last executing test programs: 5m47.575954562s ago: executing program 3 (id=11332): r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x70, 0x4) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f00000000c0)=""/136, &(0x7f0000000040)=0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) ioctl$sock_inet_SIOCSARP(r2, 0x8954, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @random="996386d83c53"}, 0x0, {0x2, 0x4e21, @private}, 'lo\x00'}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x14, &(0x7f00000001c0)='/proc/1/\b\x00\x00\x00\x00\x00\x00\x00\x98#YP\xee\x9c2G\xf0\x81*I\"_\x91\x0f\xd6\x86\xfe$\x7f\xbcK\x88\xe3\xe5\xcf\x8d\xbc\x86\xa26s\x96\xdf@\x89\x15\xb3{\x82\x14{\xec\xce\xce4\xff\x05\xec\b\xbfEU\x81\x1eA\x1c\xbe\xddj\xc7\x98\n\xa5K\x9f\xd7t\x04\xd0\x1f'}, 0x30) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000180)='\x00', 0x0, 0x8}, 0x18) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@ifindex=0x0, 0x12, 0x1, 0x4, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000340)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0x1, 0xffffffffffffffff}, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000007600010000000000000000000300000000e9"], 0x18}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@getqdisc={0x38, 0x26, 0x2, 0x70bd28, 0x401, {0x0, 0x0, 0x0, r6, {0x2}, {0xa}, {0x0, 0xd}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20004001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r11, 0x0, 0x7, 0x7) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)={@map=r8, r4, 0x22, 0x2006, r5, @value=r11, @void, @void, @void, r7}, 0x20) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) 5m47.37535663s ago: executing program 3 (id=11337): ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x14, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcb, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @cb_func={0x18, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x55, &(0x7f0000000280)=""/85, 0x41100, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x10, 0x3ff, 0x82d}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x1, 0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000380)=[{0x4, 0x2, 0x2, 0xb}], 0x10, 0x9}, 0x94) socket$netlink(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000480)=@raw=[@generic={0x7, 0x4, 0x0, 0x2a, 0x9}, @jmp={0x5, 0x0, 0xb, 0x1, 0x6, 0xc, 0x4}, @alu={0x4, 0x0, 0xa, 0x9, 0x9, 0x2, 0xfffffffffffffff0}], &(0x7f00000004c0)='GPL\x00', 0x7, 0xb7, &(0x7f0000000500)=""/183, 0x40f00, 0x8, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xe, 0x7, 0x40}, 0x10, 0xdc73, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000640)=[{0x4, 0x2, 0x4, 0x3}, {0x0, 0x2, 0xb, 0xa}, {0x3, 0x2, 0x0, 0x2}, {0x0, 0x5, 0xa, 0x5}], 0x10, 0x4}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0x0, 0x29941344, 0x18}, 0xc) r0 = socket(0x3, 0x5, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=@newtaction={0xfffffffffffffebf, 0x30, 0x51b, 0x0, 0x0, {}, [{0x268, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0xa, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x18c, 0x0, 0x0, 0x0, {{0xf}, {0x60, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x3}}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010103}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}]}, {0xfd, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09b7f4e3dada4783d684dcf9d30560ee21cb8141d36fa27dda351ee7e7c9b3f9ccdae8c8fbea4d186e9c34f07ddf73853d6a99be4947e954c81aaaf47e9c2d89fadb4f70d03379bfc2e951d0bb0805a9d085a9a0d1206b627378be81aa1f18f004d1f55cf71acb0167a1ea8ca567d67f250b9d7d40f06f1a47a89b3a3b9be446268f0273a19f4c3ee9b9ed1d90e40fcd87889d6b62"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x27c}}, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000012c0)=@nat={'nat\x00', 0x670, 0x5, 0x3c8, 0x0, 0x198, 0xfeffffff, 0x268, 0x268, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x1}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x8}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x2b, @rand_addr=0x64010100, @loopback, @port=0x4e21, @gre_key=0x1}}}}, {{@ip={@remote, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x3a, @private, @rand_addr, @gre_key, @icmp_id=0x68}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r3, 0x1, 0x39, 0x0, &(0x7f0000000080)) poll(&(0x7f0000000780), 0x0, 0x8) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r8, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x80) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x8c, r9, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "d2c3accf4b12ded78f63e86dffdaf5cf"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "cb1f0d1d31cea350da85fc94488e2359"}, @NL80211_ATTR_PMK={0x14, 0xfe, "9681c2caac298fd010b067d6c2028e6d"}, @NL80211_ATTR_PMK={0x14, 0xfe, "957e05867c8d8f0b1606b6216a4bdc35"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "8b15de3101ca46ca7aefe0decde682df"}]}, 0x8c}}, 0x0) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000000040)=0xffffff8e) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=@newqdisc={0x2c, 0x24, 0x200, 0x470bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0x6}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000036}, 0x2000400c) 5m46.775954759s ago: executing program 2 (id=11348): r0 = socket(0x10, 0x80002, 0x0) getsockopt$sock_int(r0, 0x1, 0x30, 0x0, &(0x7f0000000580)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x7, [@null, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000000)={r7, 0x9}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={r7, 0xf29}, &(0x7f00000000c0)=0x8) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x800, 0x55007}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x44040) 5m46.747174s ago: executing program 2 (id=11350): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x21, {{0x29, 0x0, 0x2000000, @private2}}}, 0x88) (async, rerun: 32) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000540)={0x2, &(0x7f0000000080)=[{}, {0x0, 0x0, 0x1}]}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="60b80000", @ANYBLOB="3b474f498be7c8b254ce215fea69e34080614561621d9624bd7fd60d47ab4a07f3119d13bb6375a65088b679f62d5644f318811ebb016c9d09d636952766359a28cf22e0ba51bf80a51f47d12bf71aa98cb0870551e6277665dd11acc81b005f939ed21cef97fff2f11ae425330ed7ed4cb5f297c0f23c625bd00146c0c7709fa90f7ce88f34e9640948b8ab3ee5f8ebaa602a4a7771a183acf851d0755239e1c0be24a85f92edb658d57c7feded9f04d1fc0acecb9f9c2fa2b2a063d5f5626878c8be0c3644eefb67f80a9029ef2eb6dbfb1d62cd432da84c8f2791c07d6a7003d80b99321f42560b9a92f146a91a8d6b0c6733ef63587a", @ANYRES8=r1, @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newqdisc={0x50, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0x0, 0xc}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x10, 0x19cf, 0xb, 0x1, 0x0, 0xfffffff9, 0x4}}, {0xc, 0x2, [0x96, 0x7, 0x7, 0x1]}}]}]}, 0x50}}, 0x20004055) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000013e00070127bd70001d010000027c0000040017800c00018008000600", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x440) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 32) socketpair(0x25, 0x80000, 0x1ff, &(0x7f0000000200)) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r4, 0x8) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000240)={0x0, 0x28, 0x20, 0x1, 0x401}, &(0x7f0000000280)=0x18) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="480000000001050010000007000000000a00fffd080007400029d2efa1000004200001800c000280050600034003400001000008000740000000010400068000"/76], 0x48}, 0x1, 0x0, 0x0, 0x4041}, 0xc000) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ac0000000000000000004306000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0000000000000000000000010c00020000003c0001800c00028005000100000000002c00018014000300ff020000000002000000000000000001140004002001000000000000000000000000000008000740000000001800068014000400000000000000000000000000000000015d6f1fe6000000000000"], 0xac}}, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3) (async) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) (async) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) 5m46.511128749s ago: executing program 2 (id=11354): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtaction={0x4a3c, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}, {0x2c84, 0x1, [@m_ctinfo={0xd4, 0x11, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80000001, 0x22e8, 0x19c891bf25bc0162, 0x6, 0x5}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7c9a}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x82}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}]}, {0x55, 0x6, "13dc44fef10e123e2edd848d26ce00a6036061b306d4922184d86681c34f72d4e46e747c569eaebca00518eab8fdadc26c3db7e671da928fe9dec4f53b793ec393a43e5a377dd6adbb4415729cc4ddbd27"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_xt={0x90, 0x1f, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}]}, {0x57, 0x6, "69878f269bcfcfe72a2dfd0e4335d50759140bc8ae08ed4c348b370a60875f691c9d76ee96650d90272999a0984c8cafb89393fe6ab20bd741945f4ab6ce7a31b325b4df3292f7bad4ee405ef038187403e4fd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x84, 0xa, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x2d, 0x6, "410a28a05bddcd8afbc2ef5b969ff377e9c38c4d031364199a7ddce290cfa709f5d47c023db0c71ab8"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_skbmod={0x100, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8, 0x40, 0x3, 0x7, 0x7fffffff}, 0xf}}]}, {0xb0, 0x6, "d91035a59be4c7bae0843b258fcdabe5e647f850521286b6e934bffca457ec43f14f0899076bc5bf78d97b95c327cb2d055f34ffa002482588965b954e663d6ff5a246facca1735f801ac9ca7793c7f3161d0530b48595764e99bad5c544ac7cfc86fb2bd4e98a160db44b7d5612f7192c42e47eade0b43283a9b8601c9ed40fac2139f0f36ee2588350ca0c51d28f6818af6a69e0c41558266b051a88d0b7bb8967ba9016efb52d77c1dad3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_police={0x14f0, 0x0, 0x0, 0x0, {{0xb}, {0x1448, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x6, 0x7, 0xbe2, 0x100, 0x9, 0xfffffffa, 0x1d9, 0x4, 0x80000001, 0x101, 0x3, 0x80000000, 0x8a8, 0x3, 0x80000001, 0x9833, 0x2, 0x7, 0x0, 0x1, 0x0, 0x9, 0x7, 0x10001, 0x9, 0x4, 0x5, 0x7, 0x1, 0x5, 0x2f028785, 0x2, 0x7, 0xe71, 0x8, 0x8, 0xa876, 0x2, 0x400, 0x5, 0x129a, 0xd, 0x67a2, 0x9c3, 0x200, 0x515, 0x3, 0x7fff, 0x9, 0xfffffff7, 0x7, 0x9, 0xff, 0xc, 0xb, 0x521, 0x6, 0x1612cdaf, 0x10000, 0xf5, 0x8, 0x91, 0x52ea, 0x5, 0x7fffffff, 0x10, 0x7, 0x1, 0xff, 0x9, 0x1709, 0x396c, 0x8, 0x100, 0x7f, 0x9, 0xc, 0xf6dc, 0x800, 0x5, 0x7, 0x8, 0x7f, 0x3, 0xe3ef, 0x6, 0x2e8, 0x9, 0xf36, 0x5, 0x8e, 0x7fff, 0xa, 0x8, 0x0, 0x2, 0xb, 0xffffffff, 0x6, 0x24000, 0x1, 0x1, 0x8fd3, 0x8, 0x1, 0x9, 0x1, 0x101, 0x8, 0x2, 0x6a11, 0x0, 0x9, 0x77, 0x8, 0x10000, 0x1, 0x0, 0x8, 0x9, 0x400, 0x3, 0x2, 0xa, 0xac4, 0x8000, 0x8, 0x2, 0x81, 0x1, 0x6, 0x3, 0xd3, 0x2, 0x5, 0x6, 0x4, 0xff, 0x5, 0x200, 0x6b96, 0x100, 0x63, 0x3, 0x7f, 0x1, 0x2, 0x1344, 0x10000, 0x908, 0x200, 0x76a8cdef, 0x2, 0x3, 0x5, 0x6, 0x8, 0x3, 0x4, 0x400, 0x10001, 0x14000, 0x2, 0x0, 0x5, 0x7, 0xb, 0x5, 0x5, 0xffffffff, 0x2, 0x8, 0x5, 0x5, 0x9a, 0x8, 0xfff, 0x5, 0x6, 0x4, 0x2, 0x6, 0x400, 0x6, 0x2, 0x4, 0x1, 0x8, 0x1, 0x32, 0x9e, 0x7, 0x2000, 0x0, 0x339, 0x6, 0x5f0c, 0x5, 0x6b, 0x8347, 0x6, 0x0, 0xfffffff8, 0x10, 0x8, 0x8, 0x7fff, 0x8, 0x6, 0x46, 0x5, 0x400, 0x9, 0xc8, 0x3, 0x2, 0x9, 0x7, 0xffff, 0x5, 0x617e0fcc, 0x2, 0x1, 0xfff, 0x7fff, 0x7, 0x0, 0x7, 0x101, 0xa044, 0x1, 0x3, 0x8, 0x1, 0x9, 0xf44, 0x2, 0x787, 0x7, 0x4, 0x9, 0x5, 0x7ef, 0x7fffffff, 0x7, 0xff, 0x1c, 0x2, 0x44, 0x6, 0x4, 0x5af, 0x1, 0x7, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffe, 0xbbb5, 0x8, 0xfa, 0x96229a51, 0x4, 0x2, 0x0, 0x9, 0x3, 0x7, 0x8001, 0x2, 0x3, 0x5, 0x6, 0x5, 0x9, 0x10001, 0xe, 0x469, 0xffffff01, 0x1, 0x401, 0x6, 0x4, 0xfffffff9, 0x40, 0x0, 0x2, 0x7, 0xd0, 0x80, 0x62, 0x8, 0x10000, 0x4, 0x4, 0x4, 0x4, 0x200, 0x3, 0x0, 0xa3, 0x7, 0x6, 0x2, 0x1, 0x0, 0x80, 0x7, 0x8, 0x8, 0xfff, 0x9, 0x1, 0x0, 0x7, 0x6, 0x1, 0x2, 0x0, 0x9, 0x7f, 0x12d, 0x9, 0x9c, 0x141a, 0x3f800000, 0x9, 0x7fff, 0xff, 0x7ff, 0x9, 0x6, 0x5, 0x1, 0x3, 0x3, 0x3, 0x0, 0x4a, 0x5, 0x4, 0x10, 0xb, 0x7ff, 0x3ff, 0x5, 0x6, 0x6e1, 0x3, 0x9c42, 0x4, 0xfffffff7, 0x10001, 0xffff, 0x4, 0xffff, 0x0, 0xd, 0xe93, 0xfffffffe, 0x6, 0x6, 0x10001, 0xf7d, 0xffffffff, 0x79, 0x38e3, 0xe, 0x8, 0x9, 0x7, 0x4a, 0x9, 0x1, 0xcb, 0x81, 0x3, 0x1ff, 0x305, 0x80000001, 0xc, 0x7, 0x2, 0x3, 0xa66, 0xf, 0x9, 0x6, 0x17, 0xfcf0, 0x291, 0x4, 0xffff0db4, 0x9, 0x7b83, 0x7fa3, 0xffff, 0x2, 0xe, 0xcf2, 0x7, 0x2, 0x5, 0x4, 0x4b, 0x5, 0xffffffff, 0x3, 0x7, 0xfffffffc, 0x81, 0xffffffff, 0xe000, 0x7ff, 0x0, 0x3, 0x5, 0x5, 0xffffffff, 0x101, 0x8bed, 0x68, 0xfffffffb, 0x10000, 0x6, 0x2, 0x7, 0x400, 0x32, 0xbce, 0x7fffffff, 0x2, 0x9, 0x9e, 0xe, 0x80000000, 0x400, 0x1, 0x5, 0xffffff87, 0x9, 0x9085, 0x8000, 0xf9, 0x2, 0x8, 0x0, 0x200, 0x3, 0x1ff, 0x9, 0x6, 0x1, 0x0, 0x1, 0x2, 0x80, 0x9, 0xfc, 0xffff9da9, 0xc8, 0x10001, 0x2, 0x9d1, 0x7dd8, 0x80000001, 0x3, 0x5, 0x1, 0x1, 0x0, 0x6ab, 0x7, 0x80000001, 0x9, 0x1, 0x2, 0x6, 0x2, 0x8001, 0x2, 0xfff, 0xf6b7, 0x9, 0x4000000, 0x8, 0xffff, 0x8, 0x6, 0x31, 0x7, 0x26941bc, 0x1, 0x65, 0x7, 0x4, 0x401, 0x2, 0x4, 0xfffffffb, 0x8, 0xfffffe00, 0x4, 0x2, 0xfff, 0x5, 0x8, 0x1, 0xb, 0x10001, 0x2, 0x5, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x28, 0xa, 0x4570, 0x7fff, 0xc, 0x3ff, 0x7, 0x6, 0x3, 0x4, 0xfd98, 0x4, 0x4, 0x6f, 0xc00000, 0x1, 0x4, 0x7, 0x1, 0x10001, 0x1, 0x3, 0x89, 0x8, 0x3ff, 0x0, 0xfffffff8, 0x8, 0x2dd1, 0x1, 0x3, 0x81, 0x4, 0x6, 0x5491, 0xfffffffa, 0x4, 0x9, 0x0, 0x8000, 0x7, 0xac, 0xf, 0x5, 0x6, 0x3919, 0xf, 0x8000, 0x0, 0x9, 0x80, 0x0, 0x0, 0xc7b9, 0xc3, 0x7, 0x1, 0x7, 0x1, 0x3, 0xd, 0x7, 0x26, 0x5, 0x6, 0x8, 0x6, 0xf, 0x5, 0xfff, 0x1, 0x80, 0x43, 0xffffb33e, 0x3ff, 0xe8, 0xfffffff8, 0x9, 0x3ff, 0x1000, 0xb, 0x6, 0x1000, 0x1, 0x3ff, 0x9, 0x9, 0x1, 0x4, 0x101, 0xfffffff8, 0x40, 0xd, 0x0, 0x5, 0x400, 0x9, 0x8, 0x4, 0x1, 0x7, 0xdab, 0x1ff, 0x0, 0x10, 0x7, 0x8, 0x7, 0x7, 0x0, 0xe07, 0xd15, 0xa0, 0x1ff, 0x101, 0x8, 0x1, 0xd3a, 0x4, 0x7, 0x1f22, 0x8, 0x7cf, 0x6, 0x7, 0x400, 0x8, 0x9, 0x5978, 0x0, 0x9, 0x8ada, 0x8, 0x3, 0x7, 0x81, 0xbb, 0x8, 0x3, 0x509, 0x8001, 0x6, 0x401, 0xddd7, 0x2, 0x9, 0x7, 0xff, 0x0, 0x8000, 0x8, 0x8, 0x1000, 0x6988083d, 0x80000000, 0x7eb1, 0x8f, 0xffff, 0x7, 0x40, 0xd, 0xa, 0xf, 0x3, 0xce11, 0x0, 0x9, 0x2, 0x1, 0x6, 0x9, 0x8, 0x2, 0x0, 0x912, 0x9, 0x1, 0x6, 0x8000, 0x9, 0x7fff, 0x6, 0x4934, 0x80, 0x8, 0x3, 0x5, 0x5, 0x5, 0xfffffff7, 0x1ff, 0xb, 0x6, 0xc, 0xffffffff, 0x91e1, 0x7, 0x4, 0x3, 0x3, 0x2, 0x8, 0xf6a7, 0x9, 0x6, 0x7f, 0x7, 0x5, 0xaf92, 0xb2, 0xdce8, 0x3, 0x3aff, 0x7f8000, 0x3, 0x9, 0x3, 0x1, 0x0, 0xffffffc0, 0x40000, 0xcda, 0x4, 0x3, 0x7791, 0x0, 0x7fffffff, 0x6, 0x3ff, 0x7, 0x1000, 0xa7f, 0xe, 0x400, 0x6, 0x3, 0x5, 0xe2, 0x101, 0x0, 0x1, 0x9, 0x8, 0xd0a3, 0x8, 0x4, 0xe, 0x10, 0x5, 0xb, 0x8, 0x2, 0x1, 0x3, 0x800]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x63ee2207}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0xd341}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfff, 0x544fd41f, 0x5, 0x0, 0xfffffeff, 0x25, 0x6, 0x3, 0x2, 0x0, 0xb, 0x400, 0x6, 0x800, 0xa, 0x4, 0x1000, 0x41c3, 0x3, 0x8, 0xfffffff0, 0x7, 0x6, 0xe9a, 0x2, 0x5, 0x2, 0x6, 0x7fff, 0x2, 0x0, 0xa, 0x520c, 0x5, 0x7, 0x7fffffff, 0xdd, 0x3, 0x7, 0x1, 0x7, 0x9, 0x800, 0xfff, 0x2, 0x5, 0x8, 0x7, 0x80, 0x1c416fd7, 0x7, 0x2, 0x9, 0x5, 0xfff, 0x0, 0x3, 0x404, 0x3, 0x0, 0x3e, 0x9, 0x9, 0x9, 0x8f, 0x0, 0x100, 0x1, 0x5, 0x6, 0x8, 0x4, 0xffffffe2, 0xf, 0x8, 0x5, 0x81, 0x9, 0x8000, 0x6, 0x4f, 0x6, 0x43a, 0x8, 0x6, 0x0, 0x6, 0x3, 0x0, 0x3, 0x6, 0x3, 0x0, 0x0, 0x5, 0x6, 0x0, 0xc92, 0x401, 0x7d, 0x5, 0x10, 0x8, 0xe, 0x800, 0xff, 0x507, 0x7, 0x5d4a, 0x6, 0x0, 0x7f, 0x9, 0x651b, 0x6, 0x3, 0x0, 0x4, 0x401, 0x3b, 0x5, 0x400, 0x5, 0x80000001, 0x80, 0x6, 0x213bf045, 0x1418, 0x3, 0xbe45, 0x7fff, 0x6, 0x200, 0x1, 0x3, 0x800, 0x9, 0xff, 0x4b6, 0x6, 0x9, 0x9fcb, 0xfffffff8, 0x1000, 0xfffffca0, 0x80, 0x10001, 0x0, 0x1, 0x5, 0x9, 0xfffffffa, 0xc5, 0x7f, 0x1, 0xd8, 0x0, 0x146, 0x3, 0x21, 0x9, 0x1, 0x8, 0x6, 0x101, 0xffff, 0x5, 0x4, 0x4, 0x3, 0x9, 0x7, 0x80000001, 0x0, 0x8, 0x4, 0x9, 0x3, 0x80000001, 0x7, 0x5c, 0x4, 0xe5cf, 0x4, 0xacd, 0x2, 0x9, 0x400, 0x6f, 0xe3dd, 0x7, 0x7fffffff, 0xffffff00, 0x3, 0x3ff, 0xcd, 0xe, 0x2, 0x5, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0xc, 0x39, 0x8000, 0x0, 0x3, 0x8, 0x4, 0x75d, 0x32, 0x8, 0x9, 0x101, 0xb, 0x4, 0x7fffffff, 0x7, 0x9, 0x0, 0x0, 0x8, 0x101, 0x3, 0x1ff, 0x9, 0x4, 0x9, 0x2, 0x7, 0x8, 0x2, 0x100, 0x81, 0x2, 0x0, 0x400000, 0x6, 0x800, 0x5, 0x9, 0x72a, 0x7, 0x2, 0x10, 0xfffff33d, 0x8, 0x0, 0xc000, 0x5f22, 0x10, 0x9, 0x8, 0x4, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x1, 0x7fffffff, 0x5, 0x4, 0xfff, 0x4, 0x38df, 0x1, 0x9, 0x0, 0x80000001, 0xb531, 0x5, 0xfff, 0x0, 0x868, 0x9b, 0x81, 0x7ff, 0xff800000, 0x6, 0x54, 0x64, 0x3, 0x6, 0x6, 0x9, 0xdef2, 0x9, 0x5, 0x81, 0xdfc4, 0x8, 0x1, 0x4, 0x8, 0x5, 0x1, 0x8001, 0x7ff, 0x4, 0x4, 0x2, 0x4, 0x6, 0x80000000, 0x800, 0xfffff000, 0x7, 0x68d2, 0x8, 0x7, 0xf, 0xfffffff6, 0x757, 0x754, 0x5, 0x7, 0x0, 0xe82, 0x2, 0x6, 0x7db5ff20, 0x7fffffff, 0x7d88, 0x7ddf, 0x940c, 0x9, 0xff, 0x400, 0x5, 0x524d, 0x6ae7, 0x1, 0x400, 0x7, 0x53f95e3e, 0x4127e6a8, 0xfffff8ce, 0x7, 0x0, 0x5, 0xc631, 0x7ff, 0x7, 0x10, 0x3, 0x5, 0x8, 0x8001, 0x1, 0xfffffff0, 0xfffffffc, 0x800000, 0x10, 0x9, 0x80000000, 0x4, 0x1, 0xe, 0x5, 0x5, 0x0, 0x80000000, 0xd71c, 0x6, 0x885, 0x6, 0xe04, 0x5, 0x9, 0x8b2f, 0x101, 0x25fadb3e, 0x1, 0x8000, 0x7bd, 0x8, 0x83, 0x6, 0xfffffff7, 0x3ca7, 0x7e2, 0x9, 0x4, 0x7, 0xb, 0x80000001, 0x1, 0xe, 0x80000000, 0x63, 0x7f, 0x6, 0x0, 0x0, 0x4, 0x1, 0x6, 0x2, 0x5bdf, 0xfffffffd, 0x1aa, 0x8, 0x5, 0x2, 0x2, 0x6, 0x5, 0xc, 0x6, 0x5, 0x1, 0x8, 0x9, 0xbc, 0xa, 0xffff, 0x0, 0x3, 0x8, 0x9, 0x5, 0xfff, 0xff, 0x1, 0x2c, 0xf, 0x0, 0xffffffff, 0x9, 0x6, 0xc9f, 0x10000, 0x9, 0x7, 0x8, 0x5, 0x2, 0xeb, 0x2, 0x7, 0x7, 0x1, 0x8, 0x0, 0x3, 0xf, 0x250, 0xfeb, 0x401, 0x1600, 0x0, 0x9, 0x7, 0x9, 0x2, 0x4, 0x40, 0x3, 0x3, 0x3, 0x0, 0x0, 0xa, 0xae, 0x9, 0x8000, 0x5, 0x6db137bb, 0x8001, 0x7, 0xf99, 0x0, 0x8, 0x2, 0x4, 0xa970, 0x10, 0x5, 0x24, 0x2, 0x86e, 0x800, 0x2, 0x164, 0x4, 0x27b87d0b, 0x5, 0x8, 0x200, 0x6, 0x200, 0x6, 0x6, 0x6, 0x6, 0x0, 0x46a, 0x5, 0x401, 0x9f0a, 0x1, 0x1, 0x9, 0x1a0, 0x544b3157, 0x1800, 0x8000, 0xfcc, 0x10001, 0x1, 0x80000000, 0x0, 0x6]}]]}, {0x80, 0x6, "0836a66e6042db9c554c4500d02adc273155565d571f639ccbee488d71085df6a0bde22fe48d81d4033cc374eac7424b386344a828a03b1243ce8601258eb8823be6b700e042b09e35827bd0a84cd20153f8f0ec72d6154af13870fc97ff1c756582327039c216126e8b07253d06fa887f0d78d69765a0e9f8d2cc08"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_nat={0x1a4, 0x4, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x6, 0x7, 0x0, 0x6}, @empty, @multicast1, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xfff, 0x4, 0x4, 0xfffff000}, @private=0xa010102, @private=0xa010102, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3ff, 0x3850, 0x8, 0x3, 0x7ff}, @loopback, @dev={0xac, 0x14, 0x14, 0x22}, 0x19678f07ca031c0f, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x10001, 0x7f}, @empty, @dev={0xac, 0x14, 0x14, 0x24}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x97f9, 0x5, 0x4, 0xe, 0xe6}, @multicast1, @rand_addr=0x64010102, 0xffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x20, 0x9, 0x4, 0x381, 0x6fa0}, @rand_addr=0x64010100, @multicast2, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0xe, 0x7, 0xffffff2c, 0xa40}, @private=0x3, @multicast2, 0xffffff00, 0x1}}]}, {0x64, 0x6, "8dade3d7e7358c484c9539910af946d3e51747047171e950379515c8eb5269d01acd5ed2175ab311fc43a485ffde51b757df79ef132b8fc533f83b8344fb3c793a2f9282ff2d58eb88db42dff033ff0cf30af567be240c345850708b781be8e1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_nat={0x107c, 0x1b, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x9, 0x0, 0x6, 0xbc}, @multicast2, @rand_addr=0x64010100, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x5, 0x1, 0x7, 0x6}, @local, @rand_addr=0x64010102, 0xff000000, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_tunnel_key={0x154, 0x12, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}]}, {0xf9, 0x6, "6be494b8b36da7cf5bacc478013761c1e6afcde38592570daf149dc30a834122f11b2f8930fce4b56fdf0a77e72957aa09e8e1625f184911a785931ada53f5b22a3b48ff6d90318522ab91ffc5419b799210338e6338bb37692c0005352fd306cdbcbb3bc679deaddbeeebb536897352ac31eede5f8b0d92951aac79c18481878b6feecacc6c806eb39a091842f402c5350dc4a412d9b77ac3ef91529f1d19ca8d69485cfc5cfc71b64313fb3c2d33dd2fd9e6f47ee05e0c9e1e5a2fb2a580a67fe23454fe91163772501b0e483b4364ea32ff9f8d709fbd5898a43a909c8e0ff55a0229ceefd11d5f063519eb4c0a17905cf3f119"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbedit={0x134, 0x17, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}]}, {0xff, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x1d48, 0x1, [@m_skbmod={0xbc, 0x5, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0x1, 0x1, 0x5, 0x7316}, 0xb}}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x64, 0x6, "5f5ddf4deb68ddd0b33379973abcd54b0c740716d4b93b8a3ad7df970ea77689c309151a7aa936b8818ab80badce8e07fb196a70b50fb3a8f5b5bac545051f2281e87b0b49fa2dd736b2d798d436e43a7c65a6dd7124a66da1010cc910a2b5ed"}, {0xc}, {0xc, 0x8, {0x7, 0x2}}}}, @m_police={0x1a10, 0x13, 0x0, 0x0, {{0xb}, {0x1964, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xffffffff, 0x1ff, 0x8, 0x3ff, 0x5, 0x1000, 0xffff, 0x9, 0x0, 0x7, 0x3, 0x80000001, 0xc6, 0x1, 0x800000, 0xa, 0x8, 0xff1, 0x7, 0x3ff, 0x2, 0x6, 0x9, 0x28e1, 0xc, 0x7f, 0x400, 0xfffffffa, 0xffffffff, 0x10001, 0x8, 0x6, 0x8, 0x6, 0x5, 0x8, 0x7ff, 0xd8, 0x7, 0x9c1, 0x6, 0xfffffff8, 0xfffffffe, 0x200, 0x4, 0xfffffc00, 0x6, 0x70000000, 0x2, 0x0, 0x0, 0x2de, 0xfff, 0x7, 0x8, 0x6, 0xbb3, 0x5, 0x5, 0x9, 0xaceb, 0x6d5e0e7e, 0x1, 0xe, 0x7ff, 0x3, 0xfff, 0x3, 0x6, 0x80000001, 0x5, 0x101, 0x9, 0x7f, 0xc5, 0x401, 0x9, 0x10001, 0x80, 0xd, 0x5, 0x2, 0x2, 0xb2d, 0xffff, 0xc9b0, 0x81, 0xfffffffa, 0x1, 0x1000, 0x2, 0x48, 0x0, 0xb8, 0x5, 0x82, 0x7ff, 0x2, 0x7, 0x8000, 0x6, 0x990, 0xffffffff, 0xa, 0x2, 0x8, 0x1, 0x0, 0x9, 0x1, 0x2, 0x40, 0x6, 0x1, 0x7, 0x7, 0xc000000, 0x5, 0x8001, 0x0, 0x95390, 0x9, 0x5, 0xc0c, 0x8, 0x2, 0x23, 0x8, 0x9, 0xfffffff9, 0x6, 0x6, 0x75f8, 0x80, 0xb, 0xffffff80, 0x8, 0xe, 0x3, 0x4, 0x9, 0x4, 0x6, 0xcfd3, 0x94ad, 0x638, 0x30000000, 0x6, 0xfffffffe, 0x7, 0x20000000, 0xfff, 0x14ecbe2b, 0x6, 0x3, 0x5, 0x7, 0x6, 0x8, 0x6, 0x6, 0xd379, 0xaea8, 0x8000, 0x80000000, 0x0, 0x9, 0x7919, 0xbb9, 0x43b, 0x3, 0xf3c, 0x7fff, 0x2, 0x1000, 0x7f6e, 0xbe0, 0xc023, 0x6, 0xbd7, 0x94, 0x7, 0x1, 0xfffffffa, 0x6, 0x9, 0x1, 0x4, 0x3, 0x25, 0x1000, 0x100, 0x6, 0x0, 0xa, 0xfffffffc, 0x0, 0x9, 0xe5, 0x3, 0x6, 0x5, 0x5, 0x6, 0x9, 0x60a6, 0x1, 0x2, 0x0, 0x0, 0x9, 0xffffffff, 0x6, 0x3, 0xffff8000, 0x6, 0x7, 0x6, 0x9, 0xfffffffb, 0x1, 0x3, 0x67, 0x8, 0x401, 0x1, 0x3, 0x7, 0x200, 0x6, 0x5, 0x81, 0x3, 0x71, 0x8, 0x3, 0xfffffff8, 0xfffffff8, 0xc, 0x7, 0xa000, 0xffffffff, 0xe, 0x800, 0x7fffffff, 0x71, 0x101, 0xe96, 0xdde1, 0xc, 0x0, 0x8, 0xd0f, 0x4, 0x800]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7f}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x9, 0xfffffffa, 0x8, 0x1, 0x80, 0x5, 0x6, 0x8, 0x0, 0x6, 0x2, 0x4, 0xc2, 0x10, 0xf4c, 0x3, 0x4f28da40, 0x7, 0x8, 0x4, 0x1ff, 0x7, 0x1, 0x8, 0x9, 0x2, 0x4, 0xfffffffc, 0x1, 0x6, 0x8, 0x6, 0x9, 0x1, 0x3, 0xb47, 0x4, 0xb58, 0x7, 0x1, 0x4, 0x2, 0x4, 0x1, 0x8, 0xffff, 0x6, 0x8, 0x7ff, 0x8001, 0xd6a, 0x0, 0x2, 0x0, 0x1, 0x689a3285, 0x4, 0x6, 0x401, 0x1, 0x968, 0x3, 0x7, 0x80, 0x9, 0x7, 0x1, 0x2, 0x0, 0x7, 0x100, 0x8001, 0x57, 0x6, 0x0, 0x6, 0x7, 0x9, 0xc0000, 0x5, 0x8, 0xfffffffe, 0x0, 0x7, 0x9, 0xa, 0x1ff, 0x5, 0x800, 0x3, 0x7fff, 0xc1f, 0xf, 0x0, 0x8001, 0xffffffff, 0xa882, 0x4, 0x9, 0x7221, 0x828, 0x8, 0x50, 0x9, 0x7fff, 0x6, 0x7, 0x3, 0x1000, 0x2, 0xa7, 0xb, 0x81, 0x10001, 0x7, 0x9, 0x8, 0x5, 0x1, 0x6550, 0x4, 0x10, 0x5f17e587, 0x8, 0x0, 0xc5b, 0x5, 0x0, 0x401, 0x5, 0x7, 0x6, 0xfffffe01, 0x211, 0xc, 0x9, 0x8001, 0x1, 0x3, 0x2, 0x2, 0x7, 0x86, 0xd3e5, 0x9, 0x3000000, 0x7fff, 0x3, 0x9, 0x100, 0x72, 0x80, 0x7ff, 0x4, 0x4, 0x6, 0x6, 0x1, 0x6, 0xff, 0x3, 0x1, 0x9, 0x9, 0x43d, 0xffffff36, 0x4, 0x7, 0x1000, 0x7fffffff, 0x81, 0x9, 0x2, 0x2a, 0x1, 0xde, 0x3, 0x3, 0xc, 0x3, 0x8, 0x5, 0x6, 0xde35, 0x8, 0x6, 0xfffffff8, 0x7, 0x9, 0x1, 0x3, 0x7, 0x0, 0x3, 0xba56, 0x9, 0x80000000, 0x4, 0x3, 0xfffff8d0, 0x2000000, 0x4, 0x100, 0xad, 0x1, 0x2, 0x4, 0xffffffff, 0xc2fb, 0x7, 0x0, 0x10000, 0x8f, 0x6, 0x3d7, 0x6, 0x7, 0x2, 0x5e, 0xa, 0x59deebb3, 0x8, 0x3, 0x2, 0x2, 0x3f, 0x9, 0xffff, 0x7, 0x3, 0x9, 0x1, 0x7c, 0x1, 0x4, 0x4, 0x8, 0xc, 0x2, 0x80000001, 0x52ce, 0x101, 0x3ec0000, 0xd, 0xfffffff7, 0x6, 0x10000, 0x7, 0x2, 0x6, 0xfffffdf5, 0x80, 0x0, 0x0, 0x9]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x7fff}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x1, 0x8000, 0x26, 0x0, 0x3, 0x80000000, 0xb92a, 0x5, 0x401, 0x5, 0x7, 0x6, 0xf, 0x4, 0xffffffc0, 0x80000001, 0x0, 0x1ff, 0x40, 0x5, 0xa, 0x9, 0x7fff, 0xe5, 0x3ff, 0x9, 0xffffffff, 0x4, 0x7b4a0719, 0x80000001, 0x4, 0x4, 0x3fff8, 0xd506, 0x0, 0x1a8, 0x8c, 0x9, 0x5, 0x3, 0xffffff01, 0xfffffffe, 0xd, 0x9, 0x4, 0x10001, 0x7, 0x1, 0xfd, 0xd96, 0xc3, 0x8, 0x101, 0x1, 0xe, 0x7, 0x9, 0x1ff, 0x400, 0x9, 0x9, 0x7f, 0x8, 0x604, 0x6, 0x6, 0x2, 0x6, 0x3ff, 0x1, 0x9, 0x14d, 0x7, 0x2, 0x80f2, 0x9, 0x4, 0x0, 0xa52, 0x3, 0x0, 0xd, 0xc3, 0x3, 0xaf6, 0x2, 0x9, 0x8, 0x6, 0x9, 0x4, 0x5, 0xfff, 0x2, 0x3, 0x8, 0x6, 0x80000001, 0x5, 0x0, 0xc1d7, 0x80000000, 0x800, 0x2, 0x2, 0x0, 0x42d3, 0x4, 0x2, 0x4, 0xfffffff4, 0x5, 0x5, 0x4, 0xffffffff, 0x1, 0x455, 0xf4a, 0x5, 0xfffffc01, 0x6, 0x9, 0x4, 0x3, 0x7fff, 0x3, 0x2, 0x401, 0xffffffd3, 0xfffffff8, 0x9, 0x8, 0xfffffff9, 0x7fff, 0x2, 0x2, 0x1, 0x26, 0x0, 0x4, 0x3, 0x5, 0x5, 0x8, 0x12ee, 0xa242, 0xffff, 0x6, 0x1, 0x7, 0x800, 0x6, 0x590d, 0x81, 0xfffffffd, 0x5, 0x10d1, 0x4, 0x3, 0x3, 0x6, 0x5, 0xaf9, 0xe, 0x5, 0x8, 0xa, 0x1aa, 0x82, 0x80000001, 0x5da1e07f, 0x7, 0x2, 0x9, 0x1, 0xfffffffb, 0x6, 0xf, 0x6, 0x7, 0x80, 0xee, 0xb, 0x5, 0x2, 0x7, 0x172, 0xffffff2a, 0xc0000000, 0x9355, 0x7, 0x7fff, 0x8, 0x8, 0x6, 0x3, 0x6, 0x7, 0x5, 0xd66a, 0x2, 0x7f, 0x1000000, 0x7fff, 0x6, 0x6, 0x9, 0x4, 0x7, 0x0, 0x7, 0x48be, 0x9, 0xe9, 0x1, 0x4, 0x6, 0x0, 0x1, 0x3, 0x9, 0x9, 0xff, 0xfffffbff, 0x7, 0xff0000, 0x3, 0x8, 0x1, 0xb50a, 0x4bd5, 0x9, 0x7, 0x0, 0x4, 0x1a4, 0x2, 0x7fffffff, 0x10001, 0xec, 0x56e8, 0x7ff, 0x9, 0xc000, 0x9, 0x401, 0x80000001, 0x100, 0x9e, 0xd2, 0x9, 0xc558, 0x2, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xeb1c}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6a4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x30c0}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xd}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x4, 0x3, 0xd, 0xc, {0xcc, 0x3, 0x3308, 0xff}, {0x4, 0x3, 0x8c, 0x9, 0x7ff, 0x1}, 0x28, 0x5f2bf7b6, 0x1}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xfffffff9, 0x1, 0x6, 0x7, 0x7, 0x2, 0x4, 0x1, 0xfff, 0x10001, 0x8, 0x9, 0x400, 0xa, 0xc, 0x4, 0x3865, 0x7e1, 0x1, 0x1, 0xe, 0x0, 0x9, 0x9, 0xd, 0x4, 0x6e, 0x3, 0x89c, 0x4, 0x4, 0x1, 0x2, 0xec, 0x2, 0x80000001, 0x9, 0xaa, 0x9, 0x60000, 0x5, 0x941, 0x3, 0x1, 0x4, 0x8, 0x6, 0x0, 0x5b, 0x2, 0x0, 0x80000000, 0xca, 0x5, 0x4, 0x0, 0x2, 0x4, 0x8, 0x6, 0x2, 0x3, 0x6, 0x1, 0x0, 0x1, 0x866, 0x1, 0x1, 0x0, 0x3, 0x800, 0x2, 0x7f, 0x10000, 0x80000001, 0x1, 0x1ff, 0xfffffff9, 0x1, 0x2, 0xd1f, 0x7fff, 0x10, 0x12, 0x3, 0x5c84eaa, 0x200, 0x1, 0x0, 0x6, 0x2, 0xffffffff, 0x1, 0x7, 0x100000, 0x4, 0xc8, 0xc658, 0x8, 0x60, 0x0, 0x9, 0x8, 0x17, 0x3, 0x1000, 0xfff, 0x3, 0x9, 0x1c, 0xe6af, 0x3, 0x401, 0xf, 0x9, 0x101, 0x10001, 0x4, 0x7, 0xe, 0xf, 0xffffffff, 0x2, 0x998, 0x100, 0x5, 0x3, 0xfffffbff, 0x0, 0x1, 0xf3, 0x1, 0x3, 0x6, 0xe35f, 0xffffffff, 0x40, 0x1, 0x5, 0x6, 0x7, 0x0, 0x0, 0x8001, 0xa, 0x5, 0x5, 0x721, 0x90, 0xd, 0x4e, 0xe, 0x80000001, 0x3, 0x4, 0x9a, 0x5, 0x6, 0x10001, 0x8, 0xa4, 0x7ff, 0x1, 0x2, 0xff, 0xcbfe, 0x0, 0x1, 0x9, 0x4, 0x6, 0x3, 0x2bf1, 0x895c, 0xd, 0x8, 0x7, 0x1, 0x2, 0x3a5, 0x67, 0x90, 0x7ff, 0xc9, 0x2, 0x0, 0x9, 0x2, 0x401, 0x8, 0x1, 0x4257, 0x3e18, 0x5, 0x3, 0x8, 0x10, 0x1e, 0x1, 0x80, 0x0, 0xfffffffa, 0x8, 0x2, 0x1, 0x0, 0xfffffffb, 0xfffffffa, 0x800, 0x1, 0x8, 0x3, 0x7, 0x6, 0x7, 0xfffffffe, 0x1, 0x9, 0x4, 0x8, 0x80000001, 0x80000000, 0x0, 0x7, 0x1, 0xa53, 0x6, 0x10000, 0xc426, 0x80000000, 0x6, 0x9, 0xc, 0x1ff, 0xfff, 0x1d19, 0x2, 0x8, 0x1, 0x6, 0x0, 0x3, 0x8, 0x7, 0xdc, 0x7, 0x6, 0x6, 0x10, 0xfffffffa, 0x7a, 0x6, 0x101, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xd}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x200, 0x4, 0x46, 0xffff0001, 0x2, {0x40, 0x2, 0x7, 0xd, 0x0, 0x3}, {0x6, 0x2, 0x7, 0x1, 0x4, 0x6}, 0x9, 0x0, 0x5}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x6, 0x9, 0x5, 0x0, 0xbbf, 0xe991, 0x3, 0x6, 0x7, 0x1, 0x80000001, 0x5, 0x7, 0x9, 0x4, 0x5, 0x4, 0x9, 0xffffffff, 0x5, 0x80000, 0x4, 0xfffffff9, 0x101, 0x4, 0x4, 0x3, 0x3, 0x7fffffff, 0x9, 0x4, 0x6, 0x10001, 0xfffffffd, 0x7ff, 0x0, 0xb32, 0x6, 0x5cd000, 0x401, 0x101, 0x5, 0x1, 0x302f, 0x8d, 0x7, 0x8, 0x6, 0x1ff, 0x8, 0x0, 0xb, 0x0, 0x0, 0xad, 0x95, 0x1, 0xa, 0x74f, 0x5, 0x0, 0x100, 0x5, 0x9, 0x0, 0xc, 0x10000, 0x400, 0x4, 0x7, 0xb, 0x3, 0xff, 0x2, 0x7, 0x9, 0xeb, 0x5, 0xa, 0x8, 0x9, 0x6, 0x4, 0x9, 0x0, 0x6, 0x8, 0x8, 0x4, 0x9, 0x3ff, 0xfffffff7, 0x7, 0x9, 0xfffffffb, 0x1, 0x8d, 0xc1d, 0x9923, 0x1, 0xffffe018, 0x7, 0x10001, 0x10, 0x5, 0x5, 0x80, 0x7, 0x6, 0x5, 0x8, 0x1000, 0x1, 0xed, 0x0, 0x9, 0x6fb, 0x0, 0x80000001, 0x1, 0x5, 0x0, 0x4d, 0x6, 0x7ff, 0x4, 0xff, 0x8, 0xb, 0x3, 0x10, 0x0, 0x9, 0x8, 0x7, 0xe81, 0xa, 0x8, 0x8, 0x1, 0x1000, 0xfffffffb, 0x1000, 0x5, 0x8, 0x401, 0x3ff, 0x5, 0x4, 0x8, 0x16, 0x2, 0xf91, 0x7a2, 0xd, 0x2, 0x1, 0x6, 0x40, 0x1, 0x0, 0x0, 0x756, 0x7, 0x6, 0xffff, 0x2, 0x0, 0x0, 0x6, 0xa, 0x5, 0x4, 0x6, 0xc, 0x4, 0x5, 0x101, 0x6, 0x120, 0x3, 0x309, 0x7, 0x10001, 0x101, 0x0, 0x6, 0x10, 0x40, 0x5, 0x2, 0x0, 0xb6, 0x400, 0x4, 0x1, 0xfffffffa, 0x0, 0x2a, 0x4, 0x6, 0x10, 0x3, 0xfffffff9, 0x401, 0x9, 0xf, 0x4, 0x8, 0x3, 0xe, 0x0, 0x10, 0x7ff, 0x2800, 0x100, 0x8, 0xfffffff9, 0xf, 0x9, 0x6, 0x5, 0x7, 0x9, 0xb, 0x926, 0x3, 0x0, 0xd5fd, 0x6, 0xfffffff6, 0x0, 0x80000000, 0xffff, 0x5, 0x6, 0x5, 0x4, 0xc0f0, 0x40, 0x38, 0x3e, 0x3, 0x0, 0x100, 0xc9a, 0xffff, 0xde33, 0x77, 0x2, 0xfffffff6, 0x7, 0x2, 0x7c1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x5, 0x69d2da7c, 0x0, 0xd92, {0x3, 0x0, 0x1, 0x4, 0x3, 0x9959}, {0x4, 0x1, 0x4, 0x71, 0x0, 0x8}, 0xfff, 0x4, 0x36c9}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x3ff, 0x5, 0x1, 0x9e, 0x8, 0xe2, 0xc, 0x6, 0x8001, 0x3, 0xfffffff7, 0x1000, 0x3, 0x6, 0x6, 0x4, 0x80, 0xd4, 0x7, 0x6, 0x0, 0x6, 0x5, 0x7, 0x8000000, 0x8, 0x7fffffff, 0xfffffff8, 0x9, 0x5, 0x9, 0x5, 0x3, 0x2dfa0363, 0x1, 0x650, 0x3, 0xff, 0x1, 0x1, 0x2, 0xff, 0x0, 0x5, 0x5, 0x3, 0x2, 0x7a43, 0x2, 0x9, 0xba66, 0xd80, 0x1, 0xffff39fe, 0x7, 0x3, 0x67a691e1, 0x5, 0x7, 0x6, 0x7, 0xffffff4b, 0x5, 0x3, 0xea, 0x8, 0x548, 0xffff7fff, 0x0, 0x8, 0x7fffffff, 0x8, 0x400, 0x9, 0x3, 0x8, 0x401, 0x0, 0x100, 0x6, 0x7, 0x6, 0x2, 0xf, 0x1, 0x1ff, 0xffffffe2, 0x7f, 0x2, 0x8, 0x17, 0x7, 0x80000000, 0x2, 0x7, 0x81, 0x2, 0x1, 0x4, 0x0, 0x5, 0xc3c, 0x9, 0x9, 0x5, 0x4, 0xfa, 0x7, 0x8, 0x2, 0xa4a, 0x1000, 0xff, 0x6, 0x7, 0x9, 0x6, 0x8, 0x101, 0x8, 0x2, 0x5, 0x5, 0x1373, 0x6, 0x3, 0x8, 0x9b74, 0x3, 0xa, 0x0, 0x5b1, 0x3875, 0xfffffff9, 0x3ff, 0x2, 0x8, 0x7dd0000, 0x0, 0x92e6, 0xfffffffd, 0x54f1, 0xd, 0x6, 0x5, 0x7, 0x18d17fde, 0x101, 0x8, 0x0, 0x3, 0x0, 0x3, 0x50f051c9, 0x98c, 0x2, 0x3, 0xfffffff8, 0x7, 0x81, 0x0, 0x4, 0x7, 0x4, 0x2, 0x57e9, 0x3, 0x5, 0x8000, 0x7, 0x7ff, 0x6, 0x9, 0x1, 0x9, 0x8, 0x1, 0xb, 0x7fff, 0x7fff, 0x10000, 0x9, 0xc, 0x451, 0x6, 0x2, 0x4, 0x8, 0x6, 0x2, 0x8f02, 0x1ff, 0x5, 0x800, 0xac7, 0x5, 0x8, 0xfffffffd, 0x40, 0xe2, 0x8, 0xa3, 0x5, 0x2, 0x1, 0x4, 0xfffffff4, 0x0, 0x4, 0x3, 0x7fff, 0xf, 0x7f, 0x0, 0x9, 0x8001, 0xce3, 0x2, 0x2, 0x4, 0x4, 0x8001, 0xf, 0x8, 0x9, 0xffffff7f, 0x3912, 0xe, 0x6a5c, 0x1ff, 0x40, 0x3, 0x0, 0x9, 0x3ff, 0x2, 0x1ff, 0x9, 0x9, 0x1ff, 0x7396d765, 0x7ff, 0xffffffff, 0x3, 0x8, 0x9, 0x8, 0x1, 0x7fff, 0x4, 0x5, 0x74, 0x80000000, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x40}]]}, {0x81, 0x6, "66bf56c5c845f97874e91b1349987e8f0ecc149ad37f221c926dc04f45a3247ec24cb97df048c830d091ab532f12d901997b073eb949202f008683e900560f321049d35b32c268e9355a4d37faeeea9780317db19ec78095c71baf22eabdacd222701ad67dbaea00eb299289475287b8a33a9430d342ff0a5a3fc28054"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_connmark={0x198, 