last executing test programs: 2m3.899289054s ago: executing program 2 (id=5208): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0x0) (async) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x20008844) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300) write$tun(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec"], 0xfdef) (async) write$tun(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec"], 0xfdef) 2m3.257617334s ago: executing program 2 (id=5216): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x1}]}}}]}, 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000fc40)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSETELEM={0x7308, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x7280, 0x3, 0x0, 0x1, [{0x1388, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPRESSIONS={0x11f0, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7ff}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x10dc, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x10cc, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x1004, 0x3, "7c3e863d8099b1070e77208f95da2f0e0aab2859def4743e58619e7f7a234570c5f91f2f39039213ccb9cd91933d4cc82f1a629fa89d3bd5ccf4fa5909f7a845c63baa97643a467891fcbdfe7a91a93b5650b74c97fff80fb99b3bb9a0e88bfabc998b8dfdd33d92760b25ebf8b477109197ff28853de37ff961c96e0be51e6d5d48fc5b50f4fd2ae8c9221fbf6e50fe101bff4efc2d5584e34d7303eebf0afb35446b9177e68729217f5d61af8af6f86ba57d445498c132f734313b690f2aa9d9843a2289bd39d099d5309e23ad914c4cf0fcb6e1aa54b982477b267228a86f14e5e0ffea73258d360267a2c1e92cb9c9c1da606c8b4cb91592c27323449a5955806b248423a8495e4fecb3259821b866d3fab5d401a35253f4651434df366e83af7472ff60f5a2ad3abdcd3827aa26b5922f0ec4262498d88d45f023471b17ceafcd20c92b2b2aa6816ba6416025ebca829f18f4cab66344d66a951bb788b6e3e3eb774601b36895a041730e6b829658afe36afcb1c349c89c06a93a324b5f82c71f33528fafee23053eec75c668837d2fe2daafcd83398fdbacabd56f81cfd2149cf7f6f674da377a731dee7d0feedbc6b2758d94d3edb1b638427fbb09fca2dcc5208d0a1b51c2a2c039a84b7fb2061097286e58de618d4128bba4822aa84761e7c667d7487412adef0941da84c593a61e73da6da01024870087af3cb01079e847f3f3380b05e0e2ebe0dff1b7873afeb5c968e97c1d092eca4fd0e5ac6359392cd2385309d367a3bafa13fdbb79a3d452d1d230d7a3f443ffaa5df393a9338d60b12696507fdf659422d67ad0fe7160de6efabd3303e57539c022a51fa22951bf20b1a6d1c5db656600704bc693610c3dc96cba3f0cc9331fbc9753db488f77de1d6e8ec59002952e9ae687fa7a79e467c8d08e647be31d5f48e31e0c2fbe27c74715f64515364dd9273c7eabd81f8a6033f7ee062e75733414057977cb876753af48cb274af9d7a231f7f6cb9a94a1044a5d718a15b38b10cc1ec6b9dcfa026be81c6b83c72ab061e829f5813ac447b0e4f4bc5b2cc286b1dec94cd5b909ff3896596196c19081e9b011a5341cb5f72c9b8bb56a033a121e54ef0a9b900b75213f86a2ba16f33acdedfd6131f85355ef0e7c8c0c8c1be2ca2c22bc6dcf5e84d33d44f7be0ea65be6c19489ad5c6b0eeecc3d72506512a1d8b76671d3267edc846392a3079153d1285e58445d85752306932155f825b940799bdfa7ba4943d57e3c2a615cec47870158e4417991dabf86a24393279e1e478551e1029fc92a470531f4fbb80bfc4fc4a1a80909d6b25e40bb11cc598aeca0e2f5dec5348fbc0b01a634aa569bceb7e7427f8710cf7a6bd14f610c15efe6ff81dd6342554e62b3d457d90c60ad1af1778692874a360cdddd1bb5a0a512a2d75c3757abc4534f603fa6db689793a735a39f5bd83bb17fbb74c52b2d4f4878c8c4686b1ba2d7f97a17baa6a7062ca6fa4bc7a06ebca1a0a39d8f97650348581bf5726f270a79593b1c57e5c5011f390bec0c07a78100767df7adaae508e296a7e295fd449a2645b201e10548783048fd82b8a91df80d2534a6ed4d0ec011c01d21f84404a7b7bea2f53fe62b285fc9743a8d989a205d1d96a7506d0205503047315e4c78ebad1e3a71ac3993120703b3695ccbb200102908b600ee27ff9d80360fe746c7ab3227727ef162e29135ef52a05340a558969bf9d46d6174b720cfee747e955bcfa047588940de269d1784149a67645ebccf33ca7ba5e53e8843cb79395aa59fb7085ed324f212fab5db5f7cfe98b50384e4ddb0943695e1960c06db49a819d3a3c318d36bbd91527848201af9bb5f37b63678fdc5742c31bcb9b8b7c76a8d5a4bb7a40c8bb9fb1b2c2ef8ba031f67f162cec00920101441f2c4a5eae9b559dc618affae14510f41a799637f57f43b3261501d724e8d966f4cb242665272c244ad048247732d8f0724b34b8d0b1f5a76fdfa0caeb172cbf3b7444293a15d4a066a7fe1f1d3ec482b11abac1708c5e8f9d556bb0d07ae1f89f824a8dc6ad0cd9fd97eedae6c48a3f6b8536fa894672ba44d21562d059f475b084b7669ed80fafaee9c6b1936ffcfbe61fea7d04658bf0fedaa5fcdfbccd306c5bb5f0a657c690327e61639fc6fa19e498592901ae264ae7569669e8f36be6b85a27b4272dd5dea9240efdf57c9e1ec7c64c4ed1dc93029a31e2eea22ccc9a6415e48a1f75dfdb58519e94d559e818dded7ab2f3d5af2d79157958128415aa02dce0555f15bca2c44b22effb0fb79abd499f9498a448d948ee14674743f7f5f891f6227e7c20fdd095aca352df5349d9cf2ad8e2df3e07fe54ea720d70b92934f7dcf41ff7b4764ef563629069737cd13f14f2ea0a804cb07e0fdd89e7ed1510da7528eac050a821f1a09bcee0cf797b940222b9413eec6adffb3939cb9566407787191a1d96cd25b0cc44b6deccb70bbd1bfb0f7861b1b570c32126aa301d40f9145d82e92d1abbc0ce5d0793460e50dc86fc966312f691451efcc39eb96a03bcabba27761aa0fe19cdbe590f11850a174f41c96b282b6812d3ac44cb83d980c4b52386bb325ffcaea76b72a01f366bec673e3095cbbb984b9e365f23add0ad0aa51e58ae3f9a9e0ef2bb9733a3c107c8d4b04eda75f4e102262c33645dc0fb8da7443f1a4173157a6b4b1310592f7a8aa3a5ce347fac51482578faa5a26f15754a975f8bb4d2c36895b33d9d326bec24837d260676ca932b06056391ad82991b9dc38e3fa856656078e1229aebf79ea7027a982e7386bd23d8d5849857c434afca7759d57589cca304626c02cc17b1752067cb0fb4f69cd68ba75be38e083b4fd65600e418d859b39fd06ffb3ce1280bba84e9e168ba6017819ec7f99bd590ab6a5d99a34d008e801005b14dce14ff4ab725009a205f73137cae185d84c219b17dee29c91ad7152ec4770c31b779e97b31b99912bc313aa29b77284fd07b8221dd1d85f7260e3a09af2dfd493d8278f633b6cc7ef916e12478ebaef32a6c1b2f7d0bde14b92f18f0001b98c173158747cc8920d21ceba4f8690d77efbabd455f04b31b9e0fc80defecfad2e2be705c80284e7cfeb93de84cb0b84743474538dc89d282e2a93b15b61af1051b2c5adc28b02677d718e13479c7b0351a90d49994d980f6c92c541c59d72ba4d7e221836f78ad5687ed63eea72501d3153c010f8e69305f8f7603ec00391c10cf506f474032b0608130c946698119c84d004dbbad24a5554a899abc10b3408f97630779a2ce13aed88fb7e089b959d156b40e8c7653c132976756104f58337ce504807f25bc7d569b7ac057e85ffb113c4f0862fdc8c4a2c62d6801f8ffa31a6e4e3148191e7370a8edc74358f672bca6b3414f14b05b2cd72fe730bee2c1eab08834736a71466706402131fc9c44e72c9b03ea4c7b53345332198a5c63ebbd97161699ac8d4548e759a8039c263c2e70b35b8b019e80fcac89474ceaf857fbfb044f0e1d9cc8bd08d79a3d3be25e5562dc27e8737cff30b94a2e6b9fb4ead08e4a0b5f3d3a97b566658d9c31d2d1c15746f796de06d8390b5ab0dc846a52af15712825930b9f36d65a193ee215acbdbe51f97ad513c0f008e79639cf5aa3b4a4449ef4ce17ccd3d8c136ce94e637e8d75ba7a7341a17e914624c5ae4ec256c9d7e7583bcee2ed0f78e042c9bf6a4170afd4fd0457bbd616f73d473e7c8bfe64e2d77041d82b2a61b808d8f8397c79ca633eedca266b816cda97c57636eb7c08acba29bf639b0f55d36a2fabd6cfb2f6f82a1e5e1489b0f71ed6540066398869e96747f1c060465f0946cbc25d38c2b8e02a84876ba133c7ee593a1b2ca23855c033c51ceb85affe5c37a7bb5c6975b16572f7e7b196aed6627f08a3d577b1fd888636fa4fc9dc15d94ff26c4ad3cca8b4b8f6a63e05635c52e737d893ca5c48fc7a387cf1c73c6e24942fd9d3ca1a5e65ab9f4af759e81e0016fdf59e32ab7ea192e223afb8b9818ea1c00018f8fce4578de33ce5f0e95f02cdd9095b09b1fcb08ef072fe1609fd68840f38fe6cf3a989e8df3fcfd4dbe56fb7a1465b80773777a34801305dc4e9228ca4e0501810cf69be91438b2d7fd2fb63cae42c4275effbdad81aac60590a67589f610cd301e74994828efc77c586ca346e252e0e9d033fff1c7926e9f368a42455da00184d4d5a7097247e0b8ca93689665bbc8fdea79cf5ab166fa3abc2a3638eca82586da38ad52411229d5322fcd04395e87b157e34ada89efb180613d8759ed16823ea7aadc62bfdb0830f103772f5b9aa05ac3e0a1e53bf7a9393d8f6d320f93b55b2687eb52a5164009204029862de5f5289cba3558c791682297597a3eabb1a8488d9401f1a1af2a3c34e24745bbc4ec601e1840d81b6e5614750b7dc91f637781f266b29fbd0df81a7bfa8754c55dd285d4abc0b4110f8c241408603a6c2a1265b5c570f50993d405e52628628998b8b635519580b73bf586b0be6674c1847abcfeba9764e19bc2bf19f2e2d07ee23629dd8cea2d05071e9873e660dfe2d8f707f4cd73c047435fcffeaa6ec63d166ff7c3024cbb2704fa86d45b10e82a0d7355a42e589c0d282f110865a68d9c5b6fe60195eb39587ad32f2268c2c7b19659a720da8530cbd28ac1025ea2d76050bf08dd4e2f5b8ec5ef6e31856023452f16cbe8d698fa6bf60ae5a823231ee4c9b73ab729b43d115d714feee3caa54be48d504ef3d9b3c3d0fc5588bf5a047c033cb82106077196ae3ceb99d9e16e0a58f1b6eb5997ab3c0bc49bd9937efb424c193c01ca0a4a6ed981cefcc54d74e2020f786c3f55c563869e1e1415783f845f44ca4fcef3a320052f7c1ecf4228640928770bbe2fc94f163a9b86ed8bf70a822f9a780799ae94c30c6285a243e65055b160c26c1aee19f244ccef7f5085459ad07a7f6f01f3d35d2fae622764accb3ea77cee6eeb60e3e9ece7b68a87cf3afe24d25551dbea46c32dbfb77dff9c9e698b8e6aaade04291ff72b8bd5bfa52aa28029db10cc5cd32a61b15b4493f08761d593de8447a1936f7eb9f19a2bd5ef0e1d0145a8214a515630c71fee5c1fc70a509163548bf55f4b22a36fbbe7f3f3c3a5d53399ce639385616d831019371b0e41e4630d78c74c9eef2def01093cf8bab3c5979d3ec392d534f21b46c58e8f07973fb3ed1caf50aed2a21f264b6b6ae72a9c32a1882d56cbb925679e5413f12c97d26e51c095424a31545e5614fdfd4069368f5c863b37a52abf9704b69b5a820411f13aa746ac9ced885d0cf7193432db861c93202beda62668d55fa9ccaf5800964fe0541b97b75304d48a89ee4573f4dcce83efa29ce9609d961cff5953b5ab238cfcb6cd76097247b2aa5e6e7ed493590b44d7d31b37b86b01fcb5927e11aa74f74ee1139022fa606bca1ac106e759a8962b3f7ea68de64305128245d35263b13fae443e727067392cb67bf86b26f062274e9dd470226a551c3283a99a5d7ac6bfc8ca8a362e5663bc25e78997da071f229258f78d3c0d10b35f344e5c1f769c9c20879ac9adcadd154e65ba5846324e69682a3dfcd1fec195d9db975ff83779800c555bfe431131e4b192c0272de4b8e865c367437f35cb3e3fc42f56ef0754902707b246fc31044315fff8e773be15ebfb7506103e5bda4daa81e91b33bb47b5725883b28bb43a7e4d8f2e1bf422405533938410b72361d416b2edf77dfaf08afe5d3eb8d774f77b220409eb734"}, @NFTA_TARGET_INFO={0xbc, 0x3, "0826c07ea0680aeb4203565c51632e1d56004a7da5271fb3d5e9c19e40942c460cfd16c97c076e5ffbe544807818c135893759ccd9cd1bd43f824c9031b888b01a0302eb72c431a51e6a55b0d0552b6f4674de63acbd7ae4c1a7755e78c15adb4a7efb1b850167eeb7d6de5937a33ec570be60eaadf25135c6920cc34cd7ae8f0fa64dabb615e2cc4a8d7a5a2e55d79792f755e8d8dddcf5af5dd6b035e6ff8d15fb0a4520df8bdde690257b6512d000622ad24dc476cbcd"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xec60110a0355b511}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x54, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x20, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFTA_SET_ELEM_DATA={0x124, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4a, 0x1, "644dc2065f4f7bf5fea4e999df270ad95ed5b9288ae4f6caef6658d1c55042d59b18c087b9f35b534b144c3708114d7da21fc2aa4d23a05714cc2d87d8634484863a6ca2af89"}, @NFTA_DATA_VALUE={0x94, 0x1, "4ac4c26471786b22b15758e4a0f9dcc2591af2598ccaa1fb62a54e516112925ecf081b0ac3dbdc6d1a8b30246b861256980e08bd1f959b44ef2244b04d6d2c6bdde0344aca264db9bb45c008387e79cf075a21ba01be2a910ebba9d2d859cf6418dffda1c8802ea69009a892d6bf303fd9da986eabdc431bba00910080446f7ae34e9d9bf5d68cf7382942ba409596b9"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @immediate={{0xe}, @void}}]}, {0x5158, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x6c, 0xb, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x453886bb}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x88}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x8000000000000001}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_SET_ELEM_DATA={0x1118, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0xfffffffffffffebc, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x53, 0x1, "a37dba2e24eae4bdea2314c80bbdca0abf532934bbe93731b8ac851285f968096f05eb2b12fef392b76915659e5713248edb1968252bcfa16e715233d94a4306d6037bd35831bd3b5a3506de082762"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x2b98, 0xb, 0x0, 0x1, [{0x74, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x100}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80e4}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x30, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7f}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x1694, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1688, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x324, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xc8, 0x1, "7b382215a9c4e13458536fd28055c2f24a7742cc65a46a9c035cc2c5bb7ad43e29c342f3aca689885b6a70d81cbbeef4e0ebe314897d4d24bf0b4b5744d8c688d9a62fce08d684ff41ab15d2231c38a62b35c5650c149b4604119a87a0e9b28f72e0cfffbe83cdf0b238711bbd14ec7901c4b8b554c3b77cc8f2fa8d5bb28a09bb3dfdfd73dfe8a3c7877aa4d6893a1f12d4b469ea5238e6dcd9fc613d7272af061dfd695470a6ed00d176fd8083ba48f5221b43cff798adc6ca7f0ed3528e8ca30f784c"}, @NFTA_DATA_VALUE={0xa5, 0x1, "d8e2bf175bd38a13bd193c4ca9dbe9b32599c2f7f3e116cb45ef16788528f4dc6728f388e4b2f2541596c2d058c1974f8ed91870d84c1829d9f62fee159fee000af142064951631c312217807f06c15b1e424b59d027c3920e21de015e07552511af591cb11d8a2d64c7eb4eb4e1a14c14d30311b1595a05412a4992a30f1464ff7d4bd7b6a8336c2e657902787b4c46f18ba3818847c0da1d2cc70ecbb3e7888b"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x64, 0x1, "e513d1978d15a9d05dbe56a69f0a352da03be505cfde565ea62dda32f7380e1df7e9a6cd3d87fabc66505939cba8ceb890117af458aa70058a488530fe5c5eb43bc1ec604b7ed3c0ed7fd469680ad017d480222716882d8f5de68a5bd0f5e006"}, @NFTA_DATA_VALUE={0xdb, 0x1, "34e489790c48fcc1d6f2a6eebe8d083a83db60a113c43cfeec96711fd03629ae41ef28ff94bafa58886691479d3855b34bf8711b6bfcea039850d0a3636395090927ee4b973a62ce38da7e9f1862a6a0c1e7c2838f9c4b527f3709ca7afd489c9e0ee59397d6c6f4c6069df842a246da98ab6bb1dd75326572ffa733339c32e05581d8295b36d0cebb1971e16674d3bf02a782d132aacf0fa94d47d9685adf0476b1373b2a0360e8501e7ca001c67878f9be59da0c7a66aa558d7179016ede760d24667cb2da74a34ee14114224df9724c60c97beba03e"}]}, @NFTA_CMP_DATA={0x1b8, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xdc, 0x1, "9739e3d52adc652c9774e26a26f58bdb7b10e8ff36eea8c623643bf4722415f4d29d7693fa7872e5b1fd3a08b89028b9a72a92ae2cf09db234d1b6eb596e1582a01e0ed08eba70b48eda5ac77d64326f6342ae7c84ff4e11789958a961f82cecfd64cbb28d3865cd2486842f3a00f52059a7638b85e50c693d9d86ef0ba4acfc23218d525a217eba2307eb7e1b8ecaaad3d9492fa9a14ba4729e68f42d26bb94da84c39c6a0dd4907928d7469e87c769a1e9742f063d25c30e103e1394552897b38d43e63b7b0be094476b57d65b6788a599588cda0a39b1"}, @NFTA_DATA_VALUE={0x6a, 0x1, "3276676f8387725c29a2f2ee28167d9af38e4e4aab0dba17032bc336b500465c22c2b0ab03562497ff0bb7049389004c51dcad175c0aebb209f5897dff3e3a1cd6920c75c604110d238c509d7183f133fb089bc15b039c34fc4d455210fe45b67dbe2bc7fbc8"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CMP_DATA={0x10f4, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x33, 0x1, "9935b92925d5e561b18101ca51060de5618af7cc7c9cf99fc5fbe2d406bbea376f290f7b134a5a8115ae3114b07a51"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x92, 0x1, "095eb375ca396f54e5be81b1f5f91e9bc76b50175e18a80ab7e369b414b77c91d080e4a9896b6ddac8555bdd49e7c80eb474f39273efd14c2ae37d2a9c33ff596ab834cf8820693be3ba5b51af4f342288ee3f3833f8c64c2c61928c5b6fc5aa9b32f799c15a2d4f63a9c6f13338b323c997c26de97d169a11c3532b67d521a013f424a5b64cfacca7f1ab8a8eb5"}, @NFTA_DATA_VALUE={0x1004, 0x1, "9edd08146d4b3d5d78942807dd00ba542cdb3bb8a3b7212303a3e13077a7cb13ab4ac9afceb1a3462656bcd34d5171d4b8ec05bb8dcbcb820bd1a8ecf2ea09ea48037f9c63c5e4f1650dff8392e4af9c7066d5455a97f1e8e038d16d7870d5f63402977a95810bcf8bbc1306d6b51b74f173813946e6207aca69a2a5e92adc6d98d225ed6f74892c84ce424d4568b6f58afd819d38de9efd8e987b18fbde547422b242b479501cc47e325cf814f29ab7a0832de4e1800c14dd2976e695e5c41463d08cc1123f22e3f649a8c1fc9227f1648cd53512939408f3caf24d1cf75c998cb08243ccfe9d55407de3c1dde19bee301f3317e06ee516db12d977c5abf4305cbbdf83cdf4438837a61202a8982c81f81bdc464e8921cf69ee5b2d18eb2346a5c94cbfa9d7b229bec5ffe4cdaca41859fd5bc7f5842e6272ee5185ab2882feaeec5176a13fc24796f28dee1334f07210f24ad54ee4c268316db4119520ed269c349668518ac8f8537db5ffc6a6692185db18b8f6210137f9b0dd74daf93936c3c2a8deef4651d314e6cdd23f1fe406936eb7869ff075547d8bdc28afcf60837226f6206234c072034a83b38825edd0886d0cc3ca28823174f9832c061fa670b3eabe6e585e26542831b88045485b8e4ed324717f93f017dd15e46f2c4daa86090d968d187b48a8bf6f5bc3cd01a1e604fa8b4b9927dbe63c088c9836d1730ede016c5dfb5e98824adb6c4330f97a7c50c6f6c33e2846f3d76bc89af0e8d16079be6809a8e0157c3e2f98f65f1084e5a1d218b06870c9e56172e8c87c8f198d966f986c8b49af9538938e657acfcd394ba9b9f9684cc950fc8eaf73119fa28e4f1906b7218b413bfc5a7491124f751a01d8ec3a1f72adcc9b34ae2da791b9156c4f8be66a9a67288db6832bc54ccdf122c97e36a9bbc95ca4bcd3bfbc48092c0a120b1a4c83e1db617d0e6e0d5f6cd0ea476c51b8541ca1abd4b8fc235e1b22d31fe7a245d5f70ded87005ae1219497e43424045478d9f1bdcad7a1ab22b6f36073c194e508bf74e620622ad8e34335848babce6bb778d7413a8857a12276c39846ae049bb5ec5a199900a18ad08913920be64ede077376acc1c10129f40ede4ddd870902610c3d3c802cc52d18d935ec4ef47a9d3de80946317cb5eebca911962316e5ae06c509634534c6a9177e49adc98779da715f8aa8110b53106eff2af42b2d87eeacd501f60e91580c3d209aaa2c605440425aab2957878d7c36951ae34d979511d19b6c929a197bd94baa1212c717806a98fcd916df3c2f54474a7cde73401f766c02604f31aae6f3adbb1a1e54e859ff0feb1348158fa48ffb85090581b0bddb814c701e61d47ea28c80a1fdebd8dec3470cf1becbfbda531a58585a8c13144aa64bedd78b9c16c08f28496218fa60855b5c3dffc24811fa3967b55c7aab0e032c2a7b21c5ee117c8ff3fe30a40a792c1de660549dc507c131413cfe517a3ead055b9ca86441064a84835cb1724e069cf378e95221f05912d89fe34382db0cf5e5e5a879a2f54ab78fa2ad0b216faf0d8aed0212f0dd6a971c255c4a1a2782d773f3aa6514553b4d8beb50f0eaee6bb0359fad6cbfa98240dd9d99581236093556bf99dac24ee79d011c37edfcfd0006dab7fddf7b63950bf2d84081ab33a2c9192e346da444b6ff21819625976da96c40bdfeeeffa5bc85953b0a34250c09e4414ae86ebca7a1f4041586e1f1bbcf2f894ee8a4cc8e7b105ba1ecf088d242782b6f9aa841f6c126210b7a21d8c3bdcf1302f0a9aa4a595fcabb325c6d3346e36736bebb0e315570660a51fdc8cc63621fcdd550dac1116f98b1c61e1846504f242bd3e754f8a62955c825702355cfb786f619667f06ed290078e4d07206340f5c675f09b54cc93d550e236eee5147c46dbd26e302fa976c2d533af4b9260a64f9e5069b1292683b2030b867316805894ae9a06b27157e305c69382d77f4f1ccbc72dc2d9984d79a191389e84c8cd3461e5f06ca57783da34712b25a03e2ac06cbe31a4213410cad893b860908240d1329a4d64678f85525ff4c75c1521f5c554141b30d8057b1f9a530e637947a4d4c3fec7440f54a24d88a1ff9d47887cca0cbf6e083be4867c6bb6db4b307093cdb75058579e4704b09719ee9ee62f83929d174522254913e061ae4da8644c63255cf7a7ed44bb3c050f66f0fd2ad86a8e5af8fec372458639ef039afb2f6f60a975b15e99fe32f4cc181ad23b28437a0750373cea40396c77c514adafdcad28b906c9a672152c74602a40b6a9e19fc5474eee9dfebd1137727602c83dffe3353284b593aa4611a53997d5c2f09e270150ae5e69205ad2e6003b3b91aaa7c7e90e445a6c5fe1df297b03afc570cc35982b92bc6d8a8bfa12fcd45f41ed4c9b3ef37f4cdf50b207ed829d3e586a1318bfc8007d30aeb9bb346e010503d60b0becf91f4eead73b702978e963f89f96e9dafa30bd8c7368edde825f4c10cf5d2798da657c8d55be65453599ffbef60e7a9d35609a9722abe9b706d8a08c3815b0b647ae6d06251c71016d4422518ff934dab73a0b7e93b7beda7c5667c51018e7db631339834b8c5a069be3fdc2a3884396f3606f6bd2b95a5566dcdfbcffb764106b478f31d79ef5df5913883a6483011b6f2c72a567653a838ac0cf609336a7d5f7441c439b9ade28310d8274a9c264f8277541f418f9c0744a962a3cd525fb1279b00fe4d110b9a57607b98898cb1b18ded4ca4b07a4ae62fedbe5d6b455e0b1eef7652aadaa3560e5c2080e9d8fad418e91dfb69089d89baf9598b4db7093614476aa73f31011ae3a349497eb554a18b8b03d01c46f88f9db1a22027d58642e4cd0311a31eaecc812f38a61c10d77f80588a720be99cf301dc952605f885f4bdfcfbdff0ea2313c06fb9ffc916a0b861a6bb9adee3a87809bc04295dad79e09aeb6014f7df869fc531e45f50ca885a1e8128131cf2002d66242cf4903142c114e43b8c70a29ce0aec70bb6ea32f3af6ad828ca15710a2d631076130aeb0f6367856d45ffa12913f92e1c1cc9b6b912620f042dfb5d121080734988da419330e6de8c3ebe25bfe8c9c5578555518aff262b0fcfa251a8d317a9ab5695545f3c42fa88b4c6024190e9d4f829fc8542b37f0cd8553e7bee1b7d6f89a45fe80b4dfd6442589fca23f0233755899530281f40f92efcadec60611d975c63f4fa33e586d032c9ce3a398f3fd8aef92ceb2f08fb0f94dbba62bfdd99c624567ae5c4c7b774267f7d2c68751cd4c21bc736838175c4cf05cb8b9e6af4d1bff66079d46f495595690d96e63f07a0fb8d22cb4a2983a5c4274a86bc6ec5b9f2f05523431601764afe6f0346548706201c5577db15181d8eaeb62e3d0c4e39cfcf38453e582951a88b1bdd822102a6358e139e39bad6073d57817a8fd1d95faa6d1d5734704496a838e6c1fe7bcfc05074c15f7a0266edd44a6954ca155696c12680cc9390b39e1e2c4892af9d644f2d529ec666162f0925de2a19ab7a3cf6cb015c6603a227c1d1120feb5e722b5696d34185378dc4518384e73bd2679985db23dbf4e14fbb41f87b0eb987b7c29930e6f0a5acc1d3d275e2431921697cfe35193f8af64ef872623eb65db9ce3ab9460d2e75badcb0d46f8f881ab5236e765f10d3d16d98c8e06b0e37cca5820d3d1a3dacb41b60fb4d26b2af062583f0aac02363a90d2ef686b76745f9523d9efe600e012da2c36e8be855e80cf648301c2c2514da6c981113fd7e99da42fe7c073999e5d8fe9ffee5eb876ec4558cde07cf923c8d7ed3a6361c3536081a5403bdbefb37a5b252f16ca9c42be7ee65a0fcb5e0a503208fe7a27945ec063579dd614dab59747cfd69db69349e53c012aeda62383dad29cd9c9d4f2480542da4a8591295b8167965b22befcc7021fcdfe674df7015d4b61d6b518f41aaa7249b2df00b317566f3087bca119bcdb68c9e606defc53b50e2eebb5b873be585a90a3e7527329e823d765ad1c8a1baa578363dc45ea6f53ac2b740f32d0e59ab0bd85bc400f540fbf1ae92f6dd19fb972dc21a69a10e38df9aa1302e16f5ece995655b9fa3ed0e93b2083e8b6271c905d7ec04c255dbf4c5f45937950a66815181131cf338f45c985be15de119c80a374436d03bfe9912ba4847f5944ef91d54045d2cda95f25e86b601796a5e67bcf276e00ef6ae141f7bbcb3c83b6a19c7723b756bc0180a57811839ac755030742a1283b2ad3185f197cca64f116785112074c2b9e36976d6776800d5d9f4d09f0f25060353c630eded86befc5a64d58e6e9dcba036e9a0d090d71d0b409bf99674bc7a31ef178cfd08f6a7a79af7592d7c54f0ee8dc08e8ca16611f7e13ab15490ffe5010a778398a12565382ce3d78c1917a38dd4989f2b2cc78709c477154a2c13a55e36e7dce9224bacef8a72ebd2834eef5b4a5092b4e5a16d74a510590e0d52126391b8e27805e1aa7ba1c919cf82d412a64bd08450afa2a52ea62593813774f08a7c030bc5c93124c2c9f05095afba5174eb79aa4e2e1a44941c46feff42d8f507edfdf99b6bb5ad8830d1a4600f3014de6f05af41c13f2a3eb1915225beba6c9298e62de4c31a294caaf3e90ab6298e8beb46165eef37ca8b3b99d54967ac52c98876a503544a0f37f10f2ad8ba6428c4c24ffed6a03f782aa51e8fbd7dd33dc855178fa3f11fbebf848588ffcbee99dc7f9b710079065f8310ce95aced8f02cb51c5fd3cb56e03af4605ba068235a83e139f309a1207d79127f953f889f8fd186c45ad73e24a33d8990621bc6ec741966a675d42dc2ac677002540a25e22af5d4b108be396d45dc8fbe1f6dfb71891888ac35665b67c3c7c434284be48b911d604f1c5be1366e2985bb57f3f8d10d0b48a714407b677c31a9fe2ebe7c272d4bb16fab28ae8d04b72aa1132e795a83494abda0b8c4d74f438eba19ba938fb35d7344af974361b76c0491713a3a6d2d65fca8d43c640a5770a6673fe214eedf9ca898459d1a7372c5fd934b62a4ec5d92c5f7bd42cb956c3799558cb1d4f9a721e72d66e7a925307b395bfe601f8f33ffee0606f10bb2acc3310b5f9b3124ea0460d048d08cc1f5571ea95e0b521b048e634c79b75a4b544dda317a4c92b8938fb05448c1d20d00331f5fd87c296559834020c153d4bff557474929c9678e9f930aef665653883d1606e5a53bcf74f113d1dd99c2c49a8cc3e02ad3687df9d199b000e5cf88a1bb468601bcf9dd6ec47e56fa31df2869a6fa71070ffab52326f069c665a665363674e8d8bb46f36b2ce1f0ba8ae982c5544f1830420403aa80bc64c8e52116ef8ef960204711e7d4aa180a7b89ba916db491de5dd994a18965c5363d6530df7646841fab608aedba062e54434d387ecebcb48a5d734f90343cdc629581640e267dff44b39b9da4e6479e123211830b9bd92b845e8e4a4bb6485d7e50e44332be4777627f9c0b0dca0d98c8d24637d4097aa900ac0df48627379d15cdacbf0c0b4ed35eccef05e2d544dfb4b041a2c5d99fba95085ba0495d31ded4b91af065d09bfdafafd92678412c578cc1ff7de6b9807e12f0307404cf91a62021b16519b4d571243bdb3b8bc87dc2d3a31a86fff61addb61b4145895d305b32a1c17ff3dba7308ad322c6e7393c8d96ef9a837911ada6873cd2e1291e5101a2f968b446c891e40d279e3d858cb31968aa3f3088dab7533d986c3b9d88f21a5726d76ae0ff974a5d3641c265ae84be6c4a7de0a"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CMP_DATA={0xa4, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}}}, {0x1434, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1424, 