last executing test programs: 4m13.317442929s ago: executing program 0 (id=6249): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000020c0)=@can_delroute={0x3c, 0x19, 0x1, 0x1002, 0x0, {0x1d, 0x1, 0x1}, [@CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "89543896f10eee1e"}, 0x2}}, @CGW_MOD_UID={0x8}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffa, 0x0, 0xfffffffffffffff8}}]}, 0x3c}}, 0x0) 4m13.164060616s ago: executing program 0 (id=6250): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/196, 0xc4}], 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000040)={'bond_slave_0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000f00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ec0)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSET={0x128, 0x9, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8}, @NFTA_SET_DESC={0xe8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_CONCAT={0xc4, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffc0}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4b}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb56}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6d2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWFLOWTABLE={0x238, 0x16, 0xa, 0x201, 0x0, 0x0, {0x6, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffb}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dummy0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'rose0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000001}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x144, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'bridge0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0xf0, 0x2, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x19, 0x6, "ffe82eb878bfee8eebb4081344c39050f83887f2db"}, @NFTA_TABLE_USERDATA={0xbe, 0x6, "ca74e9ca6e7d40b91a0607eaa0b3d8c83d8908a2e4a1a231bfb3ad9bfabf414c22206d5506cf48dd8e9bf90c8de92bcdf85792e86be7ddec004b74c0b143dbb3fc318a592989dcb4d68247c625c252686df3f6a625f930fa2fae54538f04177d4e3fe4370ae9791b6e7c5d44ee4ef13a23f4cac8f5aff2e6f6281369677efcbf383c0d1e7c3dd03018164c3009d88bca3af90bb0af226ab3b5bdcbbcdcd1c8ce8713f9291f99653d6a6067c21b9ea47d46939e84b43e1469eb14"}]}, @NFT_MSG_DELOBJ={0x19c, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_OBJ_USERDATA={0x62, 0x8, "e092fbcf78a06ae814aa0c5ba279d39ff0fd8c2db6bfa4cf9f8279a310811f3e697bd467f173cd3f99646086678b366949020950828a1428217f55172464e6bf62f768a315cbae2956735ad1175f146e6ddea14cb7a084bc14983f0af7ca"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xf3, 0x8, "783373ca3a0ba504ab96605e0921b14f13349891b3cb24e57b18dc89fc1d8cf0c34f696de9457bc75d00690954715f475a838c2f42704708b3d9a9ba142bb9fe801af3d049fbaf7a7a23cd9e236372dd88550508e187c2f06a0af22dca017165d797700d2955bbe11d0d7d3b07f13132395843ce69f145f26a673f060e8edb2f03f44e9ab07fe4cddfaa16f871fade69c8039ade647e61d03161eab3fa25ddce3fcaf3e317a1e140a00163a72b89b01ac176b48689fb7aeee89b82b425dfa8b2d488974d2857338cf853f2d700e2db024f6c67e08d43382e4855fba2fdf966a11662e8bdcb6727b3316ff245f02777"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x201, 0x0, 0x0, {0x9, 0x0, 0x4}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELOBJ={0x150, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x103, 0x8, "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"}]}, @NFT_MSG_DELSET={0x5fc, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xc2}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x33}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x7d}]}}}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0x5a0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x77f72a9d}, @NFTA_SET_DESC_CONCAT={0x158, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x48}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x26b}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd5d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc48f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x55d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x24d2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x30e}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x74}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x45d}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}]}]}, @NFTA_SET_DESC_CONCAT={0x50, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1b}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xad3c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x14d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_DESC_CONCAT={0x160, 0x2, 0x0, 0x1, [{0x4}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfca}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe6d3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd9b}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffe01}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x422}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff66a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x416}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfb8b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdd6}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8b4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}]}, {0x4}]}, @NFTA_SET_DESC_CONCAT={0x12c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffeff}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xaf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_CONCAT={0x150, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf540}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}]}]}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdd8}, 0x1, 0x0, 0x0, 0x240040c5}, 0x80) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r3, 0x89e1, 0x0) bind$rose(r3, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @bcast}, 0x1c) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) (async) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/196, 0xc4}], 0x1) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000040)={'bond_slave_0\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000f00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ec0)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSET={0x128, 0x9, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8}, @NFTA_SET_DESC={0xe8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_CONCAT={0xc4, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffc0}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4b}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb56}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6d2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWFLOWTABLE={0x238, 0x16, 0xa, 0x201, 0x0, 0x0, {0x6, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffb}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dummy0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'rose0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000001}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x144, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'bridge0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0xf0, 0x2, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x19, 0x6, "ffe82eb878bfee8eebb4081344c39050f83887f2db"}, @NFTA_TABLE_USERDATA={0xbe, 0x6, "ca74e9ca6e7d40b91a0607eaa0b3d8c83d8908a2e4a1a231bfb3ad9bfabf414c22206d5506cf48dd8e9bf90c8de92bcdf85792e86be7ddec004b74c0b143dbb3fc318a592989dcb4d68247c625c252686df3f6a625f930fa2fae54538f04177d4e3fe4370ae9791b6e7c5d44ee4ef13a23f4cac8f5aff2e6f6281369677efcbf383c0d1e7c3dd03018164c3009d88bca3af90bb0af226ab3b5bdcbbcdcd1c8ce8713f9291f99653d6a6067c21b9ea47d46939e84b43e1469eb14"}]}, @NFT_MSG_DELOBJ={0x19c, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_OBJ_USERDATA={0x62, 0x8, "e092fbcf78a06ae814aa0c5ba279d39ff0fd8c2db6bfa4cf9f8279a310811f3e697bd467f173cd3f99646086678b366949020950828a1428217f55172464e6bf62f768a315cbae2956735ad1175f146e6ddea14cb7a084bc14983f0af7ca"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xf3, 0x8, "783373ca3a0ba504ab96605e0921b14f13349891b3cb24e57b18dc89fc1d8cf0c34f696de9457bc75d00690954715f475a838c2f42704708b3d9a9ba142bb9fe801af3d049fbaf7a7a23cd9e236372dd88550508e187c2f06a0af22dca017165d797700d2955bbe11d0d7d3b07f13132395843ce69f145f26a673f060e8edb2f03f44e9ab07fe4cddfaa16f871fade69c8039ade647e61d03161eab3fa25ddce3fcaf3e317a1e140a00163a72b89b01ac176b48689fb7aeee89b82b425dfa8b2d488974d2857338cf853f2d700e2db024f6c67e08d43382e4855fba2fdf966a11662e8bdcb6727b3316ff245f02777"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x201, 0x0, 0x0, {0x9, 0x0, 0x4}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELOBJ={0x150, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x103, 0x8, "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"}]}, @NFT_MSG_DELSET={0x5fc, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xc2}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x33}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x7d}]}}}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0x5a0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x77f72a9d}, @NFTA_SET_DESC_CONCAT={0x158, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x48}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x26b}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd5d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc48f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x55d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x24d2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x30e}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x74}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x45d}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}]}]}, @NFTA_SET_DESC_CONCAT={0x50, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1b}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xad3c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x14d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_DESC_CONCAT={0x160, 0x2, 0x0, 0x1, [{0x4}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfca}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe6d3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd9b}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffe01}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x422}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff66a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x416}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfb8b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdd6}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8b4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}]}, {0x4}]}, @NFTA_SET_DESC_CONCAT={0x12c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffeff}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xaf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_CONCAT={0x150, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf540}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}]}]}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdd8}, 0x1, 0x0, 0x0, 0x240040c5}, 0x80) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$SIOCRSSCAUSE(r3, 0x89e1, 0x0) (async) bind$rose(r3, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @bcast}, 0x1c) (async) 4m12.923033228s ago: executing program 0 (id=6253): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x22483, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010000000000020002"], 0x0, 0x1a, 0x0, 0x1, 0x5}, 0x28) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) r6 = socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='\'', 0x1}], 0x1}, 0x4005) 4m8.809333305s ago: executing program 0 (id=6279): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r3, 0x10e, 0x5, 0x0, &(0x7f0000001d80)) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 4m8.578721373s ago: executing program 0 (id=6283): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r1, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)={r2, r0, 0x4, r0}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) (async) accept(r3, 0x0, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) (async) r6 = accept4(r5, 0x0, 0x0, 0x80000) sendto$inet(r6, &(0x7f0000000000)='\x00', 0x1, 0x24008800, 0x0, 0x0) (async) accept4$tipc(r6, 0x0, 0x0, 0x800) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x30, r8, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x14, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x4}, {0x4}]}]}, 0x30}}, 0x880) (async) accept4(r4, 0x0, 0x0, 0x80800) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x34, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="7235ab62"]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r9}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 4m8.387414235s ago: executing program 0 (id=6287): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x33, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff0180c20000000800450000250000e00000119078003ad7000000000000000000001190780b80d010da6a6a3cd6"], 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) close(0x3) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x58, 0x0, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x58}}, 0x0) socket$packet(0x11, 0x3, 0x300) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f00000004c0)) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, 0x0, &(0x7f00000003c0)) syz_emit_ethernet(0x32, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x6}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006110780000000000630123000000000095000000000000008f6a138c9e4eb32e71d7754e127d8d87525e8d57dc3c002fa721249c4cdfd87788947190b59b5af99eaaecbf2ba57aa6ffd750ffd3bef751c89264a6a9ec3b188b69dc1b6a12211cbf01e697342cf987ca2161e2a58904"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 3m53.370773634s ago: executing program 32 (id=6287): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x33, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff0180c20000000800450000250000e00000119078003ad7000000000000000000001190780b80d010da6a6a3cd6"], 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) close(0x3) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x58, 0x0, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x58}}, 0x0) socket$packet(0x11, 0x3, 0x300) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f00000004c0)) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, 0x0, &(0x7f00000003c0)) syz_emit_ethernet(0x32, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x6}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006110780000000000630123000000000095000000000000008f6a138c9e4eb32e71d7754e127d8d87525e8d57dc3c002fa721249c4cdfd87788947190b59b5af99eaaecbf2ba57aa6ffd750ffd3bef751c89264a6a9ec3b188b69dc1b6a12211cbf01e697342cf987ca2161e2a58904"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 2m45.067240008s ago: executing program 3 (id=7307): socketpair(0x29, 0x5, 0x80, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2404e0c4}], 0x1, 0x0) recvmsg(r2, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@empty}, &(0x7f0000000040)=0x14) 2m44.949499093s ago: executing program 3 (id=7310): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r1, 0x101, 0x6, &(0x7f0000000dc0)=0x5, 0x4) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180058000000000000000000000000009500040000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x40000}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "0100"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001", @ANYRESDEC=r0], 0xe4}}, 0x2404c800) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000040)=@netrom={'nr', 0x0}, 0x10) 2m44.727930525s ago: executing program 3 (id=7315): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0xa8, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x78, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x68, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x50, 0x3, "cd4b6abe42031763d02899c77f99ff5fe87a9d3ac869f3a860917523679a5eb46131471826390d810593448ba1ecbf4579f9cd6564e64066681fb945bfe585ab6933a6f6514a0eebad4e3537"}, @NFTA_TARGET_NAME={0xa, 0x1, 'NFLOG\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m44.471356027s ago: executing program 3 (id=7320): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r1, 0x952de000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) (async) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) 2m43.898849381s ago: executing program 3 (id=7327): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000380)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x4e21, 0x20, 0x41424344, 0x41424344, 0x0, 0x5, 0x7, 0x0, 0x5, 0x0, 0x18, {[@window={0x9, 0x3}, @sack={0x5, 0x2}]}}}}}}, 0x3e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0xf, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @local}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000540)) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x124, 0x40, 0x0, 0x70bd25, 0x7, {0x1e}, [@typed={0x8, 0x59, 0x0, 0x0, @pid}, @typed={0x14, 0x61, 0x0, 0x0, @ipv6=@private2}, @generic="b504d9d2e543a8b999ef3fcf8308c65dff51934dcd9f7f9a89a1efc6be113418d8450f34b5d684dabf9a7060b27683f15b842a4a0072e3b9d6d9ac4795daf83a64f389fefa9a7e7a8ac9a42178c610e83f1fb31b76fcacbd78de8ba7f386bc46e7d70106ccebe74ce18375f2fb93972a02d7b442d49df57879e25ac39e05c056a6ab97e640e386bb6c46c0854a2e32f2890c2502fabac4dc5a96f78291020e1ff48673e0da0592588106a6c1d95f747a5862d6ce433cd52cd07edc96208ae3ab1bce55f5347ee4187a5eb5e6410caed116671af1f10bf57ccef69ea6468566e0021c255cbdfdc81b", @typed={0xc, 0xd9, 0x0, 0x0, @u64=0x6}]}, 0x124}, 0x1, 0x0, 0x0, 0x48010}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="300000002c0007012bbd7000ffdbdf25067c0000080001800900000014000380100001"], 0x30}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r5, &(0x7f00000003c0)="19319942a414d6a9ae9b6802d5b6a0e6b9e8ab77f12b34b750cbac1849335a4b90408081e6da1becf33404887ef26252f8addd8cb55b0c5465d9849e28dfcace9a3b97d5691653420e29bb100d8ff7d43f63f9d053e788b2ddeacb193d4cab2051385951037031edda780c0ffdecb1719895f209ae91457c2af00d716b62ab91830b841a7ab8461891471226701a492503c35fd754640c1e26d3d7f3177bc7bbc77f6dade64c38cb0c136551ba37e2fc48afd623b1b5bbfee2be49f0725143f4e9b8"}, 0x20) (async) syz_genetlink_get_family_id$team(&(0x7f00000004c0), r4) 2m43.402936113s ago: executing program 3 (id=7331): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0xd5, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xe, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@ipv6_newaddrlabel={0x68, 0x48, 0x400, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, r1, 0x6}, [@IFAL_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_ADDRESS={0x14, 0x1, @private0}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x20000840) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0xf800, 0x20, 0x8, 0x7fff, {{0x15, 0x4, 0x3, 0x9, 0x54, 0x66, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@rr={0x7, 0x1f, 0xe0, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @local, @broadcast, @remote, @multicast2, @empty]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0x1f, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x800}, {@remote, 0xf336}, {@private=0xa010102, 0x9}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff28}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x200480c9}, 0x20048000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000210021002cbd7000fedbdf2502141007020000000000010008000100e0000001080006000a0000000c000c40000000000000001e0c000c4000000000000000061800020006"], 0x5c}, 0x1, 0x0, 0x0, 0x40d5}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x56005, 0x2021}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}}}, @IFLA_IFNAME={0x14}]}, 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x8000002) 2m28.255266839s ago: executing program 33 (id=7331): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0xd5, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xe, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@ipv6_newaddrlabel={0x68, 0x48, 0x400, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, r1, 0x6}, [@IFAL_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_ADDRESS={0x14, 0x1, @private0}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x20000840) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0xf800, 0x20, 0x8, 0x7fff, {{0x15, 0x4, 0x3, 0x9, 0x54, 0x66, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@rr={0x7, 0x1f, 0xe0, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @local, @broadcast, @remote, @multicast2, @empty]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0x1f, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x800}, {@remote, 0xf336}, {@private=0xa010102, 0x9}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff28}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x200480c9}, 0x20048000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000210021002cbd7000fedbdf2502141007020000000000010008000100e0000001080006000a0000000c000c40000000000000001e0c000c4000000000000000061800020006"], 0x5c}, 0x1, 0x0, 0x0, 0x40d5}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x56005, 0x2021}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}}}, @IFLA_IFNAME={0x14}]}, 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x8000002) 7.85108936s ago: executing program 1 (id=9307): socket$packet(0x11, 0x3, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80002, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) write$cgroup_subtree(r0, 0x0, 0x10448) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r2, &(0x7f0000000840)={&(0x7f0000000340)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x3, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000640)=[@mark={{0x14, 0x1, 0x24, 0x7}}], 0x18}, 0x40812) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000000000007b113400000000008510000002000000850000000000000095003300000000009500a5660e0000009f3be7f40752ed289350a3b5257dfc7e5429619ce459a63169ccb691d1a8f1ab83013d"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 7.227050435s ago: executing program 1 (id=9316): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x18, 0x42, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000012000000140012800f00010062726964676506000000028008009541", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@delqdisc={0x24, 0x25, 0x2, 0x71bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe6, 0x4}, {0x9, 0x10}, {0xe, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0xa1}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9], 0x3c}}, 0x0) 6.966991574s ago: executing program 1 (id=9318): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x8001c, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x3, r0, 0x4}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r2) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x14, r3, 0x703, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r2) 4.525321024s ago: executing program 1 (id=9320): r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000bc0)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000900142603600e12080005007f370401a8001600200004000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace801796ec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) (async) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030c00000000070000000000000200090010000000e925000000000000030006000000000002000000000000000000000000000000020001000000000000fd000300000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) 4.343129287s ago: executing program 2 (id=9325): r0 = socket$nl_route(0x10, 0x3, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000030620000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="ddbe"], 0x54}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r3, 0x29, 0x17, 0x0, 0x0) bind$bt_hci(r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@getqdisc={0x2c, 0x26, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xb, 0xffff}, {0x1}, {0x7, 0xa}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 4.02254598s ago: executing program 2 (id=9329): sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e330000000c0017000201aa8d"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 32) r0 = socket$kcm(0x10, 0x2, 0x10) (rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x40002, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xfffffffe}]}}]}, 0x38}}, 0x40c4) 3.84435359s ago: executing program 2 (id=9331): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r2, 0x13, 0x0, 0x0, {0x8}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0xfffffffe}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) 3.822673047s ago: executing program 1 (id=9332): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100000000000200"], 0x0, 0x1a, 0x0, 0x1, 0x5}, 0x28) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) r4 = socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='\'', 0x1}], 0x1}, 0x4005) 3.678825038s ago: executing program 5 (id=9334): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000180)={{r0, &(0x7f0000000040)='\x00', 0x100, &(0x7f0000000080)={@_ha_fsid={[0x2, 