0x6, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x537, 0x5, 0x4, 0x200, 0x6}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x6656, 0x7, 0x8, 0xb}, 0x3c0}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x8, 0xffffffffffffffff, 0x80000001, 0x1}, 0x400}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x401, 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x200}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x5, 0x2, 0x3, 0xb}, 0xe863}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x0, 0x8, 0x9, 0x7}, 0x9}}]}, {0xbf, 0x6, "56c3b4cce56f25cd4286ec426f3af1d7696acab7771bd82316d256d822bdb443cd96e44164a7119cb76e0ae4d2b08d42ed82fd3f7319bfdd202aa42575913f60685d5f78e5cb913e8068c3dd2bf7f1fdfb587a9632e0fabf88ec708701f1ba81f45fd8595e65671274029fa8e24606a22c5ed2e6906bdcbdb7054a96ca8c42162b345476c982ad08998438db7a3a8d1dddb2c9b73a871a590d79245383916bbdcb762a884c73a9b2b39e2df31e36c14489ff494052298249eb60e0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0xe0, 0xa, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x87f, 0x8, 0xffffffffffffffff, 0xb, 0x3}, @local, @broadcast, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xfff, 0x3, 0x9, 0x400}, @broadcast, @multicast2, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0x5b, 0x4, 0x2}, @local, @multicast2, 0xff000000, 0x1}}]}, {0x3f, 0x6, "12ba6c80fb6f2a17018837ff501c98e04adcaf163bc7c0761bb9c98584d5bd108798b43a2d939a822365396d83125140a730cc8e747820518bdf50"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x4a3c}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) (async) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r7 = socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) (async) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) (async) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000100)="ffdd5e7a0867aeb2eccbcf0e", 0xc}, {&(0x7f0000000140)="a79dfc104c6ce62c616e539004597e80c8efa8d7a0", 0x15}], 0x3) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001e00010000000000000000000aec010000010005000000002f85557c27ad667461c7bc29e6b4b8e400fd08795b8d89aef26514e0b0a3fe1e4ad59273614842cb50aedd1a3361c36596e1c006df4499c4e0cb8b9b28fdf249deb51b8eeb0a44460ceffb2cdce32a084859675990b07ffcdcbb732f35f650e1eabf2be8ec1650"], 0x1c}}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="100100002e00090027bd70000000000004000000fa0017"], 0x110}, 0x1, 0x0, 0x0, 0x42845}, 0x84) socket$nl_route(0x10, 0x3, 0x0) sendto$inet(r0, &(0x7f00000001c0)="a4ac4f325cfb8fe7cff99388e2510c06e21db7484ccd9bbaecb014039a0d1931de534c0236d54687fda1bb61eb8eaf4ea95a9d9961c73516a30f5e7b0f6e96b915e124bb90082df481169219cb4f3bd410b830975c915e862a1698b781145df0b8412e2d0d70fcd2ea7d2cc89a06cf33ad0a642ee2ad56390e31a1200efa218e43e2f8c7cd043d115e83cde3cf3a3889a7d145f0970b1d5fe6809857475dc8e403b195f9a48ad44a0cb1fa0ace0a9f2d1a24ee89f1c45ea659480c802b0351a24731bbd66a75a0911e4e2eb9acd3b7496a200ccc71d3b27acb5abdf7ab647af74eef98d31a0f4f369a19b4d13d17cd17", 0xf0, 0x1, 0x0, 0x0) 5m46.394998101s ago: executing program 3 (id=11358): r0 = socket$nl_audit(0x10, 0x3, 0x9) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000580)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1fffffe, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x930311}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0x3f}, @loopback, 0x6, 0x0, 0x40, 0x0, 0x4000000000000009, 0x10200}) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x2e, 0x0, 0x5, 0x0, 0x0, 0x2, 0x68}, 0x8) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_channels={0x2b}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000020000000000000000000000300000001"], 0x4c}}, 0x0) 5m46.082657218s ago: executing program 3 (id=11363): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$packet(0x11, 0xa, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x4, 0x11, 0x4, 0x0, 0xa6b9}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x4}, 0x1, {0x8100}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x2}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) sendmsg$nl_crypto(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x48001}, 0x20000082) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x2c, r1, 0x1, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="100100002e00090027bd70000000000004000000fa0017"], 0x110}, 0x1, 0x0, 0x0, 0x42845}, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYRESDEC=0x0, @ANYRES16=0x0, @ANYRESHEX=r0, @ANYRESHEX], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x0, @mcast1, 0x4}}}, 0x84) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r7, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0x40000) 5m43.762221613s ago: executing program 2 (id=11366): sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x114, 0x1, 0xa, 0x2db017a630fe46ad, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xd9, 0x6, "b6ab71e3f0f9b4f66243d3c397ac55845a9b3c274145495f8f8541b2bcedaec0bff301ffd8fa36e0a94272e83733a274a736ec7740cb9e04d7590cf9d37b97bd003dbf1cd25f0a7040d620fc34c5cdb444bcb54a4cbca7b4807112f355e5935ca180b7617784e4b9cbc6b9262af087c0b0280c2676ce301dfae1a7aa24dcfff3570f524539810076cb30c6a0390cb51cd0af52886a46156b2ebb92a5066893f509129c4605aab0194a4d0649fd1763fa1331e7606e03fca5818dd44cb91876ec835cd45869dd421ed15c1849433d59326092e98233"}]}, 0x114}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001780)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x4bc, 0xe, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48c, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5e23}]}, {0x3dc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xce}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY={0x320, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000006}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xf8, 0x1, "00dd08126c501b0024be541e8f27ee80484cd057b900eb79b9e4a22011f3d7f4c734d3d5af683e899b9bdb77dc8077534f81082cac53b4aae82041bb126d130bebf2584825b1321a2d88b26da62da8e40be2be6b03b830801d4636bb7c6d8ef2de6f3e078c7d0a86d8232cd311bfcf3c1f9b9caea44537b8025cd58a530535fcdd42162453b4a21fac37848b91fe7763b5fb95f75eb6db9791a4c1fd9648945bf6b16b8786ad8e4c2aaec42c137d0e0cb9aa80617be2492970c88ff196798926ba2555587a8cb92403f0868f5968454b0fbaa72f57b42ba94b1ac52a338436a9038429a9e9a1eaaae4f9a6ae5d50c8f28d113d80"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xc5, 0x1, "537eaeae3928006301962d3f6f426c74c834771981ca7b5d6be2e4ce39172b184f2897cf3b144739c00c7021bc276e20ad85e0bf0e408b3cba6bbc18a1910ed7455417bc238a6b55a5cbbd97579c164dcd09b5e5bf3ec61d94499f2320681b204ae14887e31e62bf50effa7685a01ca96ad09aaa8e31e78c2bb556425953cce7d557175ab1f066940233dfeb83652df82f7a2b9ea1155f4dd3cad995d92c472c10b71a382baf2315c3557182683aa2cb2b7b50f6820fabbf514e30bb6b31783d0e"}, @NFTA_DATA_VALUE={0xc0, 0x1, "47dc0d526e4cb2a06b99ea73642011e0a2cdf462c1e9496fd7ed9abc8989b46bb3af1f3cf24ef542f8e0f792133c04a7a4d1de48a8bb3a1c77c13cbc5b53329c0f979f0e1019dee1e65a4e7d73b711e739ab6494ef3464424a7ddaa1c73581ee3ab28a720cbdb95f78e8a6e297bbb4ce2bdbe11e63f9b1eea3f3823549fd97db271832473d8ff4e090e072016b71cd738c9660de2aab628809a5152e6617d96c4fcf01efcdcb0574fedeb5e501b8643ba8f50c6c6804787f8ce8725c"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_SET_ELEM_KEY={0x60, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}]}]}]}, {0x9c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x8a, 0x6, 0x1, 0x0, "2db441d35a82ae92ba1d693b4757ce24292511435ede6b0d8371e71fa2036f92c427fbb83edef1bc1ead2379b18734a5eed9252c572a4c34f0a4730b43f317ac6088e1a132b8851e8e25efbd55a566b5340e8e213a9371307423c39f4d6c18d7503e1c2fb0319336d832b4d028e4f71dc32776852015009dfbb5652d299072982c11c9316a58"}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_NEWSETELEM={0xff4, 0xc, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x688, 0x3, 0x0, 0x1, [{0x4c4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, @NFTA_SET_ELEM_DATA={0xcc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x62, 0x1, "e38541f34aa46c3eea16c7a7ca2d85e56c39695cd2f105cfed1bc77e108f6e9c453cf5655494b52e34ffd734874c10828c01d94c7aabdcd9b8b3d4b2ae62552bdfe465311fcde862a4c18de2446f0669090e40d5e32b79ddd4c927da7f15"}, @NFTA_DATA_VALUE={0x6, 0x1, '4g'}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x3c4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xae, 0x1, "848f3839c59fb03e449dc59e50543a75f3cf1c4691ab3fbfa0914e0fc6a0375045733c850b868c76473e43af70a0bfa4f80eb21f697b56a558b17221c5eae0445afd1cc4f85ab64344738950e31dc356ee3e7a0cdc5548c28732492b9661398d0ad4cfece817bd3f87df9e6d5079cab520c38d58b413590d13bcc0dc4bf799231dcfae1998babde8195b808f56585ce49d63896229f722459f784fb2662b2148fb25d4decb4dc9ae8206"}, @NFTA_DATA_VALUE={0x56, 0x1, "f7feec8b7d3e98f4be2cb87d8495195b393c5825fa1e1d147385103e2b9aebd9a52ff4d4c8741c2ac106b82f01f158e064f258f1bc38fea6edc944ca34d6a0708de21205780c2b9a7e77857d137f013f44c3"}, @NFTA_DATA_VALUE={0xf9, 0x1, "6504fee73f7fae113d6b2b3c2cec98ffa0ae7e5ff46e7512bdb8ab07a24ca60b82c4d4c18e2ae3e1f77f62b8c1b35275611f4fd5481cd1fe9b67d522f7f1754edf16c50a972a59a0533675f16d01462a8ac5d16dd625110dfa5a7c6523a4fd12ef0d18b564ffbd0b7e0fa3bc08b096cdcef57be4a946df1e4ad6f1c1588b47e05a233f4cde254414cef9a867cd6c6d6b4a6e865f74bc8a7cb186c52d24b6da66b4a6e259c0a70005747403a9a7f22848c40eb5173070ee76ba60f5a93f249b21a60b577484358173e68f34c576c9602856e6acb8697c0176305488c31216f6d152fee7c33b4a4e82ffdc907d2bf822d86542d8c6b3"}, @NFTA_DATA_VALUE={0x4c, 0x1, "e8f64c5da09660bbfbaf71f9a5094499be20d338e38bdff50cb411478725a1b222182d507292c52076c95e4fd6b3dd3d72ab15ccd42b7b9a1a32935c60e42238b3e2c5d209810a67"}, @NFTA_DATA_VALUE={0xc7, 0x1, "69a5405fc7ecdd0cdbc63fa32bd4de308b6f3a901e408bc7506322c2109b05dd17a00d1062649da43d1cdf569c50027ebb95af439526dd0b12a5ec8468ead82cfdf55b3dae30a091cc450437be6a9e12eabda0c284afb1ded4bf6a7c381278ba2c93a2836c786299fdd278baf9350ad94461ecc06432af28627b0591fb260f3a48b9a9bd9832aede66e8a36c1e589e4295a8cc8033b27983d6760310c6609ed9b9b7b1bb345c9649a1b14eee5d924aa8d4bb5bcaf5a6a4de366119b2f59973d8d22dc5"}, @NFTA_DATA_VALUE={0x53, 0x1, "de3f91c8cd32e1626993dd3ee8ac699c1e20a79feaedb619757a97345712784af52167223eb3c90ccefaaba9bcb99e7046cff1d203e943f727b1c00e60508107887b3e29c00f0e42ee9dd2cdbc51e1"}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xf}]}, {0x1b0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0x4b, 0x6, 0x1, 0x0, "09397d4782e0735662960b88fc5be8ed085667853f0220ed4db3fd10b657d7dc2e905ebdd487dc2ba208ae3977b04295908d450dd23791b646807f676fb1b336787705b31a7d01"}, @NFTA_SET_ELEM_EXPR={0x30, 0x7, 0x0, 0x1, @synproxy={{0xd}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x80}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SYNPROXY_WSCALE={0x5}]}}}, @NFTA_SET_ELEM_USERDATA={0x64, 0x6, 0x1, 0x0, "67959b103c2cfa72f5ef6307bfab7d634ef23d6ab2944e928aa16c53d4cd7c6deac3b1e72823c46375123cb4c11628e05d3d663e931654879ca8151a413edd88918d06a911600d316cb6a43d90598af9f3ce8121fc7736f9156dace98c8ce01d"}, @NFTA_SET_ELEM_USERDATA={0xb8, 0x6, 0x1, 0x0, "38ed37cfc953a7010e710bb14831d717771706d862b2fc7ee0c8779bafa65abd78b5e00ed735fbfac959268b9a62fc93313e659a6169ba94561c35a08c936419106ed3a12befe5437fb4399009eb7d967a08036f8f4944c16c49e294758adad205a62b9223247345a119aa1e24a58c9109d3c87a836fb02c4500c2343e134a90cb8d3649466ddc8747c065a40a581722ea84324f4512568bbefae89f7ed2a774b223d113fd3db8416b47e0f8340e0ea5b56c2bf9"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x904, 0x3, 0x0, 0x1, [{0x604, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x5c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @xfrm={{0x9}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0x6a, 0x6, 0x1, 0x0, "e02a0ba8cb8404414fde59906b55647d8621941be057392ee2b06ddd83164d708b7114ae8455cc4514b9ea11dfe89566c3cebc3932633dc98450ab43b69f5887917f9da4379a43500ffc64e2078fdb0b4b3199fb379922f5bc89498ec9d4fbbd755b622ff451"}, @NFTA_SET_ELEM_KEY_END={0x1d0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x31, 0x1, "c7a822162f143d054068dfe634cf6e87ecc74867e6c2451d2c71df14ba4d8c3495fa81480a1452e651a72297d2"}, @NFTA_DATA_VALUE={0xac, 0x1, "44ad01d68fe1b4f5496a46e01c97b40c9ff34bf5d900900f6c8ebcd3572e57fe607c4634a4ebf306c0f98fae03472c0425f4a6f01c8a5b02b55139273bcb5e25629f0af3f1a73d6e2bc7549d981cb4984b3039d794682c1c35cd5ab008a31bc99b7407cde8db3f3124326efce874f536dca141a2e1f2b02bdb6a39ae68731374385d9754cd8f08f836586eebf421feb9bd492c259c5ca5a7c7b568f1a85f30166a2979b2e8444ca1"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xffffffff}]}, @NFTA_DATA_VALUE={0x8b, 0x1, "320aebedf477cb18e6a7f44ec5e7928cf7ca3994929adfe01c9aed8f7459ed5e10e389015ccfec5bc131f9079ff604da043632de4668fe18ab148e4c24cf271b37268c0c6f21fba0d0e43052e191ce7784ea92d2548f857dcd3c029e42c8722c573ded7472663b74bf59bdb896aafdb2a8d39dae554a9e2691b01bf12ebdf26df5c76b155d2303"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x1c, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x230, 0x7, 0x0, 0x1, @match={{0xa}, @val={0x220, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x49, 0x3, "d44f748e88f2a25aee99fddb105d4e764169a35d4a4877f031d32adae5246557adb52437471119c90fc38a88922b120f69f6a45831cd766e9842fcd28fca3301d5d923371d"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0x8, 0x1, 'tos\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0xb3, 0x3, "f9eb9f6dc6647105329ce6a775d725efd4d444e172b1ab00829b7549f51c29b4a328fe77c69566b57291fa4b239fb7a01ca9ad021421c4f328e85b91c8ee4fee9c86d41feb0a17870d4b34294eb6ed92888720bdf70cb9cc112fc5bccad393f6258079912c69ede72648d7e5d55467bb86027ea03422229284b918d38e798d0efc57f4ba2ac1765c82af6f3e28a88be22a2645b88bc2b21683fac34e449a4dcc86cdfd74e7c458a857460735f9ab1b"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0xa8, 0x3, "4e6f6fdd5521e0ad31b606b969a112ed1c6f5b526af13bea302192869b70a0c5f68493c32bbb3c74e2e719e4da4d7552b2eabe5550ec3428a1d33f640d679e120d8e553d8d1b891ecd6d82e99acd25cf05fdbfd232fabd2eaa99c437c6879171137f482e314082953401de6b62a4b74e22bb431e0352cacb9993b9f9f863ceb445ed4179d41d4c485100980a573198d380407e17a2966ff5a95a61dabaa71bf2ef31cb4f"}, @NFTA_MATCH_INFO={0x44, 0x3, "84950031892c50afbb2b7743d43c8b967c92760b670483acb4bf710e2ae98ea8e1dc1c3075561a526d3eb7a5ada9cceabce29ad0b87bc1cac0e28614327041d0"}, @NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}]}}}, @NFTA_SET_ELEM_DATA={0xfc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf7, 0x1, "7198fb4f0e21854542bac0665844faf2e5e981c8d42db12ad64686bb5e534d6f445961a928797ea0089386865d1b0991e045f03a850d856685aad671bdf77633508fdff60f3407cc401d08537cb863c96514533744d66757562a4ca856ffaefbaa371b735e2e8c48a092002a7d298f6bc85d6a954a9d865c1a5c08d41f322f8ccae368a3e9b06443cfd5f119fb873d6737e458b0090ad5d1e800cbd6c3cf4d49804347cd6be0ecdd060874274641084f91cd0bc6c375adc245954fcb42b6cd8b1d5a3ecf78ad32f10caa89ae1d90c7b616c207202d5ab7d493d21e12770373a40a8064f2a0268c2ac2bd35b6181fe63050bd4b"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x2fc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1fc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xbc, 0x1, "c52d70de6c79104fd66ff9a3626546a7d0516f730963c3a7222b8837035c03ae0f68500e97548bcfb0987d838ac221bd03c4000b8e53ef280ec841998e3ff0ed030c7c011d9553623e005078f777c4585f95a4054af1e7054697f05b07ce3959ad6a1a6f5049448c3e12e69b35b20eec7d0890e103e08a0ff2a7ed45dac951aaad1871436b7df91297b185bcd7431d6817882a84ca08f562a72fd421db231eaa815ba53cde00a471b8c92299b7668f18f2da8e4c42ac7dd0"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xa5, 0x1, "c23759f5d237f0584c02cfbdbeba56fc7eaca96f417c054d51a1110a111f3cc695a445fcc9d9fcae744eeb7000fde764375d0ce113a487690b416e804af37dbb29fab9598135bd6d9ded1aa8af243808a914528bc4a8721887b3799c5f30377be8d0ed4c992a27954ec2494eafe983d93ae355ac0f66aa77da805aadf13fa5a57ec00edd7a11ff387818d5edb1e7eef7cbdbe884ab6c855e96cf2a0edfadd02141"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xf0, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x100}]}}}, {0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x8}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x4c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x1504}, 0x1, 0x0, 0x0, 0x20000010}, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001840)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000018c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000001bc0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001940)={0x21c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_KEY={0xe4, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4e4a5872f275d1564c325f4ad45d932013c471d30af7cee3bdea27f0389a6051"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "7f948857346be751b32d81085a633929"}, @NL802154_KEY_ATTR_ID={0x3c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x58}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_ID={0x64, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4d}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1e300000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffff9}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0xbc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfd}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "5eb78207a567733675f1678355b28aa4"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "199bae37f5a96a1bc1e7dc15516695d0dec545cbdb24f60bfbc7c75e2faa787e"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "cbe722ff0d54385e086229e29ca0f68a731864f976b68a4e6b00f60a483bd73a"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "5f900a9bb589be2f643a20f9b48d6be3ca75b9272efb016cf41a0bdc833347e8"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c30708e1aaca9ffa8499ae3e2ceb9fdd"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x28, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "5d582a5be024caaf0ea34ea489f7368964d0051d9e85516bd2fbf95eab8177dd"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4004090}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001c00), r0) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001c80), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x38, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40810) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x34, r5, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x1) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000001e80)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x4c, r5, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$NFT_BATCH(r8, &(0x7f0000002c80)={&(0x7f0000002000), 0xc, &(0x7f0000002c40)={&(0x7f0000002040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x60, 0x3, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x2b4, 0x8, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x244425093b98fa1c}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x14c, 0x4, 0x0, 0x1, [{0x118, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x108, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x21}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @immediate={{0xe}, @void}}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xc3}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x24}, @NFTA_INNER_EXPR={0x5c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xde}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x458}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xe7}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8}]}}}, @NFTA_INNER_EXPR={0x64, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x19}]}}}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x8b}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8913}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88a2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}]}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_USERDATA={0x88, 0x7, 0x1, 0x0, "bf5cd9d208f98642a30f956c9d95d78a9b7b9479cc82500493806b713d445a26f84803cc5f75bd619ea3e671ce01f3dbd37f9d181c93cdb4b59246cff805251e36bfe7e0c39a1666be0c72be2debd06f78d8774968356cabf0445ad43ca90f3771ef325ad5f219174815d46858f4bfff8bf3ae2602c78311d28a2cc54b33e502e249f7ad"}, @NFTA_RULE_COMPAT={0x54, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x809b}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf9}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}]}, @NFT_MSG_DELRULE={0xc8, 0x8, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_RULE_USERDATA={0x3f, 0x7, 0x1, 0x0, "34806b15921b8579a8398bc326a1d983c46577b647a85d97a872213ac5e263a5cd1fe62a02a0b0948400902181f405250778d1a509457a2388b64a"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELOBJ={0x118, 0x14, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_OBJ_USERDATA={0xf9, 0x8, "6e0e8bdee4e2363574e35388a03be5207830b6474b026caeae05a266e086440b8c6d0f5341578c089755803f90dc5167960c693cd75d5c0df4aec1dbb2d89124cfac62492494eb3c74274de519d9a277df4a262d8ca783b3e7b75bb698b6ab8e76a4b19888458b7a0b9b49a3f2e4db4728672194f4151c6d861549f779a6d2c958f6b00eb0fe462a898f57a70c4ac108bf9daf90ac2af61e2f83d868c9d573cf12c2fe823ec8b017ce45d6143ad51e0d9df0dbc92c5be722ccb1368cfc7dd87211b9e5f09d49f832647f71c7545cb471b126104ad0d3673ed2a46429a95ce4afa21b5ce8c348e009e3d013db3451cd0760cddf037e"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9a88e0b430edb478}]}, @NFT_MSG_NEWSETELEM={0x690, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x668, 0x3, 0x0, 0x1, [{0x664, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x2a, 0x6, 0x1, 0x0, "af9cb71aa18a1833827a3e4d58af64ad3fe02202ddb50b7ea6400dc34672ed03c4fd33032a3d"}, @NFTA_SET_ELEM_KEY_END={0xdc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x43, 0x1, "303e75a371ec9d2ebf3c25376bdc337d740b475fb43a6fd40c1edda05bb9c9b49470c131fd4487a3d56a69468284f58b214a4a18c12b28f9cf6de179458978"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_KEY_END={0x2d0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xee, 0x1, "4d4db585371d72104aa1d047afa619b0ff92cad1fe423b60d1bc3aeda6da0e219066edd17af97960cb6a3a0dfc11c923ac1e347a9d64e8db9d6c17ef7f428af3ed37180ae1379b0a2ef778694a2124fc201419ef55943e9aff26c404e6209aac9e795cf10821c85f4bcf6ce27e9b6533166da1dd0abea6cec9db7c60f0e229b7824ffd5928b523965272297d509c4c6c7249c4d0881b3368ef829f6eaf354d94af69e685ae179bf8aa3ef5c8f42032e8904fc74781b0b177777d2166f022a7dca191690134fa0ee2ce12ac0d1793fb563a38b18568af710c134d322e950b2181c8d7897b98d797750c51"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xaf, 0x1, "e192cd4aaa30d64acae0564ec3dfe873b24c701b8a23375417bb464d315c53f35327dbc95821deaed5a77dbc22d8ae3707a3542dd9e8e3a210a9556f9b9f5f5dc8feac364c229bc990362c02f8e6b8240cb34791b22811988c9d235bc217d69ebe31998bb734b45ae2d1e62de27d5c77a6c66923c5034a70643ac1df1d62a9ca7bb43c8f76f3102fe4bd4c144d31410993942c0dbf5ea25ab83c9ca610e011c7f21fbee02550edb034ce79"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x8f, 0x1, "feb55bc6556356f9f9cbf862cd2dc1f4f848aa2769c59303e649b9ff435d1697c3e904e209700d37f81557f72d4a5cb134dffcfcbd83eef14a7e51ac891ba33ae6e7be3e0d7071721f900d850a774ccdda47bcf9faf6e914d0eb28c8c3101f635f9accad2b424ed4512e69f85e214a9f45137a45dbcfeac06d12b61748372d675814fa8290408a064777bc"}]}, @NFTA_SET_ELEM_KEY_END={0xe8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe4, 0x1, "fdd80a0cb68d87eee72fa7829551c91adb9b7d83783a6df1305a17db538120cc2b95b6b5fdb1c5672966d8d3fb51df1fcd20468d35fea175b9aa04849725f8c034849496fee3b88010b592fee2057efc49a59dda0aeef39505cbcbf7b94b43eb6d80ff07570b5ec79294df9cbe5ee658174e211595ac5ffb49a7db9cf8a255e23c7ff4cff95879842e39f3e767f38ff94dc6439b57e26a6dcd7ab6b356b00dada44c8bc745a6cebd06c5d5d84314c79492cb8ceee4d1bb8d51891e307148ef4a5dc02339ec0fe23a57923c3911d523eb820bc732b64d083862752d28b9ef6ead"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_USERDATA={0xee, 0x6, 0x1, 0x0, "d0df3afffe482f6f4b8800da8e158ea01a5321674a5175e315bf8b3253af364b9beaf42a3fd35e03bacabae968846129ccd9d66b8e95ccfab338ba0256c84ae8b78f6435b868bb5740c0b79e6289743cbce6ed92c7a021f0f6271f61b62fec367d7b4e23ef6cc8a168bb0f7a921c1fa568b4b0a9ad252e908300ab132d14d29a637c63cfb22531b65ae3e72fc2201af66b84be60271337d81ecfad2887132f50cc261002eb0db03cf9528ac2accb95f3d723ad1ed4892baea007a006e5dc2742f32519f9ec2f6f0d79123dd2548c3b1089a1d8d3ca6118503e79f7c6ac4644578c1b9bb93ca32f50dae6"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x95, 0x6, 0x1, 0x0, "cf265e310ac2607be4ae4265cd79b410f14359f223dd818ff492e8228cc31aa18316570ac60e4bff88ae3127d82bdf961e502ad1b886283dc40637c4b2b83b5e37be9e8678e52cb759b25735d2358dd935120d2e7d95d14089b8fa6da6ad6ce6d0146c3a4347dfec8fbbb4784fac3b5f0ab1a5deb0ee41b407f7423408d511d79c6f23fd0cd9956eb79c28e0ef1e9ade7f"}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbf8}, 0x1, 0x0, 0x0, 0x24004040}, 0x40) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000002d00), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000002dc0)={&(0x7f0000002cc0), 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x38, r9, 0x710, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xac0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9f}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008094}, 0x4005) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = accept$inet6(0xffffffffffffffff, &(0x7f0000002e00)={0xa, 0x0, 0x0, @empty}, &(0x7f0000002e40)=0x1c) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000002e80), &(0x7f0000002ec0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000002f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002f80)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000003080)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003040)={&(0x7f0000002fc0)=@getchain={0x44, 0x66, 0x300, 0xe66d, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x15, 0xc}, {0xd, 0xd}, {0xe, 0x5}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000020) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003100), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000003140)={@rand_addr, @private, 0x0}, &(0x7f0000003180)=0xc) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000003300)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000032c0)={&(0x7f00000031c0)={0xd4, r12, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xc3}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8810}, 0x20008000) r14 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r14, 0x0, 0x42, &(0x7f0000003340)={'TPROXY\x00'}, &(0x7f0000003380)=0x1e) socket$nl_generic(0x10, 0x3, 0x10) 5m43.626856616s ago: executing program 3 (id=11370): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0xc1c6eeb1d29c64e8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000060000ff00000000c30aec1fb1e53c08d1ea00005a0000000a0006000802110000d8bb2e"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8804) 5m43.618265411s ago: executing program 2 (id=11371): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x7, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r3 = getuid() setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e20, 0x401, 0x4e22, 0x100, 0xa, 0xa0, 0x80, 0x3c, r2, r3}, {0x1be, 0x69dee5e6, 0x10000, 0xe89d, 0x7e, 0x81, 0x0, 0xc}, {0x2, 0x7, 0x800, 0x1}, 0x40, 0x6e6bbd, 0x2, 0x1, 0x2, 0x3}, {{@in6=@remote, 0x3, 0x33}, 0x2, @in=@private=0xa010102, 0x0, 0x1, 0x0, 0xb4, 0x8, 0x4, 0x4}}, 0xe8) (async) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e20, 0x401, 0x4e22, 0x100, 0xa, 0xa0, 0x80, 0x3c, r2, r3}, {0x1be, 0x69dee5e6, 0x10000, 0xe89d, 0x7e, 0x81, 0x0, 0xc}, {0x2, 0x7, 0x800, 0x1}, 0x40, 0x6e6bbd, 0x2, 0x1, 0x2, 0x3}, {{@in6=@remote, 0x3, 0x33}, 0x2, @in=@private=0xa010102, 0x0, 0x1, 0x0, 0xb4, 0x8, 0x4, 0x4}}, 0xe8) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f00000001c0), 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000001500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000014c0)={&(0x7f0000000240)=@updpolicy={0x1254, 0x19, 0x0, 0x70bd28, 0x25dfdbff, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@broadcast, 0x4e23, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x80, 0x17, r2, r3}, {0x10001, 0x6, 0x3, 0x9, 0x3, 0x8c, 0x40000000, 0x1ff}, {0x6, 0x20, 0x401, 0x2}, 0x5e7, 0x0, 0x2, 0x1, 0x1, 0x2}, [@mark={0xc, 0x15, {0x35075b, 0x88bc}}, @algo_crypt={0xe4, 0x2, {{'ecb(cipher_null)\x00'}, 0x4e0, "853a58838b59af08d946b59aac43ce88be4da5835c80b1dad73eb34e43512ec93eac229c29ecdca6e67fd212c49fb5b0cdcec8c32b365119a2385eb35493eb025a03ad70c4dedb35c67b4595baf361a53f2db9ee43efc8dc2b1ec456813098b6a8b0526ecdfd00201524df439da65d232b4b36fe6c3c1dc8e7d3394ac36359026137ff9de8b56d03d38bf7b33ec2a9554ac65cf2d10621663c1913c5"}}, @sec_ctx={0x21, 0x8, {0x1d, 0x8, 0x45642ef251016e98, 0x3, 0x15, "73805eece037e90360b68ac38a8b530dae12df97e1"}}, @address_filter={0x28, 0x1a, {@in=@multicast1, @in=@local, 0xa, 0x4, 0x8}}, @algo_auth_trunc={0x104c, 0x14, {{'nhpoly1305\x00'}, 0x8000, 0x100, "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"}}, @lastused={0xc, 0xf, 0xffffffffffffff4d}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8000}]}, 0x1254}, 0x1, 0x0, 0x0, 0x40080}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), r1) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000015c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x802010}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x30, r6, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x2e}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20004084) (async) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x802010}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x30, r6, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x2e}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20004084) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000016c0)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) (async) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000016c0)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001700)) r8 = socket$igmp(0x2, 0x3, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000017c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r9, &(0x7f00000018c0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x24, r10, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000044}, 0x41) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r9, &(0x7f00000018c0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x24, r10, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000044}, 0x41) socket$unix(0x1, 0x1, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001940), r9) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000001980)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r13, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x30, r14, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8001}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r13, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x30, r14, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8001}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r8, 0x8983, &(0x7f0000001a80)={0x6, 'vlan0\x00', {0x8}, 0x7f}) r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b00), r13) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r13, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x1c, r16, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) sendmsg$NL802154_CMD_DEL_SEC_KEY(r13, &(0x7f0000001e00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001c40)={0x14c, r14, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_KEY={0x98, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffff}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}]}]}, @NL802154_ATTR_SEC_KEY={0x68, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "861e9de01872747c52da915b6ebe2dc0"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "41c3ff3cf35f96b896cc775717980e11c91f0f1a0358f87151fd60c10a341c46"}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0xc000}, 0x8c4) 5m43.279776999s ago: executing program 3 (id=11377): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x50, 0x0, "ec3b2f9e3df1ef893415"}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x3}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}]}, 0x88}, 0x1, 0x7}, 0x4008000) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000100), 0x12) writev(r1, &(0x7f00000017c0)=[{&(0x7f00000002c0)="a9aa9ef3", 0x4}], 0x1) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000900)=ANY=[@ANYRESHEX=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m43.187938624s ago: executing program 2 (id=11378): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x9c35}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 5m42.846415637s ago: executing program 32 (id=11377): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x50, 