0x2, 0x0, 0x1, [@NFTA_BITWISE_XOR={0x1d0, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5e, 0x1, "62ff922ee79b49c9a5576cc476cfd35fe1bb627b48c3c78a2561a2222df4cbc2d5ec38c821ee0801c376726631a4e79b7d244214d54ea82399a51f7490498f5ffd487fa08516d20f6f58caefe74d1f0e326dec080d94d755d47e"}, @NFTA_DATA_VALUE={0x93, 0x1, "eb119c2ae17a7a18f973acff2406f347535da46da1ce0705603c7703e366c7c6ac2a954d63b969a2a422d3e52727b835cbea41e4ea93f2d3f6af00bbae97e46fe2f580b59c5cfabaef71da01ca316371e9eb257879bc47923aa3728297e0e9e93769131d92784ddb42167dacb80c92eecd50a8a064c94fa48d4590b1e6f6e0d6685ba85215b157571b9c6a653c29f5"}, @NFTA_DATA_VALUE={0x1a, 0x1, "ca1a47b4348ff0cee68cf4ab623aace32892ed0c7ecb"}, @NFTA_DATA_VALUE={0xbb, 0x1, "6bbe6d28e42eb04eb71de59095c7b2ca7ac244aa4cca08d61f7c0525490a1d5d22444b0cdea1c1be4b529fa1624d569bdfd11d768a6201b96dabd39fad618f9cb7bb884db84341820321a35ee1f6579f4c47557cdac2eae7b98e0afefcacd2fb7530ddfc5b5e5370c5a4438ac8fafcd4ffd2d8472791c0def05e1d7650dc75d6a59e3b20c7d68ffd8d6dbaaacf05c2ba856a4907d031bef4a70a789ba556a0c71b53f60f741bc55c274a53a30016c726c18bf00e609f39"}]}, @NFTA_BITWISE_OP={0x8}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x11b4, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xeb4cbc4bdf5cd6d0}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "99283442b2634535708a8c153808276f5a97476a24cb2f2cbe15660075e0c1c286767c2362cbb54aa9568da9fa25ba01f5c916ab02085529197d5ddb0d431f5f8ba73dcfe10b89ee8912918cf83f58077515e01a66fb4d1633eb61f0feb3d73f2fab729ca2882d414362f4f15b638c08d5fcfe072b1e810c574cc12117f725f7e744c126e659de99651412208f64d03cf526532b341a52630a903c1ab592a39d1b9d5d5d7ad14b559c894d0c8b7b02ca4a0425bf2f4d9c0e885247d0a0b6d5582d3ae40b51d44772dce34c3a08c890020509e71da4037f492f6dc61a6d1c82cc3835c80058f33489328af1049811d1049cc8954c917adf94dc94355a49086bdb37fd217d8477fc0a52a0c90dbfcaef746d46fa30b7e2414190ceddfddadd4cb13754931c69f7a4765450d644f0d4fe371263ec53c90006d61280e68a3668e065d0fb8bd1316c515dfa4b3b528218bcba04e24704ea35029962a5d8edb44292fb078bdd06dbf1eb5b76d324caadddd386f5a6e3a70389781b2c483b47c636319ee9b515c5786ba40b963cab0485c7ebe8c6d42f4cfb3886f670029a7877cca883aa26a12900d191f632c0ea7c6f5de165267fd5d26e2a9c616f4bce33eddc446cd984e09ba0d8db992b1d24af44b1a73843ebc59497d688042de2d645a50793c0c6e0ce0d5af143f53e94eec9ce3c509335ea4d5e9fca672be93397a1eb0dc364e3a48c247c781d032b5e7dce4a11a0de0d77d534804c08154eb68915979b86ee3f2dc8b964f4340c47edf0a7df06b333239bcdb5337c9fcb669f7b3c4255c3653dc23daaaa0f2558c9e9c6ce52b2bee830ae32bb79bfe42f3c20507736f98855e33924f9682f6a7223eeba11f6dbb1ec924ff501d20a1eaa71dcd39aab6fa05afd71c94573b9d42272b9f1356c81382667006117cdce94bd89f418b948a526778f03a3105885261009018f92b7d0d31d988b4107244ee7c5e193b0e930479d1111981c785a9c6be0c3643c2a967ae41a69d78c0bba22e433e6ed3e3ca76aa98e7c0412abed7670ee18400365a9764489e71a0c0327ad544d857baea45c72da6b309248c730ea2004b4363f221dedd70e690864bc721987a556732e1e851f6ace18f1832708c7bee5f89af191dd289e8cf7274a6dbce33e637a0e085ec362d3ec69eb9b25a86706d25557a3134e1359602ed30fcf2489a301ecff4410d7bd8ef5e6522cb73376c936cf052d0f42266df69cdd69dbdcaa71fb4101eb95ee428de841266b5ef9768072fb4721c36eaaa6b2bde9c49346798fe6a25844279e4de60921f3d292841f2b8f08c4469ad104602b59d7088e455a1f88b5e2ef43d44accdba875911df910a95d98065e5ec603ce92b7f4402002d3b79829feab0260c718ced07e9d05775e2e7b7091f2c40492526f62ab510ee4746ce0f1b3b87a3251f9efb088430cd4b8a4870d70f71e023dd700eb0665b6f1cc4b8f50826a2cfe625ab19349a405944db2b2c27b2273cf2c57aebade861afd91ccecc7cedf979971e8646dc634a55effd87df868d8d69a14f508d6b64a3aef1092ef05ecf98e2112783c04baf78c47428dcf606acd8e22779c9b6dbb86ad033b8b17ed591ac5abc914ad236497ced010b6b9e832a8cb9ba276b0840edc9edb9941e712778363193110e375fb946ea36bd159d0692797da5c3517b854ae4b52684f68af593c7d945a5a43657ed071beb0cd427670f3e51f85375e2a9e77642817bb1b3a6ca00acd675dcb04813ab3d9d6f52a511a34188499ee80cf32956bd40c1cb76f884b3a6a2b09e27305bcaa930a8476e28045704b056f917af190685bbb7e851bbe5927659f4fe898077fc0525dad0ff48cac00a7e37cc38920555f27798198a001b7c9dd79bad4b2cc8a73906d7fe42ccb34890dddfad07f79ca5b53b34c5ef8a70d34487580269b1e7e7a2510154626450f177cf920e145687769a5cee8e3428f8853ae8d46b58cf0e28f75c12183b1deeaf8ed49550bd46ed153b10f7430c7f0906c2d6e8ee09c20338405e26b973fb68ad17672913eb685cab8f8476dbe581579fe5468511b69e40be1c11b9e1f6edc697ea30250f621ce59ad1c30ab0f446206e128ad6e798595fd70daa98ab6625b300eb473191bb4c815802c69bd98839642d2656aa21073a1c41a8a009b257bb5231d3eca5763b97c940204b2923a58d1c41abb17e118070c0f89790519168b791c202b333206ddd92781930af5d60e9f8f0dc8bfb24c422626ccbe55f4f12a92c6bc5c30e81c8004da6ee8fd4d7197e54666da06ccab58c3869e14f73a5acff0c60f7220756b2d00d56f4771a065c990720d79d7aab42be96d0bb75781ab5e6402577f053b0093120be02041aee85291758369d6aec3d2081330538a8c6d999fc72b8023776596e75b239598d271833845ace4eeaf96f9ae1112fb8516cd2826a39c76f003bed6ef910e1d4d338b7889a21547b7af745ab89c2abdd2e99341ed2da2849e5ef2886133d80a1c909d2de6be4940c4578f164837b8ecfec28e01aa2d1c2e9a825a6421ed1682da684a7eb832b777990dbce18aee52b2d2f509ab4bb7e4a0f3760bb67e7037a1342053822c84ea8789ff3688178c0158883547f142b813a7b63f817fd891fad9da0c647976cc30e865135c223cae6e786d7430f1dd55916c4a98469de92ce15a927d551828182baec1080e73acc028cdf58194f2769119f1f59b33d48049958439f021ad162ee0d13adaeecc1d869c4da025dab4861a836064a62d3c9c6367e39fe98514a6d40fa1004a128415618133aadff8b6924fc2a504d0f4ff7018b7e1e469585cb1795129bca690afb97e06d03ed1e56a62818f5e9dc383e22c0c4e393203b084d2595b10127efa13bbe639ba76b4cf53b8b735bbd2030e15e00130ff59bd1aa37aa982857fb5eb3f7003af3221f9d727e737d6b9c88f2f8b3b380a825de13a6bb22ddf910e6cfca1b3ef4be02ceb82afb23b385ea1a4b3ff9d98b96a1520b8dd33151d7e49c6b22343f21cfa7400881a9d930bfa3fc8cdd9b73eb3210ba7cc01b6f710a94d629f53ac72a5e673a908cf3449445fe1c8e6e79a2d5332c3cb8f34818459d8a342dd5afa4d07ea792a1bb473d28a10ba575af2a78b6e9a9b11bdbffaedf5892d0ffff1c23b785e1ef9b876dbb6462f166c77135984a9f2d40fa88928a0c89950b9fbde6d7bd00f628fc7bc5f09f85764bd39a3ba999f477e272376e0e6eb660d60958bf65c5fd9c69f9d504bfeda7e887715e16edf7cd28de7380798659c236b69fcbc26f3fdb51527e54046171f73893e8cdbd17f20fc66ac7160c9fc7e8d683deae72865f6dd6cf023279954b17df001f45dd58cf96870c919686efc7cfdb531bafc365584b82ca321630b4f43b800a42bd4105a75f663bf7e404d540ba408fcaa58c809f18516145318b89b98041f59191dc3e314da06c72c35531ed1ce5e1750fe749b85dc680abcd2ec952b101824c1b5ecf526e2f6dda49281a4baef24167a97a11604db0ecb039a158c593f2174ace81da3950adb7412e08f0665073825df23d381529f7468011e1b4191be34838e7b2702000900843ddeeb3fda3332538a572956e7406d59dbaa9063464f0d3b9d32ef5d40ffc24cb444245a9fdbc99bfb2a43ef1326b1859dcb575b0aa0f360686dd5ded4e11f6d8496ba9840dc191aed465ad74f5fcd4b17d4e2595b1c50eb1f17f3779f28e11d74f681f464c4fcea15b0440f476f1c3f1dd120a3b74e00c4469bfd6654de7547469c0c8dd5c36eece49bd8c08d96f03ae66677230dd3343787e590d28c4e6750800546972ca7701bfbcd0d0ec340c58977de708c7c73721216ee962d069bfd20e8f0e80a1475d7cb4805a708f09be27ff741258c9ffab8f1f031d654370f83dbcdba922635a7a2c1c7585bc28a09b4e443462ad36646d01f0d7a5127b4156a039c83a3741a340111de88c82fec7a341c39b1b17550948a8c4631e398f083512a19d59785ed745f0c2c5f6d67bc5ff97ac38ffa6a8ab64740ae55afede2e736590fc56b20f45a5aee3ed5e9a5ed3771e72ae3a0b2f0a59953bda8e0f91fce86f1c2f7bacdbf697de6771673535065c87f6dc0f45b73ed3b11cc838fc0e1d4575447b636bcc723b7fc816d8ffb1c6a065b888db32c005e02fbc7b51bf9bcf343619bb063f6b075101e1fb04a86b0f83f8b781a59f8151da86579d05a0677330adef1e5daec8932a42d0f4d441be6323e1f83f43f2cc2151903a059601cff535a60bf44953031a7f6624ab83ac7da4e24d7f485552b2a5401bbdf8b3b6f9d91d0e01a9765fba1c55d211d8216d7041c2027d68919ce853259c2c7ca7eef11e357d8aeba556c6574ab0424e748e874ff4e55c52e61f0c50fe80bf54903027298d30b5b52965f72c3dc276482d7018c564f38782a07fddf29dee86a66d8e9aeedbcaec515227ae622f823aae7fec8398d27619b525b011ccca41a186774b45212b27dc3921b94373c88373c1073a3e7925af41f9e11415dbb832069564b64dc3cd78af24226f4081978f041218d6a588a3f5a367d09be13016130351227e9af9215b481f90fbebd1107bd15bedfa176937228b01289923b89f6ebc90cb498fa5b7a84bc908115ef3001fd9f7819eeb3ef8e41c73768a30465df7e47da8bc715419fa5dc3a1d82d29b70fc88ec9affb0621b48bf8a23e26f14d8730fb3b01c72013d0917be932d435dfda2c86fd36e8af3624f1ad446f4661d669b35fa3c7ff7f8da1c0f5854969867d0b064500c8e0b267d17528526fda543e2e9a1b5a98c17f75aecbc1c9f2132e03abc713395c463e209f55f778a720e70af3e558e7fef4b8bb8403732d849757cd9d07a85ce31134c8d750cbefda54b7e7d368cebfe558a1eec6aba8bbf069bb7a9c2f653fb399b4d23016d92f51699a26c3698221bac39df7b0152f04ac92790e7d947a966774f77118374765582acf822d441a57fc176cde8b9dfe7cf50b6f38678585807d00200b6021270bc8273f22bc9b3ba72d6e2f65129f12a2e18191483fe2e92613bbf54cc17c03633329f7a00e9cce2f31132bb410c2d9a77ac151342e7c053cf964eb020c1fd57ea55425d609dfb288cd2c1e5542294b004779c5d80b05470c116cd1ccfcea264837feb9922af3ba0c0a91fdc0697aeb781c8c20364006cb78caea8381f3175d5ea24538ba30287ef22a7a8bbbbb7b0b4e3efe7b975d3269d76f4ef9ae17e6e99239e585e88ce1a7d8841c9e757e8c7a31d706927a5e1b863ed8aacda576595c2889e2f7a9f1428ce3caa2658fce917900cdb3992c6171d97ea553a60411654aef26795ccab0040bb5eb88a01f4d4158f0a8cbf34305ee5b5496653d1c20758f0282c0c3913efcea4bce40dda8ba8453864c59cece26dea4024cb60215187a6fae9411a7b45b910557b10cdd5094e11cff5f044a63816a7ac8469a4a5e3f11fb72cb3360cfe0bf474ecc9f1c835dc517f6dda86445bff1614163fc250261c59fc5309dd7bdbc88adf37d7586cc2ac09bfe6551a5b95ab9cd59f700b3a24c521d299f0dc9b7773b41cd4feafe64137ef09032e82512e6b715b5dad9b0a0bd68bf6a94a0d4d54abce621d6eecc9b6f1d6c330bb05290eec1e260b946746fea96eeea0c3b34c11479662ef058206c7138134e3ba7e6a371047be92a08c2f4e5b60a1021a4ce8d11ca59d8735e1f2a179492df767e36f9d25860fed7205177601921235550b3c6abd4ae30ad385403b7c9318f7c4e4b6fb0942"}, @NFTA_DATA_VALUE={0xe0, 0x1, "f83a3a4efe6808227b9005ed5daadc23a378f1c310d202548c6377cccb88df597dc46651a1e9677b7abc276dfb378c5fc3d8ee08e3a6bc845764fc45efcaa7cb484c0d01e1cdb20d0eb988eaf9361379174687156d1e6079095aec1bf72c258482e33cf285d01b45628e8fe6d22b4d47525f997faf041e8238c783b222afd0a73f8eda5f458ce2ef2994fd2e1f92f02da086906e46a78efea81b8f79eb8abb9858555a421c5428d94a8dded02b716eddac61f0b663c6174c7dff2310983da1373de96c593746216cbe0069653b5c48e7fe104391ead3c1bcf7b91b91"}]}, @NFTA_BITWISE_MASK={0x74, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6f, 0x1, "3db7a30e50b6595c003ea4b0839f7db11e2321376db7aedca6d03f1bb6263e83ca24d77f7303b02e19f389461688902e203f127a5b27beecf278526a5859dd7d029448c12f57cc7cb36e0dcff311d519c6602f058dc1ccf994b8b4011a141cbaac52fb20e052c955501080"}]}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x1c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_ELEM_KEY_END={0x10f4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe9, 0x1, "8ae7e1053dab3df070b80c869dda9a4bc1825689885367d1574d67a1183cb05d77ead4751f2c4fdb669533ff7efbe193ff3d8a0199d322c07f7fd82746ec9adb89748dde195e170046671e73f5ba8d9f37286d8a5ad6897d4086b347d44328d179d5585cdeaea3b7fd58066f2c457336eb8ef8b486113cefbd75f0280522d63590759411e26a200033ff8a7a958b616370624ac5dc9ab03c1a60653ca549d23cc87aa389a33534346f427e46814225fe4e40d710433ad91302087627d0abc5ffca18c4ef1cd9791383a54e8a4bcfaf3ba7f02bb0fd3b3cfe273d2b1410d5409b323cf07e01"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x10, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0x250, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xda, 0x1, "9f9d17664e5966b4bf43fa5f590123d46802a7ae0cc4fd0c68f4982d8a497ba5403f3b77e3189761507f79263c6eae0b73f1613010e80398881dba8e84735f420cc720a1043b41e6525e599039ca983b5763bd56a42c5e1ac056e3057f4c8e1c77bf0da4544c6dab8df480b98c2fc1439b070284b7b757ef114b8bf30a7efccf394942b3cea617a7ef8cbb0bd6c56dcf2778919d408f37b4d0c352cf943b8d48b884b2cbc0dce3148b05a575b29ca75099aebfc71e79360d7a7f7dbbe862bbf27f12ff0aecb92d84b48a5a92920ffdefef17dcae46a0"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xdd, 0x1, "0dd633a0368a2eb53edbe3610af6ab13ae090a9eb14936db09597a8d59ed43a09e2aa5b117e14e98209cb77e66c0d9d4af2e182a14fa5938fe07b0ad7a0518fbaa750b6184a2c4424449b06fe78765567b31da8fe1bdb139c295e7dba793ede3da17f6cd3a65353ae3d65e346993f483f2327a495655cf5c278707646d1f938a7dbea946a05c28e0eb051ab895768ae12d55bcbab8307b944fac8afc8271d076313b721548a79766c70fe84d23d99ad73e8f80381dbf6a5aab70da707f941e02e854c246127bf41e966bfce2376a26b2ef1d5b6dedbc9a6520"}]}, @NFTA_SET_ELEM_USERDATA={0x4f, 0x6, 0x1, 0x0, "33a905ce9dce1bcfc20b27d2b42c9f0d8224cb05d00d2dbde9b0e09493014a0e1158c23d951a489851d8f53f7f7e4d166f181aa2c5168e5b5d874664591f22fb6bcec13139739277341bde"}, @NFTA_SET_ELEM_EXPRESSIONS={0x80, 0xb, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x7}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x7ff}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x200}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}]}, {0x204, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0x1b4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xed, 0x1, "9852c9da1914098f6b44c00740cfe30ec1a5c65f4cfd0595de98c7fdd7a47d55a5e5f247949e8e630c56e43933106d4789a6d39ba54eaea35f7e88d75570449b49b002d7d439dacb4177fdb3b7c08881fe158ec479d6c3dc387cb17bada49d0a68a44c911edd154f998f101610a0386718d0cf932f1d6c842d5d1b74e29a86222069f233f6b0b0a654a489207fe9d40e8eceaadff1398a49ab658fe0508b05fa44b0f4261e634166294bedddec12c7c8ccc39abe932b49a033a5b9efea5647294df5860787a961001fd08d3a788e83bac75774613812d0b68b8a0a0a8dade150f45c42beca3652ad93"}]}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0xf8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xf1, 0x6, 0x1, 0x0, "e610d9d77c18c1b5355c071e1a9538601fa0e4a9616a668b24102141c4792ef821a26c5558c0b2f31527caf79ea0ed0a925094d50f66febb38a49be96a7dae3b384128fb7685ad8f01c30497ff91e4a25118fd63f14231368cf5764e5e9497bfd17fcc5849901f9aa9f920948e12b3b999131529d394a45010dc531511e7c1c24102931f883a67ba861dd29f7d51d5a68502bb6449a81c8e77dd4cb18bee8079e1853033b4f6240fc9c05bcaea539256d9f1b15f45f00d174016bd0edff9c6a7a19c14ef2242f8dce5907300f0edaefd8e62f8a8505f7a9e7ccc6d80e51d631641e1e5122aaa042dfbef33f0e6"}]}, {0x288, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x278, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2000002}]}, @NFTA_DATA_VALUE={0x79, 0x1, "d287341faecbebdc46102a44d070f6a165073825d0af90f21be48f77a755c2d137037f16396001d6725551782d7b9b91f99bf58cda7274653ccf79cc44bd500415916b8e4f0e11c1131bae22e75454b009668e7e32e4d8c885f3098a9428cb731d8b218749894ef3a945e5bf041cc4bbe2ccd3d782"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xd0, 0x1, "32a4957b4ae638feb08496851d3ae87d536989a44cfb802f887f704981a414086f6e236ad64f069db5fe80307032c61feb68bc8ad9627d9cec5a7512323f31a4016c546eecd007b3defc028088c738e35017c876e10c96cb20f9519144776b699295b5deffbaf0b6b5e6b2db01a3d9f51ee90ce78333b26be04a780c37db121593f8d588089182fce422dee8be55036486162aad4fd2723f16648edd71c799a5f2e38a9667363c5b9557a13c92a0c994b75e19b50a3f45ad3eb2131fce86f75f713cb1977a8f683a71141fa8"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}]}, {0x800, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x154, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xf0, 0x1, "5ed20f462fd41551a62b1e0c139422a8c3c761e563e02f6b1e6c01fd9c076faf57a71a6525075c514277d013ae5af079de3df9fe72f42931d72a60d03e7fdcd1c4c768fb32f23ffbad15bca5aa0a9423a7ff6acd1f8e283fa164badbeb9a4e3375ef2f405ddbe73f932bd8c85815fb9353fe17b08cdfb8d70e94ef1f07c5890ac006f1710c04624b2f56b1f6ff844be618c37ac8f8cfba7fc6e733ce9a71d3a58267f668ea860a9f784d44791ff4372a675b29974e805747476d4fba3196cf509654357892094b22e8de31b3f4268f79b31781676bd2312da9c0598900dbf352ad7661eee6d5d312e3ae2dcd"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x2e4, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_NAT_FLAGS={0x8}]}}}, {0x2b0, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x29c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x298, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x2c, 0x1, "a0d8668a71571ebf9f05ab61c3ba49fd0a5754d0f5a234f3ff46ae7a64af05f8d31e0ee1af05cb7b"}, @NFTA_DATA_VALUE={0x6f, 0x1, "2d7e610b9a7c847a4d5515abfc098e96bbd624de1753d788b3da2dbc6cb4ed9ea3c32470d27c89ddee936922c1ad1811e440c88fe0805f4c2f0445f1f1572047e8328c1d9112d3726b19906ebfb9521cb020e7e5d72d1aba652e1ce3a9b84a47d5a3a60b22357e2b8e4f20"}, @NFTA_DATA_VALUE={0x5e, 0x1, "48c37032c7ffc6d87fed620430678414c8365034487215a68be4ecfe5068ffa99bd37abf7ac3b894d6fd88c0269aa332422bceb286f6334d1d0375cc8c17214e6999ea99838f71b9c441173bae7a2799efb6b133027c3ff362a2"}, @NFTA_DATA_VALUE={0x100, 0x1, "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"}, @NFTA_DATA_VALUE={0x11, 0x1, "29429c3c9085c654a3e824c085"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x124, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x0, 0x1, "517385f4e295fd14d84c6a011b822659b969cc0f0aff4e09f974badddbf613388f9444dbc9c1a9c2c8bb79584a92ddb4d8e7b9dc0035f456b9e5486049adc75967add146a84c8386d5aa56971ba4261b4fe9cb2992281b77e7723c6bc8b51fce81357d75adecc983d78a031fb544b59d5d204d8809c89510022ceb5e3d6eee35ecedc4e6eea1004f34ab7fe6e9fdfcbde18e3a81aed60325cc043bebcc8f4b9321ac816a04decd109da85a1774c17b69a807031983fe2c46464635f0"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x5c, 0x1, "33fca1e9be77ff8c2b6036d851c9ec65f9fc62f5f8bcab7f406d91aaea8278d9581f80d9068298c3e38e3e21411281c2009752ef723e314bd5cb7087fc86f6eef6af457e77d04a6350a6305424a8d68826b38c48c8923525"}, @NFTA_DATA_VALUE={0x86, 0x1, "cdd05ae956b841d3336a21ecacf3e08716e79553f247894cd180f3c36e4ea2b534d1f24263a744bbb4f401e93c18c7d56c8e2505e051e11880f2f9ebdb6f3e05f6a9936c4f45ed4c80dcc7b75cf95a4272b5b2e21c69b253f350246a211d3eb098e5463c22b64f9b70e199c65a57c53a144c9124cf3ac0506bb4299449d3307d2cac"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_KEY_END={0x134, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x51, 0x1, "0da997b2374019127c3970f11e575adcc9607fa77c1ab34f18b63f13359b4fe2c984f615a14a93bef0885328517e4330c1c25ff94e2290d74559f42ba8bcd3da2b24d3e56aeae1e7954ba5c2f9"}, @NFTA_DATA_VALUE={0xae, 0x1, "1bf3b17a1b36cbe363d4d13f69101c4041619c1ea0a46f94ff9df81c649a79e3239dbdf9362a2bd4d521d6298051661d4a942ae12124f91d0d5fe56f1b356f478be21a56e1def0b922313c43fdc63cba6db860309d1172c71e318605acb1daee2a0769c4067dbbaf13b1fb07bc3121362684562e7952fc6f665a8e69fda981e12b079f8a27ff24f5e9751ad19e34b3f855837a0a820e8ed5338bdcc265a9666828fc47d4611b03da4ac0"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_USERDATA={0x1e, 0x6, 0x1, 0x0, "1f7eb477bf3decda81b1747b95d7f3148e7093273370d6b7b103"}, @NFTA_SET_ELEM_EXPRESSIONS={0x134, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x50, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}, @NFTA_LOG_PREFIX={0xa, 0x2, 0x1, 0x0, 'quota\x00'}, @NFTA_LOG_PREFIX={0xa, 0x2, 0x1, 0x0, 'limit\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x88, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x70, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x68, 0x3, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7364}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 2m0.651965232s ago: executing program 2 (id=5220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x2c, 0x1, 0x2, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xda}}, {0x8, 0x2, @empty}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20004884) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f0000000000)) 2m0.607153532s ago: executing program 2 (id=5222): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x1f, 0x803, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) (async) r4 = socket(0x10, 0x2, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="140000003c00010027bd7000fbdbdf2504001680f77c4048b35d42d3f41157"], 0x14}], 0x1, 0x0, 0x0, 0x20000080}, 0x880) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a0000000000000000b40000000000000200000000000000010000007ffffffe0000000000000000000006000000000000000000000000000d00000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000002000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0x0, 0xffff}, {0x7, 0xc}}, [@TCA_STAB={0x4}, @TCA_RATE={0x6, 0x5, {0x2, 0x9}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x9}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffe}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4880}, 0x4) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x4, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x240400c4) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffd, 0x2, 0x3, 0x9, 0x4105, 0x8}, 0x0) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x84, &(0x7f0000000040)={0x0, @in={{0xa, 0x804, @multicast1}}, 0x5, 0x6d0}, 0x90) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e24, 0x0, @private0, 0x1}], 0x1c) (async) sendto$inet6(r8, &(0x7f0000000280)="17", 0x1, 0x4000854, &(0x7f0000000300)={0xa, 0x4e21, 0xbe7, @loopback, 0x800000c0}, 0x1c) socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e20, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x42c4}}}, 0x84) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRESDEC=r6], 0x48) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x9, &(0x7f00000001c0)=[{0x5, 0x61, 0x6, 0xfffffff7}, {0x8, 0x1, 0x7}, {0x9, 0x7, 0x4f, 0x7}, {0x5, 0x81, 0xa, 0xffff5fcd}, {0xb885, 0x0, 0xe, 0x7e6}, {0x5, 0x7, 0xfc, 0x5}, {0x2, 0x40, 0x9, 0x1}, {0x6, 0x5, 0x9, 0x3b1e}, {0x2, 0x40, 0xa, 0x7}]}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="180000006a000105ca11ffffc13a9e83560f4b"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 2m0.475740322s ago: executing program 2 (id=5225): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1806000000000800000000000000000018450000fdffffff000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[], 0x32600) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000b40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x528, 0x0, 0x298, 0x298, 0x298, 0x1d8, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, &(0x7f0000000600), {[{{@ip={@rand_addr=0x64010100, @empty, 0xff, 0xff000000, 'caif0\x00', 'netdevsim0\x00', {}, {}, 0x2, 0x2, 0x12}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfa}}}, {{@ip={@remote, @multicast2, 0x0, 0xff000000, 'wg0\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x2f, 0x0, 0x10}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x2, 0x7d54, @empty, 0x4e21}}}, {{@ip={@remote, @rand_addr=0x64010102, 0x0, 0xff, 'batadv_slave_0\x00', 'geneve1\x00', {0xff}, {}, 0x1, 0x1, 0x50}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xffffff00, 'ip_vti0\x00', 'dvmrp1\x00', {0xff}, {0x480015f9abd12683}, 0x6, 0x1, 