last executing test programs: 2m51.85698654s ago: executing program 0 (id=3277): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000005, 0x12, 0xffffffffffffffff, 0x2000) ioctl$OCFS2_IOC_UNRESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000000)={0x2, 0x1, 0xfffffffffffffffd, 0x4, 0x3ff, 0x8}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0xc, 0x14, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) 2m51.77782616s ago: executing program 0 (id=3278): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x1}}, [@mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0xc4}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffe4b, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x2}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x140, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x114, 0x3, 0x0, 0x1, [{0x110, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x103, 0x6, 0x1, 0x0, "2f11e7ef8e766bc851286d7b851917a8c4428e9e9e091293cae490c16826a3c85a205f678852b43a06c61d63ba42373a00bb7c1ad7f1758c6b2ce8b1f597542c5b20d1abf3d9cba06aa296695acaa0facffbd68f6cafc22503df4d5c27c256f0b4f6c49fa2d43becd9c27d04488658cebd38947517a7ab12195f2e5a26fccf5baa41dc0bb3b777019eabb057c0db7069c109a9f969da3d7fa87b35f7cad005636d9e278b22a111b90dda70832b9773e6c964339bb3c4185e0ceb9a1cf08e553c244fba9bf1f098ed541e3501b56b576e78f951702b8be38082aacc094274456d93eff9f781adecbc6401bb5575b1d0d0dbf948cc15c194fb002ddc28f42b06"}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x1}}, [@mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0xc4}}, 0x2c000010) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffe4b, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x2}}, 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x140, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x114, 0x3, 0x0, 0x1, [{0x110, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x103, 0x6, 0x1, 0x0, "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"}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) 2m51.688182728s ago: executing program 0 (id=3279): sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xfffffffffffffefd, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="dc000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0x4044000) (async) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=0xffffffffffffffff], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) socket$unix(0x1, 0x5, 0x0) (async, rerun: 64) r4 = socket$kcm(0x11, 0x2, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r6 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) (async) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x2c, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x9, 0x4}, {}, {0x7, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a0c010000000a0104000000000000000001000003f6000600f4b0e80b32e13a42db0c8466ed6684803e956cfcf7c54b429a656216e8e555ddc8cb2096290c809b92f8cc3948bee32ccd6643fb53c78fe44bb5c27301480ce047827071f72e0956635beeee639008fa4fba5488a09b49f421e8ecdbb09738237117dd53c6309f96d771d57378b367fb5bc8fca1ec6d3a810d9e08559e2e10d117572a898d823366920c728c29edb09e9999e87a608ee82abc64c16e0512748f6facc8cbe7889a5cddaf47e31047d61f616f995b9621fb8dfc7a8d5279841db78a1e2adafba3b3961055d08af64c293d73126e9d955ea3ddeadd631f6571197da2f22095bb295662aac92a29e8fa3cfed88100002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000088000000090a01040000000000000000030000050c001180080001006e6174006800128010000180090001006d65746100000000200001800e000100636f6e6e6c696d69740000000c0002800800014000000006100001800a0001006c696d697400000024000180090001006c617374000000001400028008000140000000050800014000000007140000001100010000000000000000000700000a"], 0x1e8}}, 0x0) (rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2c45400018006000600843b0000971b028077ee1387d414bf45fcd968484baa547261ab3af86d85755bc6ac338ae79cdfe4f4d1013f7aa924b70223b2960000003f492d4d03050abbeb07653de1799316bf572f70c81b90eebafe57b8cc49fcf5b123eeda5f90fa6f00000000373c78f4d1e9b5fe5617504329899442240e760808181733579a38e8439b184c486e0000005e71b60e3cfceb2000"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048091}, 0xc000) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x5dc}], 0x1}, 0x4) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004f80), r2) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000005100)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="2c000000cc50f9cf31c5524c17d47ee06916d68250bf1ae25dd4c78630d6a0c45f8e73bf2bcc901832da2838d9c66b515194df33c0f2b6bb83fc9531b97643af051cbf995397efffcba3b871beff89cfe50e1a8da7a2036204cfcb2d7529f7cdb5585d3491187ed65881421fc56ad6b0fe4e057121cd54b2357e467bd3fbce3a68afcceddd9f53bebc6e", @ANYRES16=r11, @ANYBLOB="01002cbd7000fcdbdf2509000000050007000200000005000800000000000800010001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000011}, 0x48010) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="ab0000b6653ce109926da8750010003b01120000008000000000000000", @ANYRES32=r12, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r13, @ANYRES8, @ANYRESDEC=r1], 0x40}}, 0x48010) (async) ioctl$NILFS_IOCTL_SET_SUINFO(r4, 0x40186e8d, &(0x7f00000009c0)={&(0x7f0000000940)=[{0x1, 0x1, 0x0, {0xb, 0xd}}, {0x0, 0x0, 0x0, {0x7ff, 0x8, 0x2}}, {0x4, 0x2, 0x0, {0xa9ea, 0xc1e7}}, {0x7, 0x0, 0x0, {0x80000001, 0x8}}], 0x4, 0x20, 0x0, 0xf}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan4\x00'}) (rerun: 64) 2m51.358803134s ago: executing program 0 (id=3286): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x1e09aa98}], 0x1}, 0x1f00) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0x58, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) pipe(&(0x7f0000000900)={0xffffffffffffffff}) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0x20, &(0x7f0000000b00)={&(0x7f00000009c0)=""/8, 0x8, 0x0, &(0x7f0000000a00)=""/197, 0xc5}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x10, 0xa, &(0x7f0000000340)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffff8ad}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @jmp={0x5, 0x1, 0x9, 0x5, 0x1, 0x9b696e3f206e2466, 0x10}], &(0x7f00000003c0)='GPL\x00', 0x7, 0xa6, &(0x7f0000000780)=""/166, 0x41000, 0x2, '\x00', r2, @sk_msg=0x7, r3, 0x8, &(0x7f0000000940)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x0, 0x3, 0x6}, 0x10, r4, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000b80)=[{0x2, 0x5, 0x5, 0x6}, {0x3, 0x1, 0xf, 0xb}, {0x3, 0x4, 0x10, 0x3}, {0x5, 0x1, 0x10, 0x1}, {0x1, 0x1, 0x7, 0x6}, {0x2, 0x4, 0xf, 0x6}, {0x2, 0x4, 0x4, 0xc}], 0x10, 0x800}, 0x94) (async) ioctl$sock_ifreq(r1, 0x8947, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_names='gretap0\x00'}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x64040043) (async) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8) ioctl$F2FS_IOC_COMPRESS_FILE(r5, 0xf518, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x99}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r7 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) sendmsg$NFT_BATCH(r7, &(0x7f0000000740)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x14c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x7f}, @NFTA_CHAIN_HOOK={0x5c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2ec5fc67}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x50b9efa4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'lo\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7fb7a197}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1e33f0a9}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_batadv\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_USERDATA={0xac, 0xc, "0b1d9d525daf131ab88e597e4263265a61fb6e6637461fa4f10226411d0ab72570a3472867484e2f437d3ee0a9d11cf67de50e759f3429088beb96043bb22051dbf5b7ca69fd3774c44d0bc5718c856c6c16946b4910dd9709d29bdd64376d0a784af102c955f8428cdabedd62aa4f384d660f98f23e2602ae41805d3f058318f80415dbb17f9af571a0c8228848bc5169c6d364cda507a3f5f060d73b2dd56797e4740ac68b5a14"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x174}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}}, 0x0) (async) close(r6) (async) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x31, 0xe, 0xffffffff}}) (async) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) 2m51.197768368s ago: executing program 0 (id=3288): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80002, 0x0) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0xffffff01, @mcast2, 0x0, 0x4}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x2000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0xa}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20048801}, 0xc010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123200000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 2m51.016272395s ago: executing program 0 (id=3289): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 2m35.701301698s ago: executing program 32 (id=3289): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 2m35.077616045s ago: executing program 4 (id=3405): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00v\x00\r\v'], 0x20}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0xd, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80c0}, 0x4040) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000600)={{r0, &(0x7f0000000140)='\xff\xff\xff\xff\xff\xff', 0xc6000, &(0x7f0000000180)={@align=0xb, {0x7, 0x7ff, 0x6, 0x101}}, 0x80000000, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f00000003c0)=0x7fff}, 0x1, &(0x7f00000004c0)=[{0x3, 0x10000, &(0x7f0000000400)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000440)="fa19cada0b8faf14547d4967f4d1592da9acf98c9ffb8b17f2f618191a19b3ef62fafe8dda1dd63fddb3ffc9433d82c044b66bb1e0c434f9b39acb73dde51afff7e99e38c64fc68c1a471261c1ce496f9295db945f56dbc1afd4d2aa73a85fdda900c8347206b26db8a0a0e33506a33dc273ea1fa0719bfbe0fd", 0x7a, 0x28}]}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000600)={{r0, &(0x7f0000000140)='\xff\xff\xff\xff\xff\xff', 0xc6000, &(0x7f0000000180)={@align=0xb, {0x7, 0x7ff, 0x6, 0x101}}, 0x80000000, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f00000003c0)=0x7fff}, 0x1, &(0x7f00000004c0)=[{0x3, 0x10000, &(0x7f0000000400)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000440)="fa19cada0b8faf14547d4967f4d1592da9acf98c9ffb8b17f2f618191a19b3ef62fafe8dda1dd63fddb3ffc9433d82c044b66bb1e0c434f9b39acb73dde51afff7e99e38c64fc68c1a471261c1ce496f9295db945f56dbc1afd4d2aa73a85fdda900c8347206b26db8a0a0e33506a33dc273ea1fa0719bfbe0fd", 0x7a, 0x28}]}) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x2, 0x2e, 0x40, 0x65, 0x0, 0x2, 0x6, 0x0, @private=0xa010102, @remote, {[@rr={0x7, 0xb, 0x5, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0xc, 0x5, 0x1, 0x0, [{@local}]}]}}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x8, 0xfffd, 0x0, 0x57}}}}}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000000)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f00000007c0)=""/97, 0x61}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0x85}], 0x8}}], 0x1, 0x2080, 0x0) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000740)) (async) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000740)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000840)=0x4, 0x4) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 2m34.604483363s ago: executing program 4 (id=3407): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r3, 0x990, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x8}, @NL80211_ATTR_TXQ_QUANTUM={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x0, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}}, 0x4000080) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x2c, r1, 0x329, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40010) 2m34.251870419s ago: executing program 4 (id=3410): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@typedef={0x4, 0x0, 0x0, 0x12, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x42}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0x0, 0x9}, {0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x2}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4080) syz_emit_ethernet(0x13e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x108, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x1c, "9595f429ae08a565c9a41d413270a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce380654c1bb0f61d255b1556b7a311096b7aab867396997ffab76abca01185b08d1e29ee14d8fe61245487104b1c5205c6adc794ba413b92d2d208b86f40983c4819c33b59c1abe2a4b0aa661fcb54e0855d6bb5dd267878ff59bcfc6079e7a5"}]}}}}}}, 0x0) 2m33.571872383s ago: executing program 4 (id=3413): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000380)={'erspan0\x00', 0x0, 0x80, 0x700, 0x8, 0x1ff, {{0x16, 0x4, 0x2, 0x3e, 0x58, 0x4, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x14, 0x73, 0x1, 0x0, [{@local, 0x200}, {@remote, 0x305d}]}, @lsrr={0x83, 0x13, 0xbd, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @rr={0x7, 0xb, 0x6b, [@private=0xa010100, @local]}, @end, @generic={0x86, 0x10, "8c0754c162118920c9f3b995f106"}, @end]}}}}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x30}, @mcast2, 0xf2, 0x4, 0x8, 0x500, 0x69bf, 0x1400209, r1}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000c140100293d7000fbdbdf2508003d00010000fdff000000000800030001000000000000"], 0x28}}, 0x840) bind$bt_hci(r3, &(0x7f0000000300)={0x1f, 0x3, 0x3}, 0x6) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, &(0x7f0000000280)={'broute\x00', 0x0, 0x4, 0xac, [0x6, 0x7d2, 0x8, 0x0, 0x3, 0x53e], 0x2, &(0x7f0000000180)=[{}, {}], &(0x7f00000001c0)=""/172}, &(0x7f0000000340)=0x78) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, r6, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0x1f}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffff8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x10}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7c0}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9b4}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xfe}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x13}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x41}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x30000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}]]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x60000040) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000380)={'erspan0\x00', 0x0, 0x80, 0x700, 0x8, 0x1ff, {{0x16, 0x4, 0x2, 0x3e, 0x58, 0x4, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x14, 0x73, 0x1, 0x0, [{@local, 0x200}, {@remote, 0x305d}]}, @lsrr={0x83, 0x13, 0xbd, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @rr={0x7, 0xb, 0x6b, [@private=0xa010100, @local]}, @end, @generic={0x86, 0x10, "8c0754c162118920c9f3b995f106"}, @end]}}}}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x30}, @mcast2, 0xf2, 0x4, 0x8, 0x500, 0x69bf, 0x1400209, r1}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000c140100293d7000fbdbdf2508003d00010000fdff000000000800030001000000000000"], 0x28}}, 0x840) (async) bind$bt_hci(r3, &(0x7f0000000300)={0x1f, 0x3, 0x3}, 0x6) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, &(0x7f0000000280)={'broute\x00', 0x0, 0x4, 0xac, [0x6, 0x7d2, 0x8, 0x0, 0x3, 0x53e], 0x2, &(0x7f0000000180)=[{}, {}], &(0x7f00000001c0)=""/172}, &(0x7f0000000340)=0x78) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, r6, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0x1f}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffff8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x10}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7c0}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9b4}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xfe}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x13}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x41}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x30000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}]]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x60000040) (async) 2m33.279122878s ago: executing program 4 (id=3416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a090400000000000000000200000028000480240001800b000100736f636b657400001400028008000240000000000800014000e3ff480900010073797a30000000000900020073797a3200000000140000001100010000000000000000deffffff09e49b2ccd6ed04be4c4b44cc8f3db3ae8c630a17ac596dc6726aefab5d0e9861d6f59ecd8ef8638b164d70a92ef71a4d46ac230e264aa91cc6d429fc77ae1dd6448dffd7a44c9e819a9ce4f4f86be250d6f16b7eb1f4bd10a517d00"], 0x7c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x110020}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ID={0x8}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0xd, 0x0, 0x3}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x8004000}, 0x4004010) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000058c0)=@newtfilter={0x38, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r4, {0x9}, {0xffff}, {0x10, 0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x40) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112df000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 2m32.829701097s ago: executing program 4 (id=3421): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0xc4, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xd, 0x49}}}}, [@NL80211_ATTR_TESTDATA={0xa1, 0x45, "2a7e69b8564aeb963770fc8448932130c97fbf0f68af4f80663beff1f213a76efbee621f90307b163b3a0712a22357a4225cdb47850f8d9d382636171efe98aa1c763fada749ea26131bae8036c2c5f54735f80749912ef4d72e0b0c7faa8c0ecc5f4723675aa48f53edbe49260cf95d1c9240fad1317fae6d60446666eb9ae0f9ed4fe91e01cf14e8b06a6dcf905c8565ca6c6d18e259aa8dc1ce882a"}]}, 0xc4}, 0x1, 0x0, 0x0, 0x15}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000003c0)) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) (async) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000) (async) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) 2m17.762456855s ago: executing program 33 (id=3421): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0xc4, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xd, 0x49}}}}, [@NL80211_ATTR_TESTDATA={0xa1, 0x45, "2a7e69b8564aeb963770fc8448932130c97fbf0f68af4f80663beff1f213a76efbee621f90307b163b3a0712a22357a4225cdb47850f8d9d382636171efe98aa1c763fada749ea26131bae8036c2c5f54735f80749912ef4d72e0b0c7faa8c0ecc5f4723675aa48f53edbe49260cf95d1c9240fad1317fae6d60446666eb9ae0f9ed4fe91e01cf14e8b06a6dcf905c8565ca6c6d18e259aa8dc1ce882a"}]}, 0xc4}, 0x1, 0x0, 0x0, 0x15}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000003c0)) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) (async) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000) (async) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) 1m51.679596176s ago: executing program 1 (id=3844): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079103000000000007b0a00ff000000009500740000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x40, '\x00', 0x0, @sk_reuseport}, 0x94) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000080)) 1m51.540477159s ago: executing program 1 (id=3847): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000858000/0x2000)=nil, 0x2000, 0x2000004, 0x12, r0, 0xc08ba000) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x89b0, &(0x7f0000000080)={'vlan0\x00', 0x2000}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071113300050000009500deffffffffff9400a50500"/48], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 1m51.404344321s ago: executing program 1 (id=3850): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x48, 0x32, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 1m51.228800693s ago: executing program 1 (id=3853): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) (async, rerun: 64) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r4, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x27}, 0x94) r6 = socket(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r8 = socket(0x10, 0x803, 0x2) (rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0xdc, 0x0, 0x1, 0x6, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x100, 0x6, 0xd9e1, 0x80]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x19}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x42}]}, @CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x2c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0xbf}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x9}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x49}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0xa5}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x69}]}}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x56a6}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x242}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xf900}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0x4040850) getsockname$packet(r8, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r9, {0x10}, {0x1}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x40) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 1m50.976017122s ago: executing program 1 (id=3858): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x280, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x210, 0x206, 0x240, 0x210, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xb0, 0x110, 0x0, {0x390, 0x8f00}, [@common=@set={{0x40}, {{0x0, [0x5, 0x2, 0x1, 0x4, 0x5], 0x3}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x7, 0x0, [0x2d, 0x12, 0x2e, 0x40, 0xd, 0x3a, 0x23, 0x2b, 0x103, 0x1c, 0x4037, 0x15, 0x31, 0x4, 0x31, 0x1d], 0x1, 0x8, 0x7}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x900, 0x10, 0x8, 'snmp\x00', 'syz0\x00', {0x8000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(0x0, r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200200008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) write$nci(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7105570002010601000080021f6009dd294b6d2a07020b01424260fe36b0cb26604559c95f4c8630f94dd4dfc85daf4a3fe8563767de5c7535a3d719046d68833f6c760b41aa0ac6b0808ff537ba072e11c290c915091f01876eb17cffa480dddec04510e18d3863baca60db76bd27db30048386c0a0734d0b863b8ecef182c1504f1100b8be4aad96315fba27ef612a729f3abd2313ebce806dfc1b3e702019d74dc7a77c32618916109e87c41e1f58c3657e92f81486c2f9410fd4a7b94325facf9700aec3244d7737adaf9010fc1281bb121341551361e9a4d94056e05d3f213bda5e2f4cd0e52f634d5bcf2c8284dcdcc923c19815a461771b3019ab74"], 0x5b) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)=ANY=[@ANYBLOB="000075f831d01c0d00"/20], 0x1c}, 0x1, 0x0, 0x0, 0x20044800}, 0x4c800) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010001fff0d00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYRES32, @ANYBLOB="080004"], 0x4c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r6, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000440)="f5", 0x1}], 0x1}}], 0x1, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xf3, 0x1, 0x1, 0x1, 0x9}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="260a00000000000061119c000000000018000000000000000000000000000000950000000000000028fa80a2d5ee862a5e8f69b11c84bf0497ba6a476e1f76896b9df88ade522edfc55c55f9c00ae92edc01135fa7e26c64"], &(0x7f0000000000)='GPL\x00'}, 0x80) shutdown(r6, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x20, 0x0, 0x1, 0x70bd28, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1fffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x240280d0}, 0x8090) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x20, 0x10, 0x5, 0x5, {{0xb, 0x4, 0x1, 0x37, 0x2c, 0x64, 0xb0a, 0x9, 0x2f, 0x0, @loopback, @loopback, {[@generic={0x82, 0x9, "91f8ceecf7f749"}, @timestamp={0x44, 0xc, 0x82, 0x0, 0xe, [0xfffff7fd, 0x9]}]}}}}}) write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f0001bf7b4b4b83aef834f225a29fa15893da6386f51cf57a38814f93d9ec0122fdd77688cc24376165acc592a2884d29d27ff0a3b9fb72f1d982c6fc45f60178071a0c38ab"], 0x46) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x8, @mcast1, 0x7}, 0x1c) 1m50.673006576s ago: executing program 1 (id=3863): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) write(r1, &(0x7f0000000000)="e876339c1f2dd51625d037b5b2545a57f45badce685d1309a04e6b0c1f33d986dcac8f21fa7c77d1215a4c", 0x2b) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001d40)="d8750288189987d0fabb09b23867772c615b8004f5071a7715f73be32aea3bb1ecc3e0814fb9b752a6d48b1d4d68a4282f76c2c6535ec3ec0fe9843311", 0x3d}], 0x1}], 0x1, 0x40) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) (async) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async, rerun: 