0x0, "ec3b2f9e3df1ef893415"}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x3}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}]}, 0x88}, 0x1, 0x7}, 0x4008000) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000100), 0x12) writev(r1, &(0x7f00000017c0)=[{&(0x7f00000002c0)="a9aa9ef3", 0x4}], 0x1) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000900)=ANY=[@ANYRESHEX=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m42.811126212s ago: executing program 33 (id=11378): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x9c35}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 23.565586717s ago: executing program 6 (id=14852): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r1, 0x433, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x4, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000048}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002085000000040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071107100000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008104e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x44004) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @broadcast, @dev}, &(0x7f0000000240)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r6 = socket$kcm(0x2d, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e3, &(0x7f0000000180)={r6, r7}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) r9 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r9, 0x0, 0x40, &(0x7f0000000200)={'security\x00', 0x0, [0x0, 0x4, 0x700000, 0x7, 0xf94c]}, &(0x7f0000000140)=0x54) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x4}], 0x4) socket$kcm(0x2, 0xa, 0x2) r10 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) 22.54942474s ago: executing program 6 (id=14869): r0 = socket(0x10, 0x803, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={0x0}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x786c4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 22.436080102s ago: executing program 6 (id=14871): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbc1bb0000000000000800450008000000000000119078ac141442e000000100004e20000c9078213d0000"], 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x14, 0x19, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffc}}, 0x14}, 0x1, 0x0, 0x0, 0x44004}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000000206010200000000000000000000000005000500000000000900020073797a30000000002c00078005001400a60000000800064000000008080013400000003108000a4000000002060004404e192a917f00078005000100070000000500040000000000"], 0x68}}, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r2) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r5, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x48000) 22.278191292s ago: executing program 6 (id=14876): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x1, 0x1, 0x0, {0xa, 0x4e23, 0x10, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x3}}}, 0x3a) r1 = socket(0x15, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000100)=0x7fffffff, 0x28) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) close(r3) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x40012160, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x110}}], 0x18, 0x4c00}, 0x12) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, r4, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0xc}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x80}, 0x1, 0x0, 0x0, 0x8001}, 0x24008001) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'veth1_to_hsr\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)={0x184, r8, 0x4, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4, 0x4}]}, @NL80211_ATTR_TX_RATES={0x160, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x123e, 0x7, 0xfff9, 0x101, 0x1, 0x4, 0x82d9, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xd7cf, 0x40, 0x400, 0x1fd1, 0xc, 0x5, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x12, 0x36, 0x48, 0x6c, 0x24, 0x1, 0xf, 0x24, 0x9, 0x6, 0x30, 0x2, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x7, 0xf65, 0x101, 0x7fff, 0x7, 0x1, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xb, 0x800, 0x0, 0x8, 0x1, 0xd108, 0x401]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x9, 0x1, 0x1, 0x1b, 0x0, 0x6, 0x60, 0x4, 0x1b, 0x6, 0x3, 0x1, 0x2, 0x6, 0x24, 0x6c, 0x6c, 0x36, 0x48, 0x3, 0x5, 0x12, 0x48, 0x24, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x6437, 0x8001, 0x5, 0x6, 0x8000, 0x2, 0x570]}}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x1, 0x2}, {0x4}, {0x0, 0xa}, {0x0, 0x7}, {0x6, 0x2}, {0x2}, {0x0, 0x8}, {0x6, 0xa}, {0x2, 0x1}, {0x7, 0x8}, {0x2, 0xa}, {0x2, 0x3}, {0x0, 0x2}, {0x5}, {0x0, 0x6}, {0x2, 0x3}, {0x0, 0x4}, {0x6, 0x8}, {}, {0x0, 0x7}, {0x3, 0x3}, {0x0, 0x2}, {0x6, 0x8}, {0x7, 0xa}, {0x2, 0x9}, {0x0, 0x5}, {0x3}, {0x1, 0x2}, {0x1, 0xa}, {0x4, 0x4}, {0x2, 0x7}, {0x6, 0x6}, {0x6, 0x4}, {0x5, 0x7}, {0x0, 0x1}, {0x5, 0x7}, {0x7, 0x6}, {0x1, 0x3}, {0x0, 0x2}, {}, {0x3, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}]}]}, 0x184}}, 0x2400c090) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000080)={0x0, 0x63, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_IP_DADDR={0x0, 0x19, @remote}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYRES16=r9], 0x38}}, 0x20048001) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000380), 0x0, 0xa, &(0x7f00000003c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x60, 0x8, 0x8, &(0x7f0000000380)}}, 0xfffffffffffffd89) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000006c0)=0x0, &(0x7f0000000740)=0x4) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xcc, r11, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0x4}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20064009}, 0x0) 22.152416756s ago: executing program 6 (id=14879): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f000040b000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004864}, 0x4c000) mmap(&(0x7f0000159000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000bd1000/0x2000)=nil, 0x2000, 0x1000005, 0x4012, r3, 0xffffe000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x8000}}}}}}}, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x6) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r8, 0x0, 0x20000000) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x10000, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {0x1, 0xffff}, {0x2, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8041}, 0x800) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x6e073, r5, 0x2000) 21.768298478s ago: executing program 6 (id=14887): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x120, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x64010101, @empty, 0xffffffff, 0xff000000, 'veth1_vlan\x00', 'dvmrp1\x00', {0xff}, {}, 0x32, 0x2, 0x14}, 0x6, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0xa, 0x0, 0x5, 0x0, 0x4], 0x5, 0x1}, {0xffffffffffffffff, [0x2, 0x4, 0x5, 0x0, 0x1], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0x3, 0x194c, 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x48815) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='percpu_create_chunk\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='percpu_create_chunk\x00', r6}, 0x10) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r8, &(0x7f0000000040)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x7, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x4, 0x0, 0x1c}}}}}, 0x36) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000400)={0x2c, @empty, 0x4e24, 0x3, 'dh\x00', 0xf, 0x1, 0x80}, 0x2c) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@flushsa={0x14, 0x1c, 0x1, 0x70bd2a, 0x25dfdbfe, {0x33}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 17.019511104s ago: executing program 5 (id=14956): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x90}, 0x1, 0x0, 0x0, 0x20006841}, 0x4004011) recvmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/97, 0x61}, {&(0x7f0000000000)=""/164, 0xa4}], 0x2}, 0x3}], 0x1, 0x40000060, 0x0) (async) recvmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/97, 0x61}, {&(0x7f0000000000)=""/164, 0xa4}], 0x2}, 0x3}], 0x1, 0x40000060, 0x0) 16.898464719s ago: executing program 0 (id=14960): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="f1bf29177000fcdfdf2517"], 0x6b}, 0x1, 0x0, 0x0, 0x44000}, 0x240080a4) 16.888131562s ago: executing program 5 (id=14961): r0 = socket(0x11, 0x80000, 0x5) recvmsg$unix(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0x6e, &(0x7f0000000180)=[{&(0x7f0000000080)=""/153, 0x99}, {&(0x7f0000000140)=""/17, 0x11}], 0x2, &(0x7f00000001c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}, 0x100) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r11, &(0x7f0000000300)={{0x3, @default, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) setsockopt$ax25_int(r10, 0x101, 0x3, &(0x7f0000000380)=0x97, 0x4) r12 = accept4$phonet_pipe(r3, &(0x7f00000003c0), &(0x7f0000000400)=0x10, 0x1800) ioctl$SIOCPNADDRESOURCE(r12, 0x89e0, &(0x7f0000000440)=0x837) accept$ax25(r0, 0x0, &(0x7f0000000480)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000004c0)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r13, r5, 0x0, 0x5, &(0x7f0000000500)=']^^!\x00'}, 0x30) nanosleep(&(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)) r14 = socket$inet6(0xa, 0x5, 0xd4) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000600)={r8, 0x6, 0x1, 0x40}) getpeername$netrom(r15, &(0x7f0000000640)={{}, [@null, @netrom, @null, @rose, @default, @default, @null, @null]}, &(0x7f00000006c0)=0x48) r16 = accept4$x25(r8, &(0x7f0000000700)={0x9, @remote}, &(0x7f0000000740)=0x12, 0x80000) ioctl$SIOCX25SCUDMATCHLEN(r16, 0x89e7, &(0x7f0000000780)={0x65}) socket$inet6(0xa, 0x5, 0x16) setsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f00000007c0), 0x4) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000800), 0x4) r17 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r17, &(0x7f0000000840), &(0x7f0000000880)=0x12, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000900)={'vcan0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x74, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r18}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x100}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) connect$tipc(r6, &(0x7f0000000a40)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x2}}, 0x10) setsockopt$SO_ATTACH_FILTER(r14, 0x1, 0x1a, &(0x7f0000000ac0)={0x8, &(0x7f0000000a80)=[{0x3, 0x10, 0x4, 0xc5}, {0x1ff, 0xfc, 0x0, 0x236}, {0x5, 0x9, 0x5, 0x4}, {0x3, 0xfd, 0x1, 0x3}, {0x31a, 0x2, 0x6, 0x69b7a59b}, {0x6, 0x80, 0x14, 0x7f}, {0x6, 0x6, 0x9}, {0x8, 0xe, 0x8, 0x5}]}, 0x10) connect$inet(r15, &(0x7f0000000b00)={0x2, 0x4e20, @empty}, 0x10) setsockopt$netrom_NETROM_T1(r9, 0x103, 0x1, &(0x7f0000000b40)=0x597, 0x4) setsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f0000000b80)={@local, @loopback, r18}, 0xc) getsockname$netrom(r1, &(0x7f0000000bc0)={{0x3, @default}, [@netrom, @remote, @remote, @default, @remote, @null, @netrom, @netrom]}, &(0x7f0000000c40)=0x48) setsockopt$RDS_GET_MR(r4, 0x114, 0x2, &(0x7f0000000d80)={{&(0x7f0000000c80)=""/171, 0xab}, &(0x7f0000000d40), 0x40}, 0x20) 16.841993257s ago: executing program 0 (id=14962): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r1, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40802) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x3, 0x3, 0x40}]}]}, {0x0, [0x0, 0x0, 0x5f]}}, 0x0, 0x35}, 0x20) 16.74816171s ago: executing program 0 (id=14964): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000240)={0x1d, r2}, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r7, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000540000042bbd7000fedbdf2507000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="01010300200100000000f1d90da67fbafbd9000208000000"], 0x38}}, 0x0) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r9 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r8, 0x0, 0x3, &(0x7f0000000540)={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x7) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@delchain={0x2c, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0x0, 0xffe2}}, [@TCA_CHAIN={0x8, 0xb, 0xc612}]}, 0x2c}}, 0x8011) (async) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e1208000b0000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000002900)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x20000080) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000027ed6692e81667803422175ba743c6240ca5163c76042e34311a4106becd4b72e9c4e320ab295353006b557c2e40c735740e7828b4fa1eb05dc11cb207b5c09a4b249d067036d1f40d27f3ee76d26f265480b5398f26c1728e21722f14df093d00f7d8aed44995206d35c91f3f471ec22e1d844963cc426b759e5e8849ef0b6214423281bee72636c906ea9d3376cb7a9edbc45ab3e748b5a84f5a88a6dea81ba21909272848a3b6cfb8", @ANYRES16=r13, @ANYBLOB="00012bbd7000fbdbdf252500000008000300", @ANYRES32=r12, @ANYBLOB="0c00990005000000460000001b0034004ecca1393dbc87f35bb9c54b385af5c4f2a6b499c6ece30008003500070000000a0034000202020202020000"], 0x58}, 0x1, 0x0, 0x0, 0x20048941}, 0x4000084) setsockopt$CAN_RAW_ERR_FILTER(r9, 0x65, 0x2, &(0x7f0000000000)=0x6, 0x41) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x40, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x92}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x4}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYRESOCT, @ANYRES16=r3, @ANYBLOB="010025bd7000fedbdf252500000008000300", @ANYRES32=r12, @ANYBLOB="08003500000000000a00060000e4ff03000000000700340024fd2b00"], 0x38}, 0x1, 0x0, 0x0, 0x24004094}, 0x4811) 16.74252752s ago: executing program 4 (id=14965): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/27, 0x1b}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="1c00000e01000b00000014", @ANYRES64=0x0], 0x36) 16.607922991s ago: executing program 0 (id=14966): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000004780), 0x2, 0x0) close(r1) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe", 0x2c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x3}], 0x1, 0x40800) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000fb1711ff00400000000000000000000000000000ff02000000000000000000000008000103194e1200189078040000000b0000000000010004000000"], 0x52) 16.500465843s ago: executing program 5 (id=14967): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004000) r0 = socket(0x36, 0x2, 0x40000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003c80)="d800000019008111e0020f060d8107040a60000000020000000455a12a00090008000699e3ffffff14000500fe80817806000500000000000074d67f6f9400f7d1d9bbe94fa27108a007a240c77f01896034277ce06bbace8037cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a2366e4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad96267e004dcdf634c1f215ce3bb9ad809d50b69b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51f9ffffff000000000000000000f49956e4f98b53ced9802b", 0xd8}], 0x1}, 0x4008040) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0a002dbd7000fcdbdf251500724e"], 0x14}, 0x1, 0x0, 0x0, 0x8c04}, 0x20000000) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000600)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x0, 0x8, 0x2a}, {@remote, 0x4e22, 0x1, 0xc, 0x2}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0xe, &(0x7f0000000440)=0x100, 0x4) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000000000000000000000080009"], 0x24}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0500f5000000000004000600000008000300", @ANYRES32=r1, @ANYBLOB="080005000b000000"], 0x24}}, 0x0) 16.292124042s ago: executing program 5 (id=14969): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x1, 0x40, 0x5, 0x3, {{0x33, 0x4, 0x1, 0x2, 0xcc, 0x64, 0x0, 0x8, 0x2f, 0x0, @empty, @rand_addr=0x64010101, {[@ssrr={0x89, 0x1b, 0xa2, [@empty, @remote, @rand_addr=0x64010100, @rand_addr=0x64010101, @empty, @empty]}, @lsrr={0x83, 0x13, 0x58, [@broadcast, @loopback, @empty, @rand_addr=0x64010101]}, @generic={0x82, 0xf, "e448c678b0b703e1a834b2748b"}, @ssrr={0x89, 0x7, 0xa1, [@private=0xa010102]}, @timestamp_addr={0x44, 0x24, 0xf0, 0x1, 0x8, [{@remote, 0x1}, {@multicast1, 0xfffffffe}, {@local, 0xa}, {@remote, 0x10}]}, @timestamp={0x44, 0x1c, 0xcf, 0x0, 0x3, [0x5, 0x2, 0x8000000, 0x3, 0x6c03a2fd, 0x7f]}, @timestamp_addr={0x44, 0xc, 0x8, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x215a3b33}]}, @timestamp={0x44, 0xc, 0xc0, 0x0, 0xd, [0x10000, 0x3]}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x3, [0x3, 0x83d]}, @ssrr={0x89, 0xf, 0xcf, [@private=0xa010101, @broadcast, @remote]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=@newtclass={0x50, 0x28, 0x8, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xf, 0xb}, {0x2, 0xe}, {0x749aa6b3bdbe082f, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x2}}, @TCA_RATE={0x6, 0x5, {0xa3, 0x5}}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_red={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x48c0}, 0x810) 16.29093882s ago: executing program 0 (id=14970): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback=0x7f000015}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x88}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x100}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000002500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r4}, 0x18) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYRES8=r1], 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r5}, 0x10) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r6}, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 16.225670848s ago: executing program 4 (id=14972): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r4, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x3}}, 0x27, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x4) sendmsg$tipc(r5, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001d00)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x70}}, 0x0) accept4(r4, 0x0, 0x0, 0x400000000000000) socket$inet6(0xa, 0x2, 0x0) r11 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000002e80)={'gre0\x00', &(0x7f0000002e40)=@ethtool_wolinfo={0x7, 0x1, 0x1ff, "729d3031f960"}}) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x24, 0x414, 0x1, 0x0, 0x0, "", [@typed={0x9, 0x13, 0x0, 0x0, @str='gre0\x00'}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="ecc032c4"]}]}, 0x24}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x3, 0x8200, 0x5, 0x10001, r1}, &(0x7f00000000c0)=0x10) 16.11579763s ago: executing program 0 (id=14973): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r2], 0x1c}}, 0x8004) write$nci(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r4], 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0xd04, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1600000000002000040400000100f4ff7fff0000cad3d8bed0d3e97440800534b905d5e81a54c7f41c9147a22ee34e59f102ced2404164f7ee09d75bd7ab66284aedee9683c6dd203b252ec3da02d1513aaa0d8a85a79fde175d556ae1a71344ab03f32237ac1401ff8cc975f456ae6be638f95528f3d908ce775318", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=r7, @ANYBLOB="001200000000ac74b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6(0xa, 0x5, 0xffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000001900)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0xd0, 0xc3b0, 0x48, @private0, @mcast2, 0x7, 0x20, 0x10001, 0x7}}) r9 = socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000001780)={'batadv_slave_0\x00', 0x0}) getsockopt$inet6_mreq(r9, 0x29, 0x18, &(0x7f00000017c0)={@private1, 0x0}, &(0x7f0000001800)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001840)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5c010000", @ANYRES16=0x0, @ANYBLOB="01002abd7000fbdbdf25040000004400018008000100", @ANYRES32=r8, @ANYBLOB="08000300000000000800030002000000080001003f26011cf357d6cb52e4683b4d6db001dcee612ee5d903d37f5b0db528faf4a883a7b5c5638d64e683b349ce381af8932de35e59478c1e9f17c4a8c64241e8ea42aeec1de486ad8b6335f89d1b2631ba4a5db91e5c0691c0172d1ac7526d1c3ec4d86eb3486e0abfa041a0128125573816e7005cad6315524a8fd15d36e172803f0276a11a39d91bd6b594c6b632a999e87ad5521c608a9a864baf10f71e79baa21c04f7387a203c5db0f332a645ff3d0ab0781e9d35f148d4a5bd16b2d83b353b0f79e6", @ANYRES32=r8, @ANYBLOB="080003000300000008000100", @ANYRES32=r8, @ANYBLOB="080003000100000008000100", @ANYRES32=r8, @ANYBLOB="040001805800018014000200776730000000000000000000000000000800030001000000140002006d6163766c616e3100000000000000001400020076657468305f746f5f626f6e6400000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000005c00018008000100", @ANYRES32=r8, @ANYBLOB="08000300030000001400020073797a6b616c6c657231000000000000080003000200000008000300030000000800030001000000140002006970366772653000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="4c00018014000200767863616e310000000000000000000008000100", @ANYRES32=r12, @ANYBLOB="14000200626f6e645f736c6176655f300000000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x8011}, 0x20000000) sendmsg(r11, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8905, &(0x7f0000000340)={'syzkaller1\x00', @remote}) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r14 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r14, &(0x7f0000000b00)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="b8", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r14, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r14, 0x84, 0x1a, &(0x7f0000000100), &(0x7f0000000000)=0x8) 15.915805431s ago: executing program 5 (id=14975): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 15.839690848s ago: executing program 4 (id=14976): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0xd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@gettfilter={0x24, 0x2e, 0x0, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {0xc}, {0xb, 0xffe0}}}, 0x24}}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0xffffffff, 0x25dfd9ff, {0x0, 0x0, 0x0, r1, {0x10, 0xa}, {}, {0x1c, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0xfe}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004081}, 0x24000085) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x5, @mcast2, 0x40}, 0x1c, 0x0}}], 0x1, 0x4008800) socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000700)={&(0x7f0000000040)=@caif=@rfm={0x25, 0x28000000, "713eb5baed9f3b15b9ceda8a9d6ab643"}, 0x80, 0x0}, 0x4000001) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890c, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711084000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) 15.757500629s ago: executing program 5 (id=14977): r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f0000000140)=0x1) (async) close(r3) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) (async) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[], 0xffdd) (async) getsockopt(r0, 0x1, 0x45, 0x0, &(0x7f0000000000)) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f00000000c0)=0x4, 0x4) 15.687654494s ago: executing program 4 (id=14978): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x8c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x69, 0x6, "e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b01"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x89}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x24000855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 15.631810198s ago: executing program 1 (id=14979): r0 = epoll_create1(0x0) r1 = epoll_create(0xffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x40, 0x2, 0xfd, 0x2, 0x5, 0x2768}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, 0x0}}], 0x1, 0x20004086) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x3}}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd38bd3bd760f900f500180601fe8000000000000000000000000000aafe800000ce22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60020000907800001e020000"], 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r6, 0x8b32, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x8800000d}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000002c0)={0x8002015}) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c0011001901010000000000000000000000000020010000000000000000000000000001ac14143e0000000000c8b10000000000ac1414bb00000000000000000000000032fcff00073500000a00020000000000000000000000020000000000ac1e01010000000000000000000000000a010102000000000000000000000000fe80000000000000000000000000002f33"], 0xec}}, 0x20000000) r10 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDELRT(r10, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @empty}, 0x2b3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x4, 0x400}) getsockopt$XDP_MMAP_OFFSETS(r7, 0x11b, 0x7, &(0x7f0000003480), &(0x7f0000000080)=0x80) 15.605801601s ago: executing program 4 (id=14980): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8}]}, 0x20}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r4], 0x68}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15.501094853s ago: executing program 1 (id=14981): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000002, 0x2011, r0, 0xb7617000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000040)) sendto(r1, &(0x7f0000000080)="a092f2056b4ad8dd", 0x8, 0x11, &(0x7f00000000c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xbb}, 0x80) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x1c, 0x800) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f00000001c0)={0x1, 0x7, @status={[0x4, 0x9, 0x1, 0x66ed, 0x0, 0x6]}, [0x5, 0x0, 0x9, 0x3, 0x9, 0x4, 0x100000000, 0x9, 0x0, 0x100, 0x0, 0xfffffffffffffffa, 0x3, 0x7, 0xfffffffffffffffc, 0x6, 0x3, 0x2cc3, 0x9, 0x1, 0x9, 0x5, 0xfffffffffffffffc, 0x3d7f, 0x5, 0xa, 0x3, 0xe0cc, 0xc, 0x4650, 0x27f3, 0xb1, 0x1, 0xffff, 0x7fffffff, 0xf6bf, 0x6, 0x3, 0x8, 0x7fff, 0x7fffffff, 0x2f8a4a9f, 0xf3a8, 0x81, 0x3, 0x5, 0x1, 0x10, 0x1, 0x80000, 0x6, 0x80, 0x1000, 0x95, 0x3, 0x10, 0x6, 0x4, 0xa, 0x800, 0xffffffff, 0x5, 0xa, 0x5]}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000dc0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000e40)={&(0x7f0000000c00)="8b77ed654b82e30ec5d70ca8b954afcaf227e9aa2ca6bf8a6e71cfe1ff14f013f1026c6a450e55ff66c1653d5c34ecf78e", &(0x7f0000000c40)=""/128, &(0x7f0000000cc0)="06de602c50f0377fad78308bb5b4b88e0e8ee788dd4f5595454b694fa50c9847904c9972b1f41b9f94b2710c546ba4c32d826dbdab9ba9034715ef23369f338b54", &(0x7f0000000d40)="01a8108d8135a3571879ff2d6821c0b7430a35ea583827dc3da3fed18f0fbf213db389bb570949bc059a873b82bd35c93e6aa2d1d516fa16835bbe185f2ee23a5b4cf58734680e9006651d6a51b8bdf75d7fa17a9064ac7acd0cf01bf1a0159f6d92cf4566788fdb", 0x8, r3, 0x4}, 0x38) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x48, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4000}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x8000040) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001080)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000010c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000001200)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x68, r6, 0x0, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1b}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x63}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x401, 0x33}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x7d}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xb, 0x74}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x68}, 0x1, 0x0, 0x0, 0x900}, 0x4) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001280)=@generic={&(0x7f0000001240)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000013c0)={@fallback=r4, 0x9, 0x1, 0x9, &(0x7f00000012c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001400)={@cgroup, r10, 0x31, 0x10, 0x0, @void, @value, @void, @void, r12}, 0x20) r13 = socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000015c0)={&(0x7f0000001480)={0x138, r6, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x9, 0x3b}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x94}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x200c2d0c23446476}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x7910c326da358d5a}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x235}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000000}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14a0}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1df7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3c99}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17f}]]}, 0x138}, 0x1, 0x0, 0x0, 0x20000045}, 0x4000801) read(r11, &(0x7f0000001640)=""/56, 0x38) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001680)={0x1b, 0x0, 0x0, 0x2, 0x0, r3, 0xb, '\x00', 0x0, r11, 0x4, 0x3, 0x5}, 0x50) ioctl$FICLONERANGE(r14, 0x4020940d, &(0x7f0000001700)={{r1}, 0x2, 0xbe0f, 0x800}) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000001740)=r10, 0x4) syz_extract_tcp_res(&(0x7f0000001780), 0x8, 0x8) connect$inet6(r2, &(0x7f00000017c0)={0xa, 0x4e21, 0x5, @empty, 0x101}, 0x1c) r15 = syz_genetlink_get_family_id$team(&(0x7f0000001840), r11) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001c80)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001ac0)={0x150, r15, 0x4, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x508}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x4081}, 0x0) 15.408376802s ago: executing program 4 (id=14982): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2a, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xffff, 0xc}, {0x0, 0xfff1}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x24, r5, 0x407, 0x0, 0x0, {{}, {0x0, 0x4000}, {0x8}}}, 0x24}}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x102) 15.407463645s ago: executing program 1 (id=14983): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r5}, @CGW_DST_IF={0x8, 0xa, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@private1={0xfc, 0x1, '\x00', 0x3}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x24}, 0x9, 0x8, 0x0, 0x0, 0x4, 0x200002}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd2d, 0x25dfdbfb, {0x80, 0x0, 0x10, 0x2, 0xfc, 0x3, 0x0, 0x5, 0x6000}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0}, 0x40008080) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r8, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x40}}, 0x0) 15.377858027s ago: executing program 1 (id=14984): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) (async) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x8, 0x0, 0x84a3, 0x11080, r3, 0x7, '\x00', r2, r4, 0x1, 0x5, 0x3, 0x0, @void, @value, @value=r5}, 0x50) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x24, 0x66, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0x0, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 15.279732715s ago: executing program 1 (id=14985): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x40) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x2400c095}, 0x4000014) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800c8050}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40050}, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r1, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xf1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r9, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) (async) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000740), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r10, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x5) (async) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x5c, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x5c}}, 0x20004800) (async) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r11, 0x84, 0x3, &(0x7f0000000980)=0x4, 0x4) (async) sendmsg$IEEE802154_LLSEC_GETPARAMS(r7, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x70, r1, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x811) (async) socket$kcm(0x29, 0x0, 0x0) (async) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b40), r8) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r8, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x54, r12, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6e}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc9}]}, 0x54}, 0x1, 0x0, 0x0, 0x2400c013}, 0x4000000) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r7, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40004) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000e80)={&(0x7f0000000d80), 