last executing test programs: 4m56.768576886s ago: executing program 32 (id=3722): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newaddr={0xa0, 0x14, 0x8, 0x70bd25, 0x25dfdbfb, {0xa, 0x18, 0x40, 0xc8}, [@IFA_TARGET_NETNSID={0x8}, @IFA_CACHEINFO={0x14, 0x6, {0xfffffffc, 0x7, 0xe, 0x8001}}, @IFA_LOCAL={0x14, 0x2, @private0}, @IFA_CACHEINFO={0x14, 0x6, {0xe, 0x6, 0x3, 0x10}}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFA_ADDRESS={0x14, 0x1, @remote}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_LOCAL={0x14, 0x2, @empty}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20040000}, 0x240080c1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x208a0000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r2, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x20008081) r3 = socket(0xf, 0x2, 0xfffffff2) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000440)=0x1, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x78, r4, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x100}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_TX_RATES={0x30, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6, 0x3, 0x6c, 0x9, 0x16, 0x5, 0xc, 0x12, 0x2, 0x5, 0x4, 0x2, 0x30, 0x3, 0x48, 0x5, 0xc, 0x2, 0x24, 0x60, 0x16, 0x24, 0x1b, 0x18, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8084}, 0x40000) r5 = socket(0x25, 0x80000, 0x120000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000600), &(0x7f0000000640)=0x4) r6 = syz_genetlink_get_family_id$fou(&(0x7f00000006c0), r3) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000780)={'gre0\x00', &(0x7f0000000700)={'erspan0\x00', 0x0, 0x10, 0x7800, 0x5, 0x9, {{0x18, 0x4, 0x2, 0x3, 0x60, 0x67, 0x100, 0xff, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0xbb, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0xd}, 0x1}, {@remote, 0x2}]}, @rr={0x7, 0x7, 0xda, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x2e, 0x3, [{0x1, 0xa, "76ddcedb66f8b7bd"}, {0x7, 0x5, "bac336"}, {0x2, 0x2}, {0x2, 0x12, "5ea785cc894df892e0275c6fc3ceae90"}, {0x2, 0x5, "4f06e1"}]}]}}}}}) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x50, r6, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x50}}, 0x0) writev(r5, &(0x7f0000000900)=[{&(0x7f00000008c0)="e07f1389e6f4da8f494c3007c044154b73c1", 0x12}], 0x1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000980)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000009c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, 0x0, 0x74c, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000804}, 0x20000800) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x6c, 0x3, 0x3, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x10}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x72d}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x3}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x2}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x1000}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0xffffffc0}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x9}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44}, 0x4008000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000c00)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000c40)=0x14) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000c80)={r10, 0x7}, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sendto$packet(r5, &(0x7f0000000cc0)="6c791e2aa49464cc9827d39a531572aaeaa926c65c714c306411c3df2f74ef10bfef8a51413c0f6d0614c76c5cfa5c20ea3cb2bf67ee139d6d4c1fc7b33be5d388065720616347312c80599dd721d2d71e2d5fea41fdb801764856f53dcd51485438422216dcf04fa59c82ecc6ed5c45821403c5d384c46045342129", 0x7c, 0x0, &(0x7f0000000d40)={0x11, 0x9, r7, 0x1, 0x5, 0x6, @remote}, 0x14) r11 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r11, &(0x7f0000002600)=[{{&(0x7f0000000d80)=@caif=@util, 0x80, &(0x7f0000001000)=[{&(0x7f0000000e00)=""/155, 0x9b}, {&(0x7f0000000ec0)=""/121, 0x79}, {&(0x7f0000000f40)=""/187, 0xbb}], 0x3, &(0x7f0000001040)=""/62, 0x3e}, 0x5}, {{&(0x7f0000001080)=@can, 0x80, &(0x7f00000022c0)=[{&(0x7f0000001100)=""/197, 0xc5}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/152, 0x98}], 0x3}, 0x9}, {{&(0x7f0000002300)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002380)=""/235, 0xeb}, {&(0x7f0000002480)=""/189, 0xbd}], 0x2, &(0x7f0000002580)=""/83, 0x53}, 0x9}], 0x3, 0x2000, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000002780)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x20, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40048010) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000002800), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002840)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x5c, r12, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x5c}}, 0x20004040) 2m55.751926923s ago: executing program 4 (id=5197): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r1 = gettid() r2 = gettid() sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="c900f20097f05aa4b225b7dcb61441680807cff489bf2d569d436fde20e92b28d0ccb91bd4779b9ae6d5243b5b02bf3ae3a7b6207f9c27e32ddd80716438bdb1aab0f271d96a52c41de2ac2cab5e3e2f21be31866179df85a0559d9ef03c40b1bd48b00fb473619dd8a5b6b08e982c0cb230d2c520957e00aed0ead0866d28bf5982365c3285d8a7cd4604b50f06d76adb9ac72bbf4288910894521737755bee246a4e64ebecbe18258b696e6ab027a379aeb42f9eb621a142fff6fdb816eb13787dd801b135a30ee600000008003800", @ANYRES32=r2, @ANYBLOB="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"], 0x430}}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c076f2c6014f5d219221d80481aed108a2cb749a807133ed7a80ffe060000000a2bcb503ca00000f7f8900000020000000", 0x76}], 0x1) r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x800) setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000080)={@multicast2, @multicast2}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) 2m55.447811174s ago: executing program 4 (id=5201): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000007100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="9433ddb02192333d0ddf82345dd51f69e790c9aa6b7a2dd9f3d62389ae3f5de6958517ffa2604658020102be1ff80346a75e730a563a3c399a69", 0x3a}, {&(0x7f00000002c0)="d528114f7555af2259f49941fa70efaf87cfeb690e915573a720c22cc7f5d76d2a", 0x21}, {&(0x7f0000000300)="1e7dcf6c7d328f08118be502714b26ffb667cfaa99e9b1d73a76001675d56fd8840bf93f2f35", 0x26}], 0x3}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r2, 0x8b2a, &(0x7f0000000040)) r3 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000140)={@loopback, 0x6, r6}) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c9, 0x0) sendmsg$nl_route(r5, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=@delnexthop={0x38, 0x69, 0x10, 0x70bd28, 0x25dfdbfd, {}, [{0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044800}, 0x80) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0xf0d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x400}, @TCA_PIE_LIMIT={0x8, 0x2, 0xad3}, @TCA_PIE_BYTEMODE={0x8}]}}]}, 0x48}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) syz_emit_ethernet(0xf87, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@routing={0x84}], "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"}}}}}, 0x0) 2m55.050426697s ago: executing program 4 (id=5205): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c000104000000000000000002000000", @ANYRES32=r1, @ANYBLOB="200008000a000100aaaaaaaaaabb000005000c000400000008000f0001"], 0x38}}, 0x0) 2m54.652693551s ago: executing program 4 (id=5209): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000000000000000000903000000010000000000000f03000000000000000000000202000000005f"], 0x0, 0x3f}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x4}, {0xc}}}, 0x24}}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket(0x8, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000140), &(0x7f0000000000)=0x8) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) 2m53.923725096s ago: executing program 4 (id=5216): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a540000d90200000100000480240001800b000100736f636b65740000140002800800023f00000000080001"], 0x7c}}, 0x10) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) accept4(r1, 0x0, 0x0, 0x80800) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e0000"], 0x50}}, 0x4000000) 2m53.547227917s ago: executing program 4 (id=5219): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) recvmsg(r1, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r1, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r2, 0x0, 0x1}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m38.456941524s ago: executing program 33 (id=5219): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) recvmsg(r1, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r1, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r2, 0x0, 0x1}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m36.631492962s ago: executing program 5 (id=5455): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x578, 0x1a0, 0x3f8, 0x2b8, 0x0, 0xd0, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, [0xffffffff, 0xffffffff, 0x7f000101, 0xff000000], [0xffffff00, 0xffffffff, 0xff000000, 0xff000000], 'pimreg\x00', 'veth1_to_bridge\x00', {}, {}, 0xfd, 0xff, 0x2, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x5, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@private=0xa010101, 0x21, 0x3b, 0x200}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x9, 0x2, 0x1, [0x8, 0xff, 0x10, 0x1, 0x2800, 0xc, 0xfffb, 0xff93, 0x7, 0x0, 0x81, 0x6, 0x0, 0x5, 0x7f, 0x200], 0x10}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x3, 0x2, 0x17c, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000340)={0x1d8, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@generic="e6695f9d773eea84765021803996e5f7e110dc55716a479ffc00e979f122987f5e7b1cf738b09091e9c4ebd9ab76b3dd73e1593f377eb2222da9918529cad22766d457124dd0555da893c4125a00d2b21bbea92b7298840e989d0c548ad2fab25286805709b272a10da192ec83bbc4df622622992b10d8d2fd7e6be96e4976172ba2b79936b7ba7bcf4cd65db238e65e808aec2c8e715b8f4fa1f05d6028c2aae72535", @nested={0x11e, 0x6, 0x0, 0x1, [@typed={0xdd, 0x14d, 0x0, 0x0, @binary="0f46f1849e80333a72c47c602d9970739272ca25d0ed59ba2d54f2dbf1ce1d4305d0ef433df7b8370107edbc85bfb216efdc1b0b64d6a716ab6d8204ff7498a0d528471596a2bffd9f39f5d68ca46f729302ab4cb1bca132d999b0a04b1ddb2404cb28de890a87617e79217b4cafbcb340e885260db96e23db715cecc61ce445ad06cf189c29e6fb925cc6f1c5db4e1f43cd4f582f94a84bf0152dfada7b9826bbbfd394d745fd122010a19f7c2e459f59c5e8cccc8d9d0124b01020e16d5fa1f4882dc1043dec61df7983901630639c97157316c9285b79ba"}, @generic="37c14f9a8ead341bf43ea3970236c74b2e318966b7420623d7f5c9fde55324d4c519e80f9f4d6b22b3f1b672c61240c38914eb560eb9ca62fa58"]}]}, 0x1d8}}, 0x0) 2m36.375320292s ago: executing program 5 (id=5459): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRES64=r1], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a300000000008000340000000011400000011000100"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)={0x1c, 0x15, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40884}, 0x0) r2 = epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000040)={0x2000000f}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010101}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000881}, 0x4054) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2d, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb13a}, {}, {}, [@call={0x85, 0x0, 0x0, 0x11}, @jmp={0x5, 0x1, 0xd, 0xb, 0x3, 0x2, 0x8}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xd}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffe}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x31}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1], 0x0, 0x10, 0x8}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000009e00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000940)=@newtfilter={0x51c, 0x2c, 0x4, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xd, 0x1}, {0x9, 0xfff3}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x96, 0x7}}, @filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x5, 0x7ff5}}, @TCA_BPF_FD={0x8, 0x6, r5}, @TCA_BPF_FD={0x8, 0x6, r6}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @filter_kind_options=@f_flow={{0x9}, {0x4b4, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x3}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_XOR={0x8, 0x7, 0xfff}, @TCA_FLOW_POLICE={0x498, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7f}, @TCA_POLICE_RESULT={0x8, 0x5, 0xff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xd7}, @TCA_POLICE_RATE={0x404, 0x2, [0x283e52bd, 0x101, 0x8, 0x1, 0x7, 0x1, 0x7365, 0x10000, 0xfff, 0x5, 0x8001, 0xb, 0x0, 0xb, 0xffffffff, 0x90a, 0x4, 0x2, 0x7, 0x4, 0xf9c, 0x3, 0x2, 0xfffff800, 0x0, 0x3, 0x4, 0xc, 0x4, 0x1, 0x5, 0x1ff, 0x7, 0x9bf5, 0x9, 0x5, 0xffff7593, 0x6, 0x7, 0x2, 0xd, 0x9, 0x8, 0xe, 0xf72c, 0xc, 0x3, 0xcb, 0xe36b, 0x7fffffff, 0x5, 0xfffffff7, 0x9, 0xfffffffd, 0x5, 0x17adf7b6, 0x3, 0x4, 0x6, 0x6, 0x101, 0x2c, 0x2, 0x7, 0x9b6, 0x1, 0xbb3, 0x2, 0x101, 0x3, 0x8, 0x6, 0xe4, 0x5cd3, 0xf0, 0x1, 0x10, 0x5, 0x7, 0xffff, 0x7, 0x1, 0xfffffbff, 0x1, 0x6, 0x36, 0x0, 0x4, 0x6, 0x3, 0x4, 0x10001, 0x1000, 0x9, 0x8d, 0x0, 0x10001, 0x97, 0xfffffffe, 0x3, 0x1, 0x80000001, 0x6, 0x5, 0x7, 0x4, 0xffff7d7b, 0xffffffff, 0x4, 0xa, 0x10, 0x7, 0x4, 0x1ff, 0x1, 0xc203, 0x80000000, 0xb, 0x410, 0x1d4, 0x1, 0x57f, 0x9, 0x2, 0xcda0, 0x1, 0x4, 0x3078, 0x200, 0x1ff, 0xfffffff7, 0xa, 0x0, 0x7, 0xe, 0x5032, 0x1e, 0x0, 0x1, 0x200, 0x5, 0xff, 0xe116, 0x6, 0x401, 0x8, 0x6, 0x1, 0x10001, 0xa65, 0x5, 0x6, 0x4, 0x32d8fcc, 0x7c7, 0x7fffffff, 0x200, 0x3, 0x1, 0x800, 0x80, 0x4, 0x0, 0x10, 0x59a, 0x101, 0xb, 0xe, 0xb82, 0x5, 0x2, 0x8, 0x13, 0x8, 0x7, 0x5, 0x8, 0x0, 0x5, 0x80000000, 0x0, 0x401, 0x2, 0x1, 0x7ff, 0xffff0001, 0x1, 0x1, 0x0, 0x2, 0x0, 0x3ff, 0x101, 0x9, 0xe, 0x800, 0x1, 0x800, 0x280, 0x1, 0x1, 0xe21, 0xd, 0x9, 0x80000001, 0x8, 0xa, 0x4, 0x0, 0x401, 0xb758, 0x3, 0x7289237a, 0x1, 0xffffff76, 0x0, 0x6, 0x4800000, 0x48e5, 0x4, 0x81c, 0x0, 0xeec4, 0x6, 0x4, 0xffff0eee, 0x7, 0x3, 0x3, 0x4, 0x8, 0x5, 0x8, 0x3, 0x2, 0x5, 0x1ff, 0x3ff, 0x1, 0x0, 0x401, 0x6, 0xa, 0x100, 0x6, 0xc, 0xffff, 0xc, 0xffffffff, 0x92, 0x8, 0x1000, 0x1ff, 0xfffffffe, 0x5, 0x7ff]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd, 0x7, 0xf2a, 0x79, 0x3ff, {0x6, 0x0, 0x1, 0x8000, 0xfff, 0x51e}, {0x5, 0x1, 0xf, 0x7ff, 0x0, 0x1}, 0x10, 0x200, 0x200}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfa86}]}]}}]}, 0x51c}, 0x1, 0x0, 0x0, 0x5}, 0x20000034) 2m35.672907375s ago: executing program 5 (id=5468): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x23, 0x5, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000140)) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local}) (async) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x36) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="8500000022"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept4(r1, &(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x0, 0xc0800) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000004c0)='veno\x00', 0x5) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) (async) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x8, &(0x7f0000000780), 0x4) (async) connect$tipc(0xffffffffffffffff, &(0x7f00000052c0)=@nameseq={0x1e, 0x4}, 0x10) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r4, &(0x7f0000000000)="3b8d9099ca21c3f54fd7f979b13e5d3e6868d696395842a5813cf8e0a0af5568a2f3363f0f0c9c52c27d130623cce65736d35492b9a86dad9b4120837d1c0084cd4b3e35a5a16a720b9556e44ad62d529e678faece7f6d5a32f9", 0x5a, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) shutdown(r4, 0x1) (async) socket(0x10, 0x80002, 0x0) (async) socket(0x10, 0x803, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) pipe(&(0x7f0000000600)) pipe(&(0x7f0000000500)) socket(0x2, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYBLOB="00000080002bf7fa3ad1377133000000000000f5c18cbb59aee070c157dbd800", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) 2m35.343631596s ago: executing program 5 (id=5472): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc8, r0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff2}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x46}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ad9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0xc8}, 0x1, 0x0, 0x0, 0x1}, 0x84) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x200, 0x70bd29, 0xfffffffa}, 0x14}, 0x1, 0x0, 0x0, 0x40008d4}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r1) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x88, r2, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000004}, 0x40) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2080001}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x8c, r2, 0x400, 0x70bd26, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x200}, {0x6, 0x11, 0x6d2}, {0x8, 0x15, 0x7f88}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008010}, 0x8000) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000640)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000680)="fb7a8ab70b9aa1fecc878b411717c86a5d3517f9fbee05aa086c506cc811c8427a1809675a33724376fc0d570ae02ece8e8b6ead95bfe20000f6349850f50c2635fc2123e70ab32fa3f20a7011a9d20e56bef851abe66b4a61afc6d315dd5abb0ea1ed3a2c0a5ed185100163ca0efabfbec7922c86679f9dfad41a128b0947af1289aab76ec965b7312f2d9590ee959e3182aaa3b62afc94b88b37754356d596bbd942a0a2446cb5e0ef607b9aa0a142ae13404a2b837cd66261ef9bff15db", 0xbf}], 0x1}, 0x40081) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f00000007c0)={0x1, 'wlan0\x00', {}, 0x4}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x40, r4, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0xc040}, 0x4040800) r6 = accept4(r3, &(0x7f0000000980)=@x25={0x9, @remote}, &(0x7f0000000a00)=0x80, 0x80000) read$alg(r6, &(0x7f0000000a40)=""/27, 0x1b) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r1) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000b80)={&(0x7f0000000a80), 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x2c, r7, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x2000c890) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000bc0)={r6}) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000c40), r6) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x30, r9, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r8) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r10, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, r11, 0x100, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40011}, 0x80) pwritev(r8, &(0x7f0000002240)=[{&(0x7f0000000e80)="3667db44299262c29bd885f18c8144eba0f6e19d6de9acf84a1b500c34d3b8c0ffc9ecde991880bb4c34ebf626891d43b16e0b62450e6e5cd2d098952dc50ca12a9867810d271467e4f353400a36aea364e1f7f1c9b8bba775283ee5100cf51684117b105f2ddc21a228b06eab5ab1b9d819", 0x72}, {&(0x7f0000000f00)="409cdf0de84a6a6856b4fe982eaefb8ddac847e0166a01d9d62dc63fa264d31afa7c55ebda9bddee2337723f1d9a6448b04e4c19bb210294694c7331ac9d67a48cd1b77fccb0c4ce0c22d2a2d3de4c17005739052d5e9ca09d01b21766a2e970395c874b171e86ca3b28bca764c2614d60df3f1c3c707dbd2a87132cd21e64e0bb8b0958ab04b4402fd6ea8bda6fa2a0b26fe9643887cd981738eafc36b158ea18157e546c6b4e9f3ace923da45b9fcbc47992bd2f7cb40e32", 0xb9}, {&(0x7f0000000fc0)="2a24de8493ceb383bae717ab5030de7a4f8468c001ef2025688d3443385bd7829aa8e659c67b3dda4cd51d162b70ec54d3214a0dd46c38c6feb26ee7a60f2a4ad7731f4dc5a57b52c00c99eaaa9e6ae44bfeffc474712a", 0x57}, {&(0x7f0000001040)="c54c85057602b84c3a10e0e34df0dfa27b37ae961d0888d2f27b6b9e73a29f03fdd482ae31a5c0336c21b50542f55bee51cc38c6a751a7b099f8d220d02f8bba2ff5692eccf85ae24a112636ceff9ed079023c094d85b629e6396f4417d7ae1a85fdd35b05e0634f920ebc6859a8944a03d8d1ea5e237c9f3a3dae651a9a525f24facdf3b93758aa59df9d2d4b798d210bbf689e8ba1862e2e6de0fda5c01c39203b34f3d010329acacc0bc5db87dad2d56abd164c124f0446a33e6bdea15ac9877d8d84357037fe9c29e8cac993adc6dcfc77aa91", 0xd5}, {&(0x7f0000001140)}, {&(0x7f0000001180)="881716603d619f5a1611e236708e33b9ccb653160be6429f660ef337b60c37cd81f1b03db7322308ed4fd8efae440e32d144fa6124038a5926300f6a3a5a612448c8414420adb1e552fbfeff7a9cab3613139ce184140ac998334221d1939afed6a86ba5c999ab7ef19ec1be9869d994b12db97af62286a967c7fba6557025d96e16e56a9fa94f300249f0ea8944e0b5c430f2728c08a934469a237bc798435d088214ca97df6d25451c0ac1e444c60e65e4e64b162e301ca0958c", 0xbb}, {&(0x7f0000001240)="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", 0x1000}], 0x7, 0x4, 0xf0) r12 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_wireguard(r12, 0x8933, &(0x7f00000022c0)={'wg0\x00'}) sendmsg$NL80211_CMD_DEL_PMK(r10, &(0x7f00000023c0)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x2c, r7, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) socket$qrtr(0x2a, 0x2, 0x0) ioctl$FS_IOC_GETFSUUID(r6, 0x80111500, &(0x7f0000002400)) write(r8, &(0x7f0000002440)="936a32bff303b881a04ee0820747a7b1934ec9005211137fb656ed5ae3ded83b39e0b3dc63a6afdf9253471f5c925b9b20", 0x31) 2m35.064071238s ago: executing program 5 (id=5473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x4020940d, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x7a, 0x0, &(0x7f0000000180)=0x57) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private0}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [], {0x35}}, 0x28}}, 0x40004) 2m34.718566674s ago: executing program 5 (id=5477): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x3, 0x2}}, 0x14}}, 0x0) r1 = socket(0x1e, 0x805, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x80, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x54, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @multicast2}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r1}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x2}, @IFLA_GTP_LOCAL6={0x14, 0x8, @local}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL6={0x14, 0x8, @empty}, @IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}]}}}]}, 0x80}}, 0x0) 2m31.767125896s ago: executing program 1 (id=5504): syz_emit_ethernet(0x26, &(0x7f0000000040)={@broadcast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}, "90e2a72a"}}}}, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASK={0x4}]}, 0x1c}}, 0x0) 2m31.650072877s ago: executing program 1 (id=5505): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000003500), &(0x7f0000004e00)=0x4) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={r3, 0x54b}, 0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r3, 0x200, 0x1, 0x4, 0x80000001, 0x80000000}, 0x14) 2m30.701546568s ago: executing program 1 (id=5515): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c200000000000c0000000b00450000240000006740bfb61df951568d43b685340747000073907800000300e00000010097ad82c2e3b7e8b8e2662cc2f13964cd055967bfd89982d0979d0aaf1cce474d8fc0fab93bdcb1b5cbe342c6511902753a80525a4d809d555d28bdd3015f517de0c701659a793e884487cf234dc60d5be112315d9a6ecb1c53af"], 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x7f, 0x7, 0x7, 0x32, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x7, 0x10, 0xa8000000, 0xfffffffa}}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002b80)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xffeb, 0xfff3}, {}, {0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x13a5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008080}, 0x20000000) recvfrom$l2tp(r0, &(0x7f0000000040)=""/70, 0x46, 0x0, 0x0, 0x0) 2m29.729603523s ago: executing program 1 (id=5522): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b000000000000000000000f06efcb6143939a5467695a724b00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000007000000000000000080000085000000750000b99500000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x3, 0x5, 0x5, 0x10024, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x5, 0x0, 0x3, 0xb, @void, @value, @value=r2}, 0x50) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000008, 0x8032, 0xffffffffffffffff, 0x0) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) write$nci(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="fa4fc90110021febe29efe28447db46732ca61e653bacd5824525797fd488775ee8adaa9cde358369014d96fa644e4d855578c36247f103650b6bf3f739ca7128ef5b8d71c827dc8c194f912a24d28c613791a63f1b4a0898a5df3b2033b3ec735d713e735d32a33c1f168df6dff0e30d63bb7928a4269ded860494ecf49ad52708f03aa2c1c047c3543319d60c094f3639fcf4e355c9e92a81d617d1d2c06850d8b33ed99d82311bf06bb9eceacb810d58aedd6a3b07229524509d0b37652c588f45a2e8666074dc6373574cb1c30b20529b8a4c379b2"], 0xfffffffffffffdbf) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x80800) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r9, 0x84, 0x6d, &(0x7f0000000280)={0x0, 0x1e, "1e9c88db288ff2c5ad18a16d39be51ca08bf4a7c14853eb5d99a0ef42372"}, &(0x7f00000002c0)=0x26) getsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000300)={r11}, &(0x7f00000003c0)=0x8) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000400)={r11, @in6={{0xa, 0x4e24, 0xa, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}, 0x6, 0x100, 0x9, 0x101, 0x1, 0x0, 0x40}, &(0x7f0000000540)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000580)={r12, 0x6, 0xc}, 0x8) recvmsg$unix(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000100)=""/151, 0x97}], 0x1}, 0x10020) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x9, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0xfffffffffffffefb, 0x9, 0x1, 0x0, 0x3931}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4008000) syz_init_net_socket$rose(0xb, 0x5, 0x0) 2m28.63572889s ago: executing program 1 (id=5535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x350, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x280, 0xffffffff, 0xffffffff, 0x280, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'nicvf0\x00', {0x8}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @broadcast}, [0xffffffff], [0x0, 0xffffffff, 0x0, 0xffffffff], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x148, 0x190, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xa, 0xfffffffc, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0xd0, 0x20}}}, @common=@hbh={{0x48}, {0x6, 0x9, 0x0, [0x7, 0x8000, 0x100, 0x1, 0x80, 0x5c, 0x9, 0x2, 0x8, 0x1, 0x7ff, 0x1e, 0x6, 0x5, 0xcb5], 0x6}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x12, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3b0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000000903010000000000000000030000003c00020006000340000000001400018008000100ac1414aa49747350ac1414aa0c00028005000100210000000600034000010000060003400001000008000640000000000800064000000001"], 0x60}}, 0xc0) 2m28.395750875s ago: executing program 1 (id=5538): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x5, 0x32, 0xffffffffffffffff, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r0}, 0x18) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m19.457245205s ago: executing program 34 (id=5477): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x3, 0x2}}, 0x14}}, 0x0) r1 = socket(0x1e, 0x805, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x80, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x54, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @multicast2}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r1}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x2}, @IFLA_GTP_LOCAL6={0x14, 0x8, @local}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL6={0x14, 0x8, @empty}, @IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}]}}}]}, 0x80}}, 0x0) 2m13.376773162s ago: executing program 35 (id=5538): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x5, 0x32, 0xffffffffffffffff, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r0}, 0x18) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m50.910496119s ago: executing program 6 (id=5915): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000034400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c0002800500160001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m50.704067349s ago: executing program 6 (id=5917): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x7, 0x0, 0x20, 0x0, @in={0x2, 0x0, @rand_addr=0x64010101}}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d6}]}, 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) (async) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1m50.458651894s ago: executing program 6 (id=5919): syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x6, r0}, 0x38) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r4, 0x0, &(0x7f0000001780)=""/4096}, 0x20) setsockopt$inet_int(r2, 0x0, 0x18, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d80000001c0081044e81f782db44b9040a1d080214000000020003a118000c000300000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000fdbccf137789dd5e3df5fc6047a353000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbefa4d14c5fb28a070c", 0xe0}], 0x1, 0x0, 0x0, 0x7400}, 0x400d0) 1m50.178527519s ago: executing program 6 (id=5921): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0xffffffffdffffffa, 0xe2, 0xd7b3}) ioctl$TUNSETOFFLOAD(r1, 0x5421, 0x0) 1m50.022564139s ago: executing program 6 (id=5922): r0 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r0, r0, 0x0, 0xa7b) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400000000", @ANYRES32, @ANYBLOB="04000d80080005"], 0x24}, 0x1, 0x5502000000000000}, 0x0) 1m49.743763139s ago: executing program 6 (id=5924): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x18, &(0x7f0000000240)=0xf92, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r1, 0x0, 0xfaf}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r1, 0x0, 0xfaf}, 0x18) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r3, 0x10c, 0x5, &(0x7f0000000000), 0x4) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0xac, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x84, 0x6, "b64cdb26e6fad61e1a3a9eecbb6357963d67f6c6c8350c59cd37f003a48cd6b246bfdba919e297ccfdd1a4a105a8efd800ec19b357774b2dda994a2930f97af43bf1eb020df33476b14f882fffaa5420a8961598f8f3b3a3d6c62b2675bf44068af43f4b69afe4609d0774d71f83a5b69f0abcce601fb3d65113484ddf969f0f"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x58, 0x3, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0x2a, 0xc, "143a50e19516a27a3507a6a58d1783afc138950386dc75992221d8a1ba38629141e282878c28"}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWOBJ={0x84, 0x12, 0xa, 0x201, 0x0, 0x0, {0x1b, 0x0, 0x9}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_DATA={0x70, 0x4, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xffffffffb8041461}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000000}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xff}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x1232}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7bcf}]}}, @NFT_MSG_NEWSETELEM={0xb4, 0xc, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x88, 0x3, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_SET_ELEM_USERDATA={0x5b, 0x6, 0x1, 0x0, "82967a4c850f1c40be0d4d95cff4a5b57c1e0211a38d6712a14bd6d6b8b7769efea3570838f6cdcb82065c4043620d19712bc70b49664811b90ca94d59b4d328a5fdd00bd7b6f9c50226635f89c156aa44926af0962bee"}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2000000000000}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0xa30, 0xc, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x9d8, 0x3, 0x0, 0x1, [{0x2f0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x2ec, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xce, 0x1, "fd5c385e65c269312a101c5de2813ab38d665b3703322e044df67c871770fe3bac50331c87bae8531cc2bc90a2deb209633094f9b186d6bc8f4adac8b3b36a2af7ceb38ff440c0000842cc00820b80432de57cc857324c247cab9a3f8a798f7ea1c474639c0ec2ea0d17ecb640a0e16a81f090af6cc2e97104df1a2c5c24abc71b7684946f1a81146172ba12d378925f728092d1372e30eff559418ba3b9d67abcca1aacd91576125cf1a03eba6f905811ecb50c046a16263a43640d502f0621e8d16497dd1ec6bc7a8f"}, @NFTA_DATA_VALUE={0xb5, 0x1, "dac650c0188e5ee1ba95a0924eb68b75385596ad172349199b33a2dc90595d5ac8692710c6ce74dd360b93a43f6bdb11c1e03f6c7e1b5ea982985c0dc5f827f6ff98af4be640b2604e3c10c0d268aa48edbbad54f2e183b34072c2f21be47fd3b9d88a58784a9cae6aa0ffd2dc780cf546551fbba4038b7a3707ed34cfaca9e390f974e042d88faa366b4e2f21fbfafae2019118b8f4897cd8ceb5b1708e35db0d31757c052f50db8cbb22fd6b785f6ff9"}, @NFTA_DATA_VALUE={0x3b, 0x1, "81f45547a0bcedd14f4ab1f0d0197f37c1d36ec050e2c71d47dc9083a475c5964391412f17445b2f7579602223e5cfe24295634de0821d"}, @NFTA_DATA_VALUE={0xc4, 0x1, "566ab328e046ecb26705032fc7e5a26f6f94178cbea1f3d30d49666af66d304157437c322ae40eddd0734e53cb3e071fe6f39fe44a0de29958ae1a687abfca18f2e56212b42bd814e928beaaef7d48c41018bd4d61cdbddb8c945065ba97a8d20494374b39b05b2362923c4d3f4108176077f28a358cadea9aa86561ff14a0e77fbb8ec673b1c46f1bfc9f5c15b090dc8d1c2fd2b8dda8803f3b76a740c958daa2ac0ab9ba52c930b15caf88613d39944ae7f8d7725455cd216ecae12b404efd"}, @NFTA_DATA_VALUE={0x4c, 0x1, "4cc5dc1d81c39f8dcc63c55cfac7ccce1dfa532618c91dfe41e411d97f3f049f6f425c620a4a2c5958dad7c1ea13ee2b80ba91d4d9d139eec3be31a7b9f05982198e816387fe9a59"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}, {0x310, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPRESSIONS={0x144, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xab}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xf}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, {0xcc, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc0, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x98, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x35, 0x1, "763fef143e1a540c58f5ca139b995ba59c440e912b76cd9a3849344771b2a14183b9b698c647d29dec0d9d1b283ee812c8"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_DATA={0x4}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x1bc, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x4c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x11c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x108, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_IMMEDIATE_DATA={0xf4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x32, 0x1, "fe3b776907f81d79b14c3141842d29532a746216ef39e8568aa3b3fb65c45e05304d766472620d8e98f4fc372ca2"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xf, 0x1, "199b6a18f4d6e62d333f82"}]}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}]}, {0x1e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1d8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x36, 0x1, "580f17afa68a5046a217f1eb5ef63611f49438cff0c7aa09ebe83f7c5687ffd151d41766b2dcfb5ecd26bedb39cd9c05c0f8"}, @NFTA_DATA_VALUE={0x78, 0x1, "9dfeb82d04c3557ac2c5892f23e6fc898385c04c1513355a7b99c20d29e15a20d624265ee3bd9511f58af3c303fc04db8efdad17d7749da0c3703a3fd1b5368790b5f8013cc3f2be9edc9ff95246989c33cb01a74e89ca3b147967f6698fc8e7a52dfc2f7d858d534315ae0010e81b70d86019ee"}, @NFTA_DATA_VALUE={0xa6, 0x1, "813a290f92b81aef22c23a9c3363a7d60f6b11678b133434027ece301e0796c3df49fd7bc6b79473e77b7644a2ccfb9e2dd8768128a2f7933df184766871f3af5532e263c5770342c33ca2e22fbb2fd799cb0c66facfcae0465e89ddc865ce2f9daed33599c87fe53f0f90a867517e75c3ff2a2ed01d8c6bd52d5c15b285240dcddf9d62f333d1cc86d18315f4edb262b05bac1b3daab6f9a040d077d2f32b2094e1"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}]}, {0x198, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x168, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x29, 0x1, "70382f6f6d3a08761e19761df8a0759ebef7733dd03036de534a8928fa0cf4ad671ce18270"}, @NFTA_DATA_VALUE={0xb7, 0x1, "66767eefa5b10d799e0c5a5e1d61f3f0f661d994ad318f98a375e2edac054bff1f7a38ed2ca84767b780e36f37ee9761df1e4653dcf56c2768e5a7b406a7d505b7a9d9e6cb363e56908da92b0342d03a6c02f6283fc45e3805f5a61eda0d79f69bb7ebe8996179734711c9ee2d7160b2e8d91cba600f7ebf614d338bc38abde252fa3e71adf10aebfddbe4b00c7141629be414b273e7229311426d62692d6e1aacc2ec737aa6f80df2f13140ef0dc450e2550c"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @notrack={{0xc}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}, {0x54, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x24, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6df3bb69}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffffffffffff0001}]}]}]}, @NFT_MSG_DELTABLE={0x5c, 0x2, 0xa, 0x801, 0x0, 0x0, {0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0xc, 0x6, "1d4ad4dfa730d700"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x13c, 0x5, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6f28}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3f80}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xd}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_USERDATA={0x1d, 0xc, "4e91e706499a78a79d177764c35af329df9d2c1e5d5a01219a"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xc2db}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xb7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xe2c}, 0x1, 0x0, 0x0, 0x40008d1}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0xac, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x84, 0x6, "b64cdb26e6fad61e1a3a9eecbb6357963d67f6c6c8350c59cd37f003a48cd6b246bfdba919e297ccfdd1a4a105a8efd800ec19b357774b2dda994a2930f97af43bf1eb020df33476b14f882fffaa5420a8961598f8f3b3a3d6c62b2675bf44068af43f4b69afe4609d0774d71f83a5b69f0abcce601fb3d65113484ddf969f0f"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x58, 0x3, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0x2a, 0xc, "143a50e19516a27a3507a6a58d1783afc138950386dc75992221d8a1ba38629141e282878c28"}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWOBJ={0x84, 0x12, 0xa, 0x201, 0x0, 0x0, {0x1b, 0x0, 0x9}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_DATA={0x70, 0x4, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xffffffffb8041461}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000000}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xff}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x1232}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7bcf}]}}, @NFT_MSG_NEWSETELEM={0xb4, 0xc, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x88, 0x3, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_SET_ELEM_USERDATA={0x5b, 0x6, 0x1, 0x0, "82967a4c850f1c40be0d4d95cff4a5b57c1e0211a38d6712a14bd6d6b8b7769efea3570838f6cdcb82065c4043620d19712bc70b49664811b90ca94d59b4d328a5fdd00bd7b6f9c50226635f89c156aa44926af0962bee"}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2000000000000}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0xa30, 0xc, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x9d8, 0x3, 0x0, 0x1, [{0x2f0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x2ec, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xce, 0x1, "fd5c385e65c269312a101c5de2813ab38d665b3703322e044df67c871770fe3bac50331c87bae8531cc2bc90a2deb209633094f9b186d6bc8f4adac8b3b36a2af7ceb38ff440c0000842cc00820b80432de57cc857324c247cab9a3f8a798f7ea1c474639c0ec2ea0d17ecb640a0e16a81f090af6cc2e97104df1a2c5c24abc71b7684946f1a81146172ba12d378925f728092d1372e30eff559418ba3b9d67abcca1aacd91576125cf1a03eba6f905811ecb50c046a16263a43640d502f0621e8d16497dd1ec6bc7a8f"}, @NFTA_DATA_VALUE={0xb5, 0x1, "dac650c0188e5ee1ba95a0924eb68b75385596ad172349199b33a2dc90595d5ac8692710c6ce74dd360b93a43f6bdb11c1e03f6c7e1b5ea982985c0dc5f827f6ff98af4be640b2604e3c10c0d268aa48edbbad54f2e183b34072c2f21be47fd3b9d88a58784a9cae6aa0ffd2dc780cf546551fbba4038b7a3707ed34cfaca9e390f974e042d88faa366b4e2f21fbfafae2019118b8f4897cd8ceb5b1708e35db0d31757c052f50db8cbb22fd6b785f6ff9"}, @NFTA_DATA_VALUE={0x3b, 0x1, "81f45547a0bcedd14f4ab1f0d0197f37c1d36ec050e2c71d47dc9083a475c5964391412f17445b2f7579602223e5cfe24295634de0821d"}, @NFTA_DATA_VALUE={0xc4, 0x1, "566ab328e046ecb26705032fc7e5a26f6f94178cbea1f3d30d49666af66d304157437c322ae40eddd0734e53cb3e071fe6f39fe44a0de29958ae1a687abfca18f2e56212b42bd814e928beaaef7d48c41018bd4d61cdbddb8c945065ba97a8d20494374b39b05b2362923c4d3f4108176077f28a358cadea9aa86561ff14a0e77fbb8ec673b1c46f1bfc9f5c15b090dc8d1c2fd2b8dda8803f3b76a740c958daa2ac0ab9ba52c930b15caf88613d39944ae7f8d7725455cd216ecae12b404efd"}, @NFTA_DATA_VALUE={0x4c, 0x1, "4cc5dc1d81c39f8dcc63c55cfac7ccce1dfa532618c91dfe41e411d97f3f049f6f425c620a4a2c5958dad7c1ea13ee2b80ba91d4d9d139eec3be31a7b9f05982198e816387fe9a59"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}, {0x310, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPRESSIONS={0x144, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xab}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xf}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, {0xcc, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc0, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x98, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x35, 0x1, "763fef143e1a540c58f5ca139b995ba59c440e912b76cd9a3849344771b2a14183b9b698c647d29dec0d9d1b283ee812c8"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_DATA={0x4}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x1bc, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x4c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x11c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x108, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_IMMEDIATE_DATA={0xf4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x32, 0x1, "fe3b776907f81d79b14c3141842d29532a746216ef39e8568aa3b3fb65c45e05304d766472620d8e98f4fc372ca2"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xf, 0x1, "199b6a18f4d6e62d333f82"}]}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}]}, {0x1e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1d8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x36, 0x1, "580f17afa68a5046a217f1eb5ef63611f49438cff0c7aa09ebe83f7c5687ffd151d41766b2dcfb5ecd26bedb39cd9c05c0f8"}, @NFTA_DATA_VALUE={0x78, 0x1, "9dfeb82d04c3557ac2c5892f23e6fc898385c04c1513355a7b99c20d29e15a20d624265ee3bd9511f58af3c303fc04db8efdad17d7749da0c3703a3fd1b5368790b5f8013cc3f2be9edc9ff95246989c33cb01a74e89ca3b147967f6698fc8e7a52dfc2f7d858d534315ae0010e81b70d86019ee"}, @NFTA_DATA_VALUE={0xa6, 0x1, "813a290f92b81aef22c23a9c3363a7d60f6b11678b133434027ece301e0796c3df49fd7bc6b79473e77b7644a2ccfb9e2dd8768128a2f7933df184766871f3af5532e263c5770342c33ca2e22fbb2fd799cb0c66facfcae0465e89ddc865ce2f9daed33599c87fe53f0f90a867517e75c3ff2a2ed01d8c6bd52d5c15b285240dcddf9d62f333d1cc86d18315f4edb262b05bac1b3daab6f9a040d077d2f32b2094e1"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}]}, {0x198, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x168, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x29, 0x1, "70382f6f6d3a08761e19761df8a0759ebef7733dd03036de534a8928fa0cf4ad671ce18270"}, @NFTA_DATA_VALUE={0xb7, 0x1, "66767eefa5b10d799e0c5a5e1d61f3f0f661d994ad318f98a375e2edac054bff1f7a38ed2ca84767b780e36f37ee9761df1e4653dcf56c2768e5a7b406a7d505b7a9d9e6cb363e56908da92b0342d03a6c02f6283fc45e3805f5a61eda0d79f69bb7ebe8996179734711c9ee2d7160b2e8d91cba600f7ebf614d338bc38abde252fa3e71adf10aebfddbe4b00c7141629be414b273e7229311426d62692d6e1aacc2ec737aa6f80df2f13140ef0dc450e2550c"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @notrack={{0xc}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}, {0x54, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x24, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6df3bb69}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffffffffffff0001}]}]}]}, @NFT_MSG_DELTABLE={0x5c, 0x2, 0xa, 0x801, 0x0, 0x0, {0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0xc, 0x6, "1d4ad4dfa730d700"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x13c, 0x5, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6f28}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3f80}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xd}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_USERDATA={0x1d, 0xc, "4e91e706499a78a79d177764c35af329df9d2c1e5d5a01219a"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xc2db}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xb7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xe2c}, 0x1, 0x0, 0x0, 0x40008d1}, 0x0) 1m34.698265169s ago: executing program 36 (id=5924): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x18, &(0x7f0000000240)=0xf92, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r1, 0x0, 0xfaf}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r1, 0x0, 0xfaf}, 0x18) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r3, 0x10c, 0x5, &(0x7f0000000000), 0x4) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0xac, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x84, 0x6, "b64cdb26e6fad61e1a3a9eecbb6357963d67f6c6c8350c59cd37f003a48cd6b246bfdba919e297ccfdd1a4a105a8efd800ec19b357774b2dda994a2930f97af43bf1eb020df33476b14f882fffaa5420a8961598f8f3b3a3d6c62b2675bf44068af43f4b69afe4609d0774d71f83a5b69f0abcce601fb3d65113484ddf969f0f"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x58, 0x3, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0x2a, 0xc, "143a50e19516a27a3507a6a58d1783afc138950386dc75992221d8a1ba38629141e282878c28"}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWOBJ={0x84, 0x12, 0xa, 0x201, 0x0, 0x0, {0x1b, 0x0, 0x9}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_DATA={0x70, 0x4, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xffffffffb8041461}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000000}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xff}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x1232}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7bcf}]}}, @NFT_MSG_NEWSETELEM={0xb4, 0xc, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x88, 0x3, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_SET_ELEM_USERDATA={0x5b, 0x6, 0x1, 0x0, "82967a4c850f1c40be0d4d95cff4a5b57c1e0211a38d6712a14bd6d6b8b7769efea3570838f6cdcb82065c4043620d19712bc70b49664811b90ca94d59b4d328a5fdd00bd7b6f9c50226635f89c156aa44926af0962bee"}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2000000000000}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0xa30, 0xc, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x9d8, 0x3, 0x0, 0x1, [{0x2f0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x2ec, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xce, 0x1, "fd5c385e65c269312a101c5de2813ab38d665b3703322e044df67c871770fe3bac50331c87bae8531cc2bc90a2deb209633094f9b186d6bc8f4adac8b3b36a2af7ceb38ff440c0000842cc00820b80432de57cc857324c247cab9a3f8a798f7ea1c474639c0ec2ea0d17ecb640a0e16a81f090af6cc2e97104df1a2c5c24abc71b7684946f1a81146172ba12d378925f728092d1372e30eff559418ba3b9d67abcca1aacd91576125cf1a03eba6f905811ecb50c046a16263a43640d502f0621e8d16497dd1ec6bc7a8f"}, @NFTA_DATA_VALUE={0xb5, 0x1, "dac650c0188e5ee1ba95a0924eb68b75385596ad172349199b33a2dc90595d5ac8692710c6ce74dd360b93a43f6bdb11c1e03f6c7e1b5ea982985c0dc5f827f6ff98af4be640b2604e3c10c0d268aa48edbbad54f2e183b34072c2f21be47fd3b9d88a58784a9cae6aa0ffd2dc780cf546551fbba4038b7a3707ed34cfaca9e390f974e042d88faa366b4e2f21fbfafae2019118b8f4897cd8ceb5b1708e35db0d31757c052f50db8cbb22fd6b785f6ff9"}, @NFTA_DATA_VALUE={0x3b, 0x1, "81f45547a0bcedd14f4ab1f0d0197f37c1d36ec050e2c71d47dc9083a475c5964391412f17445b2f7579602223e5cfe24295634de0821d"}, @NFTA_DATA_VALUE={0xc4, 0x1, "566ab328e046ecb26705032fc7e5a26f6f94178cbea1f3d30d49666af66d304157437c322ae40eddd0734e53cb3e071fe6f39fe44a0de29958ae1a687abfca18f2e56212b42bd814e928beaaef7d48c41018bd4d61cdbddb8c945065ba97a8d20494374b39b05b2362923c4d3f4108176077f28a358cadea9aa86561ff14a0e77fbb8ec673b1c46f1bfc9f5c15b090dc8d1c2fd2b8dda8803f3b76a740c958daa2ac0ab9ba52c930b15caf88613d39944ae7f8d7725455cd216ecae12b404efd"}, @NFTA_DATA_VALUE={0x4c, 0x1, "4cc5dc1d81c39f8dcc63c55cfac7ccce1dfa532618c91dfe41e411d97f3f049f6f425c620a4a2c5958dad7c1ea13ee2b80ba91d4d9d139eec3be31a7b9f05982198e816387fe9a59"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}, {0x310, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPRESSIONS={0x144, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xab}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xf}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, {0xcc, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc0, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x98, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x35, 0x1, "763fef143e1a540c58f5ca139b995ba59c440e912b76cd9a3849344771b2a14183b9b698c647d29dec0d9d1b283ee812c8"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_DATA={0x4}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x1bc, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x4c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x11c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x108, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_IMMEDIATE_DATA={0xf4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x32, 0x1, "fe3b776907f81d79b14c3141842d29532a746216ef39e8568aa3b3fb65c45e05304d766472620d8e98f4fc372ca2"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xf, 0x1, "199b6a18f4d6e62d333f82"}]}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}]}, {0x1e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1d8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x36, 0x1, "580f17afa68a5046a217f1eb5ef63611f49438cff0c7aa09ebe83f7c5687ffd151d41766b2dcfb5ecd26bedb39cd9c05c0f8"}, @NFTA_DATA_VALUE={0x78, 0x1, "9dfeb82d04c3557ac2c5892f23e6fc898385c04c1513355a7b99c20d29e15a20d624265ee3bd9511f58af3c303fc04db8efdad17d7749da0c3703a3fd1b5368790b5f8013cc3f2be9edc9ff95246989c33cb01a74e89ca3b147967f6698fc8e7a52dfc2f7d858d534315ae0010e81b70d86019ee"}, @NFTA_DATA_VALUE={0xa6, 0x1, "813a290f92b81aef22c23a9c3363a7d60f6b11678b133434027ece301e0796c3df49fd7bc6b79473e77b7644a2ccfb9e2dd8768128a2f7933df184766871f3af5532e263c5770342c33ca2e22fbb2fd799cb0c66facfcae0465e89ddc865ce2f9daed33599c87fe53f0f90a867517e75c3ff2a2ed01d8c6bd52d5c15b285240dcddf9d62f333d1cc86d18315f4edb262b05bac1b3daab6f9a040d077d2f32b2094e1"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}]}, {0x198, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x168, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x29, 0x1, "70382f6f6d3a08761e19761df8a0759ebef7733dd03036de534a8928fa0cf4ad671ce18270"}, @NFTA_DATA_VALUE={0xb7, 0x1, "66767eefa5b10d799e0c5a5e1d61f3f0f661d994ad318f98a375e2edac054bff1f7a38ed2ca84767b780e36f37ee9761df1e4653dcf56c2768e5a7b406a7d505b7a9d9e6cb363e56908da92b0342d03a6c02f6283fc45e3805f5a61eda0d79f69bb7ebe8996179734711c9ee2d7160b2e8d91cba600f7ebf614d338bc38abde252fa3e71adf10aebfddbe4b00c7141629be414b273e7229311426d62692d6e1aacc2ec737aa6f80df2f13140ef0dc450e2550c"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @notrack={{0xc}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}, {0x54, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x24, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6df3bb69}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffffffffffff0001}]}]}]}, @NFT_MSG_DELTABLE={0x5c, 0x2, 0xa, 0x801, 0x0, 0x0, {0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0xc, 0x6, "1d4ad4dfa730d700"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x13c, 0x5, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6f28}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3f80}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xd}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_USERDATA={0x1d, 0xc, "4e91e706499a78a79d177764c35af329df9d2c1e5d5a01219a"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xc2db}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xb7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xe2c}, 0x1, 0x0, 0x0, 0x40008d1}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0xac, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x84, 0x6, "b64cdb26e6fad61e1a3a9eecbb6357963d67f6c6c8350c59cd37f003a48cd6b246bfdba919e297ccfdd1a4a105a8efd800ec19b357774b2dda994a2930f97af43bf1eb020df33476b14f882fffaa5420a8961598f8f3b3a3d6c62b2675bf44068af43f4b69afe4609d0774d71f83a5b69f0abcce601fb3d65113484ddf969f0f"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x58, 0x3, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0x2a, 0xc, "143a50e19516a27a3507a6a58d1783afc138950386dc75992221d8a1ba38629141e282878c28"}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWOBJ={0x84, 0x12, 0xa, 0x201, 0x0, 0x0, {0x1b, 0x0, 0x9}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_DATA={0x70, 0x4, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xffffffffb8041461}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000000}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xff}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x1232}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7bcf}]}}, @NFT_MSG_NEWSETELEM={0xb4, 0xc, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x88, 0x3, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_SET_ELEM_USERDATA={0x5b, 0x6, 0x1, 0x0, "82967a4c850f1c40be0d4d95cff4a5b57c1e0211a38d6712a14bd6d6b8b7769efea3570838f6cdcb82065c4043620d19712bc70b49664811b90ca94d59b4d328a5fdd00bd7b6f9c50226635f89c156aa44926af0962bee"}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2000000000000}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0xa30, 0xc, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x9d8, 0x3, 0x0, 0x1, [{0x2f0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x2ec, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xce, 0x1, "fd5c385e65c269312a101c5de2813ab38d665b3703322e044df67c871770fe3bac50331c87bae8531cc2bc90a2deb209633094f9b186d6bc8f4adac8b3b36a2af7ceb38ff440c0000842cc00820b80432de57cc857324c247cab9a3f8a798f7ea1c474639c0ec2ea0d17ecb640a0e16a81f090af6cc2e97104df1a2c5c24abc71b7684946f1a81146172ba12d378925f728092d1372e30eff559418ba3b9d67abcca1aacd91576125cf1a03eba6f905811ecb50c046a16263a43640d502f0621e8d16497dd1ec6bc7a8f"}, @NFTA_DATA_VALUE={0xb5, 0x1, "dac650c0188e5ee1ba95a0924eb68b75385596ad172349199b33a2dc90595d5ac8692710c6ce74dd360b93a43f6bdb11c1e03f6c7e1b5ea982985c0dc5f827f6ff98af4be640b2604e3c10c0d268aa48edbbad54f2e183b34072c2f21be47fd3b9d88a58784a9cae6aa0ffd2dc780cf546551fbba4038b7a3707ed34cfaca9e390f974e042d88faa366b4e2f21fbfafae2019118b8f4897cd8ceb5b1708e35db0d31757c052f50db8cbb22fd6b785f6ff9"}, @NFTA_DATA_VALUE={0x3b, 0x1, "81f45547a0bcedd14f4ab1f0d0197f37c1d36ec050e2c71d47dc9083a475c5964391412f17445b2f7579602223e5cfe24295634de0821d"}, @NFTA_DATA_VALUE={0xc4, 0x1, "566ab328e046ecb26705032fc7e5a26f6f94178cbea1f3d30d49666af66d304157437c322ae40eddd0734e53cb3e071fe6f39fe44a0de29958ae1a687abfca18f2e56212b42bd814e928beaaef7d48c41018bd4d61cdbddb8c945065ba97a8d20494374b39b05b2362923c4d3f4108176077f28a358cadea9aa86561ff14a0e77fbb8ec673b1c46f1bfc9f5c15b090dc8d1c2fd2b8dda8803f3b76a740c958daa2ac0ab9ba52c930b15caf88613d39944ae7f8d7725455cd216ecae12b404efd"}, @NFTA_DATA_VALUE={0x4c, 0x1, "4cc5dc1d81c39f8dcc63c55cfac7ccce1dfa532618c91dfe41e411d97f3f049f6f425c620a4a2c5958dad7c1ea13ee2b80ba91d4d9d139eec3be31a7b9f05982198e816387fe9a59"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}, {0x310, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPRESSIONS={0x144, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xab}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xf}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, {0xcc, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc0, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x98, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x35, 0x1, "763fef143e1a540c58f5ca139b995ba59c440e912b76cd9a3849344771b2a14183b9b698c647d29dec0d9d1b283ee812c8"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_DATA={0x4}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x1bc, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x4c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x11c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x108, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_IMMEDIATE_DATA={0xf4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x32, 0x1, "fe3b776907f81d79b14c3141842d29532a746216ef39e8568aa3b3fb65c45e05304d766472620d8e98f4fc372ca2"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xf, 0x1, "199b6a18f4d6e62d333f82"}]}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}]}, {0x1e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1d8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x36, 0x1, "580f17afa68a5046a217f1eb5ef63611f49438cff0c7aa09ebe83f7c5687ffd151d41766b2dcfb5ecd26bedb39cd9c05c0f8"}, @NFTA_DATA_VALUE={0x78, 0x1, "9dfeb82d04c3557ac2c5892f23e6fc898385c04c1513355a7b99c20d29e15a20d624265ee3bd9511f58af3c303fc04db8efdad17d7749da0c3703a3fd1b5368790b5f8013cc3f2be9edc9ff95246989c33cb01a74e89ca3b147967f6698fc8e7a52dfc2f7d858d534315ae0010e81b70d86019ee"}, @NFTA_DATA_VALUE={0xa6, 0x1, "813a290f92b81aef22c23a9c3363a7d60f6b11678b133434027ece301e0796c3df49fd7bc6b79473e77b7644a2ccfb9e2dd8768128a2f7933df184766871f3af5532e263c5770342c33ca2e22fbb2fd799cb0c66facfcae0465e89ddc865ce2f9daed33599c87fe53f0f90a867517e75c3ff2a2ed01d8c6bd52d5c15b285240dcddf9d62f333d1cc86d18315f4edb262b05bac1b3daab6f9a040d077d2f32b2094e1"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}]}, {0x198, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x168, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x29, 0x1, "70382f6f6d3a08761e19761df8a0759ebef7733dd03036de534a8928fa0cf4ad671ce18270"}, @NFTA_DATA_VALUE={0xb7, 0x1, "66767eefa5b10d799e0c5a5e1d61f3f0f661d994ad318f98a375e2edac054bff1f7a38ed2ca84767b780e36f37ee9761df1e4653dcf56c2768e5a7b406a7d505b7a9d9e6cb363e56908da92b0342d03a6c02f6283fc45e3805f5a61eda0d79f69bb7ebe8996179734711c9ee2d7160b2e8d91cba600f7ebf614d338bc38abde252fa3e71adf10aebfddbe4b00c7141629be414b273e7229311426d62692d6e1aacc2ec737aa6f80df2f13140ef0dc450e2550c"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @notrack={{0xc}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}, {0x54, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x24, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6df3bb69}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffffffffffff0001}]}]}]}, @NFT_MSG_DELTABLE={0x5c, 0x2, 0xa, 0x801, 0x0, 0x0, {0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0xc, 0x6, "1d4ad4dfa730d700"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x13c, 0x5, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6f28}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3f80}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xd}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_USERDATA={0x1d, 