64) sendto$inet6(r4, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async, rerun: 64) recvmmsg(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x1022, 0x0) (async) recvmmsg(r3, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/96, 0x7}, {&(0x7f0000000940)=""/53, 0x35}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xac}}, 0x0) 1m35.658564784s ago: executing program 34 (id=3863): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) write(r1, &(0x7f0000000000)="e876339c1f2dd51625d037b5b2545a57f45badce685d1309a04e6b0c1f33d986dcac8f21fa7c77d1215a4c", 0x2b) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001d40)="d8750288189987d0fabb09b23867772c615b8004f5071a7715f73be32aea3bb1ecc3e0814fb9b752a6d48b1d4d68a4282f76c2c6535ec3ec0fe9843311", 0x3d}], 0x1}], 0x1, 0x40) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) (async) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async, rerun: 64) sendto$inet6(r4, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async, rerun: 64) recvmmsg(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x1022, 0x0) (async) recvmmsg(r3, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/96, 0x7}, {&(0x7f0000000940)=""/53, 0x35}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480240001800b000100736f636b65740000140002800800024000000003080001400000000230000180080001006e6174002400028008000740000000200800054000000003080001400000000008000240000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000aa20450acd717d9c7bce28f1bc93ceeb9af83f1afd9d89a248a3d9d437b94ceb1e4f56f06101f74b9910c64ccae786cdd643f5c657424e0cce1ae8a63d3b0a9511e0acc2dca88922055df0eed7e3c1bc682acddfdd133f2227044760c291321c16f2c81df4da344249d838448c40c56e62b869bba30b1f3608f7a60924d08a68a6b3db58778597dffef9cb2b44903423cfc492267e24271d175aa75bf749de7df130964c6b8a5d41a5cef8dfaebe1ddba0053ed223b32f85eccaae9c4d87a479b1239cb54aa2c9ab8e4549c0705b9c198137b70fbd76f42eee2ce0973d568b0d273e4708ab342bd97fcad5d07838ddb5049091557ad27054cf730832d3815f99c5f7476fd2fcc09710658f758e290b19f6ab2aba55291b7a9b0502ce044e5e8bc00"], 0xac}}, 0x0) 2.952244555s ago: executing program 3 (id=4507): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r1, @ANYRES16=0x0, @ANYBLOB="02d1b2c3063e84ceb44a7e8889837ce7ddc6624f9db2cf", @ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x1, 0x0, 0x6}}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@can={{0x3, 0x1, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "6a5feb87d8d474dd"}, 0x10}, 0x1, 0x0, 0x0, 0x20000444}, 0x0) read(r3, &(0x7f0000000140)=""/55, 0x37) syz_emit_ethernet(0x3e, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x9, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) sendto$packet(r2, &(0x7f00000001c0)="ef5ed522f8ee427e89daf765311de8c19224a20a7aad7a700b4405da615c456a1d9d5216b82fbdd9f53f7a4903fdeed1b736d61a1398aac2ee9715477eed6b67e8ae21fb1f8e386a99a016", 0x4b, 0x0, &(0x7f0000000240)={0x11, 0x10, r6, 0x1, 0x10, 0x6, @remote}, 0x14) sendto$packet(r2, &(0x7f0000000180)="02030e00d3fc02000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0x26, 0x40094, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) r7 = socket$kcm(0x10, 0x2, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0003002000000000000072000000000000000000", 0x39}], 0x1) 2.950721614s ago: executing program 2 (id=4509): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x26e1, 0x0) close(r4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x7}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000000, 0x0, 0xff, 0x1, 0xfffc}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010010000000ffdbdf2500000000", @ANYRES32=r8, @ANYBLOB="20000000280e0400280012800b0001006d6163736563000018000280050003000800000d0c00040001000001000280"], 0x48}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, r8, 0x30, 0x0, @val=@perf_event={0x5}}, 0x18) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) r10 = socket$rds(0x15, 0x5, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendfile(r10, r11, 0x0, 0x2) close(r11) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000240)={r12, 0x3f, 0x8, 0xf9a, 0x100, 0x41}, 0x14) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)={r12, 0xff18, 0x2, [0x3, 0x5]}, 0xc) 2.783155649s ago: executing program 6 (id=4513): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xf}, {0x0, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x8}}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xfffffd3d, 0x1, 0x0, 0x0, {{0xe6a7}}}]}]}, @TCA_FLOW_ADDEND={0x0, 0x5, 0x10}, @TCA_FLOW_PERTURB={0x0, 0xc, 0x6}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r6 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$sock(r6, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002380)="fb904d54fe74bf8e9f31558a1c60c12f", 0x10}], 0x1}}], 0x1, 0x0) read$alg(r6, &(0x7f00000012c0)=""/4109, 0x100d) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000711231000000000095000000000000006da453275ecd8a7de4d4c9fed158bfce8f6c56043b6c9e30d3ff4b028ea7c05a1377aeb4351bcf416daad5d6f5c62b642ee19c8aee027c4fdc392df834c8449e207006bc18e7935378dd6464db5ea0d68cb47e7ca1e34af3ce9ea6f5bc89054047eb88be8239a96132aa145884ca65055288e55fc33085eb4f4d81592a7c7dc3a5365474aeb5a8c2f33d6d1a"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) write(r6, &(0x7f00000033c0)="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", 0xffd) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003400000008007300000000000e0001006e65746465767309000000000f0002006e657464657673696d300000bb5bef951d41d3101317d4c408ddd01a6fd61d04299a71e14156b8e20144301a28079828611e9ab4e410e3fdfe305cb30364af721183a9cc5b20ae280f48d8a32ea6c736ad7e88575abb9e453170964d67f06bb56164fe0231d4acdf75d70bbdcc3cafc1cd842b07f9fe3003d900"/173], 0x3c}}, 0x0) 2.580242484s ago: executing program 2 (id=4515): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_emit_ethernet(0x52, &(0x7f0000000400)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @timestamp={0x44, 0xc, 0x5, 0x3, 0x0, [0x0, 0x10000]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x30}}, 0x4000000) sendmsg$unix(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)="c1", 0x1}], 0x1, 0x0, 0xfffffffffffffd94}, 0x4000000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x12, 0x2, 0x1, 0x104}}) (async) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000000)=0xfffffffc, 0x4) (async) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)}, 0x40000000) 2.528143683s ago: executing program 3 (id=4516): r0 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x3ff, 0x8]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5b4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000480)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000000000000079cc41a4b85c57f6cc08d8268c4c0ec95293ab3172e05e3114d6e08614eb12383c1f81f80e7c002499de012c042e0429ac298a3a9acea390dcf5a3d779a08a148d1ef0966b95df181e54f595deb0fa577d4e304027ee50f9d608b4b7d6ed0c2f6d2d2dde12ecb52d572d6d376fe0e5c73ca4b4f70f54b6a63a2ea20a776567e3c16628a1cf1dcf17506b251cfb71bc7633609b959780b70eca3a02397603"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) r2 = socket$inet6(0xa, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000440)=0xa15, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe000001000000000a00120002"], 0x30}}, 0x0) setsockopt$inet6_int(r2, 0x29, 0x48, &(0x7f0000000040)=0x9, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x3}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f00000004c0)={0xffffffffffffffff}) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r0, 0x504, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x1) r7 = accept4$alg(r5, 0x0, 0x0, 0x0) sendmmsg$sock(r7, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002380)="fb904d54fe74bf8e9f31558a1c60c12f", 0x10}], 0x1}}], 0x1, 0x20000000) read$alg(r7, &(0x7f00000012c0)=""/4109, 0x100d) sendmmsg$alg(r7, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000002c0)='J', 0x1}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x4000080) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1200000006000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000e6b7dd9727cc00"/34], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9}, &(0x7f0000000040), &(0x7f0000000140)=r8}, 0x20) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.459608991s ago: executing program 6 (id=4518): r0 = socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}]}, 0x54}}, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x8, 0x2}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x7}, 0x10) close(r3) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0xc, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, 0x10) 2.384593826s ago: executing program 7 (id=4519): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x3c, 0xec71, 0x0, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x80, 0x6e1}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000140)={@mcast2, 0x0}, &(0x7f00000001c0)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x700, 0x700, 0x6, 0x0, {{0x27, 0x4, 0x1, 0x8, 0x9c, 0x67, 0x0, 0x43, 0x2f, 0x0, @broadcast, @private=0xa010100, {[@noop, @generic={0x82, 0x2}, @noop, @timestamp_prespec={0x44, 0x4c, 0x84, 0x3, 0x9, [{@rand_addr=0x3a, 0x3}, {@remote, 0x200}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@private=0xa010102, 0x1}, {@broadcast, 0x1}, {@multicast2, 0x400}, {@multicast1, 0xfffffffd}, {@local, 0x3ff}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x5}]}, @cipso={0x86, 0x23, 0xffffffffffffffff, [{0x6, 0xe, "481b6104f152daaef6624227"}, {0x5, 0xf, "9b4da7c5e65b64214169162f57"}]}, @end, @rr={0x7, 0x13, 0x86, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @empty, @multicast1]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async) r4 = socket(0xa, 0x3, 0x3a) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) (async) connect$l2tp6(r5, &(0x7f0000000f40)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x20) (async) sendmmsg$inet6(r5, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) 2.260936254s ago: executing program 7 (id=4520): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x49}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES8=r1, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016000000000006000e0011"], 0x44}}, 0x0) 2.120973599s ago: executing program 3 (id=4521): pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) connect$inet(r1, &(0x7f0000000300)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x9}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="0000000000000000665000000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50200005000f100850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x90) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x1) splice(r1, 0x0, r0, 0x0, 0x82, 0xa) 2.115035059s ago: executing program 6 (id=4523): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) r1 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000100)={&(0x7f0000000340)={0x2d, 0x0, 0x1f, 0x40000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="08000500060000000c001780040007"], 0x30}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5}, @RTA_UID={0x8}]}, 0x2c}}, 0x0) 1.888459702s ago: executing program 7 (id=4525): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8001}]}, 0x30}, 0x1, 0x0, 0x0, 0x20050844}, 0x4084) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8001}]}, 0x30}, 0x1, 0x0, 0x0, 0x20050844}, 0x4084) r4 = socket(0x1, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'ip6gre0\x00', @ifru_data=&(0x7f0000000500)="1a4cf331728a2ab98f4b19a5a033e412b2a11fbbb6a3a9c9e6bea5f37dbca046"}) ioctl$sock_netdev_private(r6, 0x89f1, &(0x7f0000000000)) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) (async) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x884) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x884) 1.721186185s ago: executing program 5 (id=4526): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x2, 0x0) listen(0xffffffffffffffff, 0x401) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x300, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, 0x440, 0x10059}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x80) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a0088fbbbbbbbbbbbbbaaaaaaaaaa2986dd6d002008006411ff20010000000000000000000000000001ff0200000000000000000000000000014f194e20006490780200000000000000010000013e3c3afef985ff51ccb1c8230000000000000000000000000000000000000000aeae9722f544e6e34f9a474cfae5dd817ee995b43932ef77ec0fd0637ad0a514cb48540000000023cbe3f9ab51c0ed49a0c41ea0c56c96ba308b17022b1fc230b6718f4a50eba9d99bcb8ead2d74d12e36c7eb236c99af80248e095b91"], 0x9e) 1.680731241s ago: executing program 7 (id=4527): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f00000000c0)={@val={0x0, 0x30f6}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x20}}, {@generic={0x60, "19d9"}}}}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call]}, &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r1, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) 1.572376368s ago: executing program 2 (id=4528): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f0009"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f0009"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) accept4$unix(r3, 0x0, &(0x7f00000001c0), 0x800) (async) r4 = accept4$unix(r3, 0x0, &(0x7f00000001c0), 0x800) recvfrom$unix(r4, &(0x7f00000002c0)=""/124, 0x7c, 0x2000, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x3c, r6, 0x2, 0x0, 0x0, {{0x2}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x3c}}, 0xd4) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x3c, r6, 0x2, 0x0, 0x0, {{0x2}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x3c}}, 0xd4) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000206010100000000000000000000000005000100070000000900020073797a3000000000050005000200000005000400ac1b5e00001000120003006269746d61703a69702c6d616300000004000780778c3cfba2953280543d812dbac921f2a66c12c62e80df7ff87d2032fc4006a1dabe01c2f6f0fb89743d426e4b802337ebe4c5c31050"], 0x50}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xe}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x0, 0x20000001, 0x8, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 1.560457094s ago: executing program 5 (id=4529): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x4, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.393328198s ago: executing program 7 (id=4530): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000180)="6e54922475cc82ac929c77e2efee814133c8cef498f82ac131d79c4a43707d0ada99235f87de5e0c77", 0x29) r1 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000240)=0x80) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000edff0000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e"], 0x128}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x80000000, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=0x1000) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xf4, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x796e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4bd}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xcbc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7af}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) 1.341091169s ago: executing program 5 (id=4531): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x1c, r2, 0x1, 0xf0bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@getqdisc={0x30, 0x26, 0x20, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9, 0xfff2}, {0xfff3, 0xfffa}, {0x6, 0xd}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000800}, 0x4000010) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, 0x0, 0x0) 1.309742721s ago: executing program 2 (id=4532): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x4004000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r3, &(0x7f0000001680)={&(0x7f0000000140)=@llc={0x1a, 0x304, 0xe1, 0x2, 0x1, 0x0, @multicast}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)="8e62cde92d908f7ee9123b06f07c492ba98145fc93a2c3096914e3cec3d2fbd5ab579e8f8e89150a477e53885c5b6d6286725749f585666b42bed598d5bff38e37efdfa1657ab96ad753d0ac6a325a83cfea828f4b7ae45db229158fb3dba5bb6402c4cd6e182297ad3afb3c1b56ceb6a5e11299cd41e5f7e969c4bae102f3c619cfdbe27e29bc13caa4bb1def9a5e842f9324f3bb18ea1f56d9ca3a23c25430712447f4ff92828184136acf722245fe5d7ccc7e6a5fa16795fa377236883242f35f90828fee8ca733bc64ced5b8b564a814bafaa57370a966d4ddace98c795038e24e0ec166ee926488c9c9e18a74e749dcbe", 0xf3}], 0x1, &(0x7f0000000300)=[{0x108, 0x115, 0x8, "a85fba3824ed00ec3ebfe50c90e8951b55081abf92b1d225598ae8afdc2adce65a77c8f2d275445cc3fdb3ea6371fc462b3cf1ab9b10831f39065c99c3715fb83e90619f60cc75076e7f3fdce8c8a3e1c9cc5710c62fec67303efa4e6624b16ef39437e35e6c474a4c41ce4024069e1628c0f36c490d26e0534f58199ae952bc14f342bd37c072cee4b3d5687b9f0827c2d945066a59ef096842d98f9607cbf0dcf3abc032cb0c928d98bdb541e3f1c335d39e1e5cd58cd9c2cb1520d3d6517771bf9f00917c43a7323d3a3d3dcd22df788b187d2808d85fb4ceea9d2914e817914f9e62d62a9b1788201322483045f5559df6261bbf84a4"}, {0xa0, 0x29, 0x5, "2e5d71b45a74669de87c099059f1924321edcd8941a1e113aea99e7059f57c7f1612f9f422da480e5e3515dfbbbfdd574c966aefcdcd3393f2b87bdfa0034aabdf0e9e7203319b3c0d7bcba96cb46cbd7511eac42b21e5ded0772a70caf75de68fb041286d21ba437a0fa5f76a8736fbedc8812b181014c915d05e3da5b7490977908b7969b0abc57b205ca90509"}, {0xd8, 0x0, 0x8, "f6b28fe8c82754fe7142acc0b5d375331266f14d80286e8f1ee5f5222240736371a5e6b591a3ebc1b50a108816de21e4d679b864113f0185f77be50762143f2e04569dfec1f6b5d590f3ac947da469482159a70d0b4d6888812d046552abe26853b9548ce9542f79a79fd3ef73d57fe4709a470c93b5028af5c357a82691fc99dfdcdc9a12e8df1eeb55aa3157175a977857bd586bff69ec287de6d6a00b66c15e971863ee7d26cce9b01f33b9ae58a87b3b9439d225e087391aa25c37d28125a8b873740926ec91"}, {0x1010, 0x10d, 0x200, "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"}, {0xa0, 0x115, 0x7e60, "c980cd8d19f4881233653349e27406fe6a24d1fa618c83dac4f21bc9646ae51f852cfdb09ca42358e6f375ca84c251e4588aa6ef9392d3b033bd4f5375a17179d759a7aaa9e5b5d19070ccc613db8fef1edfadec45b399b2dae9862f74e9b182f1408c236562005ce3767d9b4c20cf2aaf354e50dec6db7a03e8feec9b6291612f6128b3956fa808ffe7d9"}, {0x48, 0x10a, 0x4, "b4cf25734b2b0fb100d2495eaa70885055416d42caedea70b259d02359a35bcaad7752d834367cdd0f3a4c48ec9f2ac4bd"}], 0x1378}, 0x8000001) (async) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$XFS_IOC_ERROR_CLEARALL(r4, 0x40085875) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000016c0)={0x0, 0x4e, "f5c20f063462a101abb80246e38801ff97786deb520734da9156290ce69200706d7378adeeb3e8e9b8240288375644bee1b72874e816a8d12ceff2e37ba33a97d782213bded62d6ea312967e26c3"}, &(0x7f0000001740)=0x56) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000001780)={r5, 0x1ff, 0x101}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001800), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001840)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000001940)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x4c, r7, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xc0d}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000002}, 0x8080) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r9, 0x84, 0x6d, &(0x7f0000001980)={r5, 0x89, "a9a9034807c70179ab56253e720f7cb0224e867016dd75c06549e4b2990ec9000c92ecc28b215f776ff169ab9c6fbd6509da7c544f3801115983bff35348f00fbf5c53b564d8ac29c69485b33d2c7f069e60fff3502dbbb7adfe524f1b8209e7f5ee51c0312482ba3acbb929acd496b788b0a7c2f0ad9851fe33aef81987aace39184c5f44ffdee2ba"}, &(0x7f0000001a40)=0x91) (async) r10 = socket(0xb, 0x4, 0x10000) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000001a80)={0xffffffffffffffff, 0x0, 0x1, 0x3, @vifc_lcl_addr=@multicast2, @loopback}, 0x10) (async) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x24, r11, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x80}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80c0}, 0x40800) (async) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r12, 0x0, 0x96b124f651357fbc, &(0x7f0000001c00)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c80), r6) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000001dc0)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001d80)={&(0x7f0000001cc0)={0xb4, r13, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x86, 0x2a, [@tim={0x5, 0x78, {0x1, 0x5e, 0x5, "672d89ffc963618b2ed5e250e71b81226352547025386700b42896fe55defd598886fc6bd097bf1f26565842d219ed8addc67c15b9fbce60a55de4f75bf3baba16fbf6d93a2ed6427e54e9836ae264603ef37347cf587736ab60a05d35d8a774fa45c25f046e896d0e1b9f404989cc1a53e7c6d42f"}}, @mesh_chsw={0x76, 0x6, {0xb, 0x6, 0x35, 0x7}}]}, @NL80211_ATTR_SSID={0xc, 0x34, @random="21cc23ba0c595da2"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0xb4}}, 0x9000) (async) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001e40), r6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001e80)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000002040)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002000)={&(0x7f0000001ec0)={0x11c, r14, 0xb8de75f0ccca2976, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x48840}, 0x8000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002080), 0xffffffffffffffff) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000002680)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002640)={&(0x7f0000002100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0x164, 0x8, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_RULE_USERDATA={0xd2, 0x7, 0x1, 0x0, "817bb4a8d55dac025178d60be232e802d36ca54a4465da3be2f4adb22b19d54089f1d84ca6ad60e572743525803aa861053745e8c9f437039007724e406fca7ef4013173422bb5d1134f29f671202b058f24bc24d1f4d3def4ba1f222cfee18a471e40893be69034c121f12ed167fe21a5d453988328a2da17974bfb3a98dc07812c46a4c87fb357205bda6071c21fdb7aba9ca491a727983a7c0ec7e71d0086344e97619df6574105b1fe4357c3adccb3f3cd8eed2a97024d23f8f12f0634404d1b01aed019cce314e79d3f6ff3"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x360, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xc0, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}]}, {0xac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xa8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x49, 0x1, "3a9ab0900abf6c7c8290415718c69ab5c2a4d4bcce09cd01ff42aa5829a5fcceff2af0925f47b0fca8d1bd3b387ea8fed346641df6a4b2736650ce7df1c9009f512238887a"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x260, 0x3, 0x0, 0x1, [{0x258, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x80, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x1b0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x1b, 0x1, "a838cfa9cd3b78a774406333a92fca42d35f1678bf6ab0"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xea, 0x1, "4b82403b0a38a7f927bd11d67afa177bbe19e431a5b2023142f3fa69ad0114570b779b2f13e047e9d17f65c429306f3ffe231c3d7861ae75e0c7d81f0836df831db843cb6d4f660114668ca927fdf936950659d03628de7b7712288ad8ebc3f4d98c6623e0afc534b20ef3798ee900febe6f316fd16020d46e103f7c448edf230eccff91c58594ab0fe7a7a32ba0ced2d7defc55ba433524c7e3ffa43c4d4019c936a5e965740728753a4beed85d59d75ba23192a1dc0841bf0a01a661cfe30b964b7ec16aff4fc37da89ffbbc72b331969467956b8f6bc1101381cbf79f6dceb7aef9759f95"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffffffffffff}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x520}, 0x1, 0x0, 0x0, 0x440c0}, 0x4) 1.290789083s ago: executing program 7 (id=4533): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'lo\x00', 0x7101}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x339) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 1.19246468s ago: executing program 5 (id=4534): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) recvmmsg(r0, &(0x7f0000007040)=[{{&(0x7f0000000140)=@nfc, 0x80, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/121, 0x79}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000001080)=""/4096, 0x1000}, 0x80000000}, {{0x0, 0x0, &(0x7f0000002080), 0x0, &(0x7f00000020c0)=""/79, 0x4f}, 0x20}, {{&(0x7f0000002140)=@nfc_llcp, 0x80, &(0x7f00000032c0)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/162, 0xa2}], 0x2}, 0x5}, {{&(0x7f0000003300)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000003900)=[{&(0x7f0000003380)=""/247, 0xf7}, {&(0x7f0000003480)=""/106, 0x6a}, {&(0x7f0000003500)=""/163, 0xa3}, {&(0x7f00000035c0)=""/68, 0x44}, {&(0x7f0000003640)=""/47, 0x2f}, {&(0x7f0000003680)=""/230, 0xe6}, {&(0x7f0000003780)=""/205, 0xcd}, {&(0x7f0000003880)=""/124, 0x7c}], 0x8, &(0x7f0000003980)=""/47, 0x2f}, 