last executing test programs: 3m30.557315725s ago: executing program 1 (id=595): socket$inet(0x2, 0x4000000805, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x150, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)='veth1_macvtap\x00', 0x400, 0x4, 0x2}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000340)="35b85f2916de40b446d29a76d5f36e1bebd9cc93d00544dbcc8f0d6fb82ad260036a2eb77b0fc1244565c98ccbb88eca64a269051a819aef4af1b34e980c2b10d09083c47d775236275cbc469631824363aae89deb6936bb3814c1bd8c540e0c420cc43e2b3ba866bd4e440c0389c91b5f987166004d7b02b42aeedf972d0f92b353471864e719f66285e6ee6aaac240ef0bc78d4e76b8192ff1f7cca20bf0d3c425c1dee051c03f3b4a31fe", 0xac}], 0x1}, 0x50) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x1416, 0x1}, 0x10}}, 0x0) socket$isdn_base(0x22, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = accept4$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000140)=0x1c, 0xc0800) sendmmsg(r3, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0xffffffffffffffe5, 0x84, 0x5, "10"}], 0x18}}], 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) shutdown(r4, 0x1) 3m30.432819975s ago: executing program 1 (id=600): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r9) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @rand_addr=0x64010101}, {0x2, 0x4e24, @local}, 0x4, 0x0, 0x0, 0x0, 0x80, &(0x7f0000000000)='vlan0\x00', 0x8, 0x7, 0x7}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001a000100000000000000000002000000000000000000000008000400", @ANYRES8=r0, @ANYBLOB="140007"], 0x38}}, 0x0) 3m30.228859706s ago: executing program 1 (id=603): r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'batadv0\x00', {0x1}, 0x2}) 3m29.975286831s ago: executing program 1 (id=607): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r2, 0x40083}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000)=[{{0x3, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}}], 0x8) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000140)={'TPROXY\x00'}, &(0x7f0000000280)=0x1e) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) close(0x3) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb", 0x8}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x7, 0x0) 3m29.746494956s ago: executing program 1 (id=611): r0 = socket(0x1e, 0x1, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000040)={0x3}) socket(0x9, 0x1, 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x1, 0x2, 0x801}, 0x14}}, 0x0) r2 = socket(0x2a, 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a40)={0x1c4, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x68}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc3d}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff993}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1c00000}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffb5d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd949}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x80}, 0x841) getsockname$packet(r2, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xe}}}, 0x24}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newtfilter={0x48, 0x2c, 0xd2f, 0x0, 0x25dfdbdb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0x7}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "79af4f9025a89c4455b024f9777ac430"}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000085}, 0x40) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r4}, 0x14) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x0, 0xffffff6a, 0x0, 0x0, 0x340, 0x258, 0x258, 0x340, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x180, 0x1c0, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @empty, @private2}}, @common=@dst={{0x48}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) socket(0x1e, 0x1, 0x0) (async) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000040)={0x3}) (async) socket(0x9, 0x1, 0x7) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x1, 0x2, 0x801}, 0x14}}, 0x0) (async) socket(0x2a, 0x2, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) (async) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a40)={0x1c4, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x68}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc3d}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff993}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1c00000}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffb5d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd949}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x80}, 0x841) (async) getsockname$packet(r2, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xe}}}, 0x24}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newtfilter={0x48, 0x2c, 0xd2f, 0x0, 0x25dfdbdb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0x7}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "79af4f9025a89c4455b024f9777ac430"}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000085}, 0x40) (async) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r4}, 0x14) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x0, 0xffffff6a, 0x0, 0x0, 0x340, 0x258, 0x258, 0x340, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x180, 0x1c0, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @empty, @private2}}, @common=@dst={{0x48}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) (async) 3m29.428044583s ago: executing program 1 (id=616): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x800, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r4, 0x0, 0x5}, 0x18) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendto$inet6(r2, &(0x7f0000007100)="19", 0x1, 0x0, &(0x7f0000000340)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="036e62b95e3bd41500000000000000000a0000000000000100000000"], 0x1c}}, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x200, 0x0, 0x4}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x800, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x6) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r4, 0x0, 0x5}, 0x18) (async) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) sendto$inet6(r2, &(0x7f0000007100)="19", 0x1, 0x0, &(0x7f0000000340)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="036e62b95e3bd41500000000000000000a0000000000000100000000"], 0x1c}}, 0x0) (async) shutdown(r2, 0x1) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x200, 0x0, 0x4}, 0x20) (async) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) (async) 3m14.354455764s ago: executing program 32 (id=616): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x800, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r4, 0x0, 0x5}, 0x18) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendto$inet6(r2, &(0x7f0000007100)="19", 0x1, 0x0, &(0x7f0000000340)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="036e62b95e3bd41500000000000000000a0000000000000100000000"], 0x1c}}, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x200, 0x0, 0x4}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x800, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x6) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r4, 0x0, 0x5}, 0x18) (async) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) sendto$inet6(r2, &(0x7f0000007100)="19", 0x1, 0x0, &(0x7f0000000340)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="036e62b95e3bd41500000000000000000a0000000000000100000000"], 0x1c}}, 0x0) (async) shutdown(r2, 0x1) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x200, 0x0, 0x4}, 0x20) (async) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) (async) 43.709843208s ago: executing program 0 (id=2780): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000140)={r1, 0x0, 0x0}, 0x20) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x1, @default, @bpq0, 0x8, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) 43.430074972s ago: executing program 0 (id=2781): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=""/193, 0xc1}, 0x8}], 0x1, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001a000100000000000000000081"], 0x1c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f000000a440)=0x20, 0x4) setsockopt$sock_int(r1, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r8, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r8, 0x84, 0xc, &(0x7f0000000000), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}]}, &(0x7f00000000c0)=0x10) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0xfc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="040000000400000004000000dddf000014000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00e9ffff6860e2ffffff00204a81cc82cb9919000000d60000000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r9, 0x0, 0x0}, 0x20) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r10], 0x80}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 10.920343965s ago: executing program 0 (id=2781): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=""/193, 0xc1}, 0x8}], 0x1, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001a000100000000000000000081"], 0x1c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f000000a440)=0x20, 0x4) setsockopt$sock_int(r1, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r8, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r8, 0x84, 0xc, &(0x7f0000000000), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}]}, &(0x7f00000000c0)=0x10) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0xfc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="040000000400000004000000dddf000014000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00e9ffff6860e2ffffff00204a81cc82cb9919000000d60000000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r9, 0x0, 0x0}, 0x20) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r10], 0x80}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 10.916450876s ago: executing program 0 (id=2781): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=""/193, 0xc1}, 0x8}], 0x1, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001a000100000000000000000081"], 0x1c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f000000a440)=0x20, 0x4) setsockopt$sock_int(r1, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r8, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r8, 0x84, 0xc, &(0x7f0000000000), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}]}, &(0x7f00000000c0)=0x10) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0xfc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="040000000400000004000000dddf000014000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00e9ffff6860e2ffffff00204a81cc82cb9919000000d60000000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r9, 0x0, 0x0}, 0x20) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r10], 0x80}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 10.916337567s ago: executing program 0 (id=2781): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=""/193, 0xc1}, 0x8}], 0x1, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001a000100000000000000000081"], 0x1c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f000000a440)=0x20, 0x4) setsockopt$sock_int(r1, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r8, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r8, 0x84, 0xc, &(0x7f0000000000), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}]}, &(0x7f00000000c0)=0x10) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0xfc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="040000000400000004000000dddf000014000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00e9ffff6860e2ffffff00204a81cc82cb9919000000d60000000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r9, 0x0, 0x0}, 0x20) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r10], 0x80}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 10.507462295s ago: executing program 0 (id=2781): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=""/193, 0xc1}, 0x8}], 0x1, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001a000100000000000000000081"], 0x1c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f000000a440)=0x20, 0x4) setsockopt$sock_int(r1, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r8, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r8, 0x84, 0xc, &(0x7f0000000000), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}]}, &(0x7f00000000c0)=0x10) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0xfc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="040000000400000004000000dddf000014000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00e9ffff6860e2ffffff00204a81cc82cb9919000000d60000000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r9, 0x0, 0x0}, 0x20) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r10], 0x80}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 2.589483002s ago: executing program 5 (id=2974): syz_emit_ethernet(0x26, &(0x7f0000000040)={@broadcast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}, "90e2a72a"}}}}, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000000)={0xa, 0x0, 0x6, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@flowinfo={{0x14, 0x29, 0xb, 0x10000}}], 0x18}}], 0x1, 0x0) 2.548096006s ago: executing program 5 (id=2975): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001280)={0xffffffffffffffff, 0x20, &(0x7f0000001240)={&(0x7f0000000180)=""/132, 0x84, 0x0, &(0x7f0000000240)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x6, &(0x7f00000012c0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x4, 0x71, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x8, 0xca, &(0x7f0000001300)=""/202, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x2c, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010102}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc4}, 0x20004081) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001540)={'vxcan0\x00'}) 2.339092877s ago: executing program 5 (id=2977): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000000)={'team_slave_1\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r1}, 0x10) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000001400078008001140000000000500150003000000050005000a"], 0x60}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c00090008"], 0x30}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x7d, &(0x7f0000000080)={r6}, 0x8) unshare(0x62040200) 1.559318789s ago: executing program 3 (id=2985): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="ec0000002100010000000000000000344a1e0001000000000000000000000000ff02000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff020000000000000000000000000001fe8000000000000000000000000000bbfe800000000000000000000000000000e000000200000000000000000000000000000000000000000000000000000000000000000000ffff00000000fc0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xec}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001900010000000000000000cd0258"], 0x24}}, 0x0) 1.557690119s ago: executing program 4 (id=2986): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x10}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004014) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) (rerun: 32) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4010) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x1f8, r3, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x2}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "57be718c617ff4807d4e4cfc5df628d1c4dd7998eb877473"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "99c1aa1a52a756f9c449d68b7fd0b5323aba306acf7cd4df"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9c4e057d785773b091051064f30cc64a0dff0259a9ab0455"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "adbf2fe61c6f516c08deb1fb9a65fe5c997d573d51d92962"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d0a5104257554a275a58fb6790c744fa016ad663bacd8caf"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b29811ea8696c065597e3ea963db70896d222cac5ee97320"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4a8c12276b24e6ed3ba0ca98cbece468cdc9f69d40b05e2e"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "864741fcb0ed99ba28d3b5c019c06c996762febebbee58c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4d849a4aec3ead9e0a4216a4808df78b93b93ab1cfe442c4"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6c30f5280af3158fedb6b3423507813c007bc25db13fc723"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "86cf75412c45340cfab8c6c1fecb94e7a4eb8c91b0a9a521"}]]}, 0x1f8}, 0x1, 0x0, 0x0, 0x240440d5}, 0x800) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x178, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xec7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc057}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x800}, 0x4008004) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, r4, 0x810, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000}, 0x1) (async) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r5, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20008080) r6 = socket$kcm(0x29, 0x2, 0x0) (async) r7 = socket(0x15, 0x1, 0x0) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000d40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b80)={0x150, r3, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x1, 0x4, 0x8000]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xaeb0}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7fff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x21}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x31}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x22}]}, @NL80211_ATTR_CQM={0x68, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x0, 0x1]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9b}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x6, 0x8, 0x8, 0x3c2c, 0x6]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xf1a7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2b}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x32}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x201}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2e}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x50}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x9, 0x1, 0x4, 0x9, 0x1ff, 0xb9, 0x3]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x600}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x40000}, 0x4004006) (async, rerun: 32) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(r8, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x54, r9, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x8004) (async, rerun: 32) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f40), r0) (rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001240)={0xffffffffffffffff, 0xe0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000f80)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x66, &(0x7f0000001040)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001080), &(0x7f00000010c0), 0x8, 0x28, 0x8, 0x8, &(0x7f0000001100)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000001380)={'syztnl2\x00', &(0x7f0000001280)={'syztnl1\x00', 0x0, 0x40, 0x40, 0x4d59, 0xb5a9, {{0x2d, 0x4, 0x0, 0x2, 0xb4, 0x65, 0x0, 0x0, 0x2f, 0x0, @multicast1, @multicast1, {[@generic={0x83, 0x7, "f8f1c400f9"}, @end, @timestamp_prespec={0x44, 0x34, 0x60, 0x3, 0x1, [{@loopback, 0x7}, {@remote, 0x2}, {@loopback, 0xaf1}, {@dev={0xac, 0x14, 0x14, 0x16}, 0xfffff168}, {@remote}, {@remote, 0x3210}]}, @lsrr={0x83, 0x27, 0x3d, [@local, @multicast1, @rand_addr=0x64010101, @local, @multicast2, @multicast1, @rand_addr=0x64010102, @empty, @multicast2]}, @noop, @lsrr={0x83, 0x17, 0xaf, [@broadcast, @loopback, @local, @broadcast, @empty]}, @generic={0x44, 0x12, "30584ffc7f8ddfb6588370abf80b7048"}, @generic={0x86, 0x11, "e9e20f21dbd0697ffe0f2a6a6d85b8"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000001440)={'ip_vti0\x00', &(0x7f00000013c0)={'sit0\x00', 0x0, 0x10, 0x40, 0x9, 0x2c5, {{0xa, 0x4, 0x1, 0x35, 0x28, 0x64, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010100, @broadcast, {[@generic={0x88, 0x11, "e13cf7b25ebeda9a56c873f1960d53"}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000001480)={'vxcan1\x00', 0x0}) (async, rerun: 64) getsockname$packet(r7, &(0x7f00000014c0)={0x11, 0x0, 0x0}, &(0x7f0000001500)=0x14) (async, rerun: 64) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000001540)={@local, 0x0}, &(0x7f0000001580)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000015c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000001680)={'syztnl1\x00', &(0x7f0000001600)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x2, 0x7, 0x5, @private1, @rand_addr=' \x01\x00', 0x40, 0x8, 0x3, 0x10001}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000001740)={'syztnl2\x00', &(0x7f00000016c0)={'gre0\x00', 0x0, 0x10, 0x80, 0x6, 0x6, {{0x11, 0x4, 0x0, 0x8, 0x44, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @remote, {[@timestamp={0x44, 0x24, 0x19, 0x0, 0x5, [0x5, 0x200, 0xae, 0xe2c, 0x100, 0x4, 0x2, 0x1]}, @timestamp_addr={0x44, 0xc, 0xd4, 0x1, 0x6, [{@broadcast, 0xfffffffa}]}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_GET(r7, &(0x7f0000001980)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001940)={&(0x7f0000001780)={0x184, r10, 0x620, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x40000}, 0x4) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r8, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x38, r9, 0x300, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xcb13}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x555e}]}, 0x38}, 0x1, 0x0, 0x0, 0xc311cc4ef36d78f0}, 0x20008055) 1.466274942s ago: executing program 2 (id=2987): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x20, 0x10}, 0xc) sendmsg$inet6(r0, &(0x7f0000000440), 0x20000000) 1.406505723s ago: executing program 3 (id=2988): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1f, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40082}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0x18}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) 1.219129525s ago: executing program 4 (id=2989): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="300080000203010400000000000000000000000708000100030000280900020000000004010000000800010001000000"], 0x30}}, 0x8080) (async) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b47880000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000000140)=[{{&(0x7f0000001480)={0xa, 