0x8001]}, {0x0, 0xbc, 0xfff, 0x7ff}}, 0x2630d635, &(0x7f00000000c0), &(0x7f0000000140)=0x2}, {[0x1, 0x7f, 0x7, 0x5e4b]}, 0x1, 0x1000, &(0x7f0000001180)=""/4096}) bind$xdp(r1, &(0x7f0000000200)={0x2c, 0x8, 0x0, 0x2d, r2}, 0x10) 3.675992062s ago: executing program 2 (id=9335): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0xdd, 0x4, 0x3, 0x21, 0x0, 0x9, 0xe8, 0xa0, 0x7, 0x3, 0x3, 0x3, 0x86, 0xf}, 0xe) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000080)={r3, @in6={{0xa, 0x4e23, 0x5, @remote, 0x3}}}, &(0x7f0000000240)=0x84) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.662394581s ago: executing program 6 (id=9336): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) socket$unix(0x1, 0x2, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x114, r1, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x114}}, 0x0) 3.655515392s ago: executing program 4 (id=9337): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000480)=0xc) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000900)=ANY=[@ANYBLOB="b40000003700010025bd7000fedbdf2562005e80040038803ddec61a3e39e8960c20036ee465c85602fe5ee6ef97998befd307a3346a6602c99f4dd15f570416e16761d55ff7a397c8bfccd475172f7200baf2f6d59c43e3b85d76bcc80916cd2783b371f00a7d3b98c15878b8a932961949ac1e17459318aefe00003f00f6800400578065a0b1f8bf0bf7d4dbc6eb90101c8c172bd9021313ca3608c8c846620765b15fcd34526fef70e0302318034da6e37d4c040003b8a2"], 0xb4}, {&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x114}, {&(0x7f0000002540)=ANY=[@ANYBLOB="d01200002900010026bd7000ffdbdf25fd00c1800400cb80040071800400bd8052ec076cc23a6ccf53199b58886137c00d1ac433dbe2770f6c9911b65210897ea37d68c726a370f3fb4993686aab86d83d0cb342f9371943152cd2ddf4b4956f00685bb36c32e90677213f5fb9ecbda0b4b316e586babca8b39a4149e72981abf58ad23f96a6eb9f15d8e55fc800672a15b672f1017398c92c934a56499b1cbc860ff31f63eaddb706207f86a4654fd2750acb30e2d4f58c04857b2a8b7d4b0fbcb950d95e01cc05d3e4eebaa35a05b9f83b2d45da4b7ac5762b42aa04d646013dc89bb6a7d0291298251f87d08b2311fb9d4aef66c227735253c58cbd04008a8004006680080052000a0000000000000800058004003b8070016b8004000300f300b980040000800c002c0001000000000000287404833f000400020004003680c561e218797204e859d3332654bdef1880618b421f63f4f651d71a03e478cf1225b09f1a2917fa7394384cf8c911b5ecb0a5e3654bf5078b2c73a9a6bd6ea68ca9068c92cd9b5a668d76ac24267df736206e568d098504526d4ffa000fe843dfb4ac85b3f58ecd03cd7fe7ee80de33e3021ad4985adea5a9f3c43225594e505b079b7be8b12428320ef16df43fb5b1187372da688be6332b49586650ed06660dd3c5abcda7233c964dec0184412b7a442dafb2b01cbb683b34d6be94a922f95ed30540a16e0c05a78ecbe708004100640101010400a980007100ff", @ANYRES32=r1, @ANYRES32=r2], 0x12d0}, {&(0x7f0000001300)=ANY=[@ANYBLOB="70030000260000022cbd7000fcdbdf25b30105806ae199fb5d6c5a86ca8413736a2aaabdda3623a566bdf111885401ad4a8dcb3a549e4cd42d4139869a96588c19b2d647dc169990795c9ae9a121b6cc7a3c72b9c1113e6f5ab2f6ed91ddc812a73c274118d8ae7c896b4a0cddcb5da0b80694f31bb821e57f149ca35492349e3aca4d3feb2ae1a671fa4b6e3352d2d01b29502b9f4291cc275fce4c54cf93da507aad20f659a2413e994e1f1c4363990400468008007f00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x00l\x00', @ANYRES32=r2, @ANYBLOB="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", @ANYRES32, @ANYBLOB="d1113c79f0cdbcba6a9fe3732313c9e7eff190d04b8239c55ffa0872e04849f1254f0000"], 0x370}, {&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000003700000329bd7000fcdbdf250b000e0074617072696f0000ba"], 0x1c}, {&(0x7f0000006d40)=ANY=[@ANYBLOB="84000000370004002abd7000fbdbdf256f000b800400e28004002e8060412f050a2ccbc47dcff0f798f13430d49df48a4ffbc8dbaeaf8a64dea609306066c6bbf276187b74c17f3acf6ba648a2394518d8be65c6714335c0cbda5edf95421968733858e67d0a1d88b474e7615cb2d0a7e4259db76697cd666f9c5bb0f8b40b0004002f80"], 0x84}, {&(0x7f0000000700)={0x70, 0x38, 0x100, 0x70bd26, 0x25dfdbfc, "", [@generic="11ebc66f6b285df9d55f096924a0d9e02ea57b19fc94710155a683c4beae3f1ac049f0e7546bfd18dbbeb38ec0a115bd15221fc189ab14cb09525128b2821156ac023bf807f657ea287d4fd2eea8b0837430fa8ce5867e", @typed={0x8, 0xa3, 0x0, 0x0, @ipv4=@loopback}]}, 0x70}, {&(0x7f0000000d40)={0x2b8, 0x42, 0x800, 0x70bd2a, 0x25dfdbff, "", [@typed={0x8, 0x20, 0x0, 0x0, @uid=0xee01}, @typed={0x6, 0xad, 0x0, 0x0, @str='#\x00'}, @generic="11e334a481e74d1f5c27546d6cc513b3a6ac876a768a8d290a4f23ea891b4b4fd340fa0ef5a0c92b28c68be8a2176a224ac11014a091d19167186709e274c802a9a8dff3df8141031f237f58a366d01aa473a2376ec382de2c0999409b4dd649e86dd69b1316b92380548740aa39d93057e0f2531bea3b89c277d23963703eeec82a95cba652c6e55a5a8a8b35c7", @nested={0x207, 0x81, 0x0, 0x1, [@nested={0x4, 0xa0}, @generic="4a8fb9465ced2f97b4ad8bcd5c035b5a1dabe0938c515dc68c008bfe643adb3e77cce1c24b2f0f450f9425a65cab9f88e103ef4b6673cb2ce8941b59eeb9d2ac112fb6bd992b6273ea2e77ba1d864bbd0a38fd0ea48e485db6f0063b4e139866a70e5f6a2bbcdfc37e59c0868b5d70820eeb334877c16b9a40a86e671d430b4c22a8a63a30ccf5d1d4b089de36be046aee43eedd8427c6cc13b1fe598a15a82f9d433aa21ed58ebd4762075233f32c73aea79be17722521bdb7a80b3cd39dfbb481328df6c08631912629f1a8f3ac0a7391f603876119f061e7c43c70aa8017464f3edea73d3be5a23b9832eea2a01", @generic="a42a3db2e7ea9f64f1e3f602cce4383cf6561e3545bac82b364c6e433e42b5bafbe2a455c2", @generic="d12ca63d3101d537a775058da7044951be393e7ffb252f5e204dc0630bce", @generic="c7bb1ac0c2a8a28c9b5f327c1d7d11469e6a4565d4e70a36ac148453e0c2bd1c206aa0fb7bb7971e848c19009f80f5ab6619e671fa17a64335678bda4b134efe0e795b4a86d3f9df76c4c04e310f98d9c0e3518a3c", @typed={0x8, 0xb3, 0x0, 0x0, @u32=0x7f}, @typed={0xc, 0xe1, 0x0, 0x0, @u64=0x6}, @nested={0x4, 0x128}, @generic="80e11a6dae951eceda8552050ddcd88803a5d22f742f40495d2707", @generic="b8014b8fdb36cb5ac1d3b01abf0e145972c1697e4767b6ec1c7c9e4d023bc431094e81a42b8b7545e1268a210e2873c2230c6624d389cc9f06a31b56dc42ef70ee97c6825f"]}]}, 0x2b8}, {&(0x7f0000005ac0)=ANY=[@ANYBLOB="641200003f00000827bd7000ffdbdf2508005000050000002b00558004006f80c6fb1827982aaad6e9df8c9f0cf310a1f424e9c7f8698e6576d1eae039f45ab918e42c00ee110580140008000000000000000000000000000000000008000600", @ANYRES32=r0, @ANYBLOB="061020001c224fd5b2e312296b1463e47000b90e82f3b92251e824abab4c0c5f4025121d0eb1e53a274a22ef8f7eb9baf2208ee6621919992a01a15eadb9ea858b7bdac40055556fb85e7dfc293f0d039797fc0105a1c2f5ada1de557a4db3f6d5031fb57ef5f6d1293095d0e5e3986ae5b2025531258513b5b7dd18f728241bba2228dbf7521e8daf20e462ab558f64658d25efc4b36792812c7b8c07b92d3bf6cdcf806cb238f7750804ea6b5f83f4e85dd2be265e7a31b655c7d150ce0e2f387ded28dd5e45328f9c1a5448e84529f27045ca883500af7579da8dcf165ea47865ad69480bc95d0ddf8ae6a6a268533b60de1c90d93f1aa29695902606dfa8ab9bea554023a3540d7d8b244bda9ff7f9925d05841a30c831fd69e6224b8a27a5be31c8a75cb49c74dc252a2dc82ea84628b3b813f2c6b355abfa7ffd7d8cbc3187a7c5e53a11123f278aab84efb51bb4433e3b8d49a9c7ffd3df5e1796eea321667182530baf9ecd36a48427a9c1e2361e6047bd815e3c8a2b7c25ac1baef22cb8631c143f3ade8576205c605ede103837c075de32174f97fea2888e36cad4458b1846fdec2729b68d92a05f9086cc4299e8255caea1a8e50cce874a5e3496ef1f11b47b2f6c309a6a5a020af8b572fdf0bbbd1881e364ca6922cbb96f9aeb6441d0074e24b56045c9449d64ecd7e6b92fa62955d13d941f4290ee87f735039758696b6b1a5262e09dafbc2951b0b6928a288a61343345493266531db468046eca7c3d3f7975e9e11529f3a9679173b791f6f7f49a242e52737991e66c7f3ca6a0fb70d6c3f461cc2e3ae2da190f270706d21f0220611ca34ccb2015155d6d2da77a5b5ddc1f5caa11fd4a737a7b5ea3da74f4750c2e0187f2e150d033090207493c6ff8a3bb8586ad1a0ba466d5a112ba9fc5362ed864e027d4ce154ae4698c13fbc1cb33a2cfae15facbc79b3a626c428d1de8c0e2d4cb94e20ced13875bcf624f671b5380cbd97bddb36ae2c91a49f27443da014321e87783512a2e14709525ccb210360f9385aecccd2148d3ff798a3195bbb6b7368cc1554b579128cdb388b012db8ec8b29c232cfb4e0bec1d606a178fcae64b08b8a86fff8b3881e93480b306e8a766c3e16386af3b63de5b74b39505734028eb62bba3f80a070b09d964fb3e02bef7320edd5920344fbfbb9d84bc8b4a15de96f761bf61e8b9c2bbc3f25b1342a6756f9a2f7116fab50d57ff8aadff768ea5505914f72096fda2211dd5a31c502aa9a2deac1c0f18ffdb4f2bbb014f62bf561131802c178930220728ba7f85004740188b6ad259bdcb6698accb4e880a75fba1a38d741262b63e5bc8ddc4e028985faf0a701809b6aff6be7a30a90de87a8f0af655a18acf19d4f5d3ac0e898215dfc89709d4e3b0083f4da7569babe52786a69128375a03eb1d188b91d02f82e3e06dc41f61b5dcde5e6b679cae0cc07d37adbf6baa775a82a1dc3d721f93bf3617e57312aa79f740aa7edaef3ecc87cc0c302d032f3f1ed54f439c45bbe42a28a06eb4a75907e4e1eec4397f8e5110405216749ecce0176952571406f028a69d78bf34a61de8b2996f5546ec7cbd4776ebbea100838fcb63b97b227cc8ec78ec7786668208a187277159b213cc98b67558fc16573e037b983b81ef262cd8135620233f6c63073199582a0efbda82a66164e465578be86e1b38933f2726ac652ad1a6b3a0d8e78cdd14e2363dd13aed5699e6a1ecc0e93dbfb1fe07b6a0a2b0a40016b7106045f0a5bae7b0727245b75b79bfef6cd7ea2d9471cc60a31766df87f734bc8bf3fef53e4d895b18afb9ef64b8ab02a62b4fc8633a2ecdb704ca5f414810299d1f1559239debceb1b5fa940258ff5df664d4a80cb040a400000000965f92dff9d05088f2d5c8cdb1da769ae15f2d2f09f2b1990dafa24de9926ae0d8f3ef3aa19a1aeb0387b3c22b96ba0ef2a63167a4a5a9203382a4d5f9f26565ad39cd2127b0bef2a9be2e2eb7813b2ca0d7da41097b13a892304abeae52cf56ada767d96f7772523b53d806acb277edf2ed1885ffcd4bc1f3541c1d6a0e1d291bd0fe14d76e869d7b73371dec269c3a0a7a2abaabc06ee42efe31b8da59226497f97793befbd9e8190fddb90806026107b63197e428ea7613ace3a230f7728cf773052ac2c694b5932d1e97af2b21dbda299ac2309d55b4349a16671ff9d7514e14c21b1ab0e1febf22b45f77c4ed44ef4b3f65ca27ef2e2e197097dc3a370f73caef0832d914dce75958963f518676893df0ba1653d43ba60b615a9efd5c5a7a4f234c90bfce8ff778163ffcf653e71786b35ae518f49d8de0c425e2be55f126d71944111d9de9cbb15c9313c57a3172de67d05067ce9441ec5b73ea9cab64cd0f8b819b105ff497576aca4c006210a8c41c06a54f8fdba59367dff6d5581466b222bea3e780e430489a089a27569315d972ff976639e957f795b4e5d99e88b290e0adc34c47955588b14585730f97bd930fcfd1c17771249aff03e6e01959822af69efaeb5983cf3ebadf7cb39ed4f1dcd95db5aa34b0ed276d45bd5b914bad80dd3b9a172a33c917d0533959e62eea34b5afdc03eea1b0bd296aff19749244050350c6101794e916cae20a22f2938933ba5cdf1c07a94eb3bafbada6300d6dbef97cae154912893066790957ecc1122651ca78df8832c92645cd43c756943027af507afa72183a78ae75dadc52574925350fa8e6c5a99a0b56033462c8109105bd60a1a0efc16a0ab9294e61368dc3fa3e95744ca96da439a5535cb7e03a0497febda0c03b936358559275b1e44aba971ac6644c08b367d51e94faff8d03cde2fb9aaf5558e2a885254d3521053f608dd2ea28d6f5dac6a046609755c9bd3f246d7e464414b2c5fca1acb65dce0c479ab0f56c45ac4dd7eb5b24ee99dcb9a5eff0b0cb3b48b02325445a6b5a969bc6d83b88fb08fc5932facfabac5cbd7e2862c874abb6ec07b08d763270027b7c48769ce878b0862b41ccb8fbda7caeea078f5d7d2274d19bd66c4a6927cf820b370881291a04c97dac9f978572e0a83bd5d5426c7b5ade47547d85bd92300b45df708d79776929a032ab108bb012ecc622392e67e9bdc2ad03f3a19555bbd8524e81bfd3b476dc96cccb645827abbbb1dce747cf5543dca1e5ba78a249b09ff8c0b7f2e3d6955ec873277d3851caa20a22d3db2ce40136d365c46832597431ffe135b34c017eea9acf03f90fe9e186d34eeb0e6dfb88cb8c32306b9361f96571815b2a13ced620ba462ddb97810f7134be695853dcec2add9672f3f54c442df19317ee871605249fa7b8d92a330ae3482ca785ffd5439e52e1e43f541ebcf37a1237319a35222810a2b0915c138a5bfda63e1496d3d2345669fcab35ae79519fc6e0ec13285725bfc244b208c4b81a2f8c14431b41443893957df3d1de590f936f8b841e6f69fc8f047ee885d707c2504ae3c054898ffd12b6fc8d1aada2a575fadd950d83f0661160bdee4e3c86c9451147fe6ee8fd8966c632446daf146dcdd72eb1c0afdd75a5c72b88bc699f44d0206f076dde48ae9940219d5815a422ec3058e38412aaabd1dfbbc89d952285c2059f9554ecf13f54a5892d48701f6e4acd8c8183baa5f56fc6d884c84b413469098018cbd3096983139cbf5049655a2cccd930bd9fe59f92b2b506eef5da48fbd48eb19ddd6fe8cd25cd050e4c394943d5fe91aed5cb1d64f22745d7aae879339f7fb678de4ad5ed0c435c48bae197a297573481dc80200c41c52199cf8b32f78fb691b84e700748e4079e1e635b54e107c79d3e243d9d6a8e64299f2d9cd737f638ff30d55c70ad1d7bb0598752830bc7e7cb390510ba3fdf6ff868975c8dac05585ab882558c3d7eab26151dbe91004e92711872b27b35065eb8b74e584f42a31a9a2c1b8d25ca234de81bec75e52440ade97ed708e9e04450ac4e6a016b44255ebfcc41d557aec480511d586d75d344c4724acbc9870b2009e154f32cd14a31155cd6c69646db2a3f7acd78ea3af420fc64ef6131d1ddab90d4111beb707c00a80515bfd6b804561be8606327da293087dbb31bc70ab7d11fddeeefd20c972fe46c8d37a05850955ebba6d00f59fb8eca92854ffe041c1ae8dbde572b16560cf0aa116d065eb67e35bb6dddfc7cc60e7d3ea7be7310af01bd31d22846a480888dc67282c28f7e4fcdb9485c2117e96f28d23553fd6c135daed8c3e3e3502a49dc7d9f0c3966243b8aa4a7e1e8fb538df26b830fa7144e8130b4ebce38ee1e1491adb25daa4510b3f92f97105eecbece28390a96171d29480bd2c022afc62f070102720dd41aa0ddd26a5af110776521bb6c43bda7e6b86bb2cf8da421b3861b43335b47542f4d3e6477906861faa979e3d50bb43b3c0e07b3fbe36dbcba5a64286942370fcb12ff48e9eab53dd8a0d5e32c17bf6aa797c01ec37d83e9eadfc9c6dcc7a45b1caf40fe674e0e5e1cda24b16726322c101e28192606e80479637ca795668eb98217b8da392443b158e32f3dad4af60c99116b8423b04825f85155c01b1b17a640357d07cc7d0b718a7a7f1a3b9c3d9f2782a694a56330d654b66825a1b07f28ea7956baf692a57a86e8817d5d5a202c45a8e95c24743214df8b091eaabaf317f0f8551f4e17462319f5e5b2d0d1f0fb15d475dd995c33e795e3f6cd580e6607c43aa5f8645a13a5ba8d17d23b0783c814f90fd53b02b67ebd7dbe7c73ee9949e4646491c8ec4c352101198d5ca50ec38a35abf61cc6e9b8a39dc31410f199d9055f5cf0cee75953e1fb084da6404a21ef0f63ac9754eb2082fdfe95b06dec17196b18113c10eaf8bd2fa43c10a7912b663cb921535b7bdfa94eef80872ebd79083b5da2e79ef022f9995fe096f69760962da88deb5410b42e588b34526d20af11f02c54e587d7224f28d8307337e3215d11555bf6bc501808ba5eeba7723d95f0bce0623a75738ad2e281fbaaf0af8345056132984ebebcd193d92b8eca617ee3c4dda4ca0270afdbee0947c6682d04c7f1b687f1775eeaa3a282ac245294807964a12f25f57e4bd1040bc803ab0bd21a22e97dbc483d64cf046994724740eaed4f84b47c1deab2d14a6f2aff8296ae986695187d97253b543692c740b95054d33e2fdb8d2c24d67771c5fc1ea608b6034d6b2eb0f1971f83e8fc0ac0b41565c1cce1cd0688646386a4b86bd96d14d3cf851de79fe0319d7fd872d79758fcc178a4a131b2bcbc75882231c58b3c69f9870fee5886555bab7c5dc1c923cd05627395769177a192e854033cb74c11d8c747d20ee4d16871c20119efb4f81892ffd19e10bcaa041a6df22c6bc612da9f4eb418d60668237aeced4e89166139a9319bfddf9b56dc00169f00d0877685d7fa904f4901551228690030af2463dd0f6e3a44f88205fde8e96523bdbe4962f2bb0220f9469255cbd202392aad7983d4f64c70dce00f62c3c44c5181c7ef92748692d6aca828af31ca3ddb6919e4f39a86a6ee85e330c3ba3f3039e8629930b46528481bc838c114b9b96d3f1d0a85adcdf1a846cf89c39651ac9abb3711437d2a5fd1a21cd0bc0621e045202b5a72b7f9373317e6d4ec16539e9866ce7ca61b86f6249abdf79c7460124c3641b625156f59e3ffbd40dfa83ca685aa680a6eeef572d6410de563c214e65399ed243929f1325fe34bf5bb602ef1a555ff5c8943f93b8bc0641725e4c3bbe2adf3f4d053a78912bbbea5594573864d2f1f0df9993f5f438acbf067902e6f54ea000004004180d860235c46ff6d808fa0ee3f5616f1a3c40e643086f8e278e38234bc06df9db58335d49d280619fbada3742ece1f9457257d10915010574a707b76ab995e0db946232f8212f761775d75775a8eae5ee1b3e60db52db02ecaca7740bdb60ce5bec53643c91658c8f0da260318c7276655162f2d7f522e6a79e3851f39ba6ed86c4f6f20aef0204f5fcc4c947dfa276a8a316004004300040036006b1c20d4b0c253a447964ac649b89ebe725b390cf9765047832b2659e007637ded58584abc9dddbc7221d49a6de6eda8382f5ec9dab7786a41130104c2d0481753ed135c0dd5d5d5016c8250e432ace38134cc5d7bbbf9a17496faef3691818d583bee45d10b904b4af359c3081e0e8a213ed0d4acfb4fe9eb5736f2cdec3e9a960e465aa217da49fa512ee5be9427694aa1a69471d189d3025e3d686b860d928032a670e07b75437714819f722f6fa7e9b34fc3110a9689880e1fe872b0c69d0ca438cdba3565db8b74b7d7dd1ebff3d9c041258caece6b85acb3d66954134876c73de5b07c58373958a47294f9d73c322237e0ee38e9ffd62c5912f553da968dcdc103949b734529aac5e1daa1ae9a4a3381647074049c6ca78ed9ca18e41233432d8d04009980000028001b8014005d00fe880000000000000000000000000001040002800c00c300080000000000000008001b800400a980"], 0x1264}], 0x9, 0x0, 0x0, 0x1}, 0x0) close(r1) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x9}}}, 0x24}}, 0x24040084) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000001c00000095000000000000001fbdcb9b1c2d83483acff74fc827069d8f458ab0d5d761d95a8151acff11e28fd2390dee9bb6f0381c3cc6b61841a7bb6f088a1c53c485d3ecfeb2d08cc0dae1908460aff8c12a67058b4912685868ee71f621df750700a2932b72f63ef8a0b7bc785feeffb22ded1c3ff8de9a48ba09963fa43e7dac51346e1cf3ce73a50e44f711b296750d7aaab11ae6fc78198fbc4c9ad2e05d1a19acdc90282ec6b510"], &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000840)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r6, {0x8}, {0xffff, 0xffff}, {0xa, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0x6, 0x10, 0x1, 0x5, 0xf, 0x5, 0xf, 0xe, 0xf, 0x5, 0xa, 0xc, 0xc, 0x0, 0x5, 0x4], 0x1, [0x0, 0x4, 0x7, 0x1, 0xc9, 0xafa, 0xd, 0x0, 0x80, 0xdcf, 0x8, 0x2, 0xfff9, 0x34e, 0x4, 0xd25], [0x6, 0x401, 0xbb1c, 0xd, 0xe80a, 0x59, 0x81, 0x87b7, 0x2, 0x0, 0x7fff, 0x763, 0xff, 0x84, 0x8, 0xc]}}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x40}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x400dc}, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r11, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) writev(r11, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) recvfrom(r11, 0x0, 0x0, 0x10002, 0x0, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a0104000000000000000002000000600004805c0001800b00010065787468647200004c00028008000540000000e1080001400000000f080003400000005b08000440000000b605000200830000000800074000000009080001400000000108000340000000fe08000340000000540900010073797a30000000000900020073797a32"], 0xb4}}, 0x0) 3.562011985s ago: executing program 2 (id=9338): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000080)=0x1, 0x4) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x680000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffff0}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x48041}, 0x8001) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000300)={r0, &(0x7f0000000200)='\x00', 0x10102, &(0x7f0000000240)={@_ha_fsid={[0x42b, 0x1]}, {0x1ff, 0x3, 0x9, 0x1}}, 0xd4, &(0x7f0000000280), &(0x7f00000002c0)=0x61d}) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @multicast1}}}, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000400)={0x0, 0xe1, "34c83753b19c1536d53d1c030007a399dad69c508c5cc21ee564747514f36db78de9ed708af51460b6f0af442d64e64dd5fb864a701e1ef82865995343efbd565b89823a195eb696fda2378b5a1579bdbe8497a48ca19494e8e97ebc432bccfda6a22ac807fea11cabd6deb02a712626ca0d30c418a9819ebd61fca2c3fc4f3bd72a2c3606634f0174e1d292e95568d5dd7fc2c12f6b6961a1a54835222b92c8113fe294b69c4f0c31a31a6df08bdd066458b87292f9fb7928c2c46ddc421bba62dff7413f491c6c80bf000c3bd05fe189498a31c28ea6cbe4c21b884460d3656a"}, &(0x7f0000000500)=0xe9) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000540)={r2, 0x8001, 0x9}, 0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r3, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0xd}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000700)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010100}}, 0x8, 0x5, 0x7, 0x9, 0x5}, &(0x7f00000007c0)=0x98) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000800)={r2, 0x1, 0x0, 0x3, 0xb, 0x401, 0x20e1, 0x7, {r5, @in6={{0xa, 0x4e24, 0xffff5ad1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}, 0x100, 0x0, 0x5, 0x1, 0x2}}, &(0x7f00000008c0)=0xb0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000900), 0x4) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000940)=r5, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0x90, 0x14, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x1a, 0x8, "6b5cf4362dd2bab021e17198e65549a99cf139203a57"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) listen(r0, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) sendmsg$xdp(r1, &(0x7f0000002240)={&(0x7f0000000b40)={0x2c, 0x8, r7, 0x21}, 0x10, &(0x7f0000002180)=[{&(0x7f0000000b80)="0ebcf2a8c68c1a99194e5b4fa5faf47d", 0x10}, {&(0x7f0000000bc0)="b9700a08e38f16d1e4365b81c364ae36bd5f90250f935753dc7452c34f4f79cb7c3f8a57584d9fb135174a99853f98957c53d5cb69466eb3e89c629bca", 0x3d}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)="cd421cdcaa9e740103b6aea081598db686f6e29c80d4c218ef94d4f38f763182cf22f5eb98923a01f946bdb08762f1647b1bfbc2d7712c01f9687c446e38a402068e05b217aeb1396baa486cb87972fb1cbe6721eb14222cdb04ca656b7c7d251c1c659ad9dade497686ca904085e1314d4f07d9229cde4d4005ea0598442f7e63eb147be933723cec75e65532d5a317a994541d2be7f1d9645ad198d0ad2544b1b81823bc9bc7a6f23a0ee7b5ea85d3a5197672cb46f8481b77d2e66e7d2bd7febec8f4b740a22542bc1fd677ff", 0xce}, {&(0x7f0000001d00)="b5bcbe923545c8ad9db3d252bce10534049d4c5f9989d46c23fdf0848736a408395ca5d4d94745e7c2f6dc17c019e1c324a9c67f99807277a5fe0026e8ee3b3cfb559cb14872fd26bf5c581fbdabe6b3bd4ba0cfbe94286692f67d7cce47c944c89869e679d6a2640ac13f567f44373f528591f357be67b511d2a4def957b8fc4538d992983aef8f93643c045f027c8c06973980bcaffebd373b0a81c8dce4f8fc90626f8073e61d284e291a0bbb3f1bf1b5909a1250cac39f1ec5af1d7b4b0f03b38292ee62ce135469d5a8d3", 0xcd}, {&(0x7f0000001e00)="e6ed1d6410c181d8b97c9dc67cde679afbe5e0fb84622e1e8b006290294dfe26aa772524067e84bf0cdc45211c1af1007a381bc254341793635a2208a72f6dcbd98123db8262f9df5794b3092563ded278a7376b33be53835736b78b28", 0x5d}, {&(0x7f0000001e80)="8a5348db33c31ced04aba54ec4ba60c3b18d02c1eaed918666f970f2ea87dad2d7ed30ff982d6758c9216b769aa06c69aa278a37daa609e2743835f1d30440f5c699d963f7d249ec1d64d0dd91a4dc9bfef809b11a9d8747ea9fb0527cc724fa1821e277069a3ea63d34e695921689736fa2180d43d49e92912bca81b34bab06eee829f5a9826c2cdbd8d68c0b70365a16b38c02c613493340e38dfe532082da15b5cb304428ce795bc0214e1bcf6102c408d932873c9d85a21fe71943a1fa830096bebadacdd9b4e81c40e7715a9a4d2d849ac20354bf89aa11758a519b7ddc14f6214f3490218c79b98cf7acbfd80220", 0xf1}, {&(0x7f0000001f80)="cd5bc654b1ef65612e6915", 0xb}, {&(0x7f0000001fc0)="64d332dab18e913feba211fcf78b67fc1f8ed47cdf94bfeb1922799cb91f8ca545426310304ea63d706f31a4548f8f9580654461da050c9c7328579fd47107f68723c0af122de065bcbc27780c79516c6eb3aa3cba0ce2f97c91f672680144c477a3318d152c45ebc69941b7032050b5d22aea04c0fd029653a34179ca46be0f71d7a16c3a31890ea798c87c8f739f58cea2cb4be677ee1a2f55d043", 0x9c}, {&(0x7f0000002080)="a8a7e4c12ec85a06e4c186560b1cc712ee48636b33b761de98c58151985c6899fe8995e285f9d4c1aca0b0f5289af71463053f2ec0eb010312364ca3b0768c03be1eac13ce185ea870c092059daa8190968810b103a475f64e62603cef1cbfef3d5bbccd4e3480d04eb5e1409604117cca98e83560f93d8ef4cf14ef0f23a2038d21260d583cec70050c363c6b9c3457a8689a767aa494a8c945189e9e702e11b37002c83d413199c0a6998b36724d193e61bae114336a6397f0e50f996997cd9948a276c72abfb78747404b56361a8f47856290c2147c26b5ddb0201b8ada0e", 0xe0}], 0xa, 0x0, 0x0, 0x4}, 0x440c1) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000022c0)=0x0) sendmsg$nl_netfilter(r0, &(0x7f0000002840)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002800)={&(0x7f0000002300)={0x4d8, 0xa, 0x3, 0x301, 0x70bd2c, 0x25dfdbff, {0x5, 0x0, 0x6}, [@nested={0xc, 0x10e, 0x0, 0x1, [@typed={0x8, 0x77, 0x0, 0x0, @ipv4=@remote}]}, @typed={0x8, 0xa8, 0x0, 0x0, @u32=0x8001}, @nested={0x22c, 0x57, 0x0, 0x1, [@generic="e2f96ad4d69fb868f9833b1905a73b8572b60e15e259cfdb406f8a5d50269d50247acde2e6fee58f5ed1b948b12a79f79d2a97071d4d34c0f1d777a19024bebe3d5e8f91f221ff21d502a0cd5de97d11949593a2c5a94e3a02e20624d094ec281c1f565beaaad1aac1dd0576c3c0d589", @generic="11bab996240e5575ab19708ee6f9cd325669279296648d181fea6af56b07fc90d82f14257b27f2aa82c3c27c2c650230201afd5850ee3363af2473f98d8b4f9775bc9ec05079f5529b56eabc1e5053bea7db8be9686ed06221cada7c8aad3aa4b2a199a725f6d08b15cee0ade024faa912dce1092f6f866c63eb35e774821388b7083d03bdc41fce4f89af7ebf33fff0e15b98fc99ee158c068bdf525e5268f33f958340685d221d322e69ad7ab433a11018f48f1b7ff1e516600e444a63f293", @generic="bf7894fb7c3ad947b28aa9a1cf0dfd6caf95fde1f33690ce807a8c8c920f6241d7e1616b07b24928826547f58ed031b979632a1105a8275eb51335755b42ccefb708e62d7a39ce6b296fff641755b983ffafc3adc5a3bc", @generic="ae360e64f029ce2c219a00653828ccb04d1c2ffa3bc7050b8ac05b414f5c0a1fa32d2cf0d8a244989c45697d3e6bf95c1e4e64139b727b7071947f2daad69f2876a1b048c64997d7ab1cb3d78f1221c8075889531b5f9821c2fe42e123479b73563832adee9bd9ca291c651ae5d58faaf6cb893bb0be75410b3f2503397d15cdbcdcd9e4771fc55432c82157113eea1fc8", @nested={0x4, 0x9}, @typed={0x9, 0x2d, 0x0, 0x0, @str='syz2\x00'}]}, @nested={0x5d, 0x9c, 0x0, 0x1, [@typed={0x8, 0x149, 0x0, 0x0, @pid=r8}, @typed={0x4, 0x9a}, @typed={0x8, 0x108, 0x0, 0x0, @u32=0x7}, @nested={0x4, 0x22}, @generic="a2ee44f0863a4e56c87b8b1eef3ec80185ef4aa32fc2675d4fb53a6045e1bef4a4890107ed90e42cd53c84273ef989179baa4c0576", @typed={0xa, 0x13c, 0x0, 0x0, @str='team0\x00'}]}, @generic="9d38bd98f5a8f8197058dffc65c33c9d41857e29c49730b86741dac0146c8105a39f73017587594daa46ecc8fd8dcb8a8ddf621bfa8d4045da700fee365ddb7beef59c66207a83b4706187342494eaeb328dc897596c862117e647a764f0142086bf4ce656e661fc49f521025943bce7a83d64513d9376fd29717d8af2f96dfbecf0f3427fb30b796740aff74351a25fb451b891cb6736f5", @typed={0x65, 0x80, 0x0, 0x0, @binary="27bd672365b91b14abb8cbcf64141011cd202ee299002a131055db4e7316d20c6769a569a1528341d27a71df2449f617aa824e2a425cd1ac0f3674b185d11b8255d4b1f0ad1ded2b19f2390c8b8b4fba9c9a3c550652b23332f0db89986783f447"}, @generic="5a388b8afc657eca6cce030ce8423e850196652974c60d35cc45f4926c7f6d4c648070aed062adbe162ea27731f0eedf880d670a0af5863b80695ea0dcb756e18083b68a85528d1d1208d0c34afe08393351d86b7afe5356d0f0e2c0a281b0070aa6a6d238672233a31f8993509823bf4b1fbf5da2bc37e85a1dc7cf27bc9fb389ca18fda67902beb01f589882982d94e1c065a9b49d9e7080654be575179d83e8074428e11f38633db148255215f98cf26ea62b21bf333e1bd1c20c9ca35fd3553083924d83829695368538e97faa7f48dda54f703962ac6a0e0aebfd44ec2d36", @generic="ce3633c637d96045daf043d7bfe0874808d23966ddbdf4dc7d0885688bd3a81b3fd1fc2e1d8cb21cd606e7bc689487e15378f19cb9aa970492d88de2b4c3fec2792a01"]}, 