last executing test programs: 1m45.962844679s ago: executing program 4 (id=1048): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x2, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x300040d5) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4}, 0x18) sendmmsg(r3, &(0x7f000000a200)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f00000002c0)="220733d69b211bb4a3f85730728e28424ba4cda255348a19dfc31da6b47d7904126212e0e8502fb4f3dadbbdfa5c952f12a9036dae3d2b0fc75a7bee726dc4c93d91e404a7c235d50738b60402190afaa9e06aff5bdd9087ac06c98060dd3ce9d5871751f599848cefda4e3893ed17b43fadafd1e859e9376358372d4f3cb3a0bf0fe13d15f63fee7e5753f3b19ae14a1226f1d0e748b0b0fc15af257611a13d40cc6aa716bd2733d9395d32fafe82dccc3b211e02659298134932c7c7d1033958c52744bb6adcf202f058a68249", 0xce}, {&(0x7f0000000400)="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", 0x62c}, {0x0}], 0x3, &(0x7f0000002480)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60000800) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x7, 0xf, 0x6, 0x6, 0x20, 0x1ff, 0x9]}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000801}, 0x10) 1m27.397052491s ago: executing program 1 (id=235): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="379500000000000000007200000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 1m26.796734437s ago: executing program 4 (id=1048): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x2, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x300040d5) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4}, 0x18) sendmmsg(r3, &(0x7f000000a200)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f00000002c0)="220733d69b211bb4a3f85730728e28424ba4cda255348a19dfc31da6b47d7904126212e0e8502fb4f3dadbbdfa5c952f12a9036dae3d2b0fc75a7bee726dc4c93d91e404a7c235d50738b60402190afaa9e06aff5bdd9087ac06c98060dd3ce9d5871751f599848cefda4e3893ed17b43fadafd1e859e9376358372d4f3cb3a0bf0fe13d15f63fee7e5753f3b19ae14a1226f1d0e748b0b0fc15af257611a13d40cc6aa716bd2733d9395d32fafe82dccc3b211e02659298134932c7c7d1033958c52744bb6adcf202f058a68249", 0xce}, {&(0x7f0000000400)="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", 0x62c}, {0x0}], 0x3, &(0x7f0000002480)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60000800) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x7, 0xf, 0x6, 0x6, 0x20, 0x1ff, 0x9]}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000801}, 0x10) 1m7.721363454s ago: executing program 1 (id=235): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="379500000000000000007200000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 1m6.000519099s ago: executing program 4 (id=1048): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x2, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x300040d5) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4}, 0x18) sendmmsg(r3, &(0x7f000000a200)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f00000002c0)="220733d69b211bb4a3f85730728e28424ba4cda255348a19dfc31da6b47d7904126212e0e8502fb4f3dadbbdfa5c952f12a9036dae3d2b0fc75a7bee726dc4c93d91e404a7c235d50738b60402190afaa9e06aff5bdd9087ac06c98060dd3ce9d5871751f599848cefda4e3893ed17b43fadafd1e859e9376358372d4f3cb3a0bf0fe13d15f63fee7e5753f3b19ae14a1226f1d0e748b0b0fc15af257611a13d40cc6aa716bd2733d9395d32fafe82dccc3b211e02659298134932c7c7d1033958c52744bb6adcf202f058a68249", 0xce}, {&(0x7f0000000400)="73fd5418cdbef924ba442463287fbdde2ab7da9d2b26d6b741a60e2aba6555bff157db432a06da33ed74145ddfec5146fe85c31fd70ec45ce1d1fe8dbf85f5e9eed99d6adec3a8a271e9fa501ef5898da20a50c603fbb5af49e0c36b53c91e33ccd527e2ba5edab0f61b9833642fcc839ced7b2ae3c5ab3c565aa52b38f42b865e07775777066808b3a7c4e70e4c05717bc6da503324a9ab9e13b738908b5e9f5b080b464098931a725cfbf8403017399050e250f8cb8b99bd8e5b138dcd386b324e381a36f63aac6099b8aa3979408d4f9db909a8d353a3dc533e2b558cd5921dbf0b33760bb481ffd108e820e871b6e19a87f8141e990d94de13dd8faee04b4e732b122fc85beb7f0163f169e9744ce609ea57fdaafd954cd8562ab91b47176ed0548096ca08ad7264c40f882894a2dbfa9bbc37bdc253a477eb4ae52faa1e6632bfc950b0209bb048349ea50d3527fbbc31a706ffe7c566551ca79d4b0e1359275f044cfbf90cd8497ed033fa064e58f0c11a1a8d18cf53866d4d7b232fb54ed86ea9654440deabd4e8ca66061633ba34a298732ba9605fe31a530f5198aa3e1d1c0fda4c036dc845c835b1959dc0b13cf15c75f58c6ef62f56588d7043c03cfeff1f7b0792e514ac00c9d7570ac95037f6fa4f0cfd7263649bd2b5342320f74ef89799307f596d5db41c683f615da96eb5a5b802fa8ecf3764f6ffd5271e66b382e0e14b81f145c22d4f90306ef02c8c8921521e46b23f72b2fdd2b4fc9a3eb6f03207ada71244714e67cbf65c138215e612a8c9a4420aa45fc39164f5cfc4f9fc014fcfd10b856c3ebd4e1e877046aaee29a642b211f356cb7ed483eda92450d5ff66ff23a20a8bb845265a2939cb34c48a2b22b33bb3e774383588b9f7a53333eb20f4c1054368e34d3acc692d3b12f746b729a122b0aa62a74f5bf0040d589f815c1bce1b4a5934384998df3ab48fe41f0b90fb4d4d8cb01bfecfc86a96d91facba50a5828a8f62bb8759f3dfaeb728e3e42744e83fbad739bd03de69d1c78f6d01b714b11a284caa1ebba69fe7d29e2cbc43db1e6d249545a7c6debd66b5b5f53d4c1d6cebcb2fa427160eb86e48047aab6ce43f7fa0d5bb1dc99ba03e65a7bf178ccba74cf71dec7712414b38f7bf98065a518366839ca4f4a1887ad28d495c1d5c4aa413128d80ab031bd7694cf1101fe9dd65e99849ce6b2e69d6e371bd1df1022e32125747356748d0d3b30fa7d2aa6394707a60b572606d7297091fb45a5534cf269f77f6fc61c92b94f141f06ba8e347667c2fb2c87de5eacf60fadc48f7d7c5516be44807b48583ecc13e00a58143e134706700d28357ac38611494311b049dd497cc5ce315051e215a57f33939d320f808f8dcdedeb60f42b71d618e272506f0bc28843d3fd337989d74600299ab187395347c5bfbb665e5bc03e27978c0b0a464355a47da458690f957122beac9bb139b4223bd156ad74bb76e6880823e52f9eb806aad122892ebd8355ff6cb15ff2e0ce7cad2219a333999318f59c986b4bee11b9f05e355fe32e98732015f17eb19db77088c55d321828bec2dd25ba0da232717e8dafed91f96636d930f3c38b46da4c5541ae963e30e89a341af805176d9e1c9c88068bd81f4acf0325d24fa76dacbff3b88615699f08ded43403b7aeecdd2bbec00e60555317a4e24828ba9e8b9a737621d8ba12fa83c963d67a5a5e5ebbf29ac272cad91786c269fc053ce3f50bb0c05926ccefcc4548d42142efbd86460ec4516aa48e34b54af6319b8c948b69a1fd0d49930d844f13cf5bd1e67c662cdca6dc5f4daf11a75a123ed0a740dfe3014515917a2b01d691803cd7c8f4c46a2fefeab1608498503df514da7c62692b3c2b927b0f09164b367a260aee0c619575891e98ec8391a0b385d4b9ca4a421e2766047cbc11264e89f7d704e7c83d7e50b1c2fa3648c90cb8f66d93f40df5ac3fdd206a3997a5efb0a2cab9c07e00165c2b1cb2c2baf1b06493c4809d1d5dd5c7e6dbc22f1385482f54d4fb96e9e8aec587fe68b7d2d033c7efe622918e0d8661c89582f50db39a3376c1684b9dcfb10ef6cca665c75e2b7e468e7cb3a15604b759b0d949f459b982181f5f423f5dfc8b209665c9763ed0545f9ebf77661559312b4c2fc9518434530f75bf17d1ab39be227845a1d1c9982f2e27601009c36c9ce9cf11da012532e09d23ef2a749a5ca8df867", 0x62c}, {0x0}], 0x3, &(0x7f0000002480)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60000800) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x7, 0xf, 0x6, 0x6, 0x20, 0x1ff, 0x9]}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000801}, 0x10) 52.195650217s ago: executing program 1 (id=235): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="379500000000000000007200000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 50.908557814s ago: executing program 4 (id=1048): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x2, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x300040d5) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4}, 0x18) sendmmsg(r3, &(0x7f000000a200)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f00000002c0)="220733d69b211bb4a3f85730728e28424ba4cda255348a19dfc31da6b47d7904126212e0e8502fb4f3dadbbdfa5c952f12a9036dae3d2b0fc75a7bee726dc4c93d91e404a7c235d50738b60402190afaa9e06aff5bdd9087ac06c98060dd3ce9d5871751f599848cefda4e3893ed17b43fadafd1e859e9376358372d4f3cb3a0bf0fe13d15f63fee7e5753f3b19ae14a1226f1d0e748b0b0fc15af257611a13d40cc6aa716bd2733d9395d32fafe82dccc3b211e02659298134932c7c7d1033958c52744bb6adcf202f058a68249", 0xce}, {&(0x7f0000000400)="73fd5418cdbef924ba442463287fbdde2ab7da9d2b26d6b741a60e2aba6555bff157db432a06da33ed74145ddfec5146fe85c31fd70ec45ce1d1fe8dbf85f5e9eed99d6adec3a8a271e9fa501ef5898da20a50c603fbb5af49e0c36b53c91e33ccd527e2ba5edab0f61b9833642fcc839ced7b2ae3c5ab3c565aa52b38f42b865e07775777066808b3a7c4e70e4c05717bc6da503324a9ab9e13b738908b5e9f5b080b464098931a725cfbf8403017399050e250f8cb8b99bd8e5b138dcd386b324e381a36f63aac6099b8aa3979408d4f9db909a8d353a3dc533e2b558cd5921dbf0b33760bb481ffd108e820e871b6e19a87f8141e990d94de13dd8faee04b4e732b122fc85beb7f0163f169e9744ce609ea57fdaafd954cd8562ab91b47176ed0548096ca08ad7264c40f882894a2dbfa9bbc37bdc253a477eb4ae52faa1e6632bfc950b0209bb048349ea50d3527fbbc31a706ffe7c566551ca79d4b0e1359275f044cfbf90cd8497ed033fa064e58f0c11a1a8d18cf53866d4d7b232fb54ed86ea9654440deabd4e8ca66061633ba34a298732ba9605fe31a530f5198aa3e1d1c0fda4c036dc845c835b1959dc0b13cf15c75f58c6ef62f56588d7043c03cfeff1f7b0792e514ac00c9d7570ac95037f6fa4f0cfd7263649bd2b5342320f74ef89799307f596d5db41c683f615da96eb5a5b802fa8ecf3764f6ffd5271e66b382e0e14b81f145c22d4f90306ef02c8c8921521e46b23f72b2fdd2b4fc9a3eb6f03207ada71244714e67cbf65c138215e612a8c9a4420aa45fc39164f5cfc4f9fc014fcfd10b856c3ebd4e1e877046aaee29a642b211f356cb7ed483eda92450d5ff66ff23a20a8bb845265a2939cb34c48a2b22b33bb3e774383588b9f7a53333eb20f4c1054368e34d3acc692d3b12f746b729a122b0aa62a74f5bf0040d589f815c1bce1b4a5934384998df3ab48fe41f0b90fb4d4d8cb01bfecfc86a96d91facba50a5828a8f62bb8759f3dfaeb728e3e42744e83fbad739bd03de69d1c78f6d01b714b11a284caa1ebba69fe7d29e2cbc43db1e6d249545a7c6debd66b5b5f53d4c1d6cebcb2fa427160eb86e48047aab6ce43f7fa0d5bb1dc99ba03e65a7bf178ccba74cf71dec7712414b38f7bf98065a518366839ca4f4a1887ad28d495c1d5c4aa413128d80ab031bd7694cf1101fe9dd65e99849ce6b2e69d6e371bd1df1022e32125747356748d0d3b30fa7d2aa6394707a60b572606d7297091fb45a5534cf269f77f6fc61c92b94f141f06ba8e347667c2fb2c87de5eacf60fadc48f7d7c5516be44807b48583ecc13e00a58143e134706700d28357ac38611494311b049dd497cc5ce315051e215a57f33939d320f808f8dcdedeb60f42b71d618e272506f0bc28843d3fd337989d74600299ab187395347c5bfbb665e5bc03e27978c0b0a464355a47da458690f957122beac9bb139b4223bd156ad74bb76e6880823e52f9eb806aad122892ebd8355ff6cb15ff2e0ce7cad2219a333999318f59c986b4bee11b9f05e355fe32e98732015f17eb19db77088c55d321828bec2dd25ba0da232717e8dafed91f96636d930f3c38b46da4c5541ae963e30e89a341af805176d9e1c9c88068bd81f4acf0325d24fa76dacbff3b88615699f08ded43403b7aeecdd2bbec00e60555317a4e24828ba9e8b9a737621d8ba12fa83c963d67a5a5e5ebbf29ac272cad91786c269fc053ce3f50bb0c05926ccefcc4548d42142efbd86460ec4516aa48e34b54af6319b8c948b69a1fd0d49930d844f13cf5bd1e67c662cdca6dc5f4daf11a75a123ed0a740dfe3014515917a2b01d691803cd7c8f4c46a2fefeab1608498503df514da7c62692b3c2b927b0f09164b367a260aee0c619575891e98ec8391a0b385d4b9ca4a421e2766047cbc11264e89f7d704e7c83d7e50b1c2fa3648c90cb8f66d93f40df5ac3fdd206a3997a5efb0a2cab9c07e00165c2b1cb2c2baf1b06493c4809d1d5dd5c7e6dbc22f1385482f54d4fb96e9e8aec587fe68b7d2d033c7efe622918e0d8661c89582f50db39a3376c1684b9dcfb10ef6cca665c75e2b7e468e7cb3a15604b759b0d949f459b982181f5f423f5dfc8b209665c9763ed0545f9ebf77661559312b4c2fc9518434530f75bf17d1ab39be227845a1d1c9982f2e27601009c36c9ce9cf11da012532e09d23ef2a749a5ca8df867", 0x62c}, {0x0}], 0x3, &(0x7f0000002480)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60000800) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x7, 0xf, 0x6, 0x6, 0x20, 0x1ff, 0x9]}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000801}, 0x10) 40.212160906s ago: executing program 2 (id=1766): socket(0x23, 0x6, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000a80)=ANY=[@ANYRES8=r0], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010000000000000000000200000009000100feffffff"], 0x20}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000"], 0x54}}, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)=ANY=[@ANYBLOB="1c0100002b00010000000000fcdbdf250a01f2800c00090008ac0f0000000000140001"], 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) 39.927210453s ago: executing program 2 (id=1769): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x8000000, 0x0, 0x0, 0x8000000}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x60000000}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1, 0x84}}}, 0x90}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x14, r3, 0x200, 0xffffffff, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}}, 0x40800) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x14, r3, 0x200, 0xffffffff, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}}, 0x40800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x1, 0x80, 0x6000, 0x4ed7ea54, {{0xa, 0x4, 0x1, 0x0, 0x28, 0x68, 0x0, 0x9, 0x4, 0x0, @remote, @empty, {[@ssrr={0x89, 0x7, 0x95, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0xb, 0x2f, [@rand_addr=0x64010101, @local]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x1, 0x80, 0x6000, 0x4ed7ea54, {{0xa, 0x4, 0x1, 0x0, 0x28, 0x68, 0x0, 0x9, 0x4, 0x0, @remote, @empty, {[@ssrr={0x89, 0x7, 0x95, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0xb, 0x2f, [@rand_addr=0x64010101, @local]}]}}}}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r6}, 0x18) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) close(r8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r5, @ANYRES32=r9, @ANYBLOB="0200000002"], 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB="0200000006"], 0x10) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f61640034000280080004400000000008000840080000000800024000000000080005400000000008000340000000"], 0x9c}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) write(r12, &(0x7f00000002c0)="95830f00df49d22f5d8bb4fc8b3a66154aca99ee2459c25742ed7c3ec818c0a5bf80b0b35f98178f49072c51a76b6cf1885a3b89ff3c1d4a48bb11a41ced7ba1260757a4ae148a8b993462edc1620218628b5cf34b6f6df317b9167ff84148f8341cd6878cadb8064c0d40c3bcb3ceb565c6980fa8ffd5538f5b3223f9136f", 0x7f) (async) write(r12, &(0x7f00000002c0)="95830f00df49d22f5d8bb4fc8b3a66154aca99ee2459c25742ed7c3ec818c0a5bf80b0b35f98178f49072c51a76b6cf1885a3b89ff3c1d4a48bb11a41ced7ba1260757a4ae148a8b993462edc1620218628b5cf34b6f6df317b9167ff84148f8341cd6878cadb8064c0d40c3bcb3ceb565c6980fa8ffd5538f5b3223f9136f", 0x7f) sendmsg$NL80211_CMD_SET_REG(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x3c, r13, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x20, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040001}, 0x4000) (async) sendmsg$NL80211_CMD_SET_REG(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x3c, r13, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x20, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040001}, 0x4000) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x78, r13, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x26e}, @NL80211_ATTR_FRAME={0x34, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_a, @device_a, @random="30a9a37d68b3", {0x2, 0x9}, @value=@ver_80211n={0x0, 0xd, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0xd, @val={0x8c, 0x10, {0x87b, "16eca74ff420", @short="2cea66dc932ce9d7"}}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x3, 0x9, 0x2]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}]]}, 0x78}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) (async) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x78, r13, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x26e}, @NL80211_ATTR_FRAME={0x34, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_a, @device_a, @random="30a9a37d68b3", {0x2, 0x9}, @value=@ver_80211n={0x0, 0xd, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0xd, @val={0x8c, 0x10, {0x87b, "16eca74ff420", @short="2cea66dc932ce9d7"}}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x3, 0x9, 0x2]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}]]}, 0x78}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) 39.738959445s ago: executing program 2 (id=1772): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000012140104020000000000000008004b001300000008"], 0x38}}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301}], {0x14}}, 0x3c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001001700"], 0x1c}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r5}, &(0x7f0000000600), &(0x7f0000000940)}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000040000000060000e10800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) setsockopt$IP_VS_SO_SET_DEL(r7, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0xf3a, 0x0) write(r4, &(0x7f0000000240)="94", 0x1) tee(r3, r6, 0x8f5, 0x100000000000000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff050006"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x60800) write$cgroup_type(r6, &(0x7f0000000180), 0x9) write(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x3, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, "001863714ab99043"}}}}}, 0x0) 39.387739964s ago: executing program 2 (id=1774): socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001500)=""/4068, 0xfe4}, {&(0x7f0000002500)=""/4094, 0xffe}], 0x2}, 0x40000020) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000002000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000060000850000008200000095"], &(0x7f0000001fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000900)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="97", 0x1}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r9}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x8000, 0x8, 0xfffffcdc, 0x2, {{0x14, 0x4, 0x3, 0x2f, 0x50, 0x67, 0x0, 0x6, 0x2f, 0x0, @broadcast, @private=0xa010100, {[@end, @lsrr={0x83, 0x13, 0x5c, [@loopback, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x25, 0xffffffffffffffff, [{0x5, 0xd, "93e322653608a928b77e11"}, {0x1, 0x12, "89927192f2a1b8f82958d90fe49c7807"}]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x8000, 0x7, 0x6, 0x0, {{0x6, 0x4, 0x2, 0x38, 0x18, 0x64, 0x0, 0x1, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0xb}, {[@noop]}}}}}) 33.781435468s ago: executing program 1 (id=235): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="379500000000000000007200000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 32.568749058s ago: executing program 4 (id=1048): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x2, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x300040d5) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4}, 0x18) sendmmsg(r3, &(0x7f000000a200)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f00000002c0)="220733d69b211bb4a3f85730728e28424ba4cda255348a19dfc31da6b47d7904126212e0e8502fb4f3dadbbdfa5c952f12a9036dae3d2b0fc75a7bee726dc4c93d91e404a7c235d50738b60402190afaa9e06aff5bdd9087ac06c98060dd3ce9d5871751f599848cefda4e3893ed17b43fadafd1e859e9376358372d4f3cb3a0bf0fe13d15f63fee7e5753f3b19ae14a1226f1d0e748b0b0fc15af257611a13d40cc6aa716bd2733d9395d32fafe82dccc3b211e02659298134932c7c7d1033958c52744bb6adcf202f058a68249", 0xce}, {&(0x7f0000000400)="73fd5418cdbef924ba442463287fbdde2ab7da9d2b26d6b741a60e2aba6555bff157db432a06da33ed74145ddfec5146fe85c31fd70ec45ce1d1fe8dbf85f5e9eed99d6adec3a8a271e9fa501ef5898da20a50c603fbb5af49e0c36b53c91e33ccd527e2ba5edab0f61b9833642fcc839ced7b2ae3c5ab3c565aa52b38f42b865e07775777066808b3a7c4e70e4c05717bc6da503324a9ab9e13b738908b5e9f5b080b464098931a725cfbf8403017399050e250f8cb8b99bd8e5b138dcd386b324e381a36f63aac6099b8aa3979408d4f9db909a8d353a3dc533e2b558cd5921dbf0b33760bb481ffd108e820e871b6e19a87f8141e990d94de13dd8faee04b4e732b122fc85beb7f0163f169e9744ce609ea57fdaafd954cd8562ab91b47176ed0548096ca08ad7264c40f882894a2dbfa9bbc37bdc253a477eb4ae52faa1e6632bfc950b0209bb048349ea50d3527fbbc31a706ffe7c566551ca79d4b0e1359275f044cfbf90cd8497ed033fa064e58f0c11a1a8d18cf53866d4d7b232fb54ed86ea9654440deabd4e8ca66061633ba34a298732ba9605fe31a530f5198aa3e1d1c0fda4c036dc845c835b1959dc0b13cf15c75f58c6ef62f56588d7043c03cfeff1f7b0792e514ac00c9d7570ac95037f6fa4f0cfd7263649bd2b5342320f74ef89799307f596d5db41c683f615da96eb5a5b802fa8ecf3764f6ffd5271e66b382e0e14b81f145c22d4f90306ef02c8c8921521e46b23f72b2fdd2b4fc9a3eb6f03207ada71244714e67cbf65c138215e612a8c9a4420aa45fc39164f5cfc4f9fc014fcfd10b856c3ebd4e1e877046aaee29a642b211f356cb7ed483eda92450d5ff66ff23a20a8bb845265a2939cb34c48a2b22b33bb3e774383588b9f7a53333eb20f4c1054368e34d3acc692d3b12f746b729a122b0aa62a74f5bf0040d589f815c1bce1b4a5934384998df3ab48fe41f0b90fb4d4d8cb01bfecfc86a96d91facba50a5828a8f62bb8759f3dfaeb728e3e42744e83fbad739bd03de69d1c78f6d01b714b11a284caa1ebba69fe7d29e2cbc43db1e6d249545a7c6debd66b5b5f53d4c1d6cebcb2fa427160eb86e48047aab6ce43f7fa0d5bb1dc99ba03e65a7bf178ccba74cf71dec7712414b38f7bf98065a518366839ca4f4a1887ad28d495c1d5c4aa413128d80ab031bd7694cf1101fe9dd65e99849ce6b2e69d6e371bd1df1022e32125747356748d0d3b30fa7d2aa6394707a60b572606d7297091fb45a5534cf269f77f6fc61c92b94f141f06ba8e347667c2fb2c87de5eacf60fadc48f7d7c5516be44807b48583ecc13e00a58143e134706700d28357ac38611494311b049dd497cc5ce315051e215a57f33939d320f808f8dcdedeb60f42b71d618e272506f0bc28843d3fd337989d74600299ab187395347c5bfbb665e5bc03e27978c0b0a464355a47da458690f957122beac9bb139b4223bd156ad74bb76e6880823e52f9eb806aad122892ebd8355ff6cb15ff2e0ce7cad2219a333999318f59c986b4bee11b9f05e355fe32e98732015f17eb19db77088c55d321828bec2dd25ba0da232717e8dafed91f96636d930f3c38b46da4c5541ae963e30e89a341af805176d9e1c9c88068bd81f4acf0325d24fa76dacbff3b88615699f08ded43403b7aeecdd2bbec00e60555317a4e24828ba9e8b9a737621d8ba12fa83c963d67a5a5e5ebbf29ac272cad91786c269fc053ce3f50bb0c05926ccefcc4548d42142efbd86460ec4516aa48e34b54af6319b8c948b69a1fd0d49930d844f13cf5bd1e67c662cdca6dc5f4daf11a75a123ed0a740dfe3014515917a2b01d691803cd7c8f4c46a2fefeab1608498503df514da7c62692b3c2b927b0f09164b367a260aee0c619575891e98ec8391a0b385d4b9ca4a421e2766047cbc11264e89f7d704e7c83d7e50b1c2fa3648c90cb8f66d93f40df5ac3fdd206a3997a5efb0a2cab9c07e00165c2b1cb2c2baf1b06493c4809d1d5dd5c7e6dbc22f1385482f54d4fb96e9e8aec587fe68b7d2d033c7efe622918e0d8661c89582f50db39a3376c1684b9dcfb10ef6cca665c75e2b7e468e7cb3a15604b759b0d949f459b982181f5f423f5dfc8b209665c9763ed0545f9ebf77661559312b4c2fc9518434530f75bf17d1ab39be227845a1d1c9982f2e27601009c36c9ce9cf11da012532e09d23ef2a749a5ca8df867", 