0x0, 0xfffffff8, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="14008312e909888540026fd79075e81b00af264d66cab09e953610579187888ffb7001dd90386515d9581c10e14ad7447882cdebd1a740a3a51b74a9469384b03e894d3d4adafbd426abd2b62b05e064222f183e1a7de7f078c137016c2323cd4b0af59ad4fda6afddc4d2f41d86f94362b55598ae80ec72e356bf51b8394f3ca4060bcd1423920000000000"], 0x18}}], 0x1, 0x0) (async) connect$l2tp6(r2, &(0x7f0000001740)={0xa, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x20) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0xcf, 0x0, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000001440)={&(0x7f0000000080)=@generic={0x15, "f846800275a6e2ee5ca27190f747eb4e2970551907e2bf9864a30a08897f609891f637951e5c8d1cd1131c18998c29859ef409264e9de4c0b300a635d3b2750c4a6fbccde9e0e358eb5d30feb3e795fa8b2ab3f8646e5db7fca07db8aa7844fcc7be8ef823d7211dcef3023672c4c408c775b714d8cd195abfc1723e0a1d"}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)="bdc83d4e1961a5757445e3aa4616bab8ef04f7c1cb92faecb37cbbd19f9e8da1a617571561499c899644d9a64f4b050380600723c948c715fbb6abd5d511a6d9d2bf43df53bed3a7b474dd00701dea0d6b89029069e3f354455417ba7ebc335242b1ebe55d1614f096b9d7a71e8bceba9a0177d096a44ff07dc56c966fcc6f95aa09b8244ce53dd9f71e261d0b1a302f99647452d0f1d5832f384ed7a5b362db04106582ef37a347b126901f2713ea993f4aa836599bcc1e6e2972265823d66430020c9a6ac2bea83754a4854616", 0xce}, {&(0x7f0000000280)="2f4e672a9d4098f401a2e8b77725815cdddd35bd5a42b6e595e40c6518480e3f81", 0x21}, {&(0x7f00000002c0)="907eb42189809c909385a969672ad82e3677c4c4f21351a24f9e728308e82c8d1e808df9d91c23c7940fdb3cc38e3f4a986244103926af4dc88791d64c0d136d35386dea6d7ae9963204b2c65b836143c7ee4a4d0b710d08ff6b27c64b72bd3783686f735f06fc2ef8b93d71b63baaaa82a50b07040b8845faece5faea884a6772f45dd702870e30683ac1ef472903d3222341dd78fa8ab05f55031e18ced7dc39c69101aac970215f2722290abb26f9fa93e0d5efecb56e4c1f0b7558aa1bb88967e8c785678c5a2ce2799dab0e6fa3a1649d317083cc5e31e4c0ece4d4a40a25460ea671cd61b3e9a3", 0xea}], 0x3, &(0x7f0000000400)=[{0x1010, 0x115, 0x0, "e233087490efb9941f29623166a5a3fabe59980abb75a2e518ab38eacc1262127494056869fbdd19b493a3a8cc4f2ddf642d77ed112d98b86a7469e21f2be0373a2c946c66fd097440ee5105122e2cce04b6d37b776718d00ba835b14bca46c7f325fa024dbd2e19e2e51c735622af2e2c9dce29ef04998b1fddf9dcb556094c12e8b1a9426978063da46e5887c3d6ab26d39b92fd5100e99304fc8ba2b1a9d65a366cbb22f76af34b9b371ff8884ecf9c573827c361f72195b0e17a05deab3a8e0c6d93ac2c9b2509ec4fd935edaa6b71a19f61bd603d0731cc7afea29e2c861829e67c7a157ca413f292e1639e07f399cec68fc9a508218947fe3e2dcd8ed97be3193cb586c6a85bb046ab8d9afa0b55440f0c84f571a9cbc2711458f6c5ca0ea9f3d85463abfb81e5caa7143e38bb354af9366b769648dc723cdafd71d474f6c499981c5f94c356aa0d5de3c21498af60adf0494433c6ce83a5379bf73a91e74dc412fddf900361895d563acc66d75a79ce636977965c5059aae0656973527dca105132d83127a9a06bf2b5d17ad1e022c3ed6cd1a8c29f9fe97e91ae722474ae6571de0b656d1fcb71e6f81c9a40095ee83216a558aeba39e5852b699556cf087eff72351f2fa5fd2054d90bdbd9334749df49e7d745a7aef756de4075ef655d87994c45aaa57a262a510029ad5dee53ead6c4a3184fc737346f5a5d29b853eed2e4a8987ce45b50d9ffe8f63db039a306434671acbfa2ef911c9b7a4f6958754f84642f102a3333ab3899bf8320f7f022908463d24f9de583fc17970b97ed1a0be51a3f1ba06d2280e24ccad2885d9915ab0df4c96f86d20059814964f6ccb7d53ee003d852f031b40bdc3ef1f9eb80577f889fc5a9ae997429689ddedb6c60e1385f47914af0f402772f9249d87ff5b8217fca909b9c13828b1e9608b4fd758e2aeb7645e9b1f1a5fbadbd7d77da4729dcd9f7dc7016547cbdb13fe38e65046136f044bf3b94d6ad3ba7db97c2f39e316e040cc03e0c9edad5abe358eec1e4f08c48c1ee14e916067f1ab4ec9cc201ef85eb4c2f3ea976b1cc02aa0007935a0e0dcd2f9664ebfe562cf7a82dc5108c159546a0ba11953ccadfde9431cbbca736b270e296b6acf1c8c60945e5c00bf7d60ce5a23742f6ad324dd7c6459c49dd6d9ca60008e64230c7e69a1f8ba465b3aad58a2261a4e86c60adafdba44d6b77d5ca31d49c251fcd7d8df37c55ba3adbc45a3352aca41561450c02a209ffa3de58ace3349b468e79408868a159142665964daef68f6dbc2ccfffe804073f9c198ed581148de745a970664d322eb715ab66d76f1e3c136d562841f2e74f64c49f5a26bb69fa3dfa73abb78918173e073367cbad86a10f953fb612a51b2d158c04ef634635346ade77918fa725b4381085d25d5df1848eb4d395982d8dd8604a2773ce9150ba4e091a5daae99dea09657c8d24b226de509ed08481958dfefdce8e8b88ca65cf5f0fb591a4eaba6d64130686809a47273e64a448a7077f344b1d939122529047b16821ff3277852434ef34b33240be50cf1d779f2144c3d8de923798526d0607bcf4c26c49a4ed8bddf171bb1c3bde943f14b0e9180842e5ad2f8a602989447cdfd8c19adfcc86c200efc66fdc10b683392c127557207338462e324ab18cc997fc8f3d0e1bcaba8c64d9b1c49bc94b8313b94502f1b0b228fa6febe946db48712c4421610580e4e13ae41c1ee2c68012a9d66f9d145468f4839ee96cc7123ed1910397b6e6a5eff3ac0a45266f2ed7d0d07d6102af25afdab2ae9eb0bdd4a2db35805ace4255aa04b2a873044cc66dc1d0a386d70fe9cc2b4f0dc6b27e69726173264b0c2c5c2d4ff29bfffd90948ba4dbfde98b3c8743a82f490492cf41895c11556b23635bf31bf74d0d197c6f82cef02819ee02dd778cb88ffd418162d6233bce73a397ca7189e86aa8ccdef227189df9bfa14addd6b9478427242bfed2944031dd77f25dee03f0a5059746ccc186738d0a0f72a512220bde5d6315dd189cc669f3f80f77ac179dfad807d5d3ee6e7f69f0ebbef66e08f8dcae7cf66f6670a3e036d3f56e056c63d634451d9887ec878e8a2e64a78ae384193dc9021661c7a12316f805b5ad7c1be935361abda1ab8dbed3979febac2e90c6981aa783bbbe167aeec750e25467ef5e14751fdc10b6488ba89cc129a50ec952029abfb6c0aabb444e3d6027000a3283759160050b81f6b3dd5db2478942dcf68b6343c6c8f683538e7932613c7bb8b51b62efc1c61811e4ea0351f03354651fc0dcaacd29d1d80b86c3d79fc781f1341d22f4a74027c10c52f53924c86e5777f6309744c18728528a648c044b3acc4d0ba7bf732611f9e479847e71923a21843628e9d61373ee948c3d86f7c946113f928fa3d42ee8ba3d09153cd34f8baad5922a75dbdbaa6342d53a90ab824cfa6997cbb8d503a58454c94fdc3853b39bed365dcf611467c4482869fbea6a8bd34b881ad9b89a9af3b3996e1978edf4aa4d33e6c3e4559e3bcbcdee615a771107418b33e4f207ce775c7ce077020b4fd7da485a50674d3dfb6aedae1ca50bdff3e670e46040c96a802ae16292c91c84a91cef3da49ed69d858e69c403a13b364d211dfa911b979973e4563e9fe13bef2a5665d936919cfb986bb32c58fcf4e6fcd8230da2188efa745ee296ada4ca178fb8e79b8c6609b44e0c187e516674bb0a567487c523e89d8412ddc6ebcfad7a83d1dfdbe948d037666408dcdf728c8a872e9db3986ca4049c08838f1afe8381d50f8113f17af769b62ee1a0dfae5c38f553a1701d9cf478a323e31f176665c9d1218ec2ca8a6a44d661cbbcadca3b4458a1857c2990e787f4cf579a0f0d0c766930ae9df7f1546004e7aca8e5c5908bee835408b9b153d5072cb68be5d0636fedb6bd82a34a62aaafae30724e7d6f6e250b1f65f2d854d5cc85995256a68990f930af72fac2086b8e9723e6183f45376dde520afb454a645b582509afafcfcbfde53cc47d4cd9ae1362aca620f3492b4d3ecc85b64748e58741077456fe0bbe38fe73e3c462c24a3fc39b43bdaeaffd9b044a48a198e800672b6acac6dba950b295bab84d8e196bf0138b0f28284b65309f33cf9caf60e11c516759cd13c6f1a9480a4781c23d7c0f22cc5b2fe27f75b6f23275bb32a1b87509231ac5a81cb3afec8439b5de241ccb2e876f2462a03217ddc94d36f19c632850e5492e40045cc98fca6e533d04d61c810cdd91d9531eb6fcc0517225da0e9d0dfce87c35503a6080aec9e4955cb717dc664637671c5dd985827657a6efe7ff79fe0caba2300b5c5b69efc70640191df4ef943cc0325cdb814a882a945dfb1e27053c5f0534f084a0c416ef50e4862f2847866327c1d70d881920b7851b510a904224a92b42200595981ded0485434f75ef241a61ddfea4a9e2d4248dcd437520252d0cda32581a8b42eee777356d8ed1ef6e6b0111f672cf8f4cd3e4288d5046512af1631875bb96796a6139abf84dcf7dc055c2fac3cacc55ac600fbdb1dbf2b87900faf90e2d9e8ebedbc4e7efc58e8874813a63260a2473495c9e7ca82ea9f4733ed1dd2403f7b8b295062903c8312dc5bcbbca8c8b664362daf842a0de9f1127db145a292d3710b2cb698f903c7faedb96d86d468d02f1cb66d80dffdbfafc7eac9d31ed7f68484d01c1ebc648ca35abd7e7e789ace1d89380af8e34e9748fffa149369c8d891f427a7ff562e2cacfeb01ef912273d9a97ec84325ebb3e5b42c57c696af8ecb0abc6b192fca003b0290a1199a682c25fb8af642d951c9e8c745cba4f2d62f531cdd972cf85bdb98073d6d52119f376c963d3432dc91c6b3da9f1e3bcd0edcaf930d98ad923beffced711e3b8f66b3881b30b1a91e333a5544d3be608033c23eb0190f2359fc7476367627aff7951378e62f56c3c54e1b30584f4f2b8b15bcc4dcc0d8750a6cbbbab91d9c89370dc437c65562f6e84554308bfad883ad73d496aec424187452c3aafb40095b8a111c5faccbe56d22059a5f9a7483b38b1d32123ba6aa8af5d92e626921e14dcf48cb48b57e3e9d2514162e1464ebdb44b01977502bd18485aab6f55220d8f567ec984edb9168548e936fdeb34b21522af2a321a28e1324fb3cc8192cec9473237034104162635a002e44fe48ae33d224f6c49515c291365cf645b87d0306fd01cd5879dc4772f4281782e0d46643a2429540fb83868e18b80bba0e3a3dc6df13da97f5cf4b92b4ff9dcc3221979c615b95fc4ba5093436ed6ea8297a5f359c5f25dda512d4a7dd66ce1d9aa44350590812205566cda78c3153200b9ec4516121fde44b11b0a501035ab30ce4ab81b4fff3a33da2288e0eef3615d2f0e1bcd34677402a430ed4e1c950457c24fb3a0369b8afaa1e8890cc5ce89423d41caee6da9641a55c98452633248323d6a8f3be72d34083fb4b8467a1ed4543f3d01fb567cf165cda2b231324644ac81c2e35321f9523a800a6fbf7e5cb121eba4a248f98b8f494ec09662124d636c597d989c561a2d87c5e42244e2149f979a91f951a5bd1d89c289571206a456bd5b71f4c3c998e5777bc56c767570ae252ccd556d5c4b56eea794bc9b3046bf16e3b91045d8ea1a5a2b23a64c17fffd9cfc3c2b036c988baf7d69c4b0e88b6566f6f460327738e78f982a9009f39426624d8129562f93f7fb7939b00831df807faaabc001e6ffeac7858a95d383df257a17e03e6101ab27bbf6d53d1ad42298c59a6af423c0608b6f04452312dde3ec67bf24bab32987c3096da754c551b7818ed7224473afb965b1d66340d4f93efde3c4072322acc360a07d85e416dacf61dd03ecc54cc283b66c421ff439865e70e46082689bf443bf4d073e5141dfd802bac923efeb0accaca303b96945cfb5239a0e67827580e2ceb8efb9ce0496237770edd95fbd9ca744829c8f919f6ca213abef58f14b42932dc320824aa55fbc6e9959eed2880c767d611788d6fc5f0cd851e5acf0528cdc3b2e604169565f0c3fd227df694d42d8d1dd0b968d2a705cd6ed473764304f5cb085541f59e28b6bb223b8b1cb4d7f7393a023d21b3b98fd7074238709b13f807f37cc3ea5e5dd6092478381b6442a516fe21c8a28abf1bea5306b8db4ca161e3adc8c4eb3098fcfbd96bbe43a5b344b9d2976481017ea83c83b7b1c4856938e0e26ccd0b3510aa47fcc3e7c126311d7074ac2f676d31a3c1c80eb1fa9f9a446966a9d3f5e10de8ab6333414329f378f3e6135904b2710691a3ffc84124d846ee7026c880bdc7807e750f48da37992b4eb0e6d980038137a87b6adffd4a62a9e0d12354ec0d3e5b15e957ec2bc234494ddaddd9041c90210de5a4e0c27cc039bbfcc31bdfae949b27921cf7e49566cba64010292965b6afea3da7411210f0a6062a46652b883dec70a326f3c0b2dd934c43c4ab085cf533980eef11e2f2788c6624b44d07d5b824814642d33dcd2ab59ea9a6b728acde5cb0d8e73be9512eca600ed4bd14b01275725ac34cbc03bf30dadd3072c58a69da6320b27e54a59ef2c370653264051f77b0372e73b1e2f567e4583a162b44720301e87ac6ced241e3992fe1000115af5b2f1b6ebdf337a6a3fa59aafc0422bf4baf26567eec76c26fa88ac088a559cee91e7e1623107c206fa20bd65bd5d050b65ebab5817a0404cf365589451bedb0785479b93733c9739e0fa5f222978573256a5bf27d75eb066f3e1d4ec3ed2119104cba78e2de73298b03eb"}], 0x1010}, 0x800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000015c0)={'syztnl1\x00', &(0x7f00000014c0)={'gre0\x00', 0x0, 0x8, 0x1, 0x5, 0x43e, {{0x2a, 0x4, 0x2, 0x3, 0xa8, 0x64, 0x0, 0x2, 0x29, 0x0, @multicast2, @multicast1, {[@noop, @ra={0x94, 0x4}, @cipso={0x86, 0x50, 0x2, [{0x2, 0x9, "8951c31e952c9c"}, {0x5, 0x8, "a0ba7c423fee"}, {0x0, 0x9, "30daa979b40051"}, {0x1, 0x3, "f0"}, {0x2, 0x11, "b4d6ce0edc04b978e703a46e1e899d"}, {0x2, 0x2}, {0x0, 0x6, "b44c83ba"}, {0x5, 0x10, "b81877bb285ce41053cdb868f243"}, {0x7, 0x4, "6a92"}]}, @ssrr={0x89, 0x1b, 0x70, [@multicast1, @empty, @remote, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100]}, @timestamp={0x44, 0x10, 0x94, 0x0, 0x9, [0x48, 0x8, 0x8]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x7a, 0x3, 0x0, [{@private=0xa010100, 0x2}]}, @end]}}}}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r6 = socket$isdn(0x22, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000001880)={0x0, 'nr0\x00', {0x4}, 0x200}) (async) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000140600fe8000000000000000000000000000bbfe46e96c7035ecd7b1000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5004000090780000"], 0x0) (async) ioctl$FIOCLEX(r5, 0x5451) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCGFLAGS1(r5, 0x8004745a, &(0x7f00000017c0)) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001840)=@generic={&(0x7f0000001800)='./file0\x00'}, 0x18) (async) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r5, 0x0) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001600)={0x1b, 0x0, 0x0, 0x3b4b, 0x0, 0x1, 0xffff, '\x00', r4, r5, 0x3, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$inet_dccp_buf(r8, 0x21, 0xc, &(0x7f0000001780)="9ef7365f2e2133511745280507d59613b0deb314db0cc973e8ee3d981d648dfab5181d925b038434", 0x28) 1.218763355s ago: executing program 5 (id=2990): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r2, 0x5, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xc9}]}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x2c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x70, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x140}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x3c}}, 0x0) 1.216173572s ago: executing program 3 (id=2991): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x4100}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r7}]}]}, 0x2c}}, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000040007800c00030003000000000000000c0002000000000000000000234d07344717ecb8fe77e6ac1d4edebc0a33ca5a03f0d4afc9ad1d1e02db2a35e39b4e9649d1bb54b257f40fcc728d70482ba5949391a1a6b5370031111bfcff4b698653c6765e146db1bd50d917205167eb974e57b42b571f4fc8b0aafc08bd82717beda0bc1366802894b4cb4befac51a87c78330afd422012e336ee8195155c8ca6b2eebc1d6dd944c7a95bcf1a13c9cd576c9d0ab23c6e5988639c8c2c7f2b6207cae308489352e9a9ef34dc8d410301570a99aef876d7110abb01"], 0x30}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r11) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609110914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r10, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100400}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x70, r12, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:newrole_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (async) syz_genetlink_get_family_id$ieee802154(0x0, r8) (async) r13 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r13], 0x3c}}, 0x0) (async) close(r13) (async) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r8, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xfc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x8001) 1.214670696s ago: executing program 2 (id=2992): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000000)=0xa, 0x8) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x600000) 1.08709538s ago: executing program 4 (id=2993): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x38, 0x14, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x314, 0x9, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1c1}, @NFTA_SET_DESC={0x2f8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1e4, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdca}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x93c1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2838}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x530}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc680}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf24}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xef3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbfa6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc0}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x25}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x455c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x598}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}]}, @NFTA_SET_DESC_CONCAT={0x100, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf69}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2f}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffe33}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5ddc07ca}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6e}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x448}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8e}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x467}]}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x280, 0x6, 0xa, 0x5, 0x0, 0x0, {0x6, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x17, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x69, 0x7, 0x1, 0x0, "ba926d3f25e4097c07574c2714918ec2c2fbc53f7c599ef370718801ef4e48cd4954b0890ced9b8e41ca71d7c8036d75972265b73286b81f13e45c18035d6349c3c268960e347d78e9be06655a426b5d9f39e93a2b06b1788cf93cc031d8ab298aaf52b014"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x4}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0xf8, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @objref={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x0, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_SET_SREG, @NFTA_OBJREF_SET_ID, @NFTA_OBJREF_SET_SREG={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJREF_IMM_TYPE={0x0, 0x1, 0x1, 0x0, 0x1}, @NFTA_OBJREF_SET_ID={0x0, 0x5, 0x1, 0x0, 0x1}, @NFTA_OBJREF_SET_NAME={0x0, 0x4, 'syz0\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x4c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8}]}}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0xd5, 0x7, 0x1, 0x0, "d962b299e8a92abb0ef922d7b8991cc23849a774be24c9a1d16917cc6b99181312b252168be0a448d8aca7082037f9e62804cb35e162ff6a51399b0113c035410455c2c3f974f1db348104f4b05a5077d45fa196a85ec226116352f3877489ac1ee31d24f99c4070009476fc7f76f323f0ba744226598fbefa475b9f7d88a710d673a8b7f1df9ab8fce9d6adadfff2ece5f558c16092604ec9a0e31da6a524f2f4e689a4a1c1b138425cb312079b7d31c7327352c6e2db7e214c5f290d0b8f8958311f2b5d1689a0986d6766c7fb11a54f"}]}, @NFT_MSG_DELFLOWTABLE={0x44, 0x18, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELSETELEM={0x88, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0xf4, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xbf, 0x6, "ee88995c739312ad4a8c07814126df0e783a9a2497cd54e00ccc8371cbd84620b5556963134db8546a6ae3157df802582ff6fc848592672f70debbffae11a5d7e2e39f9f0f9f3926052d0c865d5233e819f3a68db409b576e2fe5915f38fc4992851bf12319e7308dbca16cb07ab0fc5971259570ce5d6534b237e16debabf97a403c81ca7cd3f492e531c190f7c36fc3514e3a92762891364d01aa76e4429e3041657e89d1a4e76595003a4aa650715013b59fa46f95fb8f112da"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_USERDATA={0x14, 0xd, 0x1, 0x0, "338eae1572c8c0f2b028de2d2ac05d3e"}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x86c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000050) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="660a00000000000061119e0000000000850000006300000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 946.217133ms ago: executing program 5 (id=2994): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2400}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x65}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000010000000080007000000000418000180140002006e657464657673696d300000000000000800080040"], 0x3c}}, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffd], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x12, r7, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x1], 0x0, [0x8, 0x4], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x20, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4a05dd2c, 0x0, 0x0, 0x0, 0xb0e}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x3c8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3ff}, @func, @map_idx={0x18, 0xb}, @ringbuf_query, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @jmp={0x5, 0x0, 0x9, 0x4, 0x7, 0xffffffffffffffff, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_fd={0x18, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xe, 0xe9, &(0x7f0000000280)=""/233, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x5, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[0x1, 0x1], &(0x7f0000000400)=[{0x1, 0x1, 0x2, 0x3}, {0x4, 0x3, 0x1, 0x3}], 0x10, 0x401, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='afs_make_fs_call\x00', r9, 0x0, 0xc}, 0x18) 855.346836ms ago: executing program 2 (id=2995): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000080)=""/176, 0xb0, 0x0, &(0x7f0000000000)=""/18, 0x12}}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0xf, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x12, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x1, 0x2, 0x2, 0x5, 0x30, 0xffffffffffffffff}, @ldst={0x0, 0x0, 0x6, 0x8, 0x7, 0x6, 0xfffffffffffffffc}, @alu={0x7, 0x0, 0x3, 0x8, 0x4, 0x40, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x7, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 854.973777ms ago: executing program 3 (id=2996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x1, @any, 0x0, 0x1}, 0xe) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000100)) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xf, 0x6, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x1, @any, 0x0, 0x1}, 0xe) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmmsg$inet(r6, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000003180)="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", 0x1000}, {&(0x7f0000000440)="8fa3c1461384cc858dc7a07fce5b67a2c536af36638bfed278bb4b92fecac25a7e2c49448fded5a11f27ff49a768b7cb6edb1c3736dc44520cb72d0a63961a9f5eaecd00178a328aaaffdcb4a6065610ea94200f2c0202983f7c875d4e1cd17c7d1890db2e976f5f79b71692870e81bc2ca33765a7073641e5fa821be5fdb3fb92365bd2597f27a12d5a059aa96ff5dc5626e5", 0x93}, {&(0x7f0000004240)="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", 0xbb5}], 0x3}}], 0x1, 0x40) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x1e0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x2c, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8}, @TCA_CAKE_RTT={0x8, 0x7, 0x2}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}, @TCA_STAB={0x184, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x0, 0xf4, 0x4, 0x2, 0x400, 0x0, 0x4}}, {0xc, 0x2, [0x8, 0x7, 0x5, 0x4]}}, {{0x1c, 0x1, {0x4, 0x6, 0xcaf2, 0xd, 0x2, 0x7, 0xa, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x6, 0x9, 0x47, 0x3, 0x2, 0xa5bc, 0xfffffff5, 0x4}}, {0xc, 0x2, [0x1, 0x4, 0x4, 0x5]}}, {{0x1c, 0x1, {0x9, 0x9, 0x9, 0x1, 0x0, 0xbef0, 0x1, 0x4}}, {0xc, 0x2, [0x3, 0x5, 0x3, 0x101]}}, {{0x1c, 0x1, {0x6, 0x24, 0x2, 0xfffffff0, 0x2, 0x1, 0x8, 0x8}}, {0x14, 0x2, [0xd, 0xf, 0x5, 0x9, 0x1, 0x24, 0x7, 0x2]}}, {{0x1c, 0x1, {0x4, 0x1, 0x8, 0x9, 0x1, 0xfffffff5, 0x1, 0x7}}, {0x12, 0x2, [0x8263, 0x400, 0x2, 0xffff, 0x6, 0x6, 0x8]}}, {{0x1c, 0x1, {0x7, 0x1, 0x8, 0x2, 0x2, 0x12, 0x8000, 0x5}}, {0xe, 0x2, [0x7, 0x1, 0x8, 0x9, 0x1ff]}}, {{0x1c, 0x1, {0xc7, 0xc, 0xff, 0x401, 0x2, 0x4, 0x2, 0x6}}, {0x10, 0x2, [0x101, 0x4, 0xa, 0x4d00, 0x9, 0x1000]}}, {{0x1c, 0x1, {0x5, 0x2, 0x3ff, 0x2, 0x2, 0x4, 0x81, 0x6}}, {0x10, 0x2, [0xfff5, 0x7, 0x8, 0x6, 0xf48, 0x9]}}]}]}, 0x1e0}}, 0x0) 683.649886ms ago: executing program 2 (id=2997): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000e00)=@broute={'broute\x00', 0x20, 0x5, 0x282, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001240], 0x0, 0x0, &(0x7f0000001240)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x9, 0x14, 0x1, 'netdevsim0\x00', 'ip6tnl0\x00', 'wg2\x00', 'virt_wifi0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, [0x0, 0xff, 0xff, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, [], 0x6e, 0x6e, 0xb6, [], [], @common=@ERROR={'ERROR\x00', 0x20, {"2daeffb8cd164e65987cbe904c4f226257649b2e39178930ff57e737a9ea"}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x11, 0x1, 0xf7, 'bridge_slave_1\x00', 'pimreg0\x00', 'veth1_virt_wifi\x00', 'dvmrp1\x00', @remote, [0xff, 0x0, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, [0xff, 0x0, 0x0, 0x0, 0x0, 0xbfe773cb946a71d5], 0x6e, 0x6e, 0x9e, [], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x2}}}}, {0x11, 0x0, 0x8906, 'ip6gre0\x00', 'dummy0\x00', 'veth0_vlan\x00', 'veth1_to_bridge\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, [0xff, 0xff, 0xff, 0xff], @remote, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff}]}, 0x2fa) (async) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="200025bd7000fedbdfd05ae38aa7a5e42f0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x44845) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c010000", @ANYRESDEC=r3, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088040010c803c010b800800090000000000080009000000000008000a"], 0x16c}}, 0x0) 672.744503ms ago: executing program 4 (id=2998): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x42}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x128, 0xb, 0x148, 0x0, 0x148, 0x210, 0x240, 0x240, 0x210, 0x215, 0x3, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'wg0\x00', 'pim6reg0\x00'}, 0x0, 0xc0, 0x128, 0x0, {0xff0f000000000000}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x11, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0xec010000, 0xa0, 0xe8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x6}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 539.382242ms ago: executing program 4 (id=2999): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x1) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) sendmsg$inet(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x24008004) sendmsg$nl_route(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@setlink={0x20, 0x13, 0x709, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1c400}}, 0x20}}, 0x0) 347.397685ms ago: executing program 2 (id=3000): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req={0x0, 0xff}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x0, "baa32ad2976d1307d6faf33ee3a49671"}}}]}, 0x48}}, 0x8804) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, r5, 0x9, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001a80), r8) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r6) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, r10, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xf, 0x0, @random="a6cfaa324c4d769c823bcc"}, {0xa, 0x0, @default_ap_ssid}, {0x1e, 0x0, @random="c2f954f94808ec6ebd92e4ed6923c5b7fde7857725eb94500971"}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000001) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001b00)={0x40, r9, 0x1, 0x1000000, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x28, 0x2, 0x0, 0x1, [{0x4, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x40}}, 0x20004000) r11 = socket$inet6(0xa, 0x4, 0xe2f) setsockopt$inet6_udp_int(r11, 0x11, 0xa, &(0x7f0000000080)=0x6, 0x4) sendmmsg$inet(r11, &(0x7f0000000100)=[{{&(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x80) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0xb0, r9, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_PAUSE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x8) 257.530548ms ago: executing program 3 (id=3001): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x2, 0x0, &(0x7f0000000380)) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0xaf5) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x7a000000}, 0x0) (async) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x7a000000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x4) (async) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000007480)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000075c0), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4076, 0xfec}, {&(0x7f0000000200)=""/161, 0xa1}, {&(0x7f0000000140)=""/53, 0x35}], 0x3}}], 0x1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) (async) bind$alg(r5, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x7f}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x48814}, 0x14000012) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmsg(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/114, 0x72}, {&(0x7f0000000b40)=""/266, 0x10a}], 0x2}, 0x40002020) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2646], &(0x7f0000001780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffe04, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2646], &(0x7f0000001780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffe04, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r8, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000014c0)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x80) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="c40000001900674c25bd700000000000ff010000000000000000000000000001ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xc4}}, 0x0) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="c40000001900674c25bd700000000000ff010000000000000000000000000001ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xc4}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x12, 0x0, 0x9, 0x5}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 142.661411ms ago: executing program 4 (id=3002): r0 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{}, [@netrom, @null, @null, @remote, @default, @netrom, @remote, @null]}, &(0x7f0000000080)=0x48, 0x1800) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000000c0)={0x2, 'ip6tnl0\x00', {0x1}, 0x1}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = accept4$rose(r1, &(0x7f0000000100)=@short={0xb, @remote, @default}, &(0x7f0000000140)=0x1c, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_PIM(r3, 0x29, 0xcf, &(0x7f0000000180), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x18c, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x18}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc0000000}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000480)=""/4096, &(0x7f0000001480)=0x1000) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f0000001500)={0x8000000000000000, 0x18, '\x00', 0x0, &(0x7f00000014c0)=[0x0, 0x0, 0x0]}) socketpair(0x9, 0x2, 0x4, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000001580)={0x0, 0x2, 0x7, 0x8, 0x800, 0x8, 0x9, 0x8, {0x0, @in6={{0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80000000}}, 0x6, 0x7, 0x7, 0x2, 0x7f}}, &(0x7f0000001640)=0xb0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000001680)={r8, 0x3, 0xfff}, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000016c0)={{{@in6=@private2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f00000017c0)=0xe8) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000001800)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r9}) setsockopt$inet_buf(r7, 0x0, 0x2b, &(0x7f0000001840)="b619f6134cd78b5fe62699", 0xb) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001880)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000001a80)={0x0, 0x7, 0x10001, 0x1}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000001e80)={{r7}, r10, 0x9, @unused=[0x0, 0xc, 0x2, 0x8], @devid=r11}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002f00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r12, &(0x7f0000003000)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f40)={0x4c, r13, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x4c}}, 0x20000000) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000003040)={0x1d, 0x7, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x20}}, @enc_lim, @jumbo={0xc2, 0x4, 0x2a8cab42}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x0, 0x2, 0x3, 0x776, [0x8000]}}, @enc_lim={0x4, 0x1, 0x5}, @ra={0x5, 0x2, 0x3}]}, 0x48) sendmsg$nl_route(r6, &(0x7f0000003180)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003140)={&(0x7f0000003100)=@can_newroute={0x34, 0x18, 0x4, 0x70bd2c, 0x25dfdbfb, {0x1d, 0x1, 0x1}, [@CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x0, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "58c5ba21cd8b8b47"}, 0x4}}, @CGW_MOD_UID={0x8, 0xe, r9}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f00000031c0)=@req3={0x7fffffff, 0x4, 0x3, 0x1, 0xffffffff, 0xfffffc0d, 0xc6dc}, 0x1c) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003240), r4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000003500)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000034c0)={&(0x7f0000003280)={0x210, r15, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x10c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0xb, 0x48, 0x3, 0xc, 0x9, 0x60, 0x6, 0x70]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x12, 0x6c, 0xb, 0x60, 0x16, 0x48, 0x9, 0xb, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x5, 0x0, 0x4, 0x9, 0x9, 0xfffa, 0xffff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0xcc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x18, 0x2, 0xb, 0x16, 0x1, 0x2, 0x60, 0x12, 0x4, 0x5, 0x24, 0x12, 0x18, 0x24, 0x24, 0x24, 0x48, 0x7c15c0b84cb2fd6, 0x36, 0x36, 0x60, 0x24, 0x9, 0x48, 0x9, 0x0, 0x6c, 0x12, 0x18, 0x4]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x2, 0xc, 0x9, 0x12, 0x9, 0x6, 0xb, 0x1, 0x1b, 0x36, 0xb, 0x1b, 0x60, 0x48]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x3, 0x9}, {0x6, 0xa}, {0x3, 0x2}, {0x6, 0x9}, {0x6, 0x1}, {0x7, 0x4}, {0x6, 0x6}, {0x4, 0x2}, {0x6, 0x4}, {0x7, 0x6}, {0x7, 0x9}, {0x6, 0x5}, {0x4, 0xa}, {0x6, 0x4}, {0x4, 0x5}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x7, 0x9}, {0x4, 0x6}, {0x5, 0x6}, {0x0, 0x7}, {0x0, 0x5}, {0x0, 0x4}, {0x4, 0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x6}, {0x4}, {0x7}, {0x3, 0x6}, {0x2, 0x4}, {0x2, 0xa}, {0x4, 0x9}, {0x0, 0x7}, {0x1, 0x8}, {0x6, 0x9}, {0x7, 0x1}, {0x7, 0x6}, {0x1, 0xa}, {0x7, 0x6}, {0x2, 0x4}, {0x4, 0x3}, {0x3, 0x3}, {0x5, 0x2}, {0x7, 0x5}, {0x5, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x3, 0xfff, 0x9, 0x44, 0x4, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x6, 0x1, 0xa, 0x0, 0x3, 0x6, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x36, 0x24, 0x12, 0x18, 0x24, 0x9, 0x60, 0x5, 0x3, 0x2, 0x30, 0x6c, 0x16, 0x18, 0x1b, 0xc, 0xb, 0x12, 0x60, 0x12, 0x4, 0x48, 0x12, 0x9, 0x14, 0x1b, 0x1b, 0x9]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x70, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x6, 0x0, 0x1, 0x10, 0x21, 0x654, 0xd426]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfc, 0x9, 0x0, 0x8001, 0xfffd, 0xf, 0xfffb, 0x7fff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x4, 0x5, 0x2, 0x5, 0x5, 0x101, 0x5]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x80, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2fb0, 0x7fff, 0x2, 0x80, 0x6, 0x9, 0x3, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xaeaa, 0x8, 0x7, 0xe21, 0x3, 0xe, 0x97, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x12, 0x5, 0x2, 0x60, 0x1b, 0x12, 0xc, 0x18, 0x30, 0x12, 0x6, 0x12, 0x9, 0x36, 0x5, 0x60, 0x2, 0x6c, 0x48, 0x60, 0x1, 0x6, 0x30, 0x2, 0x6, 0x6, 0x30, 0x2, 0x3, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x18, 0xbfec3a4c0636011d]}]}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x4000}, 0x804) ioctl$BTRFS_IOC_SPACE_INFO(r7, 0xc0109414, &(0x7f0000003540)={0xb13, 0x51d2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 141.696084ms ago: executing program 5 (id=3003): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000133700000008000300", @ANYRES32, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r4, 0x29, 0xd0, 0xffffffffffffffff, &(0x7f0000000640)=0x3) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) (async) bind$inet(r6, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r6}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x6, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r7, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r6, 0x1}, 0x20) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000133700000008000300", @ANYRES32=r9, @ANYBLOB="08002600901500"], 0x2c}}, 0x0) (async) r11 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) (async) r12 = socket(0x10, 0x803, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x88}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x80000001}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_DELOBJ={0x1b4, 0x14, 0xa, 0xc04e813276820ba8, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_OBJ_USERDATA={0xbf, 0x8, "38b3666f2c56d684951ed0e73708ebb2bb48b8fd1e461ee1ff0523e4296fbe9383e447a83fadf137d5c711346bb6c3b37a1ae5fbc5240458e5b17da5c9c01260f6a9cff0c190635cf80a672adf779359a0590a4b65410b3e2c6ff2df20b966abe84232545c8cb1a7e930a7321fa67c73dd0822110dc8b446775e3490d0352f2665c243594dd9830b36a1cb5aea0005061ed5577f71d0bdafa4d338fd246b9dbc66d94c5980eb83031cf9a11c938746d2b57bcf486ebbb929c500a3"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xbc, 0x8, "4b6ca0c179bcca6b542f280ab82b7d4e19a01f4ec0d62cb5952b8780eea631f812c2d9832c90722675eb01297984a82aa98aebc1d959dd5a4661fb6130f62c6039ec46b344f75f30c991af5d35912e35d7a8eeb349e1e41181fd37f3b80f6ea9829c789944bcd1120cfc2eab420d0ade3855b3d2b6aa2610d204ba9f0400a39dd78a16fbf5c173867ab21d0fd5f2d7b3b4d3df3354df9b1aa17843a77327bae598969e1283a4f4095ffea6912c026a41e743cdd810f599fa"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x280}, 0x1, 0x0, 0x0, 0x44810}, 0x20008040) clock_gettime(0x4c25726cb16dd79b, 0x0) sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="940000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="c4860700000000006c001280090001007866726d000000005c0002800800010002000000080001000300000008000100000000000800020002000000080002000400000008000100000000000800020001000000080002000200000008000200030000000800010001000000080001000300000008000a00", @ANYRES32], 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 81.097632ms ago: executing program 2 (id=3004): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x0, 0xffffffff, {0x81, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xfe}]}, 0x24}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r5 = socket(0x10, 0x3, 0x2) bind$netlink(r5, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) write(r5, &(0x7f0000000000)='\"', 0x1) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r7, 0x0, 0x480, &(0x7f0000000040), &(0x7f00000000c0)=0x40) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000095c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'ip6_vti0\x00'}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x14, r10, 0x1}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r10, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004) 0s ago: executing program 3 (id=3005): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000000)='.'}, 0x20) kernel console output (not intermixed with test programs): ibutes in process `syz.0.1128'. [ 151.445388][T10064] netlink: 'syz.2.1137': attribute type 12 has an invalid length. [ 151.640998][T10081] netlink: 'syz.4.1143': attribute type 2 has an invalid length. [ 152.275391][T10111] netlink: 'syz.5.1150': attribute type 2 has an invalid length. [ 152.328762][T10117] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 152.410487][T10123] netlink: 'syz.0.1153': attribute type 21 has an invalid length. [ 152.587481][T10134] x_tables: duplicate underflow at hook 3 [ 152.734320][T10143] netlink: 'syz.2.1159': attribute type 8 has an invalid length. [ 153.278299][T10165] netlink: 'syz.4.1167': attribute type 10 has an invalid length. [ 153.824730][T10199] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20001 [ 153.850692][T10204] IPVS: set_ctl: invalid protocol: 51 172.30.1.5:20000 [ 153.939037][T10208] __nla_validate_parse: 8 callbacks suppressed [ 153.939053][T10208] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1179'. [ 153.983084][T10208] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1179'. [ 154.061483][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1181'. [ 154.339569][T10232] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 154.365166][T10228] netlink: 'syz.3.1187': attribute type 1 has an invalid length. [ 154.402800][T10228] netlink: 'syz.3.1187': attribute type 2 has an invalid length. [ 154.603982][T10242] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1188'. [ 154.673544][T10247] xt_SECMARK: invalid mode: 0 [ 155.056835][T10267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1195'. [ 155.089277][T10267] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1195'. [ 155.144680][T10271] mac80211_hwsim hwsim11 ÿ: renamed from wlan1 [ 155.553159][T10289] netlink: 'syz.2.1201': attribute type 12 has an invalid length. [ 155.565297][T10289] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1201'. [ 155.663346][T10288] netlink: 'syz.5.1202': attribute type 39 has an invalid length. [ 155.960118][T10308] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1203'. [ 155.993315][T10308] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 156.047314][T10308] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1203'. [ 156.314264][T10314] veth0_to_team: entered promiscuous mode [ 156.348476][T10314] veth0_to_team: entered allmulticast mode [ 156.378909][T10327] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 156.537752][T10339] veth1_macvtap: entered promiscuous mode [ 156.559928][T10342] Cannot find set identified by id 0 to match [ 156.588735][T10339] veth1_macvtap: entered allmulticast mode [ 156.621596][T10339] macsec0: left allmulticast mode [ 156.639484][T10339] veth1_macvtap: left allmulticast mode [ 156.709443][T10346] tipc: Enabled bearer , priority 0 [ 156.788011][T10355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1214'. [ 156.837822][T10346] tipc: Disabling bearer [ 157.393950][T10385] sctp: [Deprecated]: syz.4.1222 (pid 10385) Use of int in maxseg socket option. [ 157.393950][T10385] Use struct sctp_assoc_value instead [ 157.426753][T10384] sctp: [Deprecated]: syz.4.1222 (pid 10384) Use of int in maxseg socket option. [ 157.426753][T10384] Use struct sctp_assoc_value instead [ 157.576172][T10397] netlink: 'syz.2.1226': attribute type 1 has an invalid length. [ 158.011709][T10422] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 158.019528][T10422] IPv6: NLM_F_CREATE should be set when creating new route [ 158.026872][T10422] IPv6: NLM_F_CREATE should be set when creating new route [ 158.322720][T10438] x_tables: duplicate underflow at hook 2 [ 158.543982][T10454] openvswitch: netlink: nsh attr 0 has unexpected len 188 expected 0 [ 158.594815][T10454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.647835][T10462] netlink: 'syz.3.1246': attribute type 12 has an invalid length. [ 158.722087][T10463] lo speed is unknown, defaulting to 1000 [ 158.786866][T10471] xt_socket: unknown flags 0x2 [ 158.965436][T10479] bridge1: entered promiscuous mode [ 158.985490][T10479] bridge1: entered allmulticast mode [ 159.028278][T10481] netlink: 'syz.2.1250': attribute type 10 has an invalid length. [ 159.066029][T10479] team0: Port device bridge1 added [ 159.092787][T10481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.311526][T10481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.420246][T10495] bridge0: entered promiscuous mode [ 159.499155][T10463] virt_wifi0 speed is unknown, defaulting to 1000 [ 159.518773][T10495] bridge0: left promiscuous mode [ 159.525368][ T5147] Bluetooth: hci2: command tx timeout [ 159.622847][T10506] __nla_validate_parse: 3 callbacks suppressed [ 159.622864][T10506] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1253'. [ 159.710886][T10504] mac80211_hwsim hwsim9 ÿ: renamed from wlan1 (while UP) [ 159.951242][T10521] Bluetooth: MGMT ver 1.23 [ 160.007760][T10521] netlink: 'syz.0.1258': attribute type 21 has an invalid length. [ 160.259411][T10540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1262'. [ 160.319489][T10541] bridge: RTM_NEWNEIGH with invalid ether address [ 160.324963][T10540] netlink: 'syz.0.1262': attribute type 3 has an invalid length. [ 160.378893][T10540] netdevsim netdevsim0 : set [0, 0] type 1 family 0 port 8472 - 0 [ 160.386969][T10540] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.396307][T10540] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.405254][T10540] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.615328][T10553] vlan2: entered allmulticast mode [ 160.646683][T10553] bridge_slave_0: entered allmulticast mode [ 160.691886][T10553] bridge_slave_0: left allmulticast mode [ 160.980281][T10568] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.080715][T10583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1275'. [ 161.458941][T10605] netlink: 668 bytes leftover after parsing attributes in process `syz.4.1280'. [ 161.499037][T10605] netlink: 668 bytes leftover after parsing attributes in process `syz.4.1280'. [ 161.686110][T10617] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1282'. [ 161.802028][ T146] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 161.994003][T10637] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 162.847669][T10673] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.998840][T10673] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.083390][T10699] tipc: Can't bind to reserved service type 2 [ 163.084069][T10696] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 163.170649][T10673] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.331306][T10673] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.396027][T10715] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 163.508877][T10720] netlink: 'syz.2.1308': attribute type 1 has an invalid length. [ 163.517443][T10720] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1308'. [ 163.628311][T10726] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1309'. [ 