0x4d8}, 0x1, 0x0, 0x0, 0x10}, 0x40810) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$XFS_IOC_FSGROWFSLOG(r9, 0x4008586f, &(0x7f0000002880)={0xbb2, 0x8b}) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000002980)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x28, 0x0, 0x7, 0x101, 0x0, 0x0, {0x4, 0x0, 0xa}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x80000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40080c0) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000002a00), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000002a40)={'wg0\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000004940)={&(0x7f00000029c0), 0xc, &(0x7f0000004900)={&(0x7f0000002a80)={0x1e60, r10, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x146c, 0x8, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x4a0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x354, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x26}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x9}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @broadcast}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010100}}, @WGPEER_A_ALLOWEDIPS={0x110, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xb}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}]}, {0x144, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xe4, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x42}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x23}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2809a345483d9c705055661bce276506700f82562211fa5796fac2dd48f4e244"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "993c54eb1d0b5243b6bc9ba7acc298470d6be29d1c096a55de787a07d5d16861"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x8001, 0x0, @empty, 0xfffffff8}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xb9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xe0, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x2, @mcast1, 0x4}}, @WGPEER_A_ALLOWEDIPS={0x434, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x4}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x31}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x638, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0x154, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x23}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}]}, {0x25c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x218, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @broadcast}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @empty}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x28}, @WGDEVICE_A_PEERS={0x99c, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xf4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010100}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d15eac1999fde3f7ef22859a4524c53938d5b91445be4d6fd07036de37100381"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}, 0x90d}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a99f32dffe8a8b49016aea7f142d2ce751ef50a80d9aadfa9f99da952c38b031"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "157d5536260444c46f3db4233919ddb8bdd708e050421876473f7be364486836"}]}, {0x458, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x401}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ALLOWEDIPS={0xa4, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x5ff, @mcast2, 0x3}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xdf86}, @WGPEER_A_ALLOWEDIPS={0x334, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xe}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1a}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x4564}}]}, {0x3f4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x3a8, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x18}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xc, @loopback, 0x6}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @remote}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @private=0xa010100}}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r11}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}]}, 0x1e60}, 0x1, 0x0, 0x0, 0x4004005}, 0x4000000) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000004c00)={&(0x7f0000004980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004bc0)={&(0x7f00000049c0)={0x1d0, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x65}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xd4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x9c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'netpci0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4000050}, 0x2004000) r12 = accept4(r0, &(0x7f0000004c40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, &(0x7f0000004cc0)=0x80, 0x800) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r12, 0x84, 0x75, &(0x7f0000004d00)={r6, 0xe}, 0x8) 3.561758322s ago: executing program 5 (id=9339): unshare(0x24020400) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 3.405815371s ago: executing program 5 (id=9340): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0000492c2ecbf300003b34444f55e4824806", @ANYRES16=r5, @ANYBLOB="010000000000000000000a0000000800028004000500"], 0x1c}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="05f300000000000000002000000004000380"], 0x18}}, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ac0)=@newtclass={0xac, 0x28, 0x323, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0x8, 0xffe0}, {0xffff, 0x10}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x1c, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0xc}, @TCA_QFQ_LMAX={0x8, 0x2, 0x3}, @TCA_QFQ_LMAX={0x8, 0x2, 0x7c76f7dc}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xa}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x24, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x9, 0xf1a7, 0x58d}}, @TCA_HFSC_USC={0x10, 0x3, {0x3b, 0x9, 0x53}}]}}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x8, 0x6}}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_ingress={0xc}]}, 0xac}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000400000002000000000000130200000000005f00ca8225f742d71788b18e5d2973e4790d03508d4853d386759df4e1243c0d"], 0x0, 0x28}, 0x20) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r11, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0xfffffffffffffffe, 0x0, 0x6f, &(0x7f0000000480)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0xd, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES64=r9, @ANYRESHEX=r10, @ANYRESHEX=r12], &(0x7f0000000240)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x401}, 0x10}, 0x94) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r13) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r14, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)="0fdfdc45edbe1b48413d17f552059b2460", 0x11}], 0x1}, 0x0) 713.724332ms ago: executing program 6 (id=9341): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$qrtr(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/192, 0xc0}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x2) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000140)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fccc40a88035b96648e582006e9644fb02faf23884372d474d8235b094550aff7f0000000000000000", 0x75}], 0x1}, 0x8000) 667.251322ms ago: executing program 4 (id=9342): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="05000000040000000400000004000000", @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x15, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}, {0x85, 0x0, 0x0, 0xa0}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llx, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2000000}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) write(r3, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) (async) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000180)={@loopback, @remote, 0x0}, &(0x7f0000000240)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x41, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xf4b7, 0x0, 0x0, 0x0, 0x6f4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2a3d}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x200}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ldst={0x3, 0x1, 0x2, 0xa, 0x2, 0x100, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x80, 0x2e, &(0x7f0000000100)=""/46, 0x41100, 0x3, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x1}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000300)=[r2, r2, r2, r2, r2], &(0x7f0000000640)=[{0x4, 0x1, 0x1, 0x5}, {0x3, 0x3, 0x6, 0x9}], 0x10, 0x8}, 0x94) 662.662781ms ago: executing program 5 (id=9343): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x8, 0x4, 0x7fffffffffffffff}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00000023000100800000000000000000000000050021"], 0x1c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0xb, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={r4, 0x9}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={r4, @in6={{0xa, 0x4e22, 0x8001, @local, 0x9}}, 0x8, 0x32, 0x8, 0x6, 0x89, 0x4, 0x4}, 0x9c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000009c000000020000000200000000000000", @ANYRES32, @ANYBLOB="00010000000000000000e3ff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(r3) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001500000226bd7000ffdbdf250a3f10fe", @ANYRES32=r8, @ANYBLOB="00100000000800080030000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b6747d22e4902dcdb6ea9abbde7d7620855faac", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r8, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = socket$netlink(0x10, 0x3, 0x8000000004) r10 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r10, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) writev(r9, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000002800128008000100687372001c00028008000200", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r12], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) r14 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r14, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r14, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41d, @mcast2}, 0x80, 0x0}, 0x80) syz_genetlink_get_family_id$devlink(0x0, r9) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="2edf41c812fe12188ecd3ba7050b3a3818000000090000dcf9", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 661.811038ms ago: executing program 1 (id=9344): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0x7d, &(0x7f0000000700)={r4, 0xfffff801, 0x11e2000, 0x62c, 0x100, 0x2, 0x2, 0x4, {0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x3, 0xfffffffb, 0x3, 0x1000, 0x1}}, &(0x7f00000007c0)=0xb0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x3, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={r4, 0x5, 0xc, 0xf7}, &(0x7f0000000080)=0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x468, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x398, 0xffffffff, 0xffffffff, 0x398, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0xffffffff], [], 'macvlan0\x00', 'erspan0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@ecn={{0x28}, {0x1, 0x10, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x2}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @broadcast}, [0x0, 0x0, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x7, 0x5}, 0x0, 0x258, 0x278, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0xaf53, 0x5, 0x4, 0x0, 0x7, 0x3ff}}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@multicast1, [0x0, 0x0, 0xff000000], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffffff, 0x0, 0xff000000, 0xffffffff], 0x4d5, 0x3500, 0x3a, 0x0, 0x13, 0xd}, {@ipv4=@local, [0xff000000, 0xff000000, 0xff], @ipv6=@private1, [0x100000100, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d6, 0x3507, 0xf6, 0x1, 0x6, 0x1b}, {@ipv6=@rand_addr=' \x01\x00', [0xffffff, 0xff, 0xffffffff], @ipv4=@local, [0x0, 0xffffffff, 0xff, 0xffffffff], 0x4d3, 0x3502, 0x6c, 0x1, 0xd, 0x15}, {@ipv4=@multicast2, [0xff000000, 0xff000000, 0xffffffff, 0xffffffff], @ipv4=@dev={0xac, 0x14, 0x14, 0xf}, [0x0, 0x0, 0xff000000], 0x4d6, 0x0, 0x6, 0x1, 0x6, 0xafcf8a57df96f1de}], 0x1}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c8) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000100)={0xf}, 0x1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x68, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x4, 0x365, 0x1, 0xc180}}, {0x14, 0x1, {0xe364, 0xf2f, 0xffff, 0x88a8}}]}]}]}]}, 0x68}}, 0x24040800) 660.88603ms ago: executing program 2 (id=9345): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802ef9"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="09fe000500"}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0xffff, 0xa}, {0x1, 0x3}}}, 0x24}}, 0x40080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000180)={0x4, &(0x7f0000000200)=[{}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}]}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x6}]}}}]}, 0x3c}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@broadcast, &(0x7f0000000440)=@ctrl_frame=@bar={{}, {0x8}, @device_b, @device_b, @multi={{0x0, 0x1, 0x1, 0x0, 0x7}, [{0x0, 0x1, {0x2, 0x7f}, "6769698ec2baaa5d"}, {0x0, 0x0, {0x7, 0x1}, "2a2b55405d8f96da"}, {0x0, 0x9, {0x9, 0x2}, "a778b73ca1058aee"}, {0x0, 0x3, {0x7, 0x81}, "5b045550f8f49680"}, {0x0, 0x3, {0x3, 0x4}, "932b84027c3008fc"}, {0x0, 0x1, {0x0, 0x5}, "d27e53561dd551f9"}, {0x0, 0xb, {0x9, 0xff}, "362a02b6c42b1b6c"}]}}, 0x66) 544.445642ms ago: executing program 6 (id=9346): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x34, 0x0, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0019"], 0x34}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_SET_ID={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) sendmsg$nl_netfilter(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x21c, 0x10, 0x5, 0x201, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x7}, [@nested={0x9c, 0x8d, 0x0, 0x1, [@typed={0x4, 0x32}, @typed={0x7e, 0x15a, 0x0, 0x0, @binary="407ba40d308c967fb85301e7cb228371629c295be60629eddfd45250361428efce8f5dcc3ee416265afad45aeaf747c336b1a9f1f3821d480c7d4db5d1c0a6161912dee247e77d349a4c3a37501f0a328c4c7e2b44d3749b66bf5f2ae3da0af2f11fd84c1652aba936b52b6534c739ff77e688b53d99b5d2211e"}, @typed={0x8, 0xcc, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x6a, 0x0, 0x0, @uid}, @nested={0x4, 0x11f}]}, @generic="fc5e43ca342aad2e37c87e81970f46747853e95197218c55230a524eec40f0fba4df8687898e4b119d8650b947ba8fd74c19807e9dd0f1dd9ad541809563104c73d72c5393b32f0e262c89", @generic="cfc211e342402e8704d0b70ab4b7312ba80e1cb682851020571cbdda9402665d3a52fefb729cd018d99f39df09f2ec4b4e5c16aa36c3cd7005515d3c7cab823a1240cd2d989d2b5ccab4afacfd563419a775fcddd26b95bd34e562b0960908a86d3a7e03f00eebb9d3fb87cf609fd992778fc11417dbcd449b4400ec9ef2705229192b121d04fffac9fc296eeb389d7d3996b51778fc8f44129203fd181ce4b2a4e85498905cec052b7ce003c0b27817999aea92cac3fd4dffbe0e", @typed={0x8, 0x55, 0x0, 0x0, @fd=r0}, @generic="dc69ccdc3f9e14c98b25fa60f79b05f1f2d93990461bf8e2350387d6d2c90a46349395fd0bdf3a9fdb0194800377e910ded1192d53395493edfb689c7c2f0adab4a0856b42189bee398b25485cee0ed7d0712ad73859f5727617c75b"]}, 0x21c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 454.854982ms ago: executing program 4 (id=9347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0xe, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f0000000000)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x2, @private0, 0x5}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r2}, &(0x7f0000000180)=0x8) close(r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x6}, 0xaf) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 415.399646ms ago: executing program 6 (id=9348): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x48212b8952c3aff5, 0x70bd25, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) 394.102704ms ago: executing program 4 (id=9349): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x44000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e0000000445d753e939ada07a4595dfb2f6000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000400"/28], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="2d6e65745f7072696f202d637075736574202d706572665f6576656e74202b70696473202b696f202d63707561636374202b6e65745f7072696f202bc2f2cc2ca6386e6574202d726c696d69"], 0x4c) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000100), 0x8) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="07000000000000000400050000001c0003800800040079ddcf930800020020000000080005007180bbda180001801400020073797a5f74756e00"], 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000700)={0x0, r4}, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYRES32], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg0\x00'}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)={0xa4, r1, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xffffffd4}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}, @ETHTOOL_A_CHANNELS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000000}, 0x40005) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000540)) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000640)=0x9, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r8, 0x6, 0x1f, 0x0, &(0x7f0000001800)) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000020fbdbdf2541000000ec0001006e657464657673696d0000000f0002006e657464657673696d300000cdfe87006c325f64726f7073000500000000870000000000"], 0x4c}}, 0x0) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r11, 0x1, 0x1, &(0x7f00000002c0)=0x5f53, 0x4) getsockopt$inet6_tcp_int(r11, 0x6, 0x2, 0x0, &(0x7f0000000340)) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=ANY=[@ANYRESDEC=r10], 0x20}], 0x1}, 0x4004) 294.525411ms ago: executing program 5 (id=9350): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x2010, r0, 0x12f74000) r1 = socket(0x2, 0xc, 0x1c7) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x38e, 0xc00, 0x5eb3573d, 0x913, 0xff, 0xc}) r2 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000080)={{}, [@bcast, @netrom, @remote, @rose, @remote, @null, @remote, @rose]}, &(0x7f0000000100)=0x48, 0x800) getsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000140)=0xab4, &(0x7f0000000180)=0x4) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f00000001c0), &(0x7f0000000200)=0xc) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000240)) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r1) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x94, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10001}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x79}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x2f}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}]}, 0x94}, 0x1, 0x0, 0x0, 0xd78d6b0282da8f34}, 0x80) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000004c0)={0x32, @remote, 0x4e23, 0x2, 'sed\x00', 0x2, 0x80000000, 0x9}, 0x2c) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xf8}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x32}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44090}, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x8, 0x8000, 0x3, 0x100, {{0x8, 0x4, 0x3, 0x3, 0x20, 0x68, 0x0, 0x5, 0x4, 0x0, @private=0xa010102, @private=0xa010100, {[@end, @generic={0x44, 0xb, "9eb7cbb994f73496a6"}]}}}}}) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0}, &(0x7f0000000780)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x9c, r6, 0x8, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x22000885}, 0x40000) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000980)={'netpci0\x00', &(0x7f0000000940)=@ethtool_eee={0x45, 0xd, 0x3e2, 0x3, 0x10000, 0x5, 0x5, 0x9, [0x5c, 0x1]}}) r10 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_TIOCINQ(r10, 0x541b, &(0x7f00000009c0)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000a00)={0x10000011}) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000a40)={0x0, 0x3}, &(0x7f0000000a80)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000ac0)={r11, 0x5, 0x80000000, 0x17}, &(0x7f0000000b00)=0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x60, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x2}, @NL80211_ATTR_PMKID={0x14, 0x55, "f3feebe8296653d4fe54aa5cb2f2467b"}, @NL80211_ATTR_PMK={0x14, 0xfe, "78eb12810e75186b52bbc2d1bc804938"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x2f}]}, 0x60}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000010) 285.399538ms ago: executing program 6 (id=9351): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) (async, rerun: 64) r0 = socket$igmp(0x2, 0x3, 0x2) (rerun: 64) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000001c0)={0x1, 0x4, 0x6, 0x2, @vifc_lcl_addr=@empty, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) (async, rerun: 64) r1 = socket$igmp6(0xa, 0x3, 0x3a) (rerun: 64) getsockopt$MRT6(r1, 0x3a, 0x1, 0x0, &(0x7f0000000080)=0xfffffffffffffdfe) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 158.09386ms ago: executing program 4 (id=9352): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x1a, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f00000000c0)=0x6, 0x4) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0) 71.351124ms ago: executing program 5 (id=9353): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1800000055043d0902000000fcdbdf2507000000", @ANYRES32=r2], 0x18}}, 0x4090) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r5, 0x29, 0x33, 0x0, &(0x7f00000001c0)) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x4, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0x5}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x6e4, 0xc}, {0x4, 0x80000000, 0x3, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xee4}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 47.11189ms ago: executing program 4 (id=9354): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100000000000200"], 0x0, 0x1a, 0x0, 0x1, 0x5}, 0x28) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) r4 = socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='\'', 0x1}], 0x1}, 0x4005) 0s ago: executing program 6 (id=9355): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x1, @private0, 0x3}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000440)='\x00', 0x1}], 0x1}}], 0x1, 0x0) (async) shutdown(r2, 0x1) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e24, @local}}}, &(0x7f00000001c0)=0x84) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r4) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, r5, 0x3, 0x70bd2d, 0x0, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}]}]}, 0x24}}, 0x4044844) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x3, 0x4}]}) (async) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) syz_emit_ethernet(0x4a, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004563003c0065000009069078ffffffffffffffff0000000000000000000000000000000300004e2000004e2100040001000000020000000000000000"], 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r7, 0x0, 0xfe80, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) (async) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010000000000140000004600002400000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0000009078001809c400050200000000004800000002d58838068b91000000"], 0xfd6c) kernel console output (not intermixed with test programs): ave_1 [ 762.659022][ T994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.717759][ T994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.748576][ T1214] veth0: entered promiscuous mode [ 762.816550][ T1224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7589'. [ 762.832012][ T1212] veth0: left promiscuous mode [ 762.885810][ T994] hsr_slave_0: entered promiscuous mode [ 762.908168][ T994] hsr_slave_1: entered promiscuous mode [ 762.984643][ T1234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7591'. [ 763.061879][ T1236] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20002 [ 763.181192][ T1243] netlink: 'syz.4.7592': attribute type 17 has an invalid length. [ 763.206258][ T1243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7592'. [ 763.235603][ T1243] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7592'. [ 763.535693][ T50] Bluetooth: hci6: command tx timeout [ 764.513871][ T1263] xt_hashlimit: size too large, truncated to 1048576 [ 764.542931][ T1265] bridge3: entered promiscuous mode [ 764.550138][ T1265] bridge3: entered allmulticast mode [ 764.559277][ T1265] team0: Port device bridge3 added [ 764.564641][ T1265] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7597'. [ 764.573723][ T1268] bridge0: port 3(team0) entered blocking state [ 764.587432][ T1268] bridge0: port 3(team0) entered disabled state [ 764.593933][ T1265] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7597'. [ 764.606824][ T1268] team0: entered allmulticast mode [ 764.612056][ T1268] team_slave_0: entered allmulticast mode [ 764.626368][ T1268] team_slave_1: entered