4: command tx timeout [ 471.552993][T13293] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.627978][T13273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.709870][T13293] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.751357][T13273] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.766339][T10743] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.773553][T10743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.821864][T12490] Bluetooth: hci1: command tx timeout [ 471.824243][T13261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.838563][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.845728][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.923649][T13400] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1936'. [ 471.923843][T13293] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.203548][T13261] veth0_vlan: entered promiscuous mode [ 472.281281][T13261] veth1_vlan: entered promiscuous mode [ 472.379891][T13284] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 472.439817][T13261] veth0_macvtap: entered promiscuous mode [ 472.494627][T13284] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 472.533602][T13261] veth1_macvtap: entered promiscuous mode [ 472.551052][T13409] netlink: 'syz.3.1939': attribute type 1 has an invalid length. [ 472.596537][T13284] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 472.708138][T13284] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 472.786646][T13261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.855858][T13293] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 472.891047][T13293] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 472.906175][T13293] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 472.918396][T13293] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 472.942698][T12490] Bluetooth: hci3: command tx timeout [ 472.972409][T13261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.042173][T13261] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.051917][T13261] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.060779][T13261] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.069671][T13261] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.176282][T13273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.270351][T10743] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 473.298048][T10743] ------------[ cut here ]------------ [ 473.318381][T10743] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1223:5 [ 473.351920][T10743] index 11 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 473.388694][T10743] CPU: 1 UID: 0 PID: 10743 Comm: kworker/u8:10 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 473.388745][T10743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 473.388769][T10743] Workqueue: events_unbound cfg80211_wiphy_work [ 473.388805][T10743] Call Trace: [ 473.388815][T10743] [ 473.388837][T10743] dump_stack_lvl+0x189/0x250 [ 473.388877][T10743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 473.388909][T10743] ? __pfx__printk+0x10/0x10 [ 473.388946][T10743] ubsan_epilogue+0xa/0x40 [ 473.388969][T10743] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 473.389010][T10743] ieee80211_request_ibss_scan+0x600/0x8b0 [ 473.389058][T10743] ieee80211_ibss_work+0xd85/0x1060 [ 473.389087][T10743] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.389118][T10743] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 473.389147][T10743] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 473.389176][T10743] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 473.389211][T10743] ? skb_dequeue+0x10e/0x150 [ 473.389241][T10743] ? ieee80211_iface_work+0xcdb/0xfe0 [ 473.389275][T10743] ? ieee80211_iface_work+0xf39/0xfe0 [ 473.389309][T10743] ? rcu_is_watching+0x15/0xb0 [ 473.389346][T10743] cfg80211_wiphy_work+0x2dc/0x460 [ 473.389369][T10743] ? process_scheduled_works+0x9ef/0x17b0 [ 473.389409][T10743] process_scheduled_works+0xae1/0x17b0 [ 473.389475][T10743] ? __pfx_process_scheduled_works+0x10/0x10 [ 473.389527][T10743] worker_thread+0x8a0/0xda0 [ 473.389561][T10743] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 473.389599][T10743] ? __kthread_parkme+0x7b/0x200 [ 473.389631][T10743] kthread+0x70e/0x8a0 [ 473.389659][T10743] ? __pfx_worker_thread+0x10/0x10 [ 473.389690][T10743] ? __pfx_kthread+0x10/0x10 [ 473.389715][T10743] ? _raw_spin_unlock_irq+0x23/0x50 [ 473.389742][T10743] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.389768][T10743] ? __pfx_kthread+0x10/0x10 [ 473.389793][T10743] ret_from_fork+0x3fc/0x770 [ 473.389825][T10743] ? __pfx_ret_from_fork+0x10/0x10 [ 473.389862][T10743] ? __switch_to_asm+0x39/0x70 [ 473.389881][T10743] ? __switch_to_asm+0x33/0x70 [ 473.389899][T10743] ? __pfx_kthread+0x10/0x10 [ 473.389923][T10743] ret_from_fork_asm+0x1a/0x30 [ 473.389964][T10743] [ 473.389990][T10743] ---[ end trace ]--- [ 473.589378][T12490] Bluetooth: hci4: command tx timeout [ 473.596194][T10743] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 473.596217][T10743] CPU: 1 UID: 0 PID: 10743 Comm: kworker/u8:10 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 473.596247][T10743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 473.596264][T10743] Workqueue: events_unbound cfg80211_wiphy_work [ 473.596297][T10743] Call Trace: [ 473.596307][T10743] [ 473.596318][T10743] dump_stack_lvl+0x99/0x250 [ 473.596361][T10743] ? __asan_memcpy+0x40/0x70 [ 473.596405][T10743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 473.596443][T10743] ? __pfx__printk+0x10/0x10 [ 473.596488][T10743] panic+0x2db/0x790 [ 473.596532][T10743] ? __pfx_panic+0x10/0x10 [ 473.596566][T10743] ? _printk+0xcf/0x120 [ 473.596618][T10743] ? __pfx__printk+0x10/0x10 [ 473.596656][T10743] check_panic_on_warn+0x89/0xb0 [ 473.596691][T10743] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 473.596742][T10743] ieee80211_request_ibss_scan+0x600/0x8b0 [ 473.596799][T10743] ieee80211_ibss_work+0xd85/0x1060 [ 473.596835][T10743] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.596873][T10743] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 473.596909][T10743] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 473.596947][T10743] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 473.596990][T10743] ? skb_dequeue+0x10e/0x150 [ 473.597029][T10743] ? ieee80211_iface_work+0xcdb/0xfe0 [ 473.597072][T10743] ? ieee80211_iface_work+0xf39/0xfe0 [ 473.597112][T10743] ? rcu_is_watching+0x15/0xb0 [ 473.597160][T10743] cfg80211_wiphy_work+0x2dc/0x460 [ 473.597188][T10743] ? process_scheduled_works+0x9ef/0x17b0 [ 473.597234][T10743] process_scheduled_works+0xae1/0x17b0 [ 473.597310][T10743] ? __pfx_process_scheduled_works+0x10/0x10 [ 473.597379][T10743] worker_thread+0x8a0/0xda0 [ 473.597421][T10743] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 473.597469][T10743] ? __kthread_parkme+0x7b/0x200 [ 473.597507][T10743] kthread+0x70e/0x8a0 [ 473.597539][T10743] ? __pfx_worker_thread+0x10/0x10 [ 473.597579][T10743] ? __pfx_kthread+0x10/0x10 [ 473.597610][T10743] ? _raw_spin_unlock_irq+0x23/0x50 [ 473.597643][T10743] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.597676][T10743] ? __pfx_kthread+0x10/0x10 [ 473.597707][T10743] ret_from_fork+0x3fc/0x770 [ 473.597748][T10743] ? __pfx_ret_from_fork+0x10/0x10 [ 473.597792][T10743] ? __switch_to_asm+0x39/0x70 [ 473.597818][T10743] ? __switch_to_asm+0x33/0x70 [ 473.597842][T10743] ? __pfx_kthread+0x10/0x10 [ 473.597883][T10743] ret_from_fork_asm+0x1a/0x30 [ 473.597931][T10743] [ 473.600362][T10743] Kernel Offset: disabled