0x8}, {{&(0x7f00000039c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000005b00)=[{&(0x7f0000003a40)=""/4096, 0x1000}, {&(0x7f0000004a40)=""/4096, 0x1000}, {&(0x7f0000005a40)=""/164, 0xa4}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000006b40)=[{&(0x7f0000005b40)=""/4096, 0x1000}], 0x1, &(0x7f0000006b80)=""/126, 0x7e}, 0x8}, {{&(0x7f0000006c00)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000006d00)=[{&(0x7f0000006c80)=""/117, 0x75}], 0x1}, 0x6}, {{0x0, 0x0, &(0x7f0000006e40)=[{&(0x7f0000006d40)=""/26, 0x1a}, {&(0x7f0000006d80)=""/127, 0x7f}, {&(0x7f0000006e00)=""/57, 0x39}], 0x3}, 0x5}, {{&(0x7f0000006e80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000006fc0)=[{&(0x7f0000006f00)=""/181, 0xb5}], 0x1, &(0x7f0000007000)=""/51, 0x33}}], 0x9, 0x40000123, &(0x7f0000007280)) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800000000000000090000006b1141000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r3, 0x495b866df80b4e6b}, 0x14}}, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmsg(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1}, 0x2000) 1.191793897s ago: executing program 3 (id=4535): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=0x0], 0x54}}, 0xc0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa, {0xe4ffffff}}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e0044000280060002000100000008000900010000000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r3], 0x84}}, 0x20008040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000040)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000080)=0x0) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000180)={0x27, r7, 0xffffffffffffffff, 0x1, 0x1, 0x6, "f669543c0ccb0841b73b5388ded02257862cc36711490ba096497f231dd2e1a62d51cee1861e2e6310f06fa830c299574cca798efd775342509bae6bdcc1a1", 0x3e}, 0x60, &(0x7f00000023c0)=[{&(0x7f00000002c0)="a80c7ddb0b465972680ec2286f9837b755d22f83d430218b6606159dede0fb0defea667d6b488ec0a7828df0af698c60a506a732c0c2619bd7052064e2da4799058a22526ee17ad9a2ead74ba2b41ce32316edbf7805f245a13814d48a7bb9ffe38995210083efae9570e7b66682dab604f97c51a3cbafb0ab57ae04c328dd3967df48ac03cd19de1b0acbd43d794e809bf0a0b673ecc2c1d0f48843914f93ee5cf1aa", 0xa3}, {&(0x7f0000000400)="002c4e04a10e5b57457246e1ecd8d5f55be83a86960dc28f187c71d8c3e534b9d655651a2c1b1043570f500c8050dfb26ef216c9ccfa850d5f5db057f6df2ce05e819fd89828fa1d34caec745b268c9edcf12b2a56dff70823da5ad3d355dd5d23c84e31d8ab11eac03dcdbb8e", 0x6d}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000002180)="eae96150e89f81167db0ffda131eaaba15a7953cba59b6f8e8094bffab4cc66a55aa4bd164bb7e7e7f7353f1523cc9c7c2fc0a328c10ed622a79", 0x3a}, {&(0x7f00000021c0)="7dcc4342095b506668dabaaf2747f9664232c4318c4bb1ff4be6cbcaed8e2dcdab74f88dcb96667f2ba65b97e8aa0fb98ab93f3927a7d9df4ccfdad8d8852dfaef37a222732909a16f03c0e9", 0x4c}, {&(0x7f0000002240)="68a602f7e42996720fedb8fa7239f6b9485441355faad80a95852caa735e347aa6cad27b05f094f7f72bb4660083891d99ad25037b047fdae088d1bbdb5c75139cad3418fd7e2bc712fe4619ad908661268a89b552f34a48cef48f78fc0cff93ea57a9daae295f65d1c235adb17218a370001213bcb4a18e94ed96ddc3a83912d4d2e9651d0d1095c667f6cd6c947bc4c8b2b04436976d3e5a473a55311358fcc8c4196e325b92d8cbc4c87a233731f5400b958c1e874155866e79f967784972742608093efea6c94f3dcbe34df85d39d07a98b5a30328a7141d0f9b6887413df688ff537a40f9ba3e973d50000e", 0xee}, {&(0x7f0000002340)="28f219bafbfe180503ac0001b2732255e2927cd1729a76dda2dfe71b430bf3f3e8531b69f18788e5287aca8e6c6bdcb830b151b40aed284f7af6d3c506cdee93159c5369e0f0308939a45a9e2f231d4f1ae947c4e15b6e65ad1d376d3efa268309c76b868294fe94fcb6ac6d09eea0013ecf775062428eaccf04994196", 0x7d}], 0x7, &(0x7f0000002440)=ANY=[@ANYBLOB="f8000000000000000100000008000000b6908f6cf680b0cf077aa6aa2bce2c9b6d72fdbaa9960df8f2324610f2601e860365201341dee6d5131fd82e2eb73e71461be390a62bb89f941c6e9cd0342e50203e868f7064ebccbf07b54991eda0a9a1f26e8a03000000000000004e8f69d15449944cd271587b35ad5c383fe300cb15f7a5b487ec89bcf355fec5115e75bc15bdc353ff0ea746f0b515c52e8b29f266d77a723cc0a02126d5862cc20021286cd8deb85c8e0e623d713625ac85a7b5a287d4ccf444b71c9a38872d283e1c4a706d54f5d58dbc701587784c55d67a10b9cf7c59137c33235c1e0d87bc0cbaeeebfcde696d071278"], 0xf8, 0x4000}, 0x20000000) 1.17451607s ago: executing program 6 (id=4536): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3b}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b32, &(0x7f0000000040)) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000240)={0x3ffd}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@ipv6_getaddr={0xfffffffffffffe4e, 0x16, 0x3c2be10bca706f15, 0x2000000, 0x0, {}, [@IFA_RT_PRIORITY={0x0, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004015}, 0x4000800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r5, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012000, 0x0) sendto$unix(r4, &(0x7f0000000000)="ba", 0x1, 0x48005, 0x0, 0x0) ioctl(r3, 0x8b2a, &(0x7f0000000040)) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xee}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b40500000000000000000000060000000000000095000000000000001b4ac1f5c4509218b6e0aa03384f5ccc3c26a61e5d9999774ad718a36d6236f3574f51a3e72d3367d536e1b2de3f6889bb289636aae9ee920792c8b9d33aef8e6745cda584d4fee44adaac"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r9 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r9, &(0x7f0000000180)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x68, 0x30, 0x100, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0xf, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000203030001"], 0x14}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000007780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000007740)={&(0x7f0000004000)={0x3740, 0xd, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x184c, 0x3, 0x0, 0x1, [{0x264, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x3c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_KEY={0x164, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x5b, 0x1, "25d3c97b1f4abf2508616381c7d7274e96036b526fd84da95c7ad7541db6f06d62f6854683cc064fd7dbbfc09b12416f8486b1512c5cec4e2b3f9c20717524246d9cb049efaae91a7bc7d80df6556d63cd834df2a9a787"}, @NFTA_DATA_VALUE={0xed, 0x1, "358a3bf0075c56a2d252a4c4d376aacae0366f0c6aede3316ca9a82027aa04c885f625ad86089f643340973f870505ad9711fb894b19fbd37971efcf403bf3cddf416fbd841cd620ea4feafc5977c4341eed673e162273a72fe43eb3fdc6dcc43328194aafbdbe3e02b6be61c146ec575adb4c01ffa1033febd4ee0e0e2198db3c7acd8c13c1d13d7ec7211fbad8576bb8081a8852bd1fbe4d4c377d5653ef03125f462dd15ce452928a73ce97f213486d36178dc8402bb1127c06d9c60ab48fecf89909d11eff300de00b59f9eef44667b8833a007c0fef29d5b13daaf7874d78d4f188f2b0de0021"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0xb4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x27, 0x1, "c7c6db94bfe8a6808eff3687b827ec55e43e3cded8c50bed76ad269838239d164084f7"}, @NFTA_DATA_VALUE={0x87, 0x1, "e8dae62ca9fe2b1bd161aba33253eed505eb12351b7536638ec93593b5eb255255996962cd81c498de0906a84a002cd3e9137bbcd7e11457387a94996b48f1facedd58d0f72dd76a09c2313b0461b46b15d9eb2122275933037093a4a238d3f6ff472750defee6ae93007f3cfc402469bcbc580a6873e6d8cc009115aad766f886c03a"}]}]}, {0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x30, 0x6, 0x1, 0x0, "b92a1b9a4a7edb95d910eb149f39a2fa92eae9cd6607a94050594af7ddb891dd26743966e59f4e5b7b27aa7d"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}, {0x1358, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_KEY={0x12c0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd6, 0x1, "ea8b682583b059994e95df67e45a48cf273f1586bfcdcf2503a2da280039fe40b91433f57bfb5bd9a3abdfbcf0a366185fb6fbea0f0935076f8b375905ea7a4711fecb15a8781242a19c5c25c65f50de56a2428a0b598920d8e75c0b740964761c584291808a67c4f16fd15faa33b91b0bf13f644b7e610738ca3c0164d6808b306d36048958da189be28a865567f0728a7698513a49cf7f4a6023245870d57ed33c730adb81942741d82f2b53c2d0d42578564ac9c5cd369de2ad5670e443139d033f9079a68b49a276e85a9d003c3d5720"}, @NFTA_DATA_VALUE={0xa8, 0x1, "f934ed29b83af6b84f71f2263458851df1e74576e4adc06e16547f15356e46cc7310e87585dfa55047698d4ad679344fa4aa6d4bfb46e6636adc9fb193bac8e7618ec0917a6060229632f3a472b767d8f721a10a36e044573aa7087a5c337f96d920bbcfe5c555a3c3563e4863e4fabdf91f69387ae686bd199bb5e9171cf3dea6e937f7488d252c72158ae90b9a58bfa7910e48615948a055f41d4e7ff7388e5d2a936f"}, @NFTA_DATA_VALUE={0x5d, 0x1, "ee0729ce663ced64743a2d7fa8e137d3a089f25f5dc62bd0fd00bcb8f5baa81e2b84778c9f68e9ad2ea4e9f04fdf847c867436af6aa7a3feb0103faafa4b69bfe49e3bc393ab8f6dd9db2edbed0544d907a044e4bb6534c498"}, @NFTA_DATA_VALUE={0xd5, 0x1, "fbc335166579cdcb4a13ec0f67cef6388c6d324a9e154176fb50b95cbd7ac1002bfe567c2df506072252e87ae47fe2b212af0abcd46dee79bf45b7cad7dbc07355f13eea35b45bd24b5c269823a1b17ce12ad15c04958d4c308886a9853cbf7fe4256fa5a154d25e91574f3db8b76a41091a583685b64946f38725aa0fb9704982c1399a70b6417386501b51915c4d6c889c49b6dabf5b6281ba0f815f9a01b488ea9949dad0dc393de68312db0418665144fd105ed6d5c825be7925a7c7bae002e8480105a1fe6287f6c3600d974b5cea"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY_END={0x64, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5f, 0x1, "d5944ae7802bb1e9f4338f16ed4e9dcd2964f2ac7d96a0329a02e9bac30fd7dae259e68c50a57eb20e577598f6025306c7e1b3716146e5269bf5a63fe5f8a087dc2400179a5cfff9a0cfcb5667ba9a2ed4575b902b7a9debba7999"}]}]}, {0x24c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x200, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe0, 0x1, "556c484e09278d8f54f4f31ff1be69ca77a68ec02a32c1d3dae802ee94cf1c765190c1d5f83cfa9c98f67cf9fb0503ff4dbd044f89c26bd8100f5dca04397dca1e011a431c1793c27c8ae77f09bbf201e0fad3bedfebd144f17c8c5caba30c584fef18d6a881176bbd5a50820f797c66d15c43b5046e5755966aadd19c76191ba9d9333675ff1ced39905a4140d501088e484d2fd6412cca960fd46b788f188876e51c743f648d11e39d9640cf7cee1a5a1b23198ace0ebfbd147e285e988f2d1708e5ce0ed1cd1af31a59a37c98d92900061d1118fd63b1cc9d9762"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x8f, 0x1, "461c1287455a8559372ba17b89e672a774366977a15c89884aa7e385b625c2171b0abb9b1b1b19953f23b909c754b8cee573ef9f719338c47a5710b989fa5229f8dec80e23244b51aa47d1f2b023944f85d65192a2327bab328508e500db6e6d1b1b4195d8a897527ba4666307a0e06dfbc902fddaa2ca781402431d7c0e8c0183b4d0bdf36eb530798762"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x3d}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x6, 0x6, 0x1, 0x0, '8\a'}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xd64, 0x3, 0x0, 0x1, [{0x5fc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xbcd}, @NFTA_SET_ELEM_KEY={0x12c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xf1, 0x1, "c90cb97e0a27cd02131f9497161c873a93a14f7d0d9b4fc6af61b611745a207e3b7be1856f35dd5b1685926aa5b81de6469a9f2ef4a58821510a0b912dad052cba9e8029b0093a8a438dcd72b8467e6bd79424b5395afda8993f7c662cf2d968d4bd92060ad5b74244b2293ee9aa37de33528e7f0634afc640c7cedec6a812d41f4b07b703f6154b51cc9807be5e83c80891517e66fa9c6b63eec8b836fbb7d747683070dc4fdf00252d6de24f777a40232f7886749ec085c8b66a644e547fbdb5e1c689c9c53f0625d49384d919ac1d327c20d3f887f93630859cc4d6dd9e16853bcefd91731742853bc5416a"}]}, @NFTA_SET_ELEM_KEY_END={0x278, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9f, 0x1, "b0f99999e048fd03a154f216c1acb456aa74ebb95942700aa698f12c6daa99613ad899eca7cfa6818cbc992d461cbf7412000bfee3670b44128b01b8d602d810d7c2b718738bb8f954b3b5bb708a7e30b9a386b0f791b5a60d2899492caee3dc55bca2cfb6d6c38cf7d917d885f74d6c5dcab904c9cc41830667b03b87ba482f7b6068c985266fb912a4ede385180b3e6b0099382eeef559ffb390"}, @NFTA_DATA_VALUE={0x101, 0x1, "1aabab4eb436fbff853b503acebedae03ad26c62c88d489eb66431bca50579a2ed31fba4ee4640bcc09816f56b629a394c62ef5d98a5bc06afd03e75b67f7c71148a0b3994517054bdc8c2cce7510fd5e8b5796b9427a395287b867beae08338003c3b5305e8703a2732e66f5a5d1698094d39a97e69e3fdbbc79e4bf7e5bb2c3ea3a57d23438615d0462cc3147963b84ff2808d069256096e3b86ff2e1da10228c95cd37483ee297ab570921629495fc8bf7b5f516af4cf60b8c653ab1b5ddc4f43bf59ad7f7fb2c6a6a471f9b0f7fcea53b8ec3e10562e46562573d5befccd14dc2d5eea4b7dffe8ec207065165fb50eca0d81a30cb554b2d2e1890e"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xf}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x218, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x6f, 0x1, "fea1b75bdf3ef676fd7b4233efd00a04b5026b0a246ff654fddbd48df3e2a18779f90e01cc39c9a212e7ca19712ef3cc3433e441ce9502bb48e4086f201acbfb11109a9533caf86f2605cc20929fce7f5d85cfb2400d5de7b6da9aa8a21903bd3911a3263aac6a88a3b323"}, @NFTA_DATA_VALUE={0x23, 0x1, "2c3f52c71060c27159c32d04756d87bf4450cdf65ed0b627c86e133ac21763"}, @NFTA_DATA_VALUE={0x52, 0x1, "4d72cb5ed44bf9c635e534185858d8bd7033da4c92d4b6e2e8868e032e6bc221d0c2ee88661a42438f8037d81a8cef7e353b02a04835bb177187824b0c875d3ecd6f962bf472e8ff00c054171ebe"}, @NFTA_DATA_VALUE={0x44, 0x1, "af587274a118544ecae991f061b7d4f1b42d1535c2278e323dc2eb55d9dfe441012aca7858a8381eb0477e19b3a1ae74d35c9191d06940e663703be1defdc8e4"}, @NFTA_DATA_VALUE={0x4b, 0x1, "634572a14c0cd81548448a2c229c578b3ca1f8eb4f356837464bb552793c6435b76e6a9c3a6ff9b5d87abacabe348b43a2c9f3db77d9653343a1e04b4d85a4b58b7e1d44d9e753"}, @NFTA_DATA_VALUE={0x51, 0x1, "512cc0335a4b04160ca1c54e706452edc7f32cb000ba5203999d8473727257684e8b758f1f337ca0771a48893b01b11363fa5e18202cd1dcf207c6418c26d6cc1883ace2e30f772d399b44caef"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x81}]}, {0x3e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x120, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x30, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x54, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x1a}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TUNNEL_MODE={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xac, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x4c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_META_SREG={0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}, @NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0x1ec, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd3, 0x1, "5d16b1e13d440b5139827a6fb2ee3a494def31a272036f312a6fccacb28d01214fd036342e5355255c93bf58fc24274ce32a534b7d02e00b1aa17c84a08fedc08d2d850c2bbe0bd813675886324880aa6a8ae5cce26f283f58b1e0f913da54b841ebf636e06b8ec0fc375a02244ef98aacf0078c11a45e1073d81d09e6f210262c250d36bef4921e60ee4f0680c68b6864b2cc8c504880112cb5c6ddd42b4f7efe5df4aaed75ce8853f7715b153c5ad6b5b551f2b966d6583423074dedfb6c1dae2525d1bf81f8697bd6333471b71f"}, @NFTA_DATA_VALUE={0xea, 0x1, "b4fba73136093d7944d6a4b71e32b8618f04ac7ac268936987b35c47c9e626ff8c8ed822dde4e6620f5e87ad0d2f826981fff0876934c6ea3df2c300420ee1fceceda61a72c2c07c860685b77c5141baa2d69c21378d7b4633787fc5d9360db8cc9e75667af4b370983ec165ac14fca35c874dc4dda6bacf357d0abc97f10f4dbec3020fe05053e504bc0aa8c95b08f0c514f35579e550b65b42d200bc96719bb775f5bf20d933245b258118a9fda5192ff70c604678f2a3a3e6a027c5dd59ea2fb96e015602640a8bb9fb06a8593a037c3d37940da87460b07a33adf3b13963e05982377238"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x194, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPR={0x58, 0x7, 0x0, 0x1, @synproxy={{0xd}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x6}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x67}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xe}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x8}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xfa}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0x44, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_DATA={0x84, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @hash={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x4d}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_HASH_DREG={0x8}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup={{0x8}, @void}}]}, {0x164, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xf4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x7, 0x1, "0ec174"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x6c, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x4c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xf2}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x92}, @NFTA_SOCKET_KEY={0x8}]}}}]}]}, {0x70, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xd, 0x6, 0x1, 0x0, "f424d1c37009c3e48d"}, @NFTA_SET_ELEM_KEY_END={0x5c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x58, 0x1, "d9bb8f84ee0f78d7d87da1fe28efe3877590b959b0fec5f9fe81343467a27594232b9f677ad9b525ec71dfef691ce6602f027ffb17ee1752563035123a76300747aadd090c25b77c09218ae4fc210458b6ade4ce"}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x116c, 0x3, 0x0, 0x1, [{0x1120, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10ec, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xa8, 0x1, "a0b9c9d86d2994e7246a288b08cbe01fa23afd82e2be345544c841bd6e709632a86df709b502375685c4cb1452e42e2554a3d33451201f4dc01475100ca22bd8f222f0d5c762d8f1e5cb03df8ec560d353cce70103d0d31936ffaf99f395bedf694ab713f06492eb0683427b27f4aa0d58bf6a91bc933c1d8e22489f54b8f736cd601c8efd91b588c3aeb3342a36efeed88a5408555e02a9dd26be02a0e96934ad843a54"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x401}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @flow_offload={{0x11}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @osf={{0x8}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x3740}, 0x1, 0x0, 0x0, 0x40001}, 0x24000041) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r8) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="00000000759947fff2cfd77c0e3952d3ca3bc480ee271ed5823c75480c8029829f04992790422d0a2943ad41a2549852da4c6d6cfe987dc04aaa04f8a2aa", @ANYRES16=r10, @ANYBLOB="100029bd7000fbdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0c009900040000002800000008000d000400000008006b000101000008000c000300000005001801090000000a00180003030303030300000400080104007000040008010400cc00"], 0x64}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@deltaction={0x24, 0x31, 0x100, 0x70bd27, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc5f0}}]}]}, 0x24}}, 0x4000000) 1.016634184s ago: executing program 2 (id=4537): r0 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={r4}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r4}, @ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) write$nci(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="4b0501"], 0x19) socket(0x3, 0x800, 0x6) unshare(0x22020600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x7, 0x0, 0x0, 0x10}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x92, &(0x7f0000000240)=""/146}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x20000) mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x1010, r10, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x60, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "31329eae551326051c0ecba1df0ef9cc9415b343831f26fe"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0x60}}, 0x0) 804.85691ms ago: executing program 3 (id=4538): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}]}}}, {0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000037000000080003", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) 341.223078ms ago: executing program 5 (id=4539): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg0\x00'}) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg0\x00'}) (async) 309.218943ms ago: executing program 5 (id=4540): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$inet6(0xa, 0x4, 0x8) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket(0x22, 0xa, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, 0x0, &(0x7f00000000c0)) syz_open_procfs$namespace(0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x3a, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x0, 0x5, 0x3f}, 0x2c) socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x3, 0x2}}, 0x44) socket$netlink(0x10, 0x3, 0x15) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) 164.92434ms ago: executing program 6 (id=4541): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ff07000000ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x8f}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844) 100.164686ms ago: executing program 6 (id=4542): r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0xe, 0x12) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x20000000, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x3, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) (async, rerun: 32) close(r1) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) (async) r4 = socket(0x10, 0x80002, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async, rerun: 32) r7 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) (async) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) (async) close(0x4) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x2000800) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x1ff) (async) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r8, &(0x7f0000013c00)={0x0, 0x0, &(0x7f0000013bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001b140100000000000d000000080004"], 0x28}, 0x1, 0x0, 0x0, 0x4855}, 0x0) 29.655516ms ago: executing program 2 (id=4543): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x41}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r3, 0x1, 0x70bd2c, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xac}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}]}, &(0x7f0000000180)=0x10) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, 0x0, 0x0) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000280)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xb9, "7ad78f03f9c15b"}) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0xd0009411, &(0x7f0000002440)={{r8, 0xff, 0x9, 0x5, 0x1681140d, 0x4, 0x1, 0x6, 0x0, 0x8, 0x81, 0x0, 0x9, 0x81, 0xf}}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) recvmmsg(r9, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) r11 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$can_j1939(r9, &(0x7f0000005040)={&(0x7f0000000100)={0x1d, r12, 0x1, {0x1, 0x1, 0x4}, 0xfe}, 0x18, &(0x7f0000005000)={&(0x7f0000004000)="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", 0x1000}, 0x1, 0x0, 0x0, 0x80c0}, 0x28810) write$tun(r6, &(0x7f0000001440)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0xfffc, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0xfc0, 0x68, 0x0, 0x60, 0x73, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "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"}}, 0xfce) 0s ago: executing program 3 (id=4544): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r4, @ANYBLOB="0a00a3fff54031e53e55000018005080110007"], 0x40}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x28, r1, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): d allmulticast mode [ 654.723556][T16458] bridge_slave_1: entered promiscuous mode [ 654.766448][T16458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.778993][T16458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.827079][T16458] team0: Port device team_slave_0 added [ 654.835894][T16458] team0: Port device team_slave_1 added [ 654.881639][T16458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.892416][T16458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.918675][T16458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.931827][ T5650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.953042][T16458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.960011][T16458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.986623][T16458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.043938][ T5821] team0: left allmulticast mode [ 655.049497][ T5821] team_slave_1: left allmulticast mode [ 655.055117][ T5821] vlan0: left allmulticast mode [ 655.059996][ T5821] veth0_vlan: left allmulticast mode [ 655.069016][ T5821] team0: left promiscuous mode [ 655.074807][ T5821] team_slave_1: left promiscuous mode [ 655.080645][ T5821] vlan0: left promiscuous mode [ 655.089521][ T5821] bridge0: port 3(team0) entered disabled state [ 655.101660][ T5821] bridge_slave_1: left allmulticast mode [ 655.107450][ T5821] bridge_slave_1: left promiscuous mode [ 655.114465][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.127030][ T5821] bridge_slave_0: left allmulticast mode [ 655.133708][ T5821] bridge_slave_0: left promiscuous mode [ 655.139612][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.405168][ T5821] bond6 (unregistering): (slave geneve3): Releasing active interface [ 655.646006][ T5821] team0: Port device bridge5 removed [ 655.810334][ T5687] Bluetooth: hci5: command tx timeout [ 655.832923][ T5821] .