allmulticast mode [ 764.637076][ T1268] team0: entered promiscuous mode [ 764.642196][ T1268] team_slave_0: entered promiscuous mode [ 764.648662][ T1268] team_slave_1: entered promiscuous mode [ 764.719284][ T1265] bridge4: entered promiscuous mode [ 764.733198][ T1265] bridge4: entered allmulticast mode [ 764.743186][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 764.763055][ T1265] bridge5: entered promiscuous mode [ 764.777784][ T1265] bridge5: entered allmulticast mode [ 764.820325][ T1265] bridge6: entered promiscuous mode [ 764.826584][ T1265] bridge6: entered allmulticast mode [ 764.832570][ T994] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 764.859300][ T994] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 764.888112][ T1265] bridge7: entered promiscuous mode [ 764.893459][ T1265] bridge7: entered allmulticast mode [ 764.907429][ T1265] bridge8: entered promiscuous mode [ 764.915999][ T1265] bridge8: entered allmulticast mode [ 764.928637][ T1290] netlink: 'syz.1.7603': attribute type 7 has an invalid length. [ 764.932342][ T1265] bridge9: entered promiscuous mode [ 764.942726][ T1265] bridge9: entered allmulticast mode [ 764.958478][ T994] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 765.011874][ T1265] bridge10: entered promiscuous mode [ 765.017495][ T1265] bridge10: entered allmulticast mode [ 765.045029][ T994] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 765.078156][ T1265] bridge11: entered promiscuous mode [ 765.084169][ T1265] bridge11: entered allmulticast mode [ 765.118335][ T1265] bridge12: entered promiscuous mode [ 765.136590][ T1265] bridge12: entered allmulticast mode [ 765.159667][ T1265] bridge13: entered promiscuous mode [ 765.166313][ T1265] bridge13: entered allmulticast mode [ 765.206490][ T1265] bridge14: entered promiscuous mode [ 765.212411][ T1265] bridge14: entered allmulticast mode [ 765.257811][ T1265] bridge15: entered promiscuous mode [ 765.263138][ T1265] bridge15: entered allmulticast mode [ 765.294558][ T1265] bridge16: entered promiscuous mode [ 765.300573][ T1265] bridge16: entered allmulticast mode [ 765.340607][ T1265] bridge17: entered promiscuous mode [ 765.365111][ T1265] bridge17: entered allmulticast mode [ 765.528199][ T1336] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 765.572732][ T994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.615398][T29446] Bluetooth: hci6: command tx timeout [ 765.639770][ T1340] IPVS: length: 239 != 24 [ 765.647967][ T994] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.664183][T30434] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.671330][T30434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.724481][T30434] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.731647][T30434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 765.926452][ T1346] syzkaller0: entered promiscuous mode [ 765.931973][ T1346] syzkaller0: entered allmulticast mode [ 767.695170][T29446] Bluetooth: hci6: command tx timeout [ 767.835505][ T994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 767.858040][ T1386] tipc: Failed to remove unknown binding: 66,0,0/0:3480277147/3480277149 [ 767.882225][ T1386] tipc: Failed to remove unknown binding: 66,0,0/0:3480277147/3480277148 [ 767.893435][ T1386] tipc: Failed to remove unknown binding: 66,0,0/0:3480277147/3480277149 [ 767.912226][ T1386] tipc: Failed to remove unknown binding: 66,0,0/0:3480277147/3480277148 [ 767.932417][ T1386] __nla_validate_parse: 33 callbacks suppressed [ 767.932434][ T1386] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7630'. [ 768.010104][ T1398] x_tables: duplicate underflow at hook 1 [ 768.357744][ T1415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7637'. [ 768.633226][ T994] veth0_vlan: entered promiscuous mode [ 768.651835][ T1402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7634'. [ 768.679247][ T994] veth1_vlan: entered promiscuous mode [ 768.697317][ T1430] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.7640'. [ 768.715976][ T1402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7634'. [ 768.734528][ T1401] lec:lec_atm_close: lec0: Shut down! [ 768.742614][ T994] veth0_macvtap: entered promiscuous mode [ 768.869928][ T1440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7643'. [ 768.887852][ T994] veth1_macvtap: entered promiscuous mode [ 768.949286][ T994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 768.977607][ T994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 769.006991][T30435] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.018815][T30435] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.080093][T30435] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.122155][T30435] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.293277][T30447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.305676][T30447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.472265][T30421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.488770][T30421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.711295][ T1465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7652'. [ 769.832501][ T1474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 769.861697][ T1461] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7653'. [ 769.904242][T30447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.918851][ T1472] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7655'. [ 769.925663][T30447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.939833][ T1461] bond0: invalid ARP target 0.0.0.0 specified for addition [ 769.966257][ T1472] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7655'. [ 769.995658][ T1461] bond0: option arp_ip_target: invalid value (0) [ 770.148727][ T1471] delete_channel: no stack [ 770.336855][T30434] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 770.528573][ T1508] nbd4: detected capacity change from 0 to 63 [ 770.567732][ T1510] block nbd4: NBD_DISCONNECT [ 770.575881][ T1510] block nbd4: Disconnected due to user request. [ 770.583504][ T1510] block nbd4: shutting down sockets [ 770.590942][ T1536] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 770.599648][ C0] blk_print_req_error: 138 callbacks suppressed [ 770.599667][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 770.615476][ C0] buffer_io_error: 138 callbacks suppressed [ 770.615489][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 770.616216][ T1536] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 770.626470][ C0] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 770.650900][ C0] Buffer I/O error on dev nbd4, logical block 1, async page read [ 770.658731][ C0] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 770.668223][ C0] Buffer I/O error on dev nbd4, logical block 2, async page read [ 770.676050][ C0] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 770.685547][ C0] Buffer I/O error on dev nbd4, logical block 3, async page read [ 770.694009][ T1520] netlink: 'syz.5.7668': attribute type 1 has an invalid length. [ 770.699812][T31963] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 770.704508][ T1520] netlink: 'syz.5.7668': attribute type 1 has an invalid length. [ 770.744957][T31963] Buffer I/O error on dev nbd4, logical block 0, async page read [ 770.752889][T31963] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 770.766882][T31963] Buffer I/O error on dev nbd4, logical block 1, async page read [ 770.775783][T31963] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 770.820440][T31963] Buffer I/O error on dev nbd4, logical block 2, async page read [ 770.831546][T31963] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 770.850037][T31963] Buffer I/O error on dev nbd4, logical block 3, async page read [ 770.862888][ T1544] bond0: option ad_select: unable to set because the bond device is up [ 770.916643][T31963] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 771.153064][T31963] Buffer I/O error on dev nbd4, logical block 0, async page read [ 771.172499][T31963] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 771.183638][T31963] Buffer I/O error on dev nbd4, logical block 1, async page read [ 771.227254][T31963] ldm_validate_partition_table(): Disk read failed. [ 771.234278][T31963] Dev nbd4: unable to read RDB block 0 [ 771.240793][T31963] nbd4: unable to read partition table [ 771.259097][T31963] ldm_validate_partition_table(): Disk read failed. [ 771.277031][T31963] Dev nbd4: unable to read RDB block 0 [ 771.283982][T31963] nbd4: unable to read partition table [ 771.318614][ T1568] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 771.453339][ T1565] syzkaller0: entered promiscuous mode [ 771.475222][ T1565] syzkaller0: entered allmulticast mode [ 773.664803][ T1584] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 773.710666][ T1576] ip6_vti0 speed is unknown, defaulting to 1000 [ 773.840692][ T1597] __nla_validate_parse: 7 callbacks suppressed [ 773.840712][ T1597] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7689'. [ 773.872188][ T1598] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 773.883984][ T1597] netlink: 'syz.2.7689': attribute type 19 has an invalid length. [ 773.910362][ T1598] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7687'. [ 773.934901][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5210 ms [ 773.942903][ C0] lec:lec_tx_timeout: lec0 [ 773.996125][ T1598] vcan0 (unregistering): left allmulticast mode [ 774.244004][ T1617] xt_CONNSECMARK: invalid mode: 0 [ 774.413116][ T1628] netlink: 220 bytes leftover after parsing attributes in process `syz.4.7695'. [ 775.348175][ T1682] xt_hashlimit: size too large, truncated to 1048576 [ 775.397260][ T1691] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7708'. [ 775.419173][ T1685] can: request_module (can-proto-0) failed. [ 775.429513][ T1691] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7708'. [ 775.448784][ T1687] can: request_module (can-proto-0) failed. [ 775.661491][ T1715] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7716'. [ 776.212571][ T1742] syzkaller0: entered promiscuous mode [ 776.218902][ T1742] syzkaller0: entered allmulticast mode [ 776.267740][ T1742] tipc: Enabled bearer , priority 0 [ 776.290421][ T1741] tipc: Resetting bearer [ 776.294479][ T1749] netlink: 'syz.5.7726': attribute type 33 has an invalid length. [ 776.311881][ T1749] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7726'. [ 776.322302][ T1741] tipc: Disabling bearer [ 776.395459][ T1753] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7727'. [ 776.553669][ T1762] xt_hashlimit: size too large, truncated to 1048576 [ 776.563616][ T1765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7731'. [ 776.611984][ T1768] SET target dimension over the limit! [ 776.739185][ T1779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7736'. [ 776.743474][ T1774] Cannot find set identified by id 1 to match [ 776.842833][ T1772] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 776.872115][ T1786] syzkaller0: entered promiscuous mode [ 776.887422][ T1786] syzkaller0: entered allmulticast mode [ 777.595606][ T1831] netlink: 'syz.4.7753': attribute type 1 has an invalid length. [ 777.697738][ T1831] bond4: entered promiscuous mode [ 777.703060][ T1831] 8021q: adding VLAN 0 to HW filter on device bond4 [ 777.791195][ T1847] netlink: 'syz.5.7757': attribute type 1 has an invalid length. [ 778.189978][ T1868] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 778.402634][ T1873] bond8: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 778.455282][ T1873] bond8 (unregistering): Released all slaves [ 778.870629][ T1913] __nla_validate_parse: 8 callbacks suppressed [ 778.870647][ T1913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7772'. [ 779.254846][ T1923] netlink: 'syz.5.7776': attribute type 1 has an invalid length. [ 779.297384][ T1931] syzkaller0: entered promiscuous mode [ 779.302888][ T1931] syzkaller0: entered allmulticast mode [ 779.334165][ T1923] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7776'. [ 779.368020][ T1923] netlink: 1 bytes leftover after parsing attributes in process `syz.5.7776'. [ 779.409036][ T1923] netlink: 'syz.5.7776': attribute type 1 has an invalid length. [ 779.446439][ T1923] netlink: 'syz.5.7776': attribute type 8 has an invalid length. [ 779.478430][ T1923] netlink: 606 bytes leftover after parsing attributes in process `syz.5.7776'. [ 779.621290][ T1964] netlink: 'syz.1.7786': attribute type 1 has an invalid length. [ 779.629854][ T1964] netlink: 'syz.1.7786': attribute type 2 has an invalid length. [ 779.640438][ T1964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7786'. [ 779.803110][ T1974] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7789'. [ 779.813041][ T1978] "syz.1.7791" (1978) uses obsolete ecb(arc4) skcipher [ 779.930387][ T1988] openvswitch: netlink: IP tunnel dst address not specified [ 779.974397][ T1988] netlink: 'syz.6.7793': attribute type 1 has an invalid length. [ 779.994538][ T1988] netlink: 224 bytes leftover after parsing attributes in process `syz.6.7793'. [ 780.095867][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 780.328392][ T2005] netlink: 212304 bytes leftover after parsing attributes in process `syz.1.7797'. [ 780.339129][ T2005] openvswitch: netlink: Message has 6 unknown bytes. [ 780.613877][ T2016] netlink: 'syz.2.7801': attribute type 1 has an invalid length. [ 780.623113][ T2016] netlink: 212 bytes leftover after parsing attributes in process `syz.2.7801'. [ 780.633237][ T2016] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7801'. [ 781.786917][ T2031] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 781.795252][ T2033] xfrm1: entered allmulticast mode [ 781.831574][ T2033] tipc: Enabling of bearer rejected, failed to enable media [ 781.950926][ T2048] netlink: 'syz.5.7809': attribute type 1 has an invalid length. [ 782.205224][ T2070] netlink: 'syz.5.7814': attribute type 3 has an invalid length. [ 782.205530][ T2071] netlink: 'syz.5.7814': attribute type 3 has an invalid length. [ 782.333800][T10940] IPVS: starting estimator thread 0... [ 782.446379][ T2078] IPVS: using max 33 ests per chain, 79200 per kthread [ 782.529922][ T2080] netlink: 'syz.4.7817': attribute type 10 has an invalid length. [ 782.594462][ T2080] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 782.918851][ T2122] IPv6: NLM_F_REPLACE set, but no existing node found! [ 783.286381][ T2148] netlink: 'syz.2.7835': attribute type 13 has an invalid length. [ 783.410526][ T2157] IPVS: Unknown mcast interface: vcan0 [ 783.732750][ T2182] netlink: 'syz.4.7843': attribute type 4 has an invalid length. [ 784.216717][ T2212] __nla_validate_parse: 11 callbacks suppressed [ 784.216737][ T2212] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7849'. [ 784.284490][ T2220] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7852'. [ 784.306635][ T2220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7852'. [ 784.379709][ T2220] netlink: 31 bytes leftover after parsing attributes in process `syz.4.7852'. [ 784.395031][ T2220] netlink: 'syz.4.7852': attribute type 2 has an invalid length. [ 784.402960][ T2220] netlink: 31 bytes leftover after parsing attributes in process `syz.4.7852'. [ 784.503839][ T2229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7853'. [ 784.538702][ T2229] geneve4: entered promiscuous mode [ 784.614237][ T2236] netlink: 'syz.4.7857': attribute type 21 has an invalid length. [ 784.633088][ T2236] netlink: 'syz.4.7857': attribute type 1 has an invalid length. [ 784.801176][ T2247] ip6t_srh: unknown srh match flags 4000 [ 785.046825][ T2274] pim6reg1: entered promiscuous mode [ 785.052225][ T2274] pim6reg1: entered allmulticast mode [ 785.103852][ T2279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7869'. [ 785.109657][ T2276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7868'. [ 785.127525][ T2279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7869'. [ 785.228555][ T2286] syzkaller0: entered promiscuous mode [ 785.249506][ T2286] syzkaller0: entered allmulticast mode [ 785.291223][ T2297] netlink: 'syz.5.7871': attribute type 1 has an invalid length. [ 785.312406][ T2297] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7871'. [ 785.344006][ T2303] openvswitch: netlink: Multiple metadata blocks provided [ 785.551593][ T2315] ipvlan2: entered promiscuous mode [ 786.070168][ T9480] lec:lec_start_xmit: lec0:No lecd attached [ 788.065696][ T2276] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 788.367272][ T2346] syzkaller0: entered promiscuous mode [ 788.384091][ T2346] syzkaller0: entered allmulticast mode [ 788.403765][ T2361] validate_nla: 1 callbacks suppressed [ 788.403780][ T2361] netlink: 'syz.2.7887': attribute type 1 has an invalid length. [ 788.459892][ T6828] syzkaller0: tun_net_xmit 48 [ 788.467438][ T2346] syzkaller0: tun_net_xmit 1280 [ 788.471466][ T2367] lo speed is unknown, defaulting to 1000 [ 788.473629][ T2346] syzkaller0: create flow: hash 2648731778 index 1 [ 788.530255][ T2361] bond10: entered promiscuous mode [ 788.537374][ T2361] bond10: entered allmulticast mode [ 788.542976][ T2361] 8021q: adding VLAN 0 to HW filter on device bond10 [ 788.551677][ T2367] lo speed is unknown, defaulting to 1000 [ 788.610519][ T2346] syzkaller0: delete flow: hash 2648731778 index 1 [ 790.053371][ T2369] erspan1: entered allmulticast mode [ 790.062217][ T2369] bond10: (slave erspan1): making interface the new active one [ 790.070418][ T2369] erspan1: entered promiscuous mode [ 790.077293][ T2369] bond10: (slave erspan1): Enslaving as an active interface with an up link [ 790.100971][ T2374] 8021q: VLANs not supported on sit0 [ 790.107534][ T2367] lo speed is unknown, defaulting to 1000 [ 790.147496][ T2367] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 790.259434][ T2367] lo speed is unknown, defaulting to 1000 [ 790.318631][ T2367] lo speed is unknown, defaulting to 1000 [ 790.321686][ T2400] __nla_validate_parse: 2 callbacks suppressed [ 790.321700][ T2400] netlink: 220 bytes leftover after parsing attributes in process `syz.5.7893'. [ 790.335898][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 790.351371][ T2367] lo speed is unknown, defaulting to 1000 [ 790.369374][ T2367] lo speed is unknown, defaulting to 1000 [ 790.401432][ T2367] lo speed is unknown, defaulting to 1000 [ 790.531420][ T2367] lo speed is unknown, defaulting to 1000 [ 790.558400][ T2367] lo speed is unknown, defaulting to 1000 [ 790.602073][ T2367] lo speed is unknown, defaulting to 1000 [ 790.608372][ T2423] veth0: entered promiscuous mode [ 790.609399][ T2423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7899'. [ 790.628553][ T2367] lo speed is unknown, defaulting to 1000 [ 790.636992][ T2367] lo speed is unknown, defaulting to 1000 [ 790.653308][ T2423] veth0 (unregistering): left promiscuous mode [ 790.739940][ T2431] syz_tun: entered promiscuous mode [ 790.764531][ T2431] macvtap1: entered promiscuous mode [ 790.789450][ T2431] syz_tun: left promiscuous mode [ 790.903245][ T2436] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 790.903893][ T2448] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7905'. [ 790.950369][ T2431] syz_tun: entered promiscuous mode [ 790.960166][ T2431] macvtap1: entered promiscuous mode [ 791.026627][ T2431] syz_tun: left promiscuous mode [ 791.084941][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 791.092983][ C0] lec:lec_tx_timeout: lec0 [ 791.180002][ T2431] syz_tun: entered promiscuous mode [ 791.199415][ T2431] macvtap1: entered promiscuous mode [ 791.227977][ T2431] syz_tun: left promiscuous mode [ 791.273674][ T2467] netlink: 'syz.4.7908': attribute type 10 has an invalid length. [ 791.320579][ T2459] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7908'. [ 791.355138][ T2459] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7908'. [ 791.377999][ T2459] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20001 [ 791.408303][ T2467] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 791.460551][ T2431] syz_tun: entered promiscuous mode [ 791.485149][ T2431] macvtap1: entered promiscuous mode [ 791.520789][ T2431] syz_tun: left promiscuous mode [ 791.829502][ T2491] bpq0: left promiscuous mode [ 791.863362][ T2491] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 792.120207][ T2518] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7919'. [ 792.347276][ T2543] sctp: [Deprecated]: syz.6.7925 (pid 2543) Use of int in max_burst socket option deprecated. [ 792.347276][ T2543] Use struct sctp_assoc_value instead [ 792.528706][ T2564] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7929'. [ 792.559165][ T2564] netlink: 'syz.6.7929': attribute type 2 has an invalid length. [ 792.601444][ T2564] : entered promiscuous mode [ 792.983104][ T2594] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7936'. [ 793.027395][ T2597] netlink: 92 bytes leftover after parsing attributes in process `syz.1.7937'. [ 793.073218][ T2594] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7936'. [ 793.172592][ T2603] .: renamed from bridge_slave_1 [ 793.358360][ T2628] netlink: 'syz.1.7944': attribute type 1 has an invalid length. [ 793.368033][ T2628] netlink: 'syz.1.7944': attribute type 2 has an invalid length. [ 793.391758][ T2628] netlink: 'syz.1.7944': attribute type 2 has an invalid length. [ 793.400332][ T2628] netlink: 'syz.1.7944': attribute type 2 has an invalid length. [ 793.853314][ T2656] Cannot find set identified by id 1 to match [ 793.897248][ T2658] x_tables: duplicate underflow at hook 1 [ 794.058684][ T2667] openvswitch: netlink: Flow actions attr not present in new flow. [ 794.453236][ T2680] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 794.899481][ T2713] netlink: 'syz.2.7966': attribute type 24 has an invalid length. [ 795.076901][ T2730] sctp: [Deprecated]: syz.2.7971 (pid 2730) Use of int in maxseg socket option. [ 795.076901][ T2730] Use struct sctp_assoc_value instead [ 795.338366][ T2759] __nla_validate_parse: 9 callbacks suppressed [ 795.338386][ T2759] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7977'. [ 795.357335][ T2751] netlink: 'syz.2.7974': attribute type 1 has an invalid length. [ 795.595599][ T2782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7982'. [ 795.604606][ T2781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7982'. [ 795.612914][ T2782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7982'. [ 795.622942][ T2781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7982'. [ 795.633029][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804da73800: rx timeout, send abort [ 795.698750][ T2784] netlink: 'syz.2.7983': attribute type 4 has an invalid length. [ 795.713704][ T2784] netlink: 'syz.2.7983': attribute type 18 has an invalid length. [ 795.722039][ T2784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7983'. [ 795.739332][ T2784] netlink: 'syz.2.7983': attribute type 18 has an invalid length. [ 795.750290][ T2784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7983'. [ 795.906416][ T2796] syzkaller1: entered promiscuous mode [ 795.912288][ T2796] syzkaller1: entered allmulticast mode [ 796.074019][ T2819] netlink: 'syz.1.7989': attribute type 39 has an invalid length. [ 796.130329][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804da70c00: rx timeout, send abort [ 796.142136][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804da73800: abort rx timeout. Force session deactivation [ 796.375888][ T2828] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7992'. [ 796.638594][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804da70c00: abort rx timeout. Force session deactivation [ 796.979209][ T2877] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8003'. [ 797.169508][ T2894] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8007'. [ 797.199369][ T2894] netlink: 'syz.5.8007': attribute type 32 has an invalid length. [ 797.254184][ T2894] bond8: option coupled_control: invalid value (179) [ 797.267638][ T2894] bond8 (unregistering): Released all slaves [ 797.329441][ T2898] tun0: tun_chr_ioctl cmd 1074025675 [ 797.334770][ T2898] tun0: persist disabled [ 797.340086][ T2898] tun0: tun_chr_ioctl cmd 1074025677 [ 797.348668][ T2898] tun0: linktype set to 773 [ 797.576210][ T2919] Cannot find map_set index 65533 as target [ 797.621108][ T2924] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 797.721511][ T2937] openvswitch: netlink: IP tunnel attribute has 54 unknown bytes. [ 798.230825][ T2968] netlink: 'syz.5.8030': attribute type 3 has an invalid length. [ 798.270399][ T2968] netlink: 'syz.5.8030': attribute type 1 has an invalid length. [ 798.279194][ T2968] NCSI netlink: No device for ifindex 813332851 [ 798.462512][ T2980] vxlan0: entered promiscuous mode [ 798.479869][ T2980] vxlan0: entered allmulticast mode [ 