0x62c}, {0x0}], 0x3, &(0x7f0000002480)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60000800) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x7, 0xf, 0x6, 0x6, 0x20, 0x1ff, 0x9]}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000801}, 0x10) 22.105509155s ago: executing program 2 (id=1774): socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001500)=""/4068, 0xfe4}, {&(0x7f0000002500)=""/4094, 0xffe}], 0x2}, 0x40000020) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000002000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000060000850000008200000095"], &(0x7f0000001fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000900)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="97", 0x1}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r9}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x8000, 0x8, 0xfffffcdc, 0x2, {{0x14, 0x4, 0x3, 0x2f, 0x50, 0x67, 0x0, 0x6, 0x2f, 0x0, @broadcast, @private=0xa010100, {[@end, @lsrr={0x83, 0x13, 0x5c, [@loopback, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x25, 0xffffffffffffffff, [{0x5, 0xd, "93e322653608a928b77e11"}, {0x1, 0x12, "89927192f2a1b8f82958d90fe49c7807"}]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x8000, 0x7, 0x6, 0x0, {{0x6, 0x4, 0x2, 0x38, 0x18, 0x64, 0x0, 0x1, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0xb}, {[@noop]}}}}}) 17.645331786s ago: executing program 1 (id=235): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="379500000000000000007200000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 15.389818917s ago: executing program 4 (id=1048): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x2, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x300040d5) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4}, 0x18) sendmmsg(r3, &(0x7f000000a200)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f00000002c0)="220733d69b211bb4a3f85730728e28424ba4cda255348a19dfc31da6b47d7904126212e0e8502fb4f3dadbbdfa5c952f12a9036dae3d2b0fc75a7bee726dc4c93d91e404a7c235d50738b60402190afaa9e06aff5bdd9087ac06c98060dd3ce9d5871751f599848cefda4e3893ed17b43fadafd1e859e9376358372d4f3cb3a0bf0fe13d15f63fee7e5753f3b19ae14a1226f1d0e748b0b0fc15af257611a13d40cc6aa716bd2733d9395d32fafe82dccc3b211e02659298134932c7c7d1033958c52744bb6adcf202f058a68249", 0xce}, {&(0x7f0000000400)="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", 0x62c}, {0x0}], 0x3, &(0x7f0000002480)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60000800) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x7, 0xf, 0x6, 0x6, 0x20, 0x1ff, 0x9]}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000801}, 0x10) 6.716268895s ago: executing program 0 (id=1894): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611930000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x8000000, 0x0, '\x00', 0x0, 0x24}, 0x94) 6.608789613s ago: executing program 0 (id=1896): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0xffffffff, 0x4) syz_emit_ethernet(0x52, &(0x7f0000000280)={@local, @local, @val, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x14, 0x3a, 0x0, @private0, @mcast2, {[], @ni={0x8c, 0x0, 0x0, 0x5, 0x7f, 0x8000, "f5aa655a"}}}}}}, 0x0) 6.505977295s ago: executing program 0 (id=1897): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'gre0\x00', 0x0, 0x80, 0x8000, 0x8, 0x3, {{0xf, 0x4, 0x2, 0x5, 0x3c, 0x64, 0x0, 0x7, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0xe, 0xffffffffffffffff, [{0x0, 0x8, "770bba9da201"}]}, @rr={0x7, 0xb, 0x6f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101]}, @generic={0x88, 0xd, "ab43f25d2f8d02087dbb4d"}]}}}}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x9c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_STRSET_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x40000892) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) r4 = socket(0x11, 0x3, 0x2) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f00000001c0)=0x9, 0x4) socketpair(0x3, 0x2, 0x10000, &(0x7f00000005c0)) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000b80)="2f00000014000f3f00000000120f0a0011000000009a67ec53f737bf1739078682ee6e8d06e500000000638c7b9916", 0x2f) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DPORT={0x6, 0x1d, 0xfffe}]}, 0x24}}, 0x0) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000020202000900030073797a30000000000900010073797a30000000000500040000"], 0x34}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x4c, &(0x7f0000000000), 0x4) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f0000000080)=0x11) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001d00000000007f00000000003c0000000600000003000000000000090000000008000000020000840a0000000100000005000000000200000d000000000000000100000006000000000000090000000000617f003000"], &(0x7f00000002c0)=""/53, 0x5a, 0x35, 0x0, 0x8, 0x10000}, 0x28) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000002780)=""/4096, 0xc26bfe8e8f6baca8}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r12, 0x34}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000200000000000000000000004100000085000000a0000000b200"/40], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @xdp, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = socket$netlink(0x10, 0x3, 0x0) ppoll(&(0x7f0000000140)=[{r13, 0x2090}, {r13, 0x4000}, {r13, 0x100}, {r13, 0xc0c4}], 0x4, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f0000000200)={[0xc]}, 0x8) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4000000010000305000000000000000000be8425b398ccc571bb0d85ea82454874787ff0f27437332954447d0a66ce60e3b88367cb0619206d7f60cc13c2a61f0a9fc6d614b4fb06198ae2b27163f7a6686a0ad78025f8d0de264ecf42e37e1d83b1889bc1e4609d4f81807554f82911f384c0c0ef2c6adec9c398838eeb988bd1b2a499c6bc76feb225f21a6cba854ce528ba0101774c5b9d0d77953189968add9e17c27cd1fdb2bd6d94dba51584b0c444f7148074166e7071ac", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000300000000000800040000000000"], 0x40}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x0, 0xe, 0x0, &(0x7f0000000100)="1ec86e88bf4ba4466ecffff7edad", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 6.24389576s ago: executing program 0 (id=1899): r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)="69bb061f4879e8a27cd634c270572b0484f4db01acd105f29ad07e161fb4a3cc9530724dad2aea8f870e829d3f0ac8313f869cd4891283ee3759d6bb23ab77f6b81485611b9eb8550483939355cb08108ec4cbd47f19a2d21c2d39124fb364d184c07c8fc7e8f72669169d33c7058dc46a94929a737f7cdcb1c8868eff6729daa6e864e10a87397198bf39e16f20aed256851e7aea4d837ea7c3b25904fd3db067ca0d4da7cac454118b3a0a28eb0dffd9a08242240d661d51d60f548f5b19015402db1aeb1edc9212646d6268079ab92dbbc811112cfaaf04ff6b1e4e7e46619bf019073c7a4e", 0xe7) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0xfffffffb}, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r3, 0x120, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) (async, rerun: 32) r4 = socket$kcm(0x29, 0x2, 0x0) (rerun: 32) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={0xffffffffffffffff}, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000300)={r1, r5}) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000027c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002780)={&(0x7f0000000380)={0x23fc, 0xd, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1684, 0x3, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x64, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x1c, 0x1, "dcc035ef4465fa58c22fbbc09df155a78fa269429b6fe578"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, {0x338, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xc8, 0x6, 0x1, 0x0, "6782cf2c7bac1f308a5d5369b730fdea4c788f06451f2e61b172e79c1596b497e5d407f67db97e334a049660d7492fd231895bacd45b898ee92cc29a01aa7c9c5b0683bcf248e5cd9ec3ac0d0cc5b9b00e30bfe40753ad8d3667eaa10eadfb686e878d29e5e032cb075ad6c66c1444f95156e1e80047994aa0b9285dbe2478097ec24de75aa78cdb4a18c36141f6caef05495b6b38201b59aad89d34d0b0bc5222d1e959130a05479d31e0b5c404f75a1b420067bdfc06712ff682f51030bfc692adb3bf"}, @NFTA_SET_ELEM_KEY_END={0xd4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xce, 0x1, "418583a972ae28b65642362227ab7b96a80236faa2373d3ddd09a487417a7aef97c3367495d5facd5f53e215c11d618afd4169fe5732b5221112a27fa69b8bd718f672f68e33990845f5ab41480ff7d3ef4c118cdf5238ce76566c18632d8d116d71bcdf882eaff494c4f7d09cde34ac1f16f0dc62f144ba796e3f34921afece7f7536fcbfb67d3c4152542c0053d71075c69fe492ea8b4f8b5a828335c8b44f171ff6fbe752815771bf547b3ebcba293e2ac06c3a5f72e66e0a9d31b66fb1c24b96b4aa0c2212c3b1fa"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY={0x98, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x80, 0x1, "475986c4a58ca96ccb39edda158bd11efc741b53d5f16b317c09d6674863dd2a6c05d4179491072a2c84dba45a5e0cff5fb47a2d657d805e1323f4bf24b204976f6e2b7959a1c5beede429f14e9781d89b257d91ef025e8addb664c16d157630ae94d91d080b06a0ea7acc6b53a23465f395afbfd14e19e2c93b4d86"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_KEY_END={0xf4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xed, 0x1, "c1aa49119ea93a2ae8bac2de59a207a1fbdfe9dd9e7e8ee3f9e86182df8a53bc8f4072b1eb5c22f0d16fbabc33f61c64c9e6cbb7dcd0ef48fe11f0f29e7fd51c91736dfdf2f5960b4741f799875e7909b36dc7330fb190de040c97c7a901e4b2cd7e50e2969ba7e561dc5c3cf1b766e86734c00dfa30faf51ecd0de0922cf5c3e13098cf42c11265091d0192049652c9c3f9909e0fca7814de833035a925c3c0f571f75582c9ba7e5b15da7e5ddd34a33fdc36acc396a847f734f69534b2b950e98188491ea18b447460c8df456cb2a4a50addce9db354a9bc92b9949ee49abed735437bc1c80a7f92"}]}]}, {0xeb0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xeac, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x680, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x670, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_TO_DATA={0x108, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2c, 0x1, "ee93a3caee8127acdb52fe903e95f06727dcd22061832ed23ba2aa3f0a80e3ddc308c08f7db4823c"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xc9, 0x1, "2fcc205660c4c7fcd9f528941d34758027f671bc5fdf72b96bb500872bbcf54cb25266de22881f4ee61f010bf10409a134f9d414bb3248734815145aad3baa31dc3cc5d98e6e6e4ee67b5726f9633d8424432d0bcf2afaa436ba68e468e0198fd096210dbfc8b43026d5a4bf72f37b9aaa61acbcc3a509b17287bc3a9be4f9c938304e17f1c693fe9814eb3db2c3d9d4ebff3fb742c13c82dec418478a140ed786b53d399991c888b49f861e9642dcc9c104bcc2f63fa668f371afef0e1ae7524b2cc78f9d"}]}, @NFTA_RANGE_TO_DATA={0x1c8, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x92, 0x1, "5ccfd4f17926f853dbaf92d7506c000dc93dbc4af79766762c85b902f3990f220b4794dacf334258277205424282a828b582d9404e1bb968359a4509919771f9662b7992d58e1d359ccb3e078de495b06357d0c108f46b78926f09e4fa9fad7b3acbad4290c27dfc82dc8ebcec3b10e0485da0376f5200b4f9a8098ffee46985208948c0e2608d9eee28f2621113"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x21, 0x1, "a04ff34eabb71e7de934cfcd4381d99e200e68b4e3670e366484a13bab"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x92, 0x1, "510c5ed9ed38906cbfc17f9b1b27e7bf027ee2f06656ed91b376a990294d7a40cc21d353f64c1d688a19cffd12fc4a7a5271145b19d1174925a42ed04265448799d6482687d92142fd99f458bcef703f767e120dc772746c18603ebd77a820f6ba68c834ef3230bcf8dae4ed0a072526a081821b073137a92168344848284917dd7e1026dbdb427f68ba7a4d168d"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_RANGE_TO_DATA={0x1c8, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xbd, 0x1, "b1d67f52e4443044d62b8e02082f0cde7c4d3f8aa8fd83fe6a567d5d9302e34f8ec9baf32829abec1ee0c9d21771b776066c4a1fb047b73a0e56229ec5a5dfd61fcbf357399b8c70a51e8b67dba35fe3e48e2b7229fd874a343aa2457d01df48a3f42218e4d059de9c02d83d885bb4741f7fbedcbbf9319159dbb1888be614a522c1377cf1a1e677623981676744e77694b4e4a8f53376bfedac989f0216c7eb121a90af30b60ff8a534a32ddaf9ae02d856fa79c597c70d26"}, @NFTA_DATA_VALUE={0xe7, 0x1, "032b43bcb410e97084edb07dc38e216e1582204106bb123e489783b259652172cc4474c8439e47c0020c545c651ddb3b370465c2a0777e7159b981f46b1eeb74beee6cf60191795c0ee987ccbfbe0e45b42337f6089aa42691d2741ab7f56b4120636bb16e78faf22df3725cbaeb48b8715042496842f0660767546116aac22029541d1fc96c4a330ef99ddc0531fa33722966e00d8dd93afc97c3bfda5b2a4e160162785f42f7400823d25bb1ad32e54756da59a6ba1f7cb2ec357e65fb3529f071273e3ffff76f73c8bbee938e8d1ae05ac2b811cce06841e9838a0fb873a2c063cd"}]}, @NFTA_RANGE_TO_DATA={0x1c4, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xa8, 0x1, "5612d0e39c3d1f6c8ffe797571541e74a85f9b349cdd1a048550393726869bcdf7e88654fc839fa1f9240b8549d92ceb79f6e4909e2ea0acd7f80e60b6283306e010525b4c01b3e549a9b9c452be1d102825c5c80a6809cb6441ec215cc6f6ab5fa12fefb39182731111cd81d0650c9a92b50795d6b2ab2f5cbc46ee86b7317dc9ea5ab3396e6439ac4e1af1ad58510e5f74eb66b21857874f8e406f4dee00e74c7d5a11"}, @NFTA_DATA_VALUE={0x78, 0x1, "81ecf2bd85fca2fa30373faf70ec80b7002e5c3570c09fd2ab1a92e0429f0054794ca7c12c7a7a48bb5c4a44dcfe49810436b87a14f3439d27f60897ce459b246619eb6bf72bb21de14f4dcd897cc621b05b16605e89a4963ad183f0a49ad482d4b489937e9b55d4d65f050a52a28cd1043587af"}, @NFTA_DATA_VALUE={0x4}]}]}}}, {0x48, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x48, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x40}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x770, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x760, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_RANGE_FROM_DATA={0x3cc, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xd8, 0x1, "44ee4bd933c46e9ff0fecd55088a8e46a23deb4c89e489903d156183efd60465025b97a76d29d4a8e2da9d3a5dd3661a98a514876fa3eba3b2aebc6d1c9987b88c2f5e916b4e89fe45d596b523a887ecf850207779974f500ebd704cd7ebb71cebd2a30f589ed70dfcf7c1e0c3e99d22e66bd3856be0f8a3b2f75bdc3cdb6cc0a63a6e003c8d61522a375950ad66e8f87d0d96e85aae9acd939bd5e94a485d3956c5e997e299c6b1da304486eba1180a022739b536dd1798fc9e5aad7db757497222d6419fa80ce66dea7caa129e7e1d628be86b"}, @NFTA_DATA_VALUE={0xd2, 0x1, "0bfd1f5bed53da6c62e84d4b409efa942f9039874447ae134e97408bbc084f39a168e0e9a93ec452594ed4e6afa02f16117c306f951b4f8ca9a72478a16ce87202040d839e818a3f64e25520b2cf2b617c7a6f5bcd30181f3de6f43bb2516e048bf851bd32efbe2ee0e60b5f488577358370f6af17220e6005be9675a12c8b16dacb3dd3453de4530921cd8941aec95d5147cbbf735e3f3f20474090597c14b7bc44e37e1c839053ced6017ecd86bc80f1fbb64f11894e540a806ace42386e6ae9adb926b5d87ec0ea511ca63707"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x2f, 0x1, "9e1c0e30a18eab92e2ba52b893f780a84c02e87c57a94071ab1954e41d78107de13876436ef179108d8a61"}, @NFTA_DATA_VALUE={0xd7, 0x1, "7dcea84639ba67e64e782019320f0934f2a8883f31cee2b29df270e6540c8e0a1da6be31d997845c10593a39830414912a586ce355cb19e77bd09f920556197ec42be1401ed02475b9d6e68e7114393c57b1f21a174a98b529a4db3d7aed217f3578ed0d953d079eb8ade575cef4cc880e05200c554012ae289f3764e96bf646c474f52326bcb62819fa227aa3a75b999028156e3c9544f5f8cc7c5ecc06d26c0e415560e953f824bdd2184ff0515eb4d1e04af4895cf37174856935dd96d94f1c330607d6c2e6a9d7f71a7d05f33dee915985"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_TO_DATA={0x104, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x7, 0x1, ',]z'}, @NFTA_DATA_VALUE={0xe4, 0x1, "b2f5b3b82545e040a5509cec003c95f7bddac92366a840e2a943d84a3957e3098be69cc27299b5b8e9e3bdac5f15ffbe6b7beb7020579ee8d05ee09b7ef70131c004ed2a1ac0a315bcc0e2991bf5673a41620bfd2370514d6df9ed5919d548c6a37edd9a8d8eecff3d0caffbdd4678c753831d338acd1fbb8e031a3f3572315fd786db159edef8686e0ba113093dbbf9fce9cba28ca5243cac7dbd1c42acf0d09d93d9113227a16085a3e4d768591c17f48465c59fee107da20689ea8e4c551230bdfb6621e2ee6cd2d9101cf0da6d9558760e8efb0a681719fb8ac4347ae56e"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x254, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1e, 0x1, "cc29cdd8786f2e05a974479b4ef47782d8055b0f0d4b218ba313"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xad, 0x1, "deeb8556da91070fd5cb4ec8b277443a7a2243678543860e427a24031d6bff19c207da0dd249b79995f45e3c2177eabb98d23fc7e4442dee5d1168c3c0f2d25b6252ed8c94c8583b2337de739f91263b1dce39aae91302113a796d2f6a99ab7e4068f7c16ef6dcfb252c3566e4d5c47a70cf5b722c637d5c02d2bf470e54d5b53d15f574a89cf7c5c8d188125d694c7d8c63eeb226b03ebe112c6a196f304bfacbaa244c8f860ac0c2"}, @NFTA_DATA_VALUE={0x31, 0x1, "8b872e382b7df38ce752cde9bc8218f400b5ece9ab652dc1627cc54edd89a8408af351726a545e0c19cdecc617"}, @NFTA_DATA_VALUE={0xf1, 0x1, "62324ab71e6302cd8b99bde39fe8edbe62628c312e16f22b6f99a813f1fd06770d85321a789eaadb7a96777d804c891f90d5f2c69144a4cc882991d6deec7a5ccb8740cf7cddf24b050aa0e0de98cf7bf0becb7fa8cd995460da279298425981a39ea87fc325ef8fd16db1eb0c92ff780ead6f2ee34da35d79407e9db4978c6a3b3298422dd759011cec0d0427396a40a6037169d32374ec7fb883176091992b5d5e8d6c98ef8d61a9462323f2b3ada6840016bca53481c1cd72ddfff6f1a1c9106c6f42f2ebafe2cafdf28162729b2c2fc73166ee64ddd94d137a8bdc1b9c05d03fb46782d93c64fea7b8e93a"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}]}, {0x340, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x334, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x30, 0x1, "b8c3d72eb9d0d2c0751e506f517e053a580c1ee941454d784c28036917d329a1306dd2f964d8f342a3bb5af6"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xc8, 0x1, "84abfcac0cfb8e9e77ece496675fb347e66d58247b2e389530aee1bd911e33d7a4b46955740b6d8339dfb8b2b38852c6373fecd41d018dbebb7dc6b5c2221d869ec9297c8601fed7ce875af979893a0d1915f2e3742f2224fc74d37bfcceed1066cdc07195581491f6259f75c85eb85ecf21b3e0f8c89db49a2d3ba5f1e468237a44ac6cf4634c249a5b00ea7fe54040ac996726cb1448061e0b0e59c2b0d0bbe285a21bb70396af528b85571290f2fc43ba5688a51b36a5ed65310318f8f5f69cbd78ad"}, @NFTA_DATA_VALUE={0x7e, 0x1, "08769cc167e04985d263d65545887ecd1548a246acbb9c26e5a0b40bb79bc77efb0d0c3bad48ae2f81081f39bed76ae381965e079132d60110cbc34a48d09e794956056a3b2152e65442cf30ee414c1e70e5ad2405e7c9a83bca027a252937f9bf4d2dd4101e86867f6647f66edf1f650f80e41976b6a3108dff"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xec, 0x1, "6e5c632a8290e4b284ee08641d6b6630b37e3ab849b1b53c631b2e1b32cded95092cf10e5d462489f63b8571c8a57d30cbe43c26800e326f09c70878c8aca291c7d23f3ec325cdd9d96a2b8fea3105029dfe87198465d58e4b125977e3e6549850bb832b8c1c9a2c34bc602c58a818af31fae2870afa4aaa2ab1fc311d4234776d8bfac0c43222480bbe7bc5af4347e75189af1b1cce5428dea9cd06b538e9126db8ce9e283e82a399b4fee5f511bbb252ad3df27b8b47b550c0e88daf2b9452394ca99cee29a2c0aed4ccc30eb3c1ac87ae7c68438f443650ade60722031cf9c4705fa3ed052a78"}]}]}, {0x4}, {0xec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x74, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @bitwise={{0xc}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DYNSET_FLAGS={0x8}]}}}]}, @NFTA_SET_ELEM_USERDATA={0x2c, 0x6, 0x1, 0x0, "92b485a27db6e4207af47be7d66d04acb8edbcbc60f53d48b1b5cf24528c5881140a315d4da5dda8"}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xb00, 0x3, 0x0, 0x1, [{0x65c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @counter={{0xc}, @void}}, @NFTA_SET_ELEM_DATA={0x38, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x108, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0xb4, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xa4, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xc, 0x1, 'SECMARK\x00'}, @NFTA_TARGET_NAME={0xa, 0x1, 'TRACE\x00'}, @NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_INFO={0x26, 0x3, "442308099cdffc38f0929618f8098aa34d92d71e47bd15ca7c06e171aabc4b59cd2c"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_INFO={0x4c, 0x3, "10876ee8915ed872fef25230ae5bb80c54c1ac47404c220a986cf71507a0a3a581988202a2c00ce44665d50f26372b39c0ca6efcb6097d45277392c51268a3ff7a17e0891bb67e43"}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x58, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x1c, 0x1, "86736ba7f4b49ae62fdac0b1b4c74f4b99b842b638b6b294"}]}, @NFTA_SET_ELEM_KEY_END={0x300, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7d, 0x1, "03b87971637ab06066ca353aed6909c66cf3a8222c5ee77ca9d6b639b73d423292b7bf37e49fe0bee0a989005245051acc70b0a1d54e928bded72423c3bb305d700410074b95f895b96f3a90f3bfb5b39010782756ccc7adc78047a3e835dd4c080630668c0e0a10e1bbac24f143611131ceded0066aed19cd"}, @NFTA_DATA_VALUE={0x9b, 0x1, "a4b58b721fc2702904b76782315432ef42277130cfb41bb504a089cfd536feca3f90e20faa73168c9d27a844defea8dd54fc5cfbfe8de4889178431c49c3de4b9ae2941cd9bb699b6c0ae3b8666f7f36c29d3d28eb40f2bb9d9f8d6ce59fffcee4b4a8563da9f8350a4e3255384d6caf7e9c02f190e1d7744a822541702e8bd6cd23779cef12874ef99e6e84947bd0b81ff149323281a7"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xa, 0x1, "726ed5306dd8"}, @NFTA_DATA_VALUE={0xf7, 0x1, "9e67a5d50345885deec35bee28343e02be2aa38bc7f03f7a2b053f20f92326031a6c5ffab7c962a9cf46995ad7e7dc97d518aa3d9ff1c737e104014b4eb2e09deb687d44bbb3269cb3ab4cb4dfe263c68c0e7160340e70c932e312bd062b22e15fd4f0852a21b376c1f372029f31890929fa45bf09d0c391ffb7a34210e6a25b3679e06e70ecc55e352f023a54e3f135b57f16889c1e4283e201ec79f9eb47255af2676c611cc68ec3b66e5b24f768e1f9c73d66ce0bb00af4bfe954d6af6cdf25ad5df0c00c10a7a3fee1e6373a89263e9adf1ef3c289f55f1aeef3bfb8c16793aa0bb7153a876a2880cebeae8cc116432408"}, @NFTA_DATA_VALUE={0x7b, 0x1, "5e5389252874275afcdab17e3ae7d9e9e649f0d0dbb84bbed4a1933f0d0cf45197e5874c0fb1e8d974645bc80922d231eb3c23c0dae207aca36db240bde42e197fe86ea96973bb6efa3c6ef9cf4f373bf20c4de14747990c26f871037067b7ad2bd3a281a7902b46d3b15996125b78cf624a9fcc113c04"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x1b0, 