`¹ (unregistering): (slave bond_slave_0): Releasing backup interface [ 655.842336][ T5821] bond_slave_0: left allmulticast mode [ 655.850586][ T5821] .`¹ (unregistering): (slave bond_slave_1): Releasing backup interface [ 655.859429][ T5821] bond_slave_1: left allmulticast mode [ 655.868982][ T5821] .`¹ (unregistering): Released all slaves [ 655.879496][ T5821] bond1 (unregistering): Released all slaves [ 655.894170][ T5821] bond2 (unregistering): Released all slaves [ 655.908352][ T5821] bond3 (unregistering): Released all slaves [ 655.925648][ T5821] bond4 (unregistering): Released all slaves [ 655.944975][ T5821] bond5 (unregistering): Released all slaves [ 655.962397][ T5821] bond0 (unregistering): Released all slaves [ 655.977649][ T5821] bond6 (unregistering): Released all slaves [ 655.997578][ T5821] bond7 (unregistering): Released all slaves [ 656.011440][ T5821] bond8 (unregistering): Released all slaves [ 656.026135][ T5821] bond9 (unregistering): Released all slaves [ 656.045798][ T5821] bond10 (unregistering): Released all slaves [ 656.060002][ T5821] bond11 (unregistering): Released all slaves [ 656.089825][T16423] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 656.100477][T16458] hsr_slave_0: entered promiscuous mode [ 656.114555][T16458] hsr_slave_1: entered promiscuous mode [ 656.329575][T16487] sctp: [Deprecated]: syz.2.2925 (pid 16487) Use of int in max_burst socket option. [ 656.329575][T16487] Use struct sctp_assoc_value instead [ 656.357284][ T5821] tipc: Disabling bearer [ 656.388690][ T5821] tipc: Left network mode [ 656.429411][T16493] netlink: 'syz.3.2927': attribute type 1 has an invalid length. [ 656.447972][T16493] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2927'. [ 656.463048][T16493] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2927'. [ 656.505220][T16496] netlink: 'syz.4.2928': attribute type 1 has an invalid length. [ 656.614430][T16500] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2929'. [ 656.706593][T16496] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 656.728372][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2929'. [ 657.780152][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 657.898716][ T5687] Bluetooth: hci5: command tx timeout [ 657.985710][T16546] syzkaller0: entered promiscuous mode [ 658.000553][T16546] syzkaller0: entered allmulticast mode [ 658.174525][T16583] netlink: 'syz.2.2943': attribute type 1 has an invalid length. [ 658.218095][T16590] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2944'. [ 658.227732][T16586] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2943'. [ 658.704972][ T5821] hsr_slave_0: left promiscuous mode [ 658.738426][ T5821] hsr_slave_1: left promiscuous mode [ 658.757424][ T5821] veth0_macvtap: left allmulticast mode [ 658.763627][ T5821] veth0_macvtap: left promiscuous mode [ 658.775219][ T5821] veth1_vlan: left promiscuous mode [ 658.782468][ T5821] veth0_vlan: left promiscuous mode [ 658.913840][T16620] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 658.989787][T16623] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2951'. [ 659.229407][ T5821] team0 (unregistering): Port device vlan0 removed [ 659.325586][ T5821] team0 (unregistering): Port device team_slave_1 removed [ 659.618639][T16633] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2952'. [ 659.980588][ T5687] Bluetooth: hci5: command tx timeout [ 660.008098][T16653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2954'. [ 660.109692][T16641] syzkaller0: entered promiscuous mode [ 660.115794][T16641] syzkaller0: entered allmulticast mode [ 660.305239][T16653] 8021q: adding VLAN 0 to HW filter on device bond13 [ 662.056620][ T5687] Bluetooth: hci5: command tx timeout [ 662.647537][T16681] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2959'. [ 662.668118][ T5821] IPVS: stop unused estimator thread 0... [ 663.132676][T16713] gretap1: entered promiscuous mode [ 663.214203][T16458] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 663.278985][T16458] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 663.292681][T16458] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 663.330692][T16458] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 663.361128][T16458] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 663.394270][T16730] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 663.399181][T16458] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 663.422574][T16458] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 663.465611][T16458] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 663.656141][T16752] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2976'. [ 663.679818][T16756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2977'. [ 663.738076][T16458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.807215][T16458] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.883996][ T6299] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.891232][ T6299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.984674][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.991898][ T5821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.191540][ T5781] IPVS: starting estimator thread 0... [ 664.302201][T16783] IPVS: using max 33 ests per chain, 79200 per kthread [ 664.534348][T16798] openvswitch: netlink: Flow key attr not present in new flow. [ 664.725326][T16814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2990'. [ 664.748843][T16816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 664.832345][T16816] tun0: tun_chr_ioctl cmd 1074025675 [ 664.840583][T16816] tun0: persist disabled [ 665.306682][T16847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2996'. [ 665.458861][T16458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 665.507263][T16853] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2998'. [ 665.605131][T16458] veth0_vlan: entered promiscuous mode [ 665.664780][T16458] veth1_vlan: entered promiscuous mode [ 665.739628][T16458] veth0_macvtap: entered promiscuous mode [ 665.849440][T16458] veth1_macvtap: entered promiscuous mode [ 665.965794][T16458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.021760][T16458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.084091][ T6307] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.118893][ T6307] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.175086][ T6307] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.208454][ T6307] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.601034][T16914] bridge0: port 3(batadv1) entered blocking state [ 666.640110][T16914] bridge0: port 3(batadv1) entered disabled state [ 666.682359][T16914] batadv1: entered allmulticast mode [ 666.694277][T16914] batadv1: entered promiscuous mode [ 666.796711][ T6307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.832686][ T6307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.836847][T16922] SET target dimension over the limit! [ 666.888817][ T6307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.900935][ T6307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.902222][T16922] syzkaller0: entered allmulticast mode [ 667.061581][ T5821] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 667.071288][ T5821] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 667.128034][T16936] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3015'. [ 667.293322][T16942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3017'. [ 667.371818][T16942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 667.394216][T16947] --map-set only usable from mangle table [ 667.570000][ T5672] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 667.587327][ T5672] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 667.598235][ T5672] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 667.616178][ T5672] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 667.628156][ T5672] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 667.675035][T16962] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3020'. [ 667.923512][T16974] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3023'. [ 667.956342][T16974] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3023'. [ 668.526142][T17006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3030'. [ 668.683869][T17011] sctp: [Deprecated]: syz.0.3032 (pid 17011) Use of int in maxseg socket option. [ 668.683869][T17011] Use struct sctp_assoc_value instead [ 668.742488][T17014] sctp: [Deprecated]: syz.0.3032 (pid 17014) Use of int in maxseg socket option. [ 668.742488][T17014] Use struct sctp_assoc_value instead [ 669.298434][T17044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3040'. [ 669.408680][T17048] syzkaller0: entered promiscuous mode [ 669.420728][T17048] syzkaller0: entered allmulticast mode [ 669.735057][ T5672] Bluetooth: hci1: command tx timeout [ 669.746665][T16954] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.766596][T16954] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.785444][T16954] bridge_slave_0: entered allmulticast mode [ 669.803778][T16954] bridge_slave_0: entered promiscuous mode [ 669.824218][T16954] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.832058][T16954] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.839330][T16954] bridge_slave_1: entered allmulticast mode [ 669.847510][T16954] bridge_slave_1: entered promiscuous mode [ 669.886333][T16954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.932065][T16954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.006883][T17082] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3048'. [ 670.095700][T16954] team0: Port device team_slave_0 added [ 670.105975][T17090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3052'. [ 670.118789][T16954] team0: Port device team_slave_1 added [ 670.234787][T16954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 670.269166][T16954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.325629][T17102] netlink: 'syz.1.3054': attribute type 1 has an invalid length. [ 670.351029][T16954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 670.421361][T17102] 8021q: adding VLAN 0 to HW filter on device bond14 [ 670.432338][T16954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 670.442851][T16954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.487834][T16954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 670.682700][T16954] hsr_slave_0: entered promiscuous mode [ 670.721695][T16954] hsr_slave_1: entered promiscuous mode [ 670.729600][T16954] debugfs: 'hsr0' already exists in 'hsr' [ 670.736672][T16954] Cannot create hsr debugfs directory [ 670.871596][T17127] syzkaller0: entered promiscuous mode [ 670.885029][T17127] syzkaller0: entered allmulticast mode [ 670.897377][T17123] tipc: Started in network mode [ 670.910373][T17123] tipc: Node identity 1ae9c2a131c3, cluster identity 4711 [ 670.932594][T17123] tipc: Enabled bearer , priority 0 [ 670.964426][T17144] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3062'. [ 671.055128][T17133] bridge13: entered promiscuous mode [ 671.074734][T17133] bridge13: entered allmulticast mode [ 671.099814][T17123] tipc: Resetting bearer [ 671.811510][ T5672] Bluetooth: hci1: command tx timeout [ 673.676765][T17123] tipc: Disabling bearer [ 673.695407][T17155] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3063'. [ 673.709303][ T5650] tipc: Node number set to 724222625 [ 673.869734][T17192] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3067'. [ 673.886536][T17196] netem: change failed [ 673.892603][ T5672] Bluetooth: hci1: command tx timeout [ 673.916081][T17192] bond0 (unregistering): Released all slaves [ 674.018991][T16954] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.031830][T16954] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.044814][T16954] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 674.246231][T16954] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.256776][T16954] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.269849][T16954] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 674.426789][T16954] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.476681][T16954] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.497938][T16954] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 674.632437][T16954] netdevsim netdevsim4  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.643106][T16954] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.654113][T16954] netdevsim netdevsim4  (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 674.909262][T17243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3080'. [ 675.188741][T17257] netlink: 'syz.2.3086': attribute type 12 has an invalid length. [ 675.211087][T16954] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 675.242227][T16954] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 675.273224][T16954] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 675.285762][T16954] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 675.305074][T16954] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 675.316400][T17264] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3089'. [ 675.329724][T16954] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 675.343494][T16954] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 675.354356][T16954] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 675.502552][T17278] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3091'. [ 675.589610][T16954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.645620][T16954] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.669443][T17285] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 675.702412][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.709624][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.757904][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.765169][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.911655][T17287] "syz.0.3095" (17287) uses obsolete ecb(arc4) skcipher [ 675.970487][ T5672] Bluetooth: hci1: command tx timeout [ 676.389340][T17330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3103'. [ 676.401021][T17330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3103'. [ 676.593109][T17339] netlink: 'syz.0.3104': attribute type 1 has an invalid length. [ 676.604955][T16954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.698975][T17307] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 676.960495][T17367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3112'. [ 676.987076][T17367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3112'. [ 677.039300][T17367] bridge14: port 1(vlan1) entered blocking state [ 677.049312][T17367] bridge14: port 1(vlan1) entered disabled state [ 677.059519][T17367] vlan1: entered allmulticast mode [ 677.067465][T17367] bridge14: entered allmulticast mode [ 677.075122][T17367] vlan1: left allmulticast mode [ 677.080011][T17367] bridge14: left allmulticast mode [ 677.115704][T17372] bond0: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 677.127219][T17372] bond0 (unregistering): Released all slaves [ 677.245158][T17375] bridge15: entered promiscuous mode [ 677.266403][T17375] bridge15: entered allmulticast mode [ 677.346561][T16954] veth0_vlan: entered promiscuous mode [ 677.386332][T16954] veth1_vlan: entered promiscuous mode [ 677.396826][T17385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3118'. [ 677.454530][T16954] veth0_macvtap: entered promiscuous mode [ 677.487002][T16954] veth1_macvtap: entered promiscuous mode [ 677.554939][T16954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 677.596941][T16954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 677.673177][ T5939] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.683684][ T5939] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.707122][T17405] xt_hashlimit: size too large, truncated to 1048576 [ 677.720074][ T5939] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.757802][T17402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 677.805936][ T5939] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.014336][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.032970][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.051090][ T5672] Bluetooth: hci0: command 0x0406 tx timeout [ 678.090021][ T5958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.104331][ T5958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.763617][T17441] __nla_validate_parse: 7 callbacks suppressed [ 678.763633][T17441] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3132'. [ 678.846416][T17445] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3132'. [ 678.887203][ T5687] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 678.904179][ T5687] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 678.914018][ T5687] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 678.934717][ T5687] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 678.945808][ T5687] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 679.362244][T17460] nft_compat: unsupported protocol 0 [ 679.404403][T17460] Cannot find del_set index 49151 as target [ 679.537106][T17465] netlink: 'syz.0.3138': attribute type 1 has an invalid length. [ 679.689791][T17465] bond2: entered promiscuous mode [ 679.710889][T17465] 8021q: adding VLAN 0 to HW filter on device bond2 [ 679.958219][T17480] netem: change failed [ 679.973300][T17480] netem: change failed [ 679.999813][T17480] netem: change failed [ 680.016813][T17480] netem: change failed [ 680.027302][T17480] netem: change failed [ 680.104257][T17480] netem: change failed [ 680.111388][T17480] netem: change failed [ 680.153211][T17480] netem: change failed [ 680.160929][T17480] netem: change failed [ 680.173498][T17480] netem: change failed [ 680.182593][T17480] netem: change failed [ 680.198328][T17480] netem: change failed [ 680.201297][T17489] netlink: 'syz.1.3144': attribute type 83 has an invalid length. [ 680.212709][T17480] netem: change failed [ 680.233383][T17480] netem: change failed [ 680.241142][T17480] netem: change failed [ 680.252542][T17480] netem: change failed [ 680.269401][T17480] netem: change failed [ 680.275619][T17480] netem: change failed [ 680.294598][T17480] netem: change failed [ 680.300636][T17480] netem: change failed [ 680.312090][T17480] netem: change failed [ 680.331422][T17480] netem: change failed [ 680.338580][T17480] netem: change failed [ 680.354323][T17480] netem: change failed [ 680.372994][T17480] netem: change failed [ 680.379213][T17480] netem: change failed [ 680.395165][T17480] netem: change failed [ 680.411910][T17480] netem: change failed [ 680.416826][T17480] netem: change failed [ 680.431255][T17480] netem: change failed [ 680.438471][T17480] netem: change failed [ 680.460631][T17480] netem: change failed [ 680.470778][T17494] SET target dimension over the limit! [ 680.472992][T17480] netem: change failed [ 680.499499][T17480] netem: change failed [ 680.512135][T17480] netem: change failed [ 680.523788][T17480] netem: change failed [ 680.544961][T17480] netem: change failed [ 680.556301][T17480] netem: change failed [ 680.568615][T17480] netem: change failed [ 680.576029][T17498] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 680.579496][T17480] netem: change failed [ 680.584236][T17498] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 680.603045][T17480] netem: change failed [ 680.608281][T17480] netem: change failed [ 680.629323][T17480] netem: change failed [ 680.629958][T17498] No such timeout policy "syz0" [ 680.652456][T17480] netem: change failed [ 680.666569][T17480] netem: change failed [ 680.671483][T17480] netem: change failed [ 680.699371][T17480] netem: change failed [ 680.713574][T17480] netem: change failed [ 680.727133][T17480] netem: change failed [ 680.734264][T17480] netem: change failed [ 680.744059][T17480] netem: change failed [ 680.934913][T17446] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.951982][T17446] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.970549][T17446] bridge_slave_0: entered allmulticast mode [ 680.981463][T17446] bridge_slave_0: entered promiscuous mode [ 680.991328][T17446] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.998629][T17446] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.006213][T17446] bridge_slave_1: entered allmulticast mode [ 681.012269][ T5687] Bluetooth: hci3: command tx timeout [ 681.021507][T17446] bridge_slave_1: entered promiscuous mode [ 681.065107][T17446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.083779][T17446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.124748][T17525] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3153'. [ 681.128216][T17446] team0: Port device team_slave_0 added [ 681.152549][T17446] team0: Port device team_slave_1 added [ 681.205015][T17446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.213073][T17446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.240052][T17446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.253995][T17446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.261622][T17446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.289803][T17446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 681.431695][T17446] hsr_slave_0: entered promiscuous mode [ 681.438486][T17446] hsr_slave_1: entered promiscuous mode [ 681.446495][T17446] debugfs: 'hsr0' already exists in 'hsr' [ 681.452988][T17446] Cannot create hsr debugfs directory [ 681.656807][T17547] ip6t_srh: unknown srh match flags 4000 [ 681.680388][T17547] tipc: Enabling of bearer rejected, media not registered [ 681.813138][T17551] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3164'. [ 681.862564][T17557] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3166'. [ 681.908572][T17557] netlink: 91 bytes leftover after parsing attributes in process `syz.1.3166'. [ 681.958558][T17446] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.017966][T17446] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.278488][T17446] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.288996][T17446] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.318942][T17574] tipc: New replicast peer: 255.255.255.255 [ 682.364971][T17574] tipc: Enabled bearer , priority 10 [ 682.474762][T17591] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3176'. [ 682.488230][T17446] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.501590][T17446] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.802499][T17606] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 682.895408][T17446] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.920393][T17446] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.091261][ T5687] Bluetooth: hci3: command tx timeout [ 683.214795][T17627] team0: Device gtp1 is up. Set it down before adding it as a team port [ 683.258959][T17631] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3188'. [ 683.373279][T17640] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3190'. [ 683.402528][T17640] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3190'. [ 683.643640][T17446] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 683.678467][T17446] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 683.703163][T17446] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 683.749660][T17446] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 683.768781][T17446] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 683.789213][T17446] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 683.836367][T17446] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 683.855909][T17665] x_tables: duplicate underflow at hook 2 [ 683.870806][T17446] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 684.114120][T17446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.163467][T17446] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.199892][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.207163][ T5939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.263316][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.270619][ T5939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.328985][T17696] netlink: 'syz.2.3201': attribute type 1 has an invalid length. [ 684.355662][T17696] netlink: 'syz.2.3201': attribute type 4 has an invalid length. [ 684.383732][T17701] nftables ruleset with unbound chain [ 684.394894][T17696] __nla_validate_parse: 