798.490588][T30437] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.515189][T30447] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.525973][T30435] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.534700][T30435] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.590185][ T2983] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 799.390135][ T3047] netlink: 'syz.4.8057': attribute type 11 has an invalid length. [ 799.439562][ T3047] netlink: 'syz.4.8057': attribute type 178 has an invalid length. [ 799.695717][ T50] Bluetooth: hci6: command 0x0405 tx timeout [ 799.809123][ T3073] bond1: (slave bridge1): making interface the new active one [ 799.824527][ T3073] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 800.135364][ T3097] syzkaller0: entered promiscuous mode [ 800.151124][ T3097] syzkaller0: entered allmulticast mode [ 800.213321][ T3100] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 800.384652][ T3115] bond8 (unregistering): Released all slaves [ 800.592130][ T3132] __nla_validate_parse: 17 callbacks suppressed [ 800.592148][ T3132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8080'. [ 800.592578][ T3131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8080'. [ 800.627556][ T3136] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8079'. [ 800.647251][ T3136] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8079'. [ 800.681364][ T3128] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8079'. [ 800.711528][ T3128] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8079'. [ 800.738363][ T3128] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8079'. [ 800.969645][ T3158] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input5 [ 801.016670][ T3164] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8089'. [ 801.065036][ T3164] validate_nla: 2 callbacks suppressed [ 801.065053][ T3164] netlink: 'syz.5.8089': attribute type 1 has an invalid length. [ 801.070383][ T3169] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:0 [ 801.324224][ T3186] veth0: entered promiscuous mode [ 801.361808][ T3185] veth0: left promiscuous mode [ 801.476436][ T3193] netlink: 248 bytes leftover after parsing attributes in process `syz.1.8101'. [ 801.763674][ T3211] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 801.848621][ T3211] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 801.888252][ T3206] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 801.910657][ T3225] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20000 [ 801.930840][ T3226] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8107'. [ 802.010609][ T3211] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 802.037938][ T3211] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 802.057676][ T3211] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 802.101210][ T3211] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 802.147298][ T3211] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 802.237826][ T3211] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 802.340572][T30435] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 802.379866][ T3211] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 802.442222][ T3249] batadv1: entered allmulticast mode [ 802.763672][ T3272] mac80211_hwsim hwsim85 ÿ: renamed from wlan1 (while UP) [ 802.915851][T30434] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 802.926501][T30434] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 802.944923][T30434] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 802.956376][T30434] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 803.237484][ T3298] ip6_vti0 speed is unknown, defaulting to 1000 [ 803.822263][ T3325] syzkaller0: entered promiscuous mode [ 803.844552][ T3325] syzkaller0: entered allmulticast mode [ 803.882857][ T3298] lo speed is unknown, defaulting to 1000 [ 803.979694][ T3325] delete_channel: no stack [ 804.048150][ T3343] netlink: 'syz.5.8143': attribute type 10 has an invalid length. [ 804.081093][ T3343] .: left allmulticast mode [ 804.093172][ T3347] netlink: 'syz.4.8144': attribute type 1 has an invalid length. [ 804.098219][ T3343] .: left promiscuous mode [ 804.123338][ T3348] netlink: 'syz.5.8143': attribute type 17 has an invalid length. [ 804.142474][ T3343] bridge0: port 2(.) entered disabled state [ 804.193427][ T3343] bond0: (slave .): Enslaving as an active interface with an up link [ 804.243342][ T3347] bond5: entered promiscuous mode [ 804.251646][ T3347] 8021q: adding VLAN 0 to HW filter on device bond5 [ 804.293376][ T3360] xt_hashlimit: invalid rate [ 804.302793][ T3356] bond5: (slave bridge69): making interface the new active one [ 804.312200][ T3356] bridge69: entered promiscuous mode [ 804.351411][ T3356] bridge69: left promiscuous mode [ 805.062474][ T3417] netlink: 'syz.4.8159': attribute type 10 has an invalid length. [ 805.085098][ T3416] netlink: 'syz.4.8159': attribute type 10 has an invalid length. [ 805.579661][ T3452] syzkaller1: entered promiscuous mode [ 805.599609][ T3453] __nla_validate_parse: 20 callbacks suppressed [ 805.599628][ T3453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8172'. [ 805.602636][ T3452] syzkaller1: entered allmulticast mode [ 805.618842][ T3453] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8172'. [ 805.643338][ T3453] netlink: 'syz.1.8172': attribute type 7 has an invalid length. [ 805.676608][ T3453] netlink: 'syz.1.8172': attribute type 8 has an invalid length. [ 805.697027][ T3461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8174'. [ 805.700204][ T3453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8172'. [ 805.745669][ T3452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 805.782927][ T3452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 805.837487][ T3464] erspan0: entered promiscuous mode [ 805.875865][ T3464] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8171'. [ 805.964991][ T3471] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8175'. [ 805.992811][ T3471] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8175'. [ 806.109370][ T3481] netlink: 'syz.2.8177': attribute type 1 has an invalid length. [ 806.117338][ T3481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8177'. [ 806.128153][ T3481] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8177'. [ 806.137379][ T3481] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8177'. [ 806.283756][ T3492] syzkaller0: entered promiscuous mode [ 806.290100][ T3492] syzkaller0: entered allmulticast mode [ 807.695161][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 807.696567][ T3459] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 807.707814][ T3459] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 808.515820][ T3459] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 808.521835][ T3459] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 808.556904][ T3459] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 808.563211][ T3459] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 808.609044][ T3459] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 808.619816][ T3459] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 808.646554][ T3459] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 808.656719][ T3459] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 808.693100][ T3459] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 808.702616][ T3459] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 808.741438][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 808.800196][ T3459] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 808.811502][ T3459] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 809.026340][ T29] audit: type=1804 audit(1771915137.363:12): pid=3603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.8211" name="/newroot/85/cgroup.controllers" dev="tmpfs" ino=452 res=1 errno=0 [ 809.061026][ T29] audit: type=1800 audit(1771915137.363:13): pid=3603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.8211" name="cgroup.controllers" dev="tmpfs" ino=452 res=0 errno=0 [ 809.712796][ T3656] net_ratelimit: 14 callbacks suppressed [ 809.712815][ T3656] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 810.072039][ T3684] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 810.400375][ T3702] syzkaller0: entered promiscuous mode [ 810.416585][ T3702] syzkaller0: entered allmulticast mode [ 810.638212][ T3715] 0: reclassify loop, rule prio 0, protocol 700 [ 810.647691][ T3719] __nla_validate_parse: 74 callbacks suppressed [ 810.647708][ T3719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8239'. [ 810.758481][ T3733] netlink: 'syz.1.8241': attribute type 1 has an invalid length. [ 810.770049][ T3728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8240'. [ 810.812480][ T3726] netem: incorrect gi model size [ 810.825357][ T3726] netem: change failed [ 810.879810][ T3732] bond8: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 810.945558][ T3732] bond8 (unregistering): Released all slaves [ 811.006353][ T3743] netlink: 59 bytes leftover after parsing attributes in process `syz.6.8244'. [ 811.056567][ T3743] netlink: 'syz.6.8244': attribute type 4 has an invalid length. [ 811.073833][ T3743] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8244'. [ 811.246845][ T3754] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8245'. [ 811.425672][ T3762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8249'. [ 811.636413][ T3783] netlink: 'syz.2.8253': attribute type 7 has an invalid length. [ 811.664825][ T3789] vlan0: entered promiscuous mode [ 811.672442][ T3789] geneve1: entered promiscuous mode [ 811.674717][ T3777] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8255'. [ 811.679286][ T3789] vlan0: entered allmulticast mode [ 811.692903][ T3789] geneve1: entered allmulticast mode [ 811.704120][ T3789] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.8256'. [ 811.718160][ T3789] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 811.726378][ T3773] ip6_vti0 speed is unknown, defaulting to 1000 [ 813.106356][ T3773] lo speed is unknown, defaulting to 1000 [ 813.127794][T30418] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.149693][T30418] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 813.197109][T30418] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.227656][T30418] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 813.273656][ T3834] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8264'. [ 813.308963][T30418] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.319242][ T3834] netlink: 'syz.6.8264': attribute type 5 has an invalid length. [ 813.338425][ T3834] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8264'. [ 813.349115][T30418] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 813.378392][T30418] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.398337][T30418] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 813.440135][ T3834] geneve2: entered promiscuous mode [ 813.449383][ T3834] geneve2: entered allmulticast mode [ 813.492306][T30418] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 813.509435][T30418] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 813.526659][T30418] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 813.542123][T30418] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 813.935031][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5190 ms [ 813.943086][ C0] lec:lec_tx_timeout: lec0 [ 813.977364][T30418] bridge_slave_1: left allmulticast mode [ 813.983205][T30418] bridge_slave_1: left promiscuous mode [ 814.001141][T30418] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.130748][T30418] ¾x9ÿ: left promiscuous mode [ 814.137061][T30418] bridge0: port 1(1¾x9ÿ) entered disabled state [ 814.473268][T30418] bond11 (unregistering): (slave vti1): Releasing backup interface [ 814.481899][T30418] vti1 (unregistering): left promiscuous mode [ 814.589808][T30418] bond5 (unregistering): (slave gretap2): Releasing active interface [ 814.628640][T30418] dvmrp1 (unregistering): left allmulticast mode [ 814.779090][T30418] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 814.787438][T30418] bridge3 (unregistering): left promiscuous mode [ 814.838822][T30418] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 814.846988][T30418] bond6 (unregistering): (slave bridge4): the permanent HWaddr of slave - e2:55:25:82:13:78 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 814.907765][T30418] bond6 (unregistering): (slave bridge5): Releasing backup interface [ 814.981003][T30418] bond10 (unregistering): (slave bridge6): Releasing backup interface [ 814.989379][T30418] bridge6 (unregistering): left promiscuous mode [ 816.369306][T30418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 816.379763][T30418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 816.390776][T30418] bond0 (unregistering): Released all slaves [ 816.400581][T30418] bond1 (unregistering): Released all slaves [ 816.412656][T30418] bond2 (unregistering): Released all slaves [ 816.425914][T30418] bond3 (unregistering): Released all slaves [ 816.438386][T30418] bond4 (unregistering): Released all slaves [ 816.453248][T30418] bond5 (unregistering): Released all slaves [ 816.472823][T30418] bond6 (unregistering): Released all slaves [ 816.487528][T30418] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 816.496328][T30418] veth0_to_bond: left promiscuous mode [ 816.501892][T30418] veth0_to_bond: left allmulticast mode [ 816.513098][T30418] bond7 (unregistering): Released all slaves [ 816.526046][T30418] bond8 (unregistering): Released all slaves [ 816.538012][T30418] bond9 (unregistering): Released all slaves [ 816.553346][T30418] bond10 (unregistering): Released all slaves [ 816.570312][T30418] bond11 (unregistering): Released all slaves [ 816.589971][T30418] bond12 (unregistering): Released all slaves [ 816.842811][T30418] tipc: Left network mode [ 817.287631][ T3928] __nla_validate_parse: 5 callbacks suppressed [ 817.287644][ T3928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8284'. [ 817.471994][ T3930] netlink: 144 bytes leftover after parsing attributes in process `syz.5.8285'. [ 817.776120][ T3960] netlink: 'syz.2.8292': attribute type 31 has an invalid length. [ 817.778740][ T3958] netlink: 'syz.5.8290': attribute type 1 has an invalid length. [ 817.813199][ T3960] netlink: 'syz.2.8292': attribute type 31 has an invalid length. [ 817.832399][ T3958] netlink: 'syz.5.8290': attribute type 1 has an invalid length. [ 817.845110][ T3958] netlink: 96 bytes leftover after parsing attributes in process `syz.5.8290'. [ 817.858053][ T3958] netlink: 'syz.5.8290': attribute type 1 has an invalid length. [ 817.869521][ T3958] netlink: 'syz.5.8290': attribute type 8 has an invalid length. [ 817.920050][ T3958] netlink: 606 bytes leftover after parsing attributes in process `syz.5.8290'. [ 817.937826][ T3960] netlink: 'syz.2.8292': attribute type 31 has an invalid length. [ 817.952389][ T3958] netlink: 1 bytes leftover after parsing attributes in process `syz.5.8290'. [ 817.990478][ T3960] netlink: 'syz.2.8292': attribute type 31 has an invalid length. [ 818.016460][ T3960] netlink: 'syz.2.8292': attribute type 31 has an invalid length. [ 818.034696][ T3960] netlink: 'syz.2.8292': attribute type 31 has an invalid length. [ 818.152782][ T3969] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8295'. [ 818.181162][ T3969] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8295'. [ 818.210963][ T3969] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8295'. [ 818.231316][ T3969] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8295'. [ 818.542842][T30418] hsr_slave_1: left promiscuous mode [ 818.573064][T30418] º: left allmulticast mode [ 818.586207][T30418] veth0_macvtap: left promiscuous mode [ 818.599289][T30418] º: left promiscuous mode [ 818.611071][T30418] veth0_vlan: left promiscuous mode [ 818.857581][T30418] team0 (unregistering): Port device batadv2 removed [ 818.875163][T30418] pimreg (unregistering): left allmulticast mode [ 818.890502][T30418] pim6reg (unregistering): left allmulticast mode [ 818.910433][T30418] team0 (unregistering): Port device batadv1 removed [ 819.203669][T30418] team0 (unregistering): Port device team_slave_1 removed [ 819.238612][T30418] team0 (unregistering): Port device team_slave_0 removed [ 819.540828][ T4028] netlink: 11 bytes leftover after parsing attributes in process `syz.5.8308'. [ 819.632332][ T4035] mac80211_hwsim hwsim88 syzkaller0: entered promiscuous mode [ 819.657415][ T4035] mac80211_hwsim hwsim88 syzkaller0: entered allmulticast mode [ 820.381449][T30418] IPVS: stop unused estimator thread 0... [ 820.581586][ T4072] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 820.797640][ T4079] syzkaller0: entered promiscuous mode [ 820.809968][ T4079] syzkaller0: entered allmulticast mode [ 820.890494][ T4077] bond2 (unregistering): Released all slaves [ 821.180523][ T4120] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 821.337606][T29446] block nbd2: Receive control failed (result -32) [ 822.802504][ T4153] validate_nla: 60 callbacks suppressed [ 822.802521][ T4153] netlink: 'syz.1.8336': attribute type 1 has an invalid length. [ 822.843989][ T4150] __nla_validate_parse: 7 callbacks suppressed [ 822.844006][ T4150] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8334'. [ 822.938698][ T4159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8336'. [ 822.983071][ T4159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8336'. [ 822.986534][ T4153] bond6: entered promiscuous mode [ 823.039977][ T4153] 8021q: adding VLAN 0 to HW filter on device bond6 [ 823.144365][ T4162] bond6: (slave bridge13): making interface the new active one [ 823.154266][ T4162] bridge13: entered promiscuous mode [ 823.174535][ T4162] bond6: (slave bridge13): Enslaving as an active interface with an up link [ 823.216145][ T4168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8334'. [ 823.226941][ T4168] IPv6: NLM_F_CREATE should be specified when creating new route [ 823.294535][ T4176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8334'. [ 823.328662][ T4168] syzkaller1: entered promiscuous mode [ 823.334160][ T4168] syzkaller1: entered allmulticast mode [ 823.342204][ T4180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8339'. [ 823.430983][ T4180] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 823.482315][ T4180] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 823.491610][ T4180] gretap1: entered promiscuous mode [ 823.496882][ T4180] gretap1: entered allmulticast mode [ 823.504194][ T4188] netlink: 80 bytes leftover after parsing attributes in process `syz.5.8341'. [ 823.629841][ T4193] IPVS: Unknown mcast interface: pimreg0 [ 823.645976][ T4193] netlink: 'syz.6.8342': attribute type 4 has an invalid length. [ 823.768548][ T4206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 823.845788][ T4209] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8342'. [ 824.003977][ T4220] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 824.043212][ T4220] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 824.069219][ T4225] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8353'. [ 824.079014][ T4220] netlink: 'syz.2.8351': attribute type 32 has an invalid length. [ 824.302912][ T4245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8355'. [ 824.325867][ T4225] netlink: 'syz.6.8353': attribute type 4 has an invalid length. [ 824.552019][ T4262] ip6_vti0 speed is unknown, defaulting to 1000 [ 824.563723][ T4267] tipc: Invalid UDP bearer configuration [ 824.563774][ T4267] tipc: Enabling of bearer rejected, failed to enable media [ 824.844593][ T4285] netlink: 'syz.2.8363': attribute type 10 has an invalid length. [ 825.028561][ T4295] sctp: [Deprecated]: syz.5.8365 (pid 4295) Use of int in maxseg socket option. [ 825.028561][ T4295] Use struct sctp_assoc_value instead [ 825.173104][ T4262] lo speed is unknown, defaulting to 1000 [ 825.638066][ T4336] netlink: 'syz.5.8377': attribute type 24 has an invalid length. [ 826.395944][ T4383] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.403265][ T4383] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.005989][ T4431] netlink: 'syz.4.8409': attribute type 1 has an invalid length. [ 827.216631][ T4450] netlink: 'syz.1.8415': attribute type 1 has an invalid length. [ 827.489004][T30435] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 827.511938][T30435] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 827.532087][T30435] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 827.544155][T30435] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 827.693078][ T4479] netlink: 'syz.1.8428': attribute type 1 has an invalid length. [ 827.885691][ T4496] __nla_validate_parse: 23 callbacks suppressed [ 827.885709][ T4496] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8432'. [ 828.002152][ T4496] netlink: 'syz.6.8432': attribute type 10 has an invalid length. [ 828.105263][ T4509] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8434'. [ 828.129944][ T4509] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8434'. [ 828.145708][ T4509] tc_dump_action: action bad kind [ 828.156981][ T4515] IPv6: NLM_F_CREATE should be specified when creating new route [ 828.165642][ T4514] IPv6: NLM_F_CREATE should be specified when creating new route [ 828.173531][ T4514] netlink: 'syz.6.8437': attribute type 1 has an invalid length. [ 828.183417][ T4515] netlink: 'syz.6.8437': attribute type 1 has an invalid length. [ 828.203929][ T4516] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8436'. [ 828.489733][ T4537] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8442'. [ 828.510279][ T4537] netlink: 'syz.2.8442': attribute type 7 has an invalid length. [ 828.520961][ T4537] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8442'. [ 828.538447][ T4537] gretap0: entered promiscuous mode [ 828.552291][ T4537] gretap0: left promiscuous mode [ 828.942968][ T4568] tipc: Enabled bearer , priority 0 [ 828.947153][ T4576] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8457'. [ 828.969966][ T4577] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8457'. [ 829.031185][ T4569] tipc: Resetting bearer [ 829.066050][ T4576] geneve3: entered promiscuous mode [ 829.094709][ T4580] netlink: zone id is out of range [ 829.099504][ T4584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8459'. [ 829.101592][ T4580] netlink: zone id is out of range [ 829.114566][ T4580] netlink: zone id is out of range [ 829.121163][ T4580] netlink: zone id is out of range [ 829.121374][ T4577] geneve3: entered promiscuous mode [ 829.127324][ T4580] netlink: zone id is out of range [ 829.138076][ T4580] netlink: zone id is out of range [ 829.143265][ T4580] netlink: zone id is out of range [ 829.151289][ T4580] netlink: set zone limit has 4 unknown bytes [ 829.159897][ T4567] tipc: Resetting bearer [ 829.362731][ T4596] netlink: 72 bytes leftover after parsing attributes in process `syz.6.8462'. [ 830.665729][ T4567] tipc: Disabling bearer [ 830.673967][ T4583] tipc: Enabling of bearer rejected, failed to enable media [ 830.702969][ T5877] tipc: Node number set to 2581478477 [ 831.206241][ T4642] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 831.225227][ T4633] netlink: 'syz.2.8474': attribute type 9 has an invalid length. [ 831.232972][ T4633] netlink: 'syz.2.8474': attribute type 11 has an invalid length. [ 831.243067][ T4633] netlink: 'syz.2.8474': attribute type 12 has an invalid length. [ 831.348651][ T4646] bond0: entered promiscuous mode [ 831.360797][ T4646] bond_slave_0: entered promiscuous mode [ 831.367785][ T4646] bond_slave_1: entered promiscuous mode [ 831.373893][ T4646] .: entered promiscuous mode [ 831.383131][ T4646] bond0: left promiscuous mode [ 831.388216][ T4646] bond_slave_0: left promiscuous mode [ 831.393751][ T4646] bond_slave_1: left promiscuous mode [ 831.400749][ T4646] .: left promiscuous mode [ 831.448768][ T4652] bond11: Unable to set down delay as MII monitoring is disabled [ 831.466804][ T4652] bond11 (unregistering): Released all slaves [ 831.616536][ T4661] netlink: 'syz.5.8482': attribute type 2 has an invalid length. [ 831.899970][ T4684] sctp: [Deprecated]: syz.4.8490 (pid 4684) Use of int in max_burst socket option. [ 831.899970][ T4684] Use struct sctp_assoc_value instead [ 831.972323][ T4684] xt_CT: You must specify a L4 protocol and not use inversions on it [ 832.329798][ T4711] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 832.627588][ T4723] ip6_vti0 speed is unknown, defaulting to 1000 [ 832.913303][ T4723] lo speed is unknown, defaulting to 1000 [ 834.038066][ T4793] __nla_validate_parse: 18 callbacks suppressed [ 834.038086][ T4793] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8518'. [ 834.061119][ T4797] netlink: 1 bytes leftover after parsing attributes in process `syz.2.8519'. [ 834.070617][ T4799] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8520'. [ 