163.642265][T10673] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.676991][T10726] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 163.681698][T10730] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1310'. [ 163.707119][T10673] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.720600][T10730] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1310'. [ 163.733109][T10673] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.772183][T10673] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.398121][T10774] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.659243][T10789] xt_CT: You must specify a L4 protocol and not use inversions on it [ 164.776416][T10795] __nla_validate_parse: 5 callbacks suppressed [ 164.776434][T10795] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1326'. [ 165.041639][T10810] netlink: 1036 bytes leftover after parsing attributes in process `syz.3.1332'. [ 165.107387][T10810] sch_tbf: burst 0 is lower than device lo mtu (4110) ! [ 165.188420][T10820] netlink: 'syz.3.1332': attribute type 29 has an invalid length. [ 165.241197][T10826] netlink: 'syz.3.1332': attribute type 29 has an invalid length. [ 165.247328][T10810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1332'. [ 165.801494][ T25] IPVS: starting estimator thread 0... [ 165.916607][T10851] IPVS: using max 20 ests per chain, 48000 per kthread [ 165.988487][T10860] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 166.101294][T10867] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1342'. [ 166.120317][T10866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.185349][T10870] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1343'. [ 166.349506][T10879] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1346'. [ 166.464232][T10890] sctp: [Deprecated]: syz.3.1348 (pid 10890) Use of struct sctp_assoc_value in delayed_ack socket option. [ 166.464232][T10890] Use struct sctp_sack_info instead [ 166.697107][T10910] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 166.908792][T10922] netlink: 'syz.2.1356': attribute type 64 has an invalid length. [ 166.931474][T10922] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1356'. [ 166.979460][T10926] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1357'. [ 167.185788][T10938] syzkaller1: entered promiscuous mode [ 167.192183][T10938] syzkaller1: entered allmulticast mode [ 167.198999][T10941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1361'. [ 167.382118][T10948] syz_tun: entered allmulticast mode [ 167.398950][T10947] syz_tun: left allmulticast mode [ 167.542117][T10954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1365'. [ 167.734308][T10970] netlink: 'syz.4.1370': attribute type 1 has an invalid length. [ 167.765972][T10971] bond3 (unregistering): Released all slaves [ 167.814462][T10970] bond3: entered promiscuous mode [ 167.820734][T10970] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.458552][T11004] 0· (unregistering): left promiscuous mode [ 168.498702][T11012] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 168.756752][T11022] netlink: 'syz.4.1380': attribute type 1 has an invalid length. [ 169.449007][T11070] netlink: 'syz.5.1394': attribute type 13 has an invalid length. [ 169.685441][ T5836] Bluetooth: hci5: command 0x0405 tx timeout [ 170.316430][T11117] netlink: 'syz.4.1409': attribute type 4 has an invalid length. [ 170.418869][T11122] netlink: 'syz.2.1412': attribute type 33 has an invalid length. [ 170.437333][T11122] __nla_validate_parse: 12 callbacks suppressed [ 170.437350][T11122] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1412'. [ 170.559107][T11128] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1415'. [ 170.591865][T11128] netlink: 'syz.4.1415': attribute type 21 has an invalid length. [ 170.625512][T11128] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1415'. [ 170.976003][T11141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1417'. [ 171.282363][T11154] netlink: 18 bytes leftover after parsing attributes in process `syz.0.1421'. [ 171.361946][T11162] netlink: 'syz.5.1423': attribute type 16 has an invalid length. [ 171.377400][T11162] netlink: 'syz.5.1423': attribute type 17 has an invalid length. [ 171.591752][T11177] netlink: 'syz.0.1424': attribute type 21 has an invalid length. [ 171.635541][T11178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1426'. [ 171.639077][T11179] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1424'. [ 171.665619][T11177] netlink: 'syz.0.1424': attribute type 11 has an invalid length. [ 172.043816][T11199] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1431'. [ 172.396932][T11219] netlink: 'syz.2.1439': attribute type 33 has an invalid length. [ 173.200169][T11272] netlink: 4548 bytes leftover after parsing attributes in process `syz.4.1453'. [ 173.234745][T11272] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 173.262844][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c661c00: rx timeout, send abort [ 173.275111][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c661000: rx timeout, send abort [ 173.421244][ T29] audit: type=1800 audit(1739601851.746:2): pid=11287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1457" name="memory.events" dev="tmpfs" ino=1435 res=0 errno=0 [ 173.506591][T11291] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1458'. [ 173.602785][T11297] C: renamed from team_slave_0 (while UP) [ 173.637824][T11297] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 173.772738][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c661c00: abort rx timeout. Force session deactivation [ 173.783693][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c661000: abort rx timeout. Force session deactivation [ 173.890381][T11316] x_tables: duplicate underflow at hook 1 [ 174.108726][T11330] sctp: [Deprecated]: syz.2.1469 (pid 11330) Use of int in max_burst socket option. [ 174.108726][T11330] Use struct sctp_assoc_value instead [ 174.705757][T11319] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 174.901669][T11377] validate_nla: 1 callbacks suppressed [ 174.901688][T11377] netlink: 'syz.3.1482': attribute type 1 has an invalid length. [ 175.604830][ T5836] Bluetooth: hci5: command 0x0405 tx timeout [ 175.924724][ T5147] Bluetooth: hci2: command 0x0401 tx timeout [ 175.934512][T11452] SET target dimension over the limit! [ 175.979768][T11458] __nla_validate_parse: 25 callbacks suppressed [ 175.979787][T11458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1502'. [ 176.421998][T11477] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 176.450962][T11475] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 176.726142][T11492] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1512'. [ 176.818254][T11501] netlink: 'syz.4.1514': attribute type 4 has an invalid length. [ 177.195603][T11527] lo speed is unknown, defaulting to 1000 [ 177.436625][T11537] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1523'. [ 177.664278][T11527] virt_wifi0 speed is unknown, defaulting to 1000 [ 178.131763][T11575] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1534'. [ 178.179540][T11526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1520'. [ 178.552221][ T25] IPVS: starting estimator thread 0... [ 178.652152][T11597] IPVS: using max 25 ests per chain, 60000 per kthread [ 178.851247][T11609] ax25_connect(): syz.5.1541 uses autobind, please contact jreuter@yaina.de [ 179.047587][T11619] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.188236][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1544'. [ 179.429518][T11635] syzkaller1: entered promiscuous mode [ 179.453434][T11636] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 26 [ 179.470552][T11635] syzkaller1: entered allmulticast mode [ 179.472324][T11641] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1548'. [ 179.487757][T11640] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1549'. [ 179.580840][T11640] vcan1: entered promiscuous mode [ 179.603910][T11640] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 179.636805][T11640] bond1: (slave vcan1): Error -95 calling set_mac_address [ 179.720306][T11649] veth1_macvtap: left promiscuous mode [ 179.755898][T11649] macsec0: entered promiscuous mode [ 179.773581][T11649] veth1_macvtap: entered promiscuous mode [ 179.793612][T11649] macsec0: left promiscuous mode [ 179.996029][T11669] netlink: 'syz.5.1555': attribute type 2 has an invalid length. [ 180.354164][T11680] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1560'. [ 180.419777][T11682] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 180.578507][T11695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1565'. [ 180.649066][T11697] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.658555][T11697] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.668107][T11697] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.677749][T11697] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.889061][T11712] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.897901][T11712] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.077005][T11714] lo speed is unknown, defaulting to 1000 [ 181.378190][ T5850] Bluetooth: hci3: command 0x0401 tx timeout [ 181.384314][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 181.391746][ T54] Bluetooth: hci2: command 0x0401 tx timeout [ 181.604270][T11740] bond0: entered promiscuous mode [ 181.615135][T11740] 0ªÃøÂFNð¡: entered promiscuous mode [ 181.620732][T11740] bond_slave_1: entered promiscuous mode [ 181.654471][T11740] batadv0: entered promiscuous mode [ 181.675192][T11740] bond0: entered allmulticast mode [ 181.698411][T11740] bond_slave_1: entered allmulticast mode [ 181.715434][T11740] batadv0: entered allmulticast mode [ 181.729002][T11714] virt_wifi0 speed is unknown, defaulting to 1000 [ 181.760969][T11748] __nla_validate_parse: 1 callbacks suppressed [ 181.760986][T11748] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1579'. [ 181.813398][T11750] x_tables: duplicate underflow at hook 1 [ 181.901299][T11748] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1579'. [ 181.973058][T11761] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1581'. [ 182.668763][T11796] netlink: 'syz.2.1591': attribute type 1 has an invalid length. [ 182.760553][T11796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.920344][T11805] netlink: 'syz.4.1593': attribute type 1 has an invalid length. [ 182.990719][T11805] 8021q: adding VLAN 0 to HW filter on device bond4 [ 183.029179][T11818] geneve2: entered promiscuous mode [ 183.035364][T11818] geneve2: entered allmulticast mode [ 183.090790][T11823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1598'. [ 183.565777][T11838] team0 (unregistering): Port device C removed [ 183.586004][T11838] team0 (unregistering): Port device team_slave_1 removed [ 183.750666][T11860] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 183.880182][T11862] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1611'. [ 183.933534][T11874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1611'. [ 184.232884][T11886] bond2: entered promiscuous mode [ 184.296546][T11886] bond2: entered allmulticast mode [ 184.303746][T11886] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.515878][T11910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1625'. [ 184.547028][T11918] xt_time: unknown flags 0x4 [ 184.711373][T11918] syzkaller1: entered promiscuous mode [ 184.717681][T11918] syzkaller1: entered allmulticast mode [ 185.502306][T11935] team0 (unregistering): Port device team_slave_0 removed [ 185.549811][T11935] team0 (unregistering): Port device team_slave_1 removed [ 185.816617][T11974] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1637'. [ 185.826834][T11974] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1637'. [ 185.972554][T11983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1639'. [ 186.847558][T12032] __nla_validate_parse: 2 callbacks suppressed [ 186.847579][T12032] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1651'. [ 186.876784][T12032] x_tables: duplicate underflow at hook 1 [ 187.004855][T12042] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1653'. [ 187.034368][T12042] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1653'. [ 187.049025][T12045] tipc: Started in network mode [ 187.057464][T12045] tipc: Node identity c280478b472c, cluster identity 4711 [ 187.065966][T12045] tipc: Enabled bearer , priority 0 [ 187.088899][T12045] syzkaller0: MTU too low for tipc bearer [ 187.099414][T12045] tipc: Disabling bearer [ 187.476552][T12065] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1661'. [ 187.532606][T12068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1662'. [ 187.577044][T12062] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1660'. [ 187.649497][T12073] openvswitch: netlink: Invalid VLAN frame [ 187.680588][T12073] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1665'. [ 187.730103][T12077] tipc: Started in network mode [ 187.740371][T12077] tipc: Node identity fe841a48f596, cluster identity 4 [ 187.752034][T12077] tipc: Enabled bearer , priority 0 [ 187.846148][T12079] syzkaller0: entered promiscuous mode [ 187.851834][T12079] syzkaller0: entered allmulticast mode [ 187.858315][T12079] tipc: Resetting bearer [ 187.866075][T12077] tipc: Enabling of bearer rejected, already enabled [ 187.901051][T12077] tipc: Enabling of bearer rejected, already enabled [ 187.913060][T12077] tipc: Enabling of bearer rejected, already enabled [ 187.924475][T12095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1669'. [ 187.939178][T12086] openvswitch: netlink: Message has 2 unknown bytes. [ 187.945564][T12077] tipc: Enabling of bearer rejected, already enabled [ 187.955584][T12086] openvswitch: netlink: Actions may not be safe on all matching packets [ 187.982158][T12077] tipc: Enabling of bearer rejected, already enabled [ 188.012226][T12077] tipc: Enabling of bearer rejected, already enabled [ 188.052471][T12077] tipc: Enabling of bearer rejected, already enabled [ 188.078303][T12077] tipc: Enabling of bearer rejected, already enabled [ 188.089436][T12077] tipc: Enabling of bearer rejected, already enabled [ 188.118645][T12077] tipc: Enabling of bearer rejected, already enabled [ 188.138769][T12077] tipc: Enabling of bearer rejected, already enabled [ 188.178607][T12077] tipc: Enabling of bearer rejected, already enabled [ 188.216802][T12077] tipc: Enabling of bearer rejected, already enabled [ 188.380572][ T146] tipc: Resetting bearer [ 188.390373][T12077] tipc: Enabling of bearer rejected, already enabled [ 188.405039][T12077] tipc: Enabling of bearer rejected, already enabled [ 188.446237][T12077] tipc: Enabling of bearer rejected, already enabled [ 188.461157][T12077] tipc: Enabling of bearer rejected, already enabled [ 188.495457][T12077] tipc: Enabling of bearer rejected, already enabled [ 188.536648][T12076] tipc: Resetting bearer [ 188.554011][T12127] xt_policy: output policy not valid in PREROUTING and INPUT [ 188.826992][ T9] tipc: Node number set to 185735752 [ 189.013437][T12154] xt_TPROXY: Can be used only with -p tcp or -p udp [ 189.170488][T12159] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1685'. [ 189.335924][T12164] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1686'. [ 190.810706][T12076] tipc: Disabling bearer [ 191.033619][T12168] veth1: entered promiscuous mode [ 191.065262][T12168] veth1: left promiscuous mode [ 192.223612][T12188] __nla_validate_parse: 3 callbacks suppressed [ 192.223631][T12188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1695'. [ 193.430763][T12200] netlink: 'syz.0.1698': attribute type 1 has an invalid length. [ 193.720342][T12211] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1703'. [ 193.942952][T12227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1708'. [ 193.960324][T12225] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1709'. [ 194.325347][T12247] netlink: 'syz.5.1714': attribute type 1 has an invalid length. [ 194.341581][T12246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1712'. [ 194.632593][T12262] netlink: 'syz.5.1718': attribute type 5 has an invalid length. [ 194.797785][T12282] netlink: 'syz.3.1720': attribute type 10 has an invalid length. [ 194.962697][T12291] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1721'. [ 195.009730][T12290] wireguard: wg1: Could not create IPv4 socket [ 195.025763][T12291] netlink: 'syz.4.1721': attribute type 1 has an invalid length. [ 195.353645][T12315] netlink: 544 bytes leftover after parsing attributes in process `syz.4.1729'. [ 195.367015][T12315] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1729'. [ 195.376273][T12313] netlink: 'syz.5.1726': attribute type 10 has an invalid length. [ 195.416019][T12315] netlink: 544 bytes leftover after parsing attributes in process `syz.4.1729'. [ 195.434000][T12313] team0: Device netdevsim0 failed to register rx_handler [ 195.649354][T12335] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 195.653731][T12331] netlink: 'syz.5.1731': attribute type 11 has an invalid length. [ 195.680432][T12336] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1733'. [ 195.712706][T12331] xt_hashlimit: size too large, truncated to 1048576 [ 196.122201][T12364] xt_socket: unknown flags 0x3c [ 196.356833][T12372] wireguard: wg1: Could not create IPv4 socket [ 196.374683][T12377] netlink: 'syz.4.1742': attribute type 10 has an invalid length. [ 196.383114][T12375] wireguard: wg1: Could not create IPv4 socket [ 196.395356][T12377] netlink: 'syz.4.1742': attribute type 10 has an invalid length. [ 197.148426][T12421] netlink: 'syz.2.1754': attribute type 1 has an invalid length. [ 197.235232][T12421] __nla_validate_parse: 5 callbacks suppressed [ 197.235250][T12421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1754'. [ 197.321017][T12433] x_tables: duplicate underflow at hook 4 [ 197.453948][T12447] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1759'. [ 197.718190][T12463] netlink: 766 bytes leftover after parsing attributes in process `syz.3.1763'. [ 197.963579][T12479] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1768'. [ 198.040183][T12484] sctp: [Deprecated]: syz.4.1769 (pid 12484) Use of int in max_burst socket option deprecated. [ 198.040183][T12484] Use struct sctp_assoc_value instead [ 198.118999][T12490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1770'. [ 198.294294][T12497] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1774'. [ 198.317191][T12497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1774'. [ 198.353465][T12500] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1773'. [ 198.390947][T12506] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1772'. [ 198.436321][T12506] 0·: renamed from hsr_slave_1 (while UP) [ 198.477838][T12506] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 198.563106][T12511] veth11: entered allmulticast mode [ 198.896926][T12530] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 198.902325][T12538] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1784'. [ 199.201306][T12555] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 199.261238][T12557] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 199.543374][T12576] validate_nla: 1 callbacks suppressed [ 199.543391][T12576] netlink: 'syz.3.1794': attribute type 10 has an invalid length. [ 199.560442][T12576] : (slave wlan1): Enslaving as an active interface with an up link [ 199.603357][T12580] geneve2: entered promiscuous mode [ 199.645123][T12580] geneve2: entered allmulticast mode [ 199.735347][T12587] netlink: 'syz.5.1799': attribute type 1 has an invalid length. [ 199.857212][T12597] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 200.069401][T12611] IPVS: length: 157 != 24 [ 200.206644][T12607] veth13: entered allmulticast mode [ 200.259494][T12616] netlink: 'syz.2.1808': attribute type 1 has an invalid length. [ 200.419118][T12627] lo speed is unknown, defaulting to 1000 [ 200.613050][T12639] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ¯HcUØîÑË•‚Ž¹+ÕuµŽê!