0x10}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ah={{0x30}, {[0x1, 0xffffffff]}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xe}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'nicvf0\x00', 'ip6gretap0\x00', {0xff}, {0xff}, 0x0, 0x2, 0x1}, 0x0, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x4, {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000080)="441f0801", 0x4) getsockopt$inet_opts(r2, 0x0, 0x4, 0x0, &(0x7f00000001c0)) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000680)={'tunl0\x00', 0x0, 0x10, 0x8000, 0x3b4, 0x4, {{0xb, 0x4, 0x0, 0x4, 0x2c, 0x65, 0x0, 0x1, 0x4, 0x0, @loopback, @multicast2, {[@ssrr={0x89, 0x17, 0x4f, [@multicast2, @multicast1, @broadcast, @remote, @loopback]}]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@gettclass={0x24, 0x2a, 0x10, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x9}, {0x9}, {0xd, 0x4}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x60, 0x0, 0x1, 0x74bd29, 0x25dfdbff, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0xffffffffffffffb4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xdc2}, @NL802154_ATTR_WPAN_DEV={0xbb}, @NL802154_ATTR_TX_POWER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000000000000850000000400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6, r5}, 0xc) connect$bt_sco(r3, &(0x7f00000000c0)={0x1f, @none}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r1], 0x74}}, 0x24005000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m59.603973943s ago: executing program 2 (id=5232): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x74}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@generic={0x91, 0x1, 0x1, 0x13}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0x24, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000006c0), &(0x7f0000000700)=0x4) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000180)='THAWED\x00', 0x7) 1m44.540586298s ago: executing program 32 (id=5232): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x74}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@generic={0x91, 0x1, 0x1, 0x13}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0x24, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000006c0), &(0x7f0000000700)=0x4) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000180)='THAWED\x00', 0x7) 27.395027726s ago: executing program 4 (id=6089): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$unix(0x1, 0x2, 0x0) (async) socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x9) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0xfffffffffffffff8, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0xa, 0xe4}, @TCA_SKBEDIT_PTYPE={0x6, 0x4, 0xe4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0x47}}}}]}]}, 0x70}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) (async, rerun: 64) socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000240), &(0x7f0000000380)=r3}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$netlink(r1, 0x0, 0x0) 27.283332769s ago: executing program 4 (id=6090): unshare(0x8040480) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) (async) pwritev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c040}, 0x44010) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1000, 0x1, r1}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x100000000, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x20b7ee}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmmsg$inet(r2, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000680)="2d114fb6ca395d227f74ab330a189cc20f97a09feac8af33b153a4d829333df016ecec100df5476b8ad5ec6741cbee174c12191ebbe4568ecf50b4017fb28c1b0bd792897395c99ca01caba0a24776547a4aa78c2fdea8fe7b83187292", 0x5d}], 0x1}}], 0x1, 0x4000000) 27.26895544s ago: executing program 4 (id=6091): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) socket$nl_sock_diag(0x10, 0x3, 0x4) (async, rerun: 32) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000340)={0x7, 0x58, "1ff1b6126edc8ef5f94b4985770c718e8dfbb88209ead09e5238fed765f830d68d0dd78afacc3a71b20685ebc9a12fbc35f998838103936919acdde3c1b6d96f9aaaab131ea2e0dec9a12c4e273502877b5080865fc739c4"}) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001200000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) (async, rerun: 64) r3 = openat$cgroup_int(r0, &(0x7f0000000140)='blkio.reset_stats\x00', 0x2, 0x0) (rerun: 64) write$cgroup_int(r3, &(0x7f0000000280)=0x1, 0x12) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xc, &(0x7f00000000c0)=0xffffffee, 0x4) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_all\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6}, 0x50) (async) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) socket$inet(0x2, 0x8080e, 0x1) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r7, 0x58, &(0x7f0000000600)}, 0x10) (rerun: 32) 27.21267994s ago: executing program 4 (id=6092): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "7d14a0b0fe0e4906"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x104}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0x10, 0x70bf2b, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, [@FRA_FLOW={0x8, 0xb, 0x6}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e22}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r8, &(0x7f00000000c0), 0x12) close(r8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000300)={r7, 0x5}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="fd008800"}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@mcast1, 0x3e, r1}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x16, 0xa01}, 0x14}}, 0x0) recvmmsg$unix(r9, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x4c) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_generic(r9, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, 0x17, 0x800, 0x70bd2d, 0x25dfdbfc, {0x16}, [@typed={0x8, 0xf6, 0x0, 0x0, @uid=r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x1) 26.899220099s ago: executing program 4 (id=6097): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x1c000) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x38, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x4}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x38}, 0x1, 0x0, 0x0, 0x48010}, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x220c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x3) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x7) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r12, 0x0) r13 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r13, &(0x7f0000001480)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$team(&(0x7f0000000200), r13) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r14 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r14, &(0x7f0000002bc0), 0x2a0, 0x20004840) 26.809495568s ago: executing program 4 (id=6099): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x78, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPR={0x3c, 0x11, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xa2}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xd0}]}}}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @private1, 0x101}, 0x1c) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @local}], 0x10) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r3) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000012c0)={0x2c, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0x2c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d, 0x83}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x58}}, 0x0) write(r1, &(0x7f0000000340)='/', 0x1) syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6743160000283aff08000000000000000000000000000001ff0200000000000000000000000000019f00907800000000ff00000000000000000000000000000100000000000000000000000000000001b76f05fc2900eb0fd15ad41a6769ee0995b8de30ee77a26138dc00d557c0d6e76aaabfd9f61576699131271572f864753917bd9f87a00f8dcfc10716ee0f0ecd00"/171], 0x0) sendto$inet6(r1, &(0x7f0000000140)="87", 0x34000, 0x20004000, 0x0, 0x0) getuid() 8.253840485s ago: executing program 0 (id=6184): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) (rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xa, 0x6, 0x8, 0x5, 0x40}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f00000009c0)={0xc, 0x0, {0x3, @usage=0x800, 0x0, 0x7ff, 0x10, 0x7fff, 0x3d, 0xa, 0x446, @struct={0x6, 0x80000001}, 0x0, 0xb6e, [0x5, 0x5, 0x7, 0x18be, 0xfffffffffffffffc, 0x9]}, {0xffffffffffffff80, @usage=0x8000000000000001, 0x0, 0x2000000000000000, 0x8000000000000000, 0x6, 0x6, 0x8, 0x20, @struct={0xffffff52, 0x6}, 0x4, 0x0, [0x5, 0x8, 0xfffffffffffffff9, 0x401, 0x0, 0x3]}, {0x43, @struct={0x2, 0x2}, 0x0, 0x4, 0x7fff, 0x0, 0x100000000, 0x2, 0x0, @struct={0x6, 0x400}, 0x1, 0x3, [0x2, 0xa, 0x1, 0x3, 0x2, 0x7]}, {0x800, 0x8000, 0xc}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000dc0)={r3, 0x8, 0x0, [0xccf0, 0x7f, 0xb93, 0x6, 0x3464], [0xc6, 0x9, 0x2, 0x8, 0x0, 0x5, 0x5, 0x22, 0x1c000000000, 0x4, 0x5, 0xa9f, 0x28, 0x3, 0x10000, 0xa, 0x2, 0x6, 0x5d, 0x5, 0x8, 0xcdeb, 0xb4f, 0x5, 0x4, 0xffffffff80000000, 0xeb7, 0x3, 0x9, 0x6941800000, 0x7, 0x2, 0x40, 0xc78b, 0xb, 0xb5, 0x8, 0x6, 0x4, 0x5, 0x10, 0x7, 0x2, 0x2e, 0x800000, 0x100000000, 0x3, 0x1000, 0xacf4, 0x8, 0x9, 0x4000400, 0x1, 0x5, 0x7f, 0x6, 0x8, 0x683d, 0x2, 0x951f, 0x10001, 0xb, 0x56ee3046, 0xe, 0xf1, 0x3, 0x39606c48, 0x80000001, 0x2, 0x5, 0x7ff, 0x1, 0xd, 0x5, 0x4, 0x2, 0x2000000000, 0x7fffffffffffffff, 0x4, 0x60, 0x8, 0x98f, 0x6000, 0x4, 0x8, 0x7, 0x9, 0xe, 0xff, 0x7, 0x5, 0x8000000000000001, 0xb9e, 0xffff, 0x1000, 0xe, 0x3, 0x5, 0x9, 0x8, 0x0, 0x4c, 0x8871, 0x5, 0x0, 0x4, 0xdc22, 0xb8, 0x2000, 0xffff, 0xfffffffffffffff9, 0xa5d, 0x3, 0x0, 0x8, 0x1000, 0xffffffffffff99a5, 0x0, 0xe, 0x6, 0xd0]}) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) (async, rerun: 64) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast1, @dev}, &(0x7f0000000200)=0xc) (rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x6, '\x00', r4, r0, 0x2, 0x5, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x19, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008b000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000ad0a060000000000b500ffff000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500080085050000000000000091000000000000b702000003000000850000002a000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24}, 0x94) 7.927578323s ago: executing program 5 (id=6186): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0xb5}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e"], 0x50}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700000064000000140001800800010064000000080003"], 0x2c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010003000000000000000000000064"], 0x20}}, 0x0) syz_emit_ethernet(0x56, 0x0, 0x0) 7.146824704s ago: executing program 5 (id=6189): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async, rerun: 32) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}}, 0x0) (async) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000000906010000000000000000000200000005000100060000002600020073797a3100000000340007800c000180080001407f00000106000440000c001480080001407f000001050015001800"/92], 0x5c}}, 0x0) (async) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x50, 0xb, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xc}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x18}]}]}, 0x50}}, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x44}}, 0x0) (rerun: 64) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002000800000008001b0000000000080028"], 0x38}}, 0x0) (async) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001800010000000000fedbdf251d01060008000900", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x44) getuid() (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async, rerun: 32) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) (async, rerun: 32) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x24000800) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 7.047360525s ago: executing program 0 (id=6190): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r2, 0x800}, 0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x19, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x6f, &(0x7f0000000880)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60f4a30000393a01fe8000000000000000000000000000bbff0206000000000000000000e1ff000104009078000000066cf6cd5302002cfffe800000000000000000000000000035fe8000000000000000000000000000aa2f0000000000000013"], 0x0) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) recvmmsg(r6, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}}, {{&(0x7f0000000000)=@isdn, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225}, {&(0x7f00000001c0)=""/65}, {&(0x7f0000000d40)=""/4096}, {&(0x7f0000000240)=""/99}, {&(0x7f00000002c0)=""/122}, {&(0x7f0000000340)=""/217}, {&(0x7f00000008c0)=""/35}, {&(0x7f0000000500)=""/227}, {&(0x7f0000000600)=""/1}]}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)=""/27}], 0x0, &(0x7f0000000780)=""/112}}], 0x40000000000024a, 0x40002002, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x4) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000200025a729bd8300fddbdf250a0000cdfe0000010200010008000600fe7f000014001100766c616e3000"/56], 0x38}, 0x1, 0x0, 0x0, 0x20008005}, 0x44) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000180), 0x0, 0xb8, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x90, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) shutdown(r8, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0) 6.287559859s ago: executing program 5 (id=6193): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket(0x23, 0x80805, 0x0) listen(r2, 0x0) poll(&(0x7f0000000000)=[{r2, 0x9081}], 0x1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000180)=0x1a, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x50, r5, 0xffffe000) socket$rds(0x15, 0x5, 0x0) (async) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r7 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='erspan0\x00', 0x10) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000000)=0x2f9d) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="7a0af8ff75257075bfa100000000000007010000f9ffffffb702000005000000bf130000000000008500000006000000b7000000000000009500000000000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b257183fa3bcd48666d1ddd73f3047d248df061222193165274bc7f2382f6cda4bfdd45be583823c0f09601f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce7243d1aebd00000000000000005839c77edf2d34b12cd48a0c20fb7dd843267e0331759f4ec6b5b0af58e604f4942eb613eff289026d5045ef76d7d864409eb2dcc718a09f4886afc26abba34635d0e8b54bc76be40d435aa8b5202db761014b1b999a12df6bee431a666100"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28) connect$inet(r8, &(0x7f0000000200)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/37, 0x25}], 0x1, 0x1000000000000}}], 0x48}, 0x0) 5.935364418s ago: executing program 0 (id=6196): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000080)=0xcd, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0b0000000500000001000100090000000100e6ffdda81ee964e6628484c78fc745068667cf701463f04970b334d6a4", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r1, @ANYBLOB="000000000000ee5e0c2acd6e0000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f00000002c0)=0xc5, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r5 = socket(0x8, 0x3, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000700)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r5) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x24000000}, 0x440d0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r3) recvmmsg(r3, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000780)=""/211, 0xd3}, {&(0x7f0000000200)=""/129, 0x81}, {&(0x7f0000001640)=""/4089, 0xff9}, {&(0x7f0000000600)=""/232, 0xe8}, {&(0x7f00000000c0)=""/132, 0x84}, {&(0x7f0000000440)=""/110, 0x6e}, {&(0x7f00000002c0)=""/115, 0x73}], 0x7}, 0xe}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x2020, 0x0) (async) recvmmsg(r3, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000780)=""/211, 0xd3}, {&(0x7f0000000200)=""/129, 0x81}, {&(0x7f0000001640)=""/4089, 0xff9}, {&(0x7f0000000600)=""/232, 0xe8}, {&(0x7f00000000c0)=""/132, 0x84}, {&(0x7f0000000440)=""/110, 0x6e}, {&(0x7f00000002c0)=""/115, 0x73}], 0x7}, 0xe}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x2020, 0x0) recvmmsg(r0, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005a40)=""/25, 0x19}, 0x5}, {{&(0x7f0000000340)=@vsock, 0x80, &(0x7f0000003980)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000003640)=""/103, 0x67}, {&(0x7f00000036c0)=""/84, 0x54}, {&(0x7f0000003740)=""/133, 0x85}, {&(0x7f0000003800)=""/152, 0x98}, {&(0x7f00000038c0)=""/177, 0xb1}], 0x6, &(0x7f0000003a00)=""/103, 0x67}, 0x6}], 0x2, 0x45833af92e4b39ff, 0x0) 5.707215179s ago: executing program 5 (id=6197): unshare(0x6a040000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x5e41}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8881}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xca71d000) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r5 = socket$inet(0x2, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) write$tun(r4, 0x0, 0x4a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000711226000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a00ff"], 0x5c}}, 0x0) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x1000}, 0xc) r7 = socket$rds(0x15, 0x5, 0x0) r8 = socket(0x15, 0x5, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x4084) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001180), r8) sendmsg$ETHTOOL_MSG_RINGS_SET(r8, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, r10, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x2}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xfffffff8}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x5a1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x1) ioctl$BTRFS_IOC_ADD_DEV(r7, 0x5000940a, &(0x7f0000000140)={{r7}, "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"}) 3.553881228s ago: executing program 1 (id=6202): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01300134b1ff"}) (async, rerun: 64) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="170900000000000000010100000008000900040000001400200000000000000000000000ffffac1404bb0500070000000000060002000100000008000a000400000014001f"], 0x5c}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_hsr\x00'}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x64000) sendfile(r1, r2, 0x0, 0xffffffff000) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r5, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x0, 0x0, 0x1}) (async, rerun: 64) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) (rerun: 64) 3.229755731s ago: executing program 3 (id=6203): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000360, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r3, 0x5) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r4, 0x80000003) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x1, 0x0, 0x6, 0xf0, 0xdb5}, 0x20) (async, rerun: 32) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0x5}}}}}}, 0x0) (async, rerun: 32) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r5, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) (async, rerun: 64) listen(r5, 0x80000003) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x51, 0xfe, r8}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 3.1938958s ago: executing program 1 (id=6204): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x4, 0xfffffffe, 0xffffffc4, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1002, 0x0, 0x2}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffe0, 0xffff}, {0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @link_local}, @TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0x0, 0xff, 0x0, 0x1fe]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x80}, 0x1, 0x0, 0x0, 0x4004044}, 0x0) 2.734301699s ago: executing program 3 (id=6205): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0xa0}}, 0x0) 2.461629676s ago: executing program 0 (id=6206): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {}, {0xa, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x7}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1fb2f}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x3}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x1, 0x3}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8044}, 0x4040050) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@fwd={0x7}, @fwd={0x8}, @var={0xb, 0x0, 0x0, 0xe, 0x2, 0x2}]}, {0x0, [0x30, 0x30, 0x30, 0x10]}}, &(0x7f00000000c0)=""/224, 0x46, 0xe0, 0x1, 0x80000000, 0x10000}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r3}) r5 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r6 = socket(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f00000019c0)="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", 0xb1}, {&(0x7f0000000600)="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", 0x92}, {&(0x7f0000001b00)="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", 0x1000}], 0x14) r7 = socket(0x2, 0x805, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000001400), &(0x7f0000001440)=0x10) getsockopt$inet_mptcp_buf(r7, 0x11c, 0x2, &(0x7f0000003180)=""/4096, &(0x7f0000004180)=0x1000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @remote}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000180)={r8, 0x2, 0x6, 0x80000000, 0xa18c, 0x8}, &(0x7f00000001c0)=0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000001480)={r8, @in6={{0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00', 0x7}}, 0x1, 0x6, 0x2000, 0xfffffff7, 0x1, 0x78, 0xb}, &(0x7f0000001540)=0x9c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000540)={r9, 0x6, 0x0, 0x4, 0x200000}, 0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000003c0)={r8, 0x80, 0x20}, 0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000240)={@rand_addr, 0x0}, &(0x7f0000000280)=0x14) listen(r3, 0x0) connect$can_j1939(r4, &(0x7f0000000380)={0x1d, r10, 0x0, {0x2}, 0xfd}, 0x18) 2.421613177s ago: executing program 3 (id=6207): socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x9, 0x2, 0x10000000) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000940)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000640)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x4) recvmsg(r2, &(0x7f00000008c0)={&(0x7f0000000440)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/249, 0xf9}, {&(0x7f0000000600)=""/5, 0x5}, {&(0x7f00000006c0)=""/147, 0x93}, {&(0x7f0000000780)=""/128, 