0xc, "4e91e706499a78a79d177764c35af329df9d2c1e5d5a01219a"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xc2db}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xb7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xe2c}, 0x1, 0x0, 0x0, 0x40008d1}, 0x0) 34.806880907s ago: executing program 3 (id=6738): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) ioctl$sock_netdev_private(r0, 0x8, &(0x7f00000000c0)="c2e0d498f0bef7c1f6bdae680826992792baccb49dbf3612a92e779d52fcc06dbd1ba011306ab1fc084578c5fc") 34.600166175s ago: executing program 3 (id=6740): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async, rerun: 64) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 64) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x4, 0x1, 0x1}}, 0x26) (async, rerun: 64) write(r0, &(0x7f0000000000)="dd8e10a304deab41e2ec4b629b623c0a6506f79730b3a7198a7094dfe72676892dbf77c2f54328392104441dbd1f19189e367bade19a81ed9024", 0x3a) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@ipv6_getaddr={0x18, 0x16, 0x1}, 0x18}}, 0x0) 34.324924002s ago: executing program 3 (id=6746): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@empty, @in=@remote, 0x4e24, 0xd17e, 0x4e20, 0x7f, 0xa, 0x80, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x1, 0x5, 0x0, 0x8, 0x3ff, 0x7fffffffffffffff, 0x8000000000000001, 0x800}, {0xc, 0x8, 0xb, 0x6}, 0x9, 0x6e6bb1, 0x1, 0x1, 0x2}, {{@in6=@mcast1, 0x4d4, 0xff}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3504, 0x1, 0x1, 0x8, 0x1, 0x7fff, 0xbd}}, 0xe8) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x800) ppoll(&(0x7f0000001080)=[{}], 0x13, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x40}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="61124d00000000006113500000000000bf2000000000000007000000150400003d0301000000000095000f00000000006926000000000000bf67000000000000450700000fff07003506000002000000170600000ee50014bf250000000000005d670000000000006507000006000000070500004c0001000f75000000000000bf54000000000000070400000400f9ff2d4401000000000095000000000000000500000000000000950007000000000001722fabb733a0e757c7c45402000000a2d23da04d1ffc187f9955911aa1a2ba7ba030c7267c2de00435fd253cc0f0d9b2c3127c46b0f4f95345de3188f0d808398d09ee4dc258d726eae098804de25df627a64ab8efde50fd7f1d58d67e684c45e506598bae66ea1a7cd29032de94983dfab0e5043daf1b46bef5135c65377bdbe65d525743d88ef4b2ee62652b07e8a4b6e6155cecc13a5ddf4157f2bfab7201112a30274101fceee66eca91bd5fecb254ab358488c400330171128be291297947d474c570a385a44dd9ff4ae730ae9d0ae42d8814a8c96f101df7da839bcdd7b7c33c8cfe74d599543ac604d8dd42fc66cdb79cd09ceeedce1e69f11967919f82b0276c90420d08897ee8514b43533f07132589a0a37110fd8571b1e69251bba35cd06c8bd430aafbecfd33757b7dc4803123e9107e5cceaec2a391f9b9b577295ac3864f6c1e30e6190a055953e18bedd1859acdd15af7209d15950f9195b401e74f8b5210e28d46dde2658b4695d9ac9ce7cbefc164a5454fc4da6104db281e18a8992b9f8c82b895da647e6ea4cb622314c5c48abfd620adf7757c23a31a619edcfb45a402c5fced05e5274e08a313d6c5fdd0a8d36b1a268056e6f7e9a6daa5632cda5ad2a9ebfac980c7db63137c226f71b7eb70c174d885232e522aad0f13b0e5b43d837d040f813d0115387e36f092d9aaafe7afc637d3d107451f4854613cfd43ac63ad6141ddb0311b8c96fef49af414e49be7c23b2e8eb686fbcdd2dab4cbdb02e30e4e1a6c25b2791facac56e4c5dc036c8d80e5c7c206d24603be75850927e02fd4eea168681498d1170478408c43bb90d9df3964b64fee41745f6785419ac8de8788398e3653f34970988866043136ada4771bf8d96eeb0f565d626a3e9089"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10}, 0x94) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000001000000000000090000000800010001000000050008000b000000050008000900000005000700"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0xc004) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r9, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r7}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r9, &(0x7f0000000140), &(0x7f0000000200)=@tcp6=r7, 0x2}, 0x20) r10 = socket(0x10, 0x2, 0x0) write(r10, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000d00000303ff", 0x24) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000002df1acf93db27a0665ce85a026f0e262af11bc8b19ecc70a6cac95632fb2dbdcbc6fb5b6ef6941c9c91a06d1797cd3bd95f4e1628601f5381316a899689e09b0845289fd72c54b95f7dbabf8fc33b57633aa7a79f7ff543075ac2813533087ab849d00719bb19fffc4d911d37fa63ff2c571209ce942cd2dc2eb0f818bef", @ANYRES16=r12, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="414601", @ANYRES64=r3], 0x4) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1a, 0x1, 0x8000) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}}, 0x0) 34.035618327s ago: executing program 3 (id=6750): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500002c0000fffd0011907800000000000000007c044e2000189078040000000e0000000900000000000000"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) r2 = socket$phonet(0x23, 0x2, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x0, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r7, 0xc03, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x800) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00030008001f010800000014ff5500219e3dcd1c007b6a6eb831d95d26bf510600fd000900"/50], 0x38}, 0x1, 0x0, 0x0, 0x40154}, 0x8044) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000240)='wg2\x00', 0x4) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r1, @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x6c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r10) 33.726756118s ago: executing program 3 (id=6755): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, &(0x7f00000000c0)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r3, @ANYBLOB="04"], 0xc4}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r7}, @typed={0x8, 0x9f, 0x0, 0x0, @pid=r6}, @nested={0x4, 0x1}]}, 0x24}], 0x1}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$alg(r9, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) sendmsg$nl_route_sched_retired(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@delqdisc={0x100, 0x25, 0x800, 0x70bd2d, 0x25dfdafe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x7, 0x9}, {0x1, 0xffe0}}, [@q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x15}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9d}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}]}}]}, 0x100}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) recvmmsg(r9, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/223, 0xdf}, {&(0x7f0000000840)=""/127, 0x7f}], 0x2}, 0x101}], 0x1, 0x60, 0x0) r10 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r10, 0x29, 0x11, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=@newpolicy={0xc4, 0x13, 0x4, 0x70bd25, 0x25dfdbfc, {{@in6=@mcast2, @in6=@empty, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x20, 0xa0, 0x2b, r3, r7}, {0x68, 0x7ff, 0x100, 0x6, 0x7, 0x80000000, 0x200, 0x7}, {0x1, 0xe5c7, 0xc39, 0x2}, 0xffffff26, 0x6e6bb8, 0x1, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075a, 0x6}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40000}, 0x8881) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000611068000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r3, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 33.597274239s ago: executing program 3 (id=6757): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r1, 0x0, 0xfaf}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r3, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0xa7, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4cf7bd180b12e28009000000", @ANYRES16=r0, @ANYBLOB="01000000000000000000420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000008008e0001000000"], 0x4c}}, 0x0) 22.885378801s ago: executing program 9 (id=6864): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4a301, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000801030000000000000000000000000c000480040007400000000005000300210000000900010073797a31000000000600024000000000"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x500, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x1, 0xa00, 0x0, {0x2}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000008c0)={0x48, r6, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x45}, 0x0) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r7, 0x800442d3, &(0x7f0000000040)={0xfffffffe, 0x1, 0x2, @empty, 'bridge_slave_0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}}, 0x0) r8 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB], 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r10 = socket(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, 0x0) sendmsg$nl_route_sched(r10, 0x0, 0xc090) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r9, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002740)=""/4090, 0xffa}, {&(0x7f0000000300)=""/130, 0x82}], 0x2}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)=""/96, 0x60}, {&(0x7f0000000700)=""/104, 0x68}, {&(0x7f0000001740)=""/4080, 0xff0}, {&(0x7f0000004740)=""/4083, 0xff3}], 0x4}, 0x8}], 0x3, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000840)=@broute={'broute\x00', 0x20, 0x3, 0x59a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000280], 0x0, &(0x7f0000000080), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x3, 0x4c, 0x600, 'dvmrp0\x00', 'lo\x00', 'hsr0\x00', 'xfrm0\x00', @random="2447ff99afe0", [0x0, 0x0, 0xff], @random="fc8a30d05212", [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0xe6, 0x136, 0x166, [@ip={{'ip\x00', 0x0, 0x20}, {{@loopback, @multicast1, 0x0, 0xffffffff, 0x2, 0x8, 0x1, 0x2f, 0x4e20, 0x4e21, 0x4e24, 0x4e21}}}, @pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x1, 0x1}}}], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x3, 'syz1\x00', {0x9}}}}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffd}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{0x5, 0x9, 0x8917, 'team_slave_0\x00', 'gretap0\x00', 'veth1_macvtap\x00', 'bond_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0xff, 0xff, 0x0, 0x181], @local, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], 0x156, 0x18e, 0x1de, [@ip6={{'ip6\x00', 0x0, 0x50}, {{@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, [0xffffff00, 0x0, 0xffffff00, 0xffffff00], [0xff000000, 0xff, 0x0, 0xff000000], 0x2, 0xc, 0x2, 0x2, 0x4e21, 0x4e21, 0x4e23, 0x4e23}}}, @physdev={{'physdev\x00', 0x0, 0x48}, {{'ip6erspan0\x00', {0xff}, 'veth0_to_hsr\x00', {}, 0x8, 0x1}}}], [@common=@dnat={'dnat\x00', 0x10, {{@local, 0xffffffffffffffff}}}], @common=@log={'log\x00', 0x28, {{0x2, "8c686e59a83bca3b2277029bf3c6f66ed48d1da42edbc93ce6c643c2d30f", 0x6}}}}, {0x11, 0xe, 0x886c, 'veth1_virt_wifi\x00', 'veth0_to_bridge\x00', 'batadv0\x00', 'netpci0\x00', @random="832f4d94ca40", [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0x11e, 0x196, 0x1c6, [@arp={{'arp\x00', 0x0, 0x38}, {{0x110, 0x19, 0xa, @broadcast, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, 0xffffffff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0xff], 0x0, 0x3c}}}, @nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz0\x00', 0x2689}}}], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x80, 0x7, 0x6, 0x1, 0x0, "678b81c736b55843fe55b7e8b8bb4e476bfbec61da19c80ce3b77efd9e361a3c82eeb90e00c2710599b140f30e3155e7673db7c78ed930b955d7ebd982a404cc"}}}], @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}}]}]}, 0x612) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11}) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000001c5961a2e8594c935e2dcfe2564af86f3578cd641377ff8d7840e688f7"], 0x4) 19.011888058s ago: executing program 9 (id=6870): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r3], 0x4) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="02020003fa00000000000000000000000200090008000000e9000000000000000300060000000018020000000000000000000000000000000200010000000000fcff000000000000030005000000000002000000ac1414aa0000000000000000"], 0x60}, 0x1, 0x7}, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e23, @local}, {0x306, @remote}, 0x5c, {0x2, 0x4e24, @loopback}, 'nicvf0\x00'}) 18.642092772s ago: executing program 9 (id=6877): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000032c0), 0x40, 0x0) (async, rerun: 32) r1 = socket(0x1d, 0x2, 0x6) (rerun: 32) bind$unix(r1, &(0x7f00000008c0)=@file={0x1d, './file0\x00'}, 0x6e) (async, rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000003300)={'veth1_virt_wifi\x00', 0x2000}) (async, rerun: 64) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x18, &(0x7f0000000440)=0x1, 0x4) (async) bind$unix(r2, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK/file0\x00'}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000f0ffffff9500"/48], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x60}, 0x94) 18.492947212s ago: executing program 37 (id=6757): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r1, 0x0, 0xfaf}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r3, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0xa7, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4cf7bd180b12e28009000000", @ANYRES16=r0, @ANYBLOB="01000000000000000000420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000008008e0001000000"], 0x4c}}, 0x0) 18.371016276s ago: executing program 9 (id=6881): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@private2, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18920000000000000000000000000000711079000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x3c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x9c, 0x0, 0x0, @uid=r1}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x11, 0x2, 0x0, 0x1, [@generic="f2b5196e19f38e467ea949e05d"]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 18.091707762s ago: executing program 9 (id=6884): r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 17.771343068s ago: executing program 9 (id=6887): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r0}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 9.315456786s ago: executing program 2 (id=6961): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) 9.011833002s ago: executing program 2 (id=6965): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r1, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x4f}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040040}, 0x90) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'\x00', &(0x7f0000000180)=@ethtool_coalesce={0xe, 0x0, 0x4, 0x2, 0xffffffff, 0x1, 0x81, 0x7, 0x1ff, 0x299, 0xc0000, 0x0, 0x7, 0x8001, 0x4, 0x5, 0x5, 0x2, 0x9, 0x2, 0xdeaa, 0x7f, 0x8}}) (async) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000280), r0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000002c0)={@mcast1, 0x0}, &(0x7f0000000300)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x8, 0x10, 0x5, 0x8, {{0x34, 0x4, 0x0, 0x1, 0xd0, 0x66, 0x0, 0x0, 0x29, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @cipso={0x86, 0x2d, 0xffffffffffffffff, [{0x2, 0x6, "ef263142"}, {0x7, 0x3, "db"}, {0x6, 0x5, "f9bbf7"}, {0x0, 0xf, "fa0f615579fb9a112e5b98a25a"}, {0x0, 0xa, "1b44b61a2a927692"}]}, @cipso={0x86, 0x2e, 0x1, [{0x0, 0xe, "9c8cdcac9a8dbb6bce1f0dfa"}, {0x5, 0x7, "1563ca3cd7"}, {0x2, 0x5, "a5c193"}, {0x1, 0xe, "62db2c8415089049a65876e4"}]}, @timestamp_prespec={0x44, 0x14, 0xc9, 0x3, 0xe, [{@local, 0x43db}, {@loopback, 0x1cd73c39}]}, @lsrr={0x83, 0x7, 0xc0, [@local]}, @rr={0x7, 0x17, 0x4e, [@rand_addr=0x64010100, @empty, @broadcast, @rand_addr=0x64010100, @loopback]}, @cipso={0x86, 0x2a, 0x0, [{0x1, 0x12, "0c12f5da6951f37c6c28632058f06c29"}, {0x1, 0x5, "35943f"}, {0x2, 0xd, "e4d87cb2d639cf5b74d054"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)={0x238, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x1d8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x811}}}]}}]}, 0x238}}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000780)={'wlan0\x00'}) (async) ioctl(r2, 0xd, &(0x7f00000007c0)="5888511ae445647f8fccf4d5803a022688e8a19fe7fa962e24502b9a532b9a5fd3200178dd788e177e9634ee44937ebf890ca9bca06e0ded79c134f259f6583dcf0bc942647161eb7233ed9fc20677b63bb0ef4c4b0d93008f4670") (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000840)={@empty, 0x0, r6}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000880)=0x3cb) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x40, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x8005) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a00), r2) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000c40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a40)={0x1a8, r9, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xfc, 0xa8, @random="bcd4eee4e28f7c2222f9cffb809df0d31d7709e34749b6a3893a2c0b530a7042a19a6699ecf8dcf08eb112582c4aba87067d9fc07803532a8ef9612a8ad0764f3d70c4478213d94f1ec6950edf7d39669986301719dd2fed736c29553fd3e4287a178eaa274db8a0029506fa72c70c8041aabe48f6e00f1e0d792d034d0443c1e58b2fb44aea4d24f709ca8a0f639a00e0a662a827f4f73af504c02fba7e0097e7f54766b607fa5d0fdb3d8ff90b048b6713fd79753ea29b39543476f043cf00b53e9c225b0ce860abb7a976de0b388b8513e178c645e16039cef8c95b5a9584ad56fc3bb4d9e6eee67f67862ab1b53748b6c4f61ad9b775"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x51}, 0x41) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000cc0), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000e00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x88, r10, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xe}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ec0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000e40), &(0x7f0000000e80)='%pi6 \x00'}, 0x20) close(r11) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000001080)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001040)={&(0x7f0000000f40)=@ipmr_delroute={0xd8, 0x19, 0x100, 0x70bd26, 0x25dfdbff, {0x80, 0x80, 0x94, 0x8, 0x0, 0x3, 0xff, 0x7, 0x300}, [@RTA_TABLE={0x8, 0xf, 0xcc2c}, @RTA_ENCAP={0x90, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x8c, 0x1, {0x6, 0x88, 0x1, 0x6, 0x2, [@remote, @mcast2, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, @mcast2, @mcast1]}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_MULTIPATH={0xc, 0x9, {0xef, 0x11}}, @RTA_IP_PROTO={0x5, 0x1b, 0x1}, @RTA_SRC={0x8, 0x2, @multicast1}]}, 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) (async) r13 = accept4(r0, 0x0, &(0x7f00000010c0), 0x80c00) (async) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r11, 0x84, 0x77, &(0x7f0000001100)={0x0, 0xe, 0x6, [0xcba4, 0x8, 0xc, 0xe6, 0x4, 0x4]}, &(0x7f0000001140)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r13, 0x84, 0x22, &(0x7f0000001180)={0x3ff, 0x206, 0x0, 0x68216000, r14}, 0x10) r15 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(r15, 0x29, 0x23, &(0x7f00000011c0)={{{@in6=@ipv4={""/10, ""/2, @empty}, @in6=@dev}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f00000012c0)=0xe8) 8.895589626s ago: executing program 2 (id=6967): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x20000328) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) (async) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r1, 0x0, 0x180000}, 0x18) close(r3) 8.596111078s ago: executing program 2 (id=6969): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[], 0x18}], 0x0, 0x0, 0x0, 0x20000000}, 0x0) 8.556791014s ago: executing program 2 (id=6970): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fb5bdf251e00000008000300", @ANYRES32=r2, @ANYBLOB="38002f800c0002000203aaaaaaaaaaaa280003800c0005000a000000000000000800010003000000050002000100000005f4010002000000"], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r3, 0x0, 0x14, 0x0, &(0x7f0000000940)="18d26a3d9673399025aae4121e420e3eef774116", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.272106304s ago: executing program 2 (id=6972): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000180)="b0b3", 0x2}], 0x1, 0x0, 0x0, 0x20000851}, 0x0) recvmmsg(r3, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/195, 0xc3}], 0x1, &(0x7f00000000c0)=""/75, 0x4b}, 0x9}], 0x1, 0x40010000, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4044040) 7.949389705s ago: executing program 38 (id=6972): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000180)="b0b3", 0x2}], 0x1, 0x0, 0x0, 0x20000851}, 0x0) recvmmsg(r3, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/195, 0xc3}], 0x1, &(0x7f00000000c0)=""/75, 0x4b}, 0x9}], 0x1, 0x40010000, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4044040) 5.30765713s ago: executing program 0 (id=6980): writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000480)="f1fe5fe0360ab373d5026f29e006fedde600170d536ead05b28b8148eddca1d5e9e69bdedc0ba6577d492f6824e419fa3fd6059cff2cefda9f856656363cbca4e4b3f11030de157639a1d1b3fb4f32ac302c820e57a20c6d65c3dc89df04b66cfb29c6fee2443e823ed1bda6a07c9c611e820f93a102b406e356fd4b35e69481b833d39b695fd633859572209d9b44767992886a338175a1577fcf840b19c0fc59afe9ac4c50b0df1777eaf3c86d2b7478937e04db9c321133195b19eb603d5a31e6db523c", 0xc5}], 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x9000, @loopback}], 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x73, &(0x7f00000000c0)=""/47, &(0x7f0000000040)=0x2f) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000540)=ANY=[@ANYRES32=r0]) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001280)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x8, 0x7f02ae, 0x348, 0x200, 0x418, 0x2e8, 0x2e8, 0x418, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r4}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'bridge_slave_0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x564) 5.059565809s ago: executing program 0 (id=6983): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newae={0x40, 0x1e, 0x468bbc8229e18b43, 0x0, 0x0, {{}, @in6=@empty}}, 0x40}}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f000000f480), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f000000f780)={0x0, 0x0, &(0x7f000000f740)={&(0x7f0000000240)={0x20, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x44040) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r1, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED]}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newae={0x40, 0x1e, 0x468bbc8229e18b43, 0x0, 0x0, {{}, @in6=@empty}}, 0x40}}, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f000000f480), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f000000f780)={0x0, 0x0, &(0x7f000000f740)={&(0x7f0000000240)={0x20, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x44040) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r1, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED]}, 0x28}}, 0x0) (async) 4.844343017s ago: executing program 0 (id=6986): r0 = socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0xfffffffffffffc7a) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@RTM_GETMDB={0x18, 0x56, 0x200, 0x70bd2a, 0x25dfdbfd, {0x7, r1}, ["", "", ""]}, 0x18}}, 0x404c891) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000040)=0x5, &(0x7f0000000080)=0x2) 4.595928529s ago: executing program 0 (id=6989): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000040)=0x8010000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x8000}, 0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)=0x2) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000140)=0x10000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0x800, 0x75, 0x2, 0x2, 0x0, 0x80000001, 0x9, 0x5, 0x0}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000200)={r4, 0x6, 0x9, 0x5, 0x8001, 0x5, 0x4ed, 0x9, {0x0, @in6={{0xa, 0x4e21, 0xa, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}}, 0x0, 0x0, 0x4, 0x5, 0x9}}, &(0x7f00000002c0)=0xb0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x6, 0x0, 0x3, 0x6}, {0x81, 0x81, 0x7, 0xda01}, {0x1000, 0xd, 0x0, 0x401}]}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x6225c0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000440)=""/51, &(0x7f0000000480)=0x33) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) ioctl$PPPIOCSPASS(r8, 0x40107447, &(0x7f0000000540)={0x1, &(0x7f0000000500)=[{0x579f, 0x8, 0x6, 0x6}]}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r7, 0x80489439, &(0x7f0000000580)) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000600)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x3, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x10001, 0x1, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000680)=0x8) r9 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_inet_SIOCGIFPFLAGS(r9, 0x8935, &(0x7f00000006c0)={'macvlan0\x00'}) r10 = socket$phonet(0x23, 0x2, 0x1) write(r10, &(0x7f0000000700)="a010f434ce018dffdbf4828dee2567ada53c371e3feeed57704f31450697b69edac7e8c7ed473772e256cfd08515d32bc3c220828d153962f19d59abefee46d3739343c7e5d1f834f981608c417406efdf0c9e0b23a4e5d70ff701061c5dbb889a942bdc59e24dadd2e87ed52cb564d6d43ba1e9d6acc168e4807c12b414238f0eaaf7aeb10355b2b8b898db2968d8c66e188f0203a09169f76660383196cfb6057097707ed3d2e46716366290e30398e4692198f331171026c886265348477c6dbccf5ed41bf26b546495e4de482d3e2157ac4918f3c4cc5a3c5c1c13b9c63d1b", 0xe1) socket$inet(0x2, 0xa, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0x400c6615, &(0x7f0000000800)={0x0, @aes256, 0x0, @desc2}) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000840)={0x32, 0x8, 0x1, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @local]}, 0x48) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r11, 0x84, 0x73, &(0x7f00000008c0)={r4, 0x5, 0x30, 0xf27, 0x7ff}, &(0x7f0000000900)=0x18) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x8) 3.821014931s ago: executing program 7 (id=6994): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5", @ANYBLOB="26eb82e21598deffa851093cd9e4b9ea370f4b8ee867aead2ea406d712ad62781ef5620721f93e023f8e4915e9059bf443c235375c40bbc4b47d7d8b029dded19913d90298473e5674633994d106aad853ac5b4012f81945bed5596dd98a3798200eb1aee64ca2d7aab0e25b351e41e23b40413dfb3cb1805252e48c1e254545b60b3ce30043128cd915a717672cbe9fbeb168", @ANYRESHEX=r1], 0x72) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x6011, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000c40)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, &(0x7f0000000640)="010000000000940000000040", 0x0, 0x0, 0x0, 0xe}, 0x50) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000000240)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x94004480}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28020000", @ANYRES16=r5, @ANYRES64=r1], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0d00000004000000040000000900000000000000", @ANYRES32=r6, @ANYBLOB="000000008265632bb98f9e289d008000"/29, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000001100"/28, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd38) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0xd1383000) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x2) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000006d36592ee82a137aa08c0a0000010400eeffff11ffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r12, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x3c, r13, 0x1, 0x0, 0x25dfdbfd, {0x1, 0x0, 0x41}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x25}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 3.798025656s ago: executing program 0 (id=6995): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB="18000000122f01"], 0x18}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8880003}, 0xc, &(0x7f0000000040)={&(0x7f0000000a80)={0x1160, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x1124, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '*@Y\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}]}, @ETHTOOL_A_BITSET_VALUE={0x94, 0x4, "81bca0d411c3fb9978eb051927acf429c5b55d7202fab6e65a8c418e5215d29b84ba84546f0904072e65a913e329abc1f9389aeb6bd64249b35b41a38fbf8038df204cd8f8044b9e40dc2b5e6d4659209dec715913ff6150f86d01eaff8e66b878a5345eeca17e48372dbf3f9b8baf8e8b45e2f81ab50a61f51d8e11b82963e5ba3b0e1616857ab535e242fdcf06f07f"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xa12d924}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xe}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x1160}, 0x1, 0x0, 0x0, 0x4}, 0x2008040) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x7, &(0x7f0000000d80)=ANY=[@ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2e002, r3, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 3.636054312s ago: executing program 0 (id=6996): socket(0x10, 0x803, 0x0) socketpair(0x2b, 0x6, 0x8, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r2, &(0x7f0000000080)=""/6, 0xffc4, 0x700, 0x0, 0xffc7) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x4004855) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) syz_genetlink_get_family_id$nl80211(0x0, r5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x12000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendto$packet(r6, &(0x7f0000000040)="10030600e0ff020004004788aa96", 0xe, 0x0, &(0x7f0000000140), 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x48) 3.352550598s ago: executing program 8 (id=6998): syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x9) r0 = socket(0x2000000015, 0x80005, 0x0) writev(r0, &(0x7f0000002400)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f0000000000)="8b8528e93411858065e417027fec365b2df3ec3633bd6eb0a16f5f913eccfa48b94173db7dc597c291006a47148bccd832758a1f0fa9ba04b0e92d2db4b9a85de133b9d0de6928c9e3ced9ee396727a9db874e422c88fccbc09ca1cf51b33fa01b5bdabbf74343595168cc59331b48653f7fb970cc67c5c3c8ca60e5a1d80a5560f6025b648471ad1475f1c8f2fad359f4b70b470b38ad4dcb0dfa86bdb505cde9d7640ecd3631799fa2dd8adceee194dc61e8b624def98374e3c788a2d7f582437802a75df6d7e9", 0xc8}, {&(0x7f0000000100)="caac1b501195be9fc703c6751144a80f47417322c3e82957fb65f2607e04faa2adc3b2846779cc254b5e69691c9208d9", 0x30}, {&(0x7f00000011c0)="68ad2b087fdb2be809c8130cddf90e59e5aadb2f6a4c6cc27bf392c44dd33a50933f1ab71331691e51a1b95deebb5c1d3366dbae688a9746ba11228559127c9bd36dc585846e57ac3c23f214595f67a8e8176dc476aa1c64f04f33011bdf0aac534b53b5e9f5f67d10b238a9fc86843cce8eeaa81e08b4639f2c496e33a1cf81cbef36639d77bfb363077e7bb55ffda6cf9a8cddd5b6b3df5138c694a41123714ae418f422fef8a06938f545dbfcc7d44c25acae2a0584233ccccebe6afde904f7e7357f4f33ae052995178a896011844b2c84b54c8e0d4238", 0xd9}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000022c0)="815cb8f540094ea84117c37618d4f665b0cd72eab625d023db9b60d73147fad7d2a57f14f9bd85cf8cb56f94afd5adc5f42014cc93af94816c498d04950e7775ac677ee849b63ddf5cdbf9b76041487391752793526876b885bf3219", 0x5c}, {&(0x7f0000002340)="78c2c4f9c37a67c5e48f41afae1202ccb30617936d65f56e698a4af0b59fabbba5fa0507862dafb68ce35886693318a3d12c04616b5f0d8f3d967b0a17cb2190afe5525b239ee7ee16ac0d3bb7e574dde194ed523f88e1f624b50fa2eb618f1931bfaa717d498dfb2962d02041562a7c4b6073f013ea77707e3f214c86fae2e1a0bd619db17a4e68fe36ce7639539b0b70166628c8d15a9a8dd5a6a57617382c408e47b46f7bf05c367946db5781a159", 0xb0}], 0x7) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) socket$nl_route(0x10, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000000c0)={0x3, 0x67}, 0x2) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4804}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x6, @empty, 0x3}, 0x1c) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x9) (async) socket(0x2000000015, 0x80005, 0x0) (async) writev(r0, &(0x7f0000002400)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f0000000000)="8b8528e93411858065e417027fec365b2df3ec3633bd6eb0a16f5f913eccfa48b94173db7dc597c291006a47148bccd832758a1f0fa9ba04b0e92d2db4b9a85de133b9d0de6928c9e3ced9ee396727a9db874e422c88fccbc09ca1cf51b33fa01b5bdabbf74343595168cc59331b48653f7fb970cc67c5c3c8ca60e5a1d80a5560f6025b648471ad1475f1c8f2fad359f4b70b470b38ad4dcb0dfa86bdb505cde9d7640ecd3631799fa2dd8adceee194dc61e8b624def98374e3c788a2d7f582437802a75df6d7e9", 0xc8}, {&(0x7f0000000100)="caac1b501195be9fc703c6751144a80f47417322c3e82957fb65f2607e04faa2adc3b2846779cc254b5e69691c9208d9", 0x30}, {&(0x7f00000011c0)="68ad2b087fdb2be809c8130cddf90e59e5aadb2f6a4c6cc27bf392c44dd33a50933f1ab71331691e51a1b95deebb5c1d3366dbae688a9746ba11228559127c9bd36dc585846e57ac3c23f214595f67a8e8176dc476aa1c64f04f33011bdf0aac534b53b5e9f5f67d10b238a9fc86843cce8eeaa81e08b4639f2c496e33a1cf81cbef36639d77bfb363077e7bb55ffda6cf9a8cddd5b6b3df5138c694a41123714ae418f422fef8a06938f545dbfcc7d44c25acae2a0584233ccccebe6afde904f7e7357f4f33ae052995178a896011844b2c84b54c8e0d4238", 0xd9}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000022c0)="815cb8f540094ea84117c37618d4f665b0cd72eab625d023db9b60d73147fad7d2a57f14f9bd85cf8cb56f94afd5adc5f42014cc93af94816c498d04950e7775ac677ee849b63ddf5cdbf9b76041487391752793526876b885bf3219", 0x5c}, {&(0x7f0000002340)="78c2c4f9c37a67c5e48f41afae1202ccb30617936d65f56e698a4af0b59fabbba5fa0507862dafb68ce35886693318a3d12c04616b5f0d8f3d967b0a17cb2190afe5525b239ee7ee16ac0d3bb7e574dde194ed523f88e1f624b50fa2eb618f1931bfaa717d498dfb2962d02041562a7c4b6073f013ea77707e3f214c86fae2e1a0bd619db17a4e68fe36ce7639539b0b70166628c8d15a9a8dd5a6a57617382c408e47b46f7bf05c367946db5781a159", 0xb0}], 0x7) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) (async) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000000c0)={0x3, 0x67}, 0x2) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4804}, 0x80) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) (async) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x6, @empty, 0x3}, 0x1c) (async) 3.142576047s ago: executing program 7 (id=6999): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="64000000108b03cbd85f2dfc1900000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800e00010069703665727370616e00000030000280140006002001000000000000000000000000000214000700fc02000000000000000000000000000004001200"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100000000000000a44000000060a09043500000000000000020000000900020073797a32000000000900010073799f2d7a300000000018000480140001800b0001007470726f7879000004000280140000001100010000010000000000000000000a0000000000000000"], 0x6c}}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001000)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000480)={0x2c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x4}, @NL80211_ATTR_TDLS_ACTION={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4) setsockopt$ax25_int(r2, 0x101, 0x3, &(0x7f0000002b00)=0xa, 0x4) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r6, 0x89e2, &(0x7f0000000000)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a32000000002800038024000080090026400000000018000b80140001800a0001006c696d697400000004fe02800900010073797a30"], 0xd8}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x700, 0x7800, 0x4, 0x10001, {{0x27, 0x4, 0x3, 0x2b, 0x9c, 0x68, 0x0, 0x8, 0x4, 0x0, @local, @loopback, {[@lsrr={0x83, 0x7, 0x9e, [@loopback]}, @timestamp_prespec={0x44, 0x3c, 0x36, 0x3, 0x7, [{@empty, 0x7}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x5}, {@private=0xa010100}, {@broadcast, 0x2}, {@loopback}, {@remote, 0xa3}, {@remote, 0x7fff}]}, @timestamp_addr={0x44, 0x1c, 0xeb, 0x1, 0x6, [{@multicast1, 0x1ff}, {@multicast2, 0x8}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x3}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x20, 0xee, 0x0, 0x0, [0xab, 0xd, 0x5, 0x2, 0x1, 0x7, 0x2622]}, @end, @noop, @noop]}}}}}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r13}, 0x10) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r14}, 0x10) sendmsg$IPSET_CMD_SWAP(r11, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000000606010800000000000000000a82afd9d19ad2c4c71a61f41b000007050001000700000005000100070000000900020073797a3000000000"], 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x400c010) sendmsg$nl_route_sched_retired(r9, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@newtclass={0x40, 0x28, 0x800, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xb, 0x2}, {0x9, 0xe}, {0x4, 0x8}}, [@c_cbq={{0x8}, {0x14, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x81, 0x2, 0x12, 0x4, 0xcb, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) sendto$inet6(r7, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}, 0x401}, 0x1c) 3.052030318s ago: executing program 8 (id=7000): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0153000000000000000001"], 0x34}, 0x1, 0x40030000000000}, 0x0) r4 = socket(0x10, 0x3, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@getchain={0x2c, 0x66, 0x2, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xd}, {0xc, 0x5}, {0xf, 0xe}}, [{0x8, 0xb, 0x9}]}, 0x2c}}, 0x4000011) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newtfilter={0x2c, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r5, {0x10}, {0xffe0}, {0xfff1, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xdb, 0x3}}]}, 0x2c}}, 0x40) 2.860648418s ago: executing program 7 (id=7001): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000006000000000000000000850000000700000085"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x200, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x19, 0x0, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x800}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(r0) 2.586550003s ago: executing program 8 (id=7002): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004"], 0x1c}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0xfffff382, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="1e", 0x1}], 0x1) shutdown(r0, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {0xa, 0xef}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x2c}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004"], 0x1c}], 0x1}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) (async) socket$inet6(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0xfffff382, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="1e", 0x1}], 0x1) (async) shutdown(r0, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {0xa, 0xef}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x2c}}, 0x0) (async) 2.528138747s ago: executing program 39 (id=6887): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r0}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 675.179425ms ago: executing program 7 (id=7004): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000600050003"], 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) 622.139216ms ago: executing program 7 (id=7005): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000180)=0x6, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) socket(0x9, 0x3, 0x6) r1 = socket(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x5, 0x6, "8a1fe6", 0x7f, 0xff, 0x0, @loopback, @loopback, [], "eb3115662891ce87"}}}}}}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$kcm(0xa, 0x1, 0x106) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000003500), &(0x7f0000004e00)=0x4) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8923, &(0x7f0000000000)={'hsr0\x00', 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0xffffffe0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x3}]}, 0x28}}, 0xc090) socket$inet_mptcp(0x2, 0x1, 0x106) sendto$packet(r1, &(0x7f0000000100)="76a5e15f41da00719075b8c88a68f754", 0x10, 0x4048010, &(0x7f0000000200)={0x11, 0x1b, 0x0, 0x1, 0x2, 0x6, @multicast}, 0x14) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @dev, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x21, &(0x7f0000000100), 0x120) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0xfffffffb, @loopback, 0x7b}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="83", 0x1}], 0x1}, 0x4000840) close(r3) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 613.156022ms ago: executing program 8 (id=7006): r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x64, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0xfffffffffffffd50, 0xb, 0x444e}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x7fff}}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000300)=""/92, 0x5c}, {&(0x7f0000000280)=""/78, 0x4e}, {&(0x7f0000001fc0)=""/4102, 0x1006}, {&(0x7f00000004c0)=""/112, 0x70}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/74, 0x4a}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000140)=""/53, 0x35}, {&(0x7f0000000540)=""/172, 0xac}, {&(0x7f0000000d00)=""/175, 0xaf}, {&(0x7f0000000880)=""/138, 0x8a}, {&(0x7f0000000ac0)=""/143, 0x8f}, {&(0x7f00000000c0)=""/65, 0x41}], 0xd}, 0xfffffffe}], 0x1, 0x0, 0x0) 322.53587ms ago: executing program 8 (id=7007): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x4) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 136.351714ms ago: executing program 7 (id=7008): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x10, 0xffe0}, {0x0, 0x4788}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0xfc30) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) connect$bt_rfcomm(r7, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x5) r9 = accept4(r8, 0x0, 0x0, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd0, 0x11, 0x148, 0x0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xb, 0x8, 0xfff, 0xfffffffa, 0x6}, &(0x7f0000000080)=0x14) accept4$bt_l2cap(r9, &(0x7f0000000000), &(0x7f0000000100)=0xe, 0x80800) shutdown(0xffffffffffffffff, 0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x58, r6, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x58}}, 0x0) 0s ago: executing program 8 (id=7009): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000000000000100000000000001010"}}}]}, 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1401000026000100000000001a000000030100800c"], 0x114}], 0x1}, 0x4000040) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r3, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x4040040) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x200}, 0x8) close(r3) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000004c0)=0xfffff0e7, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) getsockopt$inet6_tcp_buf(r2, 0x6, 0x21, &(0x7f00000008c0)=""/5, &(0x7f0000000900)=0x5) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x604ab000) r4 = socket$inet(0x2, 0x3, 0x800000000000a) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x198, [], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x210) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$inet(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000000180)=[{&(0x7f00000003c0)="55dcdfc88b94ca2245493bac94b99eac66d8def1700ea3f58e1f561eecfb92ddd99e2717c8dadb35bdca89c66a52e5cbd58069e8264a3c5a754fae59263783cef84e91badb2ee1bb4ec6a28d4859ce381928e43e4a0df039f51b05888e35b1b5fadfa8e33abe26b127b94053e201d4a805ced8c9863bc811aaad5bd98273160a16fd43da628d6ad3c5720fd1d103d8bee7b691c87fab949d35a80e4697f31af29f1937a95d53d83713de8c6aaa8204e6b79a055ebb6eea271cc328bd07d0ee5ef12729c9396bcb1928097f5bbfec", 0xce}], 0x1, &(0x7f00000002c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5b44}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}], 0x30}, 0x48800) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x9, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x2b}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdf98}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xe}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x69}]}, &(0x7f0000000640)='GPL\x00', 0x1ff, 0x9, &(0x7f0000000680)=""/9, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x1, 0xe, 0xdc45, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000700)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000740)=[{0x5, 0x3, 0x8, 0x3}], 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000500)='fdb_delete\x00', r5, 0x0, 0x7fff}, 0x18) kernel console output (not intermixed with test programs): .394038][T23601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.447915][T23612] netlink: 'syz.1.5212': attribute type 21 has an invalid length. [ 563.477857][T23612] netlink: 'syz.1.5212': attribute type 1 has an invalid length. [ 564.001942][T23626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5216'. [ 564.020213][T23626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5216'. [ 564.418247][T23642] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5220'. [ 564.810383][T23650] lo: entered allmulticast mode [ 564.852320][T23648] lo: left allmulticast mode [ 565.288183][T23682] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5233'. [ 565.317025][T23683] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5235'. [ 565.336469][T23683] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 565.594040][T23694] lo: entered allmulticast mode [ 565.616968][T23693] lo: left allmulticast mode [ 565.626558][T23696] netlink: 144 bytes leftover after parsing attributes in process `syz.5.5240'. [ 565.730120][T23701] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5242'. [ 565.777460][T23701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5242'. [ 565.821436][T23707] netlink: 'syz.2.5244': attribute type 4 has an invalid length. [ 566.302928][T23728] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.350453][T23728] syzkaller1: entered allmulticast mode [ 566.742789][T23756] sctp: [Deprecated]: syz.5.5260 (pid 23756) Use of int in maxseg socket option. [ 566.742789][T23756] Use struct sctp_assoc_value instead [ 567.106637][T23765] lo: entered allmulticast mode [ 567.113885][T23764] lo: left allmulticast mode [ 567.636378][T23783] openvswitch: netlink: Actions may not be safe on all matching packets [ 567.826760][T23790] netlink: 'syz.2.5275': attribute type 9 has an invalid length. [ 568.025345][ T5970] IPVS: starting estimator thread 0... [ 568.118900][T23799] IPVS: using max 26 ests per chain, 62400 per kthread [ 568.159668][T23806] __nla_validate_parse: 7 callbacks suppressed [ 568.159689][T23806] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5281'. [ 568.361392][T23815] netlink: 'syz.3.5283': attribute type 12 has an invalid length. [ 568.567694][T23823] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5284'. [ 568.700413][T23839] netlink: 'syz.2.5289': attribute type 7 has an invalid length. [ 569.144600][T23856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5296'. [ 569.174965][T23859] netlink: 'syz.5.5295': attribute type 1 has an invalid length. [ 569.199064][T23861] netlink: 816 bytes leftover after parsing attributes in process `syz.1.5296'. [ 569.461510][T23867] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5298'. [ 569.937207][T23893] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 570.187545][T23897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5307'. [ 570.368336][T23906] netlink: 348 bytes leftover after parsing attributes in process `syz.5.5310'. [ 570.717033][T23919] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 570.778524][T23919] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 570.833098][T23936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5314'. [ 570.859041][T23936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5314'. [ 570.885501][T23919] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 571.124877][T23944] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5318'. [ 571.287331][T23953] openvswitch: netlink: IP tunnel dst address not specified [ 571.297113][T23952] SET target dimension over the limit! [ 571.317068][T23953] nbd: must specify an index to disconnect [ 571.426540][T23957] netlink: 'syz.3.5322': attribute type 11 has an invalid length. [ 572.498382][T24012] netlink: 'syz.2.5338': attribute type 3 has an invalid length. [ 572.529244][T24012] netlink: 'syz.2.5338': attribute type 2 has an invalid length. [ 573.070015][T24042] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 573.543690][T24062] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 573.893457][T24081] __nla_validate_parse: 17 callbacks suppressed [ 573.893476][T24081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5361'. [ 573.916369][T24081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5361'. [ 574.538410][T24114] netlink: 'syz.1.5367': attribute type 2 has an invalid length. [ 574.564939][T24114] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5367'. [ 574.639660][T24117] block nbd1: Unsupported socket: shutdown callout must be supported. [ 574.681294][T24121] syz_tun: entered allmulticast mode [ 574.716429][T24112] syz_tun: left allmulticast mode [ 575.601100][T24160] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 575.705210][T24166] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5386'. [ 575.880467][T24170] netlink: 'syz.3.5388': attribute type 1 has an invalid length. [ 575.976092][T24178] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5391'. [ 576.023943][T24181] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5391'. [ 576.176960][T24188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5393'. [ 576.201075][T24188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5393'. [ 576.254016][T24193] x_tables: duplicate underflow at hook 2 [ 577.031815][T24222] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.054982][T24224] netlink: 'syz.2.5400': attribute type 1 has an invalid length. [ 577.071288][T24224] netlink: 172 bytes leftover after parsing attributes in process `syz.2.5400'. [ 577.080619][T24222] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.099859][T24222] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 577.225239][T24222] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.248236][T24222] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.277408][T24222] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 577.490963][T24222] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.513074][T24222] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.546162][T24222] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 577.578411][T24236] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5404'. [ 577.686620][T24222] bond0: (slave netdevsim0): Releasing backup interface [ 577.706466][T24222] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.740999][T24222] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.756046][T24222] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 577.932466][T24222] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.946369][T24222] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 577.980123][T24222] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 578.031156][T24222] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.041865][T24222] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 578.056451][T24222] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 578.130883][T24222] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.157508][T24222] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 578.176276][T24262] nbd: illegal input index -8454144 [ 578.188079][T24222] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 578.260371][T24222] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.315839][T24222] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 578.344843][T24222] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 578.529188][T24273] netlink: 'syz.3.5417': attribute type 11 has an invalid length. [ 578.915971][T24294] netlink: 'syz.3.5424': attribute type 7 has an invalid length. [ 578.923302][T24296] __nla_validate_parse: 5 callbacks suppressed [ 578.923326][T24296] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5425'. [ 579.151276][T24307] 8021q: VLANs not supported on ip6_vti0 [ 579.166372][T24307] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5429'. [ 579.187137][T24307] netlink: 'syz.5.5429': attribute type 4 has an invalid length. [ 579.492041][T24316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5432'. [ 579.568154][T24319] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5433'. [ 579.621151][T24323] netlink: 'syz.2.5434': attribute type 1 has an invalid length. [ 579.630538][T24323] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5434'. [ 579.784014][T24331] x_tables: unsorted underflow at hook 2 [ 580.080375][T23530] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 580.184571][T24347] bridge8: entered promiscuous mode [ 580.210538][T24347] bridge8: entered allmulticast mode [ 580.210778][T21627] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 580.218199][T24351] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 580.237000][T21627] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 580.260552][T21627] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 580.280858][T21627] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 580.300148][T21627] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 580.561150][T24370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.826659][T24379] xt_time: unknown flags 0x4 [ 580.892785][T24382] netlink: 472 bytes leftover after parsing attributes in process `syz.2.5450'. [ 581.160558][T24394] netlink: 808 bytes leftover after parsing attributes in process `syz.1.5454'. [ 581.267524][T24398] netlink: 452 bytes leftover after parsing attributes in process `syz.5.5455'. [ 581.308504][T24400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5456'. [ 581.657901][T24414] team0: Device vti0 is of different type [ 582.054597][T24430] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 582.334512][T24354] chnl_net:caif_netlink_parms(): no params data found [ 582.399713][ T5166] Bluetooth: hci5: command tx timeout [ 582.870069][T24354] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.877432][T24354] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.898409][T24354] bridge_slave_0: entered allmulticast mode [ 582.917152][T24354] bridge_slave_0: entered promiscuous mode [ 582.948615][T24354] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.967661][T24354] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.986461][T24354] bridge_slave_1: entered allmulticast mode [ 583.017561][T24354] bridge_slave_1: entered promiscuous mode [ 583.285781][T24354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.385264][T24354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.621228][T24354] team0: Port device team_slave_0 added [ 583.642587][T24354] team0: Port device team_slave_1 added [ 583.783798][T24354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.791587][T24354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.843269][T24354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.866421][T24523] macvtap1: entered allmulticast mode [ 583.872387][T24523] veth0_macvtap: entered allmulticast mode [ 583.884222][T24524] IPVS: Error connecting to the multicast addr [ 583.895318][T24354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.911286][T24354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.940028][T24354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.067575][T24354] hsr_slave_0: entered promiscuous mode [ 584.080006][T24354] hsr_slave_1: entered promiscuous mode [ 584.086478][T24354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 584.086806][T24534] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5486'. [ 584.094368][T24354] Cannot create hsr debugfs directory [ 584.254471][T24535] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5488'. [ 584.400084][T24536] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5488'. [ 584.469340][ T5166] Bluetooth: hci5: command tx timeout [ 585.063633][T24547] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 585.357400][T24556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5496'. [ 585.373281][T24556] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 585.389645][T24558] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5497'. [ 585.426609][T24354] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 585.455799][T24354] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 585.482725][T24354] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 585.503861][T24354] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 585.530993][T24563] wg1: entered promiscuous mode [ 585.580752][T24564] netlink: 'syz.1.5499': attribute type 8 has an invalid length. [ 585.754505][T24579] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5501'. [ 585.812027][T24354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.865871][T24354] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.904936][T16915] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.912189][T16915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.941975][T24582] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20000 [ 585.962587][T16915] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.969790][T16915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.010716][T24584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5502'. [ 586.180940][T24590] sctp: [Deprecated]: syz.1.5505 (pid 24590) Use of int in max_burst socket option. [ 586.180940][T24590] Use struct sctp_assoc_value instead [ 586.549156][ T5166] Bluetooth: hci5: command tx timeout [ 586.620406][T24605] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5508'. [ 586.664719][T24354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.174776][T24354] veth0_vlan: entered promiscuous mode [ 587.207197][T24354] veth1_vlan: entered promiscuous mode [ 587.241016][T24626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5516'. [ 587.274390][T24354] veth0_macvtap: entered promiscuous mode [ 587.305746][T24354] veth1_macvtap: entered promiscuous mode [ 587.341848][T24354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.372501][T24354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.422803][T24354] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.449618][T24354] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.458488][T24354] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.477506][T24354] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.656828][T23526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.676257][T23526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.777852][T23530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.787619][T23530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.828073][T24636] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 587.982237][T24643] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5431'. [ 588.204295][T24649] x_tables: duplicate