Þ÷œ8¦ [ 200.759457][T12647] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 200.801776][T12647] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 200.991656][T12627] virt_wifi0 speed is unknown, defaulting to 1000 [ 201.399848][T12677] netlink: 'syz.3.1825': attribute type 1 has an invalid length. [ 201.408307][T12677] netlink: 'syz.3.1825': attribute type 1 has an invalid length. [ 201.416897][T12677] netlink: 'syz.3.1825': attribute type 1 has an invalid length. [ 201.427234][T12677] netlink: 'syz.3.1825': attribute type 2 has an invalid length. [ 201.473238][T12679] netlink: 'syz.5.1824': attribute type 2 has an invalid length. [ 201.546561][T12682] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 201.567264][T12685] x_tables: ip6_tables: MASQUERADE target: only valid in nat table, not @# [ 202.281784][T12721] IPVS: stopping backup sync thread 12722 ... [ 202.293091][T12722] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 2, id = 0 [ 202.398752][T12726] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 202.514457][T12731] netlink: 'syz.2.1843': attribute type 1 has an invalid length. [ 202.551027][T12731] __nla_validate_parse: 13 callbacks suppressed [ 202.551044][T12731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1843'. [ 202.610307][T12738] tipc: Enabling of bearer rejected, already enabled [ 202.643512][T12738] netlink: 1264 bytes leftover after parsing attributes in process `syz.0.1845'. [ 202.652559][T12741] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.1847'. [ 202.655355][T12738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.705325][T12741] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.1847'. [ 202.804001][T12745] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1849'. [ 202.872324][T12749] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1850'. [ 202.925708][T12749] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1850'. [ 203.022900][T12758] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1854'. [ 203.098384][T12766] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1856'. [ 203.124151][T12769] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1854'. [ 203.975867][T12812] lo speed is unknown, defaulting to 1000 [ 204.129977][T12827] tipc: Cannot configure node identity twice [ 204.318358][T12812] virt_wifi0 speed is unknown, defaulting to 1000 [ 204.502967][T12843] netlink: 'syz.2.1879': attribute type 1 has an invalid length. [ 204.782983][T12848] veth0_vlan: left allmulticast mode [ 204.824508][T12848] vlan0: left allmulticast mode [ 204.843086][T12848] vlan0: left promiscuous mode [ 204.992978][T12848] team0: Port device vlan3 removed [ 205.461301][T12870] syzkaller0: entered promiscuous mode [ 205.474932][T12870] syzkaller0: entered allmulticast mode [ 207.712179][T12909] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 207.810642][T12916] __nla_validate_parse: 7 callbacks suppressed [ 207.810663][T12916] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1901'. [ 207.891792][T12918] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1900'. [ 207.922775][T12921] xt_TCPMSS: Only works on TCP SYN packets [ 207.967848][T12922] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1902'. [ 208.029216][T12928] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1903'. [ 208.088002][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1903'. [ 208.328661][T12947] x_tables: duplicate underflow at hook 1 [ 208.339556][T12944] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 208.440075][T12961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1914'. [ 208.488366][T12961] bridge_slave_1: left allmulticast mode [ 208.502357][T12961] bridge_slave_1: left promiscuous mode [ 208.517111][T12961] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.580358][T12961] bridge_slave_0: left allmulticast mode [ 208.595907][T12961] bridge_slave_0: left promiscuous mode [ 208.634224][T12961] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.761228][T12961] : (slave bridge0): Releasing backup interface [ 208.852540][T12949] lo speed is unknown, defaulting to 1000 [ 208.871589][T12982] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1919'. [ 208.950232][T12985] vlan2: entered promiscuous mode [ 208.984749][T12985] bridge0: entered promiscuous mode [ 208.990150][T12985] vlan2: entered allmulticast mode [ 209.010484][T12985] bridge0: entered allmulticast mode [ 209.030127][T12985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1920'. [ 209.133631][T12985] bridge0: left allmulticast mode [ 209.154106][T12985] bridge0: left promiscuous mode [ 209.373964][T12993] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1921'. [ 209.437659][T12949] virt_wifi0 speed is unknown, defaulting to 1000 [ 209.626340][T13019] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 210.093087][T13044] netdevsim netdevsim2: Direct firmware load for . [ 210.093087][T13044] failed with error -2 [ 210.136693][T13044] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 210.136693][T13044] [ 210.213880][T13051] netlink: 'syz.5.1930': attribute type 21 has an invalid length. [ 210.227915][T13054] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1931'. [ 210.843835][T13085] netlink: 'syz.2.1938': attribute type 33 has an invalid length. [ 213.244232][T13113] lo speed is unknown, defaulting to 1000 [ 213.316772][T13118] __nla_validate_parse: 3 callbacks suppressed [ 213.316791][T13118] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1950'. [ 213.517906][T13128] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1953'. [ 213.645915][T13113] virt_wifi0 speed is unknown, defaulting to 1000 [ 214.026474][T13145] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1959'. [ 214.210114][T13154] netlink: 'syz.3.1962': attribute type 12 has an invalid length. [ 214.353382][T13157] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 215.005368][T13197] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1975'. [ 215.055446][T13206] netlink: 'syz.3.1975': attribute type 33 has an invalid length. [ 215.149519][T13213] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 215.191613][T13213] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 215.253778][T13213] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 215.373468][T13220] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1979'. [ 215.417104][T13220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1979'. [ 215.465803][T13220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1979'. [ 215.593312][T13233] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1982'. [ 215.623024][T13233] netlink: 'syz.2.1982': attribute type 7 has an invalid length. [ 215.648689][T13233] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1982'. [ 215.687365][T13233] erspan0: entered promiscuous mode [ 215.716485][T13233] erspan0: left promiscuous mode [ 215.783166][T13237] lo speed is unknown, defaulting to 1000 [ 215.793034][T13238] lo speed is unknown, defaulting to 1000 [ 215.986154][T13249] netlink: 'syz.2.1986': attribute type 11 has an invalid length. [ 216.002776][T13250] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 216.012377][T13249] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1986'. [ 216.271696][T13237] virt_wifi0 speed is unknown, defaulting to 1000 [ 217.000002][T13238] virt_wifi0 speed is unknown, defaulting to 1000 [ 217.211612][T13307] tipc: MTU too low for tipc bearer [ 218.351817][T13362] __nla_validate_parse: 6 callbacks suppressed [ 218.351835][T13362] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2015'. [ 218.527985][T13366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2016'. [ 218.537111][T13366] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 218.687954][T13376] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2019'. [ 218.756233][T13384] IPVS: length: 137 != 24 [ 218.834168][T13392] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2023'. [ 218.844232][T13392] netlink: 176 bytes leftover after parsing attributes in process `syz.5.2023'. [ 218.858871][T13392] netlink: 'syz.5.2023': attribute type 5 has an invalid length. [ 218.899829][T13396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2024'. [ 219.221103][T13409] netlink: 'syz.2.2028': attribute type 10 has an invalid length. [ 220.679302][T13425] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 221.279079][T13409] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 221.290632][T13409] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 221.299422][T13409] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 221.308754][T13413] netlink: 'syz.4.2030': attribute type 7 has an invalid length. [ 221.489720][T13434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2036'. [ 221.690652][T13449] netlink: 'syz.2.2040': attribute type 29 has an invalid length. [ 221.729725][T13444] hsr0: entered allmulticast mode [ 221.736835][T13453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2042'. [ 221.748070][T13444] hsr_slave_0: entered allmulticast mode [ 221.753752][T13444] hsr_slave_1: entered allmulticast mode [ 221.762396][T13449] netlink: 'syz.2.2040': attribute type 29 has an invalid length. [ 221.780799][T13454] xt_CT: You must specify a L4 protocol and not use inversions on it [ 221.807047][T13449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2040'. [ 221.829659][T13447] hsr_slave_0: left promiscuous mode [ 221.854015][T13447] hsr_slave_1: left promiscuous mode [ 221.924808][ T5848] Bluetooth: hci3: command 0x0401 tx timeout [ 221.979576][T13447] hsr0 (unregistering): left allmulticast mode [ 222.021001][T13449] netlink: 'syz.2.2040': attribute type 29 has an invalid length. [ 222.053187][T13473] netlink: 'syz.3.2046': attribute type 8 has an invalid length. [ 222.321270][T13492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2049'. [ 222.337459][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 223.010904][T13529] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 223.829883][T13582] __nla_validate_parse: 3 callbacks suppressed [ 223.829902][T13582] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2070'. [ 224.041905][T13590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2073'. [ 224.478813][T13621] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2083'. [ 224.561705][T13630] netlink: 'syz.5.2084': attribute type 8 has an invalid length. [ 224.660232][T13635] sctp: [Deprecated]: syz.0.2085 (pid 13635) Use of int in max_burst socket option. [ 224.660232][T13635] Use struct sctp_assoc_value instead [ 224.902789][T13648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2089'. [ 224.984971][T13653] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2091'. [ 225.049458][T13653] netlink: zone id is out of range [ 225.089831][T13653] netlink: get zone limit has 8 unknown bytes [ 225.165154][T13663] openvswitch: netlink: Unknown nsh attribute 0 [ 225.181973][T13663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.846660][T13702] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 225.856668][T13699] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 225.865248][T13704] delete_channel: no stack [ 225.928835][T13709] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2101'. [ 226.223138][T13725] netlink: 'syz.3.2107': attribute type 2 has an invalid length. [ 226.260355][T13725] netlink: 'syz.3.2107': attribute type 5 has an invalid length. [ 226.339271][T13729] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2109'. [ 226.385702][T13732] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2111'. [ 226.389442][T13729] vlan2: entered allmulticast mode [ 226.408349][T13729] bridge0: port 1(vlan2) entered blocking state [ 226.419509][T13729] bridge0: port 1(vlan2) entered disabled state [ 226.428436][T13729] vlan2: entered promiscuous mode [ 226.440684][T13729] bridge0: port 1(vlan2) entered blocking state [ 226.447172][T13729] bridge0: port 1(vlan2) entered forwarding state [ 226.530393][T13735] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2112'. [ 226.727404][T13755] x_tables: ip_tables: udp match: only valid for protocol 17 [ 226.762053][T13755] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2116'. [ 226.871478][T13760] x_tables: duplicate underflow at hook 1 [ 227.282234][T13786] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.291473][T13786] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.300292][T13786] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.309160][T13786] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.407116][T13790] netlink: 'syz.5.2129': attribute type 4 has an invalid length. [ 227.673941][T13812] netlink: set zone limit has 8 unknown bytes [ 227.710306][T13804] IPVS: persistence engine module ip_vs_pe_À not found [ 228.157435][T13834] netlink: 'syz.2.2143': attribute type 7 has an invalid length. [ 228.167485][T13836] xt_hashlimit: invalid interval [ 228.332901][T13845] netlink: 'syz.0.2147': attribute type 10 has an invalid length. [ 228.375723][T13846] sctp: [Deprecated]: syz.2.2149 (pid 13846) Use of int in max_burst socket option. [ 228.375723][T13846] Use struct sctp_assoc_value instead [ 228.932691][T13876] __nla_validate_parse: 8 callbacks suppressed [ 228.932712][T13876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2156'. [ 228.968195][T13882] netlink: 'syz.0.2158': attribute type 1 has an invalid length. [ 229.717596][T13917] bridge0: port 1(vlan2) entered disabled state [ 230.091215][T13917] vlan2 (unregistering): left promiscuous mode [ 230.099764][T13917] bridge0: port 1(vlan2) entered disabled state [ 230.138265][T13917] bond0 (unregistering): (slave 00ªÃøÂFNð¡): Releasing backup interface [ 230.152826][T13917] 0ªÃøÂFNð¡: left promiscuous mode [ 230.182215][T13917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.192017][T13917] bond_slave_1: left promiscuous mode [ 230.198635][T13917] bond_slave_1: left allmulticast mode [ 230.224123][T13917] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 230.237888][T13917] batadv0: left promiscuous mode [ 230.243970][T13917] batadv0: left allmulticast mode [ 230.272800][T13917] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 230.293684][T13917] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 230.301872][T13917] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 230.318087][T13917] bond0 (unregistering): Released all slaves [ 230.332314][T13921] bridge0: port 1(gretap0) entered blocking state [ 230.339553][T13921] bridge0: port 1(gretap0) entered disabled state [ 230.346985][T13921] gretap0: entered allmulticast mode [ 230.353244][T13921] gretap0: entered promiscuous mode [ 230.359747][T13921] bridge0: port 1(gretap0) entered blocking state [ 230.366365][T13921] bridge0: port 1(gretap0) entered forwarding state [ 230.394088][T13925] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 231.178020][T13986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2183'. [ 231.234397][T13986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2183'. [ 231.305823][T13986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2183'. [ 231.404801][T13986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2183'. [ 231.434978][T13986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2183'. [ 231.485104][T13986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2183'. [ 231.511088][T13986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2183'. [ 231.542550][T13986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2183'. [ 231.565684][T14001] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2187'. [ 231.890698][T14020] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 232.295206][T14050] netlink: 'syz.2.2198': attribute type 20 has an invalid length. [ 232.826293][T14083] netlink: 'syz.4.2205': attribute type 142 has an invalid length. [ 232.965558][T14092] netlink: 'syz.2.2208': attribute type 8 has an invalid length. [ 233.189993][T14100] syzkaller0: entered allmulticast mode [ 233.271887][T14099] syzkaller0 (unregistering): left allmulticast mode [ 233.571219][T14128] vlan4: entered allmulticast mode [ 233.932756][T14155] netlink: 'syz.3.2223': attribute type 10 has an invalid length. [ 234.121532][T14163] __nla_validate_parse: 31 callbacks suppressed [ 234.121551][T14163] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2224'. [ 234.160858][T14165] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2226'. [ 234.173637][T14163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2224'. [ 234.367820][T14178] netlink: 'syz.5.2228': attribute type 16 has an invalid length. [ 234.444050][T14185] Bluetooth: MGMT ver 1.23 [ 234.732754][T14206] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 234.935200][T14215] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.2236'. [ 235.172125][T14232] gre1: entered promiscuous mode [ 235.181006][T14232] gre1: entered allmulticast mode [ 235.281466][T14235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2241'. [ 235.320121][T14235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2241'. [ 235.448951][T14245] [H: renamed from veth0_vlan (while UP) [ 235.835917][T14267] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2255'. [ 235.927776][T14274] netlink: 'syz.3.2256': attribute type 11 has an invalid length. [ 236.158504][T14287] netlink: 'syz.3.2259': attribute type 30 has an invalid length. [ 236.168718][T14285] lo speed is unknown, defaulting to 1000 [ 236.191580][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060ced800: rx timeout, send abort [ 236.200492][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888060ced800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 236.300152][ C0] vcan0: j1939_tp_rxtimer: 0xffff888020745000: rx timeout, send abort [ 236.471608][T14305] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2262'. [ 236.623555][T14285] virt_wifi0 speed is unknown, defaulting to 1000 [ 236.808515][ C0] vcan0: j1939_tp_rxtimer: 0xffff888020745000: abort rx timeout. Force session deactivation [ 237.449608][T14341] netlink: 'syz.3.2271': attribute type 25 has an invalid length. [ 237.808480][T14360] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 237.956613][T14367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2278'. [ 238.055506][T14376] netlink: 'syz.5.2281': attribute type 1 has an invalid length. [ 238.118734][T14376] netlink: 134728 bytes leftover after parsing attributes in process `syz.5.2281'. [ 238.149033][T14377] netlink: 'syz.5.2281': attribute type 178 has an invalid length. [ 238.290420][T14385] openvswitch: netlink: Tunnel attr 1 has unexpected len 24 expected 4 [ 238.312314][T14390] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 238.788323][T14423] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 238.795628][T14423] IPv6: NLM_F_CREATE should be set when creating new route [ 238.883236][T14431] IPVS: set_ctl: invalid protocol: 46 255.255.255.255:20000 [ 238.894429][T14431] sctp: [Deprecated]: syz.5.2294 (pid 14431) Use of int in maxseg socket option. [ 238.894429][T14431] Use struct sctp_assoc_value instead [ 238.923061][T14431] IPVS: set_ctl: invalid protocol: 47 172.20.20.46:20001 [ 239.187629][T14452] netlink: 'syz.3.2298': attribute type 17 has an invalid length. [ 239.200808][T14453] __nla_validate_parse: 2 callbacks suppressed [ 239.200827][T14453] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2297'. [ 239.215639][T14452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2298'. [ 239.260581][T14452] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2298'. [ 239.592905][T14471] netlink: 'syz.3.2303': attribute type 1 has an invalid length. [ 239.619176][T14471] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2303'. [ 239.669311][T14468] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2302'. [ 239.697661][T14431] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 239.906112][T14493] xt_ecn: cannot match TCP bits for non-tcp packets [ 240.203557][T14513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2313'. [ 240.244310][T14510] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2312'. [ 240.318455][T14521] netlink: 'syz.2.2315': attribute type 1 has an invalid length. [ 240.353032][T14521] netlink: 134728 bytes leftover after parsing attributes in process `syz.2.2315'. [ 240.487888][T14530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2317'. [ 240.531010][T14530] openvswitch: netlink: Unexpected mask (mask=8000040, allowed=10048) [ 240.811094][T14543] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2320'. [ 241.044787][ T5147] Bluetooth: hci1: command 0x0406 tx timeout [ 241.146046][T14552] lo speed is unknown, defaulting to 1000 [ 241.385263][T14582] delete_channel: no stack [ 241.743972][T14552] virt_wifi0 speed is unknown, defaulting to 1000 [ 242.129130][T14613] sctp: [Deprecated]: syz.5.2338 (pid 14613) Use of struct sctp_assoc_value in delayed_ack socket option. [ 242.129130][T14613] Use struct sctp_sack_info instead [ 243.250992][T14670] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 243.258504][T14669] tipc: Enabling of bearer rejected, failed to enable media [ 244.229622][T14720] __nla_validate_parse: 5 callbacks suppressed [ 244.229642][T14720] netlink: 187320 bytes leftover after parsing attributes in process `syz.4.2360'. [ 244.290631][T14720] netlink: zone id is out of range [ 244.314188][T14720] netlink: zone id is out of range [ 244.340065][T14720] netlink: zone id is out of range [ 244.375201][T14720] netlink: zone id is out of range [ 244.394035][T14720] netlink: zone id is out of range [ 244.434712][T14720] netlink: zone id is out of range [ 244.454732][T14720] netlink: zone id is out of range [ 244.480545][T14720] netlink: zone id is out of range [ 244.505384][T14720] netlink: zone id is out of range [ 244.510575][T14720] netlink: zone id is out of range [ 244.733916][T14746] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2362'. [ 244.841291][T14752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2362'. [ 244.855244][T14752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2362'. [ 245.053438][T14760] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2368'. [ 245.081892][T14763] x_tables: duplicate underflow at hook 2 [ 245.295131][T14771] netlink: 'syz.5.2371': attribute type 9 has an invalid length. [ 245.320598][T14775] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 245.529883][T14783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2374'. [ 245.531734][T14779] netlink: 'syz.2.2373': attribute type 10 has an invalid length. [ 245.752798][T14794] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2376'. [ 245.992299][T14803] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2378'. [ 246.013881][T14798] lo speed is unknown, defaulting to 1000 [ 246.025660][T14794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2376'. [ 246.502041][T14798] virt_wifi0 speed is unknown, defaulting to 1000 [ 246.909221][T14845] FAULT_INJECTION: forcing a failure. [ 246.909221][T14845] name failslab, interval 1, probability 0, space 0, times 1 [ 246.924656][T14845] CPU: 0 UID: 0 PID: 14845 Comm: syz.2.2392 Not tainted 6.14.0-rc2-syzkaller-00154-g054e61bb1de4 #0 [ 246.924684][T14845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 246.924693][T14845] Call Trace: [ 246.924699][T14845] [ 246.924706][T14845] dump_stack_lvl+0x241/0x360 [ 246.924730][T14845] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.924746][T14845] ? __pfx__printk+0x10/0x10 [ 246.924763][T14845] ? fs_reclaim_acquire+0x93/0x130 [ 246.924780][T14845] ? __pfx___might_resched+0x10/0x10 [ 246.924796][T14845] ? dynamic_dname+0x144/0x1b0 [ 246.924819][T14845] should_fail_ex+0x40a/0x550 [ 246.924843][T14845] should_failslab+0xac/0x100 [ 246.924862][T14845] __kmalloc_noprof+0xdd/0x4c0 [ 246.924879][T14845] ? tomoyo_encode+0x26f/0x540 [ 246.924905][T14845] tomoyo_encode+0x26f/0x540 [ 246.924927][T14845] ? __pfx_sockfs_dname+0x10/0x10 [ 246.924946][T14845] tomoyo_realpath_from_path+0x59e/0x5e0 [ 246.924976][T14845] tomoyo_path_number_perm+0x239/0x770 [ 246.924993][T14845] ? __lock_acquire+0x1397/0x2100 [ 246.925017][T14845] ? tomoyo_path_number_perm+0x209/0x770 [ 246.925038][T14845] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 246.925091][T14845] ? __fget_files+0x2a/0x410 [ 246.925114][T14845] ? __fget_files+0x2a/0x410 [ 246.925141][T14845] security_file_ioctl+0xc6/0x2a0 [ 246.925160][T14845] __se_sys_ioctl+0x46/0x170 [ 246.925181][T14845] do_syscall_64+0xf3/0x230 [ 246.925200][T14845] ? clear_bhb_loop+0x35/0x90 [ 