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x70, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xaa88428686b0221d}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xc}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1a}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040}, 0x20004010) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000f00)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)=@newtclass={0x7c, 0x28, 0x2, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r14, {0xf, 0x7}, {0xc, 0xfff2}, {0x1, 0xe}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x2c, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x6}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x3}, @TCA_QFQ_LMAX={0x8, 0x2, 0x9}, @TCA_QFQ_LMAX={0x8, 0x2, 0x9}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x3}]}}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}, @TCA_RATE={0x6, 0x5, {0x8, 0x9}}, @TCA_RATE={0x6, 0x5, {0x9, 0x4}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000050) (async) ioctl$sock_SIOCOUTQNSD(r13, 0x894b, &(0x7f0000001040)) 15.17655476s ago: executing program 1 (id=14986): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xb) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 6.141755984s ago: executing program 34 (id=14887): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x120, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x64010101, @empty, 0xffffffff, 0xff000000, 'veth1_vlan\x00', 'dvmrp1\x00', {0xff}, {}, 0x32, 0x2, 0x14}, 0x6, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0xa, 0x0, 0x5, 0x0, 0x4], 0x5, 0x1}, {0xffffffffffffffff, [0x2, 0x4, 0x5, 0x0, 0x1], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0x3, 0x194c, 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x48815) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='percpu_create_chunk\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='percpu_create_chunk\x00', r6}, 0x10) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r8, &(0x7f0000000040)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x7, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x4, 0x0, 0x1c}}}}}, 0x36) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000400)={0x2c, @empty, 0x4e24, 0x3, 'dh\x00', 0xf, 0x1, 0x80}, 0x2c) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@flushsa={0x14, 0x1c, 0x1, 0x70bd2a, 0x25dfdbfe, {0x33}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 1.09463558s ago: executing program 35 (id=14973): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r2], 0x1c}}, 0x8004) write$nci(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r4], 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0xd04, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1600000000002000040400000100f4ff7fff0000cad3d8bed0d3e97440800534b905d5e81a54c7f41c9147a22ee34e59f102ced2404164f7ee09d75bd7ab66284aedee9683c6dd203b252ec3da02d1513aaa0d8a85a79fde175d556ae1a71344ab03f32237ac1401ff8cc975f456ae6be638f95528f3d908ce775318", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=r7, @ANYBLOB="001200000000ac74b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6(0xa, 0x5, 0xffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000001900)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0xd0, 0xc3b0, 0x48, @private0, @mcast2, 0x7, 0x20, 0x10001, 0x7}}) r9 = socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000001780)={'batadv_slave_0\x00', 0x0}) getsockopt$inet6_mreq(r9, 0x29, 0x18, &(0x7f00000017c0)={@private1, 0x0}, &(0x7f0000001800)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001840)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5c010000", @ANYRES16=0x0, @ANYBLOB="01002abd7000fbdbdf25040000004400018008000100", @ANYRES32=r8, @ANYBLOB="08000300000000000800030002000000080001003f26011cf357d6cb52e4683b4d6db001dcee612ee5d903d37f5b0db528faf4a883a7b5c5638d64e683b349ce381af8932de35e59478c1e9f17c4a8c64241e8ea42aeec1de486ad8b6335f89d1b2631ba4a5db91e5c0691c0172d1ac7526d1c3ec4d86eb3486e0abfa041a0128125573816e7005cad6315524a8fd15d36e172803f0276a11a39d91bd6b594c6b632a999e87ad5521c608a9a864baf10f71e79baa21c04f7387a203c5db0f332a645ff3d0ab0781e9d35f148d4a5bd16b2d83b353b0f79e6", @ANYRES32=r8, @ANYBLOB="080003000300000008000100", @ANYRES32=r8, @ANYBLOB="080003000100000008000100", @ANYRES32=r8, @ANYBLOB="040001805800018014000200776730000000000000000000000000000800030001000000140002006d6163766c616e3100000000000000001400020076657468305f746f5f626f6e6400000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000005c00018008000100", @ANYRES32=r8, @ANYBLOB="08000300030000001400020073797a6b616c6c657231000000000000080003000200000008000300030000000800030001000000140002006970366772653000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="4c00018014000200767863616e310000000000000000000008000100", @ANYRES32=r12, @ANYBLOB="14000200626f6e645f736c6176655f300000000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x8011}, 0x20000000) sendmsg(r11, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8905, &(0x7f0000000340)={'syzkaller1\x00', @remote}) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r14 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r14, &(0x7f0000000b00)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="b8", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r14, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r14, 0x84, 0x1a, &(0x7f0000000100), &(0x7f0000000000)=0x8) 77.965844ms ago: executing program 36 (id=14986): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xb) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 39.867197ms ago: executing program 37 (id=14977): r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f0000000140)=0x1) (async) close(r3) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) (async) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[], 0xffdd) (async) getsockopt(r0, 0x1, 0x45, 0x0, &(0x7f0000000000)) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f00000000c0)=0x4, 0x4) 0s ago: executing program 38 (id=14982): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2a, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xffff, 0xc}, {0x0, 0xfff1}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x24, r5, 0x407, 0x0, 0x0, {{}, {0x0, 0x4000}, {0x8}}}, 0x24}}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x102) kernel console output (not intermixed with test programs): ed as long as it is part of bond. [ 1141.906436][T20217] bond5: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 1141.917783][T20217] bond5: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 1142.039515][T20228] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13070'. [ 1142.107995][T20228] bond2 (unregistering): Released all slaves [ 1142.204126][T20236] mac80211_hwsim hwsim123 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1142.315002][T20244] netlink: 240 bytes leftover after parsing attributes in process `syz.4.13073'. [ 1142.327025][T20244] x_tables: unsorted underflow at hook 4 [ 1142.362886][T20246] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13074'. [ 1142.419608][T20249] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13076'. [ 1142.553808][T20258] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.13079'. [ 1142.590522][T20258] netlink: 'syz.4.13079': attribute type 1 has an invalid length. [ 1142.605371][T20258] netlink: 'syz.4.13079': attribute type 2 has an invalid length. [ 1142.613326][T20258] netlink: 'syz.4.13079': attribute type 1 has an invalid length. [ 1142.624655][T20258] netlink: 'syz.4.13079': attribute type 3 has an invalid length. [ 1142.637168][T20258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13079'. [ 1142.682247][T20276] x_tables: duplicate underflow at hook 2 [ 1142.834771][T20286] netlink: 'syz.4.13085': attribute type 2 has an invalid length. [ 1142.856931][T20288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13086'. [ 1143.359028][T20317] bond5: option arp_all_targets: invalid value (18446744073709551613) [ 1143.370476][T20324] IPVS: set_ctl: invalid protocol: 62 172.20.20.187:20003 [ 1143.371888][T20317] bond5 (unregistering): Released all slaves [ 1143.439047][T20327] netlink: 'syz.6.13096': attribute type 144 has an invalid length. [ 1143.467888][T20327] sock: sock_timestamping_bind_phc: sock not bind to device [ 1144.492982][T20385] veth0_to_team: left promiscuous mode [ 1144.575652][T20385] macvtap0: left allmulticast mode [ 1144.633391][T20385] mac80211_hwsim hwsim113 wlan1: left allmulticast mode [ 1144.653572][T20385] ip6gre1: left promiscuous mode [ 1144.659968][T20385] ip6gre1: left allmulticast mode [ 1144.688113][T20385] gtp0: left promiscuous mode [ 1144.753068][T17856] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1144.795318][T17856] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.807897][T17856] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1144.822675][T17856] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.856065][T17856] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1144.874806][T17856] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.890182][T17856] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1144.910946][T17856] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.389747][T20426] netlink: 'syz.5.13126': attribute type 12 has an invalid length. [ 1145.579855][T20451] netlink: 'syz.4.13131': attribute type 1 has an invalid length. [ 1145.742953][T20457] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1145.931524][T20476] ipvlan0: entered allmulticast mode [ 1146.204484][T20494] openvswitch: netlink: IP tunnel dst address not specified [ 1146.801877][T20535] netlink: 'syz.0.13156': attribute type 1 has an invalid length. [ 1146.836242][T20535] netlink: 'syz.0.13156': attribute type 11 has an invalid length. [ 1146.844763][T20535] __nla_validate_parse: 14 callbacks suppressed [ 1146.844783][T20535] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13156'. [ 1146.897944][T20535] syzkaller0: entered promiscuous mode [ 1146.903468][T20535] syzkaller0: entered allmulticast mode [ 1146.999134][T20542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1147.013060][T20542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1147.029332][ T8739] IPVS: starting estimator thread 0... [ 1147.036050][T20542] IPVS: set_ctl: invalid protocol: 10 0.0.0.0:64513 [ 1147.119409][T20546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13160'. [ 1147.136436][T20544] IPVS: using max 29 ests per chain, 69600 per kthread [ 1147.232250][T20550] netlink: 36 bytes leftover after parsing attributes in process `syz.5.13162'. [ 1147.301878][T20555] netlink: 'syz.0.13161': attribute type 11 has an invalid length. [ 1147.309150][T20550] syzkaller0: entered promiscuous mode [ 1147.327840][T20550] syzkaller0: entered allmulticast mode [ 1147.372810][T20559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13163'. [ 1147.395153][T20559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13163'. [ 1147.914087][T20579] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13170'. [ 1148.283781][T20590] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1148.506527][T20610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13180'. [ 1148.566257][T20610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13180'. [ 1148.569950][T14126] Bluetooth: hci2: command 0x0406 tx timeout [ 1148.582396][T14126] Bluetooth: hci5: command 0x0406 tx timeout [ 1148.596206][T20615] netlink: 84 bytes leftover after parsing attributes in process `syz.0.13180'. [ 1148.901435][T20636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13186'. [ 1148.948953][T20632] hsr_slave_0: left promiscuous mode [ 1148.976845][T20632] hsr_slave_1: left promiscuous mode [ 1149.257264][T20650] syz_tun: entered allmulticast mode [ 1150.976367][ T5351] Bluetooth: hci1: command 0x0406 tx timeout [ 1152.820860][T20675] geneve2: entered promiscuous mode [ 1152.903019][T20645] syz_tun: left allmulticast mode [ 1153.473105][T20721] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1153.511491][T20728] netlink: 'syz.6.13211': attribute type 1 has an invalid length. [ 1153.557684][T20730] __nla_validate_parse: 2 callbacks suppressed [ 1153.557706][T20730] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13213'. [ 1153.910816][T20730] hsr_slave_0 (unregistering): left promiscuous mode [ 1154.263714][T20760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13219'. [ 1154.522008][T20773] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.13223'. [ 1154.644714][T20777] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1154.859622][T20785] netlink: 'syz.5.13229': attribute type 2 has an invalid length. [ 1155.093891][T20801] netlink: 'syz.5.13233': attribute type 4 has an invalid length. [ 1155.144079][T20802] netlink: 'syz.5.13233': attribute type 4 has an invalid length. [ 1155.476854][T20825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13239'. [ 1155.588115][T20829] netlink: 'syz.5.13238': attribute type 1 has an invalid length. [ 1155.747789][T20835] netlink: 'syz.1.13241': attribute type 1 has an invalid length. [ 1155.770313][T20839] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13243'. [ 1155.867907][T20844] nbd: couldn't find a device at index 0 [ 1155.900344][T20842] bond2: (slave gretap1): making interface the new active one [ 1155.912742][T20842] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1156.007896][T20853] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13248'. [ 1156.153536][T20859] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13249'. [ 1156.939657][T17865] bridge_slave_1: left promiscuous mode [ 1156.959205][T20851] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1156.964063][T17865] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.048076][T17865] bridge_slave_0: left promiscuous mode [ 1157.072759][T17865] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.148895][T20914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13265'. [ 1157.175098][T20916] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13264'. [ 1157.708722][T17865] bond8 (unregistering): (slave geneve2): Releasing active interface [ 1157.761541][T17865] geneve0 (unregistering): left allmulticast mode [ 1157.774039][T17865] team0: Port device geneve0 removed [ 1157.816968][T17865] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1158.005300][ T5351] Bluetooth: hci1: command 0x0406 tx timeout [ 1158.671262][T17865] bond6 (unregistering): (slave bond0): Releasing active interface [ 1158.687892][T17865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1158.703413][T17865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1158.716211][T17865] bond0 (unregistering): Released all slaves [ 1158.733994][T17865] bond1 (unregistering): Released all slaves [ 1158.961915][T17865] bond2 (unregistering): (slave veth3): Releasing active interface [ 1158.972179][T17865] bond2 (unregistering): Released all slaves [ 1158.990998][T17865] bond3 (unregistering): Released all slaves [ 1159.157617][T17865] bond4 (unregistering): Released all slaves [ 1159.318768][T17865] bond5 (unregistering): Released all slaves [ 1159.483693][T17865] bond6 (unregistering): Released all slaves [ 1159.648978][T17865] bond7 (unregistering): (slave veth11): Releasing active interface [ 1159.659712][T17865] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1159.671851][T17865] bond7 (unregistering): (slave veth13): Releasing active interface [ 1159.683400][T17865] bond7 (unregistering): Released all slaves [ 1159.832887][T17865] bond8 (unregistering): Released all slaves [ 1160.022102][T20933] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13268'. [ 1160.036070][T20933] xt_TCPMSS: Only works on TCP SYN packets [ 1160.087487][T20932] netlink: 100 bytes leftover after parsing attributes in process `syz.4.13270'. [ 1160.343861][T20957] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge0, syncid = 1, id = 0 [ 1160.359723][T20956] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.13276'. [ 1160.520079][T20966] xt_hashlimit: invalid rate [ 1160.591527][T20968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13278'. [ 1160.938352][T20992] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13289'. [ 1160.953770][T20989] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1160.965789][T20991] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13289'. [ 1160.980107][T20992] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13289'. [ 1161.013766][T20989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1161.172514][T21006] netlink: 'syz.1.13294': attribute type 2 has an invalid length. [ 1161.184190][T21006] netlink: 244 bytes leftover after parsing attributes in process `syz.1.13294'. [ 1161.203081][T21004] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13293'. [ 1161.218936][T21010] netlink: 'syz.4.13295': attribute type 1 has an invalid length. [ 1161.225582][T21004] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1161.229302][T21010] netlink: 760 bytes leftover after parsing attributes in process `syz.4.13295'. [ 1161.246114][T21004] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1161.257412][T21004] gretap1: entered promiscuous mode [ 1161.262659][T21004] gretap1: entered allmulticast mode [ 1161.443392][T21026] netlink: 'syz.4.13302': attribute type 64 has an invalid length. [ 1161.474682][T21027] xt_ecn: cannot match TCP bits for non-tcp packets [ 1161.600985][T21037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1161.707566][T21043] netlink: 'syz.6.13307': attribute type 1 has an invalid length. [ 1161.770195][T21043] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1161.793074][T21053] sctp: [Deprecated]: syz.1.13308 (pid 21053) Use of int in max_burst socket option. [ 1161.793074][T21053] Use struct sctp_assoc_value instead [ 1161.816042][T17865] : left promiscuous mode [ 1162.056494][T17865] tipc: Left network mode [ 1162.151273][T17865] IPVS: stopping backup sync thread 13428 ... [ 1162.401334][T21077] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1162.437782][T21076] ip6gre1: entered promiscuous mode [ 1162.443037][T21076] ip6gre1: entered allmulticast mode [ 1162.730676][T21091] bond3: Removing last arp target with arp_interval on [ 1162.747161][T21090] bond0: entered promiscuous mode [ 1162.752369][T21090] bond_slave_0: entered promiscuous mode [ 1162.758645][T21090] bond_slave_1: entered promiscuous mode [ 1162.767168][T21090] ip6gretap0: entered promiscuous mode [ 1162.774694][T21090] hsr1: entered promiscuous mode [ 1163.129205][T21109] netlink: 'syz.0.13327': attribute type 5 has an invalid length. [ 1163.281228][T21116] sctp: [Deprecated]: syz.5.13330 (pid 21116) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1163.281228][T21116] Use struct sctp_sack_info instead [ 1163.337011][T21116] sctp: [Deprecated]: syz.5.13330 (pid 21116) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1163.337011][T21116] Use struct sctp_sack_info instead [ 1163.428832][T21116] sctp: [Deprecated]: syz.5.13330 (pid 21116) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1163.428832][T21116] Use struct sctp_sack_info instead [ 1163.482972][T21116] sctp: [Deprecated]: syz.5.13330 (pid 21116) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1163.482972][T21116] Use struct sctp_sack_info instead [ 1163.566287][T21116] sctp: [Deprecated]: syz.5.13330 (pid 21116) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1163.566287][T21116] Use struct sctp_sack_info instead [ 1163.636752][T21116] sctp: [Deprecated]: syz.5.13330 (pid 21116) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1163.636752][T21116] Use struct sctp_sack_info instead [ 1163.695877][T21116] sctp: [Deprecated]: syz.5.13330 (pid 21116) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1163.695877][T21116] Use struct sctp_sack_info instead [ 1163.765506][T21116] sctp: [Deprecated]: syz.5.13330 (pid 21116) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1163.765506][T21116] Use struct sctp_sack_info instead [ 1163.825706][T21116] sctp: [Deprecated]: syz.5.13330 (pid 21116) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1163.825706][T21116] Use struct sctp_sack_info instead [ 1163.842867][T21116] sctp: [Deprecated]: syz.5.13330 (pid 21116) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1163.842867][T21116] Use struct sctp_sack_info instead [ 1164.426559][T17865] team0 (unregistering): Port device team_slave_1 removed [ 1164.482587][T17865] team0 (unregistering): Port device team_slave_0 removed [ 1164.938194][T21157] tipc: Enabling of bearer rejected, failed to enable media [ 1165.180327][T21181] netlink: 'syz.0.13345': attribute type 1 has an invalid length. [ 1165.237936][T21181] bond4: entered promiscuous mode [ 1165.243678][T21181] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1165.333165][T21181] bond4: (slave bridge1): making interface the new active one [ 1165.342877][T21181] bridge1: entered promiscuous mode [ 1165.361222][T21181] bridge1: left promiscuous mode [ 1165.534677][T21191] tun0: tun_chr_ioctl cmd 1074025675 [ 1165.541040][T21191] tun0: persist disabled [ 1165.964767][T21229] syzkaller0: entered promiscuous mode [ 1165.974419][T21229] syzkaller0: entered allmulticast mode [ 1166.053621][T21239] __nla_validate_parse: 14 callbacks suppressed [ 1166.053643][T21239] netlink: 56 bytes leftover after parsing attributes in process `syz.6.13365'. [ 1166.506311][T21264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13373'. [ 1166.560640][T21264] openvswitch: netlink: IP tunnel dst address not specified [ 1166.562460][T21267] netlink: 'syz.6.13374': attribute type 1 has an invalid length. [ 1167.199533][T21300] netlink: 'syz.0.13383': attribute type 10 has an invalid length. [ 1167.213159][T21281] xfrm1: entered allmulticast mode [ 1167.316147][T21300] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1167.338434][T17865] IPVS: stop unused estimator thread 0... [ 1167.437239][T21314] xt_l2tp: v2 doesn't support IP mode [ 1167.730574][T21327] sctp: [Deprecated]: syz.4.13389 (pid 21327) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1167.730574][T21327] Use struct sctp_sack_info instead [ 1167.787109][T21327] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13389'. [ 1167.796424][T21327] netlink: 'syz.4.13389': attribute type 1 has an invalid length. [ 1167.811727][T21327] netlink: 'syz.4.13389': attribute type 2 has an invalid length. [ 1167.821169][T21327] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13389'. [ 1168.584005][T21371] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13401'. [ 1168.593784][T21368] netlink: 666 bytes leftover after parsing attributes in process `syz.4.13399'. [ 1168.766431][T21382] openvswitch: netlink: IP tunnel dst address not specified [ 1168.783054][T21388] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13405'. [ 1169.142337][T21416] netlink: 192 bytes leftover after parsing attributes in process `syz.5.13412'. [ 1169.293519][T21424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13414'. [ 1169.487319][T21432] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13416'. [ 1169.541056][T21435] lo: entered allmulticast mode [ 1169.549864][T21435] netlink: 'syz.4.13417': attribute type 6 has an invalid length. [ 1169.667384][T21434] lo: left allmulticast mode [ 1169.960429][ T8740] hid-generic 0005:0002:5508.0005: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1170.576750][T21456] lo speed is unknown, defaulting to 1000 [ 1170.609364][T21456] lo speed is unknown, defaulting to 1000 [ 1170.630038][T21456] lo speed is unknown, defaulting to 1000 [ 1170.787870][T21480] netlink: 'syz.4.13429': attribute type 12 has an invalid length. [ 1170.812936][T21475] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1170.828854][T21475] bond3 (unregistering): Released all slaves [ 1170.947498][T21481] netlink: 'syz.4.13429': attribute type 1 has an invalid length. [ 1170.964021][T21456] infiniband syz2: set active [ 1170.989290][T21456] infiniband syz2: added lo [ 1171.000149][ T8740] lo speed is unknown, defaulting to 1000 [ 1171.011351][T21456] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1171.038371][T21456] infiniband syz2: Couldn't open port 1 [ 1171.210143][T21456] RDS/IB: syz2: added [ 1171.219204][T21456] smc: adding ib device syz2 with port count 1 [ 1171.236986][T21456] smc: ib device syz2 port 1 has no pnetid [ 1171.259163][ T5947] lo speed is unknown, defaulting to 1000 [ 1171.265305][T21456] lo speed is unknown, defaulting to 1000 [ 1171.338084][T21499] __nla_validate_parse: 5 callbacks suppressed [ 1171.338101][T21499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13434'. [ 1171.420115][T21499] vlan0: entered allmulticast mode [ 1171.425879][T21499] mac80211_hwsim hwsim127 wlan0: entered allmulticast mode [ 1171.685902][T21506] dvmrp0: entered allmulticast mode [ 1171.953656][T21528] netlink: 192 bytes leftover after parsing attributes in process `syz.1.13439'. [ 1172.120300][T21456] lo speed is unknown, defaulting to 1000 [ 1172.229267][T21532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13440'. [ 1172.238994][T21533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13440'. [ 1172.257838][T21533] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1172.279912][T21532] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1172.522956][T21456] lo speed is unknown, defaulting to 1000 [ 1172.622610][T21554] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13447'. [ 1172.645708][T21558] syzkaller0: entered promiscuous mode [ 1172.655137][T21558] syzkaller0: entered allmulticast mode [ 1172.802817][T21558] netlink: 'syz.6.13449': attribute type 24 has an invalid length. [ 1172.844351][T21568] netlink: 'syz.5.13450': attribute type 7 has an invalid length. [ 1172.852602][T21568] netlink: 140 bytes leftover after parsing attributes in process `syz.5.13450'. [ 1172.941325][T21574] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13452'. [ 1172.994193][T21575] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13452'. [ 1173.122296][T21456] lo speed is unknown, defaulting to 1000 [ 1173.213023][T21581] netlink: 'syz.1.13454': attribute type 39 has an invalid length. [ 1173.360258][T21597] netlink: 'syz.1.13454': attribute type 8 has an invalid length. [ 1173.379844][T21599] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13457'. [ 1173.416961][T21597] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13454'. [ 1173.627303][T21594] syzkaller1: entered promiscuous mode [ 1173.638263][T21594] syzkaller1: entered allmulticast mode [ 1173.773373][T21456] lo speed is unknown, defaulting to 1000 [ 1173.986077][T21624] SET target dimension over the limit! [ 1174.114137][T21456] lo speed is unknown, defaulting to 1000 [ 1174.658623][T21456] lo speed is unknown, defaulting to 1000 [ 1174.877874][T21674] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20000 [ 1175.081738][T21661] syzkaller0: entered promiscuous mode [ 1175.091953][T21661] syzkaller0: entered allmulticast mode [ 1177.214362][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1177.238305][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 1178.099305][T21456] lo speed is unknown, defaulting to 1000 [ 1178.116695][T21702] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1178.192626][T21705] __nla_validate_parse: 4 callbacks suppressed [ 1178.192645][T21705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13485'. [ 1178.230063][T21705] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13485'. [ 1178.359524][T21710] netlink: 128 bytes leftover after parsing attributes in process `syz.6.13487'. [ 1178.484583][T21725] netlink: 84 bytes leftover after parsing attributes in process `syz.5.13490'. [ 1178.565887][T21456] lo speed is unknown, defaulting to 1000 [ 1178.684419][T21736] syzkaller0: entered promiscuous mode [ 1178.703646][T21736] syzkaller0: entered allmulticast mode [ 1179.007065][T21456] lo speed is unknown, defaulting to 1000 [ 1179.325998][T21456] lo speed is unknown, defaulting to 1000 [ 1179.416924][T21757] tipc: Started in network mode [ 1179.422014][T21757] tipc: Node identity 2eec4930585a, cluster identity 4711 [ 1179.430760][T21757] tipc: Enabled bearer , priority 0 [ 1179.443449][T21759] netlink: 48 bytes leftover after parsing attributes in process `syz.5.13499'. [ 1179.459659][T21757] syzkaller0: entered promiscuous mode [ 1179.476120][T21757] syzkaller0: entered allmulticast mode [ 1179.509411][T21756] tipc: Resetting bearer [ 1179.584162][T21756] tipc: Disabling bearer [ 1179.776020][T21456] lo speed is unknown, defaulting to 1000 [ 1180.079927][T21791] xt_TCPMSS: Only works on TCP SYN packets [ 1180.140615][T21794] netlink: 'syz.5.13509': attribute type 23 has an invalid length. [ 1180.282628][T21804] syzkaller1: entered promiscuous mode [ 1180.345287][T21804] syzkaller1: entered allmulticast mode [ 1180.560938][T21821] netlink: 'syz.4.13518': attribute type 1 has an invalid length. [ 1180.944667][T21848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13526'. [ 1181.197057][T21865] 8021q: VLANs not supported on ip_vti0 [ 1181.245214][T21862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1181.256787][T21872] netlink: 'syz.0.13534': attribute type 1 has an invalid length. [ 1181.268942][T21867] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1181.291307][T21873] netlink: 'syz.0.13534': attribute type 1 has an invalid length. [ 1181.391026][T21874] bond5: (slave gretap2): making interface the new active one [ 1181.402049][T21874] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 1181.441629][T21887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13536'. [ 1181.789367][T21914] netlink: 36 bytes leftover after parsing attributes in process `syz.6.13544'. [ 1182.220600][T21943] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13556'. [ 1182.226117][T21946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13557'. [ 1182.262360][ T30] audit: type=1107 audit(1766848038.693:17): pid=21945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1182.323512][T21956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1182.716857][T21977] netlink: ct family unspecified [ 1182.805040][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5570 ms [ 1182.813123][ C0] lec:lec_tx_timeout: lec0 [ 1183.596497][T22038] openvswitch: netlink: Message has 8 unknown bytes. [ 1183.624494][T22038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1183.698271][T22048] __nla_validate_parse: 4 callbacks suppressed [ 1183.698290][T22048] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13587'. [ 1183.752428][T22010] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1183.773921][T22010] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.13577'. [ 1183.782734][T22054] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13591'. [ 1183.931341][T22059] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1183.943411][T22061] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13593'. [ 1183.956310][T22057] netlink: 'syz.0.13592': attribute type 1 has an invalid length. [ 1183.957649][T22059] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13594'. [ 1184.147938][T22062] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 1184.202901][T22066] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1184.285613][T22066] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 1184.354478][T22071] gretap3: entered promiscuous mode [ 1184.366084][T22071] bond6: (slave gretap3): making interface the new active one [ 1184.374178][T22071] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 1184.394575][T22076] macvlan2: entered promiscuous mode [ 1184.401764][T22076] macvlan2: entered allmulticast mode [ 1184.409927][T22076] bond6: entered promiscuous mode [ 1184.417767][T22076] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1184.429608][T22076] bond6: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap3 [ 1184.443014][T22076] bond6: left promiscuous mode [ 1184.474298][T22081] syzkaller0: entered promiscuous mode [ 1184.480586][T22081] syzkaller0: entered allmulticast mode [ 1184.627376][T22097] netlink: 108 bytes leftover after parsing attributes in process `syz.4.13603'. [ 1184.654083][T22105] ipt_REJECT: ECHOREPLY no longer supported. [ 1184.707724][T22109] netlink: 'syz.5.13605': attribute type 4 has an invalid length. [ 1184.729817][T22109] netlink: 152 bytes leftover after parsing attributes in process `syz.5.13605'. [ 1184.783657][T22109] `: renamed from bond0 (while UP) [ 1184.942646][T22126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13610'. [ 1185.111057][T22138] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1185.131069][T22132] netlink: 'syz.5.13609': attribute type 1 has an invalid length. [ 1185.140467][T22138] bond7: (slave lo): Enslaving as a backup interface with an up link [ 1185.152022][T22132] netlink: 96 bytes leftover after parsing attributes in process `syz.5.13609'. [ 1185.162448][T22138] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1185.188963][T22132] netlink: 658 bytes leftover after parsing attributes in process `syz.5.13609'. [ 1185.200370][ T5947] lo speed is unknown, defaulting to 1000 [ 1185.211480][ T48] lo speed is unknown, defaulting to 1000 [ 1185.221266][ T5947] lo speed is unknown, defaulting to 1000 [ 1185.491042][T22159] netlink: 'syz.5.13616': attribute type 1 has an invalid length. [ 1185.584051][T22159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1185.593884][T22167] netlink: 'syz.4.13617': attribute type 8 has an invalid length. [ 1185.874701][T22176] netlink: 'syz.6.13621': attribute type 1 has an invalid length. [ 1186.016757][T22180] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1186.049354][T22180] bond9: (slave bond10): making interface the new active one [ 1186.063506][T22180] bond9: (slave bond10): Enslaving as an active interface with an up link [ 1186.081830][T22184] pim6reg1: entered promiscuous mode [ 1186.089033][T22184] pim6reg1: entered allmulticast mode [ 1186.095746][T22176] syzkaller1: entered promiscuous mode [ 1186.101502][T22176] syzkaller1: entered allmulticast mode [ 1186.650734][T22224] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1186.773876][T22226] netlink: 'syz.5.13634': attribute type 3 has an invalid length. [ 1186.798875][T22236] xt_recent: Unsupported userspace flags (000000b1) [ 1186.825787][T22239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1187.313053][T22273] netlink: 'syz.1.13648': attribute type 6 has an invalid length. [ 1187.327665][T22273] netlink: 'syz.1.13648': attribute type 6 has an invalid length. [ 1187.337422][T22273] netlink: 'syz.1.13648': attribute type 6 has an invalid length. [ 1187.340980][T22271] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1187.347417][T22273] netlink: 'syz.1.13648': attribute type 6 has an invalid length. [ 1187.364290][T22273] netlink: 'syz.1.13648': attribute type 6 has an invalid length. [ 1187.416308][T22274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1187.555846][T22281] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1187.630517][T22286] syzkaller0: entered promiscuous mode [ 1187.650525][T22286] syzkaller0: entered allmulticast mode [ 1187.860021][T22288] pim6reg1: entered promiscuous mode [ 1187.875016][T22288] pim6reg1: entered allmulticast mode [ 1188.162610][T22311] !