834.086321][ T4797] xt_policy: neither incoming nor outgoing policy selected [ 834.369990][ T4824] netlink: 'syz.4.8524': attribute type 2 has an invalid length. [ 834.386985][ T4824] netlink: 'syz.4.8524': attribute type 1 has an invalid length. [ 834.431376][ T4826] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8526'. [ 834.544040][ T4835] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8529'. [ 834.570653][ T4835] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8529'. [ 834.593260][ T4840] netlink: 'syz.4.8531': attribute type 15 has an invalid length. [ 834.601769][ T4840] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8531'. [ 835.020555][ T4864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8539'. [ 835.054687][ T4867] ip6t_srh: unknown srh invflags 4000 [ 835.121011][ T4871] netlink: 'syz.4.8541': attribute type 10 has an invalid length. [ 835.132756][ T4871] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8541'. [ 835.368497][ T4885] IPVS: set_ctl: invalid protocol: 8 172.20.20.170:20000 [ 835.512153][ T4895] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8548'. [ 835.561040][ T4890] gretap0: entered promiscuous mode [ 835.585666][ T4890] gretap0: left promiscuous mode [ 836.732382][ T4985] netlink: 'syz.1.8568': attribute type 1 has an invalid length. [ 836.860545][ T4989] syzkaller1: entered promiscuous mode [ 836.866762][ T4989] syzkaller1: entered allmulticast mode [ 837.650152][ T5039] xt_l2tp: unknown flags: 10 [ 837.726184][ T5037] netlink: 'syz.2.8583': attribute type 2 has an invalid length. [ 837.879239][ T5055] FAULT_INJECTION: forcing a failure. [ 837.879239][ T5055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 837.880677][ T5050] syzkaller0: create flow: hash 3927887653 index 1 [ 837.907579][ T5055] CPU: 1 UID: 0 PID: 5055 Comm: syz.2.8587 Not tainted syzkaller #0 PREEMPT(full) [ 837.907601][ T5055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 837.907611][ T5055] Call Trace: [ 837.907620][ T5055] [ 837.907628][ T5055] dump_stack_lvl+0xe8/0x150 [ 837.907657][ T5055] should_fail_ex+0x412/0x560 [ 837.907682][ T5055] _copy_from_user+0x2d/0xb0 [ 837.907706][ T5055] __copy_msghdr+0x3c5/0x5b0 [ 837.907735][ T5055] ___sys_sendmsg+0x213/0x360 [ 837.907764][ T5055] ? __pfx____sys_sendmsg+0x10/0x10 [ 837.907820][ T5055] ? __fget_files+0x2a/0x420 [ 837.907843][ T5055] ? __fget_files+0x3a0/0x420 [ 837.907875][ T5055] __x64_sys_sendmsg+0x1bd/0x2a0 [ 837.907902][ T5055] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 837.907934][ T5055] ? __pfx_ksys_write+0x10/0x10 [ 837.907962][ T5055] do_syscall_64+0x14d/0xf80 [ 837.907985][ T5055] ? trace_irq_disable+0x3b/0x150 [ 837.908009][ T5055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.908026][ T5055] ? clear_bhb_loop+0x40/0x90 [ 837.908047][ T5055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.908066][ T5055] RIP: 0033:0x7f216a39c629 [ 837.908083][ T5055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 837.908099][ T5055] RSP: 002b:00007f216b334028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 837.908118][ T5055] RAX: ffffffffffffffda RBX: 00007f216a615fa0 RCX: 00007f216a39c629 [ 837.908132][ T5055] RDX: 0000000000004000 RSI: 0000200000000dc0 RDI: 0000000000000005 [ 837.908144][ T5055] RBP: 00007f216b334090 R08: 0000000000000000 R09: 0000000000000000 [ 837.908155][ T5055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 837.908165][ T5055] R13: 00007f216a616038 R14: 00007f216a615fa0 R15: 00007ffd85276a98 [ 837.908192][ T5055] [ 838.164123][T30435] syzkaller0: tun_net_xmit 76 [ 838.170505][T30435] syzkaller0: tun_net_xmit 48 [ 838.325548][T26304] syzkaller0: tun_net_xmit 76 [ 838.330474][T26304] syzkaller0: tun_net_xmit 76 [ 838.356988][ T5043] syzkaller0: delete flow: hash 3927887653 index 1 [ 838.693300][ T5080] netlink: 'syz.6.8592': attribute type 1 has an invalid length. [ 840.174204][ T5094] __nla_validate_parse: 71 callbacks suppressed [ 840.174224][ T5094] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8596'. [ 840.204251][ T5100] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 840.208412][ T5097] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8598'. [ 840.507913][ T5115] syzkaller0: entered promiscuous mode [ 840.513415][ T5115] syzkaller0: entered allmulticast mode [ 840.534140][ T5119] netlink: 4112 bytes leftover after parsing attributes in process `syz.6.8605'. [ 840.563211][ T5119] netlink: 'syz.6.8605': attribute type 1 has an invalid length. [ 840.589369][ T5119] netlink: 224 bytes leftover after parsing attributes in process `syz.6.8605'. [ 840.742881][ T5128] netlink: 'syz.1.8609': attribute type 2 has an invalid length. [ 840.752019][ T5129] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8610'. [ 840.757736][ T5128] netlink: 244 bytes leftover after parsing attributes in process `syz.1.8609'. [ 840.814213][ T5143] netlink: 'syz.1.8609': attribute type 2 has an invalid length. [ 840.855112][ T5143] netlink: 244 bytes leftover after parsing attributes in process `syz.1.8609'. [ 840.873542][ T5147] netlink: 'syz.5.8612': attribute type 83 has an invalid length. [ 840.984685][ T5157] netlink: 'syz.1.8614': attribute type 21 has an invalid length. [ 841.005640][ T5157] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8614'. [ 841.041971][ T5157] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8614'. [ 841.105459][ T5150] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8613'. [ 841.246122][ T5167] 8021q: adding VLAN 0 to HW filter on device bond2 [ 841.264005][ T5178] netlink: 'syz.5.8619': attribute type 25 has an invalid length. [ 841.321465][ T5185] openvswitch: netlink: Flow key attr not present in new flow. [ 841.562331][ T5199] bond8: (slave erspan0): Device is not bonding slave [ 841.583559][ T5199] bond8: option active_slave: invalid value (erspan0) [ 841.795688][ T5221] netlink: 'syz.2.8630': attribute type 25 has an invalid length. [ 842.047340][ T5199] bond8 (unregistering): Released all slaves [ 842.151472][ T5225] netlink: 'syz.4.8631': attribute type 15 has an invalid length. [ 842.336322][ T5232] syzkaller1: entered promiscuous mode [ 842.336786][ T5234] netlink: 'syz.5.8634': attribute type 1 has an invalid length. [ 842.341820][ T5232] syzkaller1: entered allmulticast mode [ 842.395601][ T5232] team0: Device ip6gre1 is of different type [ 842.672570][ T5262] netlink: 'syz.6.8635': attribute type 10 has an invalid length. [ 842.699857][ T5262] bond0: (slave ÿ): Opening slave failed [ 842.794814][ T5267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 842.819184][ T5271] bond11 (unregistering): Released all slaves [ 843.894962][ T5356] vlan1: entered allmulticast mode [ 843.900125][ T5356] veth0_vlan: entered allmulticast mode [ 844.017669][ T5366] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20003 [ 844.171084][ T5383] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 844.178284][ T5375] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 844.223695][ T5380] bond7: option coupled_control: invalid value (52) [ 844.278746][ T5380] bond7 (unregistering): Released all slaves [ 844.319480][ T5390] mac80211_hwsim hwsim88 +: renamed from syzkaller0 [ 844.338116][ T5394] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20001 [ 844.345138][ T5394] sctp: [Deprecated]: syz.5.8682 (pid 5394) Use of int in maxseg socket option. [ 844.345138][ T5394] Use struct sctp_assoc_value instead [ 844.613369][T28893] NFSD: Failed to start, no listeners configured. [ 844.753573][ T5418] bond8: entered promiscuous mode [ 844.760200][ T5418] 8021q: adding VLAN 0 to HW filter on device bond8 [ 845.127260][ T5447] ip6_vti0 speed is unknown, defaulting to 1000 [ 845.216360][ T5453] syzkaller1: entered promiscuous mode [ 845.222028][ T5453] syzkaller1: entered allmulticast mode [ 845.328476][ T5464] __nla_validate_parse: 30 callbacks suppressed [ 845.328494][ T5464] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8699'. [ 845.513857][ T5466] tipc: Enabled bearer , priority 0 [ 845.548802][ T5466] tipc: Resetting bearer [ 845.554687][ T5447] lo speed is unknown, defaulting to 1000 [ 845.626888][ T5466] tipc: Disabling bearer [ 845.656802][ T5493] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 845.665959][ T5478] block nbd4: server does not support multiple connections per device. [ 845.694137][ T5478] block nbd4: shutting down sockets [ 845.869494][ T5501] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 845.920159][ T5509] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8709'. [ 845.937062][ T5509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8709'. [ 846.024022][ T5511] delete_channel: no stack [ 846.072438][ T5517] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8709'. [ 846.096933][ T5520] tunl0: entered promiscuous mode [ 846.102102][ T5520] validate_nla: 5 callbacks suppressed [ 846.102118][ T5520] netlink: 'syz.5.8711': attribute type 3 has an invalid length. [ 846.139949][ T5520] netlink: 9 bytes leftover after parsing attributes in process `syz.5.8711'. [ 846.600569][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 846.615788][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 846.623527][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 846.641896][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 846.660036][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 846.660348][ T5531] bond7: entered promiscuous mode [ 846.672896][ T5544] netlink: 'syz.5.8718': attribute type 4 has an invalid length. [ 846.689363][ T5544] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8718'. [ 846.716260][T29446] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 846.724561][T29446] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 846.732615][T29446] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 846.748719][T29446] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 846.758383][ T5536] macvlan2: entered promiscuous mode [ 846.763989][ T5536] macvlan2: entered allmulticast mode [ 846.764062][T29446] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 846.792203][ T5536] bond7: (slave macvlan2): Opening slave failed [ 846.876074][ T5544] `: renamed from bond0 (while UP) [ 847.003946][ T5540] ip6_vti0 speed is unknown, defaulting to 1000 [ 847.167195][ T5566] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 847.174486][ T5566] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 847.209756][ T5565] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 847.481195][ T5540] lo speed is unknown, defaulting to 1000 [ 847.493432][ T5589] syzkaller1: entered promiscuous mode [ 847.500672][ T5589] syzkaller1: entered allmulticast mode [ 847.513619][ T5589] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8729'. [ 847.690583][ T5596] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 847.961328][ T5615] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8739'. [ 848.093354][T30421] bond10 (unregistering): (slave erspan1): Releasing active interface [ 848.102163][T30421] erspan1 (unregistering): left promiscuous mode [ 848.157267][T30421] dvmrp1 (unregistering): left allmulticast mode [ 848.174578][T30421] bond3 (unregistering): (slave geneve2): Releasing active interface [ 848.235394][T30421] bond8 (unregistering): (slave bridge1): Releasing backup interface [ 848.243522][T30421] bridge1 (unregistering): left promiscuous mode [ 848.419895][T30421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 848.436988][T30421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 848.457505][T30421] bond0 (unregistering): Released all slaves [ 848.469589][T30421] bond1 (unregistering): Released all slaves [ 848.486961][T30421] bond2 (unregistering): Released all slaves [ 848.509966][T30421] bond3 (unregistering): Released all slaves [ 848.531937][T30421] bond4 (unregistering): Released all slaves [ 848.549276][T30421] bond5 (unregistering): Released all slaves [ 848.573921][T30421] bond6 (unregistering): Released all slaves [ 848.591347][T30421] bond7 (unregistering): Released all slaves [ 848.615793][T30421] bond8 (unregistering): Released all slaves [ 848.632339][T30421] bond9 (unregistering): Released all slaves [ 848.653266][T30421] bond10 (unregistering): Released all slaves [ 848.815088][T29446] Bluetooth: hci1: command tx timeout [ 848.841102][ T5648] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8746'. [ 848.882921][ T5646] netlink: 'syz.5.8747': attribute type 1 has an invalid length. [ 849.003786][ T5656] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8748'. [ 849.012210][ T5653] bond0: (slave bridge21): making interface the new active one [ 849.022069][ T5653] bond0: (slave bridge21): Enslaving as an active interface with an up link [ 849.075256][ T5660] netlink: 'syz.6.8746': attribute type 7 has an invalid length. [ 849.093332][T30421] tipc: Left network mode [ 849.112287][ T5540] chnl_net:caif_netlink_parms(): no params data found [ 849.140541][ T5648] netlink: 'syz.6.8746': attribute type 10 has an invalid length. [ 849.219541][ T5653] bond0: (slave gretap3): Enslaving as an active interface with an up link [ 849.677242][ T5693] netlink: 'syz.5.8755': attribute type 4 has an invalid length. [ 849.774459][ T5540] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.810285][ T5540] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.826805][ T5540] bridge_slave_0: entered allmulticast mode [ 849.847147][ T5540] bridge_slave_0: entered promiscuous mode [ 849.879161][ T5713] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 849.899178][ T5540] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.915153][ T5540] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.954500][ T5540] bridge_slave_1: entered allmulticast mode [ 849.982161][ T5540] bridge_slave_1: entered promiscuous mode [ 850.316100][ T5540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 850.342223][ T5740] netlink: 'syz.1.8765': attribute type 1 has an invalid length. [ 850.430237][ T5540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 850.527047][ T5740] 8021q: adding VLAN 0 to HW filter on device bond8 [ 850.545674][ T5748] FAULT_INJECTION: forcing a failure. [ 850.545674][ T5748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 850.558911][ T5748] CPU: 0 UID: 0 PID: 5748 Comm: syz.4.8766 Not tainted syzkaller #0 PREEMPT(full) [ 850.558934][ T5748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 850.558945][ T5748] Call Trace: [ 850.558953][ T5748] [ 850.558961][ T5748] dump_stack_lvl+0xe8/0x150 [ 850.558988][ T5748] should_fail_ex+0x412/0x560 [ 850.559014][ T5748] _copy_to_user+0x31/0xb0 [ 850.559038][ T5748] simple_read_from_buffer+0xe1/0x170 [ 850.559064][ T5748] proc_fail_nth_read+0x1bb/0x230 [ 850.559086][ T5748] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 850.559107][ T5748] ? rw_verify_area+0x2a6/0x4d0 [ 850.559121][ T5748] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 850.559145][ T5748] vfs_read+0x20c/0xa70 [ 850.559159][ T5748] ? fdget_pos+0x246/0x320 [ 850.559186][ T5748] ? __pfx___mutex_lock+0x10/0x10 [ 850.559203][ T5748] ? __pfx_vfs_read+0x10/0x10 [ 850.559220][ T5748] ? __fget_files+0x2a/0x420 [ 850.559243][ T5748] ? __fget_files+0x3a0/0x420 [ 850.559261][ T5748] ? __fget_files+0x2a/0x420 [ 850.559284][ T5748] ksys_read+0x150/0x270 [ 850.559299][ T5748] ? __pfx_ksys_read+0x10/0x10 [ 850.559322][ T5748] do_syscall_64+0x14d/0xf80 [ 850.559343][ T5748] ? trace_irq_disable+0x3b/0x150 [ 850.559367][ T5748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.559381][ T5748] ? clear_bhb_loop+0x40/0x90 [ 850.559403][ T5748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.559420][ T5748] RIP: 0033:0x7f912395cece [ 850.559436][ T5748] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 850.559450][ T5748] RSP: 002b:00007f9121bedfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 850.559468][ T5748] RAX: ffffffffffffffda RBX: 00007f9121bee6c0 RCX: 00007f912395cece [ 850.559481][ T5748] RDX: 000000000000000f RSI: 00007f9121bee0a0 RDI: 0000000000000006 [ 850.559492][ T5748] RBP: 00007f9121bee090 R08: 0000000000000000 R09: 0000000000000000 [ 850.559503][ T5748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 850.559514][ T5748] R13: 00007f9123c16038 R14: 00007f9123c15fa0 R15: 00007fffd676cc18 [ 850.559545][ T5748] [ 850.564813][ T5741] vlan4: entered promiscuous mode [ 850.815119][ T5741] bond8: entered promiscuous mode [ 850.820335][ T5741] vlan4: entered allmulticast mode [ 850.836213][ T5741] bond8: entered allmulticast mode [ 850.895400][T29446] Bluetooth: hci1: command tx timeout [ 850.923637][ T5540] team0: Port device team_slave_0 added [ 851.009380][ T5540] team0: Port device team_slave_1 added [ 851.202312][ T5779] xt_hashlimit: size too large, truncated to 1048576 [ 851.217386][ T5540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 851.238283][ T5781] __nla_validate_parse: 1 callbacks suppressed [ 851.238300][ T5781] netlink: 596 bytes leftover after parsing attributes in process `syz.1.8770'. [ 851.249460][ T5540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 851.385749][ T5540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 851.404790][ T5772] netlink: 'syz.1.8770': attribute type 29 has an invalid length. [ 851.459029][ T5777] netlink: 'syz.1.8770': attribute type 29 has an invalid length. [ 851.489043][ T5540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 851.504351][ T5540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 851.547009][ T5540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 851.592039][ T9480] lec:lec_start_xmit: lec0:No lecd attached [ 851.604629][T30421] hsr_slave_0: left promiscuous mode [ 851.625081][T30421] hsr_slave_1: left promiscuous mode [ 851.946509][ T5793] erspan0: left promiscuous mode [ 852.291610][ T5793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 852.566421][ T5793] xfrm1: left allmulticast mode [ 852.579278][ T5793] ipvlan2: left promiscuous mode [ 852.585498][ T5793] vxlan0: left promiscuous mode [ 852.590371][ T5793] vxlan0: left allmulticast mode [ 852.603668][ T5793] geneve2: left promiscuous mode [ 852.611721][ T5793] geneve2: left allmulticast mode [ 852.682867][T30437] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 852.693698][T30437] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.746764][T30437] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 852.781152][T30437] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 852.791038][T30437] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.800247][T30437] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 852.820627][ T5540] hsr_slave_0: entered promiscuous mode [ 852.827669][ T5540] hsr_slave_1: entered promiscuous mode [ 852.834091][ T5540] debugfs: 'hsr0' already exists in 'hsr' [ 852.840270][ T5540] Cannot create hsr debugfs directory [ 852.846772][T30437] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 852.856861][ T5813] netlink: 64 bytes leftover after parsing attributes in process `syz.5.8778'. [ 852.856861][ T5816] netlink: 64 bytes leftover after parsing attributes in process `syz.5.8778'. [ 852.866086][T30437] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.884230][T30437] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 852.893315][T30437] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 852.902953][T30437] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.920107][T30437] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 852.980104][ T50] Bluetooth: hci1: command tx timeout [ 853.070060][T30421] IPVS: stop unused estimator thread 0... [ 853.136292][T29446] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 853.783704][ T5757] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 853.887555][ T5540] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 853.912344][ T5824] netlink: 'syz.1.8779': attribute type 1 has an invalid length. [ 853.936330][ T5540] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 853.987294][ T5540] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 854.023626][ T5832] netlink: 64 bytes leftover after parsing attributes in process `syz.5.8782'. [ 854.037435][ T5540] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 854.161956][ T5832] team0 (unregistering): left allmulticast mode [ 854.186579][ T5832] team_slave_0: left allmulticast mode [ 854.205092][ T5832] team_slave_1: left allmulticast mode [ 854.216461][ T5832] team0 (unregistering): left promiscuous mode [ 854.223146][ T5832] team_slave_0: left promiscuous mode [ 854.229287][ T5832] team_slave_1: left promiscuous mode [ 854.237145][ T5832] bridge0: port 3(team0) entered disabled state [ 854.252007][ T5832] team0 (unregistering): Port device team_slave_0 removed [ 854.264080][ T5832] team0 (unregistering): Port device team_slave_1 removed [ 854.278770][ T5832] team0 (unregistering): Port device bridge3 removed [ 854.360156][ T5852] vlan1 (unregistering): left allmulticast mode [ 854.368927][ T5852] veth0_vlan (unregistering): left allmulticast mode [ 854.609584][ T5540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.684516][ T5540] 8021q: adding VLAN 0 to HW filter on device team0 [ 854.708874][T30435] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.716050][T30435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 854.766606][T30445] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.773728][T30445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 854.878842][ T5900] netlink: 'syz.4.8792': attribute type 24 has an invalid length. [ 854.891893][ T5901] netlink: 'syz.4.8792': attribute type 24 has an invalid length. [ 855.012572][ T5907] pimreg: entered allmulticast mode [ 855.034489][ T5907] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8794'. [ 855.056050][T29446] Bluetooth: hci1: command tx timeout [ 855.071495][ T5909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8795'. [ 855.083680][ T5907] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8794'. [ 855.100343][ T5913] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8796'. [ 855.110793][ T5913] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8796'. [ 855.135544][ T5913] netlink: 31 bytes leftover after parsing attributes in process `syz.5.8796'. [ 855.154851][ T5913] netlink: 'syz.5.8796': attribute type 3 has an invalid length. [ 855.175787][ T5913] netlink: 'syz.5.8796': attribute type 2 has an invalid length. [ 855.410053][ T5540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 855.516985][ T5943] netlink: 'syz.4.8799': attribute type 1 has an invalid length. [ 855.678428][ T5540] veth0_vlan: entered promiscuous mode [ 855.690832][ T5540] veth1_vlan: entered promiscuous mode [ 855.740438][ T5540] veth0_macvtap: entered promiscuous mode [ 855.767182][ T5540] veth1_macvtap: entered promiscuous mode [ 855.844182][ T5540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 855.882798][ T5540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 855.924727][ T5966] dvmrp8: entered allmulticast mode [ 856.027925][T30411] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.046111][T30411] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.091651][T30411] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.150858][T30411] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.383042][ T5990] netlink: 'syz.1.8814': attribute type 21 has an invalid length. [ 856.384536][ T5989] __nla_validate_parse: 5 callbacks suppressed [ 856.384552][ T5989] netlink: 1204 bytes leftover after parsing attributes in process `syz.6.8813'. [ 856.392058][ T5990] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8814'. [ 856.421735][ T5989] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8813'. [ 856.458604][T30418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.480642][T30418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.490174][ T5990] netlink: 'syz.1.8814': attribute type 5 has an invalid length. [ 856.514208][ T5990] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8814'. [ 856.635382][T30418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.643221][T30418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.974966][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5380 ms [ 856.983017][ C0] lec:lec_tx_timeout: lec0 [ 857.011265][ T6027] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8822'. [ 857.121225][ T6039] 8021q: VLANs not supported on wg2 [ 857.379005][ T6045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8827'. [ 857.413735][ T6045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8827'. [ 857.456070][ T6045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8827'. [ 857.496941][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8830'. [ 857.550626][ T6062] netlink: 'syz.5.8831': attribute type 1 has an invalid length. [ 857.575192][ T6062] netlink: 224 bytes leftover after parsing attributes in process `syz.5.8831'. [ 857.691489][ T6062] bond10: Removing last arp target with arp_interval