0x80}, {&(0x7f0000000800)=""/2, 0x2}], 0x5}, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x1cba8c72}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x177ffb498171ed1, 0x8040010) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) close(0x3) r5 = socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x11, &(0x7f0000001540)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) close(0x3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) 2.190771482s ago: executing program 1 (id=6208): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c20000d2745d8bdec59e5400bbbbbbbbbbbb0800450000300000000000019078ac1e0001ac1414aa030490781200183f2500000000000000000100007f0000017f000001"], 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000000c0002800500010000000000080007400000000008000840000000013c000e802c000180140003"], 0xd8}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000500)=[@in6={0xa, 0x4e23, 0x77, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000340)=[@iv={0x0, 0x117, 0x2, 0x0, "7c66b74a866184c3f2174e22d76c97f77645bc6980ed35b0359123e7299a67ddf6d5f40f24a995bc211879c47836d55e1a9035dcac01c353041ae4dce16a9f650fc3057b3727d706"}, @assoc={0x0, 0x117, 0x4, 0x1}], 0x1, 0x4a1ab295fe1da1cb}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/97, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0xfffffffffffffefd}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f00000002c0)={r6, @in={{0x2, 0x4e21, @rand_addr=0x64010100}}, 0x101, 0x6, 0xffffff67, 0x1abd, 0x2}, &(0x7f0000000380)=0x98) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={r4, @in6={{0xa, 0x4e22, 0x80000001, @empty, 0x1}}, 0x3, 0xe09}, 0x90) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) 2.006599646s ago: executing program 3 (id=6209): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000100)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0xfffe, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@generic={0x1, 0x1, 0x1, 0x37}]}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 1.9227311s ago: executing program 0 (id=6210): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a31000000000900030073797a320000000008000a00000000046c000000060a010400000000000000000a0000000900010073797a31000000000900020073797a3100000000400004803c0001800e000100696d6d6564696174650000002800028008000100000000001c0002801800028008000100fffffffd090002"], 0x11c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5411, &(0x7f00000007c0)) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) 1.79826192s ago: executing program 1 (id=6211): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff, 0x0, 0x400}, 0x600}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_vlan={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x68, 0x4, 0x88a8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x50}}, 0x0) 1.502033369s ago: executing program 1 (id=6212): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@mptcp=@mp_join={0x1e, 0x0, 0x9}, @timestamp={0x5, 0x2, 0x0, 0xb00}, @generic={0x0, 0xffffffffffffff2c, "d58838000391"}]}}}}}}, 0xfd6c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', r2}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000900)=ANY=[], 0x32600) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000b04fcff", 0x58}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r3}, 0x8) ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000000300)) 1.468078364s ago: executing program 0 (id=6213): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018090000", @ANYRES32=r0, @ANYRES64=0x0], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc1842, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000200)={0x40000000}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e22, @local}, 0x83, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='syzkaller0\x00', 0x9, 0xffffffffffffffff, 0x4}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x800) setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmsg$OSF_MSG_ADD(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x1dc8b08251aa3334) 1.137754834s ago: executing program 3 (id=6214): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des)\x00'}, 0x58) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r1) r3 = socket$kcm(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x4030582a, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00', 0x0, 0x20, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000100)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x0, 0x1}}, 0x44) r6 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8982, &(0x7f0000000340)={0x6, 'wg2\x00', {0xfffffffe}, 0x6}) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000200)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x1, 0x1}}, 0x44) r7 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r7, 0x0, 0x48f, &(0x7f0000000040)={0x89, @rand_addr, 0xfffe, 0x0, 'wrr\x00', 0x0, 0x0, 0x800000}, 0x2c) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a001000000002", 0x29}], 0x1}, 0x20040900) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0xdc, 0x8, 0x8, 0x604}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, &(0x7f0000000300)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000180)=0x480, 0x4) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r9, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x40002}, 0x4805) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)={0x50, r2, 0x1, 0x70bd25, 0x2, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="e64f2be8d3e7a2aa", 0x8) 829.769961ms ago: executing program 1 (id=6215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000740)=0x8) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r7, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0xa) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'vxcan1\x00', 0x1}, 0x18) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000140)={0x6, {{0x2, 0x4e24, @rand_addr=0x64010100}}}, 0x88) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x54, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa}, @TCA_FLOWER_INDEV={0x14, 0x2, 'geneve1\x00'}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010010000000000000000300000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c000480380001800e000100696d6d656469617465000000240002800800014000000000180002801400028008000180fffffffc88000340000000040900010073797a30"], 0xd8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000740)=0x8) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) (async) connect$inet(r7, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0xa) (async) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'vxcan1\x00', 0x1}, 0x18) (async) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000140)={0x6, {{0x2, 0x4e24, @rand_addr=0x64010100}}}, 0x88) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x54, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa}, @TCA_FLOWER_INDEV={0x14, 0x2, 'geneve1\x00'}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010010000000000000000300000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c000480380001800e000100696d6d656469617465000000240002800800014000000000180002801400028008000180fffffffc88000340000000040900010073797a30"], 0xd8}}, 0x0) (async) 782.173353ms ago: executing program 5 (id=6216): socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x48}, 0x94) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)=""/4136, 0x1028}], 0x1}, 0x10100) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1728}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, 0x38) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8085}, 0x40) socket$xdp(0x2c, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x40) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) r7 = socket(0x1e, 0x4, 0x0) ioctl$FICLONE(r7, 0x40049409, r6) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r7], 0x14) 336.507086ms ago: executing program 5 (id=6217): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x30, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20040000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1703, 0x1081b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 0s ago: executing program 3 (id=6218): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x8000000, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100030a00000000000000000000000300050000000000020000000000000000000000000000000200100000000000ffffffff00000000030006000000000002"], 0x50}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket(0x10, 0x3, 0x0) (rerun: 32) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r2], 0x20}}, 0x0) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x128, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x59a}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x276}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x41e}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x8be3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffffa}, {0x6, 0x11, 0xfff}}]}, 0x128}, 0x1, 0x0, 0x0, 0x4048844}, 0x8000) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newlink={0x348, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42000, 0x1002}, [@IFLA_VFINFO_LIST={0x328, 0x16, 0x0, 0x1, [{0x88, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0xc, 0x7fffffff}}, @IFLA_VF_MAC={0x28, 0x1, {0x4, @random="ac00abf6ad84"}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x4, 0x5}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7, 0x10001}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x83, 0x8}}, @IFLA_VF_RATE={0x10, 0x6, {0x6, 0x2, 0x8}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x10000, 0x9}}, @IFLA_VF_VLAN={0x10, 0x2, {0x5, 0x28d, 0x4}}]}, {0xc4, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x6, @local}}, @IFLA_VF_MAC={0x28, 0x1, {0x2}}, @IFLA_VF_MAC={0x28, 0x1, {0x9, @broadcast}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x48e8, 0x8}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x6, 0x4}}, @IFLA_VF_MAC={0x28, 0x1, {0x2, @remote}}]}, {0x80, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x8530, 0xa14}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xddd, 0x4}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x9, 0x7}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x2}}, @IFLA_VF_TRUST={0xc, 0x9, {0x6, 0x9}}, @IFLA_VF_TRUST={0xc, 0x9, {0x5, 0x1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x2, 0x5}}, @IFLA_VF_VLAN={0x10, 0x2, {0x9, 0x44f, 0x7}}, @IFLA_VF_RATE={0x10, 0x6, {0x5, 0x2, 0x1c}}]}, {0x54, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x4, 0x2}}, @IFLA_VF_MAC={0x28, 0x1, {0x8e0a, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x4a, 0x9}}, @IFLA_VF_VLAN={0x10, 0x2, {0x3, 0x8b4, 0x5}}]}, {0x90, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x0, 0x3}}, @IFLA_VF_MAC={0x28, 0x1, {0x1b8d, @broadcast}}, @IFLA_VF_VLAN={0x10, 0x2, {0x5, 0xf2a}}, @IFLA_VF_TRUST={0xc, 0x9, {0x0, 0xff}}, @IFLA_VF_RATE={0x10, 0x6, {0x1, 0x2, 0x6}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x6, 0xd38}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x10}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x701a, 0x80000001}}]}, {0x74, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x8, 0x3}}, @IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7, 0x281, 0xd, 0x8100}}, {0x14, 0x1, {0xff, 0x59c, 0xfffffff9, 0x88a8}}, {0x14, 0x1, {0x7, 0xd1f, 0x5, 0x9a8}}, {0x14, 0x1, {0x352f4858, 0x1934, 0x1, 0x8100}}]}, @IFLA_VF_VLAN={0x10, 0x2, {0x200, 0xb04, 0x2}}]}]}]}, 0x348}, 0x1, 0x0, 0x0, 0x40680c5}, 0x0) kernel console output (not intermixed with test programs): _wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 664.935222][T24140] veth1_vlan: left promiscuous mode [ 664.944354][T24140] veth0_vlan: left promiscuous mode [ 664.951869][T24140] veth0_vlan: entered promiscuous mode [ 664.963512][T24140] veth1_vlan: entered promiscuous mode [ 664.985144][T24140] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 664.994844][T24140] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 665.004379][T24140] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 665.014756][T24140] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 665.029980][T24140] ieee802154 phy0 wpan0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 665.067746][T24140] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 665.080000][T24140] 8021q: adding VLAN 0 to HW filter on device bond1 [ 665.102614][T24140] 8021q: adding VLAN 0 to HW filter on device bond2 [ 665.207467][T13792] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.209071][T11675] syz2: Port: 1 Link ACTIVE [ 665.327511][ T1149] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.370758][ T1149] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.394887][ T1149] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.667935][T24187] tipc: Enabled bearer , priority 0 [ 665.883315][ T6688] IPVS: starting estimator thread 0... [ 665.915633][T24191] IPVS: dh: TCP 127.0.0.1:21 - no destination available [ 666.000597][T24193] IPVS: using max 22 ests per chain, 52800 per kthread [ 666.087845][T24196] netlink: Conntrack attr has 8 unknown bytes [ 666.106784][T24196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 666.274609][T24202] lo: entered allmulticast mode [ 666.310674][T24201] lo: left allmulticast mode [ 666.714694][ T10] tipc: Node number set to 3737469022 [ 666.915080][T24229] __nla_validate_parse: 15 callbacks suppressed [ 666.915104][T24229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4568'. [ 667.484174][T24254] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4573'. [ 667.910698][T24269] netlink: 'syz.0.4578': attribute type 11 has an invalid length. [ 668.088100][T22015] block nbd64: NBD_DISCONNECT [ 668.202158][T24280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4581'. [ 668.368691][T24290] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.562474][T16592] block nbd7: Possible stuck request ffff888027680000: control (read@0,1024B). Runtime 150 seconds [ 670.573551][T16592] block nbd7: Possible stuck request ffff8880276801c0: control (read@1024,1024B). Runtime 150 seconds [ 670.585189][T16592] block nbd7: Possible stuck request ffff888027680380: control (read@2048,1024B). Runtime 150 seconds [ 670.596603][T16592] block nbd7: Possible stuck request ffff888027680540: control (read@3072,1024B). Runtime 150 seconds [ 670.628439][T24311] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4584'. [ 670.721813][T24313] netlink: 'syz.4.4586': attribute type 11 has an invalid length. [ 670.760447][T24313] netlink: 4320 bytes leftover after parsing attributes in process `syz.4.4586'. [ 671.330801][T24340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4595'. [ 671.350088][T24346] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4594'. [ 671.368342][T24346] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4594'. [ 671.394032][T24346] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4594'. [ 671.413375][T24346] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 671.456111][T24350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4598'. [ 671.692316][T24364] veth0: entered promiscuous mode [ 671.770602][T24361] veth0: left promiscuous mode [ 672.373811][T24391] tipc: New replicast peer: 172.20.20.170 [ 672.382333][T24391] tipc: Enabled bearer , priority 10 [ 672.711117][ T5631] block nbd0: Receive control failed (result -32) [ 672.736981][T24421] bond3: entered promiscuous mode [ 672.742240][T24421] bond3: entered allmulticast mode [ 672.748848][T24421] 8021q: adding VLAN 0 to HW filter on device bond3 [ 672.893780][T24437] xt_hashlimit: invalid rate [ 673.102042][T24451] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4622'. [ 673.122753][T24451] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4622'. [ 673.770753][ T10] tipc: Node number set to 2050114162 [ 673.875543][T24456] netlink: 'syz.2.4623': attribute type 2 has an invalid length. [ 673.884472][T24456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4623'. [ 673.910561][T24456] ¿: entered promiscuous mode [ 674.068858][T24469] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 674.232204][T24472] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4629'. [ 674.274314][T24472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4629'. [ 674.279063][T24473] netlink: 'syz.4.4628': attribute type 10 has an invalid length. [ 674.314611][T24473] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4628'. [ 674.354946][T24477] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4628'. [ 674.542889][T24485] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4632'. [ 674.637898][T24487] syzkaller0: entered promiscuous mode [ 674.658238][T24487] syzkaller0: entered allmulticast mode [ 674.704660][ T608] IPVS: starting estimator thread 0... [ 674.816311][T24491] IPVS: using max 28 ests per chain, 67200 per kthread [ 675.363716][T24503] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4636'. [ 675.434681][T24502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4636'. [ 675.680918][T24515] xt_connbytes: Forcing CT accounting to be enabled [ 675.726276][T24515] lo: Caught tx_queue_len zero misconfig [ 675.740324][T24515] netlink: 'syz.0.4640': attribute type 6 has an invalid length. [ 675.821620][T24527] netlink: 'syz.2.4643': attribute type 1 has an invalid length. [ 675.933202][T24537] syzkaller1: entered promiscuous mode [ 675.942334][T24537] syzkaller1: entered allmulticast mode [ 676.114212][T24544] syzkaller0: entered promiscuous mode [ 676.130839][T24544] syzkaller0: entered allmulticast mode [ 676.165561][T24551] xt_CT: You must specify a L4 protocol and not use inversions on it [ 677.403883][T24601] syzkaller1: entered promiscuous mode [ 677.423464][T24601] syzkaller1: entered allmulticast mode [ 677.677915][T24616] netlink: 'syz.1.4665': attribute type 2 has an invalid length. [ 677.709550][T24620] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 677.709836][T24616] ´: entered promiscuous mode [ 677.839344][T24623] netlink: 'syz.0.4664': attribute type 6 has an invalid length. [ 677.867592][T24623] netlink: 'syz.0.4664': attribute type 6 has an invalid length. [ 677.868520][ T6688] netdevsim netdevsim0 €Â: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.904016][ T6688] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.936316][ T608] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.955863][ T608] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.108079][T24661] __nla_validate_parse: 13 callbacks suppressed [ 678.108100][T24661] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4675'. [ 678.173719][T24659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4674'. [ 678.184119][T24659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4674'. [ 678.539556][T24620] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 681.323180][T24682] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4680'. [ 681.347956][T24682] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4680'. [ 681.369048][T24682] tipc: Invalid UDP bearer configuration [ 681.369144][T24682] tipc: Enabling of bearer rejected, failed to enable media [ 681.458378][T24692] tipc: Failed to remove unknown binding: 66,0,0/3737469022:185567374/185567376 [ 681.472688][T24692] tipc: Failed to remove unknown binding: 66,0,0/3737469022:185567374/185567375 [ 681.493718][T24692] tipc: Failed to remove unknown binding: 66,0,0/3737469022:185567374/185567376 [ 681.524109][T24692] tipc: Failed to remove unknown binding: 66,0,0/3737469022:185567374/185567375 [ 681.569093][T24702] netlink: 'syz.0.4683': attribute type 21 has an invalid length. [ 681.693650][T24710] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4686'. [ 681.765010][T24716] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4689'. [ 681.800096][T24716] vxcan1: Caught tx_queue_len zero misconfig [ 682.219855][T24733] netlink: 'syz.2.4695': attribute type 2 has an invalid length. [ 682.280200][T24733] netlink: 'syz.2.4695': attribute type 2 has an invalid length. [ 682.318048][T24733] netlink: 'syz.2.4695': attribute type 2 has an invalid length. [ 682.331480][T24745] netlink: 34 bytes leftover after parsing attributes in process `syz.3.4697'. [ 682.354572][T24733] netlink: 'syz.2.4695': attribute type 1 has an invalid length. [ 682.466387][T24753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4699'. [ 682.567936][T24757] syzkaller0: entered promiscuous mode [ 682.590036][T24757] syzkaller0: entered allmulticast mode [ 682.839272][T24776] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4703'. [ 683.102943][ T6688] tipc: Subscription rejected, illegal request [ 683.194617][T24788] __nla_validate_parse: 2 callbacks suppressed [ 683.194636][T24788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4707'. [ 683.223944][T24788] nbd: must specify at least one socket [ 683.806014][T24819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4713'. [ 683.987238][T24818] syzkaller0: entered promiscuous mode [ 684.012949][T24818] syzkaller0: entered allmulticast mode [ 684.215648][T24836] netlink: 'syz.4.4718': attribute type 13 has an invalid length. [ 684.595306][T24845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4718'. [ 684.615140][T24845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4718'. [ 687.123255][T24829] syzkaller0: entered promiscuous mode [ 687.129216][T24829] syzkaller0: entered allmulticast mode [ 687.284602][T24850] netlink: 'syz.2.4720': attribute type 1 has an invalid length. [ 687.354543][T24854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4720'. [ 687.479161][T24850] 8021q: adding VLAN 0 to HW filter on device bond4 [ 687.599233][T24864] bond4: (slave gretap2): making interface the new active one [ 687.641102][T24864] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 687.820157][T24866] xt_hashlimit: size too large, truncated to 1048576 [ 687.911823][T24891] block nbd0: reconnected socket [ 687.925953][T24891] nbd: socks must be embedded in a SOCK_ITEM attr [ 687.955679][ T5631] block nbd0: Receive control failed (result -32) [ 688.421447][T24898] IPVS: length: 239 != 8 [ 688.597739][T24901] 8021q: VLANs not supported on ip6_vti0 [ 688.606043][T24904] netlink: 'syz.4.4735': attribute type 1 has an invalid length. [ 688.623373][T24904] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4735'. [ 688.780957][T24910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4737'. [ 689.203415][T24918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4740'. [ 689.464083][T24939] syzkaller0: entered promiscuous mode [ 689.508907][T24939] syzkaller0: entered allmulticast mode [ 692.600962][T24963] syz_tun: entered allmulticast mode [ 692.637291][T24973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4747'. [ 692.740397][T24978] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 692.789995][T24986] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4752'. [ 692.830949][T24989] netlink: 'syz.0.4753': attribute type 11 has an invalid length. [ 692.967930][ T1149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.281058][T25021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4762'. [ 693.304288][T25021] openvswitch: netlink: Flow actions attr not present in new flow. [ 693.374973][T25025] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4760'. [ 693.704405][T25048] veth3: entered promiscuous mode [ 693.720791][T25048] veth3: entered allmulticast mode [ 693.737044][T25048] team0: Device veth3 is up. Set it down before adding it as a team port [ 693.768629][T25049] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4768'. [ 693.811428][T25042] IPVS: Unknown mcast interface: netdevsim0 [ 693.826107][T25053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 693.872626][T25050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 693.894373][T25048] netlink: 'syz.4.4768': attribute type 2 has an invalid length. [ 693.904277][T25048] netlink: 'syz.4.4768': attribute type 2 has an invalid length. [ 694.040981][T25063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4773'. [ 694.073578][T25062] tipc: Enabled bearer , priority 0 [ 694.181542][T25062] syzkaller0: entered promiscuous mode [ 694.195948][T25062] syzkaller0: entered allmulticast mode [ 694.206377][T25062] tipc: Resetting bearer [ 694.231023][T25060] tipc: Resetting bearer [ 694.550740][T25079] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4777'. [ 694.741337][T25090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4777'. [ 697.620220][T25060] tipc: Disabling bearer [ 697.812724][T25106] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4783'. [ 697.834400][T25106] netlink: 'syz.2.4783': attribute type 7 has an invalid length. [ 697.855199][T25106] netlink: 'syz.2.4783': attribute type 8 has an invalid length. [ 697.872040][T25106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4783'. [ 697.890478][T25109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4782'. [ 697.934931][T25107] vlan2: entered promiscuous mode [ 697.945589][T25107] bridge0: entered promiscuous mode [ 698.203872][T25123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4787'. [ 698.324099][T25131] netlink: 4356 bytes leftover after parsing attributes in process `syz.1.4791'. [ 698.377799][T25133] veth1_to_batadv: Caught tx_queue_len zero misconfig [ 698.579025][T25145] tipc: Enabled bearer , priority 10 [ 698.707733][T25155] netlink: 'syz.1.4797': attribute type 1 has an invalid length. [ 698.736973][T25157] sctp: [Deprecated]: syz.0.4799 (pid 25157) Use of struct sctp_assoc_value in delayed_ack socket option. [ 698.736973][T25157] Use struct sctp_sack_info instead [ 698.795289][T25160] bond5: (slave geneve5): making interface the new active one [ 698.808065][T25160] bond5: (slave geneve5): Enslaving as an active interface with an up link [ 698.827823][ T6688] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 698.862292][ T6688] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 698.868410][T25155] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4797'. [ 698.882723][ T6688] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 698.904062][T25155] 8021q: adding VLAN 0 to HW filter on device bond5 [ 698.937830][T25155] tipc: Resetting bearer [ 699.067032][T12551] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 699.221044][T25177] bridge0: port 3(syz_tun) entered disabled state [ 699.238067][T25177] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.333972][T25177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 699.353385][T25177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 699.546017][ T608] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 699.568489][ T608] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.591288][ T608] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 699.602045][ T608] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.645954][ T6688] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 699.657634][ T6688] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.680611][ T6688] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 699.716533][ T6688] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.736415][ T8443] tipc: Node number set to 3905682181 [ 699.799635][T25197] netlink: 'syz.4.4811': attribute type 1 has an invalid length. [ 699.816294][T25197] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4811'. [ 699.826669][T25197] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4811'. [ 700.071076][T25213] geneve0: entered promiscuous mode [ 700.161082][T25217] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4818'. [ 700.171810][T25217] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4818'. [ 700.207592][T25215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4817'. [ 700.498649][T25233] xt_socket: unknown flags 0x4c [ 700.636993][T16592] block nbd7: Possible stuck request ffff888027680000: control (read@0,1024B). Runtime 180 seconds [ 700.648123][T16592] block nbd7: Possible stuck request ffff8880276801c0: control (read@1024,1024B). Runtime 180 seconds [ 700.659660][T16592] block nbd7: Possible stuck request ffff888027680380: control (read@2048,1024B). Runtime 180 seconds [ 700.671254][T16592] block nbd7: Possible stuck request ffff888027680540: control (read@3072,1024B). Runtime 180 seconds [ 701.256690][T25257] netlink: 'syz.2.4830': attribute type 10 has an invalid length. [ 701.332092][T25257] syz_tun: entered promiscuous mode [ 701.350906][T25260] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4831'. [ 701.518609][T25268] Bluetooth: MGMT ver 1.23 [ 701.622863][T25269] ip6tnl2: entered allmulticast mode [ 702.090034][T25289] netlink: 'syz.0.4839': attribute type 1 has an invalid length. [ 702.126385][ T1149] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 702.162365][ T1149] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 702.170453][ T10] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 702.455976][ T10] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 702.519791][T25304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4843'. [ 702.554974][T25306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4843'. [ 702.798805][T25318] lo: Caught tx_queue_len zero misconfig [ 702.897692][T25331] tipc: Enabled bearer , priority 0 [ 702.975432][T25338] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 703.008399][T25338] netlink: 'syz.2.4851': attribute type 3 has an invalid length. [ 703.050925][T25332] syzkaller0: entered promiscuous mode [ 703.056845][T25332] syzkaller0: entered allmulticast mode [ 703.063199][T25332] tipc: Resetting bearer [ 703.143764][T25332] tipc: Resetting bearer [ 703.207282][ T10] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 703.339507][T25357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4856'. [ 703.354395][T25357] netlink: 'syz.3.4856': attribute type 10 has an invalid length. [ 705.724552][ T4976] udevd[4976]: worker [17301] /devices/virtual/block/nbd7 timeout; kill it [ 705.734854][ T4976] udevd[4976]: seq 24048 '/devices/virtual/block/nbd7' killed [ 706.224154][T25332] tipc: Disabling bearer [ 706.244131][T25357] geneve3: entered promiscuous mode [ 706.249744][T25357] geneve3: entered allmulticast mode [ 706.265319][T25373] ip6tnl3: entered allmulticast mode [ 706.316315][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 706.403955][T25378] x_tables: duplicate underflow at hook 2 [ 706.439569][T25381] __nla_validate_parse: 2 callbacks suppressed [ 706.439589][T25381] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4864'. [ 706.457082][T25378] x_tables: duplicate underflow at hook 2 [ 706.501233][T25385] netlink: 'syz.4.4865': attribute type 1 has an invalid length. [ 706.537474][T25385] bond3: entered promiscuous mode [ 706.543382][T25385] 8021q: adding VLAN 0 to HW filter on device bond3 [ 706.573725][T25385] vlan2: entered allmulticast mode [ 706.579257][T25385] bond3: entered allmulticast mode [ 706.671153][T25385] bond3: (slave bridge1): making interface the new active one [ 706.702462][T25385] bridge1: entered promiscuous mode [ 706.711505][T25385] bridge1: entered allmulticast mode [ 706.734568][T25385] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 706.769007][T25400] netlink: Failed to add  helper -22 [ 706.793309][T25400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 706.861817][T25409] netlink: 'syz.2.4871': attribute type 1 has an invalid length. [ 706.891280][T25405] netlink: Failed to add  helper -22 [ 706.901962][T25409] netlink: 'syz.2.4871': attribute type 2 has an invalid length. [ 706.911824][T25405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 707.013807][T25412] netlink: 'syz.4.4872': attribute type 1 has an invalid length. [ 707.116397][T25412] 8021q: adding VLAN 0 to HW filter on device bond4 [ 707.134273][T25403] syzkaller1: entered promiscuous mode [ 707.153533][T25403] syzkaller1: entered allmulticast mode [ 707.188214][T13796] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 707.209735][T13796] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 707.217758][ T29] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 707.361505][T25412] bond4: (slave geneve2): making interface the new active one [ 707.385328][T25412] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 707.556429][T25452] netlink: 'syz.4.4884': attribute type 1 has an invalid length. [ 707.585550][T25452] bond5: entered promiscuous mode [ 707.591437][T25452] 8021q: adding VLAN 0 to HW filter on device bond5 [ 707.626992][ T8443] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 707.696089][ T29] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 707.734333][T25452] netlink: 'syz.4.4884': attribute type 2 has an invalid length. [ 707.815337][T25452] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4884'. [ 707.852402][T25466] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4886'. [ 708.139046][T25487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4893'. [ 708.161737][T25481] netlink: 'syz.4.4892': attribute type 1 has an invalid length. [ 708.172357][T25487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4893'. [ 708.185828][T25481] netlink: 756 bytes leftover after parsing attributes in process `syz.4.4892'. [ 708.430202][T25497] ip_tables: iptables: counters copy to user failed while replacing table [ 708.477323][T25505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4896'. [ 708.505360][T25505] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4896'. [ 708.556460][T25508] netlink: 'syz.4.4897': attribute type 1 has an invalid length. [ 708.635675][T25510] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4897'. [ 708.702683][T25508] tipc: Resetting bearer [ 708.729830][T25512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 708.839043][T25516] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4900'. [ 708.970985][ T29] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 708.979936][ T29] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 709.131158][T25533] tipc: Enabling of bearer rejected, failed to enable media [ 709.256234][T25538] netlink: 'syz.1.4903': attribute type 1 has an invalid length. [ 709.360806][T25546] netlink: 'syz.0.4905': attribute type 12 has an invalid length. [ 709.524352][T25554] veth0_macvtap: entered allmulticast mode [ 709.544770][T25554] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 709.575695][T25557] syzkaller1: entered promiscuous mode [ 709.585992][T25557] syzkaller1: entered allmulticast mode [ 709.636377][ T8443] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 709.785625][T25571] netlink: 'syz.3.4912': attribute type 5 has an invalid length. [ 709.813038][T25571] netlink: 'syz.3.4912': attribute type 9 has an invalid length. [ 709.838572][ T8443] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 709.882452][T25577] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 710.364491][T25605] netlink: 'syz.3.4921': attribute type 3 has an invalid length. [ 710.420749][T25607] block nbd0: Unsupported socket: should be TCP or UNIX. [ 710.449152][T25608] netlink: 'syz.1.4923': attribute type 1 has an invalid length. [ 710.457919][T25608] netlink: 'syz.1.4923': attribute type 1 has an invalid length. [ 710.466726][T25607] netlink: 'syz.1.4923': attribute type 1 has an invalid length. [ 710.827221][T25625] bond8: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 710.847922][T25625] bond8 (unregistering): Released all slaves [ 711.088597][T25638] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 711.196275][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 712.139124][T25659] syzkaller0: entered promiscuous mode [ 712.151417][T25659] syzkaller0: entered allmulticast mode [ 712.200999][T25659] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 712.340275][T25674] __nla_validate_parse: 6 callbacks suppressed [ 712.340296][T25674] netlink: 4416 bytes leftover after parsing attributes in process `syz.3.4942'. [ 712.399590][T25676] veth0_to_batadv: entered allmulticast mode [ 712.908623][T25702] Unsupported ieee802154 address type: 0 [ 713.038545][T25709] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4953'. [ 713.065251][T25709] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4953'. [ 713.355692][T25730] validate_nla: 3 callbacks suppressed [ 713.369603][T25730] netlink: 'syz.3.4961': attribute type 10 has an invalid length. [ 713.387927][T25730] team0 (unregistering): Port device team_slave_0 removed [ 713.400107][T25730] team0 (unregistering): Port device team_slave_1 removed [ 713.418611][T25730] team0 (unregistering): Port device netdevsim1 removed [ 713.434396][T25735] netlink: 'syz.2.4960': attribute type 4 has an invalid length. [ 713.447829][T25729] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4959'. [ 713.463448][T25735] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4960'. [ 713.493934][T25732] can: request_module (can-proto-0) failed. [ 713.503453][T25730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4961'. [ 713.521652][T25729] syzkaller0: create flow: hash 1724030262 index 0 [ 713.594866][T25741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4962'. [ 713.638001][T25729] syzkaller0 (unregistered): delete flow: hash 1724030262 index 0 [ 713.968308][T25761] netlink: 'syz.0.4970': attribute type 1 has an invalid length. [ 714.716018][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 715.017831][T25789] netlink: 'syz.4.4975': attribute type 1 has an invalid length. [ 715.028734][T25789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 717.220735][T25802] veth3: entered allmulticast mode [ 717.253914][T25806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4981'. [ 717.273308][T25805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4981'. [ 717.667730][T25836] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4989'. [ 717.739980][T25841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4989'. [ 717.853044][T25848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4990'. [ 717.914605][T25850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4990'. [ 717.957480][T25850] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4990'. [ 718.023091][T25848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4990'. [ 718.153461][T25850] veth5: entered allmulticast mode [ 718.203711][T25848] bond2 (unregistering): Released all slaves [ 718.264662][T25865] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4995'. [ 718.343645][T25862] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4994'. [ 718.428104][T25864] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4995'. [ 718.437602][T25871] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4996'. [ 718.611027][T25877] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 718.877906][T25892] gre0: entered promiscuous mode [ 718.896381][T25892] gre0: entered allmulticast mode [ 719.057633][T25905] openvswitch: netlink: IP tunnel dst address not specified [ 719.195969][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 719.367429][T25921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 719.752655][T25939] netlink: 'syz.3.5019': attribute type 3 has an invalid length. [ 719.973320][T25949] netlink: 'syz.4.5022': attribute type 17 has an invalid length. [ 719.986184][T25949] gre0: left promiscuous mode [ 719.991125][T25949] gre0: left allmulticast mode [ 720.014799][T25950] tipc: Enabling of bearer rejected, failed to enable media [ 720.536562][T25974] v: renamed from veth0_vlan [ 721.006071][T25993] netlink: 'syz.1.5038': attribute type 1 has an invalid length. [ 721.022171][T25994] bridge_slave_1: mtu less than device minimum [ 721.193678][T25993] 8021q: adding VLAN 0 to HW filter on device bond8 [ 721.294968][T26012] netlink: Invalid conntrack timeout [ 721.310351][T26005] bond8: (slave geneve6): making interface the new active one [ 721.320420][T26012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 721.335174][T26005] bond8: (slave geneve6): Enslaving as an active interface with an up link [ 721.470635][T26016] veth0: entered promiscuous mode [ 721.889291][T26015] veth0: left promiscuous mode [ 721.952156][T26049] netlink: 'syz.2.5050': attribute type 2 has an invalid length. [ 722.040695][ T5271] v: left promiscuous mode [ 722.075316][T11675] v: entered promiscuous mode [ 722.194289][T26054] bond5 (unregistering): Released all slaves [ 722.585624][T26076] lo speed is unknown, defaulting to 1000 [ 722.605665][T26076] lo speed is unknown, defaulting to 1000 [ 722.631624][T26076] lo speed is unknown, defaulting to 1000 [ 722.674262][T26076] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 722.717953][T26076] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 722.766598][T26076] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 722.882735][T26105] __nla_validate_parse: 76 callbacks suppressed [ 722.882756][T26105] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5061'. [ 723.060936][T26105] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5061'. [ 723.084410][T26076] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 723.258603][T26114] tipc: Enabling of bearer rejected, failed to enable media [ 723.323120][T26076] lo speed is unknown, defaulting to 1000 [ 723.384120][T26118] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5065'. [ 723.388097][T26076] lo speed is unknown, defaulting to 1000 [ 723.562199][T26118] 8021q: adding VLAN 0 to HW filter on device bond6 [ 723.607791][T26121] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 723.634197][T26076] lo speed is unknown, defaulting to 1000 [ 723.682860][T26076] lo speed is unknown, defaulting to 1000 [ 723.739914][T26076] lo speed is unknown, defaulting to 1000 [ 723.794943][T26076] lo speed is unknown, defaulting to 1000 [ 723.827728][T26076] lo speed is unknown, defaulting to 1000 [ 723.923146][T26135] xt_hashlimit: size too large, truncated to 1048576 [ 724.183307][T26143] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.220330][T26143] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.281870][T26143] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.293250][T26143] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.341750][T26143] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.418170][T26143] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.471108][T26143] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.518366][T26143] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.538938][T26143] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.550186][T26143] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.595674][T26143] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.636608][T26143] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.690719][T26143] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.723433][T26143] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.762662][T26143] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.787444][T26143] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.804279][T26143] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.839994][T26143] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.864351][T26143] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.896129][T26143] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.937162][T26143] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.968767][T26170] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5073'. [ 724.978342][T26143] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.991623][T26143] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 725.081323][T26174] xt_TCPMSS: Only works on TCP SYN packets [ 725.160369][T26176] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5075'. [ 725.221041][T26178] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5076'. [ 725.236874][T26174] bridge2: entered promiscuous mode [ 725.242391][T26174] bridge2: entered allmulticast mode [ 725.254569][T26174] team0: Port device bridge2 added [ 725.260780][T26173] bridge0: port 3(team0) entered blocking state [ 725.268022][T26173] bridge0: port 3(team0) entered disabled state [ 725.288763][T26173] team0: entered allmulticast mode [ 725.298920][T26173] team_slave_0: entered allmulticast mode [ 725.316369][T26173] team_slave_1: entered allmulticast mode [ 725.322366][T26173] bridge0: entered allmulticast mode [ 725.336375][T26173] team0: left allmulticast mode [ 725.342276][T26173] team_slave_0: left allmulticast mode [ 725.348324][T26173] team_slave_1: left allmulticast mode [ 725.353930][T26173] bridge0: left allmulticast mode [ 725.521652][T26193] netlink: 'syz.3.5080': attribute type 10 has an invalid length. [ 725.563778][T26190] syzkaller0: entered promiscuous mode [ 725.578260][T26190] syzkaller0: entered allmulticast mode [ 725.638246][T26193] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 725.724866][T26196] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5080'. [ 726.209972][T26219] netlink: 'syz.2.5087': attribute type 6 has an invalid length. [ 726.237542][T26219] IPv6: NLM_F_CREATE should be specified when creating new route [ 726.863170][T26223] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.863879][T26252] xt_CT: You must specify a L4 protocol and not use inversions on it [ 726.870841][T26223] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.057305][T26223] A link change request failed with some changes committed already. Interface nlmon0 may have been left with an inconsistent configuration, please check. [ 727.099939][T26245] netlink: 'syz.3.5090': attribute type 6 has an invalid length. [ 727.261318][T26257] veth9: entered promiscuous mode [ 727.269851][T26257] veth9: entered allmulticast mode [ 727.278589][T26257] team0: Device veth9 is up. Set it down before adding it as a team port [ 727.329232][T26247] macvlan0: entered promiscuous mode [ 727.349029][T26252] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 727.393440][T26263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5096'. [ 727.597600][T26273] syzkaller0: entered promiscuous mode [ 727.610211][T26273] syzkaller0: entered allmulticast mode [ 727.636217][T26275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5098'. [ 727.651274][T26273] bridge0: port 3(bond0) entered blocking state [ 727.666085][T26273] bridge0: port 3(bond0) entered disabled state [ 727.684129][T26273] bond0: entered allmulticast mode [ 727.694070][T26273] bond_slave_0: entered allmulticast mode [ 727.704206][T26273] bond_slave_1: entered allmulticast mode [ 727.720238][T26273] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 727.806030][T26273] bond0: entered promiscuous mode [ 727.818835][T26273] bond_slave_0: entered promiscuous mode [ 727.856313][T26273] bond_slave_1: entered promiscuous mode [ 727.874445][T26273] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 727.897360][T26280] tipc: Enabled bearer , priority 0 [ 727.926611][T26272] tipc: Resetting bearer [ 727.986537][T26272] tipc: Disabling bearer [ 728.322427][T26309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5107'. [ 728.405260][T26313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5108'. [ 728.451332][T26316] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5110'. [ 728.545952][T26316] 0·: renamed from hsr0 (while UP) [ 728.571007][T26316] 0·: entered allmulticast mode [ 728.584992][T26316] hsr_slave_0: entered allmulticast mode [ 728.606418][T26316] hsr_slave_1: entered allmulticast mode [ 728.626387][T26316] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 728.772049][T26307] lo speed is unknown, defaulting to 1000 [ 728.925680][T26338] syzkaller0: entered promiscuous mode [ 728.948086][T26338] syzkaller0: entered allmulticast mode [ 729.294616][T26348] tipc: Enabling of bearer rejected, failed to enable media [ 729.481148][T26353] netlink: 232 bytes leftover after parsing attributes in process `syz.3.5119'. [ 729.644987][T26366] netlink: 'syz.2.5123': attribute type 12 has an invalid length. [ 729.654594][T26366] IPv6: NLM_F_CREATE should be specified when creating new route [ 729.880362][T26374] netlink: 'syz.4.5125': attribute type 10 has an invalid length. [ 729.906645][T26374] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5125'. [ 729.945638][T26374] team0: Device wg2 is of different type [ 729.980587][T26378] syzkaller0: entered promiscuous mode [ 730.003643][T26378] syzkaller0: entered allmulticast mode [ 730.203564][T26392] netlink: 'syz.4.5130': attribute type 1 has an invalid length. [ 730.361163][T26392] 8021q: adding VLAN 0 to HW filter on device bond7 [ 730.422427][T26409] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5135'. [ 730.682688][T26420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 730.698283][T26420] netlink: 'syz.3.5138': attribute type 2 has an invalid length. [ 730.725924][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 730.737970][T16592] block nbd7: Possible stuck request ffff888027680000: control (read@0,1024B). Runtime 210 seconds [ 730.748935][T16592] block nbd7: Possible stuck request ffff8880276801c0: control (read@1024,1024B). Runtime 210 seconds [ 730.760163][T16592] block nbd7: Possible stuck request ffff888027680380: control (read@2048,1024B). Runtime 210 seconds [ 730.771384][T16592] block nbd7: Possible stuck request ffff888027680540: control (read@3072,1024B). Runtime 210 seconds [ 730.954173][T26398] 8021q: adding VLAN 0 to HW filter on device bond7 [ 730.982038][T26398] bond7: (slave nlmon0): The slave device specified does not support setting the MAC address [ 730.996987][T26398] bond7: (slave nlmon0): Error -95 calling set_mac_address [ 731.022200][T26403] bond7: entered promiscuous mode [ 731.032840][T26403] bond7: entered allmulticast mode [ 731.049844][T26417] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5137'. [ 731.282809][T26434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5140'. [ 731.295650][T26434] wg0: Caught tx_queue_len zero misconfig [ 731.323227][T26435] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5141'. [ 731.349220][T26438] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5142'. [ 731.732675][T26455] sctp: [Deprecated]: syz.4.5148 (pid 26455) Use of int in maxseg socket option. [ 731.732675][T26455] Use struct sctp_assoc_value instead [ 732.508721][T26488] xt_connbytes: Forcing CT accounting to be enabled [ 732.709271][T26497] netlink: 'syz.2.5163': attribute type 39 has an invalid length. [ 732.760126][T26499] syzkaller0: entered promiscuous mode [ 732.775525][T26499] syzkaller0: entered allmulticast mode [ 732.999292][T26509] netlink: 'syz.2.5165': attribute type 21 has an invalid length. [ 733.426530][T26534] vlan0: entered promiscuous mode [ 733.444064][T26534] erspan0: entered promiscuous mode [ 733.668938][T26539] netlink: 'syz.1.5173': attribute type 1 has an invalid length. [ 733.685901][T26539] netlink: 'syz.1.5173': attribute type 2 has an invalid length. [ 733.708718][T26539] __nla_validate_parse: 7 callbacks suppressed [ 733.708738][T26539] netlink: 172 bytes leftover after parsing attributes in process `syz.1.5173'. [ 733.733608][T26545] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5175'. [ 733.760267][T26546] netlink: 'syz.1.5173': attribute type 1 has an invalid length. [ 733.773533][T26546] netlink: 'syz.1.5173': attribute type 2 has an invalid length. [ 734.101173][T26570] netlink: 'syz.4.5180': attribute type 17 has an invalid length. [ 734.239515][T26564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 734.292679][T26572] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 734.307558][T26576] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 734.315573][T26576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5185'. [ 734.326062][T26572] netlink: 'syz.2.5183': attribute type 2 has an invalid length. [ 734.340618][T26572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5183'. [ 734.630209][T26588] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5186'. [ 734.661447][T26588] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5186'. [ 734.781967][T26595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5189'. [ 734.936805][T26595] bond2: option packets_per_slave: invalid value (875837489) [ 734.979486][T26595] bond2: option packets_per_slave: allowed values 0 - 65535 [ 734.997354][T26595] bond2 (unregistering): Released all slaves [ 735.031183][T26607] mac80211_hwsim hwsim54 wlan0: entered promiscuous mode [ 735.046112][T26607] mac80211_hwsim hwsim54 wlan0: entered allmulticast mode [ 735.155621][T26615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 735.195607][T26615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 735.205874][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 735.316011][T26626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5199'. [ 735.554483][T26642] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5203'. [ 735.713034][T26655] netlink: 766 bytes leftover after parsing attributes in process `syz.1.5205'. [ 736.024329][T26678] xt_policy: too many policy elements [ 736.095135][T26683] pimreg: entered allmulticast mode [ 736.120715][T26683] pimreg: left allmulticast mode [ 736.457973][T26698] veth1_to_bond: entered allmulticast mode [ 736.491402][T26699] veth1_to_bond: entered promiscuous mode [ 736.606474][T26700] veth1_to_bond (unregistering): left allmulticast mode [ 736.624970][T26700] veth1_to_bond (unregistering): left promiscuous mode [ 736.667766][T26709] netlink: 'syz.2.5216': attribute type 83 has an invalid length. [ 736.735338][T26700] bond0: (slave bond_slave_1): Releasing backup interface [ 736.854697][T26706] macsec1: entered promiscuous mode [ 736.866439][T26706] hsr0: entered promiscuous mode [ 737.200604][T26706] hsr0: left promiscuous mode [ 740.126339][T26769] tipc: Enabled bearer , priority 0 [ 740.246417][T26769] syzkaller0: entered promiscuous mode [ 740.257133][T26769] syzkaller0: entered allmulticast mode [ 740.286218][T26772] tipc: Resetting bearer [ 740.506826][T26780] __nla_validate_parse: 8 callbacks suppressed [ 740.506846][T26780] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5234'. [ 740.534452][T26780] netlink: 'syz.4.5234': attribute type 1 has an invalid length. [ 740.571140][T26745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5221'. [ 740.830708][T26767] tipc: Resetting bearer [ 740.941242][T26795] netlink: 'syz.3.5239': attribute type 10 has an invalid length. [ 740.979737][T26795] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5239'. [ 743.941429][T26767] tipc: Disabling bearer [ 743.972854][ T10] tipc: Node number set to 4075453597 [ 744.379171][T26805] lo speed is unknown, defaulting to 1000 [ 744.826855][T26828] netlink: 'syz.0.5245': attribute type 2 has an invalid length. [ 744.834743][T26828] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5245'. [ 744.898058][T26831] netlink: 'syz.3.5246': attribute type 1 has an invalid length. [ 744.921916][T26830] x_tables: duplicate underflow at hook 3 [ 745.066168][T26837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5247'. [ 745.159311][T26819] lo speed is unknown, defaulting to 1000 [ 745.398181][T26844] netlink: 'syz.0.5250': attribute type 1 has an invalid length. [ 745.560091][T26844] netlink: 'syz.0.5250': attribute type 1 has an invalid length. [ 746.060822][T26859] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5254'. [ 746.403528][T26877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5258'. [ 746.435614][T26874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 746.452176][T26874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 746.471807][T26874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5259'. [ 746.543852][T26874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 746.721588][T26899] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5263'. [ 746.739228][T26897] ipt_REJECT: TCP_RESET invalid for non-tcp [ 746.962260][T26907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5267'. [ 747.008072][T26915] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 747.321966][T26931] xt_hashlimit: size too large, truncated to 1048576 [ 747.642699][T26939] netlink: 'syz.1.5274': attribute type 5 has an invalid length. [ 747.674433][T26939] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5274'. [ 747.689630][T26939] syzkaller0: entered promiscuous mode [ 747.695374][T26939] syzkaller0: entered allmulticast mode [ 747.719983][T26946] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5276'. [ 747.753540][T26946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5276'. [ 747.864752][T26953] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5276'. [ 747.878936][T26953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5276'. [ 748.020335][T26959] sctp: [Deprecated]: syz.3.5278 (pid 26959) Use of struct sctp_assoc_value in delayed_ack socket option. [ 748.020335][T26959] Use struct sctp_sack_info instead [ 748.223648][T26968] syzkaller1: entered allmulticast mode [ 749.013778][T27014] netlink: 'syz.1.5294': attribute type 3 has an invalid length. [ 749.060275][T27014] netlink: 'syz.1.5294': attribute type 30 has an invalid length. [ 749.996481][T27081] netlink: 'syz.3.5312': attribute type 2 has an invalid length. [ 750.029254][T27085] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 750.149634][T27096] bridge0: entered allmulticast mode [ 750.160893][T27096] syz_tun: left allmulticast mode [ 750.170650][T27096] syz_tun: left promiscuous mode [ 750.177543][T27096] bridge0: port 3(syz_tun) entered disabled state [ 750.187282][T27096] bridge_slave_1: left allmulticast mode [ 750.193163][T27096] bridge_slave_1: left promiscuous mode [ 750.199769][T27096] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.210119][T27096] bridge_slave_0: left allmulticast mode [ 750.216293][T27096] bridge_slave_0: left promiscuous mode [ 750.222375][T27096] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.252668][T27096] bond0: (slave bridge0): Releasing backup interface [ 750.572734][T27111] 8021q: adding VLAN 0 to HW filter on device bond2 [ 750.598668][T27111] bond2 (unregistering): Released all slaves [ 750.683453][T22011] udevd[22011]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 750.856585][T27122] mac80211_hwsim hwsim47 wlan0: entered promiscuous mode [ 750.864020][T27122] mac80211_hwsim hwsim47 wlan0: entered allmulticast mode [ 751.180070][T27140] __nla_validate_parse: 22 callbacks suppressed [ 751.180089][T27140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5327'. [ 751.200273][T27140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5327'. [ 751.210297][T27140] netlink: 'syz.3.5327': attribute type 6 has an invalid length. [ 751.225013][T27140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5327'. [ 751.237449][T27140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5327'. [ 751.247226][T27140] netlink: 'syz.3.5327': attribute type 6 has an invalid length. [ 751.258635][T27143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5327'. [ 751.272394][T27143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5327'. [ 751.395392][T27148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5330'. [ 751.417142][T12565] IPVS: starting estimator thread 0... [ 751.526783][T27155] IPVS: using max 26 ests per chain, 62400 per kthread [ 751.571489][T27164] veth1_to_bond: entered allmulticast mode [ 751.587620][T27166] veth1_to_bond: entered promiscuous mode [ 751.621189][T27164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5334'. [ 751.657913][T27164] veth1_to_bond (unregistering): left allmulticast mode [ 751.677016][T27164] veth1_to_bond (unregistering): left promiscuous mode [ 751.748535][T27170] netlink: 21 bytes leftover after parsing attributes in process `syz.3.5336'. [ 751.759003][T27171] netlink: 'syz.3.5336': attribute type 4 has an invalid length. [ 751.769080][T27170] netlink: 'syz.3.5336': attribute type 4 has an invalid length. [ 751.904504][T27178] xt_recent: hitcount (4294967293) is larger than allowed maximum (65535) [ 752.187230][T27195] netlink: 'syz.4.5343': attribute type 1 has an invalid length. [ 752.439138][T27191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 752.479803][T27191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 752.847885][T27200] bridge3: entered promiscuous mode [ 752.858345][T27200] bond8: (slave bridge3): making interface the new active one [ 752.867133][T27200] bond8: (slave bridge3): Enslaving as an active interface with an up link [ 752.903019][T27205] netlink: 'syz.3.5344': attribute type 1 has an invalid length. [ 752.911533][T27205] netlink: 756 bytes leftover after parsing attributes in process `syz.3.5344'. [ 752.923308][T27201] bridge4: entered promiscuous mode [ 752.934708][T27201] bond8: (slave bridge4): Enslaving as a backup interface with an up link [ 752.976234][T27207] vlan6: entered allmulticast mode [ 752.981554][T27207] bond0: entered allmulticast mode [ 752.988117][T27207] ì: entered allmulticast mode [ 753.025337][T27207] netlink: 'syz.0.5345': attribute type 1 has an invalid length. [ 753.037184][T12565] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.068364][T12565] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.072664][T27210] netlink: 'syz.3.5346': attribute type 1 has an invalid length. [ 753.280636][T12551] netdevsim netdevsim0 €Â: unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.296968][T12551] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.459928][T27225] openvswitch: netlink: Flow actions attr not present in new flow. [ 753.506330][T27225] openvswitch: netlink: Message has 4 unknown bytes. [ 753.711288][T27231] 8021q: adding VLAN 0 to HW filter on device bond2 [ 753.801523][T27231] 8021q: adding VLAN 0 to HW filter on device bond3 [ 753.839753][T27231] bond2: (slave bond3): Enslaving as an active interface with an up link [ 753.903267][T27241] bond2 (unregistering): (slave bond3): Releasing backup interface [ 753.926610][T27241] bond2 (unregistering): Released all slaves [ 754.482068][T27264] openvswitch: netlink: Tunnel attr 246 out of range max 16 [ 754.757660][T27252] lo speed is unknown, defaulting to 1000 [ 755.374324][T27294] tipc: Disabling bearer [ 755.615252][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 755.631098][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 755.640191][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 755.648869][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 755.657014][ T5619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 755.711483][ T5631] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 755.719946][ T5631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 755.728011][ T5631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 755.766853][ T5631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 755.777275][ T5631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 756.065068][T27262] lo speed is unknown, defaulting to 1000 [ 756.230597][T27335] __nla_validate_parse: 10 callbacks suppressed [ 756.230618][T27335] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5378'. [ 756.315496][T27338] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5381'. [ 756.323400][T27340] netlink: 'syz.4.5382': attribute type 1 has an invalid length. [ 756.639196][T27349] x_tables: duplicate underflow at hook 3 [ 757.239190][T27303] lo speed is unknown, defaulting to 1000 [ 757.304265][T27376] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5391'. [ 757.612709][T27389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5393'. [ 757.839646][ T5631] Bluetooth: hci2: command tx timeout [ 758.041374][T27408] syzkaller0: entered promiscuous mode [ 758.048042][T27408] syzkaller0: entered allmulticast mode [ 758.056590][T27303] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.067758][T27303] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.075241][T27303] bridge_slave_0: entered allmulticast mode [ 758.084034][T27303] bridge_slave_0: entered promiscuous mode [ 758.096140][T27303] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.104065][T27303] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.111801][T27303] bridge_slave_1: entered allmulticast mode [ 758.124270][T27303] bridge_slave_1: entered promiscuous mode [ 759.932029][ T5631] Bluetooth: hci2: command tx timeout [ 760.800759][T16592] block nbd7: Possible stuck request ffff888027680000: control (read@0,1024B). Runtime 240 seconds [ 760.811961][T16592] block nbd7: Possible stuck request ffff8880276801c0: control (read@1024,1024B). Runtime 240 seconds [ 760.823492][T16592] block nbd7: Possible stuck request ffff888027680380: control (read@2048,1024B). Runtime 240 seconds [ 760.834856][T16592] block nbd7: Possible stuck request ffff888027680540: control (read@3072,1024B). Runtime 240 seconds [ 760.962035][T27303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.998475][T27303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.065484][T27428] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5403'. [ 761.087162][T27303] team0: Port device team_slave_0 added [ 761.099063][T27303] team0: Port device team_slave_1 added [ 761.141028][T27430] syzkaller0: entered promiscuous mode [ 761.147237][T27430] syzkaller0: entered allmulticast mode [ 761.155814][T27303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 761.163226][T27303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.190034][T27303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.219331][T27303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.226599][T27303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.253050][T27303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.277119][T27437] syzkaller0: entered promiscuous mode [ 761.282782][T27437] syzkaller0: entered allmulticast mode [ 761.294685][T27436] tipc: Enabled bearer , priority 0 [ 761.309594][T27436] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5405'. [ 761.341666][T27435] tipc: Resetting bearer [ 761.366378][T27435] tipc: Disabling bearer [ 761.424293][T27303] hsr_slave_0: entered promiscuous mode [ 761.432405][T27303] hsr_slave_1: entered promiscuous mode [ 761.440897][T27303] debugfs: 'hsr0' already exists in 'hsr' [ 761.448098][T27303] Cannot create hsr debugfs directory [ 761.873271][T27453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5410'. [ 761.957968][T27303] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 761.969817][T27303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 761.990034][T27303] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 762.007290][ T5631] Bluetooth: hci2: command tx timeout [ 762.061105][T27303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 762.099843][T27303] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 762.118127][T27470] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5410'. [ 762.133219][T27303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 762.152509][T27472] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 762.241238][T27303] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 762.309122][T27303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 762.623853][T27303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.688390][T27303] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.762878][ T608] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.770170][ T608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.806460][T13774] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.813728][T13774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.082654][T27522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5425'. [ 763.283967][T27519] bond0 (unregistering): Released all slaves [ 763.813825][T27514] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5423'. [ 