entry at hook 2 [ 588.216771][T24653] tipc: Enabling of bearer rejected, failed to enable media [ 588.629672][ T5166] Bluetooth: hci5: command tx timeout [ 588.725796][T24677] netlink: 'syz.3.5530': attribute type 1 has an invalid length. [ 588.775183][T24678] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 589.197947][T24688] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 589.235226][T24689] xt_hashlimit: size too large, truncated to 1048576 [ 589.306617][T24691] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 589.469621][T24705] x_tables: ip_tables: osf match: only valid for protocol 6 [ 589.498027][T24705] __nla_validate_parse: 2 callbacks suppressed [ 589.498047][T24705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5539'. [ 589.607473][T24712] ieee802154 phy1 wpan1: encryption failed: -22 [ 589.794765][ T5166] Bluetooth: hci2: link tx timeout [ 589.802239][ T5166] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 589.877436][T24726] netlink: 'syz.6.5548': attribute type 1 has an invalid length. [ 589.976918][T24729] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5550'. [ 589.987035][T24729] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5550'. [ 590.337396][T24744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5554'. [ 590.547468][T16916] nci: nci_ntf_packet: unknown ntf opcode 0x206 [ 591.289987][T24763] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5556'. [ 591.831528][ T5166] Bluetooth: hci2: command 0x0419 tx timeout [ 592.194911][T24800] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5569'. [ 592.241348][T24800] netlink: 16192 bytes leftover after parsing attributes in process `syz.6.5569'. [ 592.264634][T24800] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5569'. [ 592.274872][T24800] netlink: 16192 bytes leftover after parsing attributes in process `syz.6.5569'. [ 592.286021][T24800] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5569'. [ 592.691309][T24816] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 593.315555][T24832] netlink: 'syz.2.5580': attribute type 1 has an invalid length. [ 593.327657][T24832] netlink: 'syz.2.5580': attribute type 2 has an invalid length. [ 593.598495][T24843] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20000 [ 593.692736][T24845] netlink: 'syz.2.5584': attribute type 4 has an invalid length. [ 593.706764][T24846] netlink: 'syz.2.5584': attribute type 4 has an invalid length. [ 593.750004][T16916] wlan1: Trigger new scan to find an IBSS to join [ 593.792499][T24850] netlink: 'syz.2.5585': attribute type 10 has an invalid length. [ 593.820520][T24852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 594.447605][T24876] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 594.550675][T24883] __nla_validate_parse: 65 callbacks suppressed [ 594.550694][T24883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5596'. [ 594.835445][T24904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5603'. [ 594.844793][T24904] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5603'. [ 594.887318][T24905] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5601'. [ 595.228287][T24915] netlink: 'syz.3.5607': attribute type 3 has an invalid length. [ 595.401843][T24922] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5610'. [ 595.677637][T24933] netlink: 'syz.3.5614': attribute type 1 has an invalid length. [ 595.690632][T24933] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5614'. [ 595.702751][T24933] netlink: 'syz.3.5614': attribute type 29 has an invalid length. [ 595.710901][T24933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5614'. [ 595.720759][T24933] netlink: 'syz.3.5614': attribute type 29 has an invalid length. [ 595.728614][T24933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5614'. [ 596.029289][ C1] vcan0: j1939_tp_rxtimer: 0xffff888050fe5000: rx timeout, send abort [ 596.529759][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032bf3000: rx timeout, send abort [ 596.538129][ C1] vcan0: j1939_tp_rxtimer: 0xffff888050fe5000: abort rx timeout. Force session deactivation [ 596.792727][T23530] wlan1: Trigger new scan to find an IBSS to join [ 596.805755][T24955] set match dimension is over the limit! [ 597.038054][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032bf3000: abort rx timeout. Force session deactivation [ 597.126145][T24964] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5625'. [ 597.376575][T24979] openvswitch: netlink: IP tunnel dst address not specified [ 597.737264][T16915] wlan1: Creating new IBSS network, BSSID fa:0f:a5:a1:95:de [ 598.460047][T25009] bridge7: entered promiscuous mode [ 598.471049][T25009] bridge7: entered allmulticast mode [ 598.531606][T25009] xt_l2tp: missing protocol rule (udp|l2tpip) [ 598.972511][T25024] netlink: 192 bytes leftover after parsing attributes in process `syz.6.5643'. [ 599.004496][T25026] netlink: 'syz.3.5644': attribute type 30 has an invalid length. [ 599.114822][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 599.130607][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 599.142059][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 599.152920][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 599.179649][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 599.450905][T25039] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 600.112829][T25070] xt_hashlimit: size too large, truncated to 1048576 [ 600.667553][T25030] chnl_net:caif_netlink_parms(): no params data found [ 600.752537][T25093] __nla_validate_parse: 1 callbacks suppressed [ 600.752557][T25093] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5656'. [ 600.770630][T25093] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5656'. [ 600.793958][T25093] netlink: zone id is out of range [ 600.804737][T25093] netlink: zone id is out of range [ 600.814870][T25093] netlink: zone id is out of range [ 600.859943][T25093] netlink: get zone limit has 8 unknown bytes [ 600.902738][T25095] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5657'. [ 601.031300][T25101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5658'. [ 601.063514][T25030] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.071699][T25030] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.079884][T25030] bridge_slave_0: entered allmulticast mode [ 601.087967][T25030] bridge_slave_0: entered promiscuous mode [ 601.122114][T25030] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.146767][T25030] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.169677][T25030] bridge_slave_1: entered allmulticast mode [ 601.177873][T25030] bridge_slave_1: entered promiscuous mode [ 601.269557][T24786] Bluetooth: hci6: command tx timeout [ 601.286522][T25108] tipc: Enabling of bearer rejected, failed to enable media [ 601.318621][ T30] audit: type=1800 audit(1752848928.648:7): pid=25110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5661" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308016AEB34CF29CFD883A854803074CE6D65E4F15F117197546D656D6F72792E6576656E7473 dev="tmpfs" ino=2520 res=0 errno=0 [ 601.371519][T25112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5662'. [ 601.427575][T25030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.470985][T25030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.598420][T25030] team0: Port device team_slave_0 added [ 601.631060][T25125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5665'. [ 601.631243][T25030] team0: Port device team_slave_1 added [ 601.792065][T25127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5666'. [ 601.801801][T25030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.801819][T25030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.801884][T25030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.804623][T25030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.863803][T25030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.996515][T25030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.063975][T25142] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5669'. [ 602.123938][T25139] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5669'. [ 602.327413][T25030] hsr_slave_0: entered promiscuous mode [ 602.350197][T25030] hsr_slave_1: entered promiscuous mode [ 602.359149][T25152] netlink: 'syz.3.5673': attribute type 1 has an invalid length. [ 602.366925][T25152] netlink: 172 bytes leftover after parsing attributes in process `syz.3.5673'. [ 602.377421][T25030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 602.388852][T25030] Cannot create hsr debugfs directory [ 602.725592][T25156] xt_CT: No such helper "syz1" [ 602.987962][T14631] IPVS: starting estimator thread 0... [ 603.074662][T25030] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 603.099021][T25165] IPVS: using max 31 ests per chain, 74400 per kthread [ 603.133541][T25030] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 603.156175][T25030] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 603.188601][T25030] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 603.349595][T24786] Bluetooth: hci6: command tx timeout [ 603.491101][T25030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.549821][T25030] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.627852][T23528] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.635095][T23528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.758682][T23528] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.765936][T23528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.806175][T25204] netlink: 'syz.3.5686': attribute type 11 has an invalid length. [ 603.956668][T25030] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 604.610933][T25030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.632346][T25239] netlink: 'syz.6.5694': attribute type 21 has an invalid length. [ 604.678023][T25239] IPv6: NLM_F_CREATE should be specified when creating new route [ 604.721691][T25239] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 604.729040][T25239] IPv6: NLM_F_CREATE should be set when creating new route [ 604.736310][T25239] IPv6: NLM_F_CREATE should be set when creating new route [ 604.743607][T25239] IPv6: NLM_F_CREATE should be set when creating new route [ 604.943753][T25250] xt_l2tp: invalid flags combination: 4 [ 605.432708][T24786] Bluetooth: hci6: command tx timeout [ 605.504708][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 605.518180][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 605.527663][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 605.551616][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 605.560824][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 605.861463][T25030] veth0_vlan: entered promiscuous mode [ 605.921423][T25030] veth1_vlan: entered promiscuous mode [ 606.034532][T25285] __nla_validate_parse: 8 callbacks suppressed [ 606.034551][T25285] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5702'. [ 606.075027][T25030] veth0_macvtap: entered promiscuous mode [ 606.122071][T25030] veth1_macvtap: entered promiscuous mode [ 606.210064][T25030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.248230][T25030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.292219][T25030] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.312177][T25030] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.320093][T25295] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5705'. [ 606.331957][T25030] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.352524][T25030] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.518008][T25298] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5706'. [ 606.602037][T23526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.618000][T23526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.824198][T16915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.858575][T16915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.875196][T25310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 607.131889][T25319] netlink: 'syz.2.5713': attribute type 2 has an invalid length. [ 607.140681][T25319] netlink: 'syz.2.5713': attribute type 2 has an invalid length. [ 607.148451][T25319] netlink: 'syz.2.5713': attribute type 2 has an invalid length. [ 607.192824][T25319] netlink: 'syz.2.5713': attribute type 1 has an invalid length. [ 607.211603][T25319] netlink: 'syz.2.5713': attribute type 1 has an invalid length. [ 607.233354][T25319] netlink: 'syz.2.5713': attribute type 2 has an invalid length. [ 607.392249][T25331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5715'. [ 607.425045][T25262] chnl_net:caif_netlink_parms(): no params data found [ 607.490862][T25339] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5717'. [ 607.511060][T24786] Bluetooth: hci6: command tx timeout [ 607.583594][T25342] Cannot find del_set index 5 as target [ 607.600312][T24786] Bluetooth: hci7: command tx timeout [ 607.969002][T25262] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.998307][T25262] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.006516][T25262] bridge_slave_0: entered allmulticast mode [ 608.037381][T25262] bridge_slave_0: entered promiscuous mode [ 608.082453][T25262] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.105916][T25262] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.134510][T25262] bridge_slave_1: entered allmulticast mode [ 608.152150][T25262] bridge_slave_1: entered promiscuous mode [ 608.266501][T25262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.291104][T25262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.406069][T25262] team0: Port device team_slave_0 added [ 608.497646][T25262] team0: Port device team_slave_1 added [ 608.821994][T25262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.880164][T25262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.918037][T25262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.991930][T25262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.009340][T25262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.043310][T25262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.114423][T25391] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5731'. [ 609.179427][T25397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5733'. [ 609.228589][T25262] hsr_slave_0: entered promiscuous mode [ 609.242528][T25262] hsr_slave_1: entered promiscuous mode [ 609.256356][T25262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 609.276586][T25262] Cannot create hsr debugfs directory [ 609.382552][T25395] 8021q: adding VLAN 0 to HW filter on device bond1 [ 609.680080][T24786] Bluetooth: hci7: command tx timeout [ 609.719571][T25419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5736'. [ 609.801058][T25424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5736'. [ 610.106408][T25432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5741'. [ 610.130042][T25437] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 610.357234][T25262] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 610.386154][T25262] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 610.434786][T25262] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 610.463205][T25262] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 610.778065][T25262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.866872][T25262] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.898180][T23529] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.905473][T23529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.961175][T23529] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.968441][T23529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.126361][T25473] syzkaller0: entered promiscuous mode [ 611.136095][T25473] syzkaller0: entered allmulticast mode [ 611.751753][T24786] Bluetooth: hci7: command tx timeout [ 612.072055][T23525] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 613.567738][T25482] veth1_macvtap: left promiscuous mode [ 613.779691][T25500] __nla_validate_parse: 3 callbacks suppressed [ 613.779709][T25500] netlink: 216 bytes leftover after parsing attributes in process `syz.7.5761'. [ 613.830830][T24786] Bluetooth: hci7: command tx timeout [ 613.948342][T25262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.255243][T25526] veth0: entered promiscuous mode [ 614.273914][T25522] veth0: left promiscuous mode [ 614.381722][T25530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5770'. [ 614.473086][T25537] netlink: 'syz.6.5772': attribute type 13 has an invalid length. [ 614.524101][T25537] lo: entered promiscuous mode [ 614.547388][T25537] lo: entered allmulticast mode [ 614.577679][T25537] tunl0: entered promiscuous mode [ 614.588096][T25537] tunl0: entered allmulticast mode [ 614.602967][T25537] gre0: entered promiscuous mode [ 614.608039][T25537] gre0: entered allmulticast mode [ 614.627236][T25537] gretap0: entered promiscuous mode [ 614.636676][T25537] gretap0: entered allmulticast mode [ 614.652391][T25537] gretap0: refused to change device tx_queue_len [ 614.660086][T25537] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 614.910108][T25262] veth0_vlan: entered promiscuous mode [ 614.963924][T25551] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 614.982055][T25262] veth1_vlan: entered promiscuous mode [ 615.076619][T25262] veth0_macvtap: entered promiscuous mode [ 615.118671][T25262] veth1_macvtap: entered promiscuous mode [ 615.200901][T25262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.221252][T25560] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5780'. [ 615.258251][T25262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.327652][T25566] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 615.327685][T25563] IPVS: stopping master sync thread 25566 ... [ 615.356267][T25262] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.373971][T25262] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.401421][T25262] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.433955][T25262] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.810648][T23529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.850713][T23529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.930018][T23528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.940282][T23528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.412127][T25609] netlink: 'syz.6.5791': attribute type 1 has an invalid length. [ 616.507410][T25609] bond2: entered promiscuous mode [ 616.513851][T25609] 8021q: adding VLAN 0 to HW filter on device bond2 [ 616.617044][T25617] 8021q: adding VLAN 0 to HW filter on device bond2 [ 616.631933][T25617] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 616.647648][T25617] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 616.665115][T25617] bond2: (slave wireguard0): making interface the new active one [ 616.687878][T25617] wireguard0: entered promiscuous mode [ 616.700362][T25617] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 616.853259][T25626] bridge_slave_0: left allmulticast mode [ 616.880927][T25626] bridge_slave_0: left promiscuous mode [ 616.888511][T25626] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.965577][T25626] bridge_slave_1: left allmulticast mode [ 616.988768][T25626] bridge_slave_1: left promiscuous mode [ 617.001438][T25626] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.056284][T25626] bond0: (slave bond_slave_0): Releasing backup interface [ 617.081136][T25626] bond0: (slave bond_slave_1): Releasing backup interface [ 617.131129][T25626] team0: Port device team_slave_0 removed [ 617.185864][T25626] team0: Port device team_slave_1 removed [ 617.223057][T25626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.244267][T25626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.283494][T25626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.305777][T25626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.417422][T25631] team0: Mode changed to "activebackup" [ 617.513849][T25635] vlan0: entered promiscuous mode [ 617.602568][T25635] team0: Port device vlan0 added [ 617.678720][T25640] tipc: Started in network mode [ 617.688284][T25640] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 617.717531][T25640] tipc: Enabled bearer , priority 0 [ 617.727929][T25641] syzkaller0: entered promiscuous mode [ 617.747800][T25641] syzkaller0: entered allmulticast mode [ 618.086579][T25668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 618.299044][T25690] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5807'. [ 618.341403][T25680] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.349219][T25680] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.607638][T25680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 618.654860][T25680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 618.711833][ T5970] tipc: Node number set to 11578026 [ 618.758410][T25713] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5811'. [ 618.921738][T25680] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.936376][T25680] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.947611][T25680] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.958249][T25680] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.137981][T25692] dvmrp0: entered allmulticast mode [ 619.456347][T25735] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5816'. [ 619.617307][T25740] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5821'. [ 619.624560][T25743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5819'. [ 619.650884][T25743] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5819'. [ 619.664254][T25743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5819'. [ 620.511205][T25786] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5833'. [ 620.530296][T25788] netlink: 'syz.7.5834': attribute type 11 has an invalid length. [ 620.552927][T25788] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5834'. [ 620.797613][T25799] ipt_ECN: cannot use operation on non-tcp rule [ 620.812944][T25800] netlink: 'syz.2.5840': attribute type 1 has an invalid length. [ 620.842292][T25801] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5840'. [ 620.842685][T25805] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5840'. [ 620.888295][T25800] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5840'. [ 620.973936][T25810] netlink: 'syz.7.5841': attribute type 10 has an invalid length. [ 620.990632][T25810] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 621.133240][T25813] netlink: 'syz.8.5843': attribute type 1 has an invalid length. [ 621.716967][T25836] syzkaller1: entered promiscuous mode [ 621.743836][T25836] syzkaller1: entered allmulticast mode [ 621.931046][T25850] netlink: 'syz.2.5851': attribute type 8 has an invalid length. [ 622.098245][T25856] netlink: 'syz.8.5853': attribute type 1 has an invalid length. [ 622.115026][T25856] netlink: 'syz.8.5853': attribute type 1 has an invalid length. [ 622.142765][T25854] IPVS: length: 157 != 24 [ 622.615912][T25870] openvswitch: netlink: Unknown nsh attribute 0 [ 622.624751][T25870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 622.704518][T25850] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 623.258185][T25909] netlink: 'syz.3.5874': attribute type 2 has an invalid length. [ 623.427161][T25911] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 623.456063][T25918] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 623.655133][T25935] netlink: 'syz.2.5880': attribute type 1 has an invalid length. [ 623.807435][T25942] bond3: (slave bridge10): making interface the new active one [ 623.816779][T25942] bond3: (slave bridge10): Enslaving as an active interface with an up link [ 623.857533][T25946] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 624.085924][T25960] xt_l2tp: missing protocol rule (udp|l2tpip) [ 624.207911][T25963] netlink: 'syz.6.5890': attribute type 1 has an invalid length. [ 624.233371][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.252625][T25963] netlink: 'syz.6.5890': attribute type 10 has an invalid length. [ 624.586566][T25979] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 625.487730][T26010] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 625.574655][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 625.585365][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 625.596396][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 625.608475][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 625.617745][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 625.711037][T26019] __nla_validate_parse: 13 callbacks suppressed [ 625.711056][T26019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5904'. [ 625.984779][T26027] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5906'. [ 626.010757][T26029] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5906'. [ 626.021596][T26032] validate_nla: 4 callbacks suppressed [ 626.021612][T26032] netlink: 'syz.6.5907': attribute type 1 has an invalid length. [ 626.292122][T26042] openvswitch: netlink: Flow key attribute not present in set flow. [ 626.307246][T26040] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5909'. [ 626.320109][T26043] openvswitch: netlink: Flow key attribute not present in set flow. [ 626.415378][T26045] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5909'. [ 626.565495][T26047] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5911'. [ 626.797376][T26011] chnl_net:caif_netlink_parms(): no params data found [ 626.909399][T26062] x_tables: unsorted entry at hook 3 [ 626.939763][T26062] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5914'. [ 627.101621][T26075] netlink: 71 bytes leftover after parsing attributes in process `syz.6.5917'. [ 627.270415][T26011] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.277697][T26011] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.301678][T26011] bridge_slave_0: entered allmulticast mode [ 627.324830][T26011] bridge_slave_0: entered promiscuous mode [ 627.335346][T26011] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.343779][T26011] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.358982][T26011] bridge_slave_1: entered allmulticast mode [ 627.367044][T26011] bridge_slave_1: entered promiscuous mode [ 627.518575][T26083] netlink: 'syz.6.5919': attribute type 12 has an invalid length. [ 627.533890][T26083] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5919'. [ 627.564256][T26011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.610050][T26011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.673607][T24786] Bluetooth: hci3: command tx timeout [ 627.762698][T26011] team0: Port device team_slave_0 added [ 627.772535][T26011] team0: Port device team_slave_1 added [ 627.860644][T26011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.867848][T26011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.897470][T26011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.951043][T26011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.958141][T26011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.017505][T26011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.391076][T26011] hsr_slave_0: entered promiscuous mode [ 628.411528][T26011] hsr_slave_1: entered promiscuous mode [ 628.431467][T26011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 628.440094][T26011] Cannot create hsr debugfs directory [ 628.470040][T26105] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5926'. [ 629.018416][T26011] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 629.031249][T26011] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.251501][T26011] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 629.264251][T26011] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.417501][T26011] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 629.435078][T26011] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.693617][T26011] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 629.734103][T26011] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.749254][T24786] Bluetooth: hci3: command tx timeout [ 629.994091][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 630.085878][T26146] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 630.202509][T26011] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 630.251062][T26011] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 630.271302][T26011] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 630.293749][T26011] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 630.615428][T26011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.671142][T26011] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.692606][T23529] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.699856][T23529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.750741][T23525] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.757950][T23525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.882245][T26011] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 