€ÿ: renamed from bond_slave_0 (while UP) [ 1188.430400][T22329] syzkaller0: entered promiscuous mode [ 1188.443043][T22329] syzkaller0: entered allmulticast mode [ 1188.672615][T22350] xt_ecn: cannot match TCP bits for non-tcp packets [ 1189.066907][T22372] netlink: 'syz.5.13669': attribute type 1 has an invalid length. [ 1189.201550][T22383] __nla_validate_parse: 12 callbacks suppressed [ 1189.201568][T22383] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13676'. [ 1189.217479][T22382] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13678'. [ 1189.265757][T22364] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13669'. [ 1189.374081][T22389] bond8: Unable to set down delay as MII monitoring is disabled [ 1189.432368][T22389] bond8 (unregistering): Released all slaves [ 1189.500129][T22402] netlink: 96 bytes leftover after parsing attributes in process `syz.1.13683'. [ 1189.511465][T22402] netlink: 1 bytes leftover after parsing attributes in process `syz.1.13683'. [ 1189.543911][T22404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13686'. [ 1189.592873][T22388] bond8: Unable to set down delay as MII monitoring is disabled [ 1189.603964][T22388] bond8 (unregistering): Released all slaves [ 1189.642860][T22404] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13686'. [ 1190.013621][T22430] syzkaller0: entered promiscuous mode [ 1190.020498][T22430] syzkaller0: entered allmulticast mode [ 1190.149497][T22440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13698'. [ 1190.220851][T22446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13701'. [ 1190.230885][T22446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13701'. [ 1190.330373][T22444] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.338030][T22444] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.506851][T22444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1190.523906][T22444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1190.612694][T22444] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1190.663420][T22444] geneve3: left promiscuous mode [ 1190.672976][T22444] gretap1: left promiscuous mode [ 1190.684779][T22444] bond4: left promiscuous mode [ 1190.697641][T22444] gretap3: left promiscuous mode [ 1190.710264][T14954] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1190.745227][T14954] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.762300][T14954] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1190.815074][T14954] netdevsim netdevsim0 netdevsim0: unset [1, 2] type 2 family 0 port 19999 - 0 [ 1190.824245][T14954] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1190.853472][T14954] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.865402][T14954] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1190.874654][T14954] netdevsim netdevsim0 netdevsim1: unset [1, 2] type 2 family 0 port 19999 - 0 [ 1190.890535][T14954] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1190.921690][T14954] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.934978][T14954] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1190.957794][T14954] netdevsim netdevsim0 netdevsim2: unset [1, 2] type 2 family 0 port 19999 - 0 [ 1190.976519][T14954] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1190.995080][T14954] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.007242][T14954] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1191.025070][T14954] netdevsim netdevsim0 netdevsim3: unset [1, 2] type 2 family 0 port 19999 - 0 [ 1191.045795][T22467] caif0: renamed from bond0 (while UP) [ 1191.178694][T22481] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1191.205914][T22483] Bluetooth: MGMT ver 1.23 [ 1191.572394][T22500] validate_nla: 2 callbacks suppressed [ 1191.572413][T22500] netlink: 'syz.6.13718': attribute type 9 has an invalid length. [ 1191.586206][T22500] netlink: 'syz.6.13718': attribute type 11 has an invalid length. [ 1191.594122][T22500] netlink: 'syz.6.13718': attribute type 12 has an invalid length. [ 1191.811160][T22518] netlink: 'syz.4.13723': attribute type 32 has an invalid length. [ 1191.971382][T22518] bond5: option coupled_control: invalid value (20) [ 1192.029296][T22518] bond5 (unregistering): Released all slaves [ 1192.258241][T22550] gre0: entered promiscuous mode [ 1192.264212][T22550] gre0: entered allmulticast mode [ 1192.311094][T22557] set match dimension is over the limit! [ 1193.217561][T22605] pim6reg: entered allmulticast mode [ 1193.370355][T22620] netlink: 'syz.0.13754': attribute type 1 has an invalid length. [ 1193.423008][T22620] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1193.538848][T22626] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1193.547948][T22626] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1193.561101][T22626] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 1193.698507][T22637] veth3: entered promiscuous mode [ 1193.713308][T22637] bond8: (slave veth3): Enslaving as an active interface with a down link [ 1193.733154][T22643] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1193.924254][T22659] openvswitch: netlink: Key type 4112 is out of range max 32 [ 1194.263396][T22685] __nla_validate_parse: 27 callbacks suppressed [ 1194.263415][T22685] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13775'. [ 1194.283707][T22685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13775'. [ 1194.302548][T22685] tap0: tun_chr_ioctl cmd 1074025678 [ 1194.328270][T22685] tap0: group set to 0 [ 1194.456616][T22694] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1194.529904][T22694] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13779'. [ 1194.571325][T22694] netlink: 184 bytes leftover after parsing attributes in process `syz.1.13779'. [ 1194.705346][T22711] netlink: 200 bytes leftover after parsing attributes in process `syz.0.13782'. [ 1194.730989][T22711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13782'. [ 1195.159934][T22737] netlink: 'syz.4.13787': attribute type 30 has an invalid length. [ 1195.214281][T22741] netlink: 'syz.4.13787': attribute type 21 has an invalid length. [ 1195.276132][T22741] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13787'. [ 1195.602299][T22756] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13790'. [ 1195.671994][T22764] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13790'. [ 1195.684080][T22764] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13790'. [ 1195.938918][T22778] nbd: illegal input index -8454144 [ 1195.997116][T22787] netlink: 'syz.1.13803': attribute type 10 has an invalid length. [ 1196.088521][T22787] dummy0: entered promiscuous mode [ 1196.104029][T22787] caif0: (slave dummy0): Enslaving as an active interface with an up link [ 1196.231305][T22797] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1196.286722][T22799] SET target dimension over the limit! [ 1196.544691][T22825] netlink: 'syz.1.13816': attribute type 4 has an invalid length. [ 1196.724675][T22833] batadv1: entered allmulticast mode [ 1197.523445][T22838] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1197.751466][T22867] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1197.764475][T22868] netlink: 'syz.0.13828': attribute type 21 has an invalid length. [ 1198.190977][T22894] netlink: 'syz.0.13836': attribute type 15 has an invalid length. [ 1198.607373][T22917] syzkaller0: entered promiscuous mode [ 1198.621913][T22917] syzkaller0: entered allmulticast mode [ 1198.726197][ T5351] Bluetooth: hci1: command 0x0406 tx timeout [ 1201.737259][T22969] vlan1: entered allmulticast mode [ 1201.752724][T22969] veth1: entered allmulticast mode [ 1201.957026][T22994] __nla_validate_parse: 20 callbacks suppressed [ 1201.957047][T22994] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13865'. [ 1202.177919][T23014] netlink: 'syz.4.13870': attribute type 15 has an invalid length. [ 1202.193748][T23014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13870'. [ 1202.223046][T23014] netlink: 'syz.4.13870': attribute type 15 has an invalid length. [ 1202.231541][T23014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13870'. [ 1202.308709][T23017] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.13871'. [ 1202.429887][T23026] xt_ecn: cannot match TCP bits for non-tcp packets [ 1202.481772][T23025] netlink: 'syz.4.13872': attribute type 29 has an invalid length. [ 1202.532356][T23021] netlink: 'syz.4.13872': attribute type 29 has an invalid length. [ 1202.699245][T23039] netlink: 'syz.5.13876': attribute type 10 has an invalid length. [ 1202.752858][T23039] team0: Device veth1_macvtap failed to register rx_handler [ 1203.130029][T23059] netlink: 'syz.0.13884': attribute type 4 has an invalid length. [ 1203.143565][T23059] netlink: 'syz.0.13884': attribute type 4 has an invalid length. [ 1203.219898][T23061] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13886'. [ 1203.239388][T23063] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 1203.254212][T23063] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 1203.254276][T23065] batadv_slave_1: entered promiscuous mode [ 1203.295462][T23067] netlink: 'syz.0.13888': attribute type 1 has an invalid length. [ 1203.329959][T23067] bond10: entered promiscuous mode [ 1203.335810][T23067] bond10: entered allmulticast mode [ 1203.341356][T23068] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1203.351628][T23067] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1203.481228][T23064] batadv_slave_1: left promiscuous mode [ 1203.608612][T23089] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1203.661727][T23089] bond7: (slave lo): Enslaving as a backup interface with an up link [ 1203.676588][T23089] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1203.793258][T23110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13897'. [ 1203.806937][T23103] bond8: option resend_igmp: invalid value (32767) [ 1203.823813][T23103] bond8: option resend_igmp: allowed values 0 - 255 [ 1203.849349][T23103] bond8 (unregistering): Released all slaves [ 1203.914340][T23113] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1203.991215][T23116] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.13898'. [ 1204.017911][T23116] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 1204.069443][T23121] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13900'. [ 1204.092299][T23117] netlink: 'syz.4.13899': attribute type 1 has an invalid length. [ 1204.146608][T23124] netlink: 'syz.4.13899': attribute type 58 has an invalid length. [ 1204.197568][T23124] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13899'. [ 1204.227886][T23120] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13900'. [ 1204.282595][T23133] 8021q: VLANs not supported on xfrm0 [ 1204.334653][T23124] bond8: (slave bridge8): making interface the new active one [ 1204.356627][T23124] bond8: (slave bridge8): Enslaving as an active interface with an up link [ 1204.737127][ T5351] Bluetooth: hci3: link tx timeout [ 1204.744260][ T5351] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1204.765108][ T5831] Bluetooth: hci3: link tx timeout [ 1204.770293][ T5831] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1205.218693][T23156] ip6t_REJECT: ECHOREPLY is not supported [ 1205.331264][T23187] netlink: 'syz.5.13919': attribute type 9 has an invalid length. [ 1205.359658][T23187] netlink: 'syz.5.13919': attribute type 11 has an invalid length. [ 1205.379100][T14953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.425560][T23187] netlink: 'syz.5.13919': attribute type 12 has an invalid length. [ 1205.550239][T23198] bond11: Unable to set up delay as MII monitoring is disabled [ 1205.563636][T23198] bond11 (unregistering): Released all slaves [ 1205.664387][T23210] netlink: 'syz.6.13925': attribute type 21 has an invalid length. [ 1205.703480][T23208] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1205.710836][T23208] IPv6: NLM_F_CREATE should be set when creating new route [ 1205.964122][T23210] netlink: 'syz.6.13925': attribute type 4 has an invalid length. [ 1205.976031][T23208] lo: entered allmulticast mode [ 1205.986427][T23208] tunl0: entered allmulticast mode [ 1206.001091][T23208] gre0: entered allmulticast mode [ 1206.017220][T17865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.027849][T23208] gretap0: entered allmulticast mode [ 1206.068026][T23208] erspan0: entered allmulticast mode [ 1206.082556][T23208] ip_vti0: entered allmulticast mode [ 1206.103251][T23208] ip6_vti0: entered allmulticast mode [ 1206.120091][T23208] sit0: entered allmulticast mode [ 1206.169672][T23208] ip6tnl0: entered allmulticast mode [ 1206.184808][T23208] ip6gre0: entered allmulticast mode [ 1206.211242][T23208] ip6gretap0: entered allmulticast mode [ 1206.228311][T23208] vcan0: entered allmulticast mode [ 1206.257520][T23208] caif0: entered allmulticast mode [ 1206.262681][T23208] !€ÿ: entered allmulticast mode [ 1206.268117][T23208] bond_slave_1: entered allmulticast mode [ 1206.273842][T23208] dummy0: entered allmulticast mode [ 1206.288126][T23208] team0: entered allmulticast mode [ 1206.293268][T23208] team_slave_0: entered allmulticast mode [ 1206.308084][T23208] team_slave_1: entered allmulticast mode [ 1206.333523][T23208] nlmon0: entered allmulticast mode [ 1206.346125][T23208] batadv0: entered allmulticast mode [ 1206.363822][T23208] vxcan0: entered allmulticast mode [ 1206.382475][T23208] vxcan1: entered allmulticast mode [ 1206.396838][T23208] veth0: entered allmulticast mode [ 1206.432764][T23208] wg0: entered allmulticast mode [ 1206.444624][T23208] wg1: entered allmulticast mode [ 1206.465583][T23208] wg2: entered allmulticast mode [ 1206.481844][T23208] veth0_to_bridge: entered allmulticast mode [ 1206.496300][T23208] bridge_slave_0: entered allmulticast mode [ 1206.517112][T23208] veth1_to_bridge: entered allmulticast mode [ 1206.537507][T23208] bridge_slave_1: entered allmulticast mode [ 1206.556468][T23208] veth0_to_bond: entered allmulticast mode [ 1206.585836][T23208] veth1_to_bond: entered allmulticast mode [ 1206.607230][T23208] veth0_to_team: entered allmulticast mode [ 1206.632609][T23208] veth1_to_team: entered allmulticast mode [ 1206.663630][T23208] veth0_to_batadv: entered allmulticast mode [ 1206.683796][T23208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1206.699687][T23208] batadv_slave_0: entered allmulticast mode [ 1206.715869][T23208] veth1_to_batadv: entered allmulticast mode [ 1206.732840][T23208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1206.748068][T23208] batadv_slave_1: entered allmulticast mode [ 1206.763259][T23208] xfrm0: entered allmulticast mode [ 1206.777454][T23208] veth0_to_hsr: entered allmulticast mode [ 1206.794154][T23208] hsr_slave_0: entered allmulticast mode [ 1206.805336][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 1206.819398][T23208] veth1_to_hsr: entered allmulticast mode [ 1206.840455][T23208] hsr_slave_1: entered allmulticast mode [ 1206.859775][T23208] hsr0: entered allmulticast mode [ 1206.871486][T23208] veth1_virt_wifi: entered allmulticast mode [ 1206.891223][T23208] veth0_virt_wifi: entered allmulticast mode [ 1206.908164][T23208] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1206.924445][T23208] veth1_macvtap: entered allmulticast mode [ 1206.937632][T23208] veth0_macvtap: entered allmulticast mode [ 1206.957692][T23208] macvtap0: entered allmulticast mode [ 1206.973934][T23208] macsec0: entered allmulticast mode [ 1206.990413][T23208] geneve0: entered allmulticast mode [ 1207.002649][T23208] geneve1: entered allmulticast mode [ 1207.020416][T23208] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1207.033366][T23208] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1207.042321][T23208] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 1207.059112][T23208] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 1207.077095][T23208] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 1207.115913][T23208] mac80211_hwsim hwsim128 wlan1: entered allmulticast mode [ 1207.131386][T23208] bond1: left promiscuous mode [ 1207.143205][T23208] 9: entered allmulticast mode [ 1207.149900][T23208] sit1: entered allmulticast mode [ 1207.158903][T23208] rose0: entered allmulticast mode [ 1207.167294][T23208] bridge0: entered allmulticast mode [ 1207.177494][T23208] @: entered allmulticast mode [ 1207.186125][T23208] ip6erspan0: entered allmulticast mode [ 1207.197313][T23208] ip6tnl1: entered allmulticast mode [ 1207.202700][T23208] bond2: entered allmulticast mode [ 1207.208231][T23208] gretap1: entered allmulticast mode [ 1207.219689][T23208] ip6gre1: left promiscuous mode [ 1207.230161][T23208] hsr1: left promiscuous mode [ 1207.238245][T23208] hsr1: entered allmulticast mode [ 1207.243425][T23208] syztnl0: entered allmulticast mode [ 1207.249257][T23208] bridge1: entered allmulticast mode [ 1207.266886][T23208] gre1: entered allmulticast mode [ 1207.307238][T23208] bridge2: entered allmulticast mode [ 1207.324327][T23208] ;: entered allmulticast mode [ 1207.335804][T23208] veth2: entered allmulticast mode [ 1207.341163][T23208] veth3: entered allmulticast mode [ 1207.348984][T23208] bond3: entered allmulticast mode [ 1207.358427][T23208] bond0: entered allmulticast mode [ 1207.363826][T23208] mac80211_hwsim hwsim137 wlan2: entered allmulticast mode [ 1207.373619][T23208] syztnl2: entered allmulticast mode [ 1207.406954][T23234] __nla_validate_parse: 15 callbacks suppressed [ 1207.406972][T23234] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13929'. [ 1207.463782][T17858] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1207.494308][T17858] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.499534][T23244] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13931'. [ 1207.512040][T17858] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1207.543093][T17858] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.555422][T17858] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1207.587608][T17858] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.627241][T17858] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1207.654761][T17858] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.919446][T23272] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13941'. [ 1208.011478][T23273] v: renamed from vlan0 [ 1208.022346][T23281] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.13943'. [ 1208.288482][T23299] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13949'. [ 1208.330244][T23299] vlan0: entered promiscuous mode [ 1208.353181][T23299] erspan0: entered promiscuous mode [ 1208.521064][T23319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1208.651062][T23322] bond11: option resend_igmp: invalid value (32767) [ 1208.659171][T23322] bond11: option resend_igmp: allowed values 0 - 255 [ 1208.688354][T23322] bond11 (unregistering): Released all slaves [ 1208.865856][T23339] validate_nla: 2 callbacks suppressed [ 1208.865873][T23339] netlink: 'syz.1.13963': attribute type 1 has an invalid length. [ 1208.877729][T23337] netlink: 'syz.6.13958': attribute type 13 has an invalid length. [ 1208.894556][T23348] sctp: [Deprecated]: syz.0.13964 (pid 23348) Use of int in maxseg socket option. [ 1208.894556][T23348] Use struct sctp_assoc_value instead [ 1208.921186][T23349] netlink: 836 bytes leftover after parsing attributes in process `syz.1.13963'. [ 1208.977139][T23290] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1209.051314][T23357] netlink: 164 bytes leftover after parsing attributes in process `syz.5.13967'. [ 1209.192043][T23339] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1209.240617][T23349] veth0_to_bond: left allmulticast mode [ 1209.290676][T23349] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1209.360640][T23352] bond4: entered promiscuous mode [ 1209.366521][T23352] bond4: entered allmulticast mode [ 1209.377041][T23372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13969'. [ 1209.386334][T23372] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1209.426323][T23372] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13969'. [ 1209.504046][T23389] netlink: 36 bytes leftover after parsing attributes in process `syz.5.13973'. [ 1209.716131][T23397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1209.939472][T23412] netlink: 'syz.0.13982': attribute type 2 has an invalid length. [ 1210.394189][T23441] bridge0: port 4(batadv1) entered blocking state [ 1210.401034][T23441] bridge0: port 4(batadv1) entered disabled state [ 1210.434356][T23441] batadv1: entered allmulticast mode [ 1210.451190][T23441] batadv1: entered promiscuous mode [ 1210.470221][T23449] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1210.477638][T23449] IPv6: NLM_F_CREATE should be set when creating new route [ 1210.484961][T23449] IPv6: NLM_F_CREATE should be set when creating new route [ 1210.492200][T23449] IPv6: NLM_F_CREATE should be set when creating new route [ 1210.499620][T23453] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1210.538995][T23451] netlink: 'syz.0.13993': attribute type 1 has an invalid length. [ 1210.900637][T14953] batman_adv: batadv1: IGMP Querier appeared [ 1210.906979][T14953] batman_adv: batadv1: MLD Querier appeared [ 1211.043183][T23495] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1211.054209][T14953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.135772][T31059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.237420][T23445] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1211.490693][T23535] netlink: 'syz.4.14018': attribute type 10 has an invalid length. [ 1211.514059][T23535] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1212.045207][T23553] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 1212.059638][T23557] IPVS: set_ctl: invalid protocol: 92 255.255.255.255:20000 [ 1212.070533][T23554] netlink: 'syz.4.14024': attribute type 10 has an invalid length. [ 1212.080051][T23554] dummy0: left promiscuous mode [ 1212.100590][T23554] dummy0: entered promiscuous mode [ 1212.110845][T23554] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1212.466841][T23591] sctp: [Deprecated]: syz.0.14034 (pid 23591) Use of int in max_burst socket option. [ 1212.466841][T23591] Use struct sctp_assoc_value instead [ 1212.518138][T23591] __nla_validate_parse: 8 callbacks suppressed [ 1212.518159][T23591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14034'. [ 1212.689007][T23605] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14038'. [ 1212.737265][T23605] netlink: 'syz.5.14038': attribute type 29 has an invalid length. [ 1212.769438][T23605] netlink: 'syz.5.14038': attribute type 29 has an invalid length. [ 1212.838778][T23605] netlink: 'syz.5.14038': attribute type 29 has an invalid length. [ 1212.908569][T23605] netlink: 'syz.5.14038': attribute type 29 has an invalid length. [ 1212.999148][T23628] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1213.018448][T23626] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14046'. [ 1213.157528][T23639] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.14048'. [ 1213.425551][T23656] sch_fq: defrate 0 ignored. [ 1213.497687][T23656] netlink: 64 bytes leftover after parsing attributes in process `syz.4.14056'. [ 1213.515758][T23661] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14058'. [ 1213.526918][T23659] bridge0: port 2(bridge_slave_1) entered blocking state [ 1213.534109][T23659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1213.541614][T23659] bridge0: port 1(bridge_slave_0) entered blocking state [ 1213.548857][T23659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1213.625856][T23659] 8021q: adding VLAN 0 to HW filter on device ` [ 1213.665031][T23659] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1213.965785][T17856] batman_adv: batadv1: MLD Querier disappeared - multicast optimizations disabled [ 1213.990680][T23687] netlink: 244 bytes leftover after parsing attributes in process `syz.5.14066'. [ 1214.018772][ T30] audit: type=1804 audit(1766848070.453:18): pid=23692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.14067" name="/newroot/342/cgroup.controllers" dev="tmpfs" ino=1757 res=1 errno=0 [ 1214.046184][T23692] validate_nla: 5 callbacks suppressed [ 1214.046201][T23692] netlink: 'syz.0.14067': attribute type 1 has an invalid length. [ 1214.064613][ T30] audit: type=1800 audit(1766848070.483:19): pid=23692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.14067" name="cgroup.controllers" dev="tmpfs" ino=1757 res=0 errno=0 [ 1214.134109][T23692] bond11 (unregistering): Released all slaves [ 1214.181940][T23694] ip6tnl1: entered promiscuous mode [ 1214.191430][T23694] ip6tnl1: entered allmulticast mode [ 1214.276827][T23708] netlink: 'syz.5.14070': attribute type 1 has an invalid length. [ 1214.336674][T23710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1214.372415][T23702] netlink: 'syz.5.14070': attribute type 27 has an invalid length. [ 1214.511190][T23718] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14075'. [ 1214.566573][T23723] netlink: 416 bytes leftover after parsing attributes in process `syz.4.14077'. [ 1214.622288][T23727] netlink: 64 bytes leftover after parsing attributes in process `syz.1.14079'. [ 1214.704784][T23738] netlink: 'syz.4.14081': attribute type 1 has an invalid length. [ 1214.719665][T23738] NCSI netlink: No device for ifindex 0 [ 1214.845865][T23744] netlink: 'syz.6.14084': attribute type 1 has an invalid length. [ 1214.943903][T23756] xt_NFQUEUE: number of queues (27568) out of range (got 68779) [ 1214.958771][T23744] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1215.023681][T23757] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1215.060619][T23757] bond11: (slave vxcan5): The slave device specified does not support setting the MAC address [ 1215.097535][T23757] bond11: (slave vxcan5): Error -95 calling set_mac_address [ 1215.281169][T23744] veth8: entered promiscuous mode [ 1215.299007][T23744] bond11: (slave veth8): Enslaving as an active interface with a down link [ 1215.332695][T23757] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1216.056885][T23818] tipc: Started in network mode [ 1216.061800][T23818] tipc: Node identity c63e92911baf, cluster identity 4711 [ 1216.084725][T23818] tipc: Enabled bearer , priority 0 [ 1216.103866][T23818] syzkaller0: entered allmulticast mode [ 1216.210109][T23829] tipc: Resetting bearer [ 1216.420063][T23817] tipc: Resetting bearer [ 1216.453386][T23817] tipc: Disabling bearer [ 1216.742050][T23865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1217.056348][T14951] batman_adv: batadv1: MLD Querier appeared [ 1217.382702][T23897] only policy match revision 0 supported [ 1217.382721][T23897] unable to load match [ 1217.436691][T23901] nbd: must specify at least one socket [ 1217.615649][T23917] ip6t_REJECT: ECHOREPLY is not supported [ 1217.640086][T23917] : entered promiscuous mode [ 1217.862121][T23937] __nla_validate_parse: 11 callbacks suppressed [ 1217.862141][T23937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14141'. [ 1218.166533][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.228656][T23956] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1218.236233][T23958] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14143'. [ 1218.295951][T23966] xt_hashlimit: invalid rate [ 1218.303344][T23968] netlink: 596 bytes leftover after parsing attributes in process `syz.5.14145'. [ 1218.328287][T23966] xt_hashlimit: invalid rate [ 1218.338690][T23958] netlink: 5 bytes leftover after parsing attributes in process `syz.6.14143'. [ 1218.385714][T23958] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 1218.536620][T23979] netlink: 'syz.6.14149': attribute type 12 has an invalid length. [ 1218.693202][T23989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14153'. [ 1218.710638][T23989] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14153'. [ 1218.759351][T23994] xt_TCPMSS: Only works on TCP SYN packets [ 1218.770247][T23997] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14155'. [ 1218.777649][T24000] xt_TCPMSS: Only works on TCP SYN packets [ 1218.790248][T23997] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14155'. [ 1218.827812][T23997] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14155'. [ 1218.852308][T23997] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14155'. [ 1218.968135][T24011] netlink: 'syz.1.14157': attribute type 1 has an invalid length. [ 1220.051719][T24082] delete_channel: no stack [ 1220.627229][T24115] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1221.101042][T24147] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1221.177975][T24152] netlink: 'syz.5.14201': attribute type 1 has an invalid length. [ 1221.497113][T24169] delete_channel: no stack [ 1221.702119][T24183] netlink: 'syz.1.14210': attribute type 21 has an invalid length. [ 1221.746805][T24183] netlink: 'syz.1.14210': attribute type 22 has an invalid length. [ 1221.768941][T24183] netlink: 'syz.1.14210': attribute type 23 has