2 callbacks suppressed [ 684.394913][T17696] netlink: 9422 bytes leftover after parsing attributes in process `syz.2.3201'. [ 684.413717][T17701] netlink: 'syz.0.3203': attribute type 1 has an invalid length. [ 684.426550][T17703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3202'. [ 684.439063][T17701] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3203'. [ 684.537002][T17708] netlink: 'syz.0.3204': attribute type 24 has an invalid length. [ 684.755489][T17446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.800324][T17446] veth0_vlan: entered promiscuous mode [ 684.812264][T17446] veth1_vlan: entered promiscuous mode [ 684.842185][T17446] veth0_macvtap: entered promiscuous mode [ 684.852973][T17446] veth1_macvtap: entered promiscuous mode [ 684.871100][T17446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 684.886744][T17446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 684.904729][ T5939] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.914765][ T5939] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.925722][ T5939] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.935744][ T5939] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.180705][ T5687] Bluetooth: hci3: command tx timeout [ 685.812133][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.089147][T17682] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 687.250969][ T5687] Bluetooth: hci3: command tx timeout [ 687.276272][ T6299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.295574][ T6299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.375915][T17720] bond15: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 687.391952][T17720] bond15 (unregistering): Released all slaves [ 687.494920][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.514028][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.549779][T17740] x_tables: unsorted entry at hook 2 [ 687.555999][T17736] macvlan1: entered promiscuous mode [ 687.567903][T17741] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3208'. [ 687.583651][T17743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3211'. [ 687.687146][T17746] xt_hashlimit: size too large, truncated to 1048576 [ 687.997282][ T5672] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 688.019973][ T5672] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 688.029650][ T5672] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 688.101220][ T5672] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 688.150141][T17766] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3217'. [ 688.152013][ T5672] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 688.169218][T17766] 8021q: VLANs not supported on gre0 [ 688.657657][T17784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3221'. [ 688.688384][T17784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3221'. [ 688.735635][T17784] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3221'. [ 688.786058][T17784] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3221'. [ 688.869337][T17793] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 688.932993][T17793] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 689.256588][T17808] tipc: Started in network mode [ 689.273734][T17808] tipc: Node identity 8eaeb9050878, cluster identity 4711 [ 689.292667][T17808] tipc: Enabled bearer , priority 0 [ 689.464479][T17816] syzkaller0: entered promiscuous mode [ 689.469999][T17816] syzkaller0: entered allmulticast mode [ 689.489417][T17816] tipc: Resetting bearer [ 689.578721][ T6299] tipc: Resetting bearer [ 689.598941][T17807] tipc: Resetting bearer [ 690.302024][ T5672] Bluetooth: hci4: command tx timeout [ 691.917716][T17807] tipc: Disabling bearer [ 692.047186][ T5774] tipc: Node number set to 2262219013 [ 692.156032][T17855] __nla_validate_parse: 3 callbacks suppressed [ 692.156050][T17855] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3241'. [ 692.195643][T17856] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3241'. [ 692.205883][T17856] netlink: 'syz.1.3241': attribute type 7 has an invalid length. [ 692.218696][T17855] netlink: 'syz.1.3241': attribute type 7 has an invalid length. [ 692.244045][T17856] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3241'. [ 692.255027][T17855] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3241'. [ 692.352720][T17860] bond1 (unregistering): Released all slaves [ 692.371800][ T5672] Bluetooth: hci4: command tx timeout [ 692.398035][ T57] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 692.662679][T17880] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3247'. [ 692.707793][T17875] 8021q: adding VLAN 0 to HW filter on device bond16 [ 693.003820][T17761] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.048683][T17761] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.076453][T17761] bridge_slave_0: entered allmulticast mode [ 693.102249][T17761] bridge_slave_0: entered promiscuous mode [ 693.144194][T17761] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.163210][T17761] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.180486][T17761] bridge_slave_1: entered allmulticast mode [ 693.189138][T17761] bridge_slave_1: entered promiscuous mode [ 693.294190][T17761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.309342][T17761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.373093][T17913] sctp: [Deprecated]: syz.0.3256 (pid 17913) Use of int in maxseg socket option. [ 693.373093][T17913] Use struct sctp_assoc_value instead [ 693.404740][T17761] team0: Port device team_slave_0 added [ 693.425252][T17761] team0: Port device team_slave_1 added [ 693.487678][T17917] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3257'. [ 693.541031][T17920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3258'. [ 693.803252][T17761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 693.817857][T17761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.845119][T17761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 693.872310][T17761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 693.879287][T17761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.941464][T17761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 694.037124][T17937] netlink: 'syz.3.3263': attribute type 5 has an invalid length. [ 694.049247][T17761] hsr_slave_0: entered promiscuous mode [ 694.064099][T17761] hsr_slave_1: entered promiscuous mode [ 694.073898][T17761] debugfs: 'hsr0' already exists in 'hsr' [ 694.079855][T17761] Cannot create hsr debugfs directory [ 694.322771][T17953] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3266'. [ 694.348238][T17953] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3266'. [ 694.374047][T17946] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3265'. [ 694.451373][ T5672] Bluetooth: hci4: command tx timeout [ 694.758425][T17761] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.772849][T17761] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.971629][T17761] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.983752][T17761] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.093492][T17982] bond3: entered promiscuous mode [ 695.099052][T17982] bond3: entered allmulticast mode [ 695.105141][T17982] 8021q: adding VLAN 0 to HW filter on device bond3 [ 695.180907][T17761] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.198586][T17761] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.238151][T17990] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.245616][T17990] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.368769][T17761] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.421991][T17761] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.130405][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 696.228259][T17761] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 696.235668][T18048] sock: sock_timestamping_bind_phc: sock not bind to device [ 696.262339][T17761] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 696.278458][T17761] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 696.336134][T17761] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 696.415025][T17761] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 696.459092][T17761] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 696.479292][T17761] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 696.504146][T17761] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 696.531184][ T5672] Bluetooth: hci4: command tx timeout [ 696.733715][T17761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.766557][T17761] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.794429][ T5958] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.801712][ T5958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.837530][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.844768][ T5958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.037460][T18079] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 697.045654][T18079] syzkaller0: group set to 10 [ 697.053671][T18078] netlink: 'syz.3.3299': attribute type 142 has an invalid length. [ 697.201598][T18087] __nla_validate_parse: 6 callbacks suppressed [ 697.201616][T18087] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3302'. [ 697.227069][T18087] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3302'. [ 697.433559][T18096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3303'. [ 697.463852][T18096] block nbd2: Unsupported socket: should be TCP or UNIX. [ 697.496152][T18098] netlink: 'syz.4.3304': attribute type 11 has an invalid length. [ 697.514071][T18098] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3304'. [ 697.541084][T18103] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.3304'. [ 697.673347][T17761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.722047][T18114] netlink: 'syz.1.3308': attribute type 21 has an invalid length. [ 697.828858][T18114] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3308'. [ 697.848946][T18125] netlink: 'syz.3.3310': attribute type 1 has an invalid length. [ 697.906816][T18125] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3310'. [ 697.978925][T17761] veth0_vlan: entered promiscuous mode [ 698.005234][T18130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3312'. [ 698.018120][T17761] veth1_vlan: entered promiscuous mode [ 698.122110][T17761] veth0_macvtap: entered promiscuous mode [ 698.155852][T17761] veth1_macvtap: entered promiscuous mode [ 698.170101][T18139] netlink: 'syz.1.3315': attribute type 49 has an invalid length. [ 698.212882][T17761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 698.325804][T18139] ip6gretap0: entered promiscuous mode [ 698.333636][T18139] ip6gretap0: entered allmulticast mode [ 698.383065][T17761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.446852][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.469921][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.493285][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.511502][T18160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3321'. [ 698.575764][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.764718][T18170] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 698.961444][ T5958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.989784][ T5958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.035392][ T5958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.058424][ T5958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.072931][T18188] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3326'. [ 699.695124][ T5687] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 699.707342][ T5687] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 699.720761][ T5687] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 699.733038][ T5687] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 699.742901][ T5687] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 700.543525][ T5821] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.570698][ T5821] netdevsim netdevsim1 eth3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 700.590860][ T5821] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.928793][ T5821] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.973276][ T5821] netdevsim netdevsim1 eth2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 701.021149][ T5821] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.238213][ T5821] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 701.260388][ T5821] netdevsim netdevsim1 eth1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 701.281926][ T5821] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.346938][T18282] xt_CT: You must specify a L4 protocol and not use inversions on it [ 701.426375][ T5821] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 701.441903][ T5821] netdevsim netdevsim1 eth0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 701.461878][ T5821] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.471932][T18283] xt_cgroup: xt_cgroup: no path or classid specified [ 701.812111][ T5687] Bluetooth: hci0: command tx timeout [ 701.973915][ T5821] batadv1: left allmulticast mode [ 701.985657][ T5821] batadv1: left promiscuous mode [ 702.002993][ T5821] bridge0: port 3(batadv1) entered disabled state [ 702.023287][ T5821] bridge_slave_1: left allmulticast mode [ 702.036706][ T5821] bridge_slave_1: left promiscuous mode [ 702.048721][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.071737][ T5821] bridge_slave_0: left allmulticast mode [ 702.080713][ T5821] bridge_slave_0: left promiscuous mode [ 702.093193][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.135270][ T5821] bond8 (unregistering): (slave ip6gre2): Releasing backup interface [ 703.314115][ T5821] bond0 (unregistering): (slave geneve2): Releasing active interface [ 703.406995][ T5821] bond4 (unregistering): (slave bridge1): Releasing backup interface [ 703.504423][ T5821] bond5 (unregistering): (slave bridge3): Releasing active interface [ 703.547401][ T5821] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 703.730472][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 703.891446][ T5687] Bluetooth: hci0: command tx timeout [ 704.143060][ T5821] .`¹ (unregistering): (slave bond_slave_0): Releasing backup interface [ 704.153547][ T5821] .`¹ (unregistering): (slave bond_slave_1): Releasing backup interface [ 704.164877][ T5821] .`¹ (unregistering): Released all slaves [ 704.175571][ T5821] bond1 (unregistering): Released all slaves [ 704.193596][ T5821] bond2 (unregistering): Released all slaves [ 704.212939][ T5821] bond3 (unregistering): Released all slaves [ 704.228363][ T5821] bond4 (unregistering): Released all slaves [ 704.242707][ T5821] bond5 (unregistering): Released all slaves [ 704.256207][ T5821] bond6 (unregistering): Released all slaves [ 704.277577][ T5821] bond7 (unregistering): Released all slaves [ 704.293445][ T5821] bond8 (unregistering): Released all slaves [ 704.308013][ T5821] bond9 (unregistering): (slave bond10): Releasing backup interface [ 704.316874][ T5821] bond9 (unregistering): Released all slaves [ 704.332425][ T5821] bond10 (unregistering): Released all slaves [ 704.348050][ T5821] bond11 (unregistering): Released all slaves [ 704.362766][ T5821] bond0 (unregistering): Released all slaves [ 704.384206][ T5821] bond12 (unregistering): Released all slaves [ 704.405653][ T5821] bond13 (unregistering): Released all slaves [ 704.425550][ T5821] bond14 (unregistering): Released all slaves [ 704.439447][ T5821] bond15 (unregistering): Released all slaves [ 704.457398][ T5821] bond16 (unregistering): Released all slaves [ 704.616205][T18326] tipc: Enabling of bearer rejected, failed to enable media [ 704.632890][ T5673] syz2: Port: 1 Link DOWN [ 704.703728][ T29] audit: type=1804 audit(1778303686.025:9): pid=18325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3351" name="/newroot/47/cgroup.controllers" dev="tmpfs" ino=260 res=1 errno=0 [ 704.777647][ T29] audit: type=1800 audit(1778303686.025:10): pid=18325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3351" name="cgroup.controllers" dev="tmpfs" ino=260 res=0 errno=0 [ 705.337271][T18351] syzkaller0: entered promiscuous mode [ 705.354459][T18351] syzkaller0: entered allmulticast mode [ 705.846201][T18371] netlink: 'syz.4.3363': attribute type 1 has an invalid length. [ 705.971149][ T5687] Bluetooth: hci0: command tx timeout [ 706.061777][T18379] Cannot find add_set index 0 as target [ 706.102519][T18379] netlink: 'syz.4.3365': attribute type 15 has an invalid length. [ 706.145688][T18379] __nla_validate_parse: 196 callbacks suppressed [ 706.145706][T18379] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3365'. [ 706.244409][T18209] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.270079][T18209] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.297847][T18209] bridge_slave_0: entered allmulticast mode [ 706.313271][T18209] bridge_slave_0: entered promiscuous mode [ 706.387268][T18209] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.422815][T18209] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.464357][T18209] bridge_slave_1: entered allmulticast mode [ 706.496805][T18209] bridge_slave_1: entered promiscuous mode [ 706.634454][T18395] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3367'. [ 706.684255][T18209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 706.769130][T18209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.850636][ T6307] wlan1: Trigger new scan to find an IBSS to join [ 706.915020][T18405] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3370'. [ 706.933568][T18407] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3369'. [ 707.039710][T18410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3371'. [ 707.081818][T18209] team0: Port device team_slave_0 added [ 707.105357][T18209] team0: Port device team_slave_1 added [ 707.118259][T18416] Bluetooth: MGMT ver 1.23 [ 707.407352][T18209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 707.439651][T18209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.509587][T18209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.562506][T18209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.583638][T18209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.594224][T18428] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3375'. [ 707.642259][T18209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.776414][T18437] netlink: 'syz.3.3376': attribute type 3 has an invalid length. [ 707.801158][T18438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3376'. [ 707.896482][T18209] hsr_slave_0: entered promiscuous mode [ 707.914076][T18444] netlink: 'syz.2.3377': attribute type 16 has an invalid length. [ 707.935956][T18444] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3377'. [ 707.939899][T18209] hsr_slave_1: entered promiscuous mode [ 707.984766][T18209] debugfs: 'hsr0' already exists in 'hsr' [ 708.000281][T18209] Cannot create hsr debugfs directory [ 708.045537][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 708.050825][ T5687] Bluetooth: hci0: command tx timeout [ 708.277466][ T5821] hsr_slave_0: left promiscuous mode [ 708.289008][ T5821] hsr_slave_1: left promiscuous mode [ 708.298205][ T5821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 708.313206][ T5821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 708.328483][ T5821] veth1_macvtap: left promiscuous mode [ 708.336889][ T5821] veth0_macvtap: left promiscuous mode [ 708.618038][ T5939] smc: removing ib device syz2 [ 708.805515][T18462] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3383'. [ 708.823138][T18463] tipc: Started in network mode [ 708.832304][T18463] tipc: Node identity ca912fc90b42, cluster identity 4711 [ 708.847444][T18463] tipc: Enabled bearer , priority 0 [ 708.872135][T18464] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3383'. [ 708.909404][T18466] syzkaller0: entered promiscuous mode [ 708.915360][T18466] syzkaller0: entered allmulticast mode [ 708.948921][T18473] tipc: Resetting bearer [ 709.059091][T18456] tipc: Resetting bearer [ 709.140738][T18456] tipc: Disabling bearer [ 709.174689][ T5939] smbdirect: ib_dev[syz2] removed [ 709.545537][T18512] af_packet: tpacket_rcv: packet too big, clamped from 21508 to 3952. macoff=96 [ 709.866586][T18523] netlink: 'syz.3.3390': attribute type 2 has an invalid length. [ 709.891884][ T57] wlan1: Trigger new scan to find an IBSS to join [ 711.046007][ T808] IPVS: starting estimator thread 0... [ 711.155016][T18577] IPVS: using max 30 ests per chain, 72000 per kthread [ 711.713320][ T5672] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 711.731253][ T5672] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 711.743809][ T5672] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 711.755646][ T5672] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 711.764107][ T5672] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 711.893970][T18209] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 711.924233][T18209] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 711.954997][T18209] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 712.037574][T18209] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 712.068792][T18209] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 712.103441][T18209] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 712.122897][T18209] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 712.153562][T18209] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 712.165043][T18607] __nla_validate_parse: 7 callbacks suppressed [ 712.165061][T18607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3405'. [ 712.568538][T18628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3407'. [ 712.611411][T18622] syzkaller0: entered promiscuous mode [ 712.634166][T18622] syzkaller0: entered allmulticast mode [ 712.891535][T18640] IPv4: Oversized IP packet from 127.202.26.0 [ 712.934041][ T6307] wlan1: Trigger new scan to find an IBSS to join [ 712.934562][T18209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.486719][T18209] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.539289][T18663] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3413'. [ 713.567289][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.575839][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.631755][T18668] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3414'. [ 713.664778][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.671978][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.890440][ T5687] Bluetooth: hci2: command tx timeout [ 713.904555][ T5821] IPVS: stop unused estimator thread 0... [ 713.916257][ T6299] wlan1: Creating new IBSS network, BSSID ea:4f:61:54:eb:61 [ 713.969657][T18681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3416'. [ 714.545273][T18594] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.555097][T18594] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.573413][T18594] bridge_slave_0: entered allmulticast mode [ 714.585935][T18594] bridge_slave_0: entered promiscuous mode [ 714.606038][T18594] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.618970][T18594] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.626833][T18594] bridge_slave_1: entered allmulticast mode [ 714.637549][T18594] bridge_slave_1: entered promiscuous mode [ 714.712568][T18594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.727528][T18594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 714.779791][T18594] team0: Port device team_slave_0 added [ 714.789080][T18594] team0: Port device team_slave_1 added [ 714.832134][T18594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.841258][T18594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.868062][T18594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.881132][T18594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.888579][T18594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.917976][T18594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.992616][T18594] hsr_slave_0: entered promiscuous mode [ 714.999019][T18594] hsr_slave_1: entered promiscuous mode [ 715.007779][T18594] debugfs: 'hsr0' already exists in 'hsr' [ 715.014779][T18594] Cannot create hsr debugfs directory [ 715.054993][T18209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 