0xb, 0x0, 0x1, [{0x15c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x148, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x144, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6a, 0x1, "143e71c3eabeb5fc40ac88e0241611004519a5929e1098a5bd711b76c3dd14cc70f7ceade5cbe921d8f2d828b3aa7f7f1ec1a63e9eb65898ebf5c3109ae9e25923c4b9246c1a10b09623d7443b849536d34b98f989134d651074221396df905582375ad8221c"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x71, 0x1, "e8e81ccb81f4154a8e85a2a777022b778b3dee060a6aee2424683ec0a97e80469bfc8bcf0e6cb90b9a5a47c30100aedccfffbc0fc84837a5c53be501b1fcfcb68cce567a081afcd7bfa94e56ea5e7949d58c877d0f8244c2f2145670fc06afab2b35022bddfa9c604923206f05"}, @NFTA_DATA_VALUE={0x5a, 0x1, "7e1fbd251892d7d6c240fd65e8c7fce2981c1adf99bacf749f2fe4885bf62f8fb678afb18bb267e743bf23fb87c7b533b75cc0552dcab6b2db6ad51ad009aba54a4253a88b5fcd51efa44c84b9355604dde7053d05c9"}]}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}]}, {0x1ec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_SET_ELEM_DATA={0x1d0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x66, 0x1, "c8f1f24a1dae73e9229792e280c1b5449db37fe9c3a8e9a259b819135e10f9b9a2453c0ac3801fed6090670b88a782c2ba4527836ca8be72ba32431ea4fac1f9deae466d8f5a4e82144ba406d304921bac73d0dc3d3914498a6c9e6d5f2ce3fdbbb2"}, @NFTA_DATA_VALUE={0x12, 0x1, "6cbf9b8629e5164851897a9ab66f"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xfd, 0x1, "d37cd52de27821114b496610bb4582c81721a905e377ba900a9ad8ede4e822266add9f5c47ee5ae711fc17b982fb34aa79ebeabed80ca2e9bbd4686a82e8ad3d3a90d8b6e230df2ae71d79317de815f49e511825962ff41724d5bf3f483140c4c9c025da42de4983a87fed99b3a2347cff8f5360a9901c90022f0c53dc1e2362817e855f3d522a7630f7fec43de31638873787a70704945794d4f335b6449cca05bb2450c3d2c39f56b8dcb224f3df4ca1e175daf5912b4ffac5e5bcb2c15aaec9dda8576787e3ba6b785ef5e2691a295ceece573e601bc7941c5a4f9fdcf949dd92c21264a8452d95f9b8698da4a7f9b12868965b30783c01"}, @NFTA_DATA_VALUE={0x41, 0x1, "ed0f7545da6dd71e2701faec4c17bcbdd8d7ce1835770599911622565413949c00e7d546c198bb4d7cd107ffc1b5e0caba4385bc38161663fa17f68572"}]}]}, {0x1b8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x17, 0x6, 0x1, 0x0, "374a3a288d5f37f1faa4856380e4bb70597875"}, @NFTA_SET_ELEM_KEY={0xac, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa8, 0x1, "6a6bf14edb9b8afaf82b74072ee2d693c4ae1f925873823d2f9afe3df7b32d5e422336ef1c5b40489370cfabef5b9b255b4b554a642655c8954273ce080b2a7193cfc30dd1aad8a9023c1707169543e6ebaa79022add4abba728c88392f6233da23346825c6aa91290dc044bf481b0d7ff165f65479b441348c59ca296abd57075a2fed0db35c32c0dc494594190741f02b33af646ce4e3ef9e6b0a741b8637e68991805"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xbc, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x3e}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", ""]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x34, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8}, @NFTA_TUNNEL_KEY={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x2c, 0x7, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}]}, {0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x16, 0x6, 0x1, 0x0, "9b88b56b56aa34587c5288af13cb57c6e66e"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x101}]}, {0xc8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xc4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x26, 0x1, "c3f69b672dbb7ab17f23442cd198da930e8b9685774d66d85c66f23544f1ed957ab8"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x21, 0x1, "5649c2eaf52e865006d0751b2f2e40f901c68bb38701b6bebf001b6999"}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x22c, 0x3, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, {0x17c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x178, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0xe0, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xd0, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0xe, 0x1, 'statistic\x00'}, @NFTA_MATCH_NAME={0xc, 0x1, 'pkttype\x00'}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0x8, 0x1, 'tos\x00'}, @NFTA_MATCH_INFO={0x75, 0x3, "5ca6843fbe40a0161995d460743175f93d99d2d86ffefc937e4344f25b3fa0f7f884d94ad67bc33fc2e3b1d25d22510578388608f199cae7fc0994fa4bb27856441341b1ec1408c813fca654d96c5d4e91938ee2a3f272cd71eac7c40c1939678a38da5771ebabb2c9354e42d557d4b7b0"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x4bb16a83202a55a}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x32}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x1d}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffffffff}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x80000001}]}]}]}, 0x23fc}, 0x1, 0x0, 0x0, 0x40000}, 0x1) (async) connect$inet(r2, &(0x7f0000002800)={0x2, 0x4e24, @multicast2}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000028c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000002840), &(0x7f0000002880)=r5}, 0x20) (async) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002900)='cpuset.effective_cpus\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000002ac0)=0x0, &(0x7f0000002b00)=0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002e80)={r5, 0xe0, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002bc0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000002c00)=[0x0, 0x0], &(0x7f0000002c40)=[0x0], 0x0, 0x1f, &(0x7f0000002c80)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000002cc0), &(0x7f0000002d00), 0x8, 0x13, 0x8, 0x8, &(0x7f0000002d40)}}, 0x10) (async) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002ec0)={0x0, 0x7, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000002f80)={0x0, 0x12, &(0x7f0000002940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xfffffff7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, &(0x7f0000002a00)='syzkaller\x00', 0x0, 0x7d, &(0x7f0000002a40)=""/125, 0x40f00, 0x40, '\x00', r9, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000002b40)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000002b80)={0x4, 0xd, 0x6, 0x1}, 0x10, r10, 0xffffffffffffffff, 0x2, &(0x7f0000002f00)=[r11], &(0x7f0000002f40)=[{0x0, 0x2, 0xe, 0xc}, {0x1, 0x5, 0xd, 0xc}], 0x10, 0x1ff}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000003080)=@generic={&(0x7f0000003040)='./file0\x00', r7}, 0x18) (async) r12 = accept4$inet6(r8, &(0x7f00000030c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, &(0x7f0000003100)=0x1c, 0x1000) ioctl$int_in(r12, 0x5421, &(0x7f0000003140)=0x7) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000003180)={'ip6_vti0\x00'}) ioctl$TUNSETVNETBE(r8, 0x400454de, &(0x7f00000031c0)=0x1) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000003280)={'ip6_vti0\x00', &(0x7f0000003200)={'syztnl1\x00', r9, 0x29, 0x9, 0xfd, 0x1, 0x44, @mcast2, @mcast1, 0x1, 0x40, 0x8, 0x9}}) bind$packet(r1, &(0x7f00000032c0)={0x11, 0xf6, r13, 0x1, 0x1, 0x6, @broadcast}, 0x14) (async) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003340), r8) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000003380)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_AUTHENTICATE(r8, &(0x7f0000003480)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003440)={&(0x7f00000033c0)={0x6c, r14, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_SSID={0x1d, 0x34, @random="2770f07a67c033d503b89935cc273c17e0e3df06e02053074f"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}], @NL80211_ATTR_MAC={0xa}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4000) 6.012035352s ago: executing program 0 (id=1901): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="3164d60b78f90a6b5e63b62a91b678e528827af13204f56d481d01e0"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r2, 0x27, 0xe, 0x0, &(0x7f0000000080)="f8ad48cc02cb29dcc8007f5b88a8", 0x0, 0x4, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x1e) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000100), &(0x7f0000000000)=0x8) sendto$inet6(r0, 0x0, 0x0, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) socket$kcm(0x10, 0x2, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="5400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r4, @ANYBLOB="3e0fe09976de849c"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="b801000000000088f414fe7a1426c9d4df8e81f99c7bb435835f38656147e1272500"/44, @ANYRES16=0x0, @ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80040c0) syz_emit_ethernet(0x7e, &(0x7f0000003080)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd6455d759004800fffc010000200000000000000000000000200100000000000000000100000000028903000000000000c910ff0100000000000000000000000000010708000000020008000000000000010000000000000021020401ab105200fe8000000000000000000000000000aa"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="13000000100000000800"/20, @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000080c8df300000000000000000000000000000000000008494ae5941b323bbd6cd44a86fdd"], 0x50) socket$inet(0x2, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="600000000314010000000000000000000900020073797a3100000000080041007278650014003300697036746e6c300000000000000000000900020073797a31000000000800410072786500140033006d6163766c616e3100000000000000002227e97bd0da32c841b9291f96e4bab329022fe08551d0ab4254d18cb1356f038459aa5ef90c8d1d"], 0x60}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) r8 = socket(0x1e, 0x4, 0x0) connect$tipc(r8, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x4e21, 0x8001, @empty, 0x10001}, 0x1c) sendmmsg$unix(r8, &(0x7f0000004400), 0x400000000000203, 0x0) connect$tipc(r8, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0xfffffffe, 0x4}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) 5.887852132s ago: executing program 2 (id=1774): socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001500)=""/4068, 0xfe4}, {&(0x7f0000002500)=""/4094, 0xffe}], 0x2}, 0x40000020) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000002000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000060000850000008200000095"], &(0x7f0000001fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000900)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="97", 0x1}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r9}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x8000, 0x8, 0xfffffcdc, 0x2, {{0x14, 0x4, 0x3, 0x2f, 0x50, 0x67, 0x0, 0x6, 0x2f, 0x0, @broadcast, @private=0xa010100, {[@end, @lsrr={0x83, 0x13, 0x5c, [@loopback, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x25, 0xffffffffffffffff, [{0x5, 0xd, "93e322653608a928b77e11"}, {0x1, 0x12, "89927192f2a1b8f82958d90fe49c7807"}]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x8000, 0x7, 0x6, 0x0, {{0x6, 0x4, 0x2, 0x38, 0x18, 0x64, 0x0, 0x1, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0xb}, {[@noop]}}}}}) 2.987730152s ago: executing program 3 (id=1905): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x160, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x124, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x104, 0x1, [@m_simple={0xcc, 0x1e, 0x0, 0x0, {{0xb}, {0xa0, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x68f6, 0x6, 0x2, 0x8, 0x9}}, @TCA_DEF_DATA={0x9, 0x3, '/-@@\x00'}, @TCA_DEF_DATA={0x3d, 0x3, '\x00\x94\xe4\xe2X\xce\xbar\x069\xf3\xff\x8d\x94\x1ao\xa1,\xa4\xc1\xcc\x1e\x9aS>\a\xd2R\x85\v\x80\xea\x1e\xc8W\xea\x99\xacos\x80\x1d\x8b\xd9`Ewb\xa5&iu@\xfd\x8c\xde\x00'}, @TCA_DEF_DATA={0x1e, 0x3, 'cpuacct.usage_percpu_user\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x4a66, 0x4, 0x3, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) (async) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) (async) setsockopt$sock_int(r5, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) (async) listen(r5, 0xf9f) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) (async) bind$inet6(r7, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7, 0x10008}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x3c}}, 0x0) (async) syz_emit_ethernet(0x68, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xd]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8}}}}}}}}, 0x0) (async) r10 = socket(0x10, 0x803, 0x8) pread64(r8, 0x0, 0x0, 0x3) (async) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r11], 0x5c}}, 0x40) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r12, 0x0, 0xe, 0x0, &(0x7f0000000440)="0c006a8bcc040000003800000037", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x20}, 0x50) 2.864166681s ago: executing program 3 (id=1906): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611930000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x18000000, 0x0, '\x00', 0x0, 0x24}, 0x94) 2.684686101s ago: executing program 3 (id=1907): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_sock_diag(0x10, 0x3, 0x4) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_USERDATA={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd0}}, 0x0) (async, rerun: 64) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (rerun: 64) r3 = accept4(r1, 0x0, 0x0, 0x800) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f00000002c0)={0x4, [0x2, 0x9d90], 0x6}, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) (async) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async, rerun: 64) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (rerun: 64) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.587428769s ago: executing program 3 (id=1908): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) unshare(0x20020600) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x1, 0x81, 0x9f, 0x6}, {0x6, 0xc, 0xd, 0x4f4}, {0x8, 0x3, 0x8, 0x7a}]}) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0xfffffffffffffe95) 2.400026556s ago: executing program 3 (id=1909): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000003b80)={0x10000001}) write(r1, 0x0, 0x0) close(0x4) r3 = socket$netlink(0x10, 0x3, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xf}, 0x1, 0x0, 0x0, 0x2048008}, 0x40880) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0x9, 0xfffffffffffffe00, 0xb}) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) syz_emit_ethernet(0x2cb, &(0x7f0000000780)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6000cd0402953afffe800000000000000000000000bbff020000000000000000000000000001860090780000000000000000000000001f0aa78c040005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af050200010000050000000000260004002218fe906d26efe39393fe08f73eabc37d7b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e464a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f80a895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000000b17dcea4600054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475670945e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f40e03b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0000000000000"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) 2.293341519s ago: executing program 1 (id=235): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="379500000000000000007200000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 8.10359ms ago: executing program 0 (id=1910): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000004851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000046608000000000001180000000000000400000000000100009500000000000000360a020000002000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000001000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) recvmsg$unix(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)=""/190, 0xbe}, {&(0x7f0000000140)=""/9, 0x9}], 0x2, &(0x7f0000000680)=[@rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x101, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x2}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="480000001000370400000000fbdbdf2500000000", @ANYRES32=r3, @ANYBLOB="83040500000000002800128008000100677265001c00028006000f000100000005003a000200000006000e00060000008989907d1d0e49bbba"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000001c0)="5cca4421a8c080331d93f46cd1bfe007b1a37f18cc9f6dca0c64ac5bde84302128c26511367c5c261bdd365ca64a0be81240746b7461b6ad43b6c497685a368f81023be8cbf167941d99dc6ef098a54efc05ad759dbaada5a127bc5d93e2367ccb78d59c84c88b34af7007c00b7d586a367762a7b9c1ed36a048d57b5bd1caea4780f8abb5a1bdf517a10a6a8ea0f567e486113d82", &(0x7f0000000040)=@udp6=r0, 0x1}, 0x20) 0s ago: executing program 3 (id=1911): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2b}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES64=r1], 0x48) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000002c0)={r4, 0x4, 0x1, 0xd, 0x1, 0xf5b}, &(0x7f0000000440)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x401, 0x0, 0x8, 0xffffffff, r4}, &(0x7f0000000140)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x1c, 0x33, 0x107, 0xfffffffc, 0x25dfdbfd, {0x2, 0x7c}, [@nested={0x6, 0x1, 0x0, 0x1, [@generic="dd5f"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc050) kernel console output (not intermixed with test programs): r after parsing attributes in process `syz.3.1472'. [ 316.684966][T11297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1474'. [ 317.010419][T11027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.115736][T11027] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.138521][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.145260][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.230221][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.237365][ T5943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.323871][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.331091][ T5943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.457508][T11006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.465201][T11316] delete_channel: no stack [ 317.536855][T11327] sit0: left promiscuous mode [ 317.789009][T11337] sock: sock_timestamping_bind_phc: sock not bind to device [ 318.198210][T11027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.384459][T11357] __nla_validate_parse: 6 callbacks suppressed [ 318.384479][T11357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1491'. [ 318.446316][T11027] veth0_vlan: entered promiscuous mode [ 318.720798][T11361] bridge0: port 3(erspan0) entered disabled state [ 318.897699][T11361] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.905185][T11361] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.982700][T11381] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 319.461409][T11361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.518909][T11361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.988169][T11027] veth1_vlan: entered promiscuous mode [ 320.012951][T11373] netlink: 'syz.3.1495': attribute type 7 has an invalid length. [ 320.020957][T11373] netlink: 'syz.3.1495': attribute type 8 has an invalid length. [ 320.029823][T11371] netlink: 'syz.3.1495': attribute type 7 has an invalid length. [ 320.037708][T11371] netlink: 'syz.3.1495': attribute type 8 has an invalid length. [ 320.047884][ T1168] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.092762][ T1168] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.116063][T11006] veth0_vlan: entered promiscuous mode [ 320.135469][ T1168] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.191443][ T1168] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.245155][T11006] veth1_vlan: entered promiscuous mode [ 320.293843][T11027] veth0_macvtap: entered promiscuous mode [ 320.301828][T11388] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 320.371164][T11391] netlink: 'syz.3.1499': attribute type 2 has an invalid length. [ 320.380640][T11391] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1499'. [ 320.415558][T11027] veth1_macvtap: entered promiscuous mode [ 320.497094][T11392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1498'. [ 320.534651][T11006] veth0_macvtap: entered promiscuous mode [ 320.568055][T11027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.626852][T11027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.647277][T11006] veth1_macvtap: entered promiscuous mode [ 320.664340][ T7057] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.669156][T11396] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1500'. [ 320.683760][ T7057] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.798248][ T7057] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.844228][ T7057] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.900639][T11006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.923558][T11006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.092229][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.116619][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.132320][T11399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1502'. [ 321.161568][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.171445][T11401] tun0: tun_chr_ioctl cmd 2147767520 [ 321.178500][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.196707][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.210033][ T3462] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.354222][ T3462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.391075][ T3462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.449327][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.480174][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.612559][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.626601][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.730554][T11408] netlink: 