on [ 857.877557][ T6082] netlink: 'syz.1.8836': attribute type 1 has an invalid length. [ 857.976194][ T6082] 8021q: adding VLAN 0 to HW filter on device bond9 [ 858.219071][ T6082] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 858.365372][ T6082] 8021q: adding VLAN 0 to HW filter on device bond10 [ 858.394391][ T6082] bond9: (slave bond10): Enslaving as an active interface with a down link [ 858.553578][ T6126] syzkaller0: entered promiscuous mode [ 858.570808][ T6126] syzkaller0: entered allmulticast mode [ 858.586237][ T6128] netlink: 'syz.5.8846': attribute type 1 has an invalid length. [ 858.635993][ T6128] netlink: 'syz.5.8846': attribute type 1 has an invalid length. [ 858.924737][ T6147] ip6_vti0 speed is unknown, defaulting to 1000 [ 859.033439][ T6139] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 859.041192][ T6139] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 859.048898][ T6139] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 859.056588][ T6139] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 859.064247][ T6139] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 859.071936][ T6139] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 859.079636][ T6139] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 859.087323][ T6139] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 859.087746][ T6163] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 859.095003][ T6139] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 859.095044][ T6139] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 859.211923][ T6166] 8021q: adding VLAN 0 to HW filter on device bond11 [ 859.260917][ T6170] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 859.377341][T29446] Bluetooth: hci1: command 0x0c1a tx timeout [ 859.379834][ T6046] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 859.399315][ T6046] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 859.962592][ T6209] bond2: option mode: invalid value (133) [ 860.015821][ T6209] bond2 (unregistering): Released all slaves [ 860.280057][ T6229] pim6reg1: entered promiscuous mode [ 860.295098][ T6229] pim6reg1: entered allmulticast mode [ 860.899530][ T6278] netlink: 'syz.4.8887': attribute type 1 has an invalid length. [ 860.931381][ T6278] netlink: 'syz.4.8887': attribute type 3 has an invalid length. [ 861.392876][ T6305] IPVS: length: 24 != 122880984 [ 861.409884][ T6305] batadv1: entered allmulticast mode [ 861.583714][ T6313] __nla_validate_parse: 18 callbacks suppressed [ 861.583735][ T6313] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.8898'. [ 861.912891][ T6334] syzkaller0: entered promiscuous mode [ 861.940731][ T6334] syzkaller0: entered allmulticast mode [ 861.979774][ T6334] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 862.072093][ T6346] IPVS: set_ctl: invalid protocol: 60 172.20.20.34:20000 [ 862.080991][ T6346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8909'. [ 862.101020][ T6346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8909'. [ 862.331780][ T6360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8913'. [ 862.342802][ T6359] netlink: 'syz.5.8912': attribute type 17 has an invalid length. [ 862.375313][ T6359] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8912'. [ 862.405875][ T6359] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8912'. [ 862.467383][ T6359] gretap0: entered promiscuous mode [ 862.549328][ T6359] gretap0: left promiscuous mode [ 862.562285][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 862.571489][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 862.581257][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 862.591202][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 862.603587][ T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 862.635294][ T6373] netlink: 'syz.6.8917': attribute type 1 has an invalid length. [ 862.643035][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8917'. [ 862.659426][T29446] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 862.669889][T29446] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 862.683725][T29446] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 862.683815][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8917'. [ 862.715767][T29446] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 862.724062][T29446] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 862.796882][ T6373] netlink: 'syz.6.8917': attribute type 2 has an invalid length. [ 862.804637][ T6373] netlink: 'syz.6.8917': attribute type 2 has an invalid length. [ 862.847446][ T6373] netlink: 'syz.6.8917': attribute type 2 has an invalid length. [ 862.875150][ T6375] netlink: 'syz.6.8917': attribute type 1 has an invalid length. [ 862.892261][ T6375] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8917'. [ 862.918840][ T6369] ip6_vti0 speed is unknown, defaulting to 1000 [ 862.926311][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8917'. [ 862.975557][ T6375] netlink: 'syz.6.8917': attribute type 2 has an invalid length. [ 862.991116][ T6375] netlink: 'syz.6.8917': attribute type 2 has an invalid length. [ 863.015123][ T6375] netlink: 'syz.6.8917': attribute type 2 has an invalid length. [ 863.090272][ T6389] 0·: renamed from hsr_slave_1 (while UP) [ 863.108576][ T6389] 0·: entered allmulticast mode [ 863.258777][ T6397] netlink: 'syz.5.8928': attribute type 39 has an invalid length. [ 863.684613][ T6411] bond12: option coupled_control: invalid value (128) [ 863.696588][ T6411] bond12 (unregistering): Released all slaves [ 863.892594][ T6369] chnl_net:caif_netlink_parms(): no params data found [ 864.002943][ T6436] geneve3: entered promiscuous mode [ 864.034293][ T6436] geneve3: entered allmulticast mode [ 864.041877][T30421] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.052387][T30421] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.107073][T30421] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.121361][T30421] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.239345][ T6369] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.247050][ T6369] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.254298][ T6369] bridge_slave_0: entered allmulticast mode [ 864.262481][ T6369] bridge_slave_0: entered promiscuous mode [ 864.272655][ T6369] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.280368][ T6369] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.287916][ T6369] bridge_slave_1: entered allmulticast mode [ 864.296490][ T6369] bridge_slave_1: entered promiscuous mode [ 864.364801][ T6369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 864.391829][ T6369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 864.411171][ T6458] 8021q: VLANs not supported on wg0 [ 864.452897][ T6459] 8021q: VLANs not supported on wg0 [ 864.464785][ T6464] net_ratelimit: 3261 callbacks suppressed [ 864.464800][ T6464] sock: sock_set_timeout: `syz.1.8946' (pid 6464) tries to set negative timeout [ 864.482202][ T6369] team0: Port device team_slave_0 added [ 864.498587][ T6369] team0: Port device team_slave_1 added [ 864.526108][ T6467] openvswitch: netlink: Message has 8 unknown bytes. [ 864.532818][ T6467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 864.616502][ T6369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 864.623477][ T6369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 864.708696][ T6369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 864.747575][ T6369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 864.754533][ T6369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 864.813989][ T6369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 864.824646][ T50] Bluetooth: hci7: command tx timeout [ 864.858481][ T6480] syzkaller0: entered promiscuous mode [ 864.864797][ T6480] syzkaller0: entered allmulticast mode [ 864.881223][ T6487] gretap1: entered promiscuous mode [ 866.411140][ T6497] €Â: renamed from team_slave_1 [ 866.524584][ T6369] hsr_slave_0: entered promiscuous mode [ 866.533868][ T6369] hsr_slave_1: entered promiscuous mode [ 866.541150][ T6369] debugfs: 'hsr0' already exists in 'hsr' [ 866.549171][ T6369] Cannot create hsr debugfs directory [ 866.601610][ T6510] __nla_validate_parse: 17 callbacks suppressed [ 866.601630][ T6510] netlink: 190972 bytes leftover after parsing attributes in process `syz.5.8959'. [ 866.628489][ T6518] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8963'. [ 866.702439][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8965'. [ 866.895148][ T50] Bluetooth: hci7: command tx timeout [ 866.946311][ T6544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8970'. [ 866.967141][ T6546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8970'. [ 867.017331][ T6369] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 867.044967][ T6369] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.127357][ T6552] ip6gre2: entered allmulticast mode [ 867.183484][ T6369] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 867.206115][ T6369] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.243848][ T6566] tipc: MTU too low for tipc bearer [ 867.264084][ T6566] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8977'. [ 867.342924][ T6369] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 867.367370][ T6561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8974'. [ 867.383096][ T6369] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.503233][ T6369] bond0: (slave netdevsim0): Releasing backup interface [ 867.515552][ T6369] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 867.525976][ T6369] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.550637][ T6579] ip6_vti0 speed is unknown, defaulting to 1000 [ 867.550656][ T6581] wg0: entered promiscuous mode [ 867.779513][ T6599] pim6reg: entered allmulticast mode [ 867.799331][ T6599] pim6reg: left allmulticast mode [ 867.889452][ T6600] IPv6: sit1: Disabled Multicast RS [ 868.010996][ T6369] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 868.044461][ T6608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8988'. [ 868.058061][ T6608] netlink: 50 bytes leftover after parsing attributes in process `syz.2.8988'. [ 868.070914][ T6608] netlink: 50 bytes leftover after parsing attributes in process `syz.2.8988'. [ 868.084404][ T6369] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 868.097542][ T6369] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 868.119823][ T6369] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 868.149194][ T6617] sch_fq: defrate 0 ignored. [ 868.270576][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.279123][T30411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.288959][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.883220][ T6633] ip6_vti0 speed is unknown, defaulting to 1000 [ 868.975389][ T50] Bluetooth: hci7: command tx timeout [ 869.535285][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.183042][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 870.921550][ T6606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 871.055934][ T50] Bluetooth: hci7: command tx timeout [ 871.084452][ T6648] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 871.143863][ T6369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 871.167883][ T6369] 8021q: adding VLAN 0 to HW filter on device team0 [ 871.190666][T30445] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.197832][T30445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 871.234770][T30418] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.241957][T30418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 871.253370][ T6656] validate_nla: 5 callbacks suppressed [ 871.253386][ T6656] netlink: 'syz.2.8999': attribute type 9 has an invalid length. [ 871.366294][ T6369] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 871.751066][ T6369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 871.850370][ T6691] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 872.036091][ T6706] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 872.070324][ T6706] __nla_validate_parse: 2 callbacks suppressed [ 872.070341][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9013'. [ 872.113689][ T6713] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9015'. [ 872.138574][ T6706] hsr_slave_0: left promiscuous mode [ 872.144811][ T6706] hsr_slave_1: left promiscuous mode [ 872.166982][ T6713] netlink: 'syz.6.9015': attribute type 1 has an invalid length. [ 872.191730][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9013'. [ 872.252185][ T6713] bond3: entered promiscuous mode [ 872.261241][ T6713] bond3: entered allmulticast mode [ 872.267856][ T6713] 8021q: adding VLAN 0 to HW filter on device bond3 [ 872.290854][ T6720] erspan2: entered allmulticast mode [ 872.300448][ T6720] bond3: (slave erspan2): making interface the new active one [ 872.309196][ T6720] erspan2: entered promiscuous mode [ 872.318204][ T6720] bond3: (slave erspan2): Enslaving as an active interface with an up link [ 872.371154][ T6369] veth0_vlan: entered promiscuous mode [ 872.431989][ T6728] syz_tun: entered allmulticast mode [ 872.450303][ T6369] veth1_vlan: entered promiscuous mode [ 872.500063][ T6728] dvmrp8: entered allmulticast mode [ 872.518793][ T6737] pimreg: left allmulticast mode [ 872.524249][ T6737] dvmrp8: left allmulticast mode [ 872.611577][ T6369] veth0_macvtap: entered promiscuous mode [ 872.628222][ T6369] veth1_macvtap: entered promiscuous mode [ 872.644458][ T6743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9023'. [ 872.661674][ T6369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 872.680180][ T6743] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9023'. [ 872.688158][ T6369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 872.695100][ T6743] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9023'. [ 872.717135][T30434] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.728115][T30434] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.752088][T30434] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.790246][T30434] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.880810][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9027'. [ 872.911572][ T6754] hsr_slave_0: left promiscuous mode [ 872.924773][ T6754] hsr_slave_1: left promiscuous mode [ 872.994607][T30418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.015944][T30418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.082519][T30421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.091781][T30421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.119914][ T6765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9030'. [ 873.210470][ T6726] syz_tun: left allmulticast mode [ 873.256865][ T6768] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9031'. [ 873.267933][ T6771] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9032'. [ 873.369359][ T6771] veth5: entered promiscuous mode [ 873.612061][T29446] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 873.632130][T29446] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 873.642217][T29446] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 873.652221][T29446] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 873.661916][T29446] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 873.876683][ T6786] ip6_vti0 speed is unknown, defaulting to 1000 [ 873.924328][T30418] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 873.998576][ T6794] syzkaller0: entered promiscuous mode [ 874.011723][ T6794] syzkaller0: entered allmulticast mode [ 874.017204][T30411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.026715][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.035394][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.043899][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.079737][T30418] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 874.228885][T30418] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 874.490436][ T6815] Cannot find add_set index 0 as target [ 874.561796][T30418] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 874.673389][ T6824] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 874.784424][ T6821] syzkaller0: entered promiscuous mode [ 874.799623][ T6821] syzkaller0: entered allmulticast mode [ 875.012629][ T6842] nbd: must specify a size in bytes for the device [ 875.168579][T30418] bridge_slave_1: left allmulticast mode [ 875.180710][T30418] bridge_slave_1: left promiscuous mode [ 875.202833][T30418] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.219849][T30418] bridge_slave_0: left allmulticast mode [ 875.227128][T30418] bridge_slave_0: left promiscuous mode [ 875.232965][T30418] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.471560][T30418] dvmrp8 (unregistering): left allmulticast mode [ 875.587157][T30418] bond1 (unregistering): (slave bridge2): Releasing active interface [ 875.605035][T30418] bridge2 (unregistering): left promiscuous mode [ 875.611398][T30418] bridge2 (unregistering): left allmulticast mode [ 875.695046][T29446] Bluetooth: hci2: command tx timeout [ 875.879018][T30418] bond4 (unregistering): (slave bridge8): Releasing backup interface [ 875.887365][T30418] bond4 (unregistering): (slave bridge8): the permanent HWaddr of slave - 22:1f:e6:09:1f:83 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 875.935229][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 875.943269][ C0] lec:lec_tx_timeout: lec0 [ 875.958661][T30418] bond4 (unregistering): (slave bridge9): Releasing backup interface [ 876.129039][T30418] bond6 (unregistering): (slave bridge13): Releasing backup interface [ 876.137420][T30418] bridge13 (unregistering): left promiscuous mode [ 876.320367][T30418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 876.330277][T30418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 876.341308][T30418] bond0 (unregistering): Released all slaves [ 876.354290][T30418] bond1 (unregistering): Released all slaves [ 876.369395][T30418] bond2 (unregistering): Released all slaves [ 876.382024][T30418] bond3 (unregistering): Released all slaves [ 876.394247][T30418] bond4 (unregistering): Released all slaves [ 876.407637][T30418] bond5 (unregistering): Released all slaves [ 876.438560][T30418] bond6 (unregistering): Released all slaves [ 876.451693][T30418] bond7 (unregistering): Released all slaves [ 876.467692][T30418] bond8 (unregistering): Released all slaves [ 876.481276][T30418] bond9 (unregistering): (slave veth0_to_bond): Releasing active interface [ 876.492144][T30418] bond9 (unregistering): (slave bond10): Releasing active interface [ 876.510052][T30418] bond9 (unregistering): Released all slaves [ 876.523867][T30418] bond10 (unregistering): Released all slaves [ 877.785032][T29446] Bluetooth: hci2: command tx timeout [ 877.856540][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.156032][T30418] tipc: Left network mode [ 878.276390][ T6786] chnl_net:caif_netlink_parms(): no params data found [ 878.308509][ T6878] __nla_validate_parse: 5 callbacks suppressed [ 878.308528][ T6878] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9058'. [ 878.603556][ T6880] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 878.624359][ T6894] netlink: 96 bytes leftover after parsing attributes in process `syz.6.9063'. [ 878.677812][ T6897] netlink: 'syz.6.9063': attribute type 1 has an invalid length. [ 878.915114][ T6786] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.931822][ T6913] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9068'. [ 878.943710][ T5803] IPVS: starting estimator thread 0... [ 878.964775][ T6786] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.976907][ T6786] bridge_slave_0: entered allmulticast mode [ 878.996493][ T6786] bridge_slave_0: entered promiscuous mode [ 879.055209][ T6919] IPVS: using max 30 ests per chain, 72000 per kthread [ 879.117335][ T6786] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.139603][ T6786] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.151013][ T6786] bridge_slave_1: entered allmulticast mode [ 879.160633][ T6786] bridge_slave_1: entered promiscuous mode [ 879.169661][ T6922] netlink: 'syz.4.9069': attribute type 33 has an invalid length. [ 879.272218][ T6786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 879.649658][ T6786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 879.776907][T30445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.785397][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.825711][ T6975] netlink: 'syz.4.9080': attribute type 15 has an invalid length. [ 879.852255][ T6975] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9080'. [ 879.866288][T29446] Bluetooth: hci2: command tx timeout [ 879.895518][ T6974] sctp: [Deprecated]: syz.6.9081 (pid 6974) Use of int in maxseg socket option. [ 879.895518][ T6974] Use struct sctp_assoc_value instead [ 879.930287][ T6786] team0: Port device team_slave_0 added [ 879.969468][ T6786] team0: Port device team_slave_1 added [ 880.110068][ T6985] syz_tun: entered allmulticast mode [ 880.142218][ T6786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 880.190925][ T6786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 880.264952][ T6786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 880.298247][ T6985] syz_tun: left allmulticast mode [ 880.362046][ T6999] xt_CT: No such helper "pptp" [ 880.390382][ T7006] --map-set only usable from mangle table [ 881.075066][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.080102][ T7046] netlink: 92 bytes leftover after parsing attributes in process `syz.4.9094'. [ 881.083366][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.127206][ T7049] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9095'. [ 881.139407][ T7048] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9095'. [ 881.182537][T30418] team0 (unregistering): Port device team_slave_1 removed [ 881.217281][T30418] team0 (unregistering): Port device team_slave_0 removed [ 881.331613][ T6786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 881.339326][ T6786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.366587][ T6786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 881.419432][ T7048] geneve4: entered promiscuous mode [ 881.579107][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9097'. [ 881.607983][ T7058] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9097'. [ 881.629485][ T7054] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.637166][ T7054] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.673305][T29446] block nbd5: Receive control failed (result -107) [ 881.698992][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.718399][ T7064] nbd5: detected capacity change from 0 to 127 [ 881.734377][T31963] block nbd5: Dead connection, failed to find a fallback [ 881.744021][T31963] block nbd5: shutting down sockets [ 881.752733][T31963] blk_print_req_error: 138 callbacks suppressed [ 881.752747][T31963] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 881.770417][T31963] buffer_io_error: 138 callbacks suppressed [ 881.770432][T31963] Buffer I/O error on dev nbd5, logical block 0, async page read [ 881.778105][ T7054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 881.796462][T31963] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 881.801488][ T7054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 881.806902][T31963] Buffer I/O error on dev nbd5, logical block 1, async page read [ 881.821836][T31963] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 881.833201][T31963] Buffer I/O error on dev nbd5, logical block 2, async page read [ 881.841719][T31963] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 881.852060][T31963] Buffer I/O error on dev nbd5, logical block 3, async page read [ 881.863818][T31963] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 881.874685][T31963] Buffer I/O error on dev nbd5, logical block 0, async page read [ 881.883483][T31963] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 881.893348][T31963] Buffer I/O error on dev nbd5, logical block 1, async page read [ 881.901540][T31963] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 881.911436][T31963] Buffer I/O error on dev nbd5, logical block 2, async page read [ 881.919560][T31963] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 881.929682][T31963] Buffer I/O error on dev nbd5, logical block 3, async page read [ 881.940243][T31963] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 881.946096][T29446] Bluetooth: hci2: command tx timeout [ 881.950780][T31963] Buffer I/O error on dev nbd5, logical block 0, async page read [ 881.963477][T31963] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 881.974484][T31963] Buffer I/O error on dev nbd5, logical block 1, async page read [ 881.983277][T31963] ldm_validate_partition_table(): Disk read failed. [ 881.990624][T31963] Dev nbd5: unable to read RDB