715.184885][T18209] veth0_vlan: entered promiscuous mode [ 715.216554][T18209] veth1_vlan: entered promiscuous mode [ 715.281805][T18209] veth0_macvtap: entered promiscuous mode [ 715.291352][T18209] veth1_macvtap: entered promiscuous mode [ 715.312477][T18209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 715.327037][T18209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 715.342695][ T5821] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.364472][ T5821] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.373802][ T5821] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.385678][ T5821] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.970608][ T5687] Bluetooth: hci2: command tx timeout [ 716.968563][T18692] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 716.992590][T18594] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 717.035323][T18594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 717.052634][T18594] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 717.074113][T18594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 717.088850][T18594] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 717.112029][T18594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 717.116327][T18731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3423'. [ 717.129773][T18594] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 717.145114][T18594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 717.225015][ T9220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.236825][ T9220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.343060][ T57] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.359630][ T57] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.374911][ T9220] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.385694][ T9220] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.395157][ T9220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.416085][ T9220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.470495][T18748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3426'. [ 717.503395][T18748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3426'. [ 717.583041][T18594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 717.634408][T18760] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3427'. [ 717.656178][T18755] netlink: 'syz.2.3427': attribute type 1 has an invalid length. [ 717.708747][T18755] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 717.777260][T18769] ip6t_srh: unknown srh match flags 5F28 [ 718.051524][ T5687] Bluetooth: hci2: command tx timeout [ 718.155742][T18775] Bluetooth: MGMT ver 1.23 [ 718.450528][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 718.803604][T18783] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3435'. [ 720.130421][ T5687] Bluetooth: hci2: command tx timeout [ 720.207294][T18594] 8021q: adding VLAN 0 to HW filter on device team0 [ 720.231590][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.238785][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.285941][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.293157][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.332377][T18788] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3436'. [ 720.374466][T18788] bond0: entered promiscuous mode [ 720.395111][T18788] bond_slave_0: entered promiscuous mode [ 720.409922][T18788] bond_slave_1: entered promiscuous mode [ 720.436068][T18788] gretap0: entered promiscuous mode [ 720.462956][T18788] hsr1: entered promiscuous mode [ 720.711942][T18810] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3442'. [ 720.735460][T18810] netlink: 'syz.3.3442': attribute type 1 has an invalid length. [ 720.760400][T18810] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3442'. [ 720.776518][T18814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3442'. [ 720.782750][T18813] netlink: 'syz.2.3443': attribute type 17 has an invalid length. [ 720.811522][T18813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3443'. [ 720.836491][T18813] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3443'. [ 720.866620][T18813] erspan0: entered promiscuous mode [ 720.874410][T18813] erspan0: left promiscuous mode [ 720.875640][T18820] sctp: [Deprecated]: syz.1.3444 (pid 18820) Use of struct sctp_assoc_value in delayed_ack socket option. [ 720.875640][T18820] Use struct sctp_sack_info instead [ 721.286733][T18838] sctp: [Deprecated]: syz.2.3449 (pid 18838) Use of int in max_burst socket option deprecated. [ 721.286733][T18838] Use struct sctp_assoc_value instead [ 723.846942][T18594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 724.127092][ T29] audit: type=1804 audit(1778303705.455:11): pid=18881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3457" name="/newroot/50/cgroup.controllers" dev="tmpfs" ino=275 res=1 errno=0 [ 724.182384][ T29] audit: type=1800 audit(1778303705.505:12): pid=18881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3457" name="cgroup.controllers" dev="tmpfs" ino=275 res=0 errno=0 [ 724.336337][T18594] veth0_vlan: entered promiscuous mode [ 724.365692][T18594] veth1_vlan: entered promiscuous mode [ 724.403559][T18594] veth0_macvtap: entered promiscuous mode [ 724.419496][T18594] veth1_macvtap: entered promiscuous mode [ 724.445738][T18594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 724.462073][T18594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 724.479738][ T5958] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.502764][ T5958] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.515028][ T5958] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.525818][ T5958] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.682609][T18906] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 724.699914][ T6299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.718113][ T6299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.762205][ T5821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.775767][ T5821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.066358][ T5672] Bluetooth: hci2: command 0x0405 tx timeout [ 727.283194][T18921] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3465'. [ 727.453769][T18936] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 727.645370][T18952] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 727.667218][T18952] bond1: (slave lo): Enslaving as an active interface with an up link [ 727.678519][T18952] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 727.704610][T18951] bond1: option mode: unable to set because the bond device has slaves [ 727.796398][T18962] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3477'. [ 727.822887][T16482] IPVS: starting estimator thread 0... [ 727.862935][T18962] : entered promiscuous mode [ 727.930298][T18963] IPVS: using max 34 ests per chain, 81600 per kthread [ 728.467394][T18986] syzkaller0: entered promiscuous mode [ 728.473540][T18986] syzkaller0: entered allmulticast mode [ 728.484887][T18987] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3486'. [ 728.499880][T18986] openvswitch: netlink: IP tunnel dst address not specified [ 728.641905][T18994] netlink: 'syz.1.3488': attribute type 1 has an invalid length. [ 728.660772][T18994] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3488'. [ 728.699259][T18994] netlink: 'syz.1.3488': attribute type 1 has an invalid length. [ 728.725179][T18994] netlink: 'syz.1.3488': attribute type 8 has an invalid length. [ 728.739931][T18994] netlink: 606 bytes leftover after parsing attributes in process `syz.1.3488'. [ 728.751483][T18994] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3488'. [ 728.774844][T16482] IPVS: starting estimator thread 0... [ 728.835757][T19006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3492'. [ 728.870327][T19002] IPVS: using max 32 ests per chain, 76800 per kthread [ 728.924029][T19009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3493'. [ 728.975726][ T5945] tipc: Subscription rejected, illegal request [ 729.210424][T19027] ieee802154 phy1 wpan1: encryption failed: -22 [ 729.383374][T19038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.404680][T19038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.427215][T19038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 729.444926][T19038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.454663][T19044] xt_hashlimit: size too large, truncated to 1048576 [ 729.639869][ T5672] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 729.655594][ T5672] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 729.663573][ T5672] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 729.675704][ T5672] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 729.684991][ T5672] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 729.846909][T19062] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 729.934734][T19068] netlink: 'syz.3.3512': attribute type 1 has an invalid length. [ 730.337138][T19092] xt_CT: You must specify a L4 protocol and not use inversions on it [ 730.345005][T19095] netlink: 'syz.2.3519': attribute type 1 has an invalid length. [ 730.358910][T19092] vlan2: entered promiscuous mode [ 730.366984][T19092] bridge0: entered promiscuous mode [ 730.383759][T19086] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3517'. [ 730.588322][T19109] IPVS: set_ctl: invalid protocol: 60 101.6.1.1:0 [ 731.044576][T19131] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3527'. [ 731.053860][T19133] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 731.125297][T19133] netlink: 'syz.3.3528': attribute type 2 has an invalid length. [ 731.158340][T19133] netlink: 'syz.3.3528': attribute type 12 has an invalid length. [ 731.191885][T19133] netlink: 'syz.3.3528': attribute type 11 has an invalid length. [ 731.302343][T19138] IPVS: persistence engine module ip_vs_pe_€ not found [ 731.419920][T19055] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.429716][T19055] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.437432][T19055] bridge_slave_0: entered allmulticast mode [ 731.465506][T19055] bridge_slave_0: entered promiscuous mode [ 731.467699][T19155] Cannot find add_set index 65532 as target [ 731.492814][T19055] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.519518][T19055] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.546045][T19055] bridge_slave_1: entered allmulticast mode [ 731.564647][T19055] bridge_slave_1: entered promiscuous mode [ 731.694174][T19055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.730443][ T5672] Bluetooth: hci6: command tx timeout [ 731.736502][T19055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.806601][T19178] sctp: [Deprecated]: syz.2.3539 (pid 19178) Use of int in maxseg socket option. [ 731.806601][T19178] Use struct sctp_assoc_value instead [ 731.887761][T19055] team0: Port device team_slave_0 added [ 731.916770][T19055] team0: Port device team_slave_1 added [ 732.016187][T19055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.033564][T19055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.065360][T19055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.079136][T19055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.087599][T19055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.114257][T19055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.242275][T19055] hsr_slave_0: entered promiscuous mode [ 732.252085][T19055] hsr_slave_1: entered promiscuous mode [ 732.267142][T19055] debugfs: 'hsr0' already exists in 'hsr' [ 732.286508][T19055] Cannot create hsr debugfs directory [ 732.302028][T19197] __nla_validate_parse: 7 callbacks suppressed [ 732.302044][T19197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3545'. [ 732.342677][T19197] netlink: 'syz.1.3545': attribute type 21 has an invalid length. [ 732.360368][T19197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3545'. [ 732.401354][T19197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3545'. [ 732.419180][ T6300] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.429852][T19197] netlink: 'syz.1.3545': attribute type 21 has an invalid length. [ 732.436290][ T6300] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.446860][T19197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3545'. [ 732.467580][ T6300] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.490997][ T6300] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.722308][T19055] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 732.747387][T19055] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 732.757412][T19055] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 732.771823][T19055] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 732.804720][T19055] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 732.844805][T19055] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 732.864913][T19055] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 732.872155][T19223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 732.897088][T19055] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 732.913970][T19225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3552'. [ 733.020015][T19225] 8021q: adding VLAN 0 to HW filter on device bond1 [ 733.043212][T19237] macvlan2: entered promiscuous mode [ 733.048585][T19237] macvlan2: entered allmulticast mode [ 733.058933][T19237] bond1: entered promiscuous mode [ 733.067991][T19237] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 733.088794][T19242] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3555'. [ 733.098191][T19237] bond1: left promiscuous mode [ 733.188654][T19242] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3555'. [ 733.270163][T19247] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3558'. [ 733.289969][T19055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.299147][T19247] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3558'. [ 733.317300][T19247] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3558'. [ 733.327251][T19055] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.348850][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.356055][ T5945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.395285][ T6298] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.402562][ T6298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.739718][T19275] x_tables: unsorted underflow at hook 1 [ 733.745812][T19276] x_tables: unsorted underflow at hook 1 [ 733.820929][ T5672] Bluetooth: hci6: command tx timeout [ 734.097856][T19055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.240177][T19300] netlink: 'syz.2.3568': attribute type 3 has an invalid length. [ 734.518341][T19055] veth0_vlan: entered promiscuous mode [ 734.567571][T19055] veth1_vlan: entered promiscuous mode [ 734.701109][T19055] veth0_macvtap: entered promiscuous mode [ 734.731325][T19055] veth1_macvtap: entered promiscuous mode [ 734.752593][T19055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.795729][T19055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 734.827995][ T6314] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.848301][T19336] openvswitch: netlink: IPv4 tun info is not correct [ 734.857409][ T6314] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.865141][T19341] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 734.872523][ T6314] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.912412][ T6314] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.078530][T19346] bond1: entered promiscuous mode [ 735.085337][T19346] bond1: entered allmulticast mode [ 735.097156][T19346] 8021q: adding VLAN 0 to HW filter on device bond1 [ 735.296573][ T6302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.326378][ T6302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.894992][ T5672] Bluetooth: hci6: command tx timeout [ 737.684642][ T6308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 737.709103][ T6308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.832690][T19376] syzkaller0: entered promiscuous mode [ 737.839879][T19376] syzkaller0: entered allmulticast mode [ 737.847704][T19378] Bluetooth: MGMT ver 1.23 [ 737.972902][ T5672] Bluetooth: hci6: command tx timeout [ 738.147025][T19395] __nla_validate_parse: 9 callbacks suppressed [ 738.147045][T19395] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3593'. [ 738.262995][T19401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3594'. [ 738.413726][T19411] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3598'. [ 738.683520][T19432] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3604'. [ 738.725566][T19434] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3602'. [ 738.823418][T19440] netlink: 'syz.3.3609': attribute type 2 has an invalid length. [ 738.874559][T19441] syzkaller1: entered promiscuous mode [ 738.884895][T19441] syzkaller1: entered allmulticast mode [ 738.946343][T19443] tipc: Enabling of bearer rejected, failed to enable media [ 739.099286][T19454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3614'. [ 739.298210][T19468] xt_ecn: cannot match TCP bits for non-tcp packets [ 739.488023][T19472] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3618'. [ 739.673231][T19477] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.3620'. [ 739.683030][T19481] xt_CT: You must specify a L4 protocol and not use inversions on it [ 739.696308][T19477] netlink: Conntrack attr has 3 unknown bytes [ 739.738584][T19478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3622'. [ 739.758174][T19489] netlink: 'syz.6.3621': attribute type 1 has an invalid length. [ 739.773945][T19489] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3621'. [ 740.265002][T19508] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 740.623895][T19531] macvlan2: entered allmulticast mode [ 740.639109][T19531] hsr0: entered allmulticast mode [ 740.656429][T19531] hsr_slave_0: entered allmulticast mode [ 740.672108][T19531] hsr_slave_1: entered allmulticast mode [ 740.697095][T19542] netlink: 'syz.5.3637': attribute type 1 has an invalid length. [ 740.705225][T19531] hsr0: entered promiscuous mode [ 740.835784][T19542] 8021q: adding VLAN 0 to HW filter on device bond2 [ 741.050472][T19542] bond2: (slave geneve2): making interface the new active one [ 741.090784][T19542] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 741.143826][T19562] sit1: entered promiscuous mode [ 741.158174][T19562] sit1: entered allmulticast mode [ 741.473191][T19578] syzkaller0: entered promiscuous mode [ 741.480878][T19578] syzkaller0: entered allmulticast mode [ 741.647696][T19589] netlink: 'syz.6.3653': attribute type 1 has an invalid length. [ 742.307310][T19628] 8021q: adding VLAN 0 to HW filter on device bond2 [ 742.317358][T19630] netlink: 'syz.3.3668': attribute type 12 has an invalid length. [ 742.329067][T19630] netlink: 'syz.3.3668': attribute type 4 has an invalid length. [ 742.424248][T19643] bridge3: entered promiscuous mode [ 742.462229][T19643] bridge3: entered allmulticast mode [ 742.685793][T19660] ref_ctr_offset mismatch. inode: 0x1ae offset: 0x0 ref_ctr_offset(old): 0x731001800000064 ref_ctr_offset(new): 0x0 [ 742.952628][T19676] netlink: 'syz.6.3684': attribute type 1 has an invalid length. [ 743.114770][T19690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 743.169969][T19692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 743.247940][T19702] netlink: 'syz.2.3692': attribute type 7 has an invalid length. [ 743.280954][T19702] netlink: 'syz.2.3692': attribute type 7 has an invalid length. [ 743.421905][T19712] sctp: [Deprecated]: syz.1.3695 (pid 19712) Use of int in maxseg socket option. [ 743.421905][T19712] Use struct sctp_assoc_value instead [ 743.463655][T19715] __nla_validate_parse: 16 callbacks suppressed [ 743.463674][T19715] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3696'. [ 743.486127][T19718] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3696'. [ 743.499658][T19718] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3696'. [ 743.573823][T19723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3698'. [ 743.598068][T19727] netlink: 'syz.6.3699': attribute type 3 has an invalid length. [ 743.776541][T19735] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3702'. [ 743.807611][T19735] netlink: 83 bytes leftover after parsing attributes in process `syz.2.3702'. [ 743.826060][T19737] geneve1: entered promiscuous mode [ 743.924856][ T6297] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 743.964740][T19743] netlink: 'syz.2.3706': attribute type 12 has an invalid length. [ 743.985896][T19743] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3706'. [ 744.040507][T19751] bond3: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 744.379918][T19781] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3712'. [ 744.569071][T19785] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3715'. [ 745.134258][T19808] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3722'. [ 745.281760][T19817] veth1_macvtap: left promiscuous mode [ 745.287372][T19817] macsec0: entered promiscuous mode [ 745.292717][T19817] macsec0: entered allmulticast mode [ 745.321008][T19818] veth1_macvtap: entered promiscuous mode [ 745.326809][T19818] veth1_macvtap: entered allmulticast mode [ 745.343209][T19818] macsec0: left promiscuous mode [ 745.382016][T19818] macsec0: left allmulticast mode [ 745.411972][T19818] veth1_macvtap: left allmulticast mode [ 745.436071][T19820] validate_nla: 3 callbacks suppressed [ 745.436088][T19820] netlink: 'syz.5.3722': attribute type 29 has an invalid length. [ 745.758452][T19837] veth3: entered promiscuous mode [ 745.775957][T19837] veth3: entered allmulticast mode [ 746.254225][T19872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 746.324973][T19868] syzkaller0: entered promiscuous mode [ 746.331746][T19868] syzkaller0: entered allmulticast mode [ 746.611969][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 747.252811][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.105122][T19808] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 748.371346][T19884] netlink: 'syz.3.3739': attribute type 1 has an invalid length. [ 748.379426][T19884] netlink: 'syz.3.3739': attribute type 2 has an invalid length. [ 749.747030][T19888] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 749.932940][T19924] netlink: 'syz.1.3750': attribute type 1 has an invalid length. [ 749.973708][T19924] __nla_validate_parse: 9 callbacks suppressed [ 749.973726][T19924] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3750'. [ 749.997201][T19924] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3750'. [ 750.006942][T19924] netlink: 658 bytes leftover after parsing attributes in process `syz.1.3750'. [ 750.120144][T19938] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3751'. [ 750.194697][T19942] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3753'. [ 750.206955][T19940] syzkaller0: entered promiscuous mode [ 750.231109][T19940] syzkaller0: entered allmulticast mode [ 750.376876][ C1] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 750.404277][ C1] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 750.427375][ C1] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 750.448729][ C1] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 750.457636][ C1] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 750.473204][ C1] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 750.486953][ C1] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 750.493042][T19957] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 750.493901][ C1] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 750.494474][ C1] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 750.501578][T19957] IPv6: NLM_F_CREATE should be set when creating new route [ 750.521708][T19957] IPv6: NLM_F_CREATE should be set when creating new route [ 750.820868][T19957] syzkaller0: entered promiscuous mode [ 750.836125][T19957] syzkaller0: entered allmulticast mode [ 751.307644][T19993] tc_dump_action: action bad kind [ 751.429832][T19999] tipc: Enabling of bearer rejected, media not registered [ 751.541121][T20005] ipt_ECN: cannot use operation on non-tcp rule [ 751.820342][T20012] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 752.168452][T20048] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3779'. [ 752.428891][T20065] x_tables: unsorted entry at hook 