763.847265][T27514] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5423'. [ 763.857570][T27514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5423'. [ 764.086700][ T5631] Bluetooth: hci2: command tx timeout [ 764.130031][T27303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.492446][T27545] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 764.546938][T27587] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5437'. [ 764.570826][T27589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5437'. [ 764.631636][T27589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5437'. [ 764.649705][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 764.662252][T27303] veth0_vlan: entered promiscuous mode [ 764.732340][T27303] veth1_vlan: entered promiscuous mode [ 764.808602][T27303] veth0_macvtap: entered promiscuous mode [ 764.822347][T27303] veth1_macvtap: entered promiscuous mode [ 764.848202][T27303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 764.872047][T27303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 764.926799][ T608] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.953646][ T608] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.105619][T13774] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.164994][T13774] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.396963][T13441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.413186][T27620] syzkaller0: entered promiscuous mode [ 765.420296][T27620] syzkaller0: entered allmulticast mode [ 765.432198][T13441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.524254][T13441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.532988][T13441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.022847][T27641] netlink: 'syz.0.5453': attribute type 10 has an invalid length. [ 766.556045][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 766.708687][T27665] __nla_validate_parse: 5 callbacks suppressed [ 766.708707][T27665] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5461'. [ 766.773731][T27667] netlink: 'syz.0.5462': attribute type 1 has an invalid length. [ 766.941041][T27667] 8021q: adding VLAN 0 to HW filter on device bond2 [ 767.024623][T27669] bond2: (slave geneve5): making interface the new active one [ 767.049634][T27669] bond2: (slave geneve5): Enslaving as an active interface with an up link [ 767.076878][T27654] lo speed is unknown, defaulting to 1000 [ 767.112084][T27678] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5464'. [ 767.316026][T13441] netdevsim netdevsim0 €Â: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.324704][T27684] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5466'. [ 767.511221][T27690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5468'. [ 767.521561][T13774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.537629][T13774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.568416][T13774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.693520][T27695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 767.724022][T27697] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5471'. [ 767.901554][T27705] sock: sock_timestamping_bind_phc: sock not bind to device [ 767.989815][T27708] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5474'. [ 768.350549][T27730] netlink: 'syz.4.5479': attribute type 1 has an invalid length. [ 768.439224][T27744] netlink: 'syz.4.5479': attribute type 10 has an invalid length. [ 768.452760][T27739] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5482'. [ 768.513615][T27730] bond0: option mode: invalid value (8) [ 768.538527][T27744] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5479'. [ 768.560047][T27730] bond0 (unregistering): Released all slaves [ 768.620116][T27744] dummy0: entered promiscuous mode [ 768.699119][T27744] team0: Port device dummy0 removed [ 768.808422][T27769] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5488'. [ 768.917354][T27774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5490'. [ 768.980921][T27778] sctp: [Deprecated]: syz.1.5490 (pid 27778) Use of int in max_burst socket option. [ 768.980921][T27778] Use struct sctp_assoc_value instead [ 769.022860][T27774] ovs-system: entered promiscuous mode [ 769.044939][T27774] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 769.067515][T27774] dvmrp1: linktype set to 776 [ 769.339840][T27791] sctp: [Deprecated]: syz.1.5495 (pid 27791) Use of int in maxseg socket option. [ 769.339840][T27791] Use struct sctp_assoc_value instead [ 769.523321][T27772] lo speed is unknown, defaulting to 1000 [ 770.442317][T27840] netlink: 'syz.4.5502': attribute type 4 has an invalid length. [ 771.532899][T27876] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 771.601575][T27885] netlink: 'syz.4.5510': attribute type 1 has an invalid length. [ 771.826563][T12249] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 771.847222][T27881] 8021q: adding VLAN 0 to HW filter on device bond7 [ 771.863435][T12249] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 771.894071][T27881] 8021q: adding VLAN 0 to HW filter on device bond8 [ 771.922068][T27881] 8021q: adding VLAN 0 to HW filter on device bond9 [ 772.067735][T27885] bond0: entered promiscuous mode [ 772.084634][T27885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 772.376060][T12250] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 772.509740][ T5614] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 772.544490][ T5614] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 772.980047][ T10] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 773.022688][T27943] __nla_validate_parse: 7 callbacks suppressed [ 773.022717][T27943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5522'. [ 773.448137][ T10] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 773.505060][T27973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5528'. [ 773.582617][T27981] netlink: 'syz.5.5532': attribute type 62 has an invalid length. [ 773.590275][T27979] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5531'. [ 773.634800][T27979] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5531'. [ 773.691084][T27979] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5531'. [ 773.779129][T27991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5534'. [ 773.836962][T27995] netlink: 'syz.5.5532': attribute type 1 has an invalid length. [ 773.865763][T27995] netlink: 756 bytes leftover after parsing attributes in process `syz.5.5532'. [ 773.976146][T28001] siw: device registration error -23 [ 774.451599][T28027] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 774.485261][T28027] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5545'. [ 774.716475][ T5619] Bluetooth: hci2: command 0x0405 tx timeout [ 775.020640][T28054] netlink: 1 bytes leftover after parsing attributes in process `syz.5.5552'. [ 775.233739][T28046] nbd: must specify at least one socket [ 775.867324][T28080] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5560'. [ 776.029629][T28085] netlink: 'syz.0.5561': attribute type 14 has an invalid length. [ 776.057589][T28084] netlink: 'syz.0.5561': attribute type 14 has an invalid length. [ 776.433928][T28099] netlink: 'syz.0.5567': attribute type 8 has an invalid length. [ 776.798148][ T5631] Bluetooth: hci2: command 0x0405 tx timeout [ 776.808236][T28126] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 776.841971][T28125] openvswitch: netlink: Message has 8 unknown bytes. [ 777.235754][T28136] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 777.662401][T28163] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 777.735129][T28157] can: request_module (can-proto-0) failed. [ 777.927248][T28177] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 778.030351][T28180] syzkaller0: entered promiscuous mode [ 778.037508][T28180] syzkaller0: entered allmulticast mode [ 778.370231][T28190] __nla_validate_parse: 8 callbacks suppressed [ 778.370254][T28190] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5588'. [ 779.681448][T28264] netlink: 'syz.5.5608': attribute type 1 has an invalid length. [ 779.748383][T28263] tap0: tun_chr_ioctl cmd 1074025677 [ 779.753995][T28263] tap0: linktype set to 805 [ 779.941537][T28271] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5610'. [ 780.453545][T28304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5618'. [ 780.471084][T28304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 780.486795][T28304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 780.494960][T28304] batman_adv: batadv0: Removing interface: macvtap1 [ 780.502965][T28304] batman_adv: batadv0: Removing interface: vlan3 [ 780.656467][T28310] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 4, id = 0 [ 780.902857][T28321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5624'. [ 780.996383][T28323] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5625'. [ 781.116700][T28326] xt_CT: You must specify a L4 protocol and not use inversions on it [ 781.336485][T28337] tipc: Enabled bearer , priority 0 [ 781.411356][T28336] tipc: Disabling bearer [ 781.849802][T28358] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 782.022624][T28361] syzkaller1: entered promiscuous mode [ 782.045166][T28361] syzkaller1: entered allmulticast mode [ 782.130313][T28364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5637'. [ 782.869349][T28411] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5644'. [ 782.974980][T28402] tipc: Enabling of bearer rejected, failed to enable media [ 783.182778][T28418] netlink: set zone limit has 4 unknown bytes [ 783.206965][T28420] macsec0: entered promiscuous mode [ 783.232030][T28419] macsec0: left promiscuous mode [ 783.518258][T28437] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5651'. [ 783.554826][T28437] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5651'. [ 783.643531][T28434] ipip0: entered promiscuous mode [ 784.082210][T28470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5655'. [ 784.291245][T28484] netlink: Invalid conntrack helper [ 784.313899][T28484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 784.372070][T28482] tipc: Started in network mode [ 784.385774][T28482] tipc: Node identity fa69ed38c108, cluster identity 4711 [ 784.408899][T28482] tipc: Enabled bearer , priority 0 [ 784.474387][T28481] tipc: Disabling bearer [ 784.593407][T28493] netlink: 'syz.4.5663': attribute type 3 has an invalid length. [ 784.603534][T28495] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5662'. [ 784.950255][T28508] syzkaller1: entered promiscuous mode [ 784.970497][T28508] syzkaller1: entered allmulticast mode [ 785.105230][T28520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5672'. [ 785.266906][T28524] syzkaller0: entered promiscuous mode [ 785.281434][T28524] syzkaller0: entered allmulticast mode [ 785.302313][T28524] tipc: Enabled bearer , priority 0 [ 785.322912][T28521] tipc: Resetting bearer [ 785.354110][T28531] netlink: 332 bytes leftover after parsing attributes in process `syz.3.5677'. [ 785.388933][T28531] netlink: 'syz.3.5677': attribute type 9 has an invalid length. [ 785.399020][T28531] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5677'. [ 785.408418][T28531] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5677'. [ 785.418487][T28521] tipc: Disabling bearer [ 785.631971][T28546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5682'. [ 785.702358][T28549] x_tables: duplicate entry at hook 4 [ 785.734249][T28550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5682'. [ 785.847285][T28550] bond5 (unregistering): Released all slaves [ 786.101328][T28561] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 786.639810][T28579] syzkaller0: entered promiscuous mode [ 786.646386][T28579] syzkaller0: entered allmulticast mode [ 787.966155][T28588] tipc: Enabled bearer , priority 0 [ 787.974179][T28593] syzkaller0: entered promiscuous mode [ 788.018915][T28593] syzkaller0: entered allmulticast mode [ 788.110060][T28581] tipc: Resetting bearer [ 788.140092][T28581] tipc: Disabling bearer [ 788.238709][T28602] netlink: 'syz.4.5694': attribute type 1 has an invalid length. [ 788.391838][T28618] openvswitch: netlink: Duplicate or invalid key (type 0). [ 788.417759][T28619] openvswitch: netlink: Duplicate or invalid key (type 0). [ 788.472202][ T1169] tipc: Subscription rejected, illegal request [ 788.748713][T28633] syzkaller0: entered promiscuous mode [ 788.762571][T28633] syzkaller0: entered allmulticast mode [ 788.807548][T28633] tipc: Enabled bearer , priority 0 [ 788.870151][T28632] tipc: Resetting bearer [ 788.938963][T28632] tipc: Disabling bearer [ 789.061260][T28652] __nla_validate_parse: 7 callbacks suppressed [ 789.061278][T28652] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5707'. [ 789.098598][T28652] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5707'. [ 789.212853][T28656] syzkaller0: entered promiscuous mode [ 789.226291][T28656] syzkaller0: entered allmulticast mode [ 789.243581][T28656] tipc: Enabled bearer , priority 0 [ 789.268642][T28655] tipc: Resetting bearer [ 789.370257][T28655] tipc: Disabling bearer [ 789.589301][T28682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5717'. [ 789.674741][T28682] 8021q: adding VLAN 0 to HW filter on device bond5 [ 789.700921][T28687] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5719'. [ 789.743609][T28687] syzkaller0: entered promiscuous mode [ 789.764072][T28687] syzkaller0: entered allmulticast mode [ 789.888841][T28690] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5721'. [ 789.908240][T28690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5721'. [ 789.948140][T28698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5723'. [ 789.975254][T28698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5723'. [ 790.030488][T28701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5724'. [ 790.889686][T16592] block nbd7: Possible stuck request ffff888027680000: control (read@0,1024B). Runtime 270 seconds [ 790.901396][T16592] block nbd7: Possible stuck request ffff8880276801c0: control (read@1024,1024B). Runtime 270 seconds [ 790.916445][T16592] block nbd7: Possible stuck request ffff888027680380: control (read@2048,1024B). Runtime 270 seconds [ 790.927786][T16592] block nbd7: Possible stuck request ffff888027680540: control (read@3072,1024B). Runtime 270 seconds [ 791.170311][T28766] netlink: 'syz.1.5736': attribute type 1 has an invalid length. [ 791.192522][T28766] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5736'. [ 791.222080][T28766] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20000 [ 791.804535][T28796] bridge0: left allmulticast mode [ 791.838409][T28796] veth0_macvtap: left allmulticast mode [ 791.859782][T28796] netdevsim netdevsim0 €Â: left allmulticast mode [ 791.910228][T28796] geneve3: left promiscuous mode [ 791.941471][T28796] vlan5: left promiscuous mode [ 791.952917][T28805] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001 [ 791.961864][T28796] vlan6: left allmulticast mode [ 791.982231][T28796] bond0: left allmulticast mode [ 791.993211][T28796] ì: left allmulticast mode [ 792.029371][T28796] ipip0: left promiscuous mode [ 792.056279][T13441] netdevsim netdevsim0 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.084398][T13441] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.100334][T13441] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.111826][T13441] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.289939][T28814] ip6t_srh: unknown srh match flags 4000 [ 792.440866][T28827] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 792.581704][T28829] bond6 (unregistering): Released all slaves [ 792.788097][T28839] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 792.838418][T28839] bond4 (unregistering): Released all slaves [ 793.603008][T28888] netlink: 'syz.3.5764': attribute type 7 has an invalid length. [ 793.702152][T28895] tap0: tun_chr_ioctl cmd 2148553947 [ 793.943690][T28908] netlink: 'syz.4.5770': attribute type 29 has an invalid length. [ 793.959104][T28908] netlink: 'syz.4.5770': attribute type 4 has an invalid length. [ 793.980142][T28911] netlink: 'syz.4.5770': attribute type 4 has an invalid length. [ 793.997138][T28908] netlink: 'syz.4.5770': attribute type 4 has an invalid length. [ 794.171253][T28921] netlink: 'syz.5.5773': attribute type 1 has an invalid length. [ 794.238823][T28913] No such timeout policy "syz1" [ 794.696913][T28945] __nla_validate_parse: 6 callbacks suppressed [ 794.696935][T28945] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5780'. [ 794.830525][ T5619] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 794.844584][ T5619] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 794.860248][ T5619] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 794.870787][T28951] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5780'. [ 794.871056][ T5619] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 794.909619][ T5619] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 795.507836][T28967] syzkaller0: entered promiscuous mode [ 795.520908][T28967] syzkaller0: entered allmulticast mode [ 795.659324][T28979] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 795.688996][T28979] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 795.852040][T28988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5788'. [ 795.894790][T28985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5788'. [ 795.913364][T28985] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5788'. [ 795.952680][T28988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5788'. [ 795.992957][T28985] veth11: entered allmulticast mode [ 796.118975][T29000] netlink: 'syz.4.5791': attribute type 1 has an invalid length. [ 796.178654][T29000] veth4: entered allmulticast mode [ 796.559559][T29011] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input8 [ 796.587702][T29022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5797'. [ 796.659875][T29022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5797'. [ 796.956013][ T5619] Bluetooth: hci6: command tx timeout [ 796.995654][T28948] lo speed is unknown, defaulting to 1000 [ 797.393712][T29051] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5803'. [ 797.620893][T29054] ip6tnl1: entered promiscuous mode [ 797.736516][ T1169] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 797.777351][T13778] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 797.856020][T28948] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.863471][T28948] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.871989][T28948] bridge_slave_0: entered allmulticast mode [ 797.881627][T28948] bridge_slave_0: entered promiscuous mode [ 797.891706][T28948] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.899535][T28948] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.908470][T28948] bridge_slave_1: entered allmulticast mode [ 797.919314][T28948] bridge_slave_1: entered promiscuous mode [ 798.003788][T28948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 798.017688][T28948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 798.098057][T28948] team0: Port device team_slave_0 added [ 798.129015][T28948] team0: Port device team_slave_1 added [ 798.243750][T28948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 798.251775][T28948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.288617][T28948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 798.302453][T29081] netlink: 'syz.5.5810': attribute type 2 has an invalid length. [ 798.335310][T28948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 798.342979][T28948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.379654][T28948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 798.467679][T29088] netlink: 'syz.1.5812': attribute type 1 has an invalid length. [ 798.489286][T29081] syzkaller0: entered promiscuous mode [ 798.495234][T29081] syzkaller0: entered allmulticast mode [ 798.530986][T29090] xt_cgroup: invalid path, errno=-2 [ 798.549739][T29088] 8021q: adding VLAN 0 to HW filter on device bond9 [ 798.565248][T29088] netlink: 'syz.1.5812': attribute type 10 has an invalid length. [ 798.573601][T29088] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5812'. [ 799.046427][ T5619] Bluetooth: hci6: command tx timeout [ 799.280031][ T5619] block nbd8: Receive control failed (result -107) [ 801.117910][ T5619] Bluetooth: hci6: command tx timeout [ 801.602372][T28948] hsr_slave_0: entered promiscuous mode [ 801.609926][T28948] hsr_slave_1: entered promiscuous mode [ 801.629211][T28948] debugfs: 'hsr0' already exists in 'hsr' [ 801.635040][T28948] Cannot create hsr debugfs directory [ 801.730963][T29107] __nla_validate_parse: 1 callbacks suppressed [ 801.730983][T29107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5818'. [ 801.787135][T29123] netlink: 'syz.1.5820': attribute type 21 has an invalid length. [ 801.928716][T29111] syzkaller0: entered promiscuous mode [ 801.934454][T29111] syzkaller0: entered allmulticast mode [ 801.942608][T29123] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5820'. [ 803.205922][ T5619] Bluetooth: hci6: command tx timeout [ 804.836570][ T1169] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 804.853772][ T1169] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 804.937566][T29135] netlink: 272 bytes leftover after parsing attributes in process `syz.3.5825'. [ 805.031355][T29141] netlink: 'syz.1.5827': attribute type 1 has an invalid length. [ 805.041200][T29141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5827'. [ 805.162255][T29137] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.170054][T29137] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.331574][T29157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5829'. [ 805.351502][T29137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 805.366653][T29137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 805.756313][ T608] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 805.769564][ T608] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.793722][ T608] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 805.819489][ T608] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.994051][T29177] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 806.008714][T29180] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5836'. [ 806.021801][T29183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5836'. [ 806.076846][T13774] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 