'syz.0.1504': attribute type 2 has an invalid length. [ 322.033717][ T3462] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.250988][ T3462] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.419386][ T3462] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.521037][ T3462] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.575548][T11431] netlink: 'syz.2.1509': attribute type 6 has an invalid length. [ 322.580032][ T30] audit: type=1800 audit(1750850427.443:3): pid=11432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1509" name="memory.events" dev="tmpfs" ino=2067 res=0 errno=0 [ 322.740955][T11430] syzkaller0: entered promiscuous mode [ 322.746578][T11430] syzkaller0: entered allmulticast mode [ 322.822542][T11430] 8021q: VLANs not supported on ip6_vti0 [ 323.073096][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 323.082981][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 323.138356][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 323.171494][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 323.198417][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 323.321728][T11442] Bluetooth: MGMT ver 1.23 [ 323.701240][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 323.715434][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 323.728480][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 323.743012][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 323.758627][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 324.996565][T11457] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1514'. [ 325.019051][T11457] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1514'. [ 325.044071][ T3462] bridge_slave_1: left allmulticast mode [ 325.059780][ T3462] bridge_slave_1: left promiscuous mode [ 325.065582][ T3462] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.087659][ T3462] bridge_slave_0: left allmulticast mode [ 325.093723][ T3462] bridge_slave_0: left promiscuous mode [ 325.099633][ T3462] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.310725][ T51] Bluetooth: hci1: command tx timeout [ 325.314306][T11468] netlink: 'syz.3.1518': attribute type 4 has an invalid length. [ 325.326027][T11468] netlink: 'syz.3.1518': attribute type 1 has an invalid length. [ 325.544747][ T3462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.556066][ T3462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.566293][ T3462] bond0 (unregistering): Released all slaves [ 325.872644][ T51] Bluetooth: hci3: command tx timeout [ 325.953067][T11475] netlink: 'syz.3.1520': attribute type 10 has an invalid length. [ 325.980281][T11475] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1520'. [ 326.286530][T11492] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1524'. [ 326.393756][ T3462] hsr_slave_0: left promiscuous mode [ 326.400573][ T3462] hsr_slave_1: left promiscuous mode [ 326.406767][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.415432][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.423720][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.432161][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.473047][ T3462] veth1_macvtap: left promiscuous mode [ 326.484003][ T3462] veth0_macvtap: left promiscuous mode [ 326.493252][ T3462] veth1_vlan: left promiscuous mode [ 326.503291][ T3462] veth0_vlan: left promiscuous mode [ 327.036097][T11500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1526'. [ 327.228875][ T5843] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 327.409020][ T5843] Bluetooth: hci1: command tx timeout [ 327.541620][ T3462] team0 (unregistering): Port device team_slave_1 removed [ 327.581480][ T3462] team0 (unregistering): Port device team_slave_0 removed [ 327.607536][T11517] netlink: 'syz.0.1528': attribute type 1 has an invalid length. [ 327.960732][ T5843] Bluetooth: hci3: command tx timeout [ 328.071192][T11519] lo speed is unknown, defaulting to 1000 [ 328.077685][T11519] lo speed is unknown, defaulting to 1000 [ 328.133308][T11519] lo speed is unknown, defaulting to 1000 [ 328.196394][T11523] openvswitch: netlink: Flow key attr not present in new flow. [ 328.218044][T11519] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 328.265555][T11438] chnl_net:caif_netlink_parms(): no params data found [ 328.306580][T11519] lo speed is unknown, defaulting to 1000 [ 328.339802][T11519] lo speed is unknown, defaulting to 1000 [ 328.375281][T11519] lo speed is unknown, defaulting to 1000 [ 328.434646][T11451] chnl_net:caif_netlink_parms(): no params data found [ 328.462419][T11519] lo speed is unknown, defaulting to 1000 [ 328.492868][T11519] lo speed is unknown, defaulting to 1000 [ 328.588471][T11519] lo speed is unknown, defaulting to 1000 [ 328.686640][T11539] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1533'. [ 328.730799][T11438] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.737984][T11438] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.769842][T11438] bridge_slave_0: entered allmulticast mode [ 328.781359][T11438] bridge_slave_0: entered promiscuous mode [ 328.838025][T11438] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.889634][T11438] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.896916][T11438] bridge_slave_1: entered allmulticast mode [ 328.925643][T11548] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1538'. [ 328.926342][T11438] bridge_slave_1: entered promiscuous mode [ 329.077327][T11438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.112879][T11560] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1539'. [ 329.179174][T11438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.325631][T11572] IPv6: NLM_F_CREATE should be specified when creating new route [ 329.326901][T11573] IPv6: NLM_F_CREATE should be specified when creating new route [ 329.361089][ T3462] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.468864][ T5843] Bluetooth: hci1: command tx timeout [ 329.566932][T11438] team0: Port device team_slave_0 added [ 329.595036][T11451] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.609934][T11451] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.639174][T11451] bridge_slave_0: entered allmulticast mode [ 329.647059][T11451] bridge_slave_0: entered promiscuous mode [ 329.677969][T11451] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.693470][T11451] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.711248][T11451] bridge_slave_1: entered allmulticast mode [ 329.729450][T11451] bridge_slave_1: entered promiscuous mode [ 329.765832][ T3462] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.795646][T11585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1545'. [ 329.838851][T11438] team0: Port device team_slave_1 added [ 329.928375][ T3462] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.982106][T11451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.029102][ T5843] Bluetooth: hci3: command tx timeout [ 330.055915][ T3462] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.082768][T11451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.107426][T11438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.136460][T11438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.188988][T11438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.280449][T11438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.310773][T11438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.371652][T11438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.431119][T11451] team0: Port device team_slave_0 added [ 330.511084][T11451] team0: Port device team_slave_1 added [ 330.716429][T11438] hsr_slave_0: entered promiscuous mode [ 330.730060][T11438] hsr_slave_1: entered promiscuous mode [ 330.752769][T11438] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.768331][T11438] Cannot create hsr debugfs directory [ 330.873131][T11451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.892129][T11451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.896925][T11613] netlink: 'syz.2.1554': attribute type 83 has an invalid length. [ 330.932189][T11451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.011122][T11451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.019644][T11451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.046094][T11451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.155508][T11618] netlink: 'syz.3.1555': attribute type 6 has an invalid length. [ 331.224453][ T3462] bridge_slave_1: left allmulticast mode [ 331.238294][ T3462] bridge_slave_1: left promiscuous mode [ 331.254652][ T3462] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.278553][ T3462] bridge_slave_0: left allmulticast mode [ 331.288730][ T3462] bridge_slave_0: left promiscuous mode [ 331.315282][ T3462] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.437398][T11628] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1558'. [ 331.561533][ T5843] Bluetooth: hci1: command tx timeout [ 331.631763][T11634] FAULT_INJECTION: forcing a failure. [ 331.631763][T11634] name failslab, interval 1, probability 0, space 0, times 0 [ 331.659488][T11634] CPU: 0 UID: 0 PID: 11634 Comm: syz.0.1559 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 331.659518][T11634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 331.659529][T11634] Call Trace: [ 331.659537][T11634] [ 331.659545][T11634] dump_stack_lvl+0x189/0x250 [ 331.659580][T11634] ? __pfx____ratelimit+0x10/0x10 [ 331.659599][T11634] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.659628][T11634] ? __pfx__printk+0x10/0x10 [ 331.659654][T11634] ? __pfx___might_resched+0x10/0x10 [ 331.659687][T11634] should_fail_ex+0x414/0x560 [ 331.659716][T11634] should_failslab+0xa8/0x100 [ 331.659738][T11634] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 331.659758][T11634] ? __get_vm_area_node+0x13f/0x300 [ 331.659781][T11634] __get_vm_area_node+0x13f/0x300 [ 331.659805][T11634] __vmalloc_node_range_noprof+0x301/0x12f0 [ 331.659825][T11634] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 331.659854][T11634] ? is_bpf_text_address+0x26/0x2b0 [ 331.659914][T11634] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 331.659932][T11634] ? __might_fault+0xb0/0x130 [ 331.659966][T11634] ? __pfx_aa_get_newest_label+0x10/0x10 [ 331.659992][T11634] ? _parse_integer_limit+0x1ae/0x1f0 [ 331.660024][T11634] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 331.660050][T11634] __vmalloc_noprof+0xb1/0xf0 [ 331.660071][T11634] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 331.660102][T11634] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 331.660136][T11634] bpf_prog_alloc+0x3c/0x1a0 [ 331.660167][T11634] bpf_prog_load+0x735/0x1930 [ 331.660209][T11634] ? __pfx_bpf_prog_load+0x10/0x10 [ 331.660261][T11634] ? bpf_lsm_bpf+0x9/0x20 [ 331.660276][T11634] ? security_bpf+0x7e/0x300 [ 331.660302][T11634] __sys_bpf+0x5f1/0x860 [ 331.660331][T11634] ? __pfx___sys_bpf+0x10/0x10 [ 331.660371][T11634] ? ksys_write+0x22a/0x250 [ 331.660392][T11634] ? __pfx_ksys_write+0x10/0x10 [ 331.660407][T11634] ? rcu_is_watching+0x15/0xb0 [ 331.660446][T11634] __x64_sys_bpf+0x7c/0x90 [ 331.660470][T11634] do_syscall_64+0xfa/0x3b0 [ 331.660490][T11634] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.660509][T11634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.660528][T11634] ? clear_bhb_loop+0x60/0xb0 [ 331.660552][T11634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.660571][T11634] RIP: 0033:0x7f170878e929 [ 331.660589][T11634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.660607][T11634] RSP: 002b:00007f17095a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 331.660628][T11634] RAX: ffffffffffffffda RBX: 00007f17089b5fa0 RCX: 00007f170878e929 [ 331.660642][T11634] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 331.660655][T11634] RBP: 00007f17095a8090 R08: 0000000000000000 R09: 0000000000000000 [ 331.660668][T11634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.660679][T11634] R13: 0000000000000001 R14: 00007f17089b5fa0 R15: 00007fffd2f78868 [ 331.660714][T11634] [ 331.660977][T11634] syz.0.1559: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 331.979228][T11634] CPU: 0 UID: 0 PID: 11634 Comm: syz.0.1559 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 331.979255][T11634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 331.979266][T11634] Call Trace: [ 331.979275][T11634] [ 331.979284][T11634] dump_stack_lvl+0x189/0x250 [ 331.979322][T11634] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.979351][T11634] ? __pfx__printk+0x10/0x10 [ 331.979370][T11634] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 331.979392][T11634] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 331.979413][T11634] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 331.979436][T11634] warn_alloc+0x214/0x310 [ 331.979464][T11634] ? __pfx_warn_alloc+0x10/0x10 [ 331.979487][T11634] ? __get_vm_area_node+0x13f/0x300 [ 331.979510][T11634] ? __get_vm_area_node+0x2b5/0x300 [ 331.979535][T11634] __vmalloc_node_range_noprof+0x326/0x12f0 [ 331.979558][T11634] ? is_bpf_text_address+0x26/0x2b0 [ 331.979612][T11634] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 331.979631][T11634] ? __might_fault+0xb0/0x130 [ 331.979648][T11634] ? __pfx_aa_get_newest_label+0x10/0x10 [ 331.979672][T11634] ? _parse_integer_limit+0x1ae/0x1f0 [ 331.979703][T11634] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 331.979727][T11634] __vmalloc_noprof+0xb1/0xf0 [ 331.979747][T11634] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 331.979776][T11634] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 331.979808][T11634] bpf_prog_alloc+0x3c/0x1a0 [ 331.979836][T11634] bpf_prog_load+0x735/0x1930 [ 331.979885][T11634] ? __pfx_bpf_prog_load+0x10/0x10 [ 331.979934][T11634] ? bpf_lsm_bpf+0x9/0x20 [ 331.979948][T11634] ? security_bpf+0x7e/0x300 [ 331.979972][T11634] __sys_bpf+0x5f1/0x860 [ 331.980017][T11634] ? __pfx___sys_bpf+0x10/0x10 [ 331.980056][T11634] ? ksys_write+0x22a/0x250 [ 331.980076][T11634] ? __pfx_ksys_write+0x10/0x10 [ 331.980091][T11634] ? rcu_is_watching+0x15/0xb0 [ 331.980131][T11634] __x64_sys_bpf+0x7c/0x90 [ 331.980154][T11634] do_syscall_64+0xfa/0x3b0 [ 331.980174][T11634] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.980192][T11634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.980212][T11634] ? clear_bhb_loop+0x60/0xb0 [ 331.980235][T11634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.980254][T11634] RIP: 0033:0x7f170878e929 [ 331.980273][T11634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.980290][T11634] RSP: 002b:00007f17095a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 331.980310][T11634] RAX: ffffffffffffffda RBX: 00007f17089b5fa0 RCX: 00007f170878e929 [ 331.980324][T11634] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 331.980336][T11634] RBP: 00007f17095a8090 R08: 0000000000000000 R09: 0000000000000000 [ 331.980348][T11634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.980360][T11634] R13: 0000000000000001 R14: 00007f17089b5fa0 R15: 00007fffd2f78868 [ 331.980391][T11634] [ 331.980413][T11634] Mem-Info: [ 332.112148][ T5843] Bluetooth: hci3: command tx timeout [ 332.118419][T11634] active_anon:4942 inactive_anon:0 isolated_anon:0 [ 332.118419][T11634] active_file:1718 inactive_file:39996 isolated_file:0 [ 332.118419][T11634] unevictable:768 dirty:177 writeback:0 [ 332.118419][T11634] slab_reclaimable:11298 slab_unreclaimable:114054 [ 332.118419][T11634] mapped:33629 shmem:1372 pagetables:1058 [ 332.118419][T11634] sec_pagetables:0 bounce:0 [ 332.118419][T11634] kernel_misc_reclaimable:0 [ 332.118419][T11634] free:1311598 free_pcp:18740 free_cma:0 [ 332.326155][T11634] Node 0 active_anon:19768kB inactive_anon:0kB active_file:6872kB inactive_file:159780kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134516kB dirty:704kB writeback:0kB shmem:3952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11872kB pagetables:4004kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 332.360096][T11634] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 332.391914][T11634] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 332.421228][T11634] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 332.427247][T11634] Node 0 DMA32 free:1328772kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19720kB inactive_anon:0kB active_file:6872kB inactive_file:157972kB unevictable:1536kB writepending:700kB present:3129332kB managed:2561008kB mlocked:0kB bounce:0kB free_pcp:56908kB local_pcp:33008kB free_cma:0kB [ 332.482831][T11634] lowmem_reserve[]: 0 0 1 1 1 [ 332.487636][T11634] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1808kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 332.521886][T11634] lowmem_reserve[]: 0 0 0 0 0 [ 332.526673][T11634] Node 1 Normal free:3902868kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18048kB local_pcp:7424kB free_cma:0kB [ 332.561128][T11634] lowmem_reserve[]: 0 0 0 0 0 [ 332.577125][T11634] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 332.596803][T11634] Node 0 DMA32: 616*4kB (UM) 326*8kB (UME) 130*16kB (UME) 138*32kB (UME) 43*64kB (UM) 59*128kB (UME) 67*256kB (UME) 65*512kB (UM) 31*1024kB (UME) 4*2048kB (UM) 297*4096kB (UM) = 1328752kB [ 332.621449][T11634] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 332.644501][T11634] Node 1 Normal: 219*4kB (UME) 51*8kB (UME) 45*16kB (UME) 134*32kB (UME) 44*64kB (UME) 6*128kB (UME) 5*256kB (UME) 3*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3902868kB [ 332.672958][T11634] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 332.694672][T11634] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 332.710679][T11634] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 332.731940][T11634] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 332.747425][T11634] 43083 total pagecache pages [ 332.761244][T11634] 0 pages in swap cache [ 332.765553][T11634] Free swap = 124996kB [ 332.775789][T11634] Total swap = 124996kB [ 332.786039][T11634] 2097051 pages RAM [ 332.795858][T11634] 0 pages HighMem/MovableOnly [ 332.806539][T11634] 424693 pages reserved [ 332.813593][T11634] 0 pages cma reserved [ 332.818234][ T3462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.834166][ T3462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.856666][ T3462] bond0 (unregistering): Released all slaves [ 333.051288][T11451] hsr_slave_0: entered promiscuous mode [ 333.058094][T11451] hsr_slave_1: entered promiscuous mode [ 333.066938][T11451] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.076035][T11451] Cannot create hsr debugfs directory [ 333.147873][T11643] syzkaller0: entered promiscuous mode [ 333.153540][T11643] syzkaller0: entered allmulticast mode [ 334.710411][ T3462] hsr_slave_0: left promiscuous mode [ 334.716665][ T3462] hsr_slave_1: left promiscuous mode [ 334.723197][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.730807][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.738931][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.746668][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.774333][ T3462] veth1_macvtap: left promiscuous mode [ 334.780145][ T3462] veth0_macvtap: left promiscuous mode [ 334.785782][ T3462] veth1_vlan: left promiscuous mode [ 334.791147][ T3462] veth0_vlan: left promiscuous mode [ 335.227387][ T3462] team0 (unregistering): Port device team_slave_1 removed [ 335.273065][ T3462] team0 (unregistering): Port device team_slave_0 removed [ 335.903907][T11665] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 335.916227][T11665] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1566'. [ 336.276353][T11665] lo speed is unknown, defaulting to 1000 [ 336.319535][T11680] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1570'. [ 336.799591][T11680] lo speed is unknown, defaulting to 1000 [ 337.031906][T11438] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 337.062287][T11438] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 337.083884][T11438] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 337.199809][T11438] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 337.217032][T11695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1573'. [ 337.537977][T11708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1575'. [ 337.627322][T11708] macsec1: entered allmulticast mode [ 337.661189][T11708] $Hÿ: entered allmulticast mode [ 337.684447][T11708] bond_slave_0: entered allmulticast mode [ 337.693291][T11708] bond_slave_1: entered allmulticast mode [ 337.757579][T11708] $Hÿ: left allmulticast mode [ 337.767550][T11708] bond_slave_0: left allmulticast mode [ 337.795321][T11708] bond_slave_1: left allmulticast mode [ 338.162606][T11714] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1578'. [ 338.196543][T11714] xt_cgroup: path and classid specified [ 338.218092][T11438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.231872][T11451] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 338.252867][T11718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1580'. [ 338.267144][T11438] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.275401][T11718] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1580'. [ 338.290149][T11451] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 338.312491][T11451] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 