2 [ 752.557837][T20072] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 752.585164][T20072] netlink: 'syz.2.3786': attribute type 2 has an invalid length. [ 752.747783][T20083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3791'. [ 752.802313][T20083] IPVS: set_ctl: invalid protocol: 92 172.30.0.3:20004 [ 752.840713][T20089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.861872][T20094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 753.056294][T20108] net_ratelimit: 251 callbacks suppressed [ 753.056312][T20108] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 753.172206][T20119] netlink: 'syz.5.3802': attribute type 21 has an invalid length. [ 753.182951][T20118] netlink: 'syz.5.3802': attribute type 21 has an invalid length. [ 753.191186][T20119] IPv6: NLM_F_CREATE should be specified when creating new route [ 753.199003][T20118] IPv6: NLM_F_CREATE should be specified when creating new route [ 753.525613][T20137] lo: entered promiscuous mode [ 753.562337][T20137] netlink: 'syz.3.3808': attribute type 2 has an invalid length. [ 753.587473][T20137] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 753.732666][T20146] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3813'. [ 753.759941][T20146] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3813'. [ 753.788626][T20148] netlink: 'syz.2.3814': attribute type 32 has an invalid length. [ 753.812379][T20148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3814'. [ 753.943407][T20148] bond2: option coupled_control: invalid value (192) [ 753.967502][T20148] bond2 (unregistering): Released all slaves [ 754.065758][T20163] bridge1: entered promiscuous mode [ 754.089189][T20163] bridge1: entered allmulticast mode [ 754.409356][T20180] netlink: 'syz.2.3823': attribute type 3 has an invalid length. [ 754.720953][T20203] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.728292][T20203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.735899][T20203] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.743099][T20203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.141538][T20219] can: request_module (can-proto-3) failed. [ 755.168561][T20232] openvswitch: netlink: Duplicate key (type 2). [ 755.294183][T20239] __nla_validate_parse: 6 callbacks suppressed [ 755.294203][T20239] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3842'. [ 755.325869][T20236] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3841'. [ 755.454396][T20245] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3841'. [ 755.525151][T20256] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3846'. [ 755.614195][T20262] netlink: 'syz.3.3848': attribute type 2 has an invalid length. [ 755.663861][T20267] netlink: 'syz.1.3850': attribute type 3 has an invalid length. [ 755.706971][T20271] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20002 [ 755.808513][T20280] netlink: 'syz.2.3852': attribute type 1 has an invalid length. [ 755.835137][T20280] netlink: 16179 bytes leftover after parsing attributes in process `syz.2.3852'. [ 755.854772][T20278] set match dimension is over the limit! [ 755.866128][T20275] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3853'. [ 755.878596][T20275] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.886343][T20275] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.006930][T20290] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3857'. [ 756.031428][T20292] netlink: 'syz.3.3856': attribute type 1 has an invalid length. [ 756.061523][T20292] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3856'. [ 756.078411][T20292] netlink: 658 bytes leftover after parsing attributes in process `syz.3.3856'. [ 756.088721][T20292] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3856'. [ 756.366473][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 756.378947][ C1] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected! [ 756.390979][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 756.578936][T20320] veth1_macvtap: entered allmulticast mode [ 756.708310][T20320] veth1_macvtap (unregistering): left allmulticast mode [ 757.123095][T20352] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 757.163544][T20352] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 757.196162][T20352] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 757.637763][T20393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 758.107330][T20409] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.115248][T20409] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.142750][T20411] IPVS: Unknown mcast interface: pimreg0 [ 758.193553][T20419] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20001 [ 758.210131][T20417] syzkaller0: entered promiscuous mode [ 758.243032][T20417] syzkaller0: entered allmulticast mode [ 759.034658][T20447] netlink: 'syz.3.3904': attribute type 11 has an invalid length. [ 759.045849][T20447] validate_nla: 2 callbacks suppressed [ 759.045865][T20447] netlink: 'syz.3.3904': attribute type 5 has an invalid length. [ 759.464902][T20482] Cannot find set identified by id 65534 to match [ 759.528247][T20477] netlink: 'syz.5.3912': attribute type 21 has an invalid length. [ 759.729832][T20497] netlink: 'syz.3.3918': attribute type 1 has an invalid length. [ 759.887136][T20504] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 261 [ 760.936404][T20544] erspan0: entered allmulticast mode [ 761.473185][T20570] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 761.494110][T20575] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 761.548100][T20581] xt_cgroup: xt_cgroup: no path or classid specified [ 761.558531][T20582] xt_cgroup: xt_cgroup: no path or classid specified [ 761.693780][T20591] __nla_validate_parse: 87 callbacks suppressed [ 761.693799][T20591] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3951'. [ 761.872274][T20604] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3954'. [ 762.545485][T20621] macvtap1: entered promiscuous mode [ 762.551415][T20621] macvtap1: entered allmulticast mode [ 762.558603][T20621] veth1_vlan: entered allmulticast mode [ 762.577853][T20621] macvtap2: entered promiscuous mode [ 762.583381][T20621] macvtap2: entered allmulticast mode [ 762.771216][T20625] set match dimension is over the limit! [ 762.916747][T20637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 763.224081][T20659] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3969'. [ 763.272329][T20661] netlink: 'syz.3.3970': attribute type 2 has an invalid length. [ 763.282329][T20661] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3970'. [ 765.795056][T20628] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 766.024081][T20673] netlink: 'syz.2.3975': attribute type 2 has an invalid length. [ 766.443427][T20701] netlink: 'syz.6.3982': attribute type 1 has an invalid length. [ 766.465126][T20701] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3982'. [ 766.845850][T20722] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3986'. [ 767.411602][T20757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4001'. [ 767.434789][T20758] netlink: 'syz.3.4001': attribute type 1 has an invalid length. [ 767.460848][T20758] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4001'. [ 767.480854][T20758] netlink: 'syz.3.4001': attribute type 1 has an invalid length. [ 767.506986][T20765] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4002'. [ 767.525732][T20758] netlink: 'syz.3.4001': attribute type 8 has an invalid length. [ 767.550443][T20758] netlink: 606 bytes leftover after parsing attributes in process `syz.3.4001'. [ 767.826580][T20786] openvswitch: netlink: Geneve option length err (len 325, max 255). [ 767.896268][T20780] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4009'. [ 767.954720][T20795] syzkaller0: entered promiscuous mode [ 767.972603][T20795] syzkaller0: entered allmulticast mode [ 768.009731][T20795] netlink: 'syz.6.4011': attribute type 1 has an invalid length. [ 768.031794][T20795] netlink: 236 bytes leftover after parsing attributes in process `syz.6.4011'. [ 768.361687][T20807] erspan0: entered promiscuous mode [ 768.385199][T20807] vlan2: entered promiscuous mode [ 768.487686][T20828] netlink: 'syz.6.4022': attribute type 1 has an invalid length. [ 768.499381][T20828] netlink: 'syz.6.4022': attribute type 2 has an invalid length. [ 768.507726][T20828] netlink: 'syz.6.4022': attribute type 1 has an invalid length. [ 768.526296][T20828] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4022'. [ 768.557197][T20830] syzkaller1: entered promiscuous mode [ 768.571213][T20830] syzkaller1: entered allmulticast mode [ 768.616196][T20833] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4024'. [ 768.876559][T20843] vlan0: entered allmulticast mode [ 768.882681][T20843] veth0_to_bond: entered allmulticast mode [ 768.950867][T20848] syzkaller0: entered promiscuous mode [ 768.956413][T20848] syzkaller0: entered allmulticast mode [ 768.971486][ T5945] 0: reclassify loop, rule prio 0, protocol 800 [ 769.069853][T20852] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4028'. [ 771.437228][ T5672] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 771.447028][ T5672] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 771.458203][ T5672] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 771.473147][ T5672] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 771.483113][ T5672] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 771.687703][T20837] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 772.047829][T20889] netlink: 'syz.3.4035': attribute type 1 has an invalid length. [ 772.124482][T20894] __nla_validate_parse: 1 callbacks suppressed [ 772.124539][T20894] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4036'. [ 772.158209][T20898] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4035'. [ 772.161092][T20889] bond2: entered promiscuous mode [ 772.173170][T20889] 8021q: adding VLAN 0 to HW filter on device bond2 [ 772.328237][T20904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4038'. [ 772.419612][T20904] netlink: 'syz.3.4038': attribute type 1 has an invalid length. [ 772.442630][T20904] netlink: 'syz.3.4038': attribute type 2 has an invalid length. [ 772.447246][T20908] vlan3: entered allmulticast mode [ 772.468231][T20908] bond0: entered allmulticast mode [ 772.470006][T20913] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4040'. [ 772.481680][T20908] bond_slave_0: entered allmulticast mode [ 772.509624][T20908] bond_slave_1: entered allmulticast mode [ 772.564294][T20913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 772.573450][T20913] bond_slave_0: left allmulticast mode [ 772.585346][T20913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 772.599221][T20913] bond_slave_1: left allmulticast mode [ 772.607916][T20913] bond0 (unregistering): Released all slaves [ 772.619492][T20919] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4042'. [ 772.784425][T20929] netlink: 'syz.3.4044': attribute type 4 has an invalid length. [ 772.823243][T20933] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4047'. [ 772.836120][T20926] netlink: 'syz.3.4044': attribute type 4 has an invalid length. [ 772.986426][T20863] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.994699][T20863] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.004385][T20863] bridge_slave_0: entered allmulticast mode [ 773.016074][T20863] bridge_slave_0: entered promiscuous mode [ 773.029597][T20863] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.043014][T20863] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.060824][T20863] bridge_slave_1: entered allmulticast mode [ 773.068655][T20863] bridge_slave_1: entered promiscuous mode [ 773.154918][T20951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4051'. [ 773.197148][T20863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.210459][T20954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4051'. [ 773.250044][T20863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 773.372540][T20863] team0: Port device team_slave_0 added [ 773.394434][T20964] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4055'. [ 773.406233][T20863] team0: Port device team_slave_1 added [ 773.538800][T20863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 773.553242][T20970] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4058'. [ 773.558410][T20863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.592168][ T5687] Bluetooth: hci7: command tx timeout [ 773.614038][T20863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 773.631307][T20970] 0·: renamed from hsr0 (while UP) [ 773.639968][T20970] 0·: entered allmulticast mode [ 773.645606][T20970] hsr_slave_0: entered allmulticast mode [ 773.651785][T20970] hsr_slave_1: entered allmulticast mode [ 773.657937][T20970] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 773.675599][T20863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.690927][T20863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.752115][T20863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 773.816901][T20985] wg1 speed is unknown, defaulting to 1000 [ 773.868429][T20990] xt_TPROXY: Can be used only with -p tcp or -p udp [ 773.877994][T20985] wg1 speed is unknown, defaulting to 1000 [ 773.936582][T20990] netlink: 'syz.2.4063': attribute type 1 has an invalid length. [ 773.939278][T20863] hsr_slave_0: entered promiscuous mode [ 773.967709][T20863] hsr_slave_1: entered promiscuous mode [ 773.980777][T20863] debugfs: 'hsr0' already exists in 'hsr' [ 773.988650][T20863] Cannot create hsr debugfs directory [ 773.998076][T20985] wg1 speed is unknown, defaulting to 1000 [ 774.017115][T20985] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 774.049355][T20990] bond2: entered promiscuous mode [ 774.061267][T20990] 8021q: adding VLAN 0 to HW filter on device bond2 [ 774.078876][T20985] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 774.096819][T20985] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 774.109186][T21004] 8021q: adding VLAN 0 to HW filter on device bond2 [ 774.116866][T21004] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 774.127578][T21004] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 774.148464][T20985] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 774.173312][T21004] bond2: (slave ip6gre1): making interface the new active one [ 774.175614][T20985] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 774.224315][T21004] ip6gre1: entered promiscuous mode [ 774.262243][T21004] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 774.330822][T20985] wg1 speed is unknown, defaulting to 1000 [ 774.358868][T20985] wg1 speed is unknown, defaulting to 1000 [ 774.465403][T20985] wg1 speed is unknown, defaulting to 1000 [ 774.525535][T20985] wg1 speed is unknown, defaulting to 1000 [ 774.562455][T20985] wg1 speed is unknown, defaulting to 1000 [ 774.605307][T20985] wg1 speed is unknown, defaulting to 1000 [ 774.649765][T20985] wg1 speed is unknown, defaulting to 1000 [ 774.701218][T20985] wg1 speed is unknown, defaulting to 1000 [ 774.724047][T20985] wg1 speed is unknown, defaulting to 1000 [ 774.757796][T20985] wg1 speed is unknown, defaulting to 1000 [ 774.847704][T20985] wg1 speed is unknown, defaulting to 1000 [ 774.951769][ T6308] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 775.310731][T20863] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 775.338377][T20863] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 775.359644][T20863] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 775.407906][T20863] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 775.454499][T20863] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 775.499548][T20863] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 775.519966][T20863] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 775.522865][T21059] netlink: 'syz.6.4079': attribute type 4 has an invalid length. [ 775.549907][T20863] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 775.634856][T21059] .`¹: renamed from bond0 (while UP) [ 775.650465][ T5687] Bluetooth: hci7: command tx timeout [ 775.863562][T20863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 775.903411][T20863] 8021q: adding VLAN 0 to HW filter on device team0 [ 775.924169][T21093] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 775.943435][ T6298] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.950657][ T6298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 775.974375][T21095] netlink: 'syz.6.4086': attribute type 1 has an invalid length. [ 776.047695][T21095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.101506][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.108714][ T5954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.269220][T21113] syzkaller0: entered promiscuous mode [ 776.293875][T21113] syzkaller0: entered allmulticast mode [ 776.364076][T21120] gre1: entered promiscuous mode [ 776.664819][T21136] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 776.678411][T21136] bond3 (unregistering): Released all slaves [ 777.389686][T20863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 777.730660][ T5687] Bluetooth: hci7: command tx timeout [ 777.836252][T20863] veth0_vlan: entered promiscuous mode [ 777.847248][T20863] veth1_vlan: entered promiscuous mode [ 777.882930][T20863] veth0_macvtap: entered promiscuous mode [ 777.894456][T20863] veth1_macvtap: entered promiscuous mode [ 777.916313][T20863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 777.933644][T20863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 777.947839][ T6308] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.959016][ T6308] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.969377][ T6308] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.991681][ T6308] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.667938][T21215] syzkaller0: entered promiscuous mode [ 778.675689][T21215] syzkaller0: entered allmulticast mode [ 779.810878][ T5687] Bluetooth: hci7: command tx timeout [ 780.053336][ T5687] Bluetooth: hci5: command 0x0406 tx timeout [ 780.313415][T21177] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 780.410521][ T5945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.447269][ T5945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.588651][ T6315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.604087][T21225] GUP no longer grows the stack in syz.2.4116 (21225): 200000003000-20000000a000 (200000001000) [ 780.629508][ T6315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.646910][T21225] CPU: 0 UID: 0 PID: 21225 Comm: syz.2.4116 Not tainted syzkaller #0 PREEMPT(full) [ 780.646962][T21225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 780.646994][T21225] Call Trace: [ 780.647005][T21225] [ 780.647014][T21225] dump_stack_lvl+0xe8/0x150 [ 780.647044][T21225] __get_user_pages+0x2378/0x2720 [ 780.647074][T21225] ? __gup_longterm_locked+0xc4e/0x1630 [ 780.647115][T21225] ? __gup_longterm_locked+0xc4e/0x1630 [ 780.647140][T21225] ? down_read_killable+0x1bb/0x340 [ 780.647166][T21225] __gup_longterm_locked+0xdcf/0x1630 [ 780.647197][T21225] ? lock_acquire+0x106/0x350 [ 780.647237][T21225] gup_fast_fallback+0x1d84/0x20d0 [ 780.647299][T21225] ? __pfx_gup_fast_fallback+0x10/0x10 [ 780.647326][T21225] ? is_valid_gup_args+0x11f/0x200 [ 780.647352][T21225] ? get_user_pages_fast+0x4d/0xb0 [ 780.647379][T21225] __iov_iter_get_pages_alloc+0x370/0xa10 [ 780.647418][T21225] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 780.647451][T21225] iov_iter_get_pages2+0x5e/0xa0 [ 780.647485][T21225] __se_sys_vmsplice+0x7c7/0x1620 [ 780.647532][T21225] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 780.647560][T21225] ? __pfx_futex_wait+0x10/0x10 [ 780.647599][T21225] ? lockdep_hardirqs_on+0x7a/0x110 [ 780.647691][T21225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.647713][T21225] do_syscall_64+0x15f/0xf80 [ 780.647741][T21225] ? trace_irq_disable+0x3b/0x140 [ 780.647771][T21225] ? clear_bhb_loop+0x40/0x90 [ 780.647797][T21225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.647817][T21225] RIP: 0033:0x7fd85e79cdd9 [ 780.647836][T21225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 780.647853][T21225] RSP: 002b:00007fd85f60b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 780.647876][T21225] RAX: ffffffffffffffda RBX: 00007fd85ea15fa0 RCX: 00007fd85e79cdd9 [ 780.647891][T21225] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 780.647904][T21225] RBP: 00007fd85e832d69 R08: 0000000000000000 R09: 0000000000000000 [ 780.647917][T21225] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 780.647929][T21225] R13: 00007fd85ea16038 R14: 00007fd85ea15fa0 R15: 00007ffc1d119518 [ 780.647966][T21225] [ 780.666160][T21225] __nla_validate_parse: 12 callbacks suppressed [ 780.666177][T21225] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4116'. [ 781.033152][T21241] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4121'. [ 781.397530][T21260] veth3: entered allmulticast mode [ 781.416428][T21265] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4128'. [ 781.475530][T21271] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4129'. [ 781.643075][T21273] sctp: [Deprecated]: syz.5.4131 (pid 21273) Use of struct sctp_assoc_value in delayed_ack socket option. [ 781.643075][T21273] Use struct sctp_sack_info instead [ 781.753462][T21283] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4132'. [ 781.842494][T21276] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4132'. [ 782.193074][T21299] bond2: Unable to set up delay as MII monitoring is disabled [ 782.204336][T21313] netlink: 'syz.7.4143': attribute type 1 has an invalid length. [ 782.222822][T21299] bond2 (unregistering): Released all slaves [ 782.574803][T21329] netlink: 1 bytes leftover after parsing attributes in process `syz.6.4148'. [ 782.907197][T21341] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 783.236004][T21368] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4159'. [ 783.795170][T21375] geneve3: entered promiscuous mode [ 783.803345][ T6300] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 55525 - 0 [ 783.823960][ T6300] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 55525 - 0 [ 783.841436][ T6300] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 55525 - 0 [ 783.851359][ T6300] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 55525 - 0 [ 783.961706][T21407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4169'. [ 784.448866][T21429] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 784.557012][T21437] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4177'. [ 784.760041][T21447] xt_l2tp: invalid flags combination: 8 [ 784.959258][T21457] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 784.986988][T21455] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 785.071353][T21455] 8021q: adding VLAN 0 to HW filter on device bond1 [ 785.754644][T21512] __nla_validate_parse: 6 callbacks suppressed [ 785.754663][T21512] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4201'. [ 785.794783][T21512] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4201'. [ 785.832572][T21512] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4201'. [ 786.033021][T21531] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.4206'. [ 786.047448][T21533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 786.065765][T21531] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.4206'. [ 786.078707][T21531] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.4206'. [ 786.090958][T21531] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.4206'. [ 786.114750][T21531] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.4206'. [ 786.126207][T21537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4208'. [ 786.139023][T21531] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.4206'. [ 786.139492][T21538] netlink: 'syz.6.4207': attribute type 25 has an invalid length. [ 786.198319][T21538] netlink: 'syz.6.4207': attribute type 25 has an invalid length. [ 786.221775][ T6298] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.255071][ T6298] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.407480][ T6298] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.446426][ T6298] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.639894][T21549] tipc: Invalid UDP