block 0 [ 881.996784][T31963] nbd5: unable to read partition table [ 882.010843][T31963] ldm_validate_partition_table(): Disk read failed. [ 882.018363][T31963] Dev nbd5: unable to read RDB block 0 [ 882.024361][T31963] nbd5: unable to read partition table [ 882.037952][T30413] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 882.089708][ T7058] geneve2: entered promiscuous mode [ 882.096762][ T7058] geneve2: entered allmulticast mode [ 882.104157][ T7062] syzkaller1: entered promiscuous mode [ 882.115037][ T7062] syzkaller1: entered allmulticast mode [ 882.124118][T30413] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 882.154077][T30413] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 882.201031][T30413] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 882.210236][ T7073] netlink: 'syz.2.9100': attribute type 9 has an invalid length. [ 882.293020][ T7079] netlink: 9 bytes leftover after parsing attributes in process `syz.5.9102'. [ 882.367652][ T6786] hsr_slave_0: entered promiscuous mode [ 882.393453][ T6786] hsr_slave_1: entered promiscuous mode [ 882.403546][ T6786] debugfs: 'hsr0' already exists in 'hsr' [ 882.409830][ T6786] Cannot create hsr debugfs directory [ 882.418216][ T7079] 0·: renamed from hsr_slave_1 (while UP) [ 882.434678][ T7079] 0·: entered allmulticast mode [ 882.476751][ T7079] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 882.841477][ T7112] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 882.951266][ T7120] netlink: 'syz.4.9108': attribute type 1 has an invalid length. [ 883.010319][ T7119] xt_ipcomp: unknown flags 1D [ 883.036844][T30455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 883.053028][T30455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 883.085559][ T7121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 883.543146][ T7149] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 883.616461][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.677913][ T6786] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 883.751867][ T6786] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 883.811406][ T6786] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 883.858260][ T6786] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 884.116663][T30418] IPVS: stop unused estimator thread 0... [ 884.194101][ T6786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 884.241724][ T6786] 8021q: adding VLAN 0 to HW filter on device team0 [ 884.272367][T30418] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.279556][T30418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 884.311156][ T6822] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.318365][ T6822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 884.505775][ T7213] gre0: entered promiscuous mode [ 884.516360][ T7213] gre0: entered allmulticast mode [ 884.844317][ T7233] __nla_validate_parse: 4 callbacks suppressed [ 884.844334][ T7233] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9132'. [ 884.864404][ T6786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 884.899770][ T7233] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9132'. [ 884.910102][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9132'. [ 884.919540][ T7233] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9132'. [ 885.521366][ T6786] veth0_vlan: entered promiscuous mode [ 885.537253][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.545367][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.557151][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.663363][ T6786] veth1_vlan: entered promiscuous mode [ 885.788527][ T6786] veth0_macvtap: entered promiscuous mode [ 885.817660][ T6786] veth1_macvtap: entered promiscuous mode [ 885.854015][ T6786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 885.890688][ T6786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 885.954611][T30421] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.981831][ T7282] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9144'. [ 885.997977][ T6822] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.108635][ T6822] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.145040][ T6822] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.160345][ T7298] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9148'. [ 886.398150][T30421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 886.437984][T30421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 886.460636][ T7305] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9150'. [ 886.568449][ T7314] dvmrp6: entered allmulticast mode [ 886.592825][ T6822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 886.626337][ T6822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 886.699544][ T7328] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9155'. [ 886.740950][ T7328] syzkaller1: entered promiscuous mode [ 886.756348][ T7328] syzkaller1: entered allmulticast mode [ 886.800021][ T7328] syzkaller1: left promiscuous mode [ 886.813054][ T7332] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9033'. [ 886.816293][ T7328] syzkaller1: left allmulticast mode [ 886.827952][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9033'. [ 887.285444][ T7355] veth0: entered promiscuous mode [ 887.396427][ T7368] netlink: 'syz.1.9166': attribute type 1 has an invalid length. [ 887.459328][ T7370] vlan2: entered promiscuous mode [ 887.464670][ T7370] vlan2: entered allmulticast mode [ 887.540891][ T7377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 887.627925][ T7383] xt_bpf: check failed: parse error [ 887.899549][ T7401] ksmbd: Unknown IPC event: 3, ignore. [ 888.436926][ T7409] veth3: entered allmulticast mode [ 888.479380][ T7421] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 888.703892][ T7433] 8021q: adding VLAN 0 to HW filter on device bond2 [ 888.759796][ T7443] netlink: 'syz.5.9190': attribute type 32 has an invalid length. [ 889.189481][ T7486] vcan0: tx drop: invalid da for name 0x0000000000000015 [ 889.750282][ T7523] openvswitch: netlink: Flow actions attr not present in new flow. [ 890.070140][ T7550] netlink: 'syz.1.9215': attribute type 3 has an invalid length. [ 890.140800][ T7549] ip6_vti0 speed is unknown, defaulting to 1000 [ 890.261688][ T7561] __nla_validate_parse: 9 callbacks suppressed [ 890.261705][ T7561] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9217'. [ 890.421719][ T7568] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9220'. [ 890.646743][ T7577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9222'. [ 890.814615][ T7590] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9224'. [ 890.989144][ T7598] block nbd5: NBD_DISCONNECT [ 890.994503][ T7598] block nbd5: Send disconnect failed -32 [ 891.231650][ T7609] netlink: 13 bytes leftover after parsing attributes in process `syz.5.9230'. [ 891.265822][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9230'. [ 891.766708][ T7634] x_tables: unsorted underflow at hook 1 [ 891.793131][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9240'. [ 891.911912][ T7648] geneve3: entered promiscuous mode [ 891.919034][ T7648] geneve3: entered allmulticast mode [ 892.071550][ T7661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 892.089874][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9250'. [ 892.296457][ T7676] syzkaller1: entered promiscuous mode [ 892.302192][ T7676] syzkaller1: entered allmulticast mode [ 892.393330][ T7686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9258'. [ 892.442495][T30455] nci: nci_rsp_packet: unknown rsp opcode 0x2b [ 892.474785][ T7689] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9259'. [ 893.038487][ T7723] delete_channel: no stack [ 893.107826][ T7731] netlink: 'syz.5.9272': attribute type 16 has an invalid length. [ 893.116041][ T7731] netlink: 'syz.5.9272': attribute type 17 has an invalid length. [ 893.128102][ T7731] tunl0: left promiscuous mode [ 893.145139][ T7731] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.152289][ T7731] bridge0: port 1(bridge_slave_0) entered listening state [ 893.161750][ T7731] 8021q: adding VLAN 0 to HW filter on device ` [ 893.170909][ T7731] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 895.347851][ T7680] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 895.518150][ T7742] netlink: 256 bytes leftover after parsing attributes in process `syz.6.9276'. [ 895.815367][ T7762] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9282'. [ 895.845887][ T7762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9282'. [ 895.999614][ T7777] openvswitch: netlink: EtherType 50a is less than min 600 [ 896.013312][ T7782] openvswitch: netlink: EtherType 50a is less than min 600 [ 896.089801][T30413] nci: nci_rsp_packet: unknown rsp opcode 0x2b [ 896.168853][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9290'. [ 896.179340][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9290'. [ 896.460409][ T7811] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9294'. [ 896.638281][ T7821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9296'. [ 896.649784][ T7821] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9296'. [ 896.660131][ T7821] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9296'. [ 896.752091][ T7824] pim6reg: entered allmulticast mode [ 896.759046][ T7825] pim6reg: left allmulticast mode [ 898.955191][ T7775] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 899.122600][ T7831] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9298'. [ 899.141054][ T7836] netlink: 'syz.2.9300': attribute type 30 has an invalid length. [ 899.141077][ T7831] openvswitch: netlink: Duplicate key (type 32). [ 899.167846][ T7830] netlink: 'syz.6.9299': attribute type 39 has an invalid length. [ 899.316113][ T7836] bond2: option arp_missed_max: invalid value (0) [ 899.352858][ T7836] bond2: option arp_missed_max: allowed values 1 - 255 [ 899.368146][ T7836] bond2 (unregistering): Released all slaves [ 899.725980][ T7889] netlink: 'syz.4.9310': attribute type 13 has an invalid length. [ 899.762064][ T7889] netlink: 'syz.4.9310': attribute type 16 has an invalid length. [ 899.779701][ T7889] netlink: 'syz.4.9310': attribute type 17 has an invalid length. [ 899.837626][ T7889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 899.847964][ T7889] 8021q: adding VLAN 0 to HW filter on device team0 [ 899.861269][ T7889] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 899.886580][ T7901] syzkaller0: entered promiscuous mode [ 899.909328][ T7901] syzkaller0: entered allmulticast mode [ 899.962612][ T7879] lec:lec_atm_close: lec0: Shut down! [ 900.017713][ T7892] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 900.027359][ T7892] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 900.102343][ T7910] openvswitch: netlink: Multiple metadata blocks provided [ 900.171734][ T7914] netlink: 'syz.1.9316': attribute type 1 has an invalid length. [ 900.285221][ T7917] 8021q: adding VLAN 0 to HW filter on device bond3 [ 902.736666][ T7893] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 902.910009][ T7937] x_tables: duplicate underflow at hook 1 [ 902.941217][ T7938] netlink: 'syz.1.9320': attribute type 21 has an invalid length. [ 903.061976][ T7947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 903.158587][ T7949] __nla_validate_parse: 1 callbacks suppressed [ 903.158607][ T7949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9325'. [ 903.197573][ T7949] vxcan2: entered allmulticast mode [ 903.218389][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9327'. [ 903.389646][ T7966] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9329'. [ 903.662293][ T7985] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9335'. [ 903.964138][ T8005] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.9340'. [ 904.159745][ T8007] syzkaller0: entered promiscuous mode [ 904.166085][ T8007] syzkaller0: entered allmulticast mode [ 904.985063][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 904.993112][ C0] lec:lec_tx_timeout: lec0 [ 906.571607][ T7978] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 906.783669][ T8021] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9343'. [ 906.806212][ T8021] bond0: entered promiscuous mode [ 906.811273][ T8021] bridge21: entered promiscuous mode [ 906.825849][ T8025] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 906.835997][ T8021] bond0: left promiscuous mode [ 906.840801][ T8021] bridge21: left promiscuous mode [ 906.887341][ T8029] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9347'. [ 906.896729][ T8015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9345'. [ 906.906828][ T8025] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 906.963189][ T8015] team0 (unregistering): Port device team_slave_0 removed [ 906.996809][ T8015] team0 (unregistering): Port device team_slave_1 removed [ 907.086618][ T8039] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9349'. [ 907.127577][ T8024] bond2 (unregistering): Released all slaves [ 907.173929][ T8041] pimreg: entered allmulticast mode [ 907.196244][ T8041] netlink: 'syz.6.9351': attribute type 26 has an invalid length. [ 907.204111][ T8041] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9351'. [ 907.221975][ T8041] netlink: 'syz.6.9351': attribute type 26 has an invalid length. [ 907.239138][ T8013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 907.318985][ T30] INFO: task syz.3.7331:32687 blocked for more than 143 seconds. [ 907.338656][ T30] Not tainted syzkaller #0 [ 907.354955][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 907.369517][ T30] task:syz.3.7331 state:D stack:26120 pid:32687 tgid:32686 ppid:28006 task_flags:0x400140 flags:0x00080002 [ 907.382381][ T30] Call Trace: [ 907.385953][ T30] [ 907.388948][ T30] __schedule+0x1585/0x5340 [ 907.393670][ T30] ? __pfx___schedule+0x10/0x10 [ 907.400743][ T30] ? schedule+0x90/0x360 [ 907.405372][ T30] schedule+0x164/0x360 [ 907.409631][ T30] schedule_preempt_disabled+0x13/0x30 [ 907.417845][ T30] __mutex_lock+0x7fe/0x1300 [ 907.422451][ T30] ? __mutex_lock+0x5ac/0x1300 [ 907.428575][ T30] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 907.434406][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 907.439568][ T30] ? __nlmsg_put+0xef/0x1b0 [ 907.444209][ T30] ? genlmsg_put+0x137/0x2e0 [ 907.448869][ T30] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 907.454587][ T30] ? dev_hard_start_xmit+0x802/0x870 [ 907.460442][ T30] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 907.467063][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 907.472688][ T30] ? __asan_memcpy+0x40/0x70 [ 907.478050][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 907.484200][ T30] ? __dev_queue_xmit+0x274/0x38a0 [ 907.490150][ T30] genl_rcv_msg+0x61c/0x7a0 [ 907.494656][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 907.499753][ T30] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 907.506063][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 907.511020][ T30] netlink_rcv_skb+0x232/0x4b0 [ 907.516599][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 907.521621][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 907.527041][ T30] ? down_read+0x272/0x2e0 [ 907.531461][ T30] ? genl_rcv+0xd/0x40 [ 907.535666][ T30] genl_rcv+0x28/0x40 [ 907.539721][ T30] netlink_unicast+0x80f/0x9b0 [ 907.544500][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 907.550581][ T30] ? netlink_sendmsg+0x650/0xb40 [ 907.555621][ T30] ? skb_put+0x11b/0x210 [ 907.559883][ T30] netlink_sendmsg+0x813/0xb40 [ 907.564667][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 907.570019][ T30] ? trace_sched_set_need_resched_tp+0x3e/0x160 [ 907.576965][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 907.582074][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 907.587436][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 907.593620][ T30] ____sys_sendmsg+0xa68/0xad0 [ 907.600027][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 907.606039][ T30] ? import_iovec+0x73/0xa0 [ 907.610657][ T30] ___sys_sendmsg+0x2a5/0x360 [ 907.616220][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 907.621465][ T30] ? futex_wake+0x4ac/0x580 [ 907.626123][ T30] ? __fget_files+0x2a/0x420 [ 907.630863][ T30] ? __fget_files+0x3a0/0x420 [ 907.635977][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 907.641032][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 907.646779][ T30] ? rcu_is_watching+0x15/0xb0 [ 907.651624][ T30] do_syscall_64+0x14d/0xf80 [ 907.656508][ T30] ? trace_irq_disable+0x3b/0x150 [ 907.661544][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.668002][ T30] ? clear_bhb_loop+0x40/0x90 [ 907.672693][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.678712][ T30] RIP: 0033:0x7fe25019c629 [ 907.683387][ T30] RSP: 002b:00007fe25112a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 907.692122][ T30] RAX: ffffffffffffffda RBX: 00007fe250415fa0 RCX: 00007fe25019c629 [ 907.700646][ T30] RDX: 0000000020048000 RSI: 0000200000000000 RDI: 0000000000000004 [ 907.708893][ T30] RBP: 00007fe250232b39 R08: 0000000000000000 R09: 0000000000000000 [ 907.717162][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 907.725573][ T30] R13: 00007fe250416038 R14: 00007fe250415fa0 R15: 00007ffd1943b5d8 [ 907.733654][ T30] [ 907.737509][ T30] [ 907.737509][ T30] Showing all locks held in the system: [ 907.749111][ T30] 1 lock held by khungtaskd/30: [ 907.754193][ T30] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 907.767633][ T30] 2 locks held by getty/5576: [ 907.772419][ T30] #0: ffff888036afa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 907.787600][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 907.798179][ T30] 2 locks held by syz.0.6287/28893: [ 907.803367][ T30] #0: ffffffff8fc39470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 907.811617][ T30] #1: ffffffff8ea86928 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2c4/0xa30 [ 907.822401][ T30] 4 locks held by kworker/u8:32/30442: [ 907.828419][ T30] #0: ffff8880b873ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 907.838475][ T30] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 907.848013][ T30] #2: ffff88804075e250 (&devlink->lock_key#18){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb80 [ 907.859626][ T30] #3: ffffffff9a464780 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 907.870007][ T30] 5 locks held by kworker/u8:37/30455: [ 907.876168][ T30] #0: ffff8880b873ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 907.886839][ T30] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 907.896312][ T30] #2: ffff8880b8726118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 907.905695][ T30] #3: ffffffff9a487898 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 907.916377][ T30] #4: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x23c0 [ 907.926159][ T30] 2 locks held by syz.3.7331/32687: [ 907.931349][ T30] #0: ffffffff8fc39470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 907.941257][ T30] #1: ffffffff8ea86928 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 907.951874][ T30] 1 lock held by syz.5.9353/8055: [ 907.956928][ T30] #0: ffffffff8e766440 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 907.967228][ T30] 4 locks held by syz.4.9354/8053: [ 907.972331][ T30] #0: ffffffff8fc39470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 907.980936][ T30] #1: ffffffff8fc39288 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 907.990184][ T30] #2: ffff88802852d100 (&dev->mutex){....}-{4:4}, at: nfc_dev_up+0x3f/0x350 [ 907.999557][ T30] #3: ffff888028908350 (&ndev->req_lock){+.+.}-{4:4}, at: nci_dev_up+0xa3/0xdd0 [ 908.009195][ T30] [ 908.011523][ T30] ============================================= [ 908.011523][ T30] [ 908.020097][ T30] NMI backtrace for cpu 0 [ 908.020112][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 908.020131][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 908.020142][ T30] Call Trace: [ 908.020150][ T30] [ 908.020158][ T30] dump_stack_lvl+0xe8/0x150 [ 908.020186][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 908.020208][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 908.020233][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 908.020264][ T30] sys_info+0x135/0x170 [ 908.020281][ T30] watchdog+0xfd9/0x1030 [ 908.020311][ T30] ? watchdog+0x21a/0x1030 [ 908.020342][ T30] kthread+0x388/0x470 [ 908.020359][ T30] ? __pfx_watchdog+0x10/0x10 [ 908.020381][ T30] ? __pfx_kthread+0x10/0x10 [ 908.020399][ T30] ret_from_fork+0x51e/0xb90 [ 908.020423][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 908.020444][ T30] ? __switch_to+0xc7d/0x1450 [ 908.020467][ T30] ? __pfx_kthread+0x10/0x10 [ 908.020484][ T30] ret_from_fork_asm+0x1a/0x30 [ 908.020522][ T30] [ 908.020529][ T30] Sending NMI from CPU 0 to CPUs 1: [ 908.133460][ C1] NMI backtrace for cpu 1 [ 908.133475][ C1] CPU: 1 UID: 0 PID: 5805 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 908.133497][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 908.133507][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 908.133534][ C1] Code: 8b 3d 44 13 55 0c 48 89 de 5b e9 33 79 5e 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d 68 13 56 11 65 8b 15 89 13 56 11 81 e2 00 01 ff 00 74 [ 908.133546][ C1] RSP: 0018:ffffc900039179f8 EFLAGS: 00000202 [ 908.133560][ C1] RAX: ffffffff84699183 RBX: ffff888034eade10 RCX: 0000000000000000 [ 908.133571][ C1] RDX: ffff888032d23c80 RSI: 0000000000000001 RDI: 0000000000000000 [ 908.133581][ C1] RBP: ffffc90003917be0 R08: ffffffff8469908d R09: ffffffff8e7602e0 [ 908.133592][ C1] R10: dffffc0000000000 R11: ffffed100f6b1b49 R12: dffffc0000000000 [ 908.133603][ C1] R13: ffffffff8469908d R14: 0000000000000001 R15: ffff88801ba898f8 [ 908.133613][ C1] FS: 0000555558adb500(0000) GS:ffff888125566000(0000) knlGS:0000000000000000 [ 908.133626][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 908.133637][ C1] CR2: 00007f7217fe82f8 CR3: 0000000035300000 CR4: 00000000003526f0 [ 908.133650][ C1] Call Trace: [ 908.133657][ C1] [ 908.133662][ C1] aa_file_perm+0x223/0x1630 [ 908.133693][ C1] ? __pfx_aa_file_perm+0x10/0x10 [ 908.133717][ C1] ? schedule+0x90/0x360 [ 908.133740][ C1] apparmor_file_permission+0x173/0x1f0 [ 908.133764][ C1] security_file_permission+0x8d/0x260 [ 908.133786][ C1] rw_verify_area+0xbb/0x4d0 [ 908.133804][ C1] vfs_read+0x160/0xa70 [ 908.133816][ C1] ? debug_object_free+0x2d7/0x490 [ 908.133836][ C1] ? __pfx_vfs_read+0x10/0x10 [ 908.133850][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 908.133871][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 908.133893][ C1] ? __pfx_get_timespec64+0x10/0x10 [ 908.133911][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 908.133933][ C1] ksys_read+0x150/0x270 [ 908.133949][ C1] ? __pfx_ksys_read+0x10/0x10 [ 908.133969][ C1] do_syscall_64+0x14d/0xf80 [ 908.133990][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.134005][ C1] ? clear_bhb_loop+0x40/0x90 [ 908.134022][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.134037][ C1] RIP: 0033:0x7f5ffeb57817 [ 908.134050][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 908.134062][ C1] RSP: 002b:00007ffdc592b9d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 908.134076][ C1] RAX: ffffffffffffffda RBX: 0000555558adb500 RCX: 00007f5ffeb57817 [ 908.134087][ C1] RDX: 0000000000000004 RSI: 00007ffdc592ba2c RDI: 0000000000000003 [ 908.134096][ C1] RBP: 00007ffdc592bed0 R08: 0000000000000000 R09: 0000000000000000 [ 908.134105][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004 [ 908.134115][ C1] R13: 00007ffdc592ba2c R14: 00007ffdc592bac0 R15: 0000000000000000 [ 908.134135][ C1] [ 908.439117][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 908.445988][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 908.455074][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 908.465107][ T30] Call Trace: [ 908.468365][ T30] [ 908.471272][ T30] vpanic+0x56c/0xa60 [ 908.475241][ T30] ? __pfx___schedule+0x10/0x10 [ 908.480096][ T30] ? __pfx_vpanic+0x10/0x10 [ 908.484582][ T30] ? __pfx_console_unlock+0x10/0x10 [ 908.489765][ T30] panic+0xc5/0xd0 [ 908.493468][ T30] ? __pfx_panic+0x10/0x10 [ 908.497869][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 908.503226][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 908.509368][ T30] watchdog+0x1023/0x1030 [ 908.513687][ T30] ? watchdog+0x21a/0x1030 [ 908.518084][ T30] kthread+0x388/0x470 [ 908.522128][ T30] ? __pfx_watchdog+0x10/0x10 [ 908.526780][ T30] ? __pfx_kthread+0x10/0x10 [ 908.531348][ T30] ret_from_fork+0x51e/0xb90 [ 908.535924][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 908.541018][ T30] ? __switch_to+0xc7d/0x1450 [ 908.545675][ T30] ? __pfx_kthread+0x10/0x10 [ 908.550255][ T30] ret_from_fork_asm+0x1a/0x30 [ 908.555003][ T30] [ 908.558361][ T30] Kernel Offset: disabled [ 908.562668][ T30] Rebooting in 86400 seconds..