631.058947][T26184] IPVS: set_ctl: invalid protocol: 43 172.30.0.8:20000 [ 631.212700][T26201] __nla_validate_parse: 13 callbacks suppressed [ 631.212718][T26201] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5944'. [ 631.351776][T26201] bridge0: entered promiscuous mode [ 631.378733][T26201] bridge0: entered allmulticast mode [ 631.516516][T26011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 631.683891][T26011] veth0_vlan: entered promiscuous mode [ 631.718445][T26011] veth1_vlan: entered promiscuous mode [ 631.747851][T26214] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5952'. [ 631.812997][T26011] veth0_macvtap: entered promiscuous mode [ 631.830518][T24786] Bluetooth: hci3: command tx timeout [ 631.843383][T26011] veth1_macvtap: entered promiscuous mode [ 631.939461][T26011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.947555][T26216] netlink: 296 bytes leftover after parsing attributes in process `syz.8.5953'. [ 631.960499][T26217] netlink: 296 bytes leftover after parsing attributes in process `syz.8.5953'. [ 631.970779][T26011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 631.977618][T26011] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.991935][T26216] netlink: 296 bytes leftover after parsing attributes in process `syz.8.5953'. [ 632.005757][T26011] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.013934][T26216] netlink: 296 bytes leftover after parsing attributes in process `syz.8.5953'. [ 632.022621][T26011] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.033853][T26011] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.050721][T26216] netlink: 296 bytes leftover after parsing attributes in process `syz.8.5953'. [ 632.060958][T26216] netlink: 296 bytes leftover after parsing attributes in process `syz.8.5953'. [ 632.070865][T26216] netlink: 296 bytes leftover after parsing attributes in process `syz.8.5953'. [ 632.080399][T26216] netlink: 296 bytes leftover after parsing attributes in process `syz.8.5953'. [ 632.488813][T23529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.496796][T23529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.610891][T23526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.630686][T23526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.729694][T26285] dummy0: mtu less than device minimum [ 633.909920][T24786] Bluetooth: hci3: command tx timeout [ 634.444872][T26308] syzkaller0: entered promiscuous mode [ 634.451974][T26308] syzkaller0: entered allmulticast mode [ 634.710758][T26316] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 634.757479][T26325] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 634.784917][T26325] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 634.810864][T26325] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 634.822253][T26325] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 635.091722][T26338] delete_channel: no stack [ 635.097574][T26338] netlink: 'syz.8.5985': attribute type 6 has an invalid length. [ 635.214712][T26348] tipc: Enabled bearer , priority 0 [ 635.347517][T26348] tipc: Disabling bearer [ 635.732459][T26373] Dead loop on virtual device ip6_vti0, fix it urgently! [ 635.751570][T26373] Dead loop on virtual device ip6_vti0, fix it urgently! [ 635.790299][T26373] Dead loop on virtual device ip6_vti0, fix it urgently! [ 636.170328][T26396] netlink: 'syz.2.6003': attribute type 39 has an invalid length. [ 636.180984][T26397] netlink: 'syz.7.6002': attribute type 4 has an invalid length. [ 636.316215][T26401] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 636.352151][ T9] IPVS: starting estimator thread 0... [ 636.420480][T26404] __nla_validate_parse: 45 callbacks suppressed [ 636.420502][T26404] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6004'. [ 636.449743][T26402] IPVS: using max 29 ests per chain, 69600 per kthread [ 636.580764][T26410] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6007'. [ 636.596127][T26409] vlan4: entered promiscuous mode [ 636.604080][T26409] vlan4: entered allmulticast mode [ 636.616295][T26409] hsr_slave_1: entered allmulticast mode [ 636.695101][T26413] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6008'. [ 636.985190][T26425] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 637.051484][T26429] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 637.061090][T23530] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 637.091241][T14631] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 637.100036][T23530] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 637.121077][T26429] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 637.207815][T26429] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 637.237539][T26429] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 637.310760][T26429] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 637.320157][T26429] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 637.328510][T26429] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 637.399590][T14631] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 637.443449][T26429] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 637.500531][T26429] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 637.512979][T26449] netlink: 64 bytes leftover after parsing attributes in process `syz.8.6019'. [ 637.529822][T26442] syzkaller0: entered promiscuous mode [ 637.535640][T26442] syzkaller0: entered allmulticast mode [ 637.553487][T26429] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 637.768290][T26457] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6021'. [ 637.810758][T26457] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6021'. [ 637.855752][T26460] netlink: 104 bytes leftover after parsing attributes in process `syz.8.6022'. [ 637.868074][T26460] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 638.084212][T14631] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 638.374933][T26470] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 638.383242][ T977] IPVS: starting estimator thread 0... [ 638.490048][T26476] IPVS: using max 28 ests per chain, 67200 per kthread [ 640.433909][T26479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6026'. [ 640.653746][T26479] macvtap2: entered promiscuous mode [ 640.661243][T26479] vlan0: entered promiscuous mode [ 640.669263][T26479] macvtap2: entered allmulticast mode [ 640.682476][T26479] vlan0: entered allmulticast mode [ 640.695056][T26479] veth0_vlan: entered allmulticast mode [ 640.885158][T26496] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6032'. [ 640.899209][T26498] veth0: entered promiscuous mode [ 640.905172][T26497] veth0: left promiscuous mode [ 641.043659][T26496] netlink: 'syz.8.6032': attribute type 13 has an invalid length. [ 641.425112][T26526] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6040'. [ 641.434298][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 641.479114][T26527] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6040'. [ 641.557452][T26534] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6042'. [ 641.570843][T26534] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6042'. [ 641.920935][T26545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6047'. [ 641.936127][T26545] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6047'. [ 642.093487][T26552] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 642.352629][T26561] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6052'. [ 642.621842][T26574] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6058'. [ 642.730429][T26577] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6059'. [ 642.755942][T26579] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6061'. [ 642.911679][T26586] netlink: 108 bytes leftover after parsing attributes in process `syz.7.6062'. [ 643.120346][T26596] x_tables: duplicate underflow at hook 2 [ 643.281527][T26602] veth0_to_bridge: entered promiscuous mode [ 643.367569][T26609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 643.376839][T26609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 643.387420][T26609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 643.433199][T26609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 643.617419][T26614] batadv1: entered allmulticast mode [ 643.817872][T26600] veth0_to_bridge: left promiscuous mode [ 643.977843][ T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 643.987780][ T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 643.994396][T26629] netlink: 'syz.7.6075': attribute type 8 has an invalid length. [ 644.014005][ T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 644.024304][ T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 644.033977][ T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 644.081929][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 644.333774][T26639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 644.445262][T26648] netlink: 'syz.3.6081': attribute type 10 has an invalid length. [ 644.469903][T26648] syz_tun: entered promiscuous mode [ 644.548543][T26648] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 644.620336][T26657] netlink: 'syz.2.6082': attribute type 1 has an invalid length. [ 644.680232][T26657] netlink: 'syz.2.6082': attribute type 1 has an invalid length. [ 644.852994][T26662] netlink: 'syz.8.6086': attribute type 12 has an invalid length. [ 644.888764][T26662] netlink: 'syz.8.6086': attribute type 29 has an invalid length. [ 644.973711][T26667] tipc: Enabled bearer , priority 0 [ 645.016431][T26667] syzkaller0: entered promiscuous mode [ 645.047410][T26667] syzkaller0: entered allmulticast mode [ 645.071058][T26670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 645.118195][T26667] tipc: Resetting bearer [ 645.278030][T26659] tipc: Resetting bearer [ 645.336660][T26659] tipc: Disabling bearer [ 645.685356][T26693] FAULT_INJECTION: forcing a failure. [ 645.685356][T26693] name failslab, interval 1, probability 0, space 0, times 0 [ 645.724689][T26693] CPU: 0 UID: 0 PID: 26693 Comm: syz.8.6094 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 645.724722][T26693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 645.724736][T26693] Call Trace: [ 645.724744][T26693] [ 645.724754][T26693] dump_stack_lvl+0x189/0x250 [ 645.724786][T26693] ? __pfx____ratelimit+0x10/0x10 [ 645.724811][T26693] ? __pfx_dump_stack_lvl+0x10/0x10 [ 645.724838][T26693] ? __pfx__printk+0x10/0x10 [ 645.724876][T26693] ? __pfx___might_resched+0x10/0x10 [ 645.724901][T26693] ? fs_reclaim_acquire+0x7d/0x100 [ 645.724929][T26693] should_fail_ex+0x414/0x560 [ 645.724958][T26693] should_failslab+0xa8/0x100 [ 645.724994][T26693] __kmalloc_noprof+0xcb/0x4f0 [ 645.725023][T26693] ? ioctl_standard_iw_point+0x4d5/0xd40 [ 645.725061][T26693] ioctl_standard_iw_point+0x4d5/0xd40 [ 645.725107][T26693] ? __pfx_cfg80211_wext_giwscan+0x10/0x10 [ 645.725131][T26693] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 645.725161][T26693] ? __pfx___mutex_lock+0x10/0x10 [ 645.725192][T26693] ? full_name_hash+0x92/0xe0 [ 645.725214][T26693] ? __pfx_cfg80211_wext_giwscan+0x10/0x10 [ 645.725238][T26693] ioctl_standard_call+0xaf/0x1b0 [ 645.725269][T26693] ? __pfx_cfg80211_wext_giwscan+0x10/0x10 [ 645.725287][T26693] wext_ioctl_dispatch+0xeb/0x410 [ 645.725312][T26693] ? __pfx_ioctl_standard_call+0x10/0x10 [ 645.725343][T26693] wext_handle_ioctl+0x100/0x1c0 [ 645.725373][T26693] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 645.725396][T26693] ? __lock_acquire+0xab9/0xd20 [ 645.725435][T26693] sock_ioctl+0x15f/0x790 [ 645.725459][T26693] ? __pfx_sock_ioctl+0x10/0x10 [ 645.725480][T26693] ? __fget_files+0x2a/0x420 [ 645.725498][T26693] ? __fget_files+0x3a0/0x420 [ 645.725519][T26693] ? __fget_files+0x2a/0x420 [ 645.725540][T26693] ? bpf_lsm_file_ioctl+0x9/0x20 [ 645.725565][T26693] ? __pfx_sock_ioctl+0x10/0x10 [ 645.725586][T26693] __se_sys_ioctl+0xf9/0x170 [ 645.725614][T26693] do_syscall_64+0xfa/0x3b0 [ 645.725635][T26693] ? lockdep_hardirqs_on+0x9c/0x150 [ 645.725662][T26693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.725682][T26693] ? clear_bhb_loop+0x60/0xb0 [ 645.725708][T26693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.725728][T26693] RIP: 0033:0x7f0deef8e9a9 [ 645.725746][T26693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.725762][T26693] RSP: 002b:00007f0defdbe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 645.725784][T26693] RAX: ffffffffffffffda RBX: 00007f0def1b5fa0 RCX: 00007f0deef8e9a9 [ 645.725799][T26693] RDX: 0000200000000000 RSI: 0000000000008b19 RDI: 0000000000000003 [ 645.725811][T26693] RBP: 00007f0defdbe090 R08: 0000000000000000 R09: 0000000000000000 [ 645.725824][T26693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.725836][T26693] R13: 0000000000000000 R14: 00007f0def1b5fa0 R15: 00007ffc39ddfaf8 [ 645.725869][T26693] [ 646.068872][ T51] Bluetooth: hci8: command tx timeout [ 646.181704][T26624] chnl_net:caif_netlink_parms(): no params data found [ 646.613197][T26723] __nla_validate_parse: 14 callbacks suppressed [ 646.613217][T26723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6102'. [ 646.658298][T26624] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.667794][T26723] netlink: 'syz.2.6102': attribute type 4 has an invalid length. [ 646.679221][T26624] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.719179][T26624] bridge_slave_0: entered allmulticast mode [ 646.733593][T26624] bridge_slave_0: entered promiscuous mode [ 646.904276][T26624] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.925548][T26624] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.930995][T14631] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 646.948573][T26624] bridge_slave_1: entered allmulticast mode [ 646.990935][T26624] bridge_slave_1: entered promiscuous mode [ 647.136563][T26751] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6109'. [ 647.145910][T14631] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 647.169452][T26751] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6109'. [ 647.197349][T26624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.252857][T26752] pim6reg: entered allmulticast mode [ 647.291811][T26624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.562638][T26624] team0: Port device team_slave_0 added [ 647.585290][T26624] team0: Port device team_slave_1 added [ 647.746929][T26624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.783787][T26624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.900915][T26624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.987395][T26624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.021475][T26624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.080251][T26624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.162882][ T51] Bluetooth: hci8: command tx timeout [ 648.301528][T26624] hsr_slave_0: entered promiscuous mode [ 648.322791][T26624] hsr_slave_1: entered promiscuous mode [ 648.335322][T26800] ipt_ECN: cannot use operation on non-tcp rule [ 648.345052][T26800] ipt_ECN: cannot use operation on non-tcp rule [ 648.351816][T26624] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 648.372426][T26624] Cannot create hsr debugfs directory [ 648.402914][T26791] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6117'. [ 648.702948][T26808] netlink: 64 bytes leftover after parsing attributes in process `syz.8.6122'. [ 648.734775][T26808] openvswitch: netlink: Flow key attr not present in new flow. [ 648.959632][T26825] netlink: 'syz.7.6127': attribute type 2 has an invalid length. [ 649.163707][T26829] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6129'. [ 649.241734][T26834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6129'. [ 649.556272][T26624] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 649.616807][T26624] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 649.663622][T26624] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 649.692035][T26624] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 649.830192][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 649.877935][T26859] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6134'. [ 650.017407][T26624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.078196][T26624] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.100352][T23525] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.107613][T23525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.140776][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.148006][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.158480][T26868] syz_tun: entered promiscuous mode [ 650.167165][T26868] syz_tun: entered allmulticast mode [ 650.230017][ T51] Bluetooth: hci8: command tx timeout [ 650.292682][T26624] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 650.374058][T26874] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6140'. [ 650.396981][T26874] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6140'. [ 650.421351][T26874] netlink: 'syz.8.6140': attribute type 5 has an invalid length. [ 650.822048][T26624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.709834][T26624] veth0_vlan: entered promiscuous mode [ 651.746348][T26624] veth1_vlan: entered promiscuous mode [ 651.851714][T26624] veth0_macvtap: entered promiscuous mode [ 651.878059][T26624] veth1_macvtap: entered promiscuous mode [ 651.902603][T26934] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 651.928291][T26931] __nla_validate_parse: 3 callbacks suppressed [ 651.928309][T26931] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6155'. [ 651.950941][T26624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 651.978411][T26624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 651.996690][T26624] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.008880][T26624] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.018029][T26624] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.043380][T26624] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.293586][T26942] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6159'. [ 652.310397][ T51] Bluetooth: hci8: command tx timeout [ 652.324804][T26942] netlink: 'syz.8.6159': attribute type 30 has an invalid length. [ 652.341171][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.358763][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.381400][T26947] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6161'. [ 652.426953][T26942] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.436513][T26942] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.445961][T26942] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.454808][T26942] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.468609][T26947] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 652.486230][T26942] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6159'. [ 652.495289][T26942] netlink: 'syz.8.6159': attribute type 30 has an invalid length. [ 652.537899][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.560329][T26947] macsec2: entered promiscuous mode [ 652.565599][T26947] team0: entered promiscuous mode [ 652.575731][T26947] macsec2: entered allmulticast mode [ 652.595641][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.605430][T26947] team0: entered allmulticast mode [ 652.630010][T26947] vlan0: entered allmulticast mode [ 652.635626][T26947] veth0_vlan: entered allmulticast mode [ 652.672051][T26953] netlink: 'syz.8.6162': attribute type 16 has an invalid length. [ 652.684495][T26953] netlink: 'syz.8.6162': attribute type 17 has an invalid length. [ 652.879869][T26959] SET target dimension over the limit! [ 653.217718][T26972] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6168'. [ 653.300876][T26974] xt_HMARK: proto mask must be zero with L3 mode [ 653.553335][T26984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 653.640461][T26985] tipc: Started in network mode [ 653.670989][T26985] tipc: Node identity 027d73de912d, cluster identity 4711 [ 653.716632][T26985] tipc: Enabled bearer , priority 0 [ 653.751677][T26986] syzkaller0: entered promiscuous mode [ 653.787634][T26986] syzkaller0: entered allmulticast mode [ 653.893289][T26980] tipc: Resetting bearer [ 653.946308][T24786] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 653.957802][T24786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 653.968523][T24786] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 653.991228][T24786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 653.992185][T26980] tipc: Disabling bearer [ 654.015177][T24786] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 654.321466][T27010] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6177'. [ 654.573827][T23530] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.620027][T27018] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6180'. [ 654.674823][T27018] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6180'. [ 654.797189][T27018] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6180'. [ 654.811341][T27028] netlink: 148 bytes leftover after parsing attributes in process `syz.9.6184'. [ 655.002300][T23530] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.052621][T27023] IPVS: Unknown mcast interface: vcan0 [ 655.257199][T23530] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.505585][T23530] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.069703][T24786] Bluetooth: hci4: command tx timeout [ 657.741629][T23530] bond3 (unregistering): (slave bridge10): Releasing active interface [ 657.903255][T23530] bond1 (unregistering): Released all slaves [ 658.058599][T23530] smc: removing net device bond0 with user defined pnetid SYZ2 [ 658.067810][T23530] bond0 (unregistering): Released all slaves [ 658.084905][T23530] bond2 (unregistering): Released all slaves [ 658.104832][T23530] bond3 (unregistering): Released all slaves [ 658.154482][T24786] Bluetooth: hci4: command tx timeout [ 658.248054][T27102] tipc: Started in network mode [ 658.272828][T27102] tipc: Node identity e0000002, cluster identity 4711 [ 658.295100][T27102] tipc: Enabling of bearer rejected, failed to enable media [ 658.307025][T26995] chnl_net:caif_netlink_parms(): no params data found [ 658.343833][T23530] tipc: Disabling bearer [ 658.359040][T23530] tipc: Left network mode [ 658.411963][T23530] IPVS: stopping backup sync thread 24636 ... [ 658.663666][T27120] __nla_validate_parse: 4 callbacks suppressed [ 658.663686][T27120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6207'. [ 658.720454][T27120] netlink: 'syz.3.6207': attribute type 3 has an invalid length. [ 658.750973][T27120] netlink: 'syz.3.6207': attribute type 4 has an invalid length. [ 659.211379][T26995] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.212717][T27140] netlink: 164 bytes leftover after parsing attributes in process `syz.9.6212'. [ 659.220698][T26995] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.243086][T27145] netlink: 108 bytes leftover after parsing attributes in process `syz.7.6214'. [ 659.299988][T26995] bridge_slave_0: entered allmulticast mode [ 659.340475][T26995] bridge_slave_0: entered promiscuous mode [ 659.370827][T26995] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.384928][T26995] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.418200][T26995] bridge_slave_1: entered allmulticast mode [ 659.431390][T27149] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6216'. [ 659.447276][T27147] netlink: 'syz.7.6215': attribute type 1 has an invalid length. [ 659.456792][T27147] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6215'. [ 659.466586][T27147] netlink: 272 bytes leftover after parsing attributes in process `syz.7.6215'. [ 659.480209][T26995] bridge_slave_1: entered promiscuous mode [ 659.490205][T27147] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6215'. [ 659.553092][T27157] netlink: 'syz.9.6218': attribute type 1 has an invalid length. [ 659.566637][T27157] netlink: 224 bytes leftover after parsing attributes in process `syz.9.6218'. [ 659.610597][T23530] hsr_slave_0: left promiscuous mode [ 659.698275][T23530] vlan0: left allmulticast mode [ 659.718065][T23530] veth0_vlan: left allmulticast mode [ 659.738721][T23530] vlan0: left promiscuous mode [ 659.744019][T23530] veth0_macvtap: left allmulticast mode [ 659.778769][T23530] veth0_macvtap: left promiscuous mode [ 659.801635][T23530] veth0_vlan: left promiscuous mode [ 660.104528][T27174] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6221'. [ 660.114433][T27174] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6221'. [ 660.234103][T24786] Bluetooth: hci4: command tx timeout [ 660.679104][T23530] pim6reg (unregistering): left allmulticast mode [ 661.355945][T16916] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 661.728595][T26995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.801781][T27163] syzkaller1: entered promiscuous mode [ 661.807628][T27163] syzkaller1: entered allmulticast mode [ 661.857841][T26995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.134857][T26995] team0: Port device team_slave_0 added [ 662.223295][T26995] team0: Port device team_slave_1 added [ 662.265007][T27196] netlink: 'syz.8.6228': attribute type 2 has an invalid length. [ 662.311600][T24786] Bluetooth: hci4: command tx timeout [ 662.388821][T26995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.395828][T26995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.508112][T27204] delete_channel: no stack [ 662.515768][T26995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.570397][T26995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.577477][T26995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.614944][T26995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.744145][T23530] IPVS: stop unused estimator thread 0... [ 662.780413][T27213] veth5: entered allmulticast mode [ 662.856798][T26995] hsr_slave_0: entered promiscuous mode [ 662.879830][T26995] hsr_slave_1: entered promiscuous mode [ 662.893729][T26995] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 662.901943][T26995] Cannot create hsr debugfs directory [ 662.908131][T27216] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 662.910312][T27217] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 663.367226][T27240] veth0: entered promiscuous mode [ 664.142448][T27259] xt_CT: You must specify a L4 protocol and not use inversions on it [ 664.253327][T27269] netlink: 'syz.9.6249': attribute type 1 has an invalid length. [ 664.269728][T27269] netlink: 'syz.9.6249': attribute type 4 has an invalid length. [ 664.287740][T27269] __nla_validate_parse: 7 callbacks suppressed [ 664.287759][T27269] netlink: 188 bytes leftover after parsing attributes in process `syz.9.6249'. [ 664.350748][T27269] NCSI netlink: No device for ifindex 458760 [ 664.597196][T27281] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.6253'. [ 664.633207][T27277] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.642398][T27277] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.651876][T27277] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.660717][T27277] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.831878][T26995] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 664.881801][T26995] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 664.912876][T26995] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 664.954143][T26995] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 664.981924][T27293] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6257'. [ 665.028827][T27294] sch_fq: defrate 0 ignored. [ 665.379914][T27316] sctp: [Deprecated]: syz.9.6259 (pid 27316) Use of struct sctp_assoc_value in delayed_ack socket option. [ 665.379914][T27316] Use struct sctp_sack_info instead [ 665.461768][T26995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.490351][T27316] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6259'. [ 665.514218][T27316] netlink: 52 bytes leftover after parsing attributes in process `syz.9.6259'. [ 665.558535][T26995] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.613067][T23525] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.620271][T23525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.732504][T23525] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.739756][T23525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.911786][T27328] xt_hashlimit: overflow, try lower: 4294967295/0 [ 666.048187][T27332] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6264'. [ 666.123730][T27336] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6266'. [ 666.150234][T27332] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.289994][T27332] bridge_slave_0 (unregistering): left allmulticast mode [ 666.315869][T27332] bridge_slave_0 (unregistering): left promiscuous mode [ 666.327823][T27332] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.479004][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 