an invalid length. [ 1221.785164][T24183] netlink: 'syz.1.14210': attribute type 25 has an invalid length. [ 1221.924239][T24192] netlink: 'syz.5.14212': attribute type 1 has an invalid length. [ 1222.043207][T24192] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1222.082154][T24206] bond8: (slave geneve3): making interface the new active one [ 1222.099330][T24206] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 1222.294796][T24224] xt_l2tp: v2 doesn't support IP mode [ 1222.378798][T24230] wireguard2: entered promiscuous mode [ 1222.417406][T24230] wireguard2: entered allmulticast mode [ 1222.786973][T24259] nbd: nbd6 already in use [ 1222.792782][T24259] block nbd6: NBD_DISCONNECT [ 1222.826090][T24259] block nbd6: Send disconnect failed -32 [ 1222.831992][T24259] block nbd6: shutting down sockets [ 1222.972850][T13621] bridge_slave_1: left allmulticast mode [ 1223.003611][T13621] bridge_slave_1: left promiscuous mode [ 1223.023660][T24282] netlink: 'syz.0.14234': attribute type 1 has an invalid length. [ 1223.039362][T13621] bridge0: port 2(bridge_slave_1) entered disabled state [ 1223.088548][T24282] __nla_validate_parse: 46 callbacks suppressed [ 1223.088643][T24282] netlink: 224 bytes leftover after parsing attributes in process `syz.0.14234'. [ 1223.136730][T13621] bridge_slave_0: left allmulticast mode [ 1223.142675][T13621] bridge_slave_0: left promiscuous mode [ 1223.156497][T13621] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.247281][T24295] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14235'. [ 1223.498121][T13621] ip6gretap0 (unregistering): left promiscuous mode [ 1223.544675][T13621] bond8 (unregistering): (slave ip6gretap1): Releasing active interface [ 1223.894808][T13621] bond10 (unregistering): (slave gretap2): Releasing active interface [ 1223.984405][T13621] dvmrp0 (unregistering): left allmulticast mode [ 1224.037098][T13621] bond6 (unregistering): (slave geneve4): Releasing active interface [ 1224.080543][T13621] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1224.126584][T13621] team0: Port device geneve0 removed [ 1224.511560][T13621] bond5 (unregistering): (slave bridge7): Releasing backup interface [ 1224.753047][T13621] bond1 (unregistering): (slave veth3): Releasing active interface [ 1224.763402][T13621] bond1 (unregistering): Released all slaves [ 1224.944081][T13621] bond2 (unregistering): Released all slaves [ 1224.959155][T13621] bond0 (unregistering): Released all slaves [ 1225.151229][T13621] bond3 (unregistering): Released all slaves [ 1225.163492][T13621] bond4 (unregistering): Released all slaves [ 1225.177504][T13621] bond5 (unregistering): Released all slaves [ 1225.357754][T13621] bond6 (unregistering): Released all slaves [ 1225.530483][T13621] bond7 (unregistering): (slave veth11): Releasing active interface [ 1225.541620][T13621] bond7 (unregistering): (slave veth13): Releasing active interface [ 1225.551967][T13621] bond7 (unregistering): Released all slaves [ 1225.566622][T13621] bond8 (unregistering): Released all slaves [ 1225.579380][T13621] bond9 (unregistering): Released all slaves [ 1225.753425][T13621] bond10 (unregistering): Released all slaves [ 1225.908476][T14941] tipc: Resetting bearer [ 1225.959922][T24308] netlink: 52 bytes leftover after parsing attributes in process `syz.4.14239'. [ 1225.987509][T24308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14239'. [ 1226.092707][T24312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14241'. [ 1226.266705][T24312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1226.464971][T24333] netlink: 'syz.5.14247': attribute type 2 has an invalid length. [ 1226.499816][T24333] macvtap2: entered allmulticast mode [ 1226.508182][T24333] veth0_macvtap: entered allmulticast mode [ 1226.988125][T24359] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1227.110597][T24363] Cannot find add_set index 2 as target [ 1227.128077][T24366] bond0: Error: Cannot enslave bond to itself. [ 1227.162781][T24367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14260'. [ 1227.242672][T24367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14260'. [ 1227.324134][T24376] IPv6: sit2: Disabled Multicast RS [ 1227.378310][T24382] netlink: 2108 bytes leftover after parsing attributes in process `syz.0.14266'. [ 1227.379088][T24376] sit2: entered allmulticast mode [ 1227.582333][T13621] : left promiscuous mode [ 1227.668843][T13621] 9: left promiscuous mode [ 1227.771140][T13621] tipc: Disabling bearer [ 1227.789946][T24405] netlink: 'syz.1.14274': attribute type 1 has an invalid length. [ 1227.810096][T13621] tipc: Disabling bearer [ 1227.829839][T13621] tipc: Left network mode [ 1227.846428][T24405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14274'. [ 1227.884245][T24410] ipvlan1: entered promiscuous mode [ 1228.109100][T24424] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14280'. [ 1228.319489][T24431] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.14283'. [ 1228.339898][T24432] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.14283'. [ 1228.459037][T24439] netlink: 210796 bytes leftover after parsing attributes in process `syz.6.14282'. [ 1228.566671][T24450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14286'. [ 1228.655309][ T8728] IPVS: starting estimator thread 0... [ 1228.771668][T24461] IPVS: using max 34 ests per chain, 81600 per kthread [ 1229.058878][T24486] ip6t_srh: unknown srh match flags 4000 [ 1229.483003][T24507] netlink: 'syz.0.14300': attribute type 1 has an invalid length. [ 1229.555743][T24511] netlink: 276 bytes leftover after parsing attributes in process `syz.1.14301'. [ 1229.806153][T24523] xt_TCPMSS: Only works on TCP SYN packets [ 1229.972446][T24537] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1230.020347][T24537] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1230.038901][T24537] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1230.105902][T24537] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1230.113071][T24537] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1230.150290][T24537] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1230.170906][T24535] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1230.189255][T24537] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1230.208892][T24537] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1230.228300][T24537] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1230.285080][T13621] hsr_slave_0: left promiscuous mode [ 1230.294076][T24537] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1230.336135][T13621] hsr_slave_1: left promiscuous mode [ 1230.366161][T13621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1230.373590][T13621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1230.410391][T24551] netlink: 32 bytes leftover after parsing attributes in process `syz.6.14311'. [ 1230.431685][T13621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1230.464944][T13621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1230.525521][T24560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14314'. [ 1230.550136][T13621] team_slave_0: left promiscuous mode [ 1230.556120][T13621] team_slave_1: left promiscuous mode [ 1230.586089][T13621] veth1_macvtap: left promiscuous mode [ 1230.591695][T13621] veth0_macvtap: left promiscuous mode [ 1230.604562][T13621] veth1_vlan: left promiscuous mode [ 1230.616019][T13621] veth0_vlan: left promiscuous mode [ 1230.817300][T24572] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14318'. [ 1231.593344][T13621] team0 (unregistering): Port device team_slave_1 removed [ 1231.652274][T13621] team0 (unregistering): Port device team_slave_0 removed [ 1231.661932][T17858] smc: removing ib device !yz! [ 1231.760140][T31059] smc: removing ib device syû [ 1232.302653][T24569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14317'. [ 1232.771247][T24580] geneve4: entered promiscuous mode [ 1232.825449][T24580] geneve4: entered allmulticast mode [ 1232.967385][T24596] netlink: 'syz.0.14325': attribute type 1 has an invalid length. [ 1233.275434][T24614] __nla_validate_parse: 4 callbacks suppressed [ 1233.275452][T24614] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14330'. [ 1233.541587][T24627] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14335'. [ 1233.578538][T24626] pimreg3: entered allmulticast mode [ 1233.802746][T24636] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14337'. [ 1234.004067][T24644] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14339'. [ 1234.038085][T24644] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14339'. [ 1234.052430][T24644] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14339'. [ 1234.427681][T24654] netlink: 'syz.1.14341': attribute type 16 has an invalid length. [ 1234.435821][T24662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14345'. [ 1234.465229][T24654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14341'. [ 1234.989784][T24681] netlink: 'syz.4.14351': attribute type 21 has an invalid length. [ 1235.046340][T24681] netlink: 152 bytes leftover after parsing attributes in process `syz.4.14351'. [ 1235.270522][T24694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14355'. [ 1235.462588][T24701] block nbd6: Unsupported socket: should be TCP or UNIX. [ 1235.496909][T24704] IPVS: length: 239 != 24 [ 1235.801430][T24718] macvtap0: Device is already in use. [ 1235.885859][T24713] nbd6: detected capacity change from 0 to 127 [ 1235.915215][T24717] netlink: 'syz.1.14363': attribute type 2 has an invalid length. [ 1235.926482][ T5351] block nbd6: Receive control failed (result -32) [ 1236.383954][T24742] x_tables: duplicate underflow at hook 3 [ 1236.562566][T24755] netlink: 'syz.4.14372': attribute type 1 has an invalid length. [ 1236.571547][T24755] netlink: 'syz.4.14372': attribute type 1 has an invalid length. [ 1236.602960][T24755] netlink: 'syz.4.14372': attribute type 1 has an invalid length. [ 1236.970501][T24772] netlink: 'syz.6.14377': attribute type 1 has an invalid length. [ 1237.374572][T24772] bond12: entered promiscuous mode [ 1237.404018][T24772] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1237.461852][T24787] set match dimension is over the limit! [ 1237.568059][T24776] bond12: (slave bridge8): making interface the new active one [ 1237.581111][T24776] bridge8: entered promiscuous mode [ 1237.597430][T24776] bond12: (slave bridge8): Enslaving as an active interface with an up link [ 1238.665420][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 1238.939182][T24856] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1239.002003][T24863] xt_hashlimit: size too large, truncated to 1048576 [ 1239.301634][T24851] bond9 (unregistering): Released all slaves [ 1239.602362][T24883] netlink: 'syz.0.14405': attribute type 1 has an invalid length. [ 1239.627529][T24874] netlink: 'syz.4.14403': attribute type 29 has an invalid length. [ 1239.682375][T24885] bond13 (unregistering): Released all slaves [ 1239.782559][T24870] netlink: 'syz.4.14403': attribute type 29 has an invalid length. [ 1239.795458][T13621] IPVS: stop unused estimator thread 0... [ 1239.849259][T24886] bond13: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1239.863593][T24886] bond13: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1239.876909][T24886] bond13: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1240.128493][T24911] netlink: 'syz.5.14415': attribute type 29 has an invalid length. [ 1240.137853][T24911] __nla_validate_parse: 16 callbacks suppressed [ 1240.137875][T24911] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14415'. [ 1240.292415][T24925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14417'. [ 1240.603359][T24943] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14422'. [ 1240.618743][T24944] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14422'. [ 1240.623413][T24950] netlink: 'syz.0.14425': attribute type 29 has an invalid length. [ 1240.639150][T24950] netlink: 'syz.0.14425': attribute type 29 has an invalid length. [ 1240.649050][T24953] netlink: 'syz.0.14425': attribute type 29 has an invalid length. [ 1240.711588][T24956] netlink: 'syz.6.14427': attribute type 32 has an invalid length. [ 1240.719892][T24956] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14427'. [ 1240.793323][T24956] bond13: option coupled_control: invalid value (128) [ 1240.803502][T24956] bond13 (unregistering): Released all slaves [ 1241.020455][T24973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14432'. [ 1241.139567][T24980] netlink: 64 bytes leftover after parsing attributes in process `syz.4.14433'. [ 1241.150675][T24983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1241.188394][T24984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14434'. [ 1241.238107][T24984] syzkaller1: entered promiscuous mode [ 1241.243635][T24984] syzkaller1: entered allmulticast mode [ 1241.475334][T25009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14440'. [ 1241.726821][T25020] syzkaller0: entered promiscuous mode [ 1241.745272][T25020] syzkaller0: entered allmulticast mode [ 1242.027361][T25045] netlink: 60 bytes leftover after parsing attributes in process `syz.6.14451'. [ 1242.333569][T25057] netlink: 'syz.0.14457': attribute type 1 has an invalid length. [ 1242.341733][T25057] netlink: 'syz.0.14457': attribute type 1 has an invalid length. [ 1242.369166][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1242.379948][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1242.389167][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1242.400043][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1242.410744][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1242.537965][T25058] lo speed is unknown, defaulting to 1000 [ 1242.572467][T25068] IPVS: set_ctl: invalid protocol: 92 172.20.20.27:20001 [ 1242.731993][ T60] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1242.746385][ T60] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.758497][ T60] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1242.906938][ T60] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1242.921712][ T60] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.932376][ T60] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1243.000516][T25075] nbd9: detected capacity change from 0 to 127 [ 1243.009886][T25078] nbd: couldn't find a device at index 0 [ 1243.051044][ T60] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1243.074665][ T60] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.100257][ T60] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1243.146021][ T5351] block nbd9: Receive control failed (result -32) [ 1243.316781][ T60] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1243.330539][ T60] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.346405][ T60] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1243.414221][T25098] bond13: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 1243.452868][T25098] bond13: entered promiscuous mode [ 1243.460557][T25098] bond13: entered allmulticast mode [ 1243.466587][T25098] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1243.680381][T25058] chnl_net:caif_netlink_parms(): no params data found [ 1243.767701][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1243.768226][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5100 ms [ 1243.783224][ C0] lec:lec_tx_timeout: lec0 [ 1243.791194][T31059] netdevsim netdevsim5 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 1243.908705][T25135] tc_dump_action: action bad kind [ 1244.039804][T31059] netdevsim netdevsim5 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 1244.110815][T31059] netdevsim netdevsim5 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 1244.502994][ T5351] Bluetooth: hci4: command tx timeout [ 1244.739189][T17856] netdevsim netdevsim5 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 1244.804560][ T60] batadv1: left allmulticast mode [ 1244.814198][ T60] batadv1: left promiscuous mode [ 1244.831585][ T60] bridge0: port 4(batadv1) entered disabled state [ 1244.867656][ T60] macsec0: left allmulticast mode [ 1244.872808][ T60] veth1_macvtap: left allmulticast mode [ 1244.881499][ T60] macsec0: left promiscuous mode [ 1244.895936][ T60] bridge0: port 3(macsec0) entered disabled state [ 1244.913920][ T60] bridge_slave_1: left allmulticast mode [ 1244.932574][ T60] bridge_slave_1: left promiscuous mode [ 1244.945194][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.973177][ T60] bridge_slave_0: left allmulticast mode [ 1244.986091][ T60] bridge_slave_0: left promiscuous mode [ 1244.998089][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.349229][ T60] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1245.480092][ T60] bond8 (unregistering): (slave geneve3): Releasing active interface [ 1245.503923][ T60] bond4 (unregistering): (slave geneve2): Releasing active interface [ 1245.972418][T25182] __nla_validate_parse: 8 callbacks suppressed [ 1245.972437][T25182] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14491'. [ 1246.068610][ T60] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1246.080531][ T60] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1246.092883][ T60] ` (unregistering): Released all slaves [ 1246.105990][ T60] bond1 (unregistering): Released all slaves [ 1246.119518][ T60] bond2 (unregistering): Released all slaves [ 1246.137182][ T60] bond3 (unregistering): (slave lo): Releasing backup interface [ 1246.146855][ T60] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1246.162553][ T60] bond3 (unregistering): Released all slaves [ 1246.175871][ T60] bond4 (unregistering): Released all slaves [ 1246.189283][ T60] bond5 (unregistering): Released all slaves [ 1246.202244][ T60] bond6 (unregistering): Released all slaves [ 1246.373641][ T60] bond0 (unregistering): Released all slaves [ 1246.386789][ T60] bond7 (unregistering): Released all slaves [ 1246.558435][ T60] bond8 (unregistering): Released all slaves [ 1246.565340][ T5351] Bluetooth: hci4: command tx timeout [ 1246.576777][T25058] bridge0: port 1(bridge_slave_0) entered blocking state [ 1246.584074][T25058] bridge0: port 1(bridge_slave_0) entered disabled state [ 1246.591531][T25058] bridge_slave_0: entered allmulticast mode [ 1246.599695][T25058] bridge_slave_0: entered promiscuous mode [ 1246.609312][T25058] bridge0: port 2(bridge_slave_1) entered blocking state [ 1246.616662][T25058] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.624122][T25058] bridge_slave_1: entered allmulticast mode [ 1246.633463][T25058] bridge_slave_1: entered promiscuous mode [ 1246.750389][T25187] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14492'. [ 1246.837000][T25058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1246.857066][ T60] 9: left promiscuous mode [ 1247.022766][T25199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14495'. [ 1247.059683][T25058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1247.161277][ T60] tipc: Left network mode [ 1247.216854][T25058] team0: Port device team_slave_0 added [ 1247.224748][T25058] team0: Port device team_slave_1 added [ 1247.274599][T25212] nbd: must specify an index to disconnect [ 1247.298384][T25214] validate_nla: 1 callbacks suppressed [ 1247.298404][T25214] netlink: 'syz.0.14500': attribute type 1 has an invalid length. [ 1247.319017][T25214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1247.336841][T25215] netlink: 'syz.4.14499': attribute type 21 has an invalid length. [ 1247.358448][T25215] netlink: 156 bytes leftover after parsing attributes in process `syz.4.14499'. [ 1247.367925][T25058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1247.367946][T25058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1247.367972][T25058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1247.370336][T25058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1247.443072][T25058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1247.472503][T25058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1247.615219][T25058] hsr_slave_0: entered promiscuous mode [ 1247.636883][T25058] hsr_slave_1: entered promiscuous mode [ 1247.653027][T25058] debugfs: 'hsr0' already exists in 'hsr' [ 1247.668429][T25058] Cannot create hsr debugfs directory [ 1248.096561][T25241] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14508'. [ 1248.290445][T25058] netdevsim netdevsim5 eth12 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1248.367878][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1248.384990][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1248.397754][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1248.406461][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1248.441407][ T60] veth0_macvtap: left allmulticast mode [ 1248.447796][ T60] vlan0: left allmulticast mode [ 1248.452763][ T60] vlan0: left promiscuous mode [ 1248.458445][ T60] veth0_macvtap: left promiscuous mode [ 1248.463995][ T60] veth1_vlan: left promiscuous mode [ 1248.645661][ T5351] Bluetooth: hci4: command tx timeout [ 1248.659947][ T60] pimreg3 (unregistering): left allmulticast mode [ 1248.706667][ T60] pim6reg (unregistering): left allmulticast mode [ 1249.713599][ T60] team0 (unregistering): Port device team_slave_1 removed [ 1249.771097][ T60] team0 (unregistering): Port device team_slave_0 removed [ 1250.214525][T25058] netdevsim netdevsim5 eth11 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1250.350102][T25058] netdevsim netdevsim5 eth10 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1250.390837][T25275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1250.472662][T25058] netdevsim netdevsim5 eth9 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1250.539288][T25283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14520'. [ 1250.726424][ T5351] Bluetooth: hci4: command tx timeout [ 1250.732374][T25288] netlink: 'syz.0.14523': attribute type 4 has an invalid length. [ 1250.812872][ T60] IPVS: stop unused estimator thread 0... [ 1250.861900][T25301] netlink: 'syz.1.14526': attribute type 2 has an invalid length. [ 1250.884184][T25294] syzkaller0: entered promiscuous mode [ 1250.891193][T25294] syzkaller0: entered allmulticast mode [ 1250.931152][T25058] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1250.990044][T25058] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1251.008021][T25058] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1251.031173][T25058] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1251.173731][T25320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14531'. [ 1251.384324][T25333] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14535'. [ 1251.418647][T25058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1251.493076][T25058] 8021q: adding VLAN 0 to HW filter on device team0 [ 1251.544873][T13621] bridge0: port 1(bridge_slave_0) entered blocking state [ 1251.552111][T13621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1251.584014][T13621] bridge0: port 2(bridge_slave_1) entered blocking state [ 1251.591247][T13621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1251.626391][T25340] geneve2: entered promiscuous mode [ 1251.635861][T14951] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 1251.640059][T25340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14537'. [ 1251.646381][T14951] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 1251.681108][T14951] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 1251.701833][T14951] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 1251.874633][T25355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14541'. [ 1252.101439][T25359] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1252.162567][T25372] netlink: 'syz.1.14546': attribute type 10 has an invalid length. [ 1252.189480][T25372] hsr0: left allmulticast mode [ 1252.205444][T25372] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1252.252321][T25058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1252.272188][T25377] netlink: 14143 bytes leftover after parsing attributes in process `syz.0.14548'. [ 1252.297737][T25377] netlink: 14143 bytes leftover after parsing attributes in process `syz.0.14548'. [ 1252.370907][T25381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14547'. [ 1252.657516][T25399] netlink: 48 bytes leftover after parsing attributes in process `syz.4.14551'. [ 1252.687253][T25399] netlink: 48 bytes leftover after parsing attributes in process `syz.4.14551'. [ 1252.894218][T25058] veth0_vlan: entered promiscuous mode [ 1252.940142][T25058] veth1_vlan: entered promiscuous mode [ 1252.998365][T25416] xt_socket: unknown flags 0x50 [ 1253.078685][T25418] bond10: option lp_interval: invalid value (0) [ 1253.099708][T25418] bond10: option lp_interval: allowed values 1 - 2147483647 [ 1253.134524][T25418] bond10 (unregistering): Released all slaves [ 1253.190547][T25058] veth0_macvtap: entered promiscuous mode [ 1253.230960][T25431] netlink: 'syz.0.14558': attribute type 21 has an invalid length. [ 1253.250399][T25419] bond10: option lp_interval: invalid value (0) [ 1253.258500][T25419] bond10: option lp_interval: allowed values 1 - 2147483647 [ 1253.269830][T25419] bond10 (unregistering): Released all slaves [ 1253.370868][T25058] veth1_macvtap: entered promiscuous mode [ 1253.444750][T25058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1253.478489][T25058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1253.519926][T14954] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.551925][T14954] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.581993][T14954] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.604153][T14954] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.972131][T14954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1254.022599][T14954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1254.136186][T14951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1254.153819][T14951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1254.229297][T25481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14571'. [ 1254.426613][T25492] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 1254.443060][T25498] IPv6: NLM_F_CREATE should be specified when creating new route [ 1254.839643][T14126] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1254.851445][T14126] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1254.869729][T14126] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1254.878493][T14126] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1254.887590][T14126] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1254.963708][T25523] lo speed is unknown, defaulting to 1000 [ 1255.013479][T25535] netlink: 'syz.1.14587': attribute type 7 has an invalid length. [ 1255.051024][T25537] netlink: 'syz.5.14588': attribute type 1 has an invalid length. [ 1255.069868][T25538] netlink: 'syz.5.14588': attribute type 1 has an invalid length. [ 1255.272113][T25548] tproxy_tg4_check: 55 callbacks suppressed [ 1255.272133][T25548] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1255.551715][T25560] netlink: 'syz.6.14596': attribute type 3 has an invalid length. [ 1255.601792][T25561] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1255.647024][T25565] tipc: Enabling of bearer rejected, failed to enable media [ 1255.659115][T25568] netlink: 'syz.6.14598': attribute type 1 has an invalid length. [ 1255.762969][T25565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1255.778476][T25571] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20004 [ 1256.008292][T25523] chnl_net:caif_netlink_parms(): no params data found [ 1256.127739][T25592] netlink: 'syz.6.14606': attribute type 21 has an invalid length. [ 1256.414791][T25523] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.430092][T25617] netlink: 'syz.6.14610': attribute type 10 has an invalid length. [ 1256.445313][T25523] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.452662][T25523] bridge_slave_0: entered allmulticast mode [ 1256.463750][T25523] bridge_slave_0: entered promiscuous mode [ 1256.479438][T25617] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1256.489013][T25523] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.498237][T25523] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.506214][T25523] bridge_slave_1: entered allmulticast mode [ 1256.519598][T25523] bridge_slave_1: entered promiscuous mode [ 1256.557497][T25624] nft_compat: unsupported protocol 0 [ 1256.577896][T25623] delete_channel: no stack [ 1256.643152][T25523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1256.660801][T25523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1256.755865][T25631] __nla_validate_parse: 11 callbacks suppressed [ 1256.755881][T25631] netlink: 56 bytes leftover after parsing attributes in process `syz.1.14618'. [ 1256.799463][T25523] team0: Port device team_slave_0 added [ 1256.839529][T25523] team0: Port device team_slave_1 added [ 1256.914329][T25523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1256.929898][T25523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1256.961000][T25523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1256.976889][ T5351] Bluetooth: hci0: command tx timeout [ 1256.986266][T25645] netlink: 'syz.0.14620': attribute type 12 has an invalid length. [ 1257.000379][T25523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1257.005541][T25648] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14621'. [ 1257.007703][T25523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1257.043854][T25523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1257.110029][T25523] hsr_slave_0: entered promiscuous mode [ 1257.118703][T25523] hsr_slave_1: entered promiscuous mode [ 1257.126895][T25523] debugfs: 'hsr0' already exists in 'hsr' [ 1257.132752][T25523] Cannot create hsr debugfs directory [ 1257.202220][T25652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1257.408657][T25523] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1257.422732][T25523] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.463385][T25661] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14627'. [ 1257.552477][T25523] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1257.563376][T25523] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.680175][T25523] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1257.694094][T25523] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.903375][T25683] netlink: 248 bytes leftover after parsing attributes in process `syz.0.14634'. [ 1257.939167][T25523] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1257.944739][T25683] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14634'. [ 1257.961892][T25523] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.098403][T25691] bridge0: left allmulticast mode [ 1258.175722][T25700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14638'. [ 1258.373802][T25708] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1258.432758][T25523] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1258.487245][T25720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14640'. [ 1258.487311][T25523] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1258.532555][T25523] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1258.558430][T25523] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1258.806157][T25523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1258.859433][T25523] 8021q: adding VLAN 0 to HW filter on device team0 [ 1258.883772][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1258.891122][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1258.912296][T14958] bridge0: port 2(bridge_slave_1) entered blocking state [ 1258.919560][T14958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1258.957627][T25748] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14651'. [ 1259.046666][ T5351] Bluetooth: hci0: command tx timeout [ 1259.110364][T25756] netlink: 52 bytes leftover after parsing attributes in process `syz.5.14653'. [ 1259.241163][T25762] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.249114][T25762] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.474118][T25523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1259.622694][T25781] netlink: 