246.925223][T14845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.925241][T14845] RIP: 0033:0x7f4172b8cde9 [ 246.925271][T14845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.925283][T14845] RSP: 002b:00007f4173a54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.925300][T14845] RAX: ffffffffffffffda RBX: 00007f4172da5fa0 RCX: 00007f4172b8cde9 [ 246.925310][T14845] RDX: 0000400000000000 RSI: 000000000000890c RDI: 0000000000000004 [ 246.925320][T14845] RBP: 00007f4173a54090 R08: 0000000000000000 R09: 0000000000000000 [ 246.925330][T14845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.925339][T14845] R13: 0000000000000000 R14: 00007f4172da5fa0 R15: 00007ffcbbca0598 [ 246.925366][T14845] [ 246.925816][T14845] ERROR: Out of memory at tomoyo_realpath_from_path. [ 247.297966][T14855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2395'. [ 247.557064][T14861] xt_HMARK: proto mask must be zero with L3 mode [ 248.084167][T14891] netlink: 'syz.5.2407': attribute type 1 has an invalid length. [ 248.126694][T14893] FAULT_INJECTION: forcing a failure. [ 248.126694][T14893] name failslab, interval 1, probability 0, space 0, times 0 [ 248.154646][T14893] CPU: 0 UID: 0 PID: 14893 Comm: syz.0.2408 Not tainted 6.14.0-rc2-syzkaller-00154-g054e61bb1de4 #0 [ 248.154675][T14893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 248.154685][T14893] Call Trace: [ 248.154691][T14893] [ 248.154699][T14893] dump_stack_lvl+0x241/0x360 [ 248.154726][T14893] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.154744][T14893] ? __pfx__printk+0x10/0x10 [ 248.154763][T14893] ? fs_reclaim_acquire+0x93/0x130 [ 248.154781][T14893] ? __pfx___might_resched+0x10/0x10 [ 248.154799][T14893] ? dynamic_dname+0x144/0x1b0 [ 248.154826][T14893] should_fail_ex+0x40a/0x550 [ 248.154854][T14893] should_failslab+0xac/0x100 [ 248.154875][T14893] __kmalloc_noprof+0xdd/0x4c0 [ 248.154895][T14893] ? tomoyo_encode+0x26f/0x540 [ 248.154923][T14893] tomoyo_encode+0x26f/0x540 [ 248.154947][T14893] ? __pfx_sockfs_dname+0x10/0x10 [ 248.154967][T14893] tomoyo_realpath_from_path+0x59e/0x5e0 [ 248.154999][T14893] tomoyo_path_number_perm+0x239/0x770 [ 248.155018][T14893] ? __lock_acquire+0x1397/0x2100 [ 248.155041][T14893] ? tomoyo_path_number_perm+0x209/0x770 [ 248.155062][T14893] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 248.155115][T14893] ? __fget_files+0x2a/0x410 [ 248.155140][T14893] ? __fget_files+0x2a/0x410 [ 248.155164][T14893] security_file_ioctl+0xc6/0x2a0 [ 248.155184][T14893] __se_sys_ioctl+0x46/0x170 [ 248.155203][T14893] do_syscall_64+0xf3/0x230 [ 248.155222][T14893] ? clear_bhb_loop+0x35/0x90 [ 248.155246][T14893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.155266][T14893] RIP: 0033:0x7fd761b8cde9 [ 248.155281][T14893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.155295][T14893] RSP: 002b:00007fd762a7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.155313][T14893] RAX: ffffffffffffffda RBX: 00007fd761da5fa0 RCX: 00007fd761b8cde9 [ 248.155324][T14893] RDX: 0000400000000000 RSI: 000000000000890c RDI: 0000000000000004 [ 248.155335][T14893] RBP: 00007fd762a7d090 R08: 0000000000000000 R09: 0000000000000000 [ 248.155344][T14893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.155353][T14893] R13: 0000000000000000 R14: 00007fd761da5fa0 R15: 00007ffe7d6ee8b8 [ 248.155378][T14893] [ 248.155394][T14893] ERROR: Out of memory at tomoyo_realpath_from_path. [ 248.675499][T14915] Cannot find del_set index 17 as target [ 249.054484][T14932] tipc: Enabled bearer , priority 0 [ 249.082203][T14932] +: renamed from syzkaller0 [ 249.121386][T14932] tipc: Disabling bearer [ 249.221015][T14943] lo speed is unknown, defaulting to 1000 [ 249.509101][T14953] __nla_validate_parse: 2 callbacks suppressed [ 249.509121][T14953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2421'. [ 249.571373][T14943] virt_wifi0 speed is unknown, defaulting to 1000 [ 249.678779][T14959] FAULT_INJECTION: forcing a failure. [ 249.678779][T14959] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 249.703317][T14959] CPU: 0 UID: 0 PID: 14959 Comm: syz.5.2423 Not tainted 6.14.0-rc2-syzkaller-00154-g054e61bb1de4 #0 [ 249.703342][T14959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 249.703352][T14959] Call Trace: [ 249.703358][T14959] [ 249.703365][T14959] dump_stack_lvl+0x241/0x360 [ 249.703393][T14959] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.703411][T14959] ? __pfx__printk+0x10/0x10 [ 249.703433][T14959] ? snprintf+0xda/0x120 [ 249.703459][T14959] should_fail_ex+0x40a/0x550 [ 249.703486][T14959] _copy_to_user+0x31/0xb0 [ 249.703508][T14959] simple_read_from_buffer+0xca/0x150 [ 249.703532][T14959] proc_fail_nth_read+0x1e9/0x250 [ 249.703556][T14959] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.703580][T14959] ? rw_verify_area+0x243/0x630 [ 249.703603][T14959] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.703625][T14959] vfs_read+0x1f8/0xb40 [ 249.703642][T14959] ? fdget_pos+0x254/0x320 [ 249.703665][T14959] ? __pfx___mutex_lock+0x10/0x10 [ 249.703685][T14959] ? __pfx_vfs_read+0x10/0x10 [ 249.703704][T14959] ? __fget_files+0x2a/0x410 [ 249.703727][T14959] ? __fget_files+0x395/0x410 [ 249.703746][T14959] ? __fget_files+0x2a/0x410 [ 249.703775][T14959] ksys_read+0x18f/0x2b0 [ 249.703817][T14959] ? __pfx_ksys_read+0x10/0x10 [ 249.703834][T14959] ? do_syscall_64+0x100/0x230 [ 249.703855][T14959] ? do_syscall_64+0xb6/0x230 [ 249.703875][T14959] do_syscall_64+0xf3/0x230 [ 249.703893][T14959] ? clear_bhb_loop+0x35/0x90 [ 249.703917][T14959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.703948][T14959] RIP: 0033:0x7f9e2e78b7fc [ 249.703965][T14959] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 249.703979][T14959] RSP: 002b:00007f9e2f6ce030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 249.703997][T14959] RAX: ffffffffffffffda RBX: 00007f9e2e9a5fa0 RCX: 00007f9e2e78b7fc [ 249.704010][T14959] RDX: 000000000000000f RSI: 00007f9e2f6ce0a0 RDI: 0000000000000003 [ 249.704020][T14959] RBP: 00007f9e2f6ce090 R08: 0000000000000000 R09: 0000000000000000 [ 249.704030][T14959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.704041][T14959] R13: 0000000000000000 R14: 00007f9e2e9a5fa0 R15: 00007ffc14a4d638 [ 249.704068][T14959] [ 250.174230][T14964] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2424'. [ 250.252982][T14964] gtp0: entered promiscuous mode [ 250.258133][T14964] gtp0: entered allmulticast mode [ 250.670399][T14985] sctp: [Deprecated]: syz.2.2432 (pid 14985) Use of struct sctp_assoc_value in delayed_ack socket option. [ 250.670399][T14985] Use struct sctp_sack_info instead [ 250.720558][T14985] net_ratelimit: 1508 callbacks suppressed [ 250.720580][T14985] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 250.788479][T14992] sctp: [Deprecated]: syz.2.2432 (pid 14992) Use of struct sctp_assoc_value in delayed_ack socket option. [ 250.788479][T14992] Use struct sctp_sack_info instead [ 250.960645][T14999] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 250.971089][T14999] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 251.081436][T15006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2440'. [ 251.126306][T15011] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2441'. [ 251.276561][T15014] tipc: Enabling of bearer rejected, media not registered [ 251.320798][T15014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2443'. [ 251.339031][T15021] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2444'. [ 251.369570][T15021] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2444'. [ 252.489760][T15086] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2465'. [ 252.583631][T15090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2467'. [ 252.606277][T15088] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 252.689796][T15095] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2466'. [ 253.537013][T15146] netlink: 'syz.4.2482': attribute type 1 has an invalid length. [ 254.097945][T15174] : entered promiscuous mode [ 254.467237][T15191] gre1: entered promiscuous mode [ 254.472242][T15191] gre1: entered allmulticast mode [ 254.627153][T15200] netlink: 'syz.4.2499': attribute type 2 has an invalid length. [ 254.636966][T15200] __nla_validate_parse: 5 callbacks suppressed [ 254.637137][T15200] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2499'. [ 254.676736][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2500'. [ 255.241230][T15227] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2508'. [ 255.317496][T15231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2507'. [ 255.386255][T15236] netlink: 'syz.5.2511': attribute type 5 has an invalid length. [ 255.395734][T15239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2510'. [ 255.701646][T15256] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2516'. [ 255.853934][ T5147] Bluetooth: hci5: command 0x0405 tx timeout [ 255.883726][T15269] lo: entered promiscuous mode [ 255.915294][T15269] netlink: 'syz.5.2520': attribute type 2 has an invalid length. [ 255.928461][T15269] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.117950][T15285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2523'. [ 256.131996][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2523'. [ 256.251372][T15290] xfrm1: entered allmulticast mode [ 256.481988][T15304] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2530'. [ 256.512954][T15306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2528'. [ 256.736450][T15315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.765958][T15318] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 256.870907][T15325] team0: entered promiscuous mode [ 256.876537][T15325] team_slave_0: entered promiscuous mode [ 256.882505][T15325] team_slave_1: entered promiscuous mode [ 256.890385][T15325] batadv_slave_1: entered promiscuous mode [ 256.898208][T15325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.906381][T15325] Cannot create hsr debugfs directory [ 257.374900][T15351] netem: change failed [ 257.392300][T15352] netem: change failed [ 257.475498][T15356] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 257.964321][T15389] netlink: 'syz.0.2552': attribute type 1 has an invalid length. [ 258.112178][T15399] netlink: 'syz.0.2554': attribute type 1 has an invalid length. [ 259.162691][T15461] xt_CT: No such helper "pptp" [ 259.191948][T15461] atomic_op ffff888029566198 conn xmit_atomic 0000000000000000 [ 259.247400][T15468] tipc: Enabled bearer , priority 0 [ 259.350340][T15468] syzkaller0: entered promiscuous mode [ 259.391938][T15468] syzkaller0: entered allmulticast mode [ 259.414231][T15468] tipc: Resetting bearer [ 259.477561][T15468] netlink: 'syz.0.2572': attribute type 1 has an invalid length. [ 260.008076][T15514] __nla_validate_parse: 8 callbacks suppressed [ 260.008101][T15514] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2582'. [ 260.082805][T15514] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2582'. [ 260.103858][T15519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2583'. [ 260.139125][T15514] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2582'. [ 260.353907][T15462] tipc: Resetting bearer [ 260.436427][T15543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2586'. [ 260.703667][T15548] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2587'. [ 262.780411][T15462] tipc: Disabling bearer [ 263.082124][T15560] netlink: 71 bytes leftover after parsing attributes in process `syz.4.2591'. [ 263.203570][T15571] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2592'. [ 263.245881][T15571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2592'. [ 263.651027][T15597] bond2: entered promiscuous mode [ 263.831422][T15610] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2601'. [ 264.235913][T15625] netlink: 'syz.4.2605': attribute type 1 has an invalid length. [ 264.279685][T15625] bond7: entered promiscuous mode [ 264.321015][T15625] 8021q: adding VLAN 0 to HW filter on device bond7 [ 264.433427][T15631] 8021q: adding VLAN 0 to HW filter on device bond8 [ 264.493054][T15631] bond7: (slave bond8): making interface the new active one [ 264.534193][T15631] bond8: entered promiscuous mode [ 264.595999][T15631] bond7: (slave bond8): Enslaving as an active interface with an up link [ 265.037711][T15671] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 265.079246][T15671] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 265.091734][T15671] gretap1: entered promiscuous mode [ 265.098535][T15671] gretap1: entered allmulticast mode [ 265.106294][T15670] netlink: 'syz.3.2615': attribute type 3 has an invalid length. [ 265.278361][T15682] netlink: 'syz.4.2620': attribute type 2 has an invalid length. [ 265.566311][T15704] netlink: 'syz.0.2623': attribute type 9 has an invalid length. [ 265.981789][T15731] Cannot find del_set index 65531 as target [ 266.446647][T15751] __nla_validate_parse: 1 callbacks suppressed [ 266.446666][T15751] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2639'. [ 266.462715][T15751] netlink: 'syz.0.2639': attribute type 7 has an invalid length. [ 266.470848][T15751] netlink: 'syz.0.2639': attribute type 8 has an invalid length. [ 266.479926][T15751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2639'. [ 266.807305][T15782] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2644'. [ 266.937697][T15789] netlink: 'syz.0.2645': attribute type 10 has an invalid length. [ 266.945912][T15789] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2645'. [ 266.984423][T15791] veth7: entered allmulticast mode [ 266.991692][T15782] gre0: entered allmulticast mode [ 267.089061][T15797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2650'. [ 267.166796][T15789] team0: Port device geneve0 added [ 267.301052][T15806] netlink: 'syz.5.2653': attribute type 21 has an invalid length. [ 267.315440][T15806] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2653'. [ 267.338605][T15804] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2651'. [ 267.388280][T15804] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2651'. [ 267.401896][T15804] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 267.775788][T15828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.921145][T15834] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2662'. [ 268.005855][ T5848] Bluetooth: hci5: command 0x0405 tx timeout [ 268.051291][T15841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2663'. [ 268.082703][T15845] netlink: 'syz.2.2665': attribute type 32 has an invalid length. [ 268.303250][T15863] xt_TCPMSS: Only works on TCP SYN packets [ 268.407861][T15872] openvswitch: netlink: Flow actions attr not present in new flow. [ 268.830982][T15893] veth9: entered promiscuous mode [ 269.050206][T15913] netlink: 'syz.5.2678': attribute type 1 has an invalid length. [ 269.137672][T15913] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 269.267077][T15926] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 269.734638][T15956] nbd: must specify at least one socket [ 269.831236][T15965] Cannot find add_set index 0 as target [ 270.453201][T16000] bridge_slave_0: mtu less than device minimum [ 270.816671][T16022] netlink: 'syz.0.2703': attribute type 4 has an invalid length. [ 271.059817][T16032] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 271.300693][T16048] ªªªªªª: renamed from vlan0 (while UP) [ 271.414383][T16056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.778827][T16069] Cannot find del_set index 4 as target [ 271.788877][T16067] siw: device registration error -23 [ 272.018017][T16083] __nla_validate_parse: 10 callbacks suppressed [ 272.018038][T16083] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2723'. [ 272.042163][T16084] netlink: 13 bytes leftover after parsing attributes in process `syz.2.2722'. [ 272.290310][T16098] gre1: entered promiscuous mode [ 272.307956][T16098] gre1: entered allmulticast mode [ 272.570113][T16118] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2733'. [ 272.869075][T16143] 8021q: VLANs not supported on lo [ 273.141887][T16163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.210908][T16163] batadv_slave_1: entered promiscuous mode [ 273.265120][T16163] batadv_slave_1: entered allmulticast mode [ 273.726710][T16187] netlink: 'syz.2.2749': attribute type 33 has an invalid length. [ 273.765348][T16187] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2749'. [ 273.825672][T16190] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 273.910275][T16192] lo: left promiscuous mode [ 274.004304][T16197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2752'. [ 274.006209][T16192] gre0: left allmulticast mode [ 274.424122][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 274.439611][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 274.446121][T16216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.456064][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 274.457742][T16216] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2754'. [ 274.475389][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 274.490557][ T5848] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 274.499897][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 274.980735][T16234] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 275.046719][T16234] bridge0: port 1(gretap0) entered disabled state [ 275.068507][T16214] lo speed is unknown, defaulting to 1000 [ 275.410678][T16257] netlink: 'syz.2.2761': attribute type 11 has an invalid length. [ 275.424164][T16214] virt_wifi0 speed is unknown, defaulting to 1000 [ 275.441285][T16257] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2761'. [ 275.507736][T16256] xt_policy: output policy not valid in PREROUTING and INPUT [ 275.517741][T16256] batadv_slave_1: entered allmulticast mode [ 275.701574][T16214] chnl_net:caif_netlink_parms(): no params data found [ 275.825922][T16214] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.841900][T16214] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.856212][T16214] bridge_slave_0: entered allmulticast mode [ 275.864212][T16214] bridge_slave_0: entered promiscuous mode [ 275.873692][T16214] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.895498][T16214] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.902778][T16214] bridge_slave_1: entered allmulticast mode [ 275.927618][T16214] bridge_slave_1: entered promiscuous mode [ 275.958733][T16214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.973308][T16214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.041303][T16214] team0: Port device team_slave_0 added [ 276.060788][T16214] team0: Port device team_slave_1 added [ 276.112611][T16214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.121074][T16214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.152238][T16214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.190803][T16214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.214070][T16214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.293020][T16214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.567013][ T5147] Bluetooth: hci0: command tx timeout [ 276.641831][T16214] hsr_slave_0: entered promiscuous mode [ 276.661097][T16214] hsr_slave_1: entered promiscuous mode [ 276.676318][T16214] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.685164][T16214] Cannot create hsr debugfs directory [ 276.709696][ T9] hid (null): unknown global tag 0xe [ 277.277263][T16214] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.490256][ T5834] syz_tun (unregistering): left promiscuous mode [ 277.589513][T16214] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.951824][ T1120] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.033357][ T1120] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.141863][T16214] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.323928][ T1120] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.361650][ T1120] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.436833][T16214] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.533957][T16351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2784'. [ 278.558400][ T1120] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.600399][ T1120] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.645331][ T5147] Bluetooth: hci0: command tx timeout [ 278.758329][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 278.781125][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 278.790900][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 278.815333][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 278.822936][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 278.833409][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 278.903535][ T1120] netdevsim netdevsim0  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.916704][ T1120] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.995055][T16366] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2786'. [ 278.996386][T16361] lo speed is unknown, defaulting to 1000 [ 279.090987][T16370] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2788'. [ 279.170737][T16370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2788'. [ 279.288188][T16370] Cannot find add_set index 3 as target [ 279.313368][T16214] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 279.328338][T16377] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2790'. [ 279.369482][T16214] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 279.451035][T16389] netlink: 668 bytes leftover after parsing attributes in process `syz.5.2791'. [ 279.495902][T16214] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 279.505637][T16381] xt_CT: No such helper "snmp_trap" [ 279.530031][T16214] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 279.538110][ T9] hid-generic 0005:046D:0A0F.0002: unknown global tag 0xe [ 279.556876][ T9] hid-generic 0005:046D:0A0F.0002: item 0 2 1 14 parsing failed [ 279.560109][T16389] netlink: 668 bytes leftover after parsing attributes in process `syz.5.2791'. [ 279.574780][ T9] hid-generic 0005:046D:0A0F.0002: probe with driver hid-generic failed with error -22 [ 279.624832][T16361] virt_wifi0 speed is unknown, defaulting to 1000 [ 280.000875][T16413] netlink: 'syz.3.2797': attribute type 4 has an invalid length. [ 280.014016][T16410] Bluetooth: MGMT ver 1.23 [ 280.150003][T16422] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2798'. [ 280.267855][ T1120] team0: Port device geneve0 removed [ 280.543619][ T1120] bond0 (unregistering): Released all slaves [ 280.695058][ T1120] bond1 (unregistering): Released all slaves [ 280.708001][ T1120] bond2 (unregistering): Released all slaves [ 280.719909][ T1120] bond3 (unregistering): Released all slaves [ 280.726232][ T5848] Bluetooth: hci0: command tx timeout [ 280.893518][ T5848] Bluetooth: hci2: command tx timeout [ 281.133164][T16428] tipc: Enabled bearer , priority 0 [ 281.179712][T16434] syzkaller0: entered promiscuous mode [ 281.203950][T16434] syzkaller0: entered allmulticast mode [ 281.304071][T16214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.339989][T16361] chnl_net:caif_netlink_parms(): no params data found [ 281.480659][T16427] tipc: Resetting bearer [ 281.547754][T16427] tipc: Disabling bearer [ 281.574271][T16214] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.664045][T16361] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.680680][T16361] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.690252][T16361] bridge_slave_0: entered allmulticast mode [ 281.710916][T16361] bridge_slave_0: entered promiscuous mode [ 281.723914][T16361] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.741273][T16361] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.759513][T16361] bridge_slave_1: entered allmulticast mode [ 281.772598][T16361] bridge_slave_1: entered promiscuous mode [ 281.784420][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.791589][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.858445][T16361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.884106][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.891338][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.961560][T16361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.089804][ T5147] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 282.116982][T16361] team0: Port device team_slave_0 added [ 282.164385][T16488] netlink: 'syz.2.2809': attribute type 1 has an invalid length. [ 282.177873][T16361] team0: Port device team_slave_1 added [ 282.337537][T16488] 8021q: adding VLAN 0 to HW filter on device bond4 [ 282.351906][T16504] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 282.394406][ T1120] : left promiscuous mode [ 282.433809][T16361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.450316][T16361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.482746][T16361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.497838][T16361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.505563][T16361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.546400][T16361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.591717][ T1120] tipc: Disabling bearer [ 282.628443][ T1120] tipc: Left network mode [ 282.804805][ T5147] Bluetooth: hci0: command 0x0419 tx timeout [ 282.923874][T16361] hsr_slave_0: entered promiscuous mode [ 282.942821][T16361] hsr_slave_1: entered promiscuous mode [ 282.956157][T16361] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.967045][ T5147] Bluetooth: hci2: command tx timeout [ 282.993213][T16361] Cannot create hsr debugfs directory [ 283.077660][T16527] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2817'. [ 283.641657][T16553] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2824'. [ 283.678718][T16553] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2824'. [ 283.700812][T16556] openvswitch: netlink: IP tunnel TTL not specified. [ 283.718565][T16214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.878293][T16569] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2827'. [ 283.985892][ T1120] hsr_slave_0: left promiscuous mode [ 283.993761][ T1120] hsr_slave_1: left promiscuous mode [ 284.134374][T16580] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2830'. [ 284.243771][T16588] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2830'. [ 284.368993][T16597] netlink: 1264 bytes leftover after parsing attributes in process `syz.2.2832'. [ 284.521273][T16606] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 284.890257][ T5147] Bluetooth: hci0: command 0x0419 tx timeout [ 285.045562][ T5147] Bluetooth: hci2: command tx timeout [ 285.728176][T16638] syz.5.2839 (16638) used obsolete PPPIOCDETACH ioctl [ 285.992569][T16214] veth0_vlan: entered promiscuous mode [ 286.048474][T16214] veth1_vlan: entered promiscuous mode [ 286.061368][T16650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2842'. [ 286.099175][T16650] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2842'. [ 286.157376][T16361] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 286.170480][T16650] netlink: 'syz.3.2842': attribute type 2 has an invalid length. [ 286.192832][T16214] veth0_macvtap: entered promiscuous mode [ 286.199778][T16650] netlink: 'syz.3.2842': attribute type 9 has an invalid length. [ 286.220462][T16361] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 286.235385][ T1120] IPVS: stop unused estimator thread 0... [ 286.243078][T16650] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2842'. [ 286.261333][T16361] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 286.295631][T16214] veth1_macvtap: entered promiscuous mode [ 286.306463][T16361] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 286.368959][T16214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.400123][T16214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.424004][T16214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.459578][T16214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.491421][T16214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.552690][T16214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.594762][T16214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.637284][T16214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.685860][T16214] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.705420][T16214] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.714185][T16214] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.753910][T16214] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.035075][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.061453][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.069447][T16361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.126445][ T5147] Bluetooth: hci2: command tx timeout [ 287.187709][T16700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2850'. [ 287.208345][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.223527][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.240369][T16361] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.270829][T16700] vlan4: entered allmulticast mode [ 287.361679][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.368885][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.414299][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.421514][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.608128][T16715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.635348][T16715] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.664234][T16715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.696271][T16715] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.783541][T16719] vlan4: entered promiscuous mode [ 288.018515][T16361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.084733][T16739] netlink: 'syz.3.2858': attribute type 15 has an invalid length. [ 288.298032][T16361] veth0_vlan: entered promiscuous mode [ 288.340613][T16361] veth1_vlan: entered promiscuous mode [ 288.415703][T16764] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 288.478442][T16764] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 288.528703][T16765] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 288.601351][T16361] veth0_macvtap: entered promiscuous mode [ 288.674165][T16361] veth1_macvtap: entered promiscuous mode [ 288.779802][T16780] 8021q: adding VLAN 0 to HW filter on device bond4 [ 288.796634][T16361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.814624][T16361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.835994][T16361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.857062][T16361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.886291][T16361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.911659][T16791] bridge0: entered promiscuous mode [ 288.922116][T16792] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 288.942776][T16791] __nla_validate_parse: 5 callbacks suppressed [ 288.942793][T16791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2868'. [ 288.960418][T16361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.994749][T16361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.034934][T16361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.103982][T16795] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 289.117366][T16791] bridge_slave_1: left allmulticast mode [ 289.123683][T16791] bridge_slave_1: left promiscuous mode [ 289.135146][T16791] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.175775][T16791] bridge_slave_0: left allmulticast mode [ 289.181609][T16791] bridge_slave_0: left promiscuous mode [ 289.188215][T16791] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.207942][ T5147] Bluetooth: hci2: command tx timeout [ 289.238223][T16791] bridge0 (unregistering): left promiscuous mode [ 289.294338][T16361] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.327106][T16361] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.336566][T16361] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.345640][T16361] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.569313][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.588435][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.644796][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.653472][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.792543][T16821] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2876'. [ 290.133392][T16836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2880'. [ 290.164434][T16836] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 290.234127][T16842] tipc: Started in network mode [ 290.243663][T16842] tipc: Node identity ac14140f, cluster identity 4711 [ 290.270978][T16842] tipc: New replicast peer: 255.255.255.255 [ 290.292098][T16842] tipc: Enabled bearer , priority 10 [ 290.507981][T16857] vcan0: tx drop: invalid sa for name 0x0000000000000004 [ 290.750222][T16875] netlink: 'syz.4.2890': attribute type 2 has an invalid length. [ 290.867232][ T146] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.027463][ T146] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.059121][T16885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.068897][T16885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2893'. [ 291.078350][T16885] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2893'. [ 291.257014][ T146] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.298896][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 291.310582][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 291.320375][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 291.332160][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 291.341023][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 291.361571][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 291.368526][ T146] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.395316][ T1207] tipc: Node number set to 2886997007 [ 291.420529][T16889] lo speed is unknown, defaulting to 1000 [ 291.558481][T16889] virt_wifi0 speed is unknown, defaulting to 1000 [ 291.574448][ T146] bridge_slave_1: left allmulticast mode [ 291.580259][ T146] bridge_slave_1: left promiscuous mode [ 291.587570][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.597417][ T146] bridge_slave_0: left allmulticast mode [ 291.603150][ T146] bridge_slave_0: left promiscuous mode [ 291.610105][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.019858][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.032538][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.044045][ T146] bond0 (unregistering): Released all slaves [ 292.333323][T16889] chnl_net:caif_netlink_parms(): no params data found [ 292.551730][T16889] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.584763][T16889] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.592029][T16889] bridge_slave_0: entered allmulticast mode [ 292.599908][T16889] bridge_slave_0: entered promiscuous mode [ 292.633255][ T146] hsr_slave_0: left promiscuous mode [ 292.639968][ T146] hsr_slave_1: left promiscuous mode [ 292.646875][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.654316][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.662981][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.671302][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.694198][ T146] veth1_macvtap: left promiscuous mode [ 292.700429][ T146] veth0_macvtap: left promiscuous mode [ 292.706354][ T146] veth1_vlan: left promiscuous mode [ 292.712948][ T146] veth0_vlan: left promiscuous mode [ 293.203721][ T146] team0 (unregistering): Port device team_slave_1 removed [ 293.251872][ T146] team0 (unregistering): Port device team_slave_0 removed [ 293.445147][ T5848] Bluetooth: hci2: command tx timeout [ 293.721078][T16889] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.728707][T16889] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.736615][T16889] bridge_slave_1: entered allmulticast mode [ 293.743203][T16889] bridge_slave_1: entered promiscuous mode [ 293.782813][T16889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.823324][T16889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.878988][T16889] team0: Port device team_slave_0 added [ 293.893191][T16889] team0: Port device team_slave_1 added [ 293.943930][T16889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.951114][T16889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.981831][T16889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.002168][T16889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.010604][T16889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.037321][T16889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.092167][T16889] hsr_slave_0: entered promiscuous mode [ 294.100958][T16889] hsr_slave_1: entered promiscuous mode [ 294.117216][T16889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.126448][T16889] Cannot create hsr debugfs directory [ 294.662619][T16889] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 294.675376][T16889] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 294.690121][T16889] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 294.700405][T16889] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 294.805214][T16889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.847571][T16889] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.868265][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.875495][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.908018][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.915205][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.992701][T16889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 295.187605][T16889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.230569][T16889] veth0_vlan: entered promiscuous mode [ 295.243362][T16889] veth1_vlan: entered promiscuous mode [ 295.290411][T16889] veth0_macvtap: entered promiscuous mode [ 295.300548][T16889] veth1_macvtap: entered promiscuous mode [ 295.315954][T16889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.327801][T16889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.337979][T16889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.348556][T16889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.359727][T16889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.374426][T16889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.386401][T16889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.397709][T16889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.412714][T16889] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.422291][T16889] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.431469][T16889] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.440337][T16889] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.510736][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.525423][ T5848] Bluetooth: hci2: command tx timeout [ 295.531122][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.554122][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.564293][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.109237][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.365824][ T5147] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 297.377207][ T5147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 297.388489][ T5147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 297.397310][ T5147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 297.406319][ T5147] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 297.413807][ T5147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 297.451529][T16959] lo speed is unknown, defaulting to 1000 [ 297.517076][T16959] virt_wifi0 speed is unknown, defaulting to 1000 [ 297.608972][T16959] chnl_net:caif_netlink_parms(): no params data found [ 297.660866][T16959] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.668861][T16959] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.678403][T16959] bridge_slave_0: entered allmulticast mode [ 297.686070][T16959] bridge_slave_0: entered promiscuous mode [ 297.694005][T16959] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.701394][T16959] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.708655][T16959] bridge_slave_1: entered allmulticast mode [ 297.715861][T16959] bridge_slave_1: entered promiscuous mode [ 297.741932][T16959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.753456][T16959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.783828][T16959] team0: Port device team_slave_0 added [ 297.793111][T16959] team0: Port device team_slave_1 added [ 297.818383][T16959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.825520][T16959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.851818][T16959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.864171][T16959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.871315][T16959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.898429][T16959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.933482][T16959] hsr_slave_0: entered promiscuous mode [ 297.939705][T16959] hsr_slave_1: entered promiscuous mode [ 297.946034][T16959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.953599][T16959] Cannot create hsr debugfs directory [ 298.406598][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.642293][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.715975][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.876535][ T12] bridge_slave_1: left allmulticast mode [ 298.882303][ T12] bridge_slave_1: left promiscuous mode [ 298.891613][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.907894][ T12] bridge_slave_0: left allmulticast mode [ 298.913585][ T12] bridge_slave_0: left promiscuous mode [ 298.920045][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.300098][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.311567][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.323541][ T12] bond0 (unregistering): Released all slaves [ 299.459069][ T5848] Bluetooth: hci2: command tx timeout [ 299.764077][ T12] hsr_slave_0: left promiscuous mode [ 299.800374][ T12] hsr_slave_1: left promiscuous mode [ 299.807517][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.823994][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.835615][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.843067][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.889539][ T12] veth1_macvtap: left promiscuous mode [ 299.900110][ T12] veth0_macvtap: left promiscuous mode [ 299.908477][ T12] veth1_vlan: left promiscuous mode [ 299.913781][ T12] veth0_vlan: left promiscuous mode [ 300.432999][ T12] team0 (unregistering): Port device team_slave_1 removed [ 300.482994][ T12] team0 (unregistering): Port device team_slave_0 removed [ 301.043479][T16959] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 301.056524][T16959] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 301.067136][T16959] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 301.081604][T16959] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 301.253749][T16959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.315518][T16959] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.337272][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.344427][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.371074][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.378322][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.449213][T16959] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 301.527738][ T5848] Bluetooth: hci2: command tx timeout [ 301.598753][T16959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.637007][T16959] veth0_vlan: entered promiscuous mode [ 301.648552][T16959] veth1_vlan: entered promiscuous mode [ 301.672857][T16959] veth0_macvtap: entered promiscuous mode [ 301.682826][T16959] veth1_macvtap: entered promiscuous mode [ 301.698371][T16959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.709743][T16959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.720095][T16959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.730959][T16959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.742342][T16959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.759829][T16959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.771615][T16959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.783166][T16959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.796520][T16959] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.805803][T16959] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.815135][T16959] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.823906][T16959] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.895587][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.903432][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.931228][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.946841][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.711466][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.364300][ T5147] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 304.375595][ T5147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 304.387335][ T5147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 304.396592][ T5147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 304.405988][ T5147] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 304.413518][ T5147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 304.447506][T17002] lo speed is unknown, defaulting to 1000 [ 304.515516][T17002] virt_wifi0 speed is unknown, defaulting to 1000 [ 304.601274][T17002] chnl_net:caif_netlink_parms(): no params data found [ 304.652235][T17002] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.659793][T17002] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.668357][T17002] bridge_slave_0: entered allmulticast mode [ 304.676257][T17002] bridge_slave_0: entered promiscuous mode [ 304.683590][T17002] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.690912][T17002] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.698480][T17002] bridge_slave_1: entered allmulticast mode [ 304.708071][T17002] bridge_slave_1: entered promiscuous mode [ 304.734096][T17002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.748301][T17002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.777545][T17002] team0: Port device team_slave_0 added [ 304.785955][T17002] team0: Port device team_slave_1 added [ 304.805290][T17002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.812287][T17002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.838572][T17002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.853633][T17002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.860877][T17002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.887177][T17002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.921274][T17002] hsr_slave_0: entered promiscuous mode [ 304.927941][T17002] hsr_slave_1: entered promiscuous mode [ 304.933920][T17002] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.942271][T17002] Cannot create hsr debugfs directory [ 305.325055][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.418265][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.484185][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.628202][ T11] bridge_slave_1: left allmulticast mode [ 305.633919][ T11] bridge_slave_1: left promiscuous mode [ 305.641274][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.650931][ T11] bridge_slave_0: left allmulticast mode [ 305.657433][ T11] bridge_slave_0: left promiscuous mode [ 305.663680][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.058827][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.070450][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.082297][ T11] bond0 (unregistering): Released all slaves [ 306.485880][ T5848] Bluetooth: hci2: command tx timeout [ 306.594001][ T11] hsr_slave_0: left promiscuous mode [ 306.609351][ T11] hsr_slave_1: left promiscuous mode [ 306.620064][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.630097][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.639929][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.649805][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.673360][ T11] veth1_macvtap: left promiscuous mode [ 306.679064][ T11] veth0_macvtap: left promiscuous mode [ 306.684930][ T11] veth1_vlan: left promiscuous mode [ 306.690765][ T11] veth0_vlan: left promiscuous mode [ 307.194408][ T11] team0 (unregistering): Port device team_slave_1 removed [ 307.245295][ T11] team0 (unregistering): Port device team_slave_0 removed [ 307.845722][T17002] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 307.869402][T17002] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 307.892720][T17002] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 307.917586][T17002] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 308.111169][T17002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.145492][T17002] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.161602][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.168780][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.187976][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.195150][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.410261][T17002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.447164][T17002] veth0_vlan: entered promiscuous mode [ 308.457853][T17002] veth1_vlan: entered promiscuous mode [ 308.490886][T17002] veth0_macvtap: entered promiscuous mode [ 308.501911][T17002] veth1_macvtap: entered promiscuous mode [ 308.517208][T17002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.528577][T17002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.539236][T17002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.549904][T17002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.561117][T17002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.569926][ T5848] Bluetooth: hci2: command tx timeout [ 308.578407][T17002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.589171][T17002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.600742][T17002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.616246][T17002] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.625431][T17002] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.634663][T17002] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.643389][T17002] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.710190][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.730742][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.752085][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.761800][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.152355][T17048] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2896'. [ 310.649510][T17075] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2903'. [ 310.670958][ T1101] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.454130][T17096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2906'. [ 311.526048][T17101] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2906'. [ 311.766729][T17113] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2912'. [ 311.767534][T17111] ip6tnl0: entered promiscuous mode [ 311.809884][T17111] vlan0: entered promiscuous mode [ 311.818261][T17111] ip6tnl0: left promiscuous mode [ 311.918183][ T5147] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 311.938973][ T5147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 311.950661][ T5147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 311.960513][ T5147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 311.972653][ T5147] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 311.980896][ T5147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 312.058748][T17121] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2915'. [ 312.073957][ T1101] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.178126][ T1101] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.219300][T17118] lo speed is unknown, defaulting to 1000 [ 312.262838][T17133] netlink: 'syz.4.2918': attribute type 10 has an invalid length. [ 312.282420][T17135] netlink: 'syz.3.2919': attribute type 2 has an invalid length. [ 312.323988][ T1101] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.370445][T17133] team0: Port device netdevsim0 added [ 312.379192][T17135] bridge0: entered promiscuous mode [ 312.393193][T17135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2919'. [ 312.399802][T17118] virt_wifi0 speed is unknown, defaulting to 1000 [ 312.424986][T17135] bridge0 (unregistering): left promiscuous mode [ 312.704770][ T1101] bridge_slave_1: left allmulticast mode [ 312.710479][ T1101] bridge_slave_1: left promiscuous mode [ 312.747582][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.783081][ T1101] bridge_slave_0: left allmulticast mode [ 312.795945][ T1101] bridge_slave_0: left promiscuous mode [ 312.822059][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.986070][T17164] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2927'. [ 313.090029][T17153] x_tables: duplicate underflow at hook 3 [ 313.650979][ T1101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.661899][ T1101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.673769][ T1101] bond0 (unregistering): Released all slaves [ 314.095632][ T5848] Bluetooth: hci2: command tx timeout [ 314.393085][T17232] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2940'. [ 314.422600][T17218] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2939'. [ 314.542427][T17240] netlink: 'syz.4.2941': attribute type 39 has an invalid length. [ 314.592237][T17118] chnl_net:caif_netlink_parms(): no params data found [ 314.943138][T17254] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 315.023583][ T1101] hsr_slave_0: left promiscuous mode [ 315.046761][ T1101] hsr_slave_1: left promiscuous mode [ 315.070054][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.113694][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.123278][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.149822][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.168237][T17269] __nla_validate_parse: 2 callbacks suppressed [ 315.168258][T17269] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2949'. [ 315.206698][ T1101] veth1_macvtap: left promiscuous mode [ 315.212291][ T1101] veth0_macvtap: left promiscuous mode [ 315.225725][ T1101] veth1_vlan: left promiscuous mode [ 315.244852][ T1101] veth0_vlan: left promiscuous mode [ 315.404451][T17281] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2951'. [ 315.537794][T17283] netlink: 'syz.5.2951': attribute type 8 has an invalid length. [ 315.865570][ T1101] team0 (unregistering): Port device team_slave_1 removed [ 315.912104][ T1101] team0 (unregistering): Port device team_slave_0 removed [ 316.174813][ T5848] Bluetooth: hci2: command tx timeout [ 316.477819][T17265] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2949'. [ 316.679140][T17118] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.696824][T17118] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.711645][T17118] bridge_slave_0: entered allmulticast mode [ 316.721770][T17118] bridge_slave_0: entered promiscuous mode [ 316.758031][T17295] gtp0: entered promiscuous mode [ 316.764734][T17295] gtp0: entered allmulticast mode [ 316.789157][T17118] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.814214][T17118] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.831919][T17118] bridge_slave_1: entered allmulticast mode [ 316.841609][T17118] bridge_slave_1: entered promiscuous mode [ 316.979523][T17118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.012907][T17118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.198033][T17118] team0: Port device team_slave_0 added [ 317.230754][T17118] team0: Port device team_slave_1 added [ 317.283993][T17324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2960'. [ 317.325496][T17324] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2960'. [ 317.367160][T17118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.393055][T17118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.430676][T17118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.503965][T17118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.521064][T17118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.617967][T17118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.792967][T17118] hsr_slave_0: entered promiscuous mode [ 317.816115][T17118] hsr_slave_1: entered promiscuous mode [ 317.822333][T17118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.874321][T17118] Cannot create hsr debugfs directory [ 317.934432][T17359] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component [ 318.081052][T17370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2971'. [ 318.215136][T17376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2972'. [ 318.245820][ T5848] Bluetooth: hci2: command tx timeout [ 318.262425][T17376] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2972'. [ 318.992213][T17398] lo speed is unknown, defaulting to 1000 [ 319.022968][T17420] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2981'. [ 319.067236][T17118] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 319.124187][T17118] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 319.133817][ T25] hid-generic 0005:0458:0009.0003: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 319.186502][T17118] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 319.203772][T17118] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 319.285056][T17432] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2984'. [ 319.340897][T17398] virt_wifi0 speed is unknown, defaulting to 1000 [ 319.354835][T17425] netlink: 'syz.2.2983': attribute type 10 has an invalid length. [ 319.673433][T17118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.923425][T17118] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.002033][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.009246][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.076278][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.083473][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.142437][T17472] netlink: 'syz.4.2993': attribute type 11 has an invalid length. [ 320.177308][T17472] __nla_validate_parse: 2 callbacks suppressed [ 320.177324][T17472] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2993'. [ 320.325071][ T5848] Bluetooth: hci2: command tx timeout [ 320.363610][T17484] xt_l2tp: missing protocol rule (udp|l2tpip) [ 320.882514][T17118] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 321.017769][T17517] netlink: 'syz.2.3004': attribute type 30 has an invalid length. [ 321.027255][ C1] ------------[ cut here ]------------ [ 321.032760][ C1] WARNING: CPU: 1 PID: 24 at net/mac80211/rx.c:5396 ieee80211_rx_list+0x2bd5/0x38f0 [ 321.042227][ C1] Modules linked in: [ 321.046196][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.14.0-rc2-syzkaller-00154-g054e61bb1de4 #0 [ 321.056860][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 321.066991][ C1] RIP: 0010:ieee80211_rx_list+0x2bd5/0x38f0 [ 321.072950][ C1] Code: 90 e9 48 d8 ff ff e8 da ff 44 f6 e9 3e d8 ff ff e8 d0 ff 44 f6 e9 34 d8 ff ff e8 c6 ff 44 f6 e9 2a d8 ff ff e8 bc ff 44 f6 90 <0f> 0b 90 e9 1c d8 ff ff e8 ae ff 44 f6 31 c0 48 89 44 24 70 e9 b0 [ 321.092634][ C1] RSP: 0018:ffffc900001e7720 EFLAGS: 00010246 [ 321.098811][ C1] RAX: ffffffff8b7cb7a4 RBX: 0000000000000000 RCX: ffff88801daa0000 [ 321.106850][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 321.114917][ C1] RBP: ffffc900001e7950 R08: ffffffff8b7c8e03 R09: 1ffffffff28a8908 [ 321.122953][ C1] R10: dffffc0000000000 R11: fffffbfff28a8909 R12: ffff88806278e280 [ 321.131281][ C1] R13: dffffc0000000000 R14: ffff888027dcb0c8 R15: ffff888027dc8e40 [ 321.139341][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 321.148357][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 321.155000][ C1] CR2: 0000400000000280 CR3: 0000000061ea6000 CR4: 00000000003526f0 [ 321.163037][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 321.171095][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 321.179148][ C1] Call Trace: [ 321.182486][ C1] [ 321.185485][ C1] ? __warn+0x165/0x4d0 [ 321.189669][ C1] ? ieee80211_rx_list+0x2bd5/0x38f0 [ 321.193104][T17517] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 321.195011][ C1] ? report_bug+0x2b3/0x500 [ 321.195038][ C1] ? ieee80211_rx_list+0x2bd5/0x38f0 [ 321.195067][ C1] ? handle_bug+0x60/0x90 [ 321.215205][T17517] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 321.218387][ C1] ? exc_invalid_op+0x1a/0x50 [ 321.232696][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 321.237828][ C1] ? ieee80211_rx_list+0x233/0x38f0 [ 321.243066][ C1] ? ieee80211_rx_list+0x2bd4/0x38f0 [ 321.248455][ C1] ? ieee80211_rx_list+0x2bd5/0x38f0 [ 321.253804][ C1] ? mark_lock+0x9a/0x360 [ 321.258216][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 321.264158][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 321.269306][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 321.275367][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 321.281751][ C1] ? ieee80211_rx_napi+0xd6/0x3c0 [ 321.286882][ C1] ieee80211_rx_napi+0x18a/0x3c0 [ 321.291863][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 321.298375][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 321.303870][ C1] ? skb_dequeue+0x113/0x150 [ 321.308540][ C1] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 321.314608][ C1] tasklet_action_common+0x426/0x620 [ 321.321283][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 321.327210][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 321.333689][ C1] ? workqueue_softirq_action+0xce/0x140 [ 321.339446][ C1] handle_softirqs+0x2d4/0x9b0 [ 321.344255][ C1] ? run_ksoftirqd+0xca/0x130 [ 321.349006][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 321.354363][ C1] run_ksoftirqd+0xca/0x130 [ 321.358970][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 321.364114][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 321.369324][ C1] smpboot_thread_fn+0x544/0xa30 [ 321.374313][ C1] ? smpboot_thread_fn+0x4e/0xa30 [ 321.379458][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 321.385009][ C1] kthread+0x7a9/0x920 [ 321.389117][ C1] ? __pfx_kthread+0x10/0x10 [ 321.393751][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 321.399314][ C1] ? __pfx_kthread+0x10/0x10 [ 321.403956][ C1] ? __pfx_kthread+0x10/0x10 [ 321.408677][ C1] ? __pfx_kthread+0x10/0x10 [ 321.413317][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 321.418627][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 321.423856][ C1] ? __pfx_kthread+0x10/0x10 [ 321.428535][ C1] ret_from_fork+0x4b/0x80 [ 321.432991][ C1] ? __pfx_kthread+0x10/0x10 [ 321.437772][ C1] ret_from_fork_asm+0x1a/0x30 [ 321.442577][ C1] [ 321.445691][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 321.452990][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.14.0-rc2-syzkaller-00154-g054e61bb1de4 #0 [ 321.463582][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 321.473638][ C1] Call Trace: [ 321.476910][ C1] [ 321.479831][ C1] dump_stack_lvl+0x241/0x360 [ 321.484510][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.489705][ C1] ? __pfx__printk+0x10/0x10 [ 321.494284][ C1] ? _printk+0xd5/0x120 [ 321.498436][ C1] ? __init_begin+0x41000/0x41000 [ 321.503461][ C1] ? vscnprintf+0x5d/0x90 [ 321.507975][ C1] panic+0x349/0x880 [ 321.511883][ C1] ? __warn+0x174/0x4d0 [ 321.516046][ C1] ? __pfx_panic+0x10/0x10 [ 321.520472][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 321.525414][ C1] __warn+0x344/0x4d0 [ 321.529396][ C1] ? ieee80211_rx_list+0x2bd5/0x38f0 [ 321.534691][ C1] report_bug+0x2b3/0x500 [ 321.539047][ C1] ? ieee80211_rx_list+0x2bd5/0x38f0 [ 321.544444][ C1] handle_bug+0x60/0x90 [ 321.548614][ C1] exc_invalid_op+0x1a/0x50 [ 321.553121][ C1] asm_exc_invalid_op+0x1a/0x20 [ 321.557986][ C1] RIP: 0010:ieee80211_rx_list+0x2bd5/0x38f0 [ 321.563931][ C1] Code: 90 e9 48 d8 ff ff e8 da ff 44 f6 e9 3e d8 ff ff e8 d0 ff 44 f6 e9 34 d8 ff ff e8 c6 ff 44 f6 e9 2a d8 ff ff e8 bc ff 44 f6 90 <0f> 0b 90 e9 1c d8 ff ff e8 ae ff 44 f6 31 c0 48 89 44 24 70 e9 b0 [ 321.583566][ C1] RSP: 0018:ffffc900001e7720 EFLAGS: 00010246 [ 321.589647][ C1] RAX: ffffffff8b7cb7a4 RBX: 0000000000000000 RCX: ffff88801daa0000 [ 321.597615][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 321.605581][ C1] RBP: ffffc900001e7950 R08: ffffffff8b7c8e03 R09: 1ffffffff28a8908 [ 321.613549][ C1] R10: dffffc0000000000 R11: fffffbfff28a8909 R12: ffff88806278e280 [ 321.621526][ C1] R13: dffffc0000000000 R14: ffff888027dcb0c8 R15: ffff888027dc8e40 [ 321.629510][ C1] ? ieee80211_rx_list+0x233/0x38f0 [ 321.634705][ C1] ? ieee80211_rx_list+0x2bd4/0x38f0 [ 321.640002][ C1] ? mark_lock+0x9a/0x360 [ 321.644333][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 321.649794][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 321.654829][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 321.660821][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 321.667211][ C1] ? ieee80211_rx_napi+0xd6/0x3c0 [ 321.672230][ C1] ieee80211_rx_napi+0x18a/0x3c0 [ 321.677165][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 321.683489][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 321.688942][ C1] ? skb_dequeue+0x113/0x150 [ 321.693535][ C1] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 321.699528][ C1] tasklet_action_common+0x426/0x620 [ 321.704826][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 321.710634][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 321.716962][ C1] ? workqueue_softirq_action+0xce/0x140 [ 321.722592][ C1] handle_softirqs+0x2d4/0x9b0 [ 321.727355][ C1] ? run_ksoftirqd+0xca/0x130 [ 321.732031][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 321.737315][ C1] run_ksoftirqd+0xca/0x130 [ 321.741814][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 321.746932][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 321.752034][ C1] smpboot_thread_fn+0x544/0xa30 [ 321.756970][ C1] ? smpboot_thread_fn+0x4e/0xa30 [ 321.761998][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 321.767454][ C1] kthread+0x7a9/0x920 [ 321.771522][ C1] ? __pfx_kthread+0x10/0x10 [ 321.776113][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 321.781573][ C1] ? __pfx_kthread+0x10/0x10 [ 321.786157][ C1] ? __pfx_kthread+0x10/0x10 [ 321.790748][ C1] ? __pfx_kthread+0x10/0x10 [ 321.795332][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 321.800524][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 321.805715][ C1] ? __pfx_kthread+0x10/0x10 [ 321.810309][ C1] ret_from_fork+0x4b/0x80 [ 321.814721][ C1] ? __pfx_kthread+0x10/0x10 [ 321.819309][ C1] ret_from_fork_asm+0x1a/0x30 [ 321.824083][ C1] [ 321.827429][ C1] Kernel Offset: disabled [ 321.831745][ C1] Rebooting in 86400 seconds..