338.334243][T11718] batadv2: entered promiscuous mode [ 338.340069][T11718] batadv2: entered allmulticast mode [ 338.348208][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.355518][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.393719][T11451] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 338.492501][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.495865][T11723] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1581'. [ 338.499800][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.673369][T11733] netlink: 'syz.0.1583': attribute type 1 has an invalid length. [ 338.820702][T11736] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1584'. [ 338.947785][T11744] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1584'. [ 339.009380][T11451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.068302][T11451] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.121350][ T7055] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.128598][ T7055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.181080][ T7055] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.188268][ T7055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.321503][T11438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.522863][T11438] veth0_vlan: entered promiscuous mode [ 339.593629][T11438] veth1_vlan: entered promiscuous mode [ 339.666724][T11767] lo speed is unknown, defaulting to 1000 [ 339.774662][T11772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1590'. [ 339.836027][T11451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.886915][T11438] veth0_macvtap: entered promiscuous mode [ 339.895981][T11776] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1591'. [ 340.052020][T11781] netlink: 'syz.0.1593': attribute type 4 has an invalid length. [ 340.063609][T11781] Bluetooth: MGMT ver 1.23 [ 340.102216][T11438] veth1_macvtap: entered promiscuous mode [ 340.147326][T11781] geneve2: entered promiscuous mode [ 340.227576][T11784] netlink: 'syz.3.1594': attribute type 1 has an invalid length. [ 340.273533][T11438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.347107][T11438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.407711][ T1168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.435667][ T1168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.457749][ T1168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.475724][ T1168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.584240][T11796] lo speed is unknown, defaulting to 1000 [ 340.723132][T11778] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 340.752068][T11800] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 340.764146][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.786398][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.025222][ T3462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.036250][T11807] netlink: 'syz.3.1599': attribute type 6 has an invalid length. [ 341.056059][ T3462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.135298][T11803] lo speed is unknown, defaulting to 1000 [ 341.267253][T11451] veth0_vlan: entered promiscuous mode [ 341.336775][T11815] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 341.602173][T11451] veth1_vlan: entered promiscuous mode [ 341.650327][T11820] x_tables: duplicate underflow at hook 4 [ 341.737543][T11451] veth0_macvtap: entered promiscuous mode [ 341.775887][T11451] veth1_macvtap: entered promiscuous mode [ 341.840641][T11451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.857324][T11451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.920088][ T1168] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.949296][ T1168] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.002799][ T3462] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.032058][ T1168] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.042297][ T1168] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.113348][ T3462] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.155138][ T7055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.169483][ T7055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.190201][ T3462] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.228385][ T7055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.237834][ T7055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.263713][ T3462] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.392586][ T3462] bridge_slave_1: left allmulticast mode [ 342.398289][ T3462] bridge_slave_1: left promiscuous mode [ 342.405412][ T3462] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.414972][ T3462] bridge_slave_0: left allmulticast mode [ 342.421522][ T3462] bridge_slave_0: left promiscuous mode [ 342.427271][ T3462] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.439470][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 342.762159][ T3462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.773341][ T3462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.785014][ T3462] bond0 (unregistering): Released all slaves [ 343.134758][ T3462] hsr_slave_0: left promiscuous mode [ 343.148339][ T3462] hsr_slave_1: left promiscuous mode [ 343.154822][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.165502][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.173652][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.181270][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.230479][ T3462] veth1_macvtap: left promiscuous mode [ 343.236083][ T3462] veth0_macvtap: left promiscuous mode [ 343.248913][ T3462] veth1_vlan: left promiscuous mode [ 343.254363][ T3462] veth0_vlan: left promiscuous mode [ 343.780966][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 343.791040][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 343.799142][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 343.820895][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 343.837569][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 344.040562][ T3462] team0 (unregistering): Port device team_slave_1 removed [ 344.051252][T11841] netlink: 'syz.0.1608': attribute type 21 has an invalid length. [ 344.073120][T11841] __nla_validate_parse: 5 callbacks suppressed [ 344.073138][T11841] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1608'. [ 344.116367][T11842] netlink: 'syz.3.1610': attribute type 6 has an invalid length. [ 344.136385][ T3462] team0 (unregistering): Port device team_slave_0 removed [ 344.181086][T11844] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1609'. [ 344.564036][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 344.573310][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 344.585468][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 344.598404][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 344.608486][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 344.787063][T11841] netlink: 'syz.0.1608': attribute type 5 has an invalid length. [ 344.808882][T11841] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1608'. [ 344.931768][T11836] lo speed is unknown, defaulting to 1000 [ 344.985226][T11855] lo speed is unknown, defaulting to 1000 [ 345.072272][T11863] pimreg: entered allmulticast mode [ 345.161447][T11863] pimreg: left allmulticast mode [ 345.213193][T11868] x_tables: duplicate underflow at hook 3 [ 345.873159][ T5843] Bluetooth: hci1: command tx timeout [ 346.037007][T11855] chnl_net:caif_netlink_parms(): no params data found [ 346.086481][T11900] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1622'. [ 346.136388][ T3462] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.162763][T11836] chnl_net:caif_netlink_parms(): no params data found [ 346.290795][ T3462] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.511821][ T3462] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.650574][ T3462] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.675055][ T5843] Bluetooth: hci3: command tx timeout [ 346.732759][T11922] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 346.750776][T11922] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 346.801532][T11923] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.811313][T11923] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.879328][T11925] $Hÿ: left promiscuous mode [ 346.884934][T11933] netlink: 'syz.2.1628': attribute type 4 has an invalid length. [ 346.898308][T11934] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.1630'. [ 346.930186][T11925] bond_slave_0: left promiscuous mode [ 346.935756][T11925] bond_slave_1: left promiscuous mode [ 346.952397][T11925] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.959560][T11925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.970784][T11925] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.977916][T11925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.990791][T11925] veth0_to_bond: left allmulticast mode [ 347.010642][T11925] ªªªªªª: left promiscuous mode [ 347.023597][T11925] batadv1: left promiscuous mode [ 347.028611][T11925] batadv1: left allmulticast mode [ 347.037344][T11925] bridge1: left promiscuous mode [ 347.045020][T11925] bridge1: left allmulticast mode [ 347.052697][T11925] vlan2: left promiscuous mode [ 347.057478][T11925] bridge0: left promiscuous mode [ 347.064510][T11925] vlan2: left allmulticast mode [ 347.072153][T11925] bridge0: left allmulticast mode [ 347.078126][T11925] macsec0: left allmulticast mode [ 347.086282][T11925] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 347.097446][T11925] batadv2: left promiscuous mode [ 347.102850][T11925] batadv2: left allmulticast mode [ 347.108002][T11925] geneve2: left promiscuous mode [ 347.353414][T11836] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.362520][T11836] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.371166][T11836] bridge_slave_0: entered allmulticast mode [ 347.380256][T11836] bridge_slave_0: entered promiscuous mode [ 347.393187][T11855] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.401179][T11855] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.408407][T11855] bridge_slave_0: entered allmulticast mode [ 347.417556][T11855] bridge_slave_0: entered promiscuous mode [ 347.425829][T11855] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.433201][T11855] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.442763][T11855] bridge_slave_1: entered allmulticast mode [ 347.451531][T11855] bridge_slave_1: entered promiscuous mode [ 347.474591][T11942] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1631'. [ 347.499493][T11836] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.507228][T11836] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.514889][T11836] bridge_slave_1: entered allmulticast mode [ 347.523006][T11836] bridge_slave_1: entered promiscuous mode [ 347.643872][T11949] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1634'. [ 347.657433][T11855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.726533][T11855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.784084][T11836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.800465][T11836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.955831][ T5843] Bluetooth: hci1: command tx timeout [ 348.048404][T11956] batadv1: entered promiscuous mode [ 348.087157][T11836] team0: Port device team_slave_0 added [ 348.114235][T11836] team0: Port device team_slave_1 added [ 348.127427][ T3462] bridge_slave_1: left allmulticast mode [ 348.137720][ T3462] bridge_slave_1: left promiscuous mode [ 348.146011][ T3462] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.162940][ T3462] bridge_slave_0: left allmulticast mode [ 348.173034][ T3462] bridge_slave_0: left promiscuous mode [ 348.178923][ T3462] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.749632][ T5843] Bluetooth: hci3: command tx timeout [ 349.281316][ T3462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.311072][ T3462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.329658][ T3462] bond0 (unregistering): Released all slaves [ 349.363330][T11855] team0: Port device team_slave_0 added [ 349.375366][T11960] tipc: Failed to obtain node identity [ 349.411331][T11960] tipc: Enabling of bearer rejected, failed to enable media [ 349.526326][T11855] team0: Port device team_slave_1 added [ 349.667772][T11836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.672503][T11980] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1645'. [ 349.675880][T11836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.701725][T11978] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1644'. [ 349.719420][T11836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.738301][T11836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.745923][T11836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.772497][T11836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.984640][T11855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.001325][T11855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.028838][ T5843] Bluetooth: hci1: command tx timeout [ 350.044665][T11855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.106692][ T3462] hsr_slave_0: left promiscuous mode [ 350.126771][ T3462] hsr_slave_1: left promiscuous mode [ 350.145503][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.156093][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.174736][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.192109][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.238172][ T3462] veth1_macvtap: left promiscuous mode [ 350.252312][ T3462] veth0_macvtap: left promiscuous mode [ 350.258146][ T3462] veth1_vlan: left promiscuous mode [ 350.264596][ T3462] veth0_vlan: left promiscuous mode [ 350.744867][ T3462] team0 (unregistering): Port device team_slave_1 removed [ 350.793848][ T3462] team0 (unregistering): Port device team_slave_0 removed [ 350.832802][ T5843] Bluetooth: hci3: command tx timeout [ 351.044863][T12014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1652'. [ 351.294905][T11855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.302644][T11855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.329082][T11855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.476310][T11836] hsr_slave_0: entered promiscuous mode [ 351.483980][T11836] hsr_slave_1: entered promiscuous mode [ 351.494125][T11836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.505481][T11836] Cannot create hsr debugfs directory [ 351.525654][T12009] lo speed is unknown, defaulting to 1000 [ 351.729156][T11855] hsr_slave_0: entered promiscuous mode [ 351.743424][T11855] hsr_slave_1: entered promiscuous mode [ 351.763258][T11855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.773502][T11855] Cannot create hsr debugfs directory [ 351.843803][T12024] netlink: 'syz.0.1654': attribute type 10 has an invalid length. [ 351.986217][T12018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1653'. [ 352.108848][ T5843] Bluetooth: hci1: command tx timeout [ 352.324551][ T30] audit: type=1800 audit(1750850457.193:4): pid=12021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1653" name="cgroup.controllers" dev="tmpfs" ino=2272 res=0 errno=0 [ 352.618729][ T3462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.626689][ T3462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.721365][T12034] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1657'. [ 352.846724][T12040] netlink: 'syz.2.1660': attribute type 1 has an invalid length. [ 352.875835][T12042] netlink: 'syz.2.1660': attribute type 1 has an invalid length. [ 352.910241][ T5843] Bluetooth: hci3: command tx timeout [ 353.028179][T11836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 353.061295][T11836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 353.117155][T11836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 353.144912][T11836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 353.782142][T12085] netlink: 'syz.2.1669': attribute type 3 has an invalid length. [ 353.805967][T11836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.816024][T12085] netlink: 'syz.2.1669': attribute type 1 has an invalid length. [ 353.834183][T11855] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 353.855719][T12085] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1669'. [ 353.862527][T11855] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 353.894305][T11855] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 353.925531][T11836] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.949148][T11855] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 353.991874][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.999088][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.041927][T12092] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1671'. [ 354.089328][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.096537][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.301033][T11836] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 354.348781][T11836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 354.374920][T12106] netlink: 'syz.2.1673': attribute type 10 has an invalid length. [ 354.457575][T12106] batman_adv: batadv0: Adding interface: team0 [ 354.509477][T12106] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.626030][T12106] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 354.972152][T11855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.012431][T11855] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.065398][T12119] lo speed is unknown, defaulting to 1000 [ 355.072686][ T7055] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.079931][ T7055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.128528][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.135757][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.317270][T12128] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1678'. [ 355.365999][T11836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.530552][T11836] veth0_vlan: entered promiscuous mode [ 355.557830][T11836] veth1_vlan: entered promiscuous mode [ 355.677492][T11836] veth0_macvtap: entered promiscuous mode [ 355.695811][T11836] veth1_macvtap: entered promiscuous mode [ 355.745084][T11836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.793782][T11836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.880505][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.903035][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.983163][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.020357][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.064195][T11855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.072695][T12147] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1683'. [ 356.082480][T12150] netlink: 'syz.3.1685': attribute type 1 has an invalid length. [ 356.323272][ T3462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.379246][ T3462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.631582][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.667722][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.706621][T12170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1689'. [ 356.785103][T12170] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1689'. [ 356.962146][T12179] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 357.065615][T11855] veth0_vlan: entered promiscuous mode [ 357.136067][T12185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.173047][T12184] netlink: 'syz.3.1693': attribute type 6 has an invalid length. [ 357.236465][T12188] xt_TPROXY: Can be used only with -p tcp or -p udp [ 357.292517][ T5943] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.352621][T11855] veth1_vlan: entered promiscuous mode [ 357.466771][ T5943] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.547641][T11855] veth0_macvtap: entered promiscuous mode [ 357.557081][T11855] veth1_macvtap: entered promiscuous mode [ 357.578072][T11855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.592662][T11855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.610213][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.619948][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.641222][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.662860][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.718267][ T5988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.726740][ T5988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.765224][ T5943] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.795847][ T5988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.805064][ T5988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.918291][ T5943] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.065089][ T5943] bridge_slave_1: left allmulticast mode [ 358.075479][ T5943] bridge_slave_1: left promiscuous mode [ 358.082710][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.093133][ T5943] bridge_slave_0: left allmulticast mode [ 358.099200][ T5943] bridge_slave_0: left promiscuous mode [ 358.104973][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.458345][T12198] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1698'. [ 358.707847][ T5943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.725423][ T5943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.738626][ T5943] bond0 (unregistering): Released all slaves [ 