132 bytes leftover after parsing attributes in process `syz.5.14660'. [ 1259.816075][T25797] netlink: 'syz.1.14663': attribute type 1 has an invalid length. [ 1259.959749][T25804] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 1260.017400][T25808] syzkaller0: entered promiscuous mode [ 1260.030055][T25808] syzkaller0: entered allmulticast mode [ 1260.234199][T25523] veth0_vlan: entered promiscuous mode [ 1260.268597][T25523] veth1_vlan: entered promiscuous mode [ 1260.352044][T25523] veth0_macvtap: entered promiscuous mode [ 1260.370322][T25523] veth1_macvtap: entered promiscuous mode [ 1260.441523][T25523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1260.477581][T25523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1260.539298][T17869] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.559204][T17869] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.596770][T17869] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.626297][T17869] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.833194][T14958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1260.861537][T14958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1260.900915][T25848] ip6gre2: entered allmulticast mode [ 1260.956980][T13621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1260.981978][T13621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1261.125850][ T5351] Bluetooth: hci0: command tx timeout [ 1261.207616][T25867] netlink: 'syz.1.14685': attribute type 1 has an invalid length. [ 1261.407820][T25881] netlink: 'syz.1.14689': attribute type 21 has an invalid length. [ 1261.653243][T14126] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1261.670985][T14126] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1261.681320][T14126] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1261.691269][T25897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1261.712996][T14126] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1261.721681][T14126] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1261.723349][T25892] Bluetooth: MGMT ver 1.23 [ 1261.900944][T25894] lo speed is unknown, defaulting to 1000 [ 1262.001051][T25903] __nla_validate_parse: 4 callbacks suppressed [ 1262.001069][T25903] netlink: 56 bytes leftover after parsing attributes in process `syz.4.14694'. [ 1262.077488][T25908] gtp0: entered promiscuous mode [ 1262.082730][T25908] gtp0: entered allmulticast mode [ 1262.446831][T25926] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14704'. [ 1262.482012][T25926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14704'. [ 1262.579728][T25935] nbd: couldn't find a device at index 0 [ 1262.592930][T25935] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14705'. [ 1262.638628][T25926] bond1: Invalid ad_actor_system MAC address. [ 1262.644752][T25926] bond1: option ad_actor_system: invalid value (1) [ 1262.670548][T25926] bond1 (unregistering): Released all slaves [ 1262.722027][T25938] netlink: 'syz.1.14706': attribute type 21 has an invalid length. [ 1262.766048][T25938] netlink: 'syz.1.14706': attribute type 22 has an invalid length. [ 1262.773994][T25938] netlink: 'syz.1.14706': attribute type 23 has an invalid length. [ 1262.809356][T25938] netlink: 'syz.1.14706': attribute type 25 has an invalid length. [ 1262.827342][T25938] netlink: 96 bytes leftover after parsing attributes in process `syz.1.14706'. [ 1262.888155][T25948] IPv6: NLM_F_CREATE should be specified when creating new route [ 1262.968088][T25954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14709'. [ 1263.066611][T25894] chnl_net:caif_netlink_parms(): no params data found [ 1263.203118][T25958] netlink: 180 bytes leftover after parsing attributes in process `syz.5.14711'. [ 1263.214268][ T5351] Bluetooth: hci0: command tx timeout [ 1263.223379][T25959] netlink: 180 bytes leftover after parsing attributes in process `syz.5.14711'. [ 1263.259324][T25964] netlink: 'syz.4.14713': attribute type 10 has an invalid length. [ 1263.266743][T25961] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1263.326870][T25964] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1263.368877][T25972] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14713'. [ 1263.436180][T25894] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.443533][T25894] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.451384][T25894] bridge_slave_0: entered allmulticast mode [ 1263.459993][T25894] bridge_slave_0: entered promiscuous mode [ 1263.469436][T25977] tipc: Enabled bearer , priority 0 [ 1263.485521][T25894] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.492929][T25894] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.502658][T25894] bridge_slave_1: entered allmulticast mode [ 1263.511591][T25894] bridge_slave_1: entered promiscuous mode [ 1263.519556][T25982] syzkaller0: entered promiscuous mode [ 1263.529986][T25982] syzkaller0: entered allmulticast mode [ 1263.544337][T25972] : entered promiscuous mode [ 1263.560770][T25984] sch_fq: defrate 0 ignored. [ 1263.567488][T25977] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1263.606841][T25894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1263.620273][T25977] tipc: Resetting bearer [ 1263.634388][T25894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1263.668918][T25975] tipc: Resetting bearer [ 1263.693353][T25975] tipc: Disabling bearer [ 1263.708577][T25894] team0: Port device team_slave_0 added [ 1263.717088][T25894] team0: Port device team_slave_1 added [ 1263.746924][T25894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1263.753895][T25894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1263.795220][T25894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1263.817032][T25894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1263.824080][T25894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1263.854513][T25894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1263.865517][T14126] Bluetooth: hci5: command tx timeout [ 1263.928301][T25894] hsr_slave_0: entered promiscuous mode [ 1263.936112][T25894] hsr_slave_1: entered promiscuous mode [ 1263.943492][T25894] debugfs: 'hsr0' already exists in 'hsr' [ 1263.949908][T25894] Cannot create hsr debugfs directory [ 1264.427496][T26012] netlink: 'syz.4.14725': attribute type 12 has an invalid length. [ 1264.442727][T26021] netlink: 'syz.1.14726': attribute type 2 has an invalid length. [ 1264.444423][T26022] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14728'. [ 1264.591356][T26026] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5 [ 1264.604423][T26026] gretap5: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1264.626682][T26026] gretap5: entered promiscuous mode [ 1264.631951][T26026] gretap5: entered allmulticast mode [ 1264.774448][T26026] netdevsim netdevsim0: Direct firmware load for ¬ failed with error -2 [ 1264.785414][T26026] netdevsim netdevsim0: Falling back to sysfs fallback for: ¬ [ 1265.184631][T25894] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1265.239427][T25894] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1265.288473][T14126] Bluetooth: hci0: command tx timeout [ 1265.294468][T25894] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1265.312109][T25894] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1265.564670][T25894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1265.565872][T26064] xt_hashlimit: invalid interval [ 1265.664067][T25894] 8021q: adding VLAN 0 to HW filter on device team0 [ 1265.680816][ T3496] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.688059][ T3496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1265.731185][ T3496] bridge0: port 2(bridge_slave_1) entered blocking state [ 1265.738436][ T3496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1265.927190][T14126] Bluetooth: hci5: command 0x041b tx timeout [ 1265.959407][T26082] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 1266.241825][T25894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1266.302398][T26089] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1266.608226][T26126] netlink: 'syz.0.14752': attribute type 39 has an invalid length. [ 1266.714338][T26128] hsr_slave_0: left promiscuous mode [ 1266.734468][T26128] hsr_slave_1: left promiscuous mode [ 1266.919716][T25894] veth0_vlan: entered promiscuous mode [ 1266.942605][T25894] veth1_vlan: entered promiscuous mode [ 1267.008609][T25894] veth0_macvtap: entered promiscuous mode [ 1267.017051][T26146] __nla_validate_parse: 9 callbacks suppressed [ 1267.017069][T26146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14758'. [ 1267.024133][T25894] veth1_macvtap: entered promiscuous mode [ 1267.051873][T26149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14759'. [ 1267.091559][T25894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1267.128322][T25894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1267.156391][T17869] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.166393][T17869] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.178857][T17869] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.212227][T17869] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.253820][T26159] netlink: 'syz.5.14762': attribute type 4 has an invalid length. [ 1267.427427][T26164] syzkaller0: entered promiscuous mode [ 1267.433403][T26164] syzkaller0: entered allmulticast mode [ 1267.555721][T17858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1267.575338][T17858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1267.740479][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1267.768458][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1267.843581][T26187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14772'. [ 1267.868106][T26187] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14772'. [ 1267.884044][T26188] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14773'. [ 1267.936522][T26195] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 1268.006116][T14126] Bluetooth: hci5: command 0x041b tx timeout [ 1268.137201][T26207] netlink: 'syz.1.14777': attribute type 29 has an invalid length. [ 1268.147753][T26207] netlink: 'syz.1.14777': attribute type 29 has an invalid length. [ 1268.163494][T26207] netlink: 'syz.1.14777': attribute type 29 has an invalid length. [ 1268.187243][T26207] netlink: 'syz.1.14777': attribute type 29 has an invalid length. [ 1268.197980][T26207] netlink: 'syz.1.14777': attribute type 29 has an invalid length. [ 1268.207304][T26207] netlink: 'syz.1.14777': attribute type 29 has an invalid length. [ 1268.221125][T26207] netlink: 'syz.1.14777': attribute type 29 has an invalid length. [ 1268.241503][T26210] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14779'. [ 1268.477802][T26229] netlink: 88 bytes leftover after parsing attributes in process `syz.6.14783'. [ 1268.811774][T26255] netlink: 'syz.4.14791': attribute type 62 has an invalid length. [ 1268.963859][T26267] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14795'. [ 1269.107015][T26267] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14795'. [ 1269.178669][T26267] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14795'. [ 1269.402455][ T30] audit: type=1800 audit(1766848125.833:20): pid=26277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.14799" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=49 res=0 errno=0 [ 1269.623328][T26295] syzkaller1: entered promiscuous mode [ 1269.635886][T26295] syzkaller1: entered allmulticast mode [ 1269.736387][T26302] bond7: (slave lo): Releasing backup interface [ 1269.752709][T26302] bond7: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1269.778105][T26302] bond0: (slave batadv0): Releasing backup interface [ 1269.789257][T26302] bridge_slave_0: left allmulticast mode [ 1269.795530][T26302] bridge_slave_0: left promiscuous mode [ 1269.801457][T26302] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.811636][T26302] bridge_slave_1: left allmulticast mode [ 1269.818232][T26302] bridge_slave_1: left promiscuous mode [ 1269.826936][T26302] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.837853][T26302] bond0: (slave bond_slave_0): Releasing backup interface [ 1269.849279][T26302] bond0: (slave bond_slave_1): Releasing backup interface [ 1269.858701][T26302] team0: Port device team_slave_0 removed [ 1269.866230][T26302] team0: Port device team_slave_1 removed [ 1269.872436][T26302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1269.883455][T26302] bond0: (slave wlan1): Releasing backup interface [ 1269.892411][T26302] bond1: (slave geneve2): Releasing active interface [ 1269.901993][T26302] bond5: (slave gretap2): Releasing active interface [ 1269.911459][T26302] bond6: (slave gretap3): Releasing active interface [ 1269.920602][T26302] bond8: (slave veth3): Releasing active interface [ 1269.956771][ T5986] lo speed is unknown, defaulting to 1000 [ 1269.962610][ T5986] syz2: Port: 1 Link DOWN [ 1269.967127][ T5986] lo speed is unknown, defaulting to 1000 [ 1270.085852][T14126] Bluetooth: hci5: command 0x041b tx timeout [ 1271.080453][T26383] tipc: Started in network mode [ 1271.088506][T26383] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 1271.097235][T26383] tipc: Enabled bearer , priority 2 [ 1271.728749][T26436] validate_nla: 2 callbacks suppressed [ 1271.728768][T26436] netlink: 'syz.6.14852': attribute type 3 has an invalid length. [ 1272.040332][T26455] netlink: 'syz.0.14857': attribute type 8 has an invalid length. [ 1272.044325][T26454] __nla_validate_parse: 18 callbacks suppressed [ 1272.044345][T26454] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14858'. [ 1272.165435][T14126] Bluetooth: hci5: command 0x041b tx timeout [ 1272.215192][T24267] tipc: Node number set to 10136234 [ 1272.252095][T26472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1272.322019][T26474] netlink: 'syz.5.14862': attribute type 1 has an invalid length. [ 1272.358398][T26474] bond1: entered promiscuous mode [ 1272.363844][T26474] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1272.390138][T26474] bond1: (slave bridge2): making interface the new active one [ 1272.398320][T26474] bridge2: entered promiscuous mode [ 1272.406571][T26474] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 1272.487433][T26480] Cannot find map_set index 0 as target [ 1272.548926][T26485] netlink: 'syz.5.14866': attribute type 9 has an invalid length. [ 1272.889735][T26505] netlink: 20 bytes leftover after parsing attributes in process `syz.6.14871'. [ 1272.917997][T26502] netlink: 104 bytes leftover after parsing attributes in process `syz.0.14873'. [ 1273.032234][T26513] netlink: 'syz.0.14875': attribute type 1 has an invalid length. [ 1273.043322][T26515] netlink: 32 bytes leftover after parsing attributes in process `syz.6.14876'. [ 1273.171539][T26513] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1273.196330][T26528] netlink: 36 bytes leftover after parsing attributes in process `syz.4.14880'. [ 1273.226604][T26518] bond14: (slave gretap6): making interface the new active one [ 1273.237347][T26518] bond14: (slave gretap6): Enslaving as an active interface with an up link [ 1273.306757][T26530] netlink: 184 bytes leftover after parsing attributes in process `syz.4.14880'. [ 1273.417706][T26540] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.14883'. [ 1273.509496][T26541] netlink: 'syz.1.14884': attribute type 83 has an invalid length. [ 1273.606836][T26551] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20004 [ 1273.688218][T26566] : entered promiscuous mode [ 1273.701293][T26566] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14890'. [ 1274.177006][T26601] netlink: 'syz.5.14899': attribute type 1 has an invalid length. [ 1274.256712][T26606] xt_hashlimit: size too large, truncated to 1048576 [ 1274.432009][T26620] lo: entered allmulticast mode [ 1274.441987][T26620] tunl0: entered allmulticast mode [ 1274.452619][T26620] gre0: entered allmulticast mode [ 1274.468943][T26620] gretap0: entered allmulticast mode [ 1274.498132][T26620] erspan0: entered allmulticast mode [ 1274.509368][T26620] ip_vti0: entered allmulticast mode [ 1274.545926][T26620] ip6_vti0: entered allmulticast mode [ 1274.558415][T26620] sit0: entered allmulticast mode [ 1274.573615][T26620] ip6tnl0: entered allmulticast mode [ 1274.586741][T26620] ip6gre0: entered allmulticast mode [ 1274.588767][T26628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1274.603832][T26620] syz_tun: entered allmulticast mode [ 1274.606855][T26630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1274.622726][T26620] ip6gretap0: entered allmulticast mode [ 1274.631536][T26620] bridge0: entered allmulticast mode [ 1274.638466][T26620] vcan0: entered allmulticast mode [ 1274.651165][T26620] bond0: entered allmulticast mode [ 1274.657071][T26620] bond_slave_0: entered allmulticast mode [ 1274.662835][T26620] bond_slave_1: entered allmulticast mode [ 1274.676563][T26620] team0: entered allmulticast mode [ 1274.681706][T26620] team_slave_0: entered allmulticast mode [ 1274.688204][T26620] team_slave_1: entered allmulticast mode [ 1274.697097][T26620] dummy0: entered allmulticast mode [ 1274.706235][T26620] nlmon0: entered allmulticast mode [ 1274.713270][T26620] caif0: entered allmulticast mode [ 1274.720051][T26620] batadv0: entered allmulticast mode [ 1274.730991][T26620] vxcan0: entered allmulticast mode [ 1274.740710][T26620] vxcan1: entered allmulticast mode [ 1274.750497][T26620] veth0: entered allmulticast mode [ 1274.760204][T26620] veth1: entered allmulticast mode [ 1274.769319][T26620] wg0: entered allmulticast mode [ 1274.778764][T26620] wg1: entered allmulticast mode [ 1274.787006][T26620] wg2: entered allmulticast mode [ 1274.796601][T26620] veth0_to_bridge: entered allmulticast mode [ 1274.811815][T26620] veth1_to_bridge: entered allmulticast mode [ 1274.830379][T26620] veth0_to_bond: entered allmulticast mode [ 1274.846283][T26620] veth1_to_bond: entered allmulticast mode [ 1274.861995][T26620] veth0_to_team: entered allmulticast mode [ 1274.909138][T26620] veth1_to_team: entered allmulticast mode [ 1274.939718][T26620] veth0_to_batadv: entered allmulticast mode [ 1274.949817][T26620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1274.959453][T26620] batadv_slave_0: entered allmulticast mode [ 1274.970313][T26620] veth1_to_batadv: entered allmulticast mode [ 1274.981415][T26620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1274.990282][T26620] batadv_slave_1: entered allmulticast mode [ 1275.000692][T26620] xfrm0: entered allmulticast mode [ 1275.010504][T26620] veth0_to_hsr: entered allmulticast mode [ 1275.019117][T26620] hsr_slave_0: entered allmulticast mode [ 1275.028372][T26620] veth1_to_hsr: entered allmulticast mode [ 1275.038524][T26620] hsr_slave_1: entered allmulticast mode [ 1275.050162][T26620] hsr0: entered allmulticast mode [ 1275.060215][T26620] veth1_virt_wifi: entered allmulticast mode [ 1275.071652][T26620] veth0_virt_wifi: entered allmulticast mode [ 1275.080594][T26620] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1275.090605][T26620] veth1_vlan: entered allmulticast mode [ 1275.100733][T26620] veth0_vlan: entered allmulticast mode [ 1275.117064][T26620] vlan0: entered allmulticast mode [ 1275.122350][T26620] vlan1: entered allmulticast mode [ 1275.130804][T26620] macvlan0: entered allmulticast mode [ 1275.142321][T26620] macvlan1: entered allmulticast mode [ 1275.154758][T26620] ipvlan0: entered allmulticast mode [ 1275.161158][T26620] ipvlan1: entered allmulticast mode [ 1275.168841][T26620] veth1_macvtap: entered allmulticast mode [ 1275.180623][T26620] veth0_macvtap: entered allmulticast mode [ 1275.192509][T26620] macvtap0: entered allmulticast mode [ 1275.202200][T26620] macsec0: entered allmulticast mode [ 1275.211854][T26620] geneve0: entered allmulticast mode [ 1275.222091][T26620] geneve1: entered allmulticast mode [ 1275.231423][T26620] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1275.246047][T26641] netlink: 'syz.1.14910': attribute type 10 has an invalid length. [ 1275.254535][T26620] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 1275.261537][T26641] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14910'. [ 1275.272397][T26620] netdevsim netdevsim5 netdevsim2: entered allmulticast mode [ 1275.283866][T26620] netdevsim netdevsim5 netdevsim3: entered allmulticast mode [ 1275.300008][T26620] mac80211_hwsim hwsim141 wlan0: entered allmulticast mode [ 1275.316822][T26620] mac80211_hwsim hwsim142 wlan1: entered allmulticast mode [ 1275.328276][T26620] gretap1: entered allmulticast mode [ 1275.334769][T26620] bridge1: entered allmulticast mode [ 1275.342296][T26620] sit1: entered allmulticast mode [ 1275.353240][T26620] bond1: left promiscuous mode [ 1275.358206][T26620] bridge2: left promiscuous mode [ 1275.363358][T26620] bond1: entered allmulticast mode [ 1275.369518][T26620] bridge2: entered allmulticast mode [ 1275.380394][T26620] mac80211_hwsim hwsim147 wlan2: entered allmulticast mode [ 1275.464450][T17865] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.475436][T26640] netlink: 'syz.1.14910': attribute type 10 has an invalid length. [ 1275.484492][T26641] geneve0: left allmulticast mode [ 1275.514262][T26640] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14910'. [ 1275.533462][T26641] geneve0: entered allmulticast mode [ 1275.540451][T26641] team0: Port device geneve0 added [ 1275.546985][T17865] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.556882][T17865] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.609162][T17865] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.851148][T26551] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1275.856046][T14126] Bluetooth: hci2: command 0x0406 tx timeout [ 1275.858059][T26551] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1276.129994][T26666] syzkaller0: entered promiscuous mode [ 1276.145261][T26666] syzkaller0: entered allmulticast mode [ 1276.507886][T26551] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1276.513832][T26551] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1276.558544][T26551] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1276.579714][T26551] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1276.641199][T26551] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1276.655128][T26551] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1276.719156][T26710] xt_hashlimit: size too large, truncated to 1048576 [ 1276.753585][T26551] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1276.770063][T26551] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1277.398597][T26751] __nla_validate_parse: 1 callbacks suppressed [ 1277.398618][T26751] netlink: 72 bytes leftover after parsing attributes in process `syz.4.14939'. [ 1277.430132][T26751] netlink: 72 bytes leftover after parsing attributes in process `syz.4.14939'. [ 1277.470739][T26753] xt_TCPMSS: Only works on TCP SYN packets [ 1277.528723][T26759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14942'. [ 1277.550002][T26751] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14939'. [ 1277.786979][T26778] pim6reg1: entered promiscuous mode [ 1277.792567][T26778] pim6reg1: entered allmulticast mode [ 1277.938234][T26787] netlink: 32 bytes leftover after parsing attributes in process `syz.5.14948'. [ 1278.092249][T26791] netlink: 68 bytes leftover after parsing attributes in process `syz.1.14950'. [ 1278.412672][T26823] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1278.455455][T26823] macvtap1: entered allmulticast mode [ 1278.471137][T26823] veth0_macvtap: entered allmulticast mode [ 1278.480817][T26823] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1278.542024][T26829] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1278.799804][T26851] netlink: 144 bytes leftover after parsing attributes in process `syz.5.14967'. [ 1278.974257][T26858] netlink: 'syz.5.14969': attribute type 16 has an invalid length. [ 1278.993618][T26858] netlink: 'syz.5.14969': attribute type 17 has an invalid length. [ 1279.003793][T26858] lo: left allmulticast mode [ 1279.016666][T26858] tunl0: left allmulticast mode [ 1279.023665][T26858] gre0: left allmulticast mode [ 1279.061364][T26858] gretap0: left allmulticast mode [ 1279.079598][T26858] erspan0: left allmulticast mode [ 1279.092510][T26867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14972'. [ 1279.093900][T26858] ip_vti0: left allmulticast mode [ 1279.112328][T26858] ip6_vti0: left allmulticast mode [ 1279.122804][T26858] sit0: left allmulticast mode [ 1279.134590][T26858] ip6tnl0: left allmulticast mode [ 1279.143340][T26858] ip6gre0: left allmulticast mode [ 1279.152939][T26858] syz_tun: left allmulticast mode [ 1279.174164][T26858] ip6gretap0: left allmulticast mode [ 1279.187846][T26858] bridge0: left allmulticast mode [ 1279.194105][T26858] vcan0: left allmulticast mode [ 1279.203567][T26858] bond0: left allmulticast mode [ 1279.210834][T26858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1279.213038][T26875] netlink: 'syz.1.14974': attribute type 3 has an invalid length. [ 1279.218711][T26858] team0: left allmulticast mode [ 1279.230696][T26875] netlink: 'syz.1.14974': attribute type 1 has an invalid length. [ 1279.233618][T26858] 8021q: adding VLAN 0 to HW filter on device team0 [ 1279.240914][T26875] netlink: 204 bytes leftover after parsing attributes in process `syz.1.14974'. [ 1279.248036][T26858] dummy0: left allmulticast mode [ 1279.267935][T26858] nlmon0: left allmulticast mode [ 1279.275910][T26858] caif0: left allmulticast mode [ 1279.280806][T26858] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1279.459360][T26885] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1279.520599][T26885] bond6: (slave lo): Enslaving as a backup interface with an up link [ 1279.540863][T26885] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1279.614586][T26896] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.14978'. [ 1279.862509][T26911] sit3: entered promiscuous mode [ 1279.868008][T26911] sit3: entered allmulticast mode [ 1300.090863][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 1305.765174][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5670 ms [ 1305.773201][ C0] lec:lec_tx_timeout: lec0 [ 1361.531723][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 1366.804933][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5270 ms [ 1366.812977][ C0] lec:lec_tx_timeout: lec0 [ 1422.971013][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 1428.805027][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 1428.813195][ C0] lec:lec_tx_timeout: lec0 [ 1437.045556][ T31] INFO: task kworker/1:16:24267 blocked for more than 143 seconds. [ 1437.053646][ T31] Not tainted syzkaller #0 [ 1437.058855][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1437.068158][ T31] task:kworker/1:16 state:D stack:24304 pid:24267 tgid:24267 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1437.080365][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 1437.087404][ T31] Call Trace: [ 1437.090689][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1437.093614][ T31] __schedule+0x14bc/0x5000 [ 1437.098557][ T31] ? __pfx___schedule+0x10/0x10 [ 1437.103463][ T31] ? schedule+0x91/0x360 [ 1437.107975][ T31] schedule+0x165/0x360 [ 1437.112602][ T31] schedule_preempt_disabled+0x13/0x30 [ 1437.118332][ T31] __mutex_lock+0x7e6/0x1350 [ 1437.122973][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1437.156300][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 1437.162619][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1437.182227][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1437.195213][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1437.201019][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 1437.208018][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1437.213775][ T31] process_scheduled_works+0xad1/0x1770 [ 1437.220613][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1437.226767][ T31] worker_thread+0x8a0/0xda0 [ 1437.231374][ T31] ? __kthread_parkme+0x7b/0x200 [ 1437.236543][ T31] kthread+0x711/0x8a0 [ 1437.240641][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1437.246773][ T31] ? __pfx_kthread+0x10/0x10 [ 1437.251383][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1437.256730][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1437.261923][ T31] ? __pfx_kthread+0x10/0x10 [ 1437.266704][ T31] ret_from_fork+0x599/0xb30 [ 1437.271314][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1437.277191][ T31] ? __switch_to_asm+0x39/0x70 [ 1437.282003][ T31] ? __switch_to_asm+0x33/0x70 [ 1437.286827][ T31] ? __pfx_kthread+0x10/0x10 [ 1437.291434][ T31] ret_from_fork_asm+0x1a/0x30 [ 1437.296408][ T31] [ 1437.299482][ T31] INFO: task syz.6.14887:26550 blocked for more than 143 seconds. [ 1437.307935][ T31] Not tainted syzkaller #0 [ 1437.312865][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1437.321720][ T31] task:syz.6.14887 state:D stack:25752 pid:26550 tgid:26550 ppid:25894 task_flags:0x400040 flags:0x00080002 [ 1437.333695][ T31] Call Trace: [ 1437.337599][ T31] [ 1437.340568][ T31] __schedule+0x14bc/0x5000 [ 1437.345328][ T31] ? __pfx___schedule+0x10/0x10 [ 1437.350209][ T31] ? schedule+0x91/0x360 [ 1437.354542][ T31] schedule+0x165/0x360 [ 1437.358849][ T31] schedule_preempt_disabled+0x13/0x30 [ 1437.364308][ T31] __mutex_lock+0x7e6/0x1350 [ 1437.370115][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1437.375075][ T31] ? rfkill_unregister+0xc8/0x220 [ 1437.380139][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1437.385288][ T31] ? __pfx_device_del+0x10/0x10 [ 1437.390132][ T31] ? __cancel_work_sync+0x5c/0x110 [ 1437.396256][ T31] rfkill_unregister+0xc8/0x220 [ 1437.401147][ T31] nfc_unregister_device+0x96/0x300 [ 1437.406389][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 1437.412099][ T31] virtual_ncidev_close+0x56/0x90 [ 1437.417276][ T31] __fput+0x44c/0xa70 [ 1437.421346][ T31] task_work_run+0x1d4/0x260 [ 1437.426466][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1437.431574][ T31] ? __se_sys_close_range+0x4ed/0x650 [ 1437.437088][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 1437.442565][ T31] exit_to_user_mode_loop+0xff/0x4f0 [ 1437.448207][ T31] ? rcu_is_watching+0x15/0xb0 [ 1437.453005][ T31] do_syscall_64+0x2d0/0xf80 [ 1437.458216][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.464294][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1437.469022][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.475104][ T31] RIP: 0033:0x7f539958f749 [ 1437.479558][ T31] RSP: 002b:00007ffe7b753cd8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1437.488532][ T31] RAX: 0000000000000000 RBX: 00007f53997e7da0 RCX: 00007f539958f749 [ 1437.496664][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1437.504642][ T31] RBP: 00007f53997e7da0 R08: 0000000000000000 R09: 0000001e7b753fcf [ 1437.512673][ T31] R10: 00007f53997e7cb0 R11: 0000000000000246 R12: 00000000001371c4 [ 1437.521233][ T31] R13: 00007ffe7b753dd0 R14: ffffffffffffffff R15: 00007ffe7b753df0 [ 1437.529749][ T31] [ 1437.532821][ T31] INFO: task syz.6.14887:26551 blocked for more than 143 seconds. [ 1437.540808][ T31] Not tainted syzkaller #0 [ 1437.546745][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1437.555541][ T31] task:syz.6.14887 state:D stack:25240 pid:26551 tgid:26550 ppid:25894 task_flags:0x400140 flags:0x00080002 [ 1437.567524][ T31] Call Trace: [ 1437.570808][ T31] [ 1437.573729][ T31] __schedule+0x14bc/0x5000 [ 1437.578824][ T31] ? __pfx___schedule+0x10/0x10 [ 1437.583684][ T31] ? schedule+0x91/0x360 [ 1437.587969][ T31] schedule+0x165/0x360 [ 1437.592116][ T31] schedule_preempt_disabled+0x13/0x30 [ 1437.597685][ T31] __mutex_lock+0x7e6/0x1350 [ 1437.602277][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1437.608173][ T31] ? nfc_dev_down+0x3b/0x290 [ 1437.612796][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1437.617937][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1437.622990][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1437.628968][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1437.634185][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1437.640554][ T31] nfc_dev_down+0x3b/0x290 [ 1437.645052][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1437.650801][ T31] nfc_rfkill_set_block+0x2d/0x100 [ 1437.656255][ T31] rfkill_set_block+0x1d2/0x440 [ 1437.661141][ T31] rfkill_fop_write+0x44b/0x570 [ 1437.666856][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1437.672247][ T31] ? security_kernfs_init_security+0x220/0x290 [ 1437.678543][ T31] ? rw_verify_area+0x255/0x4d0 [ 1437.683396][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1437.689158][ T31] vfs_write+0x27e/0xb30 [ 1437.693456][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1437.698812][ T31] ? __fget_files+0x2a/0x420 [ 1437.703410][ T31] ? __fget_files+0x2a/0x420 [ 1437.708132][ T31] ? __fget_files+0x3a0/0x420 [ 1437.712834][ T31] ? __fget_files+0x2a/0x420 [ 1437.717549][ T31] ksys_write+0x145/0x250 [ 1437.721877][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1437.727242][ T31] ? do_syscall_64+0xbe/0xf80 [ 1437.731913][ T31] do_syscall_64+0xfa/0xf80 [ 1437.736533][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.742594][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1437.747393][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.753282][ T31] RIP: 0033:0x7f539958f749 [ 1437.758339][ T31] RSP: 002b:00007f539a49f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1437.767393][ T31] RAX: ffffffffffffffda RBX: 00007f53997e5fa0 RCX: 00007f539958f749 [ 1437.775560][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000a [ 1437.783560][ T31] RBP: 00007f5399613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1437.792683][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1437.800825][ T31] R13: 00007f53997e6038 R14: 00007f53997e5fa0 R15: 00007ffe7b753b78 [ 1437.808948][ T31] [ 1437.812008][ T31] INFO: task syz.0.14973:26870 blocked for more than 144 seconds. [ 1437.823515][ T31] Not tainted syzkaller #0 [ 1437.828524][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1437.837350][ T31] task:syz.0.14973 state:D stack:26616 pid:26870 tgid:26869 ppid:17176 task_flags:0x400040 flags:0x00080002 [ 1437.849997][ T31] Call Trace: [ 1437.853291][ T31] [ 1437.856393][ T31] __schedule+0x14bc/0x5000 [ 1437.860911][ T31] ? __pfx___schedule+0x10/0x10 [ 1437.865835][ T31] ? schedule+0x91/0x360 [ 1437.870090][ T31] schedule+0x165/0x360 [ 1437.874237][ T31] schedule_preempt_disabled+0x13/0x30 [ 1437.880296][ T31] __mutex_lock+0x7e6/0x1350 [ 1437.884982][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1437.889858][ T31] ? rfkill_register+0x37/0x8e0 [ 1437.894702][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1437.899833][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 1437.906227][ T31] ? device_initialize+0x24b/0x440 [ 1437.911412][ T31] rfkill_register+0x37/0x8e0 [ 1437.916215][ T31] nfc_register_device+0x14a/0x390 [ 1437.921326][ T31] nci_register_device+0x87f/0x9d0 [ 1437.926539][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 1437.932183][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 1437.938202][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 1437.943602][ T31] virtual_ncidev_open+0x129/0x1a0 [ 1437.948791][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1437.954505][ T31] misc_open+0x2d5/0x350 [ 1437.958928][ T31] chrdev_open+0x4cc/0x5e0 [ 1437.963349][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1437.968926][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1437.975405][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1437.980353][ T31] do_dentry_open+0x7ce/0x1420 [ 1437.985223][ T31] vfs_open+0x3b/0x340 [ 1437.989309][ T31] ? path_openat+0x33f3/0x3dd0 [ 1437.994064][ T31] path_openat+0x340e/0x3dd0 [ 1437.999288][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1438.004670][ T31] ? stack_depot_save_flags+0x40/0x850 [ 1438.010276][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 1438.016105][ T31] ? getname_flags+0xb8/0x540 [ 1438.020812][ T31] ? __pfx_path_openat+0x10/0x10 [ 1438.026766][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 1438.031811][ T31] do_filp_open+0x1fa/0x410 [ 1438.036424][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1438.041480][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1438.046414][ T31] ? alloc_fd+0x64c/0x6c0 [ 1438.050764][ T31] do_sys_openat2+0x121/0x200 [ 1438.056564][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1438.061801][ T31] ? rcu_is_watching+0x15/0xb0 [ 1438.066653][ T31] __x64_sys_openat+0x138/0x170 [ 1438.071507][ T31] do_syscall_64+0xfa/0xf80 [ 1438.076197][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.082259][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1438.087599][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.093511][ T31] RIP: 0033:0x7f4fa1d8f749 [ 1438.098105][ T31] RSP: 002b:00007f4fa2b71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1438.106651][ T31] RAX: ffffffffffffffda RBX: 00007f4fa1fe5fa0 RCX: 00007f4fa1d8f749 [ 1438.114726][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1438.123565][ T31] RBP: 00007f4fa1e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1438.131629][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1438.139692][ T31] R13: 00007f4fa1fe6038 R14: 00007f4fa1fe5fa0 R15: 00007fffb460d818 [ 1438.148225][ T31] [ 1438.151269][ T31] INFO: task syz.5.14977:26893 blocked for more than 144 seconds. [ 1438.159196][ T31] Not tainted syzkaller #0 [ 1438.164127][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1438.180558][ T31] task:syz.5.14977 state:D stack:28152 pid:26893 tgid:26892 ppid:25058 task_flags:0x400040 flags:0x00080002 [ 1438.192670][ T31] Call Trace: [ 1438.196066][ T31] [ 1438.198997][ T31] __schedule+0x14bc/0x5000 [ 1438.203505][ T31] ? __pfx___schedule+0x10/0x10 [ 1438.208881][ T31] ? schedule+0x91/0x360 [ 1438.213164][ T31] schedule+0x165/0x360 [ 1438.217490][ T31] schedule_preempt_disabled+0x13/0x30 [ 1438.222959][ T31] __mutex_lock+0x7e6/0x1350 [ 1438.227612][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 1438.232552][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1438.237987][ T31] ? misc_open+0x51/0x350 [ 1438.242420][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1438.247613][ T31] misc_open+0x51/0x350 [ 1438.251782][ T31] chrdev_open+0x4cc/0x5e0 [ 1438.256348][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1438.261311][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1438.268175][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1438.273113][ T31] do_dentry_open+0x7ce/0x1420 [ 1438.278008][ T31] vfs_open+0x3b/0x340 [ 1438.282076][ T31] ? path_openat+0x33f3/0x3dd0 [ 1438.286914][ T31] path_openat+0x340e/0x3dd0 [ 1438.291505][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1438.297524][ T31] ? stack_depot_save_flags+0x40/0x850 [ 1438.302997][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 1438.308696][ T31] ? getname_flags+0xb8/0x540 [ 1438.313385][ T31] ? __pfx_path_openat+0x10/0x10 [ 1438.318472][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 1438.323423][ T31] do_filp_open+0x1fa/0x410 [ 1438.328984][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1438.334029][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1438.339069][ T31] ? alloc_fd+0x64c/0x6c0 [ 1438.343431][ T31] do_sys_openat2+0x121/0x200 [ 1438.348177][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1438.353439][ T31] ? rcu_is_watching+0x15/0xb0 [ 1438.358852][ T31] __x64_sys_openat+0x138/0x170 [ 1438.363723][ T31] do_syscall_64+0xfa/0xf80 [ 1438.368282][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.374345][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1438.379183][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.386237][ T31] RIP: 0033:0x7fdf35f8f749 [ 1438.390691][ T31] RSP: 002b:00007fdf36ecb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1438.399268][ T31] RAX: ffffffffffffffda RBX: 00007fdf361e5fa0 RCX: 00007fdf35f8f749 [ 1438.407377][ T31] RDX: 0000000000020702 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1438.416486][ T31] RBP: 00007fdf36013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1438.424487][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1438.432522][ T31] R13: 00007fdf361e6038 R14: 00007fdf361e5fa0 R15: 00007ffff394eaf8 [ 1438.440693][ T31] [ 1438.443732][ T31] INFO: task syz.5.14977:26895 blocked for more than 144 seconds. [ 1438.452088][ T31] Not tainted syzkaller #0 [ 1438.457148][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1438.465861][ T31] task:syz.5.14977 state:D stack:28152 pid:26895 tgid:26892 ppid:25058 task_flags:0x400040 flags:0x00080002 [ 1438.478367][ T31] Call Trace: [ 1438.481667][ T31] [ 1438.484592][ T31] __schedule+0x14bc/0x5000 [ 1438.489204][ T31] ? __pfx___schedule+0x10/0x10 [ 1438.494069][ T31] ? schedule+0x91/0x360 [ 1438.498437][ T31] schedule+0x165/0x360 [ 1438.502593][ T31] schedule_preempt_disabled+0x13/0x30 [ 1438.508686][ T31] __mutex_lock+0x7e6/0x1350 [ 1438.513282][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 1438.518375][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1438.523145][ T31] ? misc_open+0x51/0x350 [ 1438.527568][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1438.532617][ T31] misc_open+0x51/0x350 [ 1438.537401][ T31] chrdev_open+0x4cc/0x5e0 [ 1438.541830][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1438.546843][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1438.553177][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1438.558263][ T31] do_dentry_open+0x7ce/0x1420 [ 1438.563071][ T31] vfs_open+0x3b/0x340 [ 1438.567845][ T31] ? path_openat+0x33f3/0x3dd0 [ 1438.572612][ T31] path_openat+0x340e/0x3dd0 [ 1438.577395][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1438.582801][ T31] ? stack_depot_save_flags+0x40/0x850 [ 1438.588342][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 1438.594061][ T31] ? getname_flags+0xb8/0x540 [ 1438.599358][ T31] ? __pfx_path_openat+0x10/0x10 [ 1438.604298][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 1438.609295][ T31] do_filp_open+0x1fa/0x410 [ 1438.613847][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1438.619027][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1438.623883][ T31] ? alloc_fd+0x64c/0x6c0 [ 1438.628867][ T31] do_sys_openat2+0x121/0x200 [ 1438.633561][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1438.638862][ T31] ? __fget_files+0x3a0/0x420 [ 1438.643555][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 1438.648967][ T31] __x64_sys_openat+0x138/0x170 [ 1438.653846][ T31] do_syscall_64+0xfa/0xf80 [ 1438.658954][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.665068][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1438.669768][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.675780][ T31] RIP: 0033:0x7fdf35f8f749 [ 1438.680187][ T31] RSP: 002b:00007fdf36eaa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1438.689145][ T31] RAX: ffffffffffffffda RBX: 00007fdf361e6090 RCX: 00007fdf35f8f749 [ 1438.697280][ T31] RDX: 00000000001c1842 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 1438.705311][ T31] RBP: 00007fdf36013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1438.713299][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1438.722444][ T31] R13: 00007fdf361e6128 R14: 00007fdf361e6090 R15: 00007ffff394eaf8 [ 1438.730758][ T31] [ 1438.733802][ T31] INFO: task syz.5.14977:26900 blocked for more than 145 seconds. [ 1438.741919][ T31] Not tainted syzkaller #0 [ 1438.747472][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1438.756233][ T31] task:syz.5.14977 state:D stack:28152 pid:26900 tgid:26892 ppid:25058 task_flags:0x400040 flags:0x00080002 [ 1438.768234][ T31] Call Trace: [ 1438.771510][ T31] [ 1438.774432][ T31] __schedule+0x14bc/0x5000 [ 1438.779572][ T31] ? __pfx___schedule+0x10/0x10 [ 1438.784431][ T31] ? schedule+0x91/0x360 [ 1438.788738][ T31] schedule+0x165/0x360 [ 1438.792908][ T31] schedule_preempt_disabled+0x13/0x30 [ 1438.798510][ T31] __mutex_lock+0x7e6/0x1350 [ 1438.803202][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 1438.808933][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1438.813713][ T31] ? misc_open+0x51/0x350 [ 1438.818203][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1438.823263][ T31] misc_open+0x51/0x350 [ 1438.827478][ T31] chrdev_open+0x4cc/0x5e0 [ 1438.831888][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1438.837416][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1438.843755][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1438.848987][ T31] do_dentry_open+0x7ce/0x1420 [ 1438.853798][ T31] vfs_open+0x3b/0x340 [ 1438.858034][ T31] ? path_openat+0x33f3/0x3dd0 [ 1438.862820][ T31] path_openat+0x340e/0x3dd0 [ 1438.867965][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1438.873343][ T31] ? stack_depot_save_flags+0x40/0x850 [ 1438.878923][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 1438.884563][ T31] ? getname_flags+0xb8/0x540 [ 1438.889458][ T31] ? __pfx_path_openat+0x10/0x10 [ 1438.894393][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 1438.900103][ T31] do_filp_open+0x1fa/0x410 [ 1438.904706][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1438.909829][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1438.914701][ T31] ? alloc_fd+0x64c/0x6c0 [ 1438.919151][ T31] do_sys_openat2+0x121/0x200 [ 1438.923828][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1438.929555][ T31] ? rcu_is_watching+0x15/0xb0 [ 1438.934337][ T31] __x64_sys_openat+0x138/0x170 [ 1438.939328][ T31] do_syscall_64+0xfa/0xf80 [ 1438.943828][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.949938][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1438.954611][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.961157][ T31] RIP: 0033:0x7fdf35f8f749 [ 1438.966099][ T31] RSP: 002b:00007fdf36e89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1438.974539][ T31] RAX: ffffffffffffffda RBX: 00007fdf361e6180 RCX: 00007fdf35f8f749 [ 1438.982718][ T31] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1438.991353][ T31] RBP: 00007fdf36013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1438.999468][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1439.007486][ T31] R13: 00007fdf361e6218 R14: 00007fdf361e6180 R15: 00007ffff394eaf8 [ 1439.016164][ T31] [ 1439.019203][ T31] INFO: task syz.4.14982:26909 blocked for more than 145 seconds. [ 1439.027513][ T31] Not tainted syzkaller #0 [ 1439.032442][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1439.041306][ T31] task:syz.4.14982 state:D stack:26504 pid:26909 tgid:26908 ppid:25523 task_flags:0x400040 flags:0x00080002 [ 1439.053998][ T31] Call Trace: [ 1439.057452][ T31] [ 1439.060428][ T31] __schedule+0x14bc/0x5000 [ 1439.065174][ T31] ? __pfx___schedule+0x10/0x10 [ 1439.070048][ T31] ? schedule+0x91/0x360 [ 1439.074286][ T31] schedule+0x165/0x360 [ 1439.079041][ T31] schedule_preempt_disabled+0x13/0x30 [ 1439.084496][ T31] __mutex_lock+0x7e6/0x1350 [ 1439.089184][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 1439.094125][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1439.098998][ T31] ? misc_open+0x51/0x350 [ 1439.103358][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1439.108998][ T31] misc_open+0x51/0x350 [ 1439.113205][ T31] chrdev_open+0x4cc/0x5e0 [ 1439.117743][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1439.122690][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1439.129278][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1439.134243][ T31] do_dentry_open+0x7ce/0x1420 [ 1439.140194][ T31] vfs_open+0x3b/0x340 [ 1439.144308][ T31] ? path_openat+0x33f3/0x3dd0 [ 1439.149161][ T31] path_openat+0x340e/0x3dd0 [ 1439.153758][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1439.159279][ T31] ? stack_depot_save_flags+0x40/0x850 [ 1439.165941][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 1439.171606][ T31] ? getname_flags+0xb8/0x540 [ 1439.176463][ T31] ? __pfx_path_openat+0x10/0x10 [ 1439.181453][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 1439.186582][ T31] do_filp_open+0x1fa/0x410 [ 1439.191114][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1439.196733][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1439.201589][ T31] ? alloc_fd+0x64c/0x6c0 [ 1439.209011][ T31] do_sys_openat2+0x121/0x200 [ 1439.213729][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1439.219036][ T31] ? exc_page_fault+0x82/0x100 [ 1439.223803][ T31] __x64_sys_openat+0x138/0x170 [ 1439.229211][ T31] do_syscall_64+0xfa/0xf80 [ 1439.233716][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.239878][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1439.244557][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.250510][ T31] RIP: 0033:0x7ff6ed98f749 [ 1439.256008][ T31] RSP: 002b:00007ff6ee8db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1439.264434][ T31] RAX: ffffffffffffffda RBX: 00007ff6edbe5fa0 RCX: 00007ff6ed98f749 [ 1439.272437][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 1439.280514][ T31] RBP: 00007ff6eda13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1439.289797][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1439.298028][ T31] R13: 00007ff6edbe6038 R14: 00007ff6edbe5fa0 R15: 00007ffdeec7fd48 [ 1439.306147][ T31] [ 1439.309201][ T31] INFO: task syz.1.14986:26929 blocked for more than 145 seconds. [ 1439.317657][ T31] Not tainted syzkaller #0 [ 1439.322593][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1439.331293][ T31] task:syz.1.14986 state:D stack:28152 pid:26929 tgid:26928 ppid:18404 task_flags:0x400040 flags:0x00080002 [ 1439.343349][ T31] Call Trace: [ 1439.347163][ T31] [ 1439.350098][ T31] __schedule+0x14bc/0x5000 [ 1439.354616][ T31] ? __pfx___schedule+0x10/0x10 [ 1439.359612][ T31] ? schedule+0x91/0x360 [ 1439.363854][ T31] schedule+0x165/0x360 [ 1439.368068][ T31] schedule_preempt_disabled+0x13/0x30 [ 1439.373515][ T31] __mutex_lock+0x7e6/0x1350 [ 1439.378700][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 1439.383649][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1439.388474][ T31] ? misc_open+0x51/0x350 [ 1439.392803][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1439.397993][ T31] misc_open+0x51/0x350 [ 1439.402174][ T31] chrdev_open+0x4cc/0x5e0 [ 1439.407705][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1439.412768][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1439.419215][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1439.424162][ T31] do_dentry_open+0x7ce/0x1420 [ 1439.428986][ T31] vfs_open+0x3b/0x340 [ 1439.433062][ T31] ? path_openat+0x33f3/0x3dd0 [ 1439.438458][ T31] path_openat+0x340e/0x3dd0 [ 1439.443064][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1439.448509][ T31] ? stack_depot_save_flags+0x40/0x850 [ 1439.454015][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 1439.459792][ T31] ? getname_flags+0xb8/0x540 [ 1439.464477][ T31] ? __pfx_path_openat+0x10/0x10 [ 1439.469958][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 1439.475088][ T31] do_filp_open+0x1fa/0x410 [ 1439.479618][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1439.484651][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1439.489586][ T31] ? alloc_fd+0x64c/0x6c0 [ 1439.493914][ T31] do_sys_openat2+0x121/0x200 [ 1439.499276][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1439.504479][ T31] ? __fget_files+0x2a/0x420 [ 1439.509247][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 1439.514444][ T31] __x64_sys_openat+0x138/0x170 [ 1439.519408][ T31] do_syscall_64+0xfa/0xf80 [ 1439.523909][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.532008][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1439.536899][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.542818][ T31] RIP: 0033:0x7f50de38f749 [ 1439.547301][ T31] RSP: 002b:00007f50df1c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1439.556313][ T31] RAX: ffffffffffffffda RBX: 00007f50de5e5fa0 RCX: 00007f50de38f749 [ 1439.564286][ T31] RDX: 0000000000000302 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 1439.572349][ T31] RBP: 00007f50de413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1439.580452][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1439.588945][ T31] R13: 00007f50de5e6038 R14: 00007f50de5e5fa0 R15: 00007ffd297b4398 [ 1439.597045][ T31] [ 1439.600084][ T31] INFO: task syz-executor:26935 blocked for more than 145 seconds. [ 1439.608703][ T31] Not tainted syzkaller #0 [ 1439.613654][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1439.623101][ T31] task:syz-executor state:D stack:27688 pid:26935 tgid:26935 ppid:1 task_flags:0x400040 flags:0x00080000 [ 1439.635411][ T31] Call Trace: [ 1439.638709][ T31] [ 1439.641638][ T31] __schedule+0x14bc/0x5000 [ 1439.646899][ T31] ? __pfx___schedule+0x10/0x10 [ 1439.651760][ T31] ? schedule+0x91/0x360 [ 1439.656151][ T31] schedule+0x165/0x360 [ 1439.660330][ T31] schedule_preempt_disabled+0x13/0x30 [ 1439.665854][ T31] __mutex_lock+0x7e6/0x1350 [ 1439.670451][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 1439.676202][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1439.680969][ T31] ? misc_open+0x51/0x350 [ 1439.685352][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1439.690376][ T31] misc_open+0x51/0x350 [ 1439.694535][ T31] chrdev_open+0x4cc/0x5e0 [ 1439.699163][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1439.704131][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1439.711028][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1439.716082][ T31] do_dentry_open+0x7ce/0x1420 [ 1439.720856][ T31] vfs_open+0x3b/0x340 [ 1439.725087][ T31] ? path_openat+0x33f3/0x3dd0 [ 1439.729863][ T31] path_openat+0x340e/0x3dd0 [ 1439.734457][ T31] ? __pfx_handle_mm_fault+0x10/0x10 [ 1439.740409][ T31] ? __pfx_path_openat+0x10/0x10 [ 1439.745436][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 1439.750419][ T31] do_filp_open+0x1fa/0x410 [ 1439.755088][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1439.760144][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1439.765886][ T31] ? alloc_fd+0x64c/0x6c0 [ 1439.770309][ T31] do_sys_openat2+0x121/0x200 [ 1439.775206][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1439.780467][ T31] ? fd_install+0x95/0x3d0 [ 1439.784967][ T31] ? fd_install+0x307/0x3d0 [ 1439.789492][ T31] __x64_sys_openat+0x138/0x170 [ 1439.794376][ T31] do_syscall_64+0xfa/0xf80 [ 1439.799586][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.805713][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1439.810388][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.816460][ T31] RIP: 0033:0x7f4da418df11 [ 1439.820871][ T31] RSP: 002b:00007ffdb8f7a0d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1439.829812][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f4da418df11 [ 1439.837962][ T31] RDX: 0000000000000002 RSI: 00007f4da42149b7 RDI: 00000000ffffff9c [ 1439.846343][ T31] RBP: 00007f4da42149b7 R08: 0000000000000000 R09: 00007f4da4f1d6c0 [ 1439.854316][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1439.862954][ T31] R13: 0000000000000003 R14: 00007ffdb8f7a4a8 R15: 0000000000000000 [ 1439.871020][ T31] [ 1439.874044][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1439.883252][ T31] [ 1439.883252][ T31] Showing all locks held in the system: [ 1439.891518][ T31] 1 lock held by khungtaskd/31: [ 1439.896528][ T31] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1439.906504][ T31] 2 locks held by getty/5592: [ 1439.911165][ T31] #0: ffff888034d8b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1439.921528][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 1439.931823][ T31] 3 locks held by kworker/1:16/24267: [ 1439.937365][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1439.948985][ T31] #1: ffffc9000d7f7b80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1439.962577][ T31] #2: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 1439.973998][ T31] 2 locks held by syz.6.14887/26550: [ 1439.979888][ T31] #0: ffff888059711100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x300 [ 1439.989891][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 1440.000157][ T31] 2 locks held by syz.6.14887/26551: [ 1440.006515][ T31] #0: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 1440.016779][ T31] #1: ffff888059711100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x3b/0x290 [ 1440.025887][ T31] 3 locks held by syz.0.14973/26870: [ 1440.031160][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1440.040244][ T31] #1: ffff88801dba9100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x390 [ 1440.049872][ T31] #2: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1440.059961][ T31] 1 lock held by syz.5.14977/26893: [ 1440.065778][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1440.074223][ T31] 1 lock held by syz.5.14977/26895: [ 1440.079635][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1440.088243][ T31] 1 lock held by syz.5.14977/26900: [ 1440.093430][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1440.103138][ T31] 1 lock held by syz.4.14982/26909: [ 1440.108497][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1440.117422][ T31] 1 lock held by syz.1.14986/26929: [ 1440.122663][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1440.131708][ T31] 1 lock held by syz-executor/26935: [ 1440.137104][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1440.145619][ T31] 1 lock held by syz-executor/26937: [ 1440.150901][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1440.159977][ T31] 1 lock held by syz-executor/26941: [ 1440.165551][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1440.174026][ T31] 1 lock held by syz-executor/26942: [ 1440.179436][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1440.188476][ T31] 1 lock held by syz-executor/26943: [ 1440.193756][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1440.202326][ T31] 1 lock held by syz-executor/26945: [ 1440.207645][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1440.216671][ T31] 1 lock held by syz-executor/26947: [ 1440.222048][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1440.230547][ T31] 1 lock held by syz-executor/26951: [ 1440.235966][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1440.244460][ T31] 1 lock held by syz-executor/26952: [ 1440.254705][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1440.263362][ T31] 1 lock held by syz-executor/26953: [ 1440.268703][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1440.277895][ T31] 1 lock held by syz-executor/26955: [ 1440.283212][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1440.291733][ T31] 1 lock held by syz-executor/26957: [ 1440.297163][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1440.306142][ T31] 1 lock held by syz-executor/26961: [ 1440.311427][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1440.319998][ T31] 1 lock held by syz-executor/26962: [ 1440.325618][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1440.334191][ T31] 1 lock held by syz-executor/26963: [ 1440.340088][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1440.348606][ T31] [ 1440.350935][ T31] ============================================= [ 1440.350935][ T31] [ 1440.359450][ T31] NMI backtrace for cpu 1 [ 1440.359464][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1440.359476][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1440.359483][ T31] Call Trace: [ 1440.359487][ T31] [ 1440.359493][ T31] dump_stack_lvl+0x189/0x250 [ 1440.359511][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1440.359523][ T31] ? __pfx__printk+0x10/0x10 [ 1440.359542][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1440.359559][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1440.359573][ T31] ? __pfx__printk+0x10/0x10 [ 1440.359589][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1440.359605][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1440.359619][ T31] sys_info+0x135/0x170 [ 1440.359630][ T31] watchdog+0xf95/0xfe0 [ 1440.359647][ T31] ? watchdog+0x20a/0xfe0 [ 1440.359664][ T31] kthread+0x711/0x8a0 [ 1440.359678][ T31] ? __pfx_watchdog+0x10/0x10 [ 1440.359690][ T31] ? __pfx_kthread+0x10/0x10 [ 1440.359703][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1440.359718][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1440.359728][ T31] ? __pfx_kthread+0x10/0x10 [ 1440.359739][ T31] ret_from_fork+0x599/0xb30 [ 1440.359751][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1440.359766][ T31] ? __switch_to_asm+0x39/0x70 [ 1440.359777][ T31] ? __switch_to_asm+0x33/0x70 [ 1440.359788][ T31] ? __pfx_kthread+0x10/0x10 [ 1440.359801][ T31] ret_from_fork_asm+0x1a/0x30 [ 1440.359821][ T31] [ 1440.359825][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1440.512210][ C0] NMI backtrace for cpu 0 [ 1440.512228][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1440.512251][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1440.512261][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1440.512284][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 90 0c 00 f3 0f 1e fa fb f4 c8 ed 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1440.512298][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 1440.512313][ C0] RAX: 87274e7875a05400 RBX: ffffffff81978fda RCX: 87274e7875a05400 [ 1440.512325][ C0] RDX: 0000000000000001 RSI: ffffffff8d7925ee RDI: ffffffff8bc08360 [ 1440.512336][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b86336db R09: 1ffff110170c66db [ 1440.512348][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822070 [ 1440.512360][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 1440.512371][ C0] FS: 0000000000000000(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 1440.512383][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1440.512394][ C0] CR2: 00007f08d9f17d60 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 1440.512409][ C0] Call Trace: [ 1440.512417][ C0] [ 1440.512424][ C0] default_idle+0x13/0x20 [ 1440.512441][ C0] default_idle_call+0x73/0xb0 [ 1440.512460][ C0] do_idle+0x1ea/0x520 [ 1440.512477][ C0] ? irqentry_exit+0x5ba/0x660 [ 1440.512496][ C0] ? __pfx_do_idle+0x10/0x10 [ 1440.512520][ C0] cpu_startup_entry+0x44/0x60 [ 1440.512537][ C0] rest_init+0x2de/0x300 [ 1440.512557][ C0] start_kernel+0x3a7/0x400 [ 1440.512575][ C0] x86_64_start_reservations+0x24/0x30 [ 1440.512595][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1440.512614][ C0] common_startup_64+0x13e/0x147 [ 1440.512643][ C0] [ 1440.696991][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1440.703853][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1440.712967][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1440.723020][ T31] Call Trace: [ 1440.726288][ T31] [ 1440.729207][ T31] dump_stack_lvl+0x99/0x250 [ 1440.733857][ T31] ? __asan_memcpy+0x40/0x70 [ 1440.738462][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1440.743659][ T31] ? __pfx__printk+0x10/0x10 [ 1440.748242][ T31] vpanic+0x237/0x6d0 [ 1440.752234][ T31] ? __pfx_vpanic+0x10/0x10 [ 1440.756734][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1440.762211][ T31] panic+0xb9/0xc0 [ 1440.765932][ T31] ? __pfx_panic+0x10/0x10 [ 1440.770351][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1440.775714][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1440.781879][ T31] watchdog+0xfdf/0xfe0 [ 1440.786164][ T31] ? watchdog+0x20a/0xfe0 [ 1440.790486][ T31] kthread+0x711/0x8a0 [ 1440.794542][ T31] ? __pfx_watchdog+0x10/0x10 [ 1440.799202][ T31] ? __pfx_kthread+0x10/0x10 [ 1440.803786][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1440.808978][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1440.814177][ T31] ? __pfx_kthread+0x10/0x10 [ 1440.818767][ T31] ret_from_fork+0x599/0xb30 [ 1440.823353][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1440.828459][ T31] ? __switch_to_asm+0x39/0x70 [ 1440.833216][ T31] ? __switch_to_asm+0x33/0x70 [ 1440.837969][ T31] ? __pfx_kthread+0x10/0x10 [ 1440.842555][ T31] ret_from_fork_asm+0x1a/0x30 [ 1440.847332][ T31] [ 1440.850683][ T31] Kernel Offset: disabled [ 1440.854998][ T31] Rebooting in 86400 seconds..