666.554464][T27350] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 666.735562][T26995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.855703][T26995] veth0_vlan: entered promiscuous mode [ 666.855881][T27356] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6273'. [ 666.886002][T26995] veth1_vlan: entered promiscuous mode [ 666.984579][T27361] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20004 [ 667.065659][T26995] veth0_macvtap: entered promiscuous mode [ 667.173442][T26995] veth1_macvtap: entered promiscuous mode [ 667.382089][T26995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 667.462316][T26995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 667.528596][T26995] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.582316][T26995] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.612872][T26995] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.641643][T26995] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.042588][T16916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.079472][T16916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.157853][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.170299][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.275286][T27392] netlink: 'syz.3.6287': attribute type 1 has an invalid length. [ 668.302811][T27392] netlink: 'syz.3.6287': attribute type 11 has an invalid length. [ 668.322011][T27392] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6287'. [ 668.582014][T27408] netlink: 160 bytes leftover after parsing attributes in process `syz.9.6290'. [ 668.790093][T27427] Bluetooth: MGMT ver 1.23 [ 668.890846][T27433] netlink: 'syz.9.6297': attribute type 1 has an invalid length. [ 668.932956][T27433] bond2: entered promiscuous mode [ 668.938500][T27433] 8021q: adding VLAN 0 to HW filter on device bond2 [ 669.036361][T27438] team_slave_0: mtu greater than device maximum [ 669.332695][T27457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 669.397200][T27464] __nla_validate_parse: 53 callbacks suppressed [ 669.397230][T27464] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6306'. [ 669.439879][T27464] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6306'. [ 669.462248][T27467] x_tables: duplicate underflow at hook 1 [ 669.495712][T27469] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6306'. [ 669.533492][T27469] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6306'. [ 669.567492][T27474] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6307'. [ 669.824785][T27488] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6312'. [ 669.945350][T27491] netlink: 18 bytes leftover after parsing attributes in process `syz.2.6313'. [ 670.172345][T27503] tap0: tun_chr_ioctl cmd 1074025673 [ 670.191678][T27507] tap0: tun_chr_ioctl cmd 1074025677 [ 670.197296][T27507] tap0: linktype set to 65534 [ 670.221676][T27506] netlink: 'syz.9.6318': attribute type 27 has an invalid length. [ 670.573565][T27522] netlink: 'syz.8.6325': attribute type 1 has an invalid length. [ 670.586997][T27522] netlink: 224 bytes leftover after parsing attributes in process `syz.8.6325'. [ 670.614262][T27522] netlink: 128 bytes leftover after parsing attributes in process `syz.8.6325'. [ 670.623820][T27522] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6325'. [ 670.794458][T27529] netlink: 'syz.9.6326': attribute type 2 has an invalid length. [ 670.916488][T27536] netlink: 'syz.7.6328': attribute type 1 has an invalid length. [ 671.122851][T27540] 8021q: adding VLAN 0 to HW filter on device bond3 [ 671.132857][T27540] bond2: (slave bond3): making interface the new active one [ 671.141565][T27540] bond2: (slave bond3): Enslaving as an active interface with an up link [ 671.160828][T27545] 8021q: adding VLAN 0 to HW filter on device bond2 [ 671.169436][T27549] team_slave_0: entered promiscuous mode [ 671.175415][T27549] team_slave_1: entered promiscuous mode [ 671.470300][T27564] team0: Device wireguard0 is of different type [ 671.624376][T27577] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 671.882689][T27584] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 672.476171][T27619] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 672.572794][T27622] netlink: 'syz.9.6352': attribute type 1 has an invalid length. [ 672.592009][T27622] netlink: 'syz.9.6352': attribute type 2 has an invalid length. [ 672.772546][T27631] netlink: 'syz.9.6354': attribute type 1 has an invalid length. [ 672.797634][T27630] bond0: (slave syz_tun): Releasing backup interface [ 672.832266][T27630] bridge_slave_0: left allmulticast mode [ 672.839668][T27630] bridge_slave_0: left promiscuous mode [ 672.862460][T27630] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.911089][T27630] bridge_slave_1: left allmulticast mode [ 672.916885][T27630] bridge_slave_1: left promiscuous mode [ 672.927265][T27630] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.988821][T27630] bond0: (slave bond_slave_0): Releasing backup interface [ 673.032616][T27630] bond0: (slave bond_slave_1): Releasing backup interface [ 673.084375][T27639] netlink: zone id is out of range [ 673.091940][T27639] netlink: del zone limit has 4 unknown bytes [ 673.120368][T24786] Bluetooth: hci4: command 0x0405 tx timeout [ 673.129900][T27630] team0: Port device team_slave_0 removed [ 673.157508][T27630] team0: Port device team_slave_1 removed [ 673.210473][T27632] team0: Mode changed to "activebackup" [ 673.216822][T27634] vlan0: entered promiscuous mode [ 673.245471][T27634] team0: Port device vlan0 added [ 673.284843][T27637] tipc: Enabled bearer , priority 0 [ 673.682031][T24786] Bluetooth: hci0: command tx timeout [ 673.717782][ T977] hid-generic 0005:0C45:1012.0002: item fetching failed at offset 0/1 [ 673.747998][ T977] hid-generic 0005:0C45:1012.0002: probe with driver hid-generic failed with error -22 [ 673.783341][T27667] netlink: 'syz.2.6364': attribute type 10 has an invalid length. [ 673.911143][T27667] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 674.052880][T27680] netlink: 'syz.9.6370': attribute type 1 has an invalid length. [ 674.403136][T14631] tipc: Node number set to 3758096386 [ 674.436104][T27696] bridge_slave_0: left allmulticast mode [ 674.455989][T27696] bridge_slave_0: left promiscuous mode [ 674.494634][T27696] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.590364][T27696] bridge_slave_1: left allmulticast mode [ 674.613289][T27696] bridge_slave_1: left promiscuous mode [ 674.626826][T27696] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.692361][T27696] bond0: (slave bond_slave_0): Releasing backup interface [ 674.732878][T27721] __nla_validate_parse: 36 callbacks suppressed [ 674.732899][T27721] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6381'. [ 674.763585][T27696] bond0: (slave bond_slave_1): Releasing backup interface [ 674.816143][ T9] IPVS: starting estimator thread 0... [ 674.845508][T27696] team_slave_0: left promiscuous mode [ 674.894144][T27696] team0: Port device team_slave_0 removed [ 674.909815][T27728] IPVS: using max 32 ests per chain, 76800 per kthread [ 674.917208][T27696] team_slave_1: left promiscuous mode [ 674.940387][T27696] team0: Port device team_slave_1 removed [ 674.954502][T27696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.962504][T27696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.975407][T27696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.988092][T27696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 675.014807][T27696] bond0: (slave wlan1): Releasing backup interface [ 675.337165][T27740] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.6386'. [ 675.586003][T27747] netlink: 72 bytes leftover after parsing attributes in process `syz.8.6387'. [ 675.820217][T27768] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6395'. [ 676.020866][T27783] tipc: Started in network mode [ 676.026074][T27783] tipc: Node identity fa3ca566800c, cluster identity 4711 [ 676.048014][T27783] tipc: Enabled bearer , priority 0 [ 676.072071][T23526] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 676.085733][T27781] syzkaller0: entered promiscuous mode [ 676.092998][T27781] syzkaller0: entered allmulticast mode [ 676.185702][T27786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6399'. [ 676.212575][T27781] tipc: Resetting bearer [ 676.279527][T27781] tipc: Disabling bearer [ 676.588312][T27808] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6406'. [ 676.687573][T27812] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6406'. [ 676.756273][T27814] netlink: 88 bytes leftover after parsing attributes in process `syz.2.6408'. [ 676.790750][T27814] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6408'. [ 676.973435][T27823] veth0: entered promiscuous mode [ 676.997514][T27822] veth0: left promiscuous mode [ 677.241016][T27833] openvswitch: netlink: Flow key attr not present in new flow. [ 677.353111][T27837] netlink: 240 bytes leftover after parsing attributes in process `syz.8.6417'. [ 677.574999][T27847] netlink: 'syz.3.6420': attribute type 1 has an invalid length. [ 677.752275][T27855] tipc: Enabled bearer , priority 0 [ 677.764529][T27855] syzkaller0: entered promiscuous mode [ 677.780179][T27855] syzkaller0: entered allmulticast mode [ 677.803343][T27858] veth0: entered promiscuous mode [ 677.814022][T27857] veth0: left promiscuous mode [ 677.855003][T27855] tipc: Resetting bearer [ 677.882676][T27854] tipc: Resetting bearer [ 677.994471][T27854] tipc: Disabling bearer [ 678.040914][T27870] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 678.549711][T27894] veth0: entered promiscuous mode [ 678.581609][T27893] veth0: left promiscuous mode [ 678.698405][T27905] netlink: 'syz.9.6441': attribute type 1 has an invalid length. [ 678.896701][T23529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.906189][T27915] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 678.939958][T23529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.209775][T27933] IPVS: length: 71 != 8 [ 679.366929][T27939] veth0: entered promiscuous mode [ 679.401907][T27938] veth0: left promiscuous mode [ 679.764995][T27958] netlink: 'syz.7.6459': attribute type 10 has an invalid length. [ 679.777577][T27964] __nla_validate_parse: 12 callbacks suppressed [ 679.777595][T27964] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6462'. [ 680.361712][T27995] veth0: entered promiscuous mode [ 680.385164][T27994] veth0: left promiscuous mode [ 680.403244][T27998] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 680.672290][T28017] netlink: 252 bytes leftover after parsing attributes in process `syz.8.6472'. [ 680.723256][T28021] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6471'. [ 680.784149][T28017] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 680.804836][T28021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6471'. [ 680.833020][T28022] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6472'. [ 680.845569][T28021] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 680.860391][T28017] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6472'. [ 680.880894][T28026] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6475'. [ 680.956269][T28030] netlink: 'syz.7.6476': attribute type 9 has an invalid length. [ 680.992435][T28030] netlink: 'syz.7.6476': attribute type 9 has an invalid length. [ 681.334637][T28045] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6479'. [ 681.385060][T28045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6479'. [ 681.632674][T28053] xt_ecn: cannot match TCP bits for non-tcp packets [ 681.835618][T28064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6488'. [ 682.083952][T28068] syzkaller0: entered promiscuous mode [ 682.108454][T28068] syzkaller0: entered allmulticast mode [ 682.302950][T28079] batadv_slave_0: entered promiscuous mode [ 682.333458][T28079] batadv_slave_0: left promiscuous mode [ 682.869855][T24786] Bluetooth: hci0: command tx timeout [ 684.963728][T28100] bridge0: entered promiscuous mode [ 684.973374][T28100] macsec1: entered promiscuous mode [ 685.673543][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.746152][T28169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 685.780310][T23528] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 685.841697][T28167] __nla_validate_parse: 7 callbacks suppressed [ 685.841717][T28167] netlink: 14560 bytes leftover after parsing attributes in process `syz.8.6517'. [ 685.999301][T28179] IPv4: Oversized IP packet from 172.20.20.24 [ 686.008382][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 686.015084][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 686.049821][T28180] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6521'. [ 686.286416][T28193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 686.491307][T28203] netlink: 'syz.3.6529': attribute type 3 has an invalid length. [ 686.522087][T28203] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6529'. [ 686.597609][T28209] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6532'. [ 687.121749][T28237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6542'. [ 687.147745][T28238] netlink: 'syz.8.6543': attribute type 5 has an invalid length. [ 687.429892][T28254] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6547'. [ 687.535800][T28260] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6548'. [ 687.565096][T28260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 687.844053][T28291] netlink: 100 bytes leftover after parsing attributes in process `syz.9.6556'. [ 687.957708][T23526] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 687.975066][T28301] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6557'. [ 688.012830][T28301] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6557'. [ 688.098316][T28308] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 688.245158][T28314] vlan3: entered promiscuous mode [ 688.261530][T28314] bridge0: entered promiscuous mode [ 688.267130][T28314] vlan3: entered allmulticast mode [ 688.274632][T28314] bridge0: entered allmulticast mode [ 688.865976][T28321] Unknown status report in ack skb [ 688.970400][T28324] vlan3: entered promiscuous mode [ 688.977638][T28324] vlan3: entered allmulticast mode [ 689.115409][T28337] netlink: 'syz.7.6569': attribute type 5 has an invalid length. [ 689.266016][T28344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 689.542752][T28354] tipc: Enabling of bearer rejected, failed to enable media [ 689.709007][T28352] syzkaller0: entered promiscuous mode [ 689.736393][T28352] syzkaller0: entered allmulticast mode [ 692.279972][T28391] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 692.310702][T28394] __nla_validate_parse: 9 callbacks suppressed [ 692.310722][T28394] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6586'. [ 692.603189][T28419] netlink: 65039 bytes leftover after parsing attributes in process `syz.8.6591'. [ 692.644140][T28424] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6593'. [ 692.695950][T28419] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6591'. [ 692.704578][T28428] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6595'. [ 692.717653][T28419] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6591'. [ 693.142351][T28424] bond0 (unregistering): Released all slaves [ 693.352025][T23530] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 693.904339][T28479] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.6610'. [ 694.042844][T28471] syzkaller1: entered promiscuous mode [ 694.048452][T28471] syzkaller1: entered allmulticast mode [ 694.444247][T28500] xt_hashlimit: size too large, truncated to 1048576 [ 694.830308][T28524] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6628'. [ 694.856123][T28525] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6628'. [ 695.193829][T28539] netlink: 'syz.8.6635': attribute type 21 has an invalid length. [ 695.232233][T28541] netlink: 144 bytes leftover after parsing attributes in process `syz.9.6634'. [ 696.144104][T28589] netlink: 'syz.7.6655': attribute type 1 has an invalid length. [ 696.208215][T28593] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 696.258435][T28593] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 696.635585][T28614] bridge_slave_0: entered promiscuous mode [ 697.140152][T28640] dvmrp8: entered allmulticast mode [ 697.483533][T28664] sctp: [Deprecated]: syz.2.6676 (pid 28664) Use of struct sctp_assoc_value in delayed_ack socket option. [ 697.483533][T28664] Use struct sctp_sack_info instead [ 697.580597][T28667] __nla_validate_parse: 8 callbacks suppressed [ 697.580617][T28667] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6673'. [ 697.596915][T28664] sctp: [Deprecated]: syz.2.6676 (pid 28664) Use of struct sctp_assoc_value in delayed_ack socket option. [ 697.596915][T28664] Use struct sctp_sack_info instead [ 697.670198][T28659] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6673'. [ 698.278522][T28690] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 698.292629][T28690] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.306532][T28701] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6684'. [ 698.541435][T28690] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 698.569849][T28690] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.733793][T28690] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 698.752112][T28690] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.833284][T28713] siw: device registration error -23 [ 698.851891][T28715] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6691'. [ 698.871162][T28715] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6691'. [ 698.936955][T28690] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 698.951299][T28690] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.137991][T28690] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 699.189015][T28690] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.250438][T28721] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6693'. [ 699.274241][T28690] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 699.315715][T28690] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.408140][T28728] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6696'. [ 699.423643][T28690] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 699.453594][T28690] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.553241][T28738] netlink: 'syz.8.6699': attribute type 15 has an invalid length. [ 699.688490][T28690] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 699.739392][T28690] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.804481][T28749] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20002 [ 699.996420][T28754] netlink: 'syz.9.6703': attribute type 1 has an invalid length. [ 700.023429][T28753] netlink: 'syz.3.6704': attribute type 1 has an invalid length. [ 700.050712][T28753] netlink: 2040 bytes leftover after parsing attributes in process `syz.3.6704'. [ 700.372831][T28757] bond3: (slave gretap1): making interface the new active one [ 700.389647][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 700.400949][T28757] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 700.460726][T28768] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6706'. [ 700.859681][T28797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6714'. [ 702.434717][T28848] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 702.442082][T28848] IPv6: NLM_F_CREATE should be set when creating new route [ 702.449372][T28848] IPv6: NLM_F_CREATE should be set when creating new route [ 702.543980][T28851] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 702.587487][T14628] IPVS: starting estimator thread 0... [ 702.711070][T28853] IPVS: using max 29 ests per chain, 69600 per kthread [ 702.879508][T28863] netlink: 'syz.2.6734': attribute type 1 has an invalid length. [ 702.897711][T28863] __nla_validate_parse: 4 callbacks suppressed [ 702.897734][T28863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6734'. [ 703.100620][T28875] netlink: 'syz.2.6739': attribute type 1 has an invalid length. [ 703.239836][T28875] veth3: entered promiscuous mode [ 703.276027][T28884] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6742'. [ 703.482232][T28890] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 703.792404][T28905] IPVS: set_ctl: invalid protocol: 43 172.30.0.8:20000 [ 703.835236][T28908] syzkaller1: entered promiscuous mode [ 703.856774][T28908] syzkaller1: entered allmulticast mode [ 703.990216][T28920] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 704.041309][T28915] xt_CT: No such helper "syz0" [ 704.284240][T28934] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 704.381208][T28935] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6758'. [ 704.876326][T28962] netlink: 'syz.8.6767': attribute type 1 has an invalid length. [ 704.893305][T28961] netlink: 'syz.8.6767': attribute type 1 has an invalid length. [ 705.041952][T28965] bond4: (slave gretap1): making interface the new active one [ 705.060795][T28965] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 705.416091][T28973] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6768'. [ 705.990974][T28985] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 706.324614][T28999] x_tables: duplicate underflow at hook 2 [ 706.647771][T29015] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6781'. [ 707.499702][T29041] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6790'. [ 707.580573][T29039] wg2: entered promiscuous mode [ 707.586441][T29039] wg2: entered allmulticast mode [ 707.681008][T29050] netlink: 512 bytes leftover after parsing attributes in process `syz.2.6792'. [ 707.864053][T29054] netlink: 'syz.2.6795': attribute type 2 has an invalid length. [ 707.931112][T29056] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6797'. [ 707.946231][T29056] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6797'. [ 708.039306][T29058] macvtap1: entered promiscuous mode [ 708.044681][T29058] vlan0: entered promiscuous mode [ 708.063203][T29058] macvtap1: entered allmulticast mode [ 708.072232][T23528] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 708.106437][T29058] vlan0: entered allmulticast mode [ 708.130467][T29058] veth0_vlan: entered allmulticast mode [ 708.261046][T29070] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6800'. [ 708.278867][T29070] chnl_net:caif_netlink_parms(): no params data found [ 708.365751][T29070] netlink: 72 bytes leftover after parsing attributes in process `syz.7.6800'. [ 708.402954][T29070] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 708.546535][T29079] netem: incorrect gi model size [ 708.565612][T29079] netem: change failed [ 708.639340][T24786] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 708.645606][ T51] Bluetooth: hci2: command 0x0419 tx timeout [ 708.750137][T29088] RDS: rds_bind could not find a transport for ::ffff:172.30.0.9, load rds_tcp or rds_rdma? [ 709.164624][T29102] netlink: 'syz.7.6810': attribute type 1 has an invalid length. [ 709.464203][T29115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.475198][T29115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 709.485262][T29117] netlink: 'syz.2.6814': attribute type 1 has an invalid length. [ 709.498729][T29117] netlink: 216 bytes leftover after parsing attributes in process `syz.2.6814'. [ 710.999903][T29143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6823'. [ 711.020561][T29140] xt_check_match: 17 callbacks suppressed [ 711.020580][T29140] x_tables: ip_tables: osf match: only valid for protocol 6 [ 711.157944][T29148] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6825'. [ 711.217829][T29148] netlink: 172 bytes leftover after parsing attributes in process `syz.7.6825'. [ 711.502330][T29158] netlink: 'syz.8.6828': attribute type 8 has an invalid length. [ 711.750207][T29165] Unsupported Adiantum instantiation: (ecb(aes),aes,nhpoly1305) [ 711.929541][T29148] netlink: 'syz.7.6825': attribute type 10 has an invalid length. [ 711.945544][T29148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.956285][T29148] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 711.975915][T29175] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6831'. [ 712.712490][T29197] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6839'. [ 712.811084][T29200] netlink: 'syz.8.6841': attribute type 2 has an invalid length. [ 712.940606][T29209] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 713.588518][T29223] 8021q: adding VLAN 0 to HW filter on device bond4 [ 713.630443][T29223] bond0: (slave bond4): Enslaving as an active interface with an up link [ 714.175152][T29243] __nla_validate_parse: 2 callbacks suppressed [ 714.175172][T29243] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6855'. [ 714.233205][T29243] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6855'. [ 714.268854][T29243] netlink: 'syz.8.6855': attribute type 13 has an invalid length. [ 714.672074][T29259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6860'. [ 715.204767][T29279] veth9: entered allmulticast mode [ 718.918788][T29302] netlink: set zone limit has 8 unknown bytes [ 718.939954][T29302] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6872'. [ 719.155320][T29311] macvtap1: entered allmulticast mode [ 719.167860][T29311] veth0_macvtap: entered allmulticast mode [ 719.249756][T29317] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6876'. [ 719.320032][T29311] IPVS: set_ctl: invalid protocol: 58 172.20.20.26:20004 [ 719.544185][T29327] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6881'. [ 719.584204][T29327] openvswitch: netlink: Flow key attr not present in new flow. [ 720.412655][T24786] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 720.423564][T24786] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 720.433450][T24786] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 720.443004][T24786] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 720.450885][T24786] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 720.535914][T29357] vlan2: entered promiscuous mode [ 720.980067][T29363] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 721.024868][T29368] Bluetooth: MGMT ver 1.23 [ 721.144179][T29370] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6895'. [ 721.585326][T29378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 721.655831][T29355] chnl_net:caif_netlink_parms(): no params data found [ 721.912833][T29386] netlink: 76 bytes leftover after parsing attributes in process `syz.7.6899'. [ 721.929782][T29355] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.958548][T29386] nbd: illegal input index -8454144 [ 721.977585][T29355] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.986704][T29394] netlink: 'syz.7.6899': attribute type 21 has an invalid length. [ 721.997714][T29355] bridge_slave_0: entered allmulticast mode [ 722.006635][T29355] bridge_slave_0: entered promiscuous mode [ 722.015598][T29355] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.023401][T29355] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.031422][T29355] bridge_slave_1: entered allmulticast mode [ 722.037993][ T13] nci: nci_rx_work: unknown MT 0x6 [ 722.039747][T29355] bridge_slave_1: entered promiscuous mode [ 722.070837][T29394] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6899'. [ 722.102096][T29355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.115230][T29355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 722.193767][T29355] team0: Port device team_slave_0 added [ 722.203930][T29355] team0: Port device team_slave_1 added [ 722.289734][T29355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.296791][T29355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.352650][T29355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.367515][T29355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.374592][T29355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.421908][T29355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.506290][T29355] hsr_slave_0: entered promiscuous mode [ 722.514384][T29355] hsr_slave_1: entered promiscuous mode [ 722.521845][T29355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 722.530118][T29355] Cannot create hsr debugfs directory [ 722.549176][ T5166] Bluetooth: hci9: command tx timeout [ 722.936983][T29416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6908'. [ 722.977501][T29416] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6908'. [ 722.997024][T29414] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6906'. [ 723.198067][T29427] netlink: 'syz.8.6910': attribute type 10 has an invalid length. [ 723.227413][T29427] bridge_slave_1: left allmulticast mode [ 723.249412][T29427] bridge_slave_1: left promiscuous mode [ 723.255293][T29427] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.275551][T29427] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 723.340937][T29434] bridge0: entered allmulticast mode [ 723.591941][ T5166] Bluetooth: hci6: command 0x0406 tx timeout [ 723.594733][T29443] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6914'. [ 723.598195][ T5166] Bluetooth: hci5: command 0x0406 tx timeout [ 723.635749][T29443] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6914'. [ 724.354463][T29355] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 724.426563][T29355] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 724.488548][T29355] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 724.532240][T29355] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 724.539781][T29453] xt_hashlimit: size too large, truncated to 1048576 [ 724.590387][T29457] netlink: 'syz.2.6918': attribute type 29 has an invalid length. [ 724.634479][ T51] Bluetooth: hci9: command tx timeout [ 724.907286][T29355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.970886][T29355] 8021q: adding VLAN 0 to HW filter on device team0 [ 725.104278][T23530] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.111538][T23530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.143192][T23530] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.150430][T23530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.352203][T23528] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 725.474670][T29504] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 725.556958][T29504] __nla_validate_parse: 1 callbacks suppressed [ 725.556978][T29504] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6932'. [ 725.585062][T29504] netlink: 43 bytes leftover after parsing attributes in process `syz.7.6932'. [ 725.611840][T29504] netlink: 'syz.7.6932': attribute type 5 has an invalid length. [ 725.624238][T29504] netlink: 43 bytes leftover after parsing attributes in process `syz.7.6932'. [ 725.804218][T29515] netlink: 52 bytes leftover after parsing attributes in process `syz.8.6934'. [ 725.899824][T29355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.064251][T29355] veth0_vlan: entered promiscuous mode [ 726.088264][T29355] veth1_vlan: entered promiscuous mode [ 726.163185][T29355] veth0_macvtap: entered promiscuous mode [ 726.201381][T29355] veth1_macvtap: entered promiscuous mode [ 726.208254][T29529] ªªªªªª†³?