358.777201][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 358.788456][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 358.804293][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 358.814590][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 358.831598][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 359.076363][T12204] lo speed is unknown, defaulting to 1000 [ 359.177198][ T5943] hsr_slave_0: left promiscuous mode [ 359.184341][ T5943] hsr_slave_1: left promiscuous mode [ 359.192517][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.219235][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.270443][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.288323][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.418968][ T5943] veth1_macvtap: left promiscuous mode [ 359.424653][ T5943] veth0_macvtap: left promiscuous mode [ 359.451889][ T5943] veth1_vlan: left promiscuous mode [ 359.469245][ T5943] veth0_vlan: left promiscuous mode [ 359.546522][T12224] delete_channel: no stack [ 359.806237][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 359.817022][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 359.825300][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 359.833589][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 359.844758][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 360.243156][ T5943] team0 (unregistering): Port device team_slave_1 removed [ 360.285859][ T5943] team0 (unregistering): Port device team_slave_0 removed [ 360.826044][T12234] lo speed is unknown, defaulting to 1000 [ 360.918767][ T51] Bluetooth: hci1: command tx timeout [ 361.000888][T12204] chnl_net:caif_netlink_parms(): no params data found [ 361.061192][T12245] netlink: 'syz.0.1708': attribute type 6 has an invalid length. [ 361.306717][T12204] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.314629][T12204] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.322127][T12204] bridge_slave_0: entered allmulticast mode [ 361.331674][T12204] bridge_slave_0: entered promiscuous mode [ 361.352452][T12204] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.360138][T12204] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.367676][T12204] bridge_slave_1: entered allmulticast mode [ 361.375728][T12204] bridge_slave_1: entered promiscuous mode [ 361.541350][T12204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.663299][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.690287][T12204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.817740][T12204] team0: Port device team_slave_0 added [ 361.828505][T12234] chnl_net:caif_netlink_parms(): no params data found [ 361.842760][T12279] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1718'. [ 361.869000][ T51] Bluetooth: hci3: command tx timeout [ 361.899496][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.931340][ T30] audit: type=1800 audit(1750850466.803:5): pid=12282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1719" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2470 res=0 errno=0 [ 361.957363][T12204] team0: Port device team_slave_1 added [ 362.062603][T12284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1720'. [ 362.137398][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.187240][T12204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.201145][T12204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.234470][T12204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.323667][T12204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.352634][T12204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.390114][T12204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.467452][T12290] lo speed is unknown, defaulting to 1000 [ 362.495262][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.576457][T12234] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.586407][T12234] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.595783][T12234] bridge_slave_0: entered allmulticast mode [ 362.608071][T12234] bridge_slave_0: entered promiscuous mode [ 362.617318][T12299] lo speed is unknown, defaulting to 1000 [ 362.636475][T12234] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.650145][T12234] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.657883][T12234] bridge_slave_1: entered allmulticast mode [ 362.665741][T12234] bridge_slave_1: entered promiscuous mode [ 362.711399][T12204] hsr_slave_0: entered promiscuous mode [ 362.717809][T12204] hsr_slave_1: entered promiscuous mode [ 362.726359][T12204] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.734531][T12204] Cannot create hsr debugfs directory [ 362.906198][T12234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.951864][T12313] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1727'. [ 362.971179][T12234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.989635][ T51] Bluetooth: hci1: command tx timeout [ 363.185360][T12234] team0: Port device team_slave_0 added [ 363.291070][T12320] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1730'. [ 363.300153][T12321] netlink: 'syz.3.1729': attribute type 1 has an invalid length. [ 363.348275][T12234] team0: Port device team_slave_1 added [ 363.399196][T12234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.406201][T12234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.433155][T12234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.529529][T12234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.537850][T12234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.567961][T12234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.587514][ T36] bridge_slave_1: left allmulticast mode [ 363.595036][ T36] bridge_slave_1: left promiscuous mode [ 363.607713][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.622313][ T36] bridge_slave_0: left allmulticast mode [ 363.628015][ T36] bridge_slave_0: left promiscuous mode [ 363.640665][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.959183][ T51] Bluetooth: hci3: command tx timeout [ 363.994700][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.006161][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.016489][ T36] bond0 (unregistering): Released all slaves [ 364.215507][T12336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1735'. [ 364.261575][T12234] hsr_slave_0: entered promiscuous mode [ 364.268135][T12234] hsr_slave_1: entered promiscuous mode [ 364.275553][T12234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.283248][T12234] Cannot create hsr debugfs directory [ 364.525593][T12341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1737'. [ 364.577688][T12343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1737'. [ 364.616801][ T36] hsr_slave_0: left promiscuous mode [ 364.634347][ T36] hsr_slave_1: left promiscuous mode [ 364.652056][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.686436][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.704997][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.717505][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.750091][T12350] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1738'. [ 364.757369][ T36] veth1_macvtap: left promiscuous mode [ 364.765706][ T36] veth0_macvtap: left promiscuous mode [ 364.772152][ T36] veth1_vlan: left promiscuous mode [ 364.777804][ T36] veth0_vlan: left promiscuous mode [ 364.834872][ T30] audit: type=1800 audit(1750850469.703:6): pid=12342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1736" name="memory.events" dev="tmpfs" ino=2499 res=0 errno=0 [ 364.868550][T12351] netlink: 'syz.0.1738': attribute type 11 has an invalid length. [ 365.069374][ T51] Bluetooth: hci1: command tx timeout [ 365.568265][ T36] team0 (unregistering): Port device team_slave_1 removed [ 365.606906][ T36] team0 (unregistering): Port device team_slave_0 removed [ 365.790739][ T3462] wlan1: Trigger new scan to find an IBSS to join [ 366.039107][ T51] Bluetooth: hci3: command tx timeout [ 366.176139][T12350] lo speed is unknown, defaulting to 1000 [ 366.274896][T12361] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1741'. [ 366.377323][T12358] netlink: 'syz.3.1740': attribute type 13 has an invalid length. [ 366.403879][T12358] netlink: 'syz.3.1740': attribute type 17 has an invalid length. [ 366.538963][T12358] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 366.584674][T12362] lo speed is unknown, defaulting to 1000 [ 366.592063][T12366] veth0_virt_wifi: entered promiscuous mode [ 366.601444][T12366] veth0_virt_wifi: left promiscuous mode [ 367.108221][T12380] netlink: 'syz.3.1748': attribute type 6 has an invalid length. [ 367.151600][ T51] Bluetooth: hci1: command tx timeout [ 367.478054][T12388] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1750'. [ 367.567246][T12390] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1751'. [ 367.700544][T12204] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 367.712738][T12392] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1752'. [ 367.735100][T12204] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 367.760278][T12204] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 367.837961][T12204] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 367.865624][T12397] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1754'. [ 367.870941][T12234] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 367.889267][T12234] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 367.950001][T12234] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 367.987607][T12234] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 368.062461][T12408] netlink: 'syz.3.1755': attribute type 21 has an invalid length. [ 368.108773][ T51] Bluetooth: hci3: command tx timeout [ 368.139222][T12408] netlink: 'syz.3.1755': attribute type 6 has an invalid length. [ 368.150148][T12408] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1755'. [ 368.203056][T12406] lo speed is unknown, defaulting to 1000 [ 368.492316][T12234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.538405][T12425] netlink: 'syz.2.1759': attribute type 6 has an invalid length. [ 368.548105][T12427] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 368.601441][T12234] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.618015][T12204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.749721][ T49] wlan1: Trigger new scan to find an IBSS to join [ 368.864889][T12429] lo speed is unknown, defaulting to 1000 [ 368.888157][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.895362][ T5943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.993657][T12447] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1765'. [ 369.027958][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.035273][ T5943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.140676][T12204] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.297090][ T7055] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.304329][ T7055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.352300][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.359550][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.454522][T12460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1769'. [ 369.694419][T12467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1771'. [ 369.728549][T12470] netlink: zone id is out of range [ 369.733986][T12470] netlink: zone id is out of range [ 369.739665][T12470] netlink: zone id is out of range [ 369.754484][T12470] netlink: zone id is out of range [ 369.770002][T12470] netlink: zone id is out of range [ 369.776192][T12470] netlink: zone id is out of range [ 369.782975][T12467] vlan0: entered promiscuous mode [ 369.788058][T12467] syz_tun: entered promiscuous mode [ 369.805315][T12470] netlink: zone id is out of range [ 369.811796][T12470] netlink: zone id is out of range [ 369.827618][T12470] netlink: zone id is out of range [ 370.072874][T12476] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1775'. [ 370.152160][T12234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.266893][T12204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.405222][T12204] veth0_vlan: entered promiscuous mode [ 370.425861][T12204] veth1_vlan: entered promiscuous mode [ 370.573247][T12488] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1777'. [ 370.633807][T12489] netlink: 'syz.0.1776': attribute type 5 has an invalid length. [ 370.656754][T12484] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.664022][T12484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.709046][ T36] erspan0: left allmulticast mode [ 370.714375][ T36] bridge0: port 3(erspan0) entered disabled state [ 370.827355][ T36] bridge_slave_1: left allmulticast mode [ 370.857270][ T36] bridge_slave_1: left promiscuous mode [ 370.874027][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.897295][ T36] bridge_slave_0: left allmulticast mode [ 370.903766][ T36] bridge_slave_0: left promiscuous mode [ 370.909831][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.201411][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 371.213396][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 371.225710][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 371.247257][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 371.266010][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 371.789505][ T5988] wlan1: Trigger new scan to find an IBSS to join [ 371.873268][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.887776][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.897551][ T36] bond0 (unregistering): Released all slaves [ 372.014706][ T36] bond1 (unregistering): Released all slaves [ 372.095344][T12204] veth0_macvtap: entered promiscuous mode [ 372.135544][T12204] veth1_macvtap: entered promiscuous mode [ 372.150785][ T36] : left promiscuous mode [ 372.189387][T12515] lo speed is unknown, defaulting to 1000 [ 372.222531][ T36] tipc: Disabling bearer [ 372.231553][ T36] tipc: Left network mode [ 372.288558][T12511] lo speed is unknown, defaulting to 1000 [ 372.519909][T12204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.532620][T12234] veth0_vlan: entered promiscuous mode [ 372.587481][T12204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.635790][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.646974][T12234] veth1_vlan: entered promiscuous mode [ 372.662368][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.671752][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.715168][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.742332][ T7055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.822504][ T36] hsr_slave_0: left promiscuous mode [ 372.835176][ T36] hsr_slave_1: left promiscuous mode [ 372.843693][ T36] batman_adv: batadv0: Removing interface: team0 [ 372.854535][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.864914][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.319514][ T51] Bluetooth: hci4: command tx timeout [ 373.518430][ T36] team0 (unregistering): Port device team_slave_1 removed [ 373.567607][ T36] team0 (unregistering): Port device team_slave_0 removed [ 374.300292][T12234] veth0_macvtap: entered promiscuous mode [ 374.373150][T12234] veth1_macvtap: entered promiscuous mode [ 374.420481][T12234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.477942][T12234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.517984][T12511] chnl_net:caif_netlink_parms(): no params data found [ 374.547726][T12533] __nla_validate_parse: 1 callbacks suppressed [ 374.547744][T12533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1787'. [ 374.580874][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.599650][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.638368][T12533] batadv_slave_1: entered promiscuous mode [ 374.667276][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.687672][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.806515][T12537] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1789'. [ 374.843550][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.853564][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.863766][ T7055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.873886][ T7055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.883756][ T36] IPVS: stop unused estimator thread 0... [ 375.141849][T12554] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1792'. [ 375.299697][T12511] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.319950][T12511] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.329498][T12511] bridge_slave_0: entered allmulticast mode [ 375.345795][T12511] bridge_slave_0: entered promiscuous mode [ 375.388966][ T51] Bluetooth: hci4: command tx timeout [ 375.390959][T12511] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.423100][T12559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1794'. [ 375.440664][T12559] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1794'. [ 375.479520][T12511] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.486808][T12511] bridge_slave_1: entered allmulticast mode [ 375.532561][T12511] bridge_slave_1: entered promiscuous mode [ 375.653875][ T5943] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.681294][T12567] netlink: 'syz.0.1796': attribute type 3 has an invalid length. [ 375.702661][T12511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.721208][T12567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1796'. [ 375.734550][T12511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.779018][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.794601][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.892946][ T5943] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.002496][ T5943] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.021003][T12511] team0: Port device team_slave_0 added [ 376.027279][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.034620][T12511] team0: Port device team_slave_1 added [ 376.038131][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.101732][T12511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.117608][T12511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.146266][T12511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.192556][ T5943] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.209186][T12511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.216166][T12511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.242319][T12511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.326728][T12511] hsr_slave_0: entered promiscuous mode [ 376.334391][T12511] hsr_slave_1: entered promiscuous mode [ 376.340902][T12511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.348479][T12511] Cannot create hsr debugfs directory [ 376.520573][ T5943] bridge_slave_1: left allmulticast mode [ 376.526271][ T5943] bridge_slave_1: left promiscuous mode [ 376.544463][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.560323][ T5943] bridge_slave_0: left allmulticast mode [ 376.566069][ T5943] bridge_slave_0: left promiscuous mode [ 376.572646][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.099240][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 377.108275][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 377.126074][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 377.141941][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 377.149936][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 377.168616][ T5943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.181257][ T5943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.191873][ T5943] bond0 (unregistering): Released all slaves [ 377.361040][T12576] lo speed is unknown, defaulting to 1000 [ 377.470010][ T5843] Bluetooth: hci4: command tx timeout [ 377.545514][ T5943] hsr_slave_0: left promiscuous mode [ 377.553493][ T5943] hsr_slave_1: left promiscuous mode [ 377.559563][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.567067][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.575257][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.582778][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.602401][ T5943] veth1_macvtap: left promiscuous mode [ 377.609061][ T5943] veth0_macvtap: left promiscuous mode [ 377.614691][ T5943] veth1_vlan: left promiscuous mode [ 377.620256][ T5943] veth0_vlan: left promiscuous mode [ 377.860190][T12585] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1802'. [ 378.151912][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 378.160769][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 378.169034][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 378.181757][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 378.207938][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 378.394835][ T5943] team0 (unregistering): Port device team_slave_1 removed [ 378.436041][ T5943] team0 (unregistering): Port device team_slave_0 removed [ 378.514567][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.521128][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.054403][T12599] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1805'. [ 379.077850][T12576] chnl_net:caif_netlink_parms(): no params data found [ 379.105024][T12592] lo speed is unknown, defaulting to 1000 [ 379.235720][ T5843] Bluetooth: hci1: command tx timeout [ 379.329889][T12607] x_tables: unsorted entry at hook 2 [ 379.555937][ T5843] Bluetooth: hci4: command tx timeout [ 379.618142][T12619] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1810'. [ 379.649383][T12576] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.657078][T12576] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.674716][T12576] bridge_slave_0: entered allmulticast mode [ 379.700776][T12576] bridge_slave_0: entered promiscuous mode [ 379.748970][T12576] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.756480][T12576] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.765004][T12576] bridge_slave_1: entered allmulticast mode [ 379.773143][T12576] bridge_slave_1: entered promiscuous mode [ 379.909398][T12511] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 379.920644][T12511] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 379.986016][T12576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.011577][T12576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.052322][T12511] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 380.107277][T12511] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 380.141797][T12592] chnl_net:caif_netlink_parms(): no params data found [ 380.165865][T12576] team0: Port device team_slave_0 added [ 380.199847][T12576] team0: Port device team_slave_1 added [ 380.270601][ T5843] Bluetooth: hci3: command tx timeout [ 380.338018][ T7055] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.441806][T12576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.456087][T12576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.495494][T12576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.728060][ T7055] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.793492][T12576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.806207][T12576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.848283][T12576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.947860][T12646] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1817'. [ 380.970555][ T7055] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.065738][T12592] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.095773][T12592] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.104965][T12592] bridge_slave_0: entered allmulticast mode [ 381.119008][T12592] bridge_slave_0: entered promiscuous mode [ 381.127752][T12592] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.143675][T12592] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.169194][T12592] bridge_slave_1: entered allmulticast mode [ 381.177119][T12592] bridge_slave_1: entered promiscuous mode [ 381.300213][ T7055] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.310761][ T5843] Bluetooth: hci1: command tx timeout [ 381.437249][T12576] hsr_slave_0: entered promiscuous mode [ 381.444404][T12576] hsr_slave_1: entered promiscuous mode [ 381.453133][T12576] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.461161][T12576] Cannot create hsr debugfs directory [ 381.503746][T12592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.539529][T12592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.630058][T12653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1819'. [ 381.695262][T12511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.841951][T12592] team0: Port device team_slave_0 added [ 381.902747][T12592] team0: Port device team_slave_1 added [ 381.952335][T12658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1820'. [ 382.067247][T12592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.074956][T12592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.101902][T12592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.150837][T12592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.158221][T12592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.185693][T12592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.237030][T12511] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.322713][T12667] SET target dimension over the limit! [ 382.350746][ T5843] Bluetooth: hci3: command tx timeout [ 382.361830][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.369063][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.392512][T12669] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1824'. [ 382.431150][ T7055] bridge_slave_1: left allmulticast mode [ 382.436832][ T7055] bridge_slave_1: left promiscuous mode [ 382.442951][ T7055] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.455574][ T7055] bridge_slave_0: left allmulticast mode [ 382.462110][ T7055] bridge_slave_0: left promiscuous mode [ 382.467823][ T7055] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.816018][ T7055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.827982][ T7055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.840220][ T7055] bond0 (unregistering): Released all slaves [ 382.855919][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.863095][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.916849][T12592] hsr_slave_0: entered promiscuous mode [ 382.931285][T12592] hsr_slave_1: entered promiscuous mode [ 382.939024][T12592] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.946714][T12592] Cannot create hsr debugfs directory [ 383.012206][T12673] netlink: 'syz.3.1825': attribute type 1 has an invalid length. [ 383.254575][T12673] 8021q: adding VLAN 0 to HW filter on device bond2 [ 383.306864][T12674] bond2: (slave gretap1): making interface the new active one [ 383.318128][T12674] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 383.399768][ T5843] Bluetooth: hci1: command tx timeout [ 383.525455][T12687] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1828'. [ 383.535365][T12511] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 383.703270][ T7055] hsr_slave_0: left promiscuous mode [ 383.732745][ T7055] hsr_slave_1: left promiscuous mode [ 383.758058][ T7055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.768821][ T7055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.785023][ T7055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.798321][ T7055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.838244][ T7055] veth1_macvtap: left promiscuous mode [ 383.844396][ T7055] veth0_macvtap: left promiscuous mode [ 383.852672][ T7055] veth1_vlan: left promiscuous mode [ 383.858363][ T7055] veth0_vlan: left promiscuous mode [ 384.396774][ T7055] team0 (unregistering): Port device team_slave_1 removed [ 384.430919][ T5843] Bluetooth: hci3: command tx timeout [ 384.449642][ T7055] team0 (unregistering): Port device team_slave_0 removed [ 385.182393][T12511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.215388][T12576] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 385.268548][T12576] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 385.302065][T12576] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 385.314155][T12718] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1835'. [ 385.335379][T12716] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1836'. [ 385.345283][T12716] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1836'. [ 385.367318][T12576] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 385.470226][ T5843] Bluetooth: hci1: command tx timeout [ 385.534953][T12729] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1837'. [ 385.617394][T12511] veth0_vlan: entered promiscuous mode [ 385.666460][T12511] veth1_vlan: entered promiscuous mode [ 385.798420][T12736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1839'. [ 385.825453][T12511] veth0_macvtap: entered promiscuous mode [ 385.830110][T12736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1839'. [ 385.851875][T12736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1839'. [ 385.862044][T12511] veth1_macvtap: entered promiscuous mode [ 385.890618][T12738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1839'. [ 385.906075][T12738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1839'. [ 385.924920][T12511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.973054][T12511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.992702][T12576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.032622][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.052946][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.073722][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.105332][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.140469][T12742] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1840'. [ 386.155034][T12576] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.164536][T12592] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 386.206878][T12592] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 386.226637][ T7055] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.233862][ T7055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.256390][T12592] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 386.275616][ T7055] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.282797][ T7055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.303136][T12592] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 386.421547][T12744] lo speed is unknown, defaulting to 1000 [ 386.444982][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.457344][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.519082][ T5843] Bluetooth: hci3: command tx timeout [ 386.567382][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.575861][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.743457][T12756] net_ratelimit: 14 callbacks suppressed [ 386.743481][T12756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.022788][T12764] FAULT_INJECTION: forcing a failure. [ 387.022788][T12764] name failslab, interval 1, probability 0, space 0, times 0 [ 387.059047][T12764] CPU: 1 UID: 0 PID: 12764 Comm: syz.3.1844 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 387.059079][T12764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 387.059093][T12764] Call Trace: [ 387.059101][T12764] [ 387.059115][T12764] dump_stack_lvl+0x189/0x250 [ 387.059155][T12764] ? __pfx____ratelimit+0x10/0x10 [ 387.059176][T12764] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.059208][T12764] ? __pfx__printk+0x10/0x10 [ 387.059237][T12764] ? __pfx___might_resched+0x10/0x10 [ 387.059267][T12764] ? fs_reclaim_acquire+0x7d/0x100 [ 387.059297][T12764] should_fail_ex+0x414/0x560 [ 387.059329][T12764] should_failslab+0xa8/0x100 [ 387.059353][T12764] kmem_cache_alloc_noprof+0x73/0x3c0 [ 387.059384][T12764] ? security_inode_alloc+0x39/0x330 [ 387.059418][T12764] security_inode_alloc+0x39/0x330 [ 387.059457][T12764] inode_init_always_gfp+0x9ed/0xdc0 [ 387.059486][T12764] ? __pfx_sock_alloc_inode+0x10/0x10 [ 387.059509][T12764] alloc_inode+0x82/0x1b0 [ 387.059532][T12764] __sock_create+0x12d/0x9f0 [ 387.059566][T12764] __sys_socket+0xd7/0x1b0 [ 387.059595][T12764] __x64_sys_socket+0x7a/0x90 [ 387.059621][T12764] do_syscall_64+0xfa/0x3b0 [ 387.059641][T12764] ? lockdep_hardirqs_on+0x9c/0x150 [ 387.059660][T12764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.059681][T12764] ? clear_bhb_loop+0x60/0xb0 [ 387.059707][T12764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.059726][T12764] RIP: 0033:0x7f037b790847 [ 387.059745][T12764] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.059763][T12764] RSP: 002b:00007f037c5d8e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 387.059784][T12764] RAX: ffffffffffffffda RBX: 0000200000000280 RCX: 00007f037b790847 [ 387.059799][T12764] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 387.059811][T12764] RBP: 00007f037c5d8e70 R08: 000000000000000a R09: 0000000000000000 [ 387.059822][T12764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 387.059834][T12764] R13: 00007f037c5d8fa0 R14: 00007f037c5d8fa0 R15: 0000200000000340 [ 387.059867][T12764] [ 387.063948][T12764] socket: no more sockets [ 387.065570][T12592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.317176][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.328241][T12592] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.336043][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.370492][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.377754][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.412272][T12576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.434021][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.441228][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.572545][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.652951][T12576] veth0_vlan: entered promiscuous mode [ 387.685608][T12576] veth1_vlan: entered promiscuous mode [ 387.759537][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.886780][T12576] veth0_macvtap: entered promiscuous mode [ 387.994337][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.054710][T12576] veth1_macvtap: entered promiscuous mode [ 388.113952][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.207303][T12576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.236090][T12576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.281284][ T7055] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.308741][ T7055] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.537297][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 388.553589][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 388.568119][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 388.577659][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 388.589667][T12779] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.602621][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 388.625308][T12779] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.647058][T12779] $Hÿ (unregistering): Released all slaves [ 388.702827][ T7055] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.855824][ T7055] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.987460][T12786] lo speed is unknown, defaulting to 1000 [ 389.101405][ T13] bridge_slave_1: left allmulticast mode [ 389.107971][ T13] bridge_slave_1: left promiscuous mode [ 389.114129][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.124118][ T13] bridge_slave_0: left allmulticast mode [ 389.130371][ T13] bridge_slave_0: left promiscuous mode [ 389.136137][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.505849][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.517031][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.527372][ T13] bond0 (unregistering): Released all slaves [ 389.572856][T12592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.585963][ T3462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.616482][ T3462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.704913][T12795] lo speed is unknown, defaulting to 1000 [ 390.159764][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.167635][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.275632][ T13] hsr_slave_0: left promiscuous mode [ 390.298065][ T13] hsr_slave_1: left promiscuous mode [ 390.314674][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.325966][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.334671][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.342612][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.391989][ T13] veth1_macvtap: left promiscuous mode [ 390.397598][ T13] veth0_macvtap: left promiscuous mode [ 390.412093][ T13] veth1_vlan: left promiscuous mode [ 390.417586][ T13] veth0_vlan: left promiscuous mode [ 390.668985][ T5843] Bluetooth: hci4: command tx timeout [ 390.862951][ T13] team0 (unregistering): Port device team_slave_1 removed [ 390.913429][ T13] team0 (unregistering): Port device team_slave_0 removed [ 391.408302][T12786] chnl_net:caif_netlink_parms(): no params data found [ 391.889618][T12786] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.896954][T12786] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.904507][T12786] bridge_slave_0: entered allmulticast mode [ 391.912692][T12786] bridge_slave_0: entered promiscuous mode [ 391.924642][T12786] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.932201][T12786] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.940843][T12786] bridge_slave_1: entered allmulticast mode [ 391.955782][T12786] bridge_slave_1: entered promiscuous mode [ 392.013580][T12592] veth0_vlan: entered promiscuous mode [ 392.032829][T12786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.062041][T12786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.091049][T12592] veth1_vlan: entered promiscuous mode [ 392.126958][T12786] team0: Port device team_slave_0 added [ 392.135450][T12786] team0: Port device team_slave_1 added [ 392.176288][ T5943] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.227970][T12786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.242744][T12786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.271164][T12786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.297443][T12592] veth0_macvtap: entered promiscuous mode [ 392.321217][ T5943] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.336863][T12786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.352022][T12786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.383175][T12786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.422337][ T5943] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.452092][T12592] veth1_macvtap: entered promiscuous mode [ 392.556088][ T5943] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.580730][T12786] hsr_slave_0: entered promiscuous mode [ 392.587083][T12786] hsr_slave_1: entered promiscuous mode [ 392.598507][T12786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 392.606455][T12786] Cannot create hsr debugfs directory [ 392.645008][T12592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.674413][T12592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.712392][ T7055] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.723463][ T7055] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.749124][ T5843] Bluetooth: hci4: command tx timeout [ 392.767265][ T7055] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.800719][ T7055] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.954943][ T5943] bridge_slave_1: left allmulticast mode [ 392.963408][ T5943] bridge_slave_1: left promiscuous mode [ 392.970260][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.982938][ T5943] bridge_slave_0: left allmulticast mode [ 392.988589][ T5943] bridge_slave_0: left promiscuous mode [ 392.995897][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.343075][ T5943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.354211][ T5943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.365595][ T5943] bond0 (unregistering): Released all slaves [ 393.506349][ T7055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.537388][ T7055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.605130][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.614760][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.767349][ T5943] hsr_slave_0: left promiscuous mode [ 393.774845][ T5943] hsr_slave_1: left promiscuous mode [ 393.781259][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.792704][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.800981][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.808410][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.829614][ T5943] veth1_macvtap: left promiscuous mode [ 393.835250][ T5943] veth0_macvtap: left promiscuous mode [ 393.841160][ T5943] veth1_vlan: left promiscuous mode [ 393.846454][ T5943] veth0_vlan: left promiscuous mode [ 394.578541][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 394.608454][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 394.628915][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 394.637225][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 394.646219][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 394.831076][ T5843] Bluetooth: hci4: command tx timeout [ 394.872659][ T5943] team0 (unregistering): Port device team_slave_1 removed [ 394.914605][ T5943] team0 (unregistering): Port device team_slave_0 removed [ 395.386896][T12841] lo speed is unknown, defaulting to 1000 [ 395.482585][T12786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 395.548175][T12786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 395.578097][T12786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 395.603545][T12846] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 395.713663][T12786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 395.826680][T12846] lo speed is unknown, defaulting to 1000 [ 396.015763][T12856] lo speed is unknown, defaulting to 1000 [ 396.050283][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 396.076237][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 396.084927][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 396.096375][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 396.104394][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 396.342960][T12841] chnl_net:caif_netlink_parms(): no params data found [ 396.457960][ T5943] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.538713][T12861] lo speed is unknown, defaulting to 1000 [ 396.704898][ T5943] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.758835][ T5843] Bluetooth: hci1: command tx timeout [ 396.793799][T12786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.817478][ T5943] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.862754][T12875] __nla_validate_parse: 4 callbacks suppressed [ 396.862774][T12875] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1870'. [ 396.926328][ T5843] Bluetooth: hci4: command tx timeout [ 396.955730][ T5943] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.015753][T12841] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.027630][T12841] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.037522][T12841] bridge_slave_0: entered allmulticast mode [ 397.051230][T12841] bridge_slave_0: entered promiscuous mode [ 397.096622][T12786] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.124313][T12841] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.138952][T12841] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.146229][T12841] bridge_slave_1: entered allmulticast mode [ 397.171419][T12841] bridge_slave_1: entered promiscuous mode [ 397.285400][T12841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.307204][T12841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.358065][ T7055] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.365325][ T7055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.443872][T12841] team0: Port device team_slave_0 added [ 397.463031][T12841] team0: Port device team_slave_1 added [ 397.505388][ T7055] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.512597][ T7055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.615489][T12898] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 397.657954][T12841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.667825][T12841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.695938][T12841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.722306][T12841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.729726][T12841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.756094][T12841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.926099][T12900] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1876'. [ 397.946606][T12909] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.973186][T12841] hsr_slave_0: entered promiscuous mode [ 397.980458][T12841] hsr_slave_1: entered promiscuous mode [ 397.987566][T12841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 397.995604][T12841] Cannot create hsr debugfs directory [ 398.036852][T12861] chnl_net:caif_netlink_parms(): no params data found [ 398.064343][T12909] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.104793][ T5943] bridge_slave_1: left allmulticast mode [ 398.113098][ T5943] bridge_slave_1: left promiscuous mode [ 398.123808][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.135129][ T5943] bridge_slave_0: left allmulticast mode [ 398.141369][ T5943] bridge_slave_0: left promiscuous mode [ 398.147170][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.189058][ T5843] Bluetooth: hci3: command tx timeout [ 398.521914][ T5943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.533144][ T5943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.544205][ T5943] bond0 (unregistering): Released all slaves [ 398.622481][T12909] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.782091][T12911] netlink: 356 bytes leftover after parsing attributes in process `syz.3.1878'. [ 398.804943][T12909] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.839003][ T5843] Bluetooth: hci1: command tx timeout [ 398.984237][T12786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 399.029787][T12861] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.037136][T12861] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.048770][T12861] bridge_slave_0: entered allmulticast mode [ 399.056141][T12861] bridge_slave_0: entered promiscuous mode [ 399.086945][T12911] lo speed is unknown, defaulting to 1000 [ 399.107263][T12861] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.115516][T12861] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.123394][T12861] bridge_slave_1: entered allmulticast mode [ 399.133939][T12861] bridge_slave_1: entered promiscuous mode [ 399.214994][ T7055] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.255082][ T5943] hsr_slave_0: left promiscuous mode [ 399.261703][ T5943] hsr_slave_1: left promiscuous mode [ 399.267578][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.275788][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.288774][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.296225][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.322103][ T5943] veth1_macvtap: left promiscuous mode [ 399.327671][ T5943] veth0_macvtap: left promiscuous mode [ 399.333778][ T5943] veth1_vlan: left promiscuous mode [ 399.339681][ T5943] veth0_vlan: left promiscuous mode [ 399.780529][ T5943] team0 (unregistering): Port device team_slave_1 removed [ 399.819742][ T5943] team0 (unregistering): Port device team_slave_0 removed [ 400.242353][T12861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.262328][T12861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.279002][ T5843] Bluetooth: hci3: command tx timeout [ 400.369521][ T49] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.384333][T12861] team0: Port device team_slave_0 added [ 400.411305][ T1168] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.477288][T12861] team0: Port device team_slave_1 added [ 400.593900][ T1168] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.721493][T12861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.728484][T12861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.762270][T12861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.815978][T12861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.832217][T12861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.862919][T12861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.908998][ T5843] Bluetooth: hci1: command tx timeout [ 401.002510][T12861] hsr_slave_0: entered promiscuous mode [ 401.011565][T12861] hsr_slave_1: entered promiscuous mode [ 401.017904][T12861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.025630][T12861] Cannot create hsr debugfs directory [ 401.041181][T12786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.553590][T12945] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1887'. [ 401.680420][T12841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 401.692627][T12841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 401.716532][T12786] veth0_vlan: entered promiscuous mode [ 401.731176][T12841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 401.741039][T12950] pim6reg: left allmulticast mode [ 401.764189][T12841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 401.830422][T12786] veth1_vlan: entered promiscuous mode [ 402.011653][T12786] veth0_macvtap: entered promiscuous mode [ 402.034261][T12786] veth1_macvtap: entered promiscuous mode [ 402.142772][T12786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.166409][T12841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.191348][T12786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.306177][T12841] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.349762][ T5843] Bluetooth: hci3: command tx timeout [ 402.353821][ T7055] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.365237][ T7055] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.447184][ T7055] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.470767][ T7055] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.485896][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.493212][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.542618][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.549859][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.624954][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.660924][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.752933][T12861] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 402.796598][T12861] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 402.799059][ T5943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.828271][T12861] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 402.838466][ T5943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.886715][T12861] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 402.979170][T12989] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1897'. [ 402.989062][ T5843] Bluetooth: hci1: command tx timeout [ 403.355082][T12841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.404972][T12861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.467824][ T7055] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.507749][T13017] bridge6: entered promiscuous mode [ 403.515922][T13017] bridge6: entered allmulticast mode [ 403.528536][T13017] team0: Port device bridge6 added [ 403.654024][ T7055] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.731603][T12861] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.804199][ T7055] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.878862][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.886233][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.907758][T13023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.993142][T13019] infiniband syz1: set active [ 403.997994][T13019] infiniband syz1: added macvlan1 [ 404.054096][T13019] RDS/IB: syz1: added [ 404.058279][T13019] smc: adding ib device syz1 with port count 1 [ 404.064924][T13019] smc: ib device syz1 port 1 has pnetid SYZ2 (user defined) [ 404.107249][T13024] vlan3: entered promiscuous mode [ 404.122390][T13024] bond0: entered promiscuous mode [ 404.136342][T13024] bond0: (slave vlan3): Opening slave failed [ 404.198093][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.205412][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.345496][ T7055] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.408051][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 404.427349][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 404.439197][ T51] Bluetooth: hci3: command tx timeout [ 404.447003][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 404.458100][T12841] veth0_vlan: entered promiscuous mode [ 404.467430][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 404.476172][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 404.482407][T12861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 404.532314][T12841] veth1_vlan: entered promiscuous mode [ 404.625760][T13028] lo speed is unknown, defaulting to 1000 [ 404.737199][T12841] veth0_macvtap: entered promiscuous mode [ 404.788287][T12841] veth1_macvtap: entered promiscuous mode [ 404.863581][T12841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.893672][T12841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.919027][ T7055] bridge_slave_1: left allmulticast mode [ 404.929507][ T7055] bridge_slave_1: left promiscuous mode [ 404.935392][ T7055] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.946157][ T7055] bridge_slave_0: left allmulticast mode [ 404.952880][ T7055] bridge_slave_0: left promiscuous mode [ 404.963071][ T7055] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.422279][ T7055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.434614][ T7055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.445202][ T7055] bond0 (unregistering): Released all slaves [ 405.549527][ T1168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.570791][ T1168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.643793][ T1168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.673391][ T1168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.761083][T13041] syzkaller0: entered promiscuous mode [ 405.774160][T13041] syzkaller0: entered allmulticast mode [ 405.867111][T12861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.291697][ T7057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.310120][ T7057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.500913][ T5943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.506414][T13028] chnl_net:caif_netlink_parms(): no params data found [ 406.518976][ T5943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.589934][ T51] Bluetooth: hci4: command tx timeout [ 406.977816][T13028] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.990529][T13074] netlink: 'syz.3.1909': attribute type 1 has an invalid length. [ 407.000041][T13028] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.007302][T13028] bridge_slave_0: entered allmulticast mode [ 407.063101][T13028] bridge_slave_0: entered promiscuous mode [ 407.074572][T13028] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.087126][T13028] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.096960][T13028] bridge_slave_1: entered allmulticast mode [ 407.112281][T13028] bridge_slave_1: entered promiscuous mode [ 407.147900][T13074] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 407.155440][T12861] veth0_vlan: entered promiscuous mode [ 407.341182][T13028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.363296][T13028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.382511][T12861] veth1_vlan: entered promiscuous mode [ 407.465099][T13028] team0: Port device team_slave_0 added [ 407.482270][T13028] team0: Port device team_slave_1 added [ 407.564681][T12861] veth0_macvtap: entered promiscuous mode [ 407.600406][T13028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.607415][T13028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.651837][T13028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.673396][T13028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.695617][T13028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.733501][T13028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.812844][T12861] veth1_macvtap: entered promiscuous mode [ 407.852362][ T7055] hsr_slave_0: left promiscuous mode [ 407.858301][ T7055] hsr_slave_1: left promiscuous mode [ 407.864454][ T7055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.872921][ T7055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.882658][ T7055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.890268][ T7055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.911569][ T7055] veth1_macvtap: left promiscuous mode [ 407.917110][ T7055] veth0_macvtap: left promiscuous mode [ 407.923880][ T7055] veth1_vlan: left promiscuous mode [ 407.929332][ T7055] veth0_vlan: left promiscuous mode [ 408.385841][ T7055] team0 (unregistering): Port device team_slave_1 removed [ 408.434475][ T7055] team0 (unregistering): Port device team_slave_0 removed [ 408.668993][ T51] Bluetooth: hci4: command tx timeout [ 408.888113][T12861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.920883][T13028] hsr_slave_0: entered promiscuous mode [ 408.927720][T13028] hsr_slave_1: entered promiscuous mode [ 408.935161][T13028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 408.944886][T13028] Cannot create hsr debugfs directory [ 408.996220][T12861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.050281][ T5943] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.065715][ T5943] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.109269][ T5943] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.163923][ T5943] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.407910][ T7055] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.432519][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.442736][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.537856][ T7055] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.605153][ T5943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.624656][ T5943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.661891][ T7055] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.717161][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 409.726463][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 409.739027][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 409.748319][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 409.759974][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 409.814281][ T7055] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.843646][T12861] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 409.855760][T12861] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 409.864191][T12861] CPU: 0 UID: 0 PID: 12861 Comm: syz-executor Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 409.876433][T12861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 409.886489][T12861] RIP: 0010:klist_remove+0x14a/0x340 [ 409.891780][T12861] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 d9 21 c7 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ba 21 c7 f6 49 8b 44 24 58 48 89 44 24 08 [ 409.911387][T12861] RSP: 0018:ffffc900032d7840 EFLAGS: 00010202 [ 409.917460][T12861] RAX: 000000000000000b RBX: ffff88802f75da00 RCX: 0000000000000000 [ 409.925432][T12861] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 409.933408][T12861] RBP: ffffc900032d7928 R08: ffffffff8f87b103 R09: 1ffffffff1f0f620 [ 409.941384][T12861] R10: dffffc0000000000 R11: fffffbfff1f0f621 R12: 0000000000000000 [ 409.949355][T12861] R13: 1ffff1100aea220c R14: ffff888057511060 R15: dffffc0000000000 [ 409.957327][T12861] FS: 0000000000000000(0000) GS:ffff888125c4d000(0000) knlGS:0000000000000000 [ 409.966345][T12861] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 409.972927][T12861] CR2: 00007ffdf173dee8 CR3: 000000007d99a000 CR4: 00000000003526f0 [ 409.980908][T12861] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 409.988900][T12861] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 409.996875][T12861] Call Trace: [ 410.000172][T12861] [ 410.003122][T12861] ? __pfx_klist_remove+0x10/0x10 [ 410.008162][T12861] ? __pfx_kobject_move+0x10/0x10 [ 410.013223][T12861] ? get_device_parent+0x366/0x3a0 [ 410.018444][T12861] device_move+0x193/0x700 [ 410.022883][T12861] hci_conn_del_sysfs+0xb8/0x170 [ 410.027859][T12861] hci_conn_del+0x8ff/0xcb0 [ 410.032394][T12861] hci_conn_hash_flush+0x191/0x230 [ 410.037521][T12861] hci_dev_close_sync+0xaef/0x1330 [ 410.042647][T12861] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 410.048207][T12861] ? up_write+0x1c4/0x420 [ 410.052548][T12861] hci_unregister_dev+0x206/0x500 [ 410.057674][T12861] vhci_release+0x80/0xd0 [ 410.062019][T12861] ? __pfx_vhci_release+0x10/0x10 [ 410.067048][T12861] __fput+0x44c/0xa70 [ 410.071046][T12861] task_work_run+0x1d1/0x260 [ 410.075645][T12861] ? __pfx_task_work_run+0x10/0x10 [ 410.080768][T12861] ? kmem_cache_free+0x18f/0x400 [ 410.085709][T12861] do_exit+0x6ad/0x22e0 [ 410.089868][T12861] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 410.095245][T12861] ? __pfx_do_exit+0x10/0x10 [ 410.099847][T12861] ? _raw_spin_unlock_irq+0x23/0x50 [ 410.105052][T12861] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.110364][T12861] do_group_exit+0x21c/0x2d0 [ 410.114974][T12861] __x64_sys_exit_group+0x3f/0x40 [ 410.120004][T12861] x64_sys_call+0x21ba/0x21c0 [ 410.124690][T12861] do_syscall_64+0xfa/0x3b0 [ 410.129212][T12861] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.134412][T12861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.140486][T12861] ? clear_bhb_loop+0x60/0xb0 [ 410.145169][T12861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.151062][T12861] RIP: 0033:0x7f4b3b98e929 [ 410.155489][T12861] Code: Unable to access opcode bytes at 0x7f4b3b98e8ff. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 410.162516][T12861] RSP: 002b:00007ffdf1740648 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 410.170963][T12861] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4b3b98e929 [ 410.178955][T12861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 410.186953][T12861] RBP: 00007f4b3b9ee8f0 R08: 00007ffdf173e3e7 R09: 0000000000000003 [ 410.194950][T12861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.202946][T12861] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffdf1740800 [ 410.211081][T12861] [ 410.214104][T12861] Modules linked in: [ 410.220818][T12861] ---[ end trace 0000000000000000 ]--- [ 410.304264][T12861] RIP: 0010:klist_remove+0x14a/0x340 [ 410.330205][T12861] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 d9 21 c7 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ba 21 c7 f6 49 8b 44 24 58 48 89 44 24 08 [ 410.371096][T12861] RSP: 0018:ffffc900032d7840 EFLAGS: 00010202 [ 410.379691][T12861] RAX: 000000000000000b RBX: ffff88802f75da00 RCX: 0000000000000000 [ 410.387719][T12861] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 410.400252][T12861] RBP: ffffc900032d7928 R08: ffffffff8f87b103 R09: 1ffffffff1f0f620 [ 410.408276][T12861] R10: dffffc0000000000 R11: fffffbfff1f0f621 R12: 0000000000000000 [ 410.441434][T12861] R13: 1ffff1100aea220c R14: ffff888057511060 R15: dffffc0000000000 [ 410.459115][T12861] FS: 0000000000000000(0000) GS:ffff888125c4d000(0000) knlGS:0000000000000000 [ 410.468107][T12861] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 410.491590][T12861] CR2: 000055627ef71000 CR3: 000000000df38000 CR4: 00000000003526f0 [ 410.511149][T12861] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 410.530848][T12861] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 410.551472][T12861] Kernel panic - not syncing: Fatal exception [ 410.557956][T12861] Kernel Offset: disabled [ 410.562288][T12861] Rebooting in 86400 seconds..