bearer configuration [ 786.639961][T21549] tipc: Enabling of bearer rejected, failed to enable media [ 786.717018][T21549] tipc: Started in network mode [ 786.756325][T21549] tipc: Node identity ac14140f, cluster identity 4711 [ 786.824821][T21549] tipc: New replicast peer: 255.255.255.255 [ 786.891635][T21549] tipc: Enabled bearer , priority 10 [ 787.137519][T21571] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 787.716896][T21595] syzkaller0: entered promiscuous mode [ 787.741146][T21595] syzkaller0: entered allmulticast mode [ 788.060581][ T5774] tipc: Node number set to 2886997007 [ 788.765175][T21646] netlink: 'syz.5.4239': attribute type 21 has an invalid length. [ 789.004834][T21658] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 789.068148][T21661] netlink: 'syz.7.4244': attribute type 21 has an invalid length. [ 789.667918][T21691] syzkaller0: entered promiscuous mode [ 789.712969][T21691] syzkaller0: entered allmulticast mode [ 790.098987][T21719] ip_vti0: entered promiscuous mode [ 790.302051][T21698] Bluetooth: hci1: command 0x0406 tx timeout [ 790.679369][T21749] netem: change failed [ 791.015657][T21767] netlink: 'syz.2.4273': attribute type 1 has an invalid length. [ 791.046384][T21767] netlink: 'syz.2.4273': attribute type 1 has an invalid length. [ 791.050857][ T5774] IPVS: starting estimator thread 0... [ 791.160361][T21772] IPVS: using max 30 ests per chain, 72000 per kthread [ 791.274470][T21781] __nla_validate_parse: 75 callbacks suppressed [ 791.274490][T21781] netlink: 25 bytes leftover after parsing attributes in process `syz.6.4279'. [ 791.314154][T21787] netlink: 348 bytes leftover after parsing attributes in process `syz.3.4280'. [ 791.363820][T21781] netlink: 'syz.6.4279': attribute type 2 has an invalid length. [ 791.406325][T21781] netlink: 'syz.6.4279': attribute type 4 has an invalid length. [ 791.431163][T21789] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4281'. [ 791.469597][T21781] syzkaller0: entered promiscuous mode [ 791.493798][T21781] syzkaller0: entered allmulticast mode [ 791.618869][T21798] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 791.735736][ T5672] Bluetooth: hci7: command 0x0405 tx timeout [ 792.100119][T21817] netlink: 'syz.5.4290': attribute type 12 has an invalid length. [ 792.374235][T21835] netlink: 'syz.5.4294': attribute type 1 has an invalid length. [ 792.427502][T21838] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4294'. [ 792.480012][T21835] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4294'. [ 792.492575][T21835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.570431][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 803.583286][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 805.651068][ T5672] Bluetooth: hci3: command 0x0406 tx timeout [ 805.976883][ T6298] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 808.695020][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 821.020313][T21698] Bluetooth: hci4: command 0x0406 tx timeout [ 826.130447][ T5672] Bluetooth: hci0: command 0x0406 tx timeout [ 836.370700][ T5672] Bluetooth: hci2: command 0x0405 tx timeout [ 836.901812][ T6311] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 850.673851][T21854] netlink: 'syz.6.4299': attribute type 10 has an invalid length. [ 850.701271][T21855] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.4296'. [ 850.722815][T21854] team0: Device veth1_virt_wifi failed to register rx_handler [ 851.001693][T21871] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4302'. [ 851.012740][T21865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 851.046869][T21871] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4302'. [ 851.304558][T21881] syzkaller0: entered promiscuous mode [ 851.342776][T21881] syzkaller0: entered allmulticast mode [ 851.546434][T21897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 852.002745][T21919] smc: net device team0 applied user defined pnetid SYZ2 [ 852.244864][T21938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4324'. [ 852.267646][T21940] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.4323'. [ 852.315787][T21940] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4323'. [ 852.327562][T21940] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4323'. [ 852.355424][T21940] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4323'. [ 852.433657][T21947] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4323'. [ 852.573277][T21954] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.4327'. [ 852.701993][T21956] netlink: 'syz.7.4329': attribute type 2 has an invalid length. [ 853.351908][T21998] netlink: 'syz.3.4341': attribute type 2 has an invalid length. [ 853.381074][T22000] netlink: 'syz.3.4341': attribute type 2 has an invalid length. [ 853.406505][T21998] Cannot find add_set index 2 as target [ 853.427769][T22000] Cannot find add_set index 2 as target [ 853.626096][T22014] digital: digital_start_poll: Unknown protocol [ 853.843436][T22018] tipc: Started in network mode [ 853.858708][T22018] tipc: Node identity ac14140f, cluster identity 4711 [ 853.867761][T22018] tipc: Enabled bearer , priority 10 [ 853.877247][T22025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 854.987450][ T5801] tipc: Node number set to 2886997007 [ 855.140069][T22098] netlink: 'syz.5.4372': attribute type 3 has an invalid length. [ 855.343757][T22113] syzkaller0: entered promiscuous mode [ 855.353489][T22113] syzkaller0: entered allmulticast mode [ 855.375517][T22121] netlink: 'syz.3.4379': attribute type 1 has an invalid length. [ 855.397701][T22121] netlink: 'syz.3.4379': attribute type 1 has an invalid length. [ 855.418649][T22121] netlink: 'syz.3.4379': attribute type 8 has an invalid length. [ 855.600592][T22131] netem: change failed [ 855.853557][T22150] __nla_validate_parse: 12 callbacks suppressed [ 855.853577][T22150] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4384'. [ 856.079756][T22157] netlink: 'syz.3.4386': attribute type 1 has an invalid length. [ 856.217364][T22157] bond3: entered promiscuous mode [ 856.226067][T22157] 8021q: adding VLAN 0 to HW filter on device bond3 [ 856.256632][T22165] bond3: (slave bridge5): making interface the new active one [ 856.284628][T22165] bridge5: entered promiscuous mode [ 856.285850][T22169] netlink: 'syz.7.4389': attribute type 1 has an invalid length. [ 856.297948][T22165] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 856.378668][T22167] bond3: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 856.398185][T22167] bond3: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 856.419320][T22175] netlink: 'syz.5.4392': attribute type 64 has an invalid length. [ 856.429833][T22173] netlink: 'syz.6.4391': attribute type 4 has an invalid length. [ 856.796455][T22193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4394'. [ 857.089327][T22205] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4396'. [ 857.710761][T22232] netlink: 'syz.3.4401': attribute type 1 has an invalid length. [ 857.780554][T22232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4401'. [ 857.817023][T22232] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4401'. [ 857.941763][T22243] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4406'. [ 857.953970][T22247] netlink: 'syz.6.4407': attribute type 1 has an invalid length. [ 857.969826][T22247] netlink: 'syz.6.4407': attribute type 2 has an invalid length. [ 857.987125][T22247] netlink: 'syz.6.4407': attribute type 1 has an invalid length. [ 857.998121][T22241] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4405'. [ 858.011431][T22247] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4407'. [ 858.347159][T22264] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4411'. [ 858.393039][T22266] syzkaller0: entered promiscuous mode [ 858.398811][T22266] syzkaller0: entered allmulticast mode [ 858.571015][T22270] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4414'. [ 858.583958][T22270] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 859.102482][T22305] netlink: 'syz.3.4421': attribute type 4 has an invalid length. [ 859.328093][T22315] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 859.343874][T22316] netlink: 'syz.2.4426': attribute type 1 has an invalid length. [ 859.367905][T22316] 8021q: adding VLAN 0 to HW filter on device bond3 [ 859.457573][T22318] hsr_slave_1 (unregistering): left promiscuous mode [ 859.792209][T22338] block nbd6: not configured, cannot reconfigure [ 859.804150][T22340] block nbd6: not configured, cannot reconfigure [ 859.827219][T22335] netlink: set zone limit has 4 unknown bytes [ 859.954459][T22344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 860.314977][T22362] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 860.689963][T22379] syzkaller0: entered promiscuous mode [ 860.698418][T22379] syzkaller0: entered allmulticast mode [ 860.995561][T22406] __nla_validate_parse: 18 callbacks suppressed [ 860.995582][T22406] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4460'. [ 861.290132][T22417] : entered promiscuous mode [ 861.313406][T22412] wg1 speed is unknown, defaulting to 1000 [ 861.337879][T22424] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 861.630692][T22435] syz_tun: entered allmulticast mode [ 861.649539][T22439] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4469'. [ 861.650006][T22435] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4468'. [ 861.690452][T22435] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4468'. [ 861.723382][T22435] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4468'. [ 861.775840][T22435] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4468'. [ 861.808019][T22434] syz_tun: left allmulticast mode [ 862.018206][T22452] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4475'. [ 862.055131][T22452] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4475'. [ 862.109719][T22456] tipc: Enabling of bearer rejected, failed to enable media [ 862.283846][T22463] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 862.322657][T22464] netlink: 284 bytes leftover after parsing attributes in process `syz.5.4481'. [ 862.591152][T22474] netlink: 204 bytes leftover after parsing attributes in process `syz.7.4485'. [ 862.762892][T22491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 862.848172][T22491] syzkaller1: entered promiscuous mode [ 862.880406][T22491] syzkaller1: entered allmulticast mode [ 863.304439][T22502] bond4: entered promiscuous mode [ 863.323649][T22502] 8021q: adding VLAN 0 to HW filter on device bond4 [ 863.623981][T22514] validate_nla: 2 callbacks suppressed [ 863.624000][T22514] netlink: 'syz.6.4499': attribute type 29 has an invalid length. [ 863.651148][T22514] netlink: 'syz.6.4499': attribute type 29 has an invalid length. [ 863.718226][T22518] netlink: 'syz.6.4499': attribute type 29 has an invalid length. [ 863.938785][T22529] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4 [ 864.140912][T22547] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 864.245734][T22547] bond0: (slave lo): Error: Device can not be enslaved while up [ 864.562157][T22580] netlink: 'syz.5.4517': attribute type 10 has an invalid length. [ 864.582302][T22579] netlink: 'syz.5.4517': attribute type 10 has an invalid length. [ 864.603917][T22579] ipvlan0: entered allmulticast mode [ 864.625871][T22579] veth0_vlan: entered allmulticast mode [ 864.706123][T22579] team0: Device ipvlan0 failed to register rx_handler [ 864.780737][T22580] team0: Device ipvlan0 failed to register rx_handler [ 864.814440][T22585] pimreg: entered allmulticast mode [ 864.850688][T22598] tun0: tun_chr_ioctl cmd 1074025675 [ 864.887557][T22598] tun0: persist disabled [ 864.926691][T22602] vlan3: entered allmulticast mode [ 865.214747][T22619] bond1: entered promiscuous mode [ 865.228746][T22623] macvlan2: entered promiscuous mode [ 865.234977][T22623] macvlan2: entered allmulticast mode [ 865.243983][T22623] bond1: (slave macvlan2): Opening slave failed [ 866.132247][ T6298] nci: nci_rsp_packet: unknown rsp opcode 0xb05 [ 866.818836][T22687] wg1 speed is unknown, defaulting to 1000 [ 866.873584][T22669] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 866.941133][ T30] INFO: task syz.4.3421:18705 blocked for more than 143 seconds. [ 866.950090][T22683] IPVS: set_ctl: invalid protocol: 58 10.1.1.1:21 [ 866.992559][ T30] Not tainted syzkaller #0 [ 867.012286][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 867.044058][ T30] task:syz.4.3421 state:D stack:27168 pid:18705 tgid:18704 ppid:16954 task_flags:0x400140 flags:0x00080002 [ 867.061067][T22697] netlink: 'syz.3.4544': attribute type 7 has an invalid length. [ 867.082075][ T30] Call Trace: [ 867.092213][ T5672] Bluetooth: hci6: command 0x0406 tx timeout [ 867.104659][ T30] [ 867.126338][ T30] __schedule+0x17b4/0x5680 [ 867.135908][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 867.141502][ T30] ? __pfx___schedule+0x10/0x10 [ 867.146576][ T30] ? schedule+0x90/0x360 [ 867.153256][ T30] schedule+0x164/0x360 [ 867.157614][ T30] schedule_preempt_disabled+0x13/0x30 [ 867.163626][ T30] __mutex_lock+0x7f7/0x1550 [ 867.168446][ T30] ? __mutex_lock+0x608/0x1550 [ 867.172366][T22704] syzkaller1: entered promiscuous mode [ 867.173885][ T30] ? nfsd_nl_threads_set_doit+0x2bb/0xde0 [ 867.178766][T22704] syzkaller1: entered allmulticast mode [ 867.190968][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 867.196154][ T30] ? net_generic+0x1e/0x240 [ 867.202198][ T30] ? net_generic+0x1e/0x240 [ 867.206856][ T30] nfsd_nl_threads_set_doit+0x2bb/0xde0 [ 867.214296][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 867.219949][ T30] ? __asan_memcpy+0x40/0x70 [ 867.224902][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 867.231386][ T30] ? bpf_lsm_capable+0x9/0x20 [ 867.236225][ T30] ? security_capable+0x7e/0x2c0 [ 867.243005][ T30] genl_rcv_msg+0x61c/0x7a0 [ 867.247687][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 867.267866][ T30] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 867.276916][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 867.282730][ T30] netlink_rcv_skb+0x232/0x4b0 [ 867.287610][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 867.293711][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 867.299403][ T30] ? down_read+0x270/0x2e0 [ 867.304880][ T30] ? genl_rcv+0xd/0x40 [ 867.309065][ T30] genl_rcv+0x28/0x40 [ 867.315717][ T30] netlink_unicast+0x75c/0x8e0 [ 867.321730][ T30] netlink_sendmsg+0x813/0xb40 [ 867.326655][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 867.347105][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 867.360980][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 867.366407][ T30] ____sys_sendmsg+0x972/0x9f0 [ 867.373086][ T30] ? __might_fault+0xaf/0x130 [ 867.377882][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 867.386596][ T30] ? import_iovec+0x73/0xa0 [ 867.391571][ T30] ___sys_sendmsg+0x2a5/0x360 [ 867.396406][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 867.403538][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 867.408913][ T30] ? futex_wake+0x4ac/0x580 [ 867.425708][ T30] ? __fget_files+0x2a/0x420 [ 867.436280][ T30] ? __fget_files+0x3a0/0x420 [ 867.443416][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 867.448495][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 867.454566][ T30] ? rcu_is_watching+0x15/0xb0 [ 867.459467][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.470247][ T30] do_syscall_64+0x15f/0xf80 [ 867.474892][ T30] ? trace_irq_disable+0x3b/0x140 [ 867.479920][ T30] ? clear_bhb_loop+0x40/0x90 [ 867.485518][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.493108][ T30] RIP: 0033:0x7efd0419cdd9 [ 867.497571][ T30] RSP: 002b:00007efd04f78028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 867.506145][ T30] RAX: ffffffffffffffda RBX: 00007efd04415fa0 RCX: 00007efd0419cdd9 [ 867.514638][ T30] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000005 [ 867.523856][ T30] RBP: 00007efd04232d69 R08: 0000000000000000 R09: 0000000000000000 [ 867.532028][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 867.540048][ T30] R13: 00007efd04416038 R14: 00007efd04415fa0 R15: 00007ffea8385938 [ 867.548238][ T30] [ 867.551516][ T30] [ 867.551516][ T30] Showing all locks held in the system: [ 867.559429][ T30] 1 lock held by khungtaskd/30: [ 867.567451][ T30] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 867.585585][ T30] 2 locks held by getty/5382: [ 867.596609][ T30] #0: ffff888035de70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 867.606720][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 867.617071][ T30] 4 locks held by kworker/u8:16/5954: [ 867.623837][ T30] #0: ffff88801be8e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 867.634947][ T30] #1: ffffc90005417c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 867.646974][ T30] #2: ffffffff8fdc0c28 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 867.657515][ T30] #3: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 867.668800][ T30] 3 locks held by kworker/u8:26/6300: [ 867.674227][ T30] #0: ffff8880b863aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 867.684256][ T30] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 867.693444][ T30] #2: ffffffff8e7eb750 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 867.703645][ T30] 4 locks held by kworker/u8:34/6309: [ 867.709155][ T30] #0: ffff8880b863aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 867.719464][ T30] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 867.729561][ T30] #2: ffff8880750d0780 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x460 [ 867.740421][ T30] #3: ffffffff9a6bf4d0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 867.750904][ T30] 2 locks held by syz.0.3289/18043: [ 867.756117][ T30] #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 867.764408][ T30] #1: ffffffff8ec8aca0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2bb/0xde0 [ 867.774652][ T30] 2 locks held by syz.4.3421/18705: [ 867.779900][ T30] #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 867.788225][ T30] #1: ffffffff8ec8aca0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2bb/0xde0 [ 867.798312][ T30] 2 locks held by syz.1.3863/20307: [ 867.803532][ T30] #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 867.812470][ T30] #1: ffffffff8ec8aca0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 867.822812][ T30] 2 locks held by kworker/0:6/20371: [ 867.829293][ T30] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 867.831777][ T6298] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 867.842350][ T30] #1: ffffc90005c77c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 867.862205][ T30] 6 locks held by kworker/u9:0/21698: [ 867.867680][ T30] #0: ffff888080986140 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 867.878649][ T30] #1: ffffc900039cfc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 867.892144][ T30] #2: ffff888052b8cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 867.902146][ T30] #3: ffff888052b8c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 867.912023][ T30] #4: ffffffff8ff52ce0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 867.921830][ T30] #5: ffff88807d3762f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570 [ 867.932866][ T30] 2 locks held by syz.7.4533/22654: [ 867.938101][ T30] #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 867.946441][ T30] #1: ffffffff8ec8aca0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 867.957213][ T30] 1 lock held by syz.2.4543/22701: [ 867.962741][ T30] #0: ffffffff8fdcf900 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 867.974452][ T30] [ 867.976839][ T30] ============================================= [ 867.976839][ T30] [ 867.997056][ T30] NMI backtrace for cpu 1 [ 867.997079][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 867.997099][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 867.997110][ T30] Call Trace: [ 867.997118][ T30] [ 867.997125][ T30] dump_stack_lvl+0xe8/0x150 [ 867.997150][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 867.997170][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 867.997191][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 867.997213][ T30] sys_info+0x135/0x170 [ 867.997229][ T30] watchdog+0xfd3/0x1030 [ 867.997261][ T30] ? watchdog+0x1c9/0x1030 [ 867.997290][ T30] kthread+0x388/0x470 [ 867.997312][ T30] ? __pfx_watchdog+0x10/0x10 [ 867.997334][ T30] ? __pfx_kthread+0x10/0x10 [ 867.997357][ T30] ret_from_fork+0x514/0xb70 [ 867.997378][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 867.997396][ T30] ? __switch_to+0xc79/0x1410 [ 867.997424][ T30] ? __pfx_kthread+0x10/0x10 [ 867.997455][ T30] ret_from_fork_asm+0x1a/0x30 [ 867.997491][ T30] [ 867.997509][ T30] Sending NMI from CPU 1 to CPUs 0: [ 868.109377][ C0] NMI backtrace for cpu 0 [ 868.109392][ C0] CPU: 0 UID: 0 PID: 5654 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 868.109415][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 868.109425][ C0] RIP: 0010:memset_orig+0x75/0xb0 [ 868.109446][ C0] Code: 89 47 30 48 89 47 38 48 8d 7f 40 75 d8 0f 1f 84 00 00 00 00 00 89 d1 83 e1 38 74 14 c1 e9 03 66 0f 1f 44 00 00 ff c9 48 89 07 <48> 8d 7f 08 75 f5 83 e2 07 74 0a ff ca 88 07 48 8d 7f 01 75 f6 4c [ 868.109459][ C0] RSP: 0018:ffffc90003b1fd78 EFLAGS: 00000202 [ 868.109472][ C0] RAX: 0000000000000000 RBX: ffffc90003b1fe60 RCX: 0000000000000001 [ 868.109482][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90003b1fda0 [ 868.109492][ C0] RBP: ffffc90003b1fe10 R08: ffffc90003b1fdaf R09: 0000000000000000 [ 868.109503][ C0] R10: ffffc90003b1fda0 R11: fffff52000763fb6 R12: 1ffff92000763fb0 [ 868.109514][ C0] R13: dffffc0000000000 R14: 00007ffebc6ac3a0 R15: ffffc90003b1fda0 [ 868.109524][ C0] FS: 00005555922d7540(0000) GS:ffff88812528d000(0000) knlGS:0000000000000000 [ 868.109537][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 868.109548][ C0] CR2: 000020000000e038 CR3: 000000007ee38000 CR4: 00000000003526f0 [ 868.109561][ C0] Call Trace: [ 868.109569][ C0] [ 868.109574][ C0] get_timespec64+0x86/0x1b0 [ 868.109594][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 868.109616][ C0] __se_sys_clock_nanosleep+0x1ce/0x3b0 [ 868.109638][ C0] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 868.109662][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.109678][ C0] do_syscall_64+0x15f/0xf80 [ 868.109699][ C0] ? clear_bhb_loop+0x40/0x90 [ 868.109716][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.109731][ C0] RIP: 0033:0x7fdefd757f57 [ 868.109744][ C0] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 868.109756][ C0] RSP: 002b:00007ffebc6ac360 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 868.109771][ C0] RAX: ffffffffffffffda RBX: 00005555922d7540 RCX: 00007fdefd757f57 [ 868.109781][ C0] RDX: 00007ffebc6ac3a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 868.109791][ C0] RBP: 00007ffebc6ac880 R08: 0000000000000000 R09: 0000000000000000 [ 868.109800][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004 [ 868.109809][ C0] R13: 00007ffebc6ac3dc R14: 00007ffebc6ac470 R15: 0000000000000000 [ 868.109828][ C0] [ 868.113328][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 868.113348][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 868.113369][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 868.113380][ T30] Call Trace: [ 868.113388][ T30] [ 868.113396][ T30] vpanic+0x56c/0xa60 [ 868.113420][ T30] ? __pfx___schedule+0x10/0x10 [ 868.113444][ T30] ? __pfx_vpanic+0x10/0x10 [ 868.113472][ T30] panic+0xc5/0xd0 [ 868.113491][ T30] ? __pfx_panic+0x10/0x10 [ 868.113512][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 868.113542][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 868.113566][ T30] watchdog+0x102c/0x1030 [ 868.113597][ T30] ? watchdog+0x1c9/0x1030 [ 868.113627][ T30] kthread+0x388/0x470 [ 868.113650][ T30] ? __pfx_watchdog+0x10/0x10 [ 868.113676][ T30] ? __pfx_kthread+0x10/0x10 [ 868.113700][ T30] ret_from_fork+0x514/0xb70 [ 868.113722][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 868.113741][ T30] ? __switch_to+0xc79/0x1410 [ 868.113769][ T30] ? __pfx_kthread+0x10/0x10 [ 868.113792][ T30] ret_from_fork_asm+0x1a/0x30 [ 868.113828][ T30] [ 868.465055][ T30] Kernel Offset: disabled [ 868.469366][ T30] Rebooting in 86400 seconds..