ÂHº: renamed from lo (while UP) [ 726.217617][T29531] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6940'. [ 726.259125][T29531] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6940'. [ 726.261566][T29355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 726.287810][T29355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 726.317290][T29355] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.360016][T29355] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.391169][T29355] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.425631][T29355] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.613790][T29541] syzkaller1: entered promiscuous mode [ 726.623330][T29541] syzkaller1: entered allmulticast mode [ 726.710910][ T51] Bluetooth: hci9: command tx timeout [ 726.767880][T29547] netlink: 'syz.7.6945': attribute type 12 has an invalid length. [ 726.811467][T29549] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6946'. [ 726.904021][T23525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.943532][T23525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.022946][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.056153][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.183977][T29562] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6950'. [ 727.281253][T29569] veth1_macvtap: left promiscuous mode [ 727.298012][T29566] netlink: 'syz.0.6879': attribute type 2 has an invalid length. [ 727.437829][T23525] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 728.062137][T29582] xt_CT: You must specify a L4 protocol and not use inversions on it [ 728.424980][T29590] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 728.507811][T29590] netlink: 'syz.7.6957': attribute type 21 has an invalid length. [ 728.516756][T29590] netlink: 164 bytes leftover after parsing attributes in process `syz.7.6957'. [ 728.645637][T29604] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 728.792414][ T51] Bluetooth: hci9: command tx timeout [ 728.896909][T29623] tipc: Enabled bearer , priority 0 [ 728.972223][T29623] syzkaller0: entered promiscuous mode [ 728.977843][T29623] syzkaller0: entered allmulticast mode [ 729.122127][T16916] nci: nci_ntf_packet: unknown ntf opcode 0x206 [ 729.135773][T29632] netlink: 68 bytes leftover after parsing attributes in process `syz.8.6966'. [ 729.540133][T23525] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.580484][T29607] tipc: Resetting bearer [ 730.268277][T24786] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 730.284353][T24786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 730.292454][T24786] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 730.309369][T24786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 730.325550][T24786] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 731.895546][T29624] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 731.913659][T29638] netlink: 'syz.0.6971': attribute type 3 has an invalid length. [ 731.927674][T29638] __nla_validate_parse: 1 callbacks suppressed [ 731.927692][T29638] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.6971'. [ 732.008869][T29607] tipc: Disabling bearer [ 732.090170][T23525] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.221073][T29649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6976'. [ 732.233695][T23525] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.391083][T29444] Bluetooth: hci4: command tx timeout [ 732.487879][T23525] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.580778][T29664] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 732.712839][T29669] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6981'. [ 733.583283][T29702] netlink: 'syz.7.6992': attribute type 11 has an invalid length. [ 733.594517][T23525] bridge0 (unregistering): left allmulticast mode [ 733.602919][T29702] netlink: 224 bytes leftover after parsing attributes in process `syz.7.6992'. [ 733.691339][T23525] bond1 (unregistering): Released all slaves [ 733.832977][T21627] Bluetooth: hci2: command 0x0419 tx timeout [ 733.840023][T29444] Bluetooth: hci7: command 0x0406 tx timeout [ 734.470845][T24786] Bluetooth: hci4: command tx timeout [ 734.482310][T29727] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6998'. [ 734.492178][T29727] netlink: 'syz.8.6998': attribute type 5 has an invalid length. [ 734.500988][T29727] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6998'. [ 734.661336][T29643] chnl_net:caif_netlink_parms(): no params data found [ 734.767537][T29732] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6999'. [ 734.777302][T29734] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7000'. [ 734.806167][T29732] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6999'. [ 735.224438][T29743] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7002'. [ 735.419477][T23525] hsr_slave_0: left promiscuous mode [ 735.440416][T23525] hsr_slave_1: left promiscuous mode [ 735.503395][T23525] veth0_macvtap: left allmulticast mode [ 735.520951][T23525] veth1_macvtap: left promiscuous mode [ 735.526634][T23525] veth0_macvtap: left promiscuous mode [ 735.553367][T23525] veth1_vlan: left promiscuous mode [ 735.569761][T23525] veth0_vlan: left promiscuous mode [ 735.800423][ T51] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 735.810352][ T51] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 735.818514][ T51] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 735.837166][ T51] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 735.845439][ T51] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 736.559871][ T51] Bluetooth: hci4: command tx timeout [ 736.873608][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.241290][T29759] sctp: [Deprecated]: syz.7.7005 (pid 29759) Use of int in max_burst socket option. [ 737.241290][T29759] Use struct sctp_assoc_value instead [ 737.277651][T29757] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7006'. [ 737.291052][T29759] : renamed from hsr0 (while UP) [ 737.313924][T29643] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.344276][T29643] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.376574][T29643] bridge_slave_0: entered allmulticast mode [ 737.401680][T29643] bridge_slave_0: entered promiscuous mode [ 737.431003][T29761] netlink: 'syz.7.7005': attribute type 1 has an invalid length. [ 737.438974][T29761] netlink: 224 bytes leftover after parsing attributes in process `syz.7.7005'. [ 737.476091][T29763] netlink: 'syz.8.7007': attribute type 10 has an invalid length. [ 737.540838][T29643] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.559309][T29643] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.566734][T29643] bridge_slave_1: entered allmulticast mode [ 737.602006][T29643] bridge_slave_1: entered promiscuous mode [ 737.708170][T29763] team0: Device hsr_slave_0 failed to register rx_handler [ 737.782000][T29643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.816257][T29769] netlink: 204 bytes leftover after parsing attributes in process `syz.8.7009'. [ 737.910078][ T51] Bluetooth: hci10: command tx timeout [ 737.924856][T29643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.978248][T29770] SET target dimension over the limit! [ 738.157045][ T31] INFO: task syz.5.5477:24488 blocked for more than 143 seconds. [ 738.165542][ T31] Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 [ 738.179725][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 738.188464][ T31] task:syz.5.5477 state:D stack:27096 pid:24488 tgid:24487 ppid:18611 task_flags:0x400040 flags:0x00004004 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 738.213828][ T31] Call Trace: [ 738.223177][ T31] [ 738.239240][ T31] __schedule+0x16f5/0x4d00 [ 738.243865][ T31] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 738.260003][ T31] ? schedule+0x165/0x360 [ 738.265587][ T31] ? __pfx___schedule+0x10/0x10 [ 738.278785][ T31] ? schedule+0x91/0x360 [ 738.285394][ T31] schedule+0x165/0x360 [ 738.295866][ T31] schedule_preempt_disabled+0x13/0x30 [ 738.308758][ T31] __mutex_lock+0x724/0xe80 [ 738.313327][ T31] ? __mutex_lock+0x51b/0xe80 [ 738.318039][ T31] ? nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 738.348665][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 738.353788][ T31] ? __nlmsg_put+0xef/0x1b0 [ 738.358335][ T31] ? genlmsg_put+0x137/0x2e0 [ 738.388629][ T31] nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 738.394255][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 738.408643][ T31] ? __dev_queue_xmit+0x27e/0x3a70 [ 738.413829][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 738.429429][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 738.437570][ T31] genl_rcv_msg+0x60e/0x790 [ 738.459460][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 738.464577][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 738.518386][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 738.549519][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 738.555015][ T31] netlink_rcv_skb+0x208/0x470 [ 738.608640][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 738.613753][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 738.627616][ T31] ? down_read+0x1ad/0x2e0 [ 738.633105][T24786] Bluetooth: hci4: command tx timeout [ 738.641266][ T31] genl_rcv+0x28/0x40 [ 738.645313][ T31] netlink_unicast+0x75c/0x8e0 [ 738.650878][ T31] netlink_sendmsg+0x805/0xb30 [ 738.655702][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 738.661142][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 738.666141][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 738.671570][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 738.676897][ T31] __sock_sendmsg+0x21c/0x270 [ 738.682315][ T31] ____sys_sendmsg+0x505/0x830 [ 738.687142][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 738.692774][ T31] ? import_iovec+0x74/0xa0 [ 738.697348][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 738.702234][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 738.707522][ T31] ? __fget_files+0x2a/0x420 [ 738.714114][ T31] ? __fget_files+0x3a0/0x420 [ 738.718900][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 738.723883][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 738.729499][ T31] ? rcu_is_watching+0x15/0xb0 [ 738.734305][ T31] ? do_syscall_64+0xbe/0x3b0 [ 738.741405][ T31] do_syscall_64+0xfa/0x3b0 [ 738.745953][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 738.751328][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.757433][ T31] ? clear_bhb_loop+0x60/0xb0 [ 738.762240][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.768151][ T31] RIP: 0033:0x7f1a54d8e9a9 [ 738.773335][ T31] RSP: 002b:00007f1a55c45038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 738.781807][ T31] RAX: ffffffffffffffda RBX: 00007f1a54fb5fa0 RCX: 00007f1a54d8e9a9 [ 738.791101][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 738.799993][ T31] RBP: 00007f1a54e10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 738.808000][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 738.816042][ T31] R13: 0000000000000000 R14: 00007f1a54fb5fa0 R15: 00007ffe37b27678 [ 738.824144][ T31] [ 738.834234][ T31] INFO: task syz.1.5538:24701 blocked for more than 144 seconds. [ 738.844290][ T31] Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 [ 738.852066][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 738.860829][ T31] task:syz.1.5538 state:D stack:25352 pid:24701 tgid:24700 ppid:17153 task_flags:0x400140 flags:0x00004004 [ 738.874345][ T31] Call Trace: [ 738.877672][ T31] [ 738.880688][ T31] __schedule+0x16f5/0x4d00 [ 738.885244][ T31] ? __lock_acquire+0xab9/0xd20 [ 738.890223][ T31] ? schedule+0x165/0x360 [ 738.894594][ T31] ? __pfx___schedule+0x10/0x10 [ 738.908641][ T31] ? schedule+0x91/0x360 [ 738.912942][ T31] schedule+0x165/0x360 [ 738.917143][ T31] schedule_preempt_disabled+0x13/0x30 [ 738.935739][ T31] __mutex_lock+0x724/0xe80 [ 738.945507][ T31] ? __mutex_lock+0x51b/0xe80 [ 738.950777][ T31] ? nfsd_nl_listener_set_doit+0x12a/0x1650 [ 738.956729][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 738.962585][ T31] ? __asan_memset+0x22/0x50 [ 738.967216][ T31] ? ____sys_sendmsg+0x505/0x830 [ 738.972273][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 738.977220][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 739.008651][ T31] nfsd_nl_listener_set_doit+0x12a/0x1650 [ 739.014444][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 739.020907][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 739.027129][ T31] ? __nla_parse+0x40/0x60 [ 739.047769][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 739.069668][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 739.075332][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 739.094569][ T31] ? bpf_lsm_capable+0x9/0x20 [ 739.105940][ T31] ? security_capable+0x7e/0x2e0 [ 739.113124][ T31] genl_rcv_msg+0x60e/0x790 [ 739.117767][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 739.123826][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 739.130877][ T31] netlink_rcv_skb+0x208/0x470 [ 739.135696][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 739.142609][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 739.150258][ T31] ? down_read+0x1ad/0x2e0 [ 739.154734][ T31] genl_rcv+0x28/0x40 [ 739.159596][ T31] netlink_unicast+0x75c/0x8e0 [ 739.164422][ T31] netlink_sendmsg+0x805/0xb30 [ 739.171041][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 739.176386][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 739.182185][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 739.187510][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 739.194167][ T31] __sock_sendmsg+0x21c/0x270 [ 739.200594][ T31] ____sys_sendmsg+0x505/0x830 [ 739.205458][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 739.211620][ T31] ? import_iovec+0x74/0xa0 [ 739.216187][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 739.221804][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 739.227101][ T31] ? __fget_files+0x2a/0x420 [ 739.233464][ T31] ? __fget_files+0x3a0/0x420 [ 739.238206][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 739.244022][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 739.251517][ T31] ? rcu_is_watching+0x15/0xb0 [ 739.256346][ T31] ? do_syscall_64+0xbe/0x3b0 [ 739.264429][ T31] do_syscall_64+0xfa/0x3b0 [ 739.271707][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 739.276990][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.283925][ T31] ? clear_bhb_loop+0x60/0xb0 [ 739.297465][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.303796][ T31] RIP: 0033:0x7f1435f8e9a9 [ 739.308514][ T31] RSP: 002b:00007f1436d1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 739.317827][ T31] RAX: ffffffffffffffda RBX: 00007f14361b5fa0 RCX: 00007f1435f8e9a9 [ 739.325939][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 739.334064][ T31] RBP: 00007f1436010ca1 R08: 0000000000000000 R09: 0000000000000000 [ 739.342756][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 739.351022][ T31] R13: 0000000000000000 R14: 00007f14361b5fa0 R15: 00007ffede184098 [ 739.360989][ T31] [ 739.364313][ T31] [ 739.364313][ T31] Showing all locks held in the system: [ 739.382846][T29643] team0: Port device team_slave_0 added [ 739.407661][ T31] 1 lock held by pool_workqueue_/3: [ 739.413022][ T31] #0: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 739.424155][ T31] 3 locks held by kworker/u8:0/12: [ 739.433022][ T31] 1 lock held by khungtaskd/31: [ 739.437911][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 739.448080][ T31] 3 locks held by kworker/u9:0/51: [ 739.453284][ T31] #0: ffff88804d1ea948 ((wq_completion)hci10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 739.466852][ T31] #1: ffffc90000bb7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 739.479605][ T31] #2: ffff888062be8dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 739.490270][ T31] 2 locks held by getty/5606: [ 739.494983][ T31] #0: ffff888030ef30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 739.504922][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 739.515392][ T31] 4 locks held by kworker/u8:26/23525: [ 739.521613][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 739.533711][ T31] #1: ffffc9001afd7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 739.545349][ T31] #2: ffffffff8f50f050 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 739.555644][ T31] #3: ffffffff8f51bc48 (rtnl_mutex){+.+.}-{4:4}, at: fib_net_exit_batch+0x22/0xf0 [ 739.567090][ T31] 3 locks held by kworker/u8:27/23526: [ 739.573396][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 739.585773][ T31] #1: ffffc90003b0fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 739.598102][ T31] #2: ffffffff8f51bc48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 739.607303][ T31] 2 locks held by kworker/u8:28/23528: [ 739.612845][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 739.623723][ T31] #1: ffff8880b8623f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0 [ 739.635309][ T31] 3 locks held by kworker/u8:29/23529: [ 739.640901][ T31] 2 locks held by syz.4.5219/23637: [ 739.646133][ T31] #0: ffffffff8f581f30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 739.654849][ T31] #1: ffffffff8e41b988 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 739.667110][ T31] 2 locks held by syz.5.5477/24488: [ 739.673344][ T31] #0: ffffffff8f581f30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 739.682307][ T31] #1: ffffffff8e41b988 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 739.692436][ T31] 2 locks held by syz.1.5538/24701: [ 739.697638][ T31] #0: ffffffff8f581f30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 739.705950][ T31] #1: ffffffff8e41b988 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 739.717011][ T31] 2 locks held by syz.6.5924/26097: [ 739.722364][ T31] #0: ffffffff8f581f30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 739.731209][ T31] #1: ffffffff8e41b988 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 739.742277][ T31] 2 locks held by syz.6.5924/26098: [ 739.747508][ T31] #0: ffffffff8f581f30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 739.757521][ T31] #1: ffffffff8e41b988 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 739.769859][ T31] 2 locks held by syz.3.6757/28936: [ 739.775108][ T31] #0: ffffffff8f581f30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 739.784319][ T31] #1: ffffffff8e41b988 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 739.794915][ T31] 2 locks held by syz.9.6887/29344: [ 739.800248][ T31] #0: ffffffff8f581f30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 739.808496][ T31] #1: ffffffff8e41b988 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 739.819554][ T31] 1 lock held by syz-executor/29643: [ 739.824860][ T31] #0: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 739.835971][ T31] 2 locks held by syz.0.6996/29724: [ 739.841553][ T31] #0: ffffffff8f50f050 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 739.851756][ T31] #1: ffffffff8f51bc48 (rtnl_mutex){+.+.}-{4:4}, at: mpls_net_exit+0x79/0x270 [ 739.860917][ T31] 2 locks held by syz-executor/29749: [ 739.868194][ T31] #0: ffffffff8f50f050 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 739.877708][ T31] #1: ffffffff8f51bc48 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 739.887608][ T31] 1 lock held by syz.7.7008/29766: [ 739.892800][ T31] #0: ffffffff8f51bc48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 739.901938][ T31] 1 lock held by syz.8.7009/29771: [ 739.907061][ T31] #0: ffffffff8f51bc48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 739.917749][ T31] [ 739.929875][ T31] ============================================= [ 739.929875][ T31] [ 739.938358][ T31] NMI backtrace for cpu 1 [ 739.938375][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 739.938399][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 739.938411][ T31] Call Trace: [ 739.938421][ T31] [ 739.938430][ T31] dump_stack_lvl+0x189/0x250 [ 739.938458][ T31] ? __wake_up_klogd+0xd9/0x110 [ 739.938493][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 739.938520][ T31] ? __pfx__printk+0x10/0x10 [ 739.938590][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 739.938623][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 739.938652][ T31] ? _printk+0xcf/0x120 [ 739.938685][ T31] ? __pfx__printk+0x10/0x10 [ 739.938716][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 739.938740][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 739.938774][ T31] watchdog+0xfee/0x1030 [ 739.938814][ T31] ? watchdog+0x1de/0x1030 [ 739.938843][ T31] kthread+0x70e/0x8a0 [ 739.938878][ T31] ? __pfx_watchdog+0x10/0x10 [ 739.938896][ T31] ? __pfx_kthread+0x10/0x10 [ 739.938929][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 739.938974][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 739.938993][ T31] ? __pfx_kthread+0x10/0x10 [ 739.939023][ T31] ret_from_fork+0x3fc/0x770 [ 739.939048][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 739.939077][ T31] ? __switch_to_asm+0x39/0x70 [ 739.939103][ T31] ? __switch_to_asm+0x33/0x70 [ 739.939127][ T31] ? __pfx_kthread+0x10/0x10 [ 739.939157][ T31] ret_from_fork_asm+0x1a/0x30 [ 739.939199][ T31] [ 740.093961][ T31] Sending NMI from CPU 1 to CPUs 0: [ 740.096290][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 740.100447][ C0] NMI backtrace for cpu 0 [ 740.100461][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 740.100481][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 740.100492][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 740.100520][ C0] RIP: 0010:__srcu_check_read_flavor+0x78/0x150 [ 740.100539][ C0] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 1f 82 7b 00 4d 8b 2f 4f 8d 3c 2e 49 83 c7 20 4c 89 f8 48 c1 e8 03 42 0f b6 04 20 <84> c0 0f 85 8a 00 00 00 41 8b 07 85 c0 75 18 4c 89 ff be 04 00 00 [ 740.100553][ C0] RSP: 0018:ffffc90000117428 EFLAGS: 00000a06 [ 740.100566][ C0] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000117502 [ 740.100577][ C0] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffffffff8e01ac20 [ 740.100587][ C0] RBP: ffffc900001175b0 R08: 0000000000000003 R09: 0000000000000004 [ 740.100597][ C0] R10: dffffc0000000000 R11: fffffbfff1c03554 R12: dffffc0000000000 [ 740.100609][ C0] R13: ffffffff92a01080 R14: ffff888125c23000 R15: ffff8880b86240a0 [ 740.100622][ C0] FS: 0000000000000000(0000) GS:ffff888125c23000(0000) knlGS:0000000000000000 [ 740.100635][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 740.100646][ C0] CR2: 000056481b58efb0 CR3: 000000000df38000 CR4: 00000000003526f0 [ 740.100660][ C0] Call Trace: [ 740.100666][ C0] [ 740.100676][ C0] console_flush_all+0x123/0xc40 [ 740.100700][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 740.100724][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 740.100751][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 740.100778][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 740.100806][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 740.100834][ C0] console_unlock+0xc4/0x270 [ 740.100855][ C0] ? __pfx_console_unlock+0x10/0x10 [ 740.100873][ C0] ? vprintk_emit+0x3b0/0x7a0 [ 740.100894][ C0] ? vprintk_emit+0x587/0x7a0 [ 740.100913][ C0] ? vprintk_emit+0x444/0x7a0 [ 740.100931][ C0] ? vprintk_emit+0x444/0x7a0 [ 740.100951][ C0] vprintk_emit+0x5b7/0x7a0 [ 740.100970][ C0] ? vprintk_emit+0x444/0x7a0 [ 740.100991][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 740.101022][ C0] _printk+0xcf/0x120 [ 740.101046][ C0] ? ieee80211_sta_active_ibss+0xc3/0x330 [ 740.101062][ C0] ? __pfx__printk+0x10/0x10 [ 740.101087][ C0] ? ieee80211_sta_active_ibss+0x2db/0x330 [ 740.101106][ C0] ieee80211_ibss_work+0xd50/0x1060 [ 740.101131][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 740.101148][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 740.101174][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 740.101200][ C0] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 740.101228][ C0] ? skb_dequeue+0x10e/0x150 [ 740.101247][ C0] ? ieee80211_iface_work+0xcdb/0xfe0 [ 740.101270][ C0] ? ieee80211_iface_work+0xf39/0xfe0 [ 740.101289][ C0] ? rcu_is_watching+0x15/0xb0 [ 740.101310][ C0] cfg80211_wiphy_work+0x2df/0x460 [ 740.101331][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 740.101352][ C0] process_scheduled_works+0xae1/0x17b0 [ 740.101386][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 740.101414][ C0] worker_thread+0x8a0/0xda0 [ 740.101448][ C0] kthread+0x70e/0x8a0 [ 740.101472][ C0] ? __pfx_worker_thread+0x10/0x10 [ 740.101491][ C0] ? __pfx_kthread+0x10/0x10 [ 740.101515][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 740.101539][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 740.101555][ C0] ? __pfx_kthread+0x10/0x10 [ 740.101577][ C0] ret_from_fork+0x3fc/0x770 [ 740.101596][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 740.101616][ C0] ? __switch_to_asm+0x39/0x70 [ 740.101637][ C0] ? __switch_to_asm+0x33/0x70 [ 740.101658][ C0] ? __pfx_kthread+0x10/0x10 [ 740.101680][ C0] ret_from_fork_asm+0x1a/0x30 [ 740.101711][ C0] [ 740.109266][T24786] Bluetooth: hci10: command tx timeout [ 740.250244][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 740.250269][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 740.250299][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 740.250313][ T31] Call Trace: [ 740.250324][ T31] [ 740.250334][ T31] dump_stack_lvl+0x99/0x250 [ 740.250367][ T31] ? __asan_memcpy+0x40/0x70 [ 740.250395][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 740.250424][ T31] ? __pfx__printk+0x10/0x10 [ 740.250477][ T31] panic+0x2db/0x790 [ 740.250510][ T31] ? __pfx_panic+0x10/0x10 [ 740.250535][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 740.250569][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 740.250608][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 740.250652][ T31] watchdog+0x102d/0x1030 [ 740.250677][ T31] ? watchdog+0x1de/0x1030 [ 740.250708][ T31] kthread+0x70e/0x8a0 [ 740.250746][ T31] ? __pfx_watchdog+0x10/0x10 [ 740.250765][ T31] ? __pfx_kthread+0x10/0x10 [ 740.250800][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 740.250837][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 740.250858][ T31] ? __pfx_kthread+0x10/0x10 [ 740.250891][ T31] ret_from_fork+0x3fc/0x770 [ 740.250919][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 740.250950][ T31] ? __switch_to_asm+0x39/0x70 [ 740.250979][ T31] ? __switch_to_asm+0x33/0x70 [ 740.251007][ T31] ? __pfx_kthread+0x10/0x10 [ 740.251040][ T31] ret_from_fork_asm+0x1a/0x30 [ 740.251126][ T31] [ 740.251502][ T31] Kernel Offset: disabled