806.098322][T13774] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.122230][T29186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 806.184200][T29190] x_tables: duplicate underflow at hook 3 [ 806.203542][T29193] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 806.299647][T13774] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 806.326518][T13774] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.384354][T29198] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 806.416519][T29198] syzkaller1: Linktype set failed because interface is up [ 806.455635][T29203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5840'. [ 806.466034][T29198] syzkaller1: tun_chr_ioctl cmd 1074025680 [ 806.481446][T29203] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5840'. [ 806.501594][T29203] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5840'. [ 806.713926][T29214] Bluetooth: hci0: invalid length 0, exp 2 for type 27 [ 806.751388][T29214] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5841'. [ 806.877384][T29214] nbd: socks must be embedded in a SOCK_ITEM attr [ 806.896094][T22015] block nbd64: NBD_DISCONNECT [ 806.899320][T29206] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5841'. [ 806.919581][T28948] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 806.952087][T29206] nbd: device at index 64 is going down [ 806.960593][T28948] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 807.001491][T28948] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 807.059645][T28948] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 807.109411][T28948] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 807.145549][T28948] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 807.179989][T22015] udevd[22015]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 807.192037][T28948] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 807.261049][T28948] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 807.691256][T29250] Unsupported ieee802154 address type: 0 [ 807.752379][T28948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.879741][T28948] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.909848][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.917118][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.976253][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.983510][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.071226][T29257] SET target dimension over the limit! [ 808.271122][T29276] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5856'. [ 808.305393][T29278] macvtap1: entered promiscuous mode [ 808.323532][T29278] batadv0: entered promiscuous mode [ 808.341675][T29278] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 808.359235][T29278] batadv0: left promiscuous mode [ 808.403799][T29282] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5859'. [ 808.920940][T29310] pim6reg: entered allmulticast mode [ 808.936483][T29310] pim6reg: left allmulticast mode [ 809.092761][T28948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 809.271675][T28948] veth0_vlan: entered promiscuous mode [ 809.317021][T28948] veth1_vlan: entered promiscuous mode [ 809.333421][T29324] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 809.396419][T28948] veth0_macvtap: entered promiscuous mode [ 809.408098][T28948] veth1_macvtap: entered promiscuous mode [ 809.463737][T28948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 809.498761][T28948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 809.542523][T29332] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5871'. [ 809.557140][ T608] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.638005][T29332] bond2: entered promiscuous mode [ 809.696171][ T608] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.711952][ T608] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.792374][T12565] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.932748][T12551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.958784][T12551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.977478][T29342] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.996296][T29342] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.006354][T29342] bridge_slave_0: entered allmulticast mode [ 810.014332][T29342] bridge_slave_0: entered promiscuous mode [ 810.079266][T29340] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5873'. [ 810.098365][T12551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.101232][T29338] ip6tnl0: Caught tx_queue_len zero misconfig [ 810.118395][T12551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.202127][T29350] netlink: 'syz.4.5872': attribute type 11 has an invalid length. [ 810.336520][T29353] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5875'. [ 810.365625][T29353] netlink: 200 bytes leftover after parsing attributes in process `syz.5.5875'. [ 810.462859][T29355] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5876'. [ 810.498465][T29359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 810.581140][T29368] bridge0: entered promiscuous mode [ 810.607257][T29368] bridge0: entered allmulticast mode [ 810.651123][T29366] netlink: 'syz.4.5878': attribute type 1 has an invalid length. [ 810.804297][T29366] 8021q: adding VLAN 0 to HW filter on device bond10 [ 810.829580][T29373] bond10: (slave geneve3): making interface the new active one [ 810.843334][T29373] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 810.953392][T29378] netlink: 'syz.0.5879': attribute type 10 has an invalid length. [ 811.004553][T29382] netlink: 'syz.0.5879': attribute type 10 has an invalid length. [ 811.055123][T29378] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 811.081719][T29378] team0: Port device netdevsim1 added [ 811.110847][T29382] team0: Port device netdevsim1 removed [ 811.140037][T29382] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 811.167541][T29382] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 811.280419][T29398] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5883'. [ 811.319468][T29394] tipc: Enabling of bearer rejected, failed to enable media [ 811.557012][T29409] --map-set only usable from mangle table [ 811.600751][T29407] bridge3: entered promiscuous mode [ 811.622160][T29407] bridge3: entered allmulticast mode [ 811.666232][T29407] team0: Port device bridge3 added [ 811.685300][T29410] bridge0: port 3(team0) entered blocking state [ 811.729126][T29410] bridge0: port 3(team0) entered disabled state [ 811.756215][T29410] team0: entered allmulticast mode [ 811.762767][T29410] team_slave_0: entered allmulticast mode [ 811.788148][T29410] team_slave_1: entered allmulticast mode [ 811.807938][T29410] team0: entered promiscuous mode [ 811.813040][T29410] team_slave_0: entered promiscuous mode [ 811.838305][T29410] team_slave_1: entered promiscuous mode [ 812.008322][T29430] netlink: 'syz.0.5890': attribute type 31 has an invalid length. [ 812.134352][T29436] __nla_validate_parse: 1 callbacks suppressed [ 812.134376][T29436] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5893'. [ 812.270863][T29444] netlink: 8524 bytes leftover after parsing attributes in process `syz.0.5894'. [ 812.612870][T29465] tipc: Enabling of bearer rejected, failed to enable media [ 812.677087][T29469] pim6reg: entered allmulticast mode [ 812.707586][T29469] pim6reg: left allmulticast mode [ 812.810950][T29481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5901'. [ 812.857909][T29485] tipc: Invalid UDP bearer configuration [ 812.857976][T29485] tipc: Enabling of bearer rejected, failed to enable media [ 812.907259][T29483] x_tables: duplicate underflow at hook 3 [ 812.991337][T29491] Bluetooth: hci0: unsupported parameter 5134 [ 813.006366][T29491] Bluetooth: hci0: unsupported parameter 8192 [ 813.049227][T29491] Bluetooth: hci0: unsupported parameter 5134 [ 813.057771][T29496] netlink: 'syz.0.5901': attribute type 1 has an invalid length. [ 813.079002][T29491] Bluetooth: hci0: unsupported parameter 8192 [ 813.229676][T29485] bond1: Removing last arp target with arp_interval on [ 813.620181][T29520] netlink: NAT attribute has 8 unknown bytes [ 813.642530][T29520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 813.872063][T29528] pimreg: entered allmulticast mode [ 813.889427][T29528] pimreg: left allmulticast mode [ 814.046874][T29527] ipip0: entered promiscuous mode [ 814.080121][T29494] syzkaller0: entered promiscuous mode [ 814.089021][T29544] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5918'. [ 814.109443][T29494] syzkaller0: entered allmulticast mode [ 814.163098][T29537] tipc: Enabling of bearer rejected, failed to enable media [ 814.277318][T29552] netlink: 'syz.5.5918': attribute type 1 has an invalid length. [ 814.284675][T29545] syzkaller0: entered promiscuous mode [ 814.304282][T29545] syzkaller0: entered allmulticast mode [ 814.361656][T29558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5919'. [ 814.715627][T29569] netlink: 'syz.5.5922': attribute type 8 has an invalid length. [ 814.763495][T29571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 814.955311][T29581] netlink: 'syz.5.5925': attribute type 1 has an invalid length. [ 814.970524][T29581] netlink: 244 bytes leftover after parsing attributes in process `syz.5.5925'. [ 815.336801][T29611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5932'. [ 816.067664][T29643] syzkaller0: entered promiscuous mode [ 816.087991][T29643] syzkaller0: entered allmulticast mode [ 816.151301][T29647] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5944'. [ 816.180406][ T5619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 816.182789][T29646] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5943'. [ 816.213270][ T5619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 816.222903][ T5619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 816.235652][ T5619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 816.246241][ T5619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 816.370368][T29654] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 816.631109][T29661] ip_tables: iptables: counters copy to user failed while replacing table [ 816.753083][T29668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 816.848496][T29675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 816.893784][T29673] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5950'. [ 817.129745][T29687] netlink: 'syz.5.5953': attribute type 3 has an invalid length. [ 817.176941][T29686] __nla_validate_parse: 1 callbacks suppressed [ 817.176960][T29686] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5952'. [ 817.303021][T29696] openvswitch: netlink: IPv4 tunnel dst address is zero [ 817.314189][T29696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 817.377331][T29698] netlink: 'syz.1.5956': attribute type 2 has an invalid length. [ 817.385362][T29698] netlink: 'syz.1.5956': attribute type 2 has an invalid length. [ 817.430664][T29671] lo speed is unknown, defaulting to 1000 [ 817.687003][T29709] netlink: 'syz.1.5959': attribute type 3 has an invalid length. [ 817.785614][T29711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5958'. [ 817.854096][T29713] netlink: 284 bytes leftover after parsing attributes in process `syz.1.5959'. [ 818.070526][T29648] lo speed is unknown, defaulting to 1000 [ 818.127498][T29719] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5961'. [ 818.243396][T29719] bond0: left promiscuous mode [ 818.317486][ T5619] Bluetooth: hci5: command tx timeout [ 818.738697][T29747] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5968'. [ 818.790881][T29749] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5969'. [ 818.933978][T29648] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.941384][T29648] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.949222][T29648] bridge_slave_0: entered allmulticast mode [ 818.964383][T29648] bridge_slave_0: entered promiscuous mode [ 819.032216][T29758] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 819.053910][T29648] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.064821][T29648] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.072775][T29648] bridge_slave_1: entered allmulticast mode [ 819.082118][T29648] bridge_slave_1: entered promiscuous mode [ 819.171223][T29648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 819.200954][T29648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 819.342254][T29648] team0: Port device team_slave_0 added [ 819.364788][T29648] team0: Port device team_slave_1 added [ 819.496826][T29648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 819.522853][T29648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.601645][T29648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.736347][T29648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.753566][T29648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.783134][T29648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 819.962007][T29813] syzkaller0: entered promiscuous mode [ 819.986181][T29813] syzkaller0: entered allmulticast mode [ 820.011949][T29648] hsr_slave_0: entered promiscuous mode [ 820.030682][T29648] hsr_slave_1: entered promiscuous mode [ 820.049597][T29648] debugfs: 'hsr0' already exists in 'hsr' [ 820.066040][T29648] Cannot create hsr debugfs directory [ 820.201285][T29822] syzkaller0: entered promiscuous mode [ 820.207355][T29822] syzkaller0: entered allmulticast mode [ 820.280321][T29822] tipc: Enabled bearer , priority 0 [ 820.381177][T29830] tipc: Resetting bearer [ 820.405873][ T5619] Bluetooth: hci5: command tx timeout [ 820.469974][T29821] tipc: Resetting bearer [ 820.522010][T29821] tipc: Disabling bearer [ 820.619103][T29839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5993'. [ 820.943267][T29839] bond11: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 820.959932][T16592] block nbd7: Possible stuck request ffff888027680000: control (read@0,1024B). Runtime 300 seconds [ 820.970916][T16592] block nbd7: Possible stuck request ffff8880276801c0: control (read@1024,1024B). Runtime 300 seconds [ 820.982373][T16592] block nbd7: Possible stuck request ffff888027680380: control (read@2048,1024B). Runtime 300 seconds [ 820.993742][T16592] block nbd7: Possible stuck request ffff888027680540: control (read@3072,1024B). Runtime 300 seconds [ 821.008567][T29839] bond11 (unregistering): Released all slaves [ 821.245119][T29861] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6000'. [ 821.919489][T29874] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6004'. [ 822.060363][T29883] netlink: 'syz.5.6006': attribute type 1 has an invalid length. [ 822.162195][T29889] netlink: 'syz.1.6008': attribute type 2 has an invalid length. [ 822.294964][T29890] netlink: 332 bytes leftover after parsing attributes in process `syz.1.6008'. [ 822.326064][T29890] netlink: 'syz.1.6008': attribute type 9 has an invalid length. [ 822.350404][T29890] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6008'. [ 822.375839][T29890] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6008'. [ 822.476991][ T5619] Bluetooth: hci5: command tx timeout [ 822.495767][T29648] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 822.570110][T29648] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 822.595808][T29903] netlink: 67 bytes leftover after parsing attributes in process `syz.1.6011'. [ 822.603663][T29648] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 822.641499][T29648] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 822.659861][T29648] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 822.677375][T29648] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 822.720610][T29903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.768240][T29903] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.849877][T29903] veth1_macvtap: left promiscuous mode [ 822.860363][T29903] veth0_macvtap: left promiscuous mode [ 822.880914][T29903] veth1_macvtap: entered promiscuous mode [ 822.919969][T29903] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 822.954115][T29903] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 822.963457][T29903] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 822.974916][T29903] 8021q: adding VLAN 0 to HW filter on device bond1 [ 822.985140][T29903] 8021q: adding VLAN 0 to HW filter on device bond2 [ 823.001045][T29903] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 823.040014][T29903] 8021q: adding VLAN 0 to HW filter on device bond6 [ 823.059981][T29903] 8021q: adding VLAN 0 to HW filter on device bond7 [ 823.103699][T29648] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 823.188554][T29648] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 823.232740][T13792] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.239984][T13792] bridge0: port 1(bridge_slave_0) entered listening state [ 823.287238][T13792] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.294489][T13792] bridge0: port 2(bridge_slave_1) entered listening state [ 823.460494][T29921] tipc: Resetting bearer [ 823.568692][T29921] 0·: left allmulticast mode [ 823.573490][T29921] hsr_slave_0: left allmulticast mode [ 823.581367][T29921] hsr_slave_1: left allmulticast mode [ 823.637280][T29921] macvlan0: left promiscuous mode [ 823.729437][T29921] ip6tnl2: left allmulticast mode [ 823.737478][T29921] ip6tnl3: left allmulticast mode [ 823.745110][T29921] bond3: left promiscuous mode [ 823.750719][T29921] bridge1: left promiscuous mode [ 823.759834][T29921] vlan2: left allmulticast mode [ 823.764752][T29921] bond3: left allmulticast mode [ 823.770132][T29921] bridge1: left allmulticast mode [ 823.784863][T29921] bond5: left promiscuous mode [ 823.792814][T29921] veth3: left allmulticast mode [ 823.804295][T29921] bond7: left promiscuous mode [ 823.809811][T29921] bond7: left allmulticast mode [ 823.823249][T29921] bridge3: left promiscuous mode [ 823.831813][T29921] bridge4: left promiscuous mode [ 823.854835][ T5614] syz2: Port: 1 Link DOWN [ 823.856720][T13792] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.876899][T13792] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.887114][T12565] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 823.978084][T13792] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.998590][T13792] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.247644][T12551] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 824.292849][T12551] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.321838][T12551] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 824.346553][T12551] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.425877][T29966] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6024'. [ 824.444272][T29970] netlink: 4560 bytes leftover after parsing attributes in process `syz.5.6025'. [ 824.472006][T29648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 824.556155][ T5619] Bluetooth: hci5: command tx timeout [ 824.597961][T29976] tipc: Failed to remove unknown binding: 66,0,0/0:3531166278/3531166281 [ 824.606718][T29976] tipc: Failed to remove unknown binding: 66,0,0/0:3531166278/3531166280 [ 824.615262][T29976] tipc: Failed to remove unknown binding: 66,0,0/0:3531166278/3531166279 [ 824.630348][T29976] tipc: Failed to remove unknown binding: 66,0,0/0:3531166278/3531166281 [ 824.645534][T29976] tipc: Failed to remove unknown binding: 66,0,0/0:3531166278/3531166280 [ 824.683661][T29976] tipc: Failed to remove unknown binding: 66,0,0/0:3531166278/3531166279 [ 824.708619][T29981] netlink: 'syz.0.6028': attribute type 61 has an invalid length. [ 824.787048][T29648] 8021q: adding VLAN 0 to HW filter on device team0 [ 824.853972][T12565] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.861228][T12565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 824.929000][T12565] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.936236][T12565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 825.007368][T29987] netlink: 260 bytes leftover after parsing attributes in process `syz.5.6029'. [ 825.300593][T29998] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.6033'. [ 826.289806][T30041] netlink: 'syz.4.6040': attribute type 7 has an invalid length. [ 826.324840][T30041] netlink: 'syz.4.6040': attribute type 7 has an invalid length. [ 826.327870][T30045] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6041'. [ 826.370161][T30045] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6041'. [ 826.401156][T29648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 826.546657][T29648] veth0_vlan: entered promiscuous mode [ 826.564731][T30054] x_tables: duplicate underflow at hook 1 [ 826.611382][T30054] IPVS: set_ctl: invalid protocol: 22 10.1.1.0:20004 [ 826.679245][T30053] bond2: option ad_user_port_key: invalid value (65535) [ 826.709516][T30053] bond2: option ad_user_port_key: allowed values 0 - 1023 [ 826.751330][T30053] bond2 (unregistering): Released all slaves [ 826.873228][T29648] veth1_vlan: entered promiscuous mode [ 827.114621][T29648] veth0_macvtap: entered promiscuous mode [ 827.140798][T29648] veth1_macvtap: entered promiscuous mode [ 827.183997][T29648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 827.260908][T29648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 827.371098][T12565] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.448461][T13796] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.490080][T13796] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.545984][T13792] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.630327][T13792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.653539][T13792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.679414][T30102] x_tables: duplicate underflow at hook 1 [ 827.773891][T12565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.798765][T12565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.876678][T30107] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6059'. [ 827.899281][T30109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6060'. [ 827.916972][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 827.998357][T30107] veth1_to_hsr: entered promiscuous mode [ 828.004220][T30107] veth1_to_hsr: entered allmulticast mode [ 828.048885][T30107] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 828.050002][T30119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 828.079257][T30107] bond3 (unregistering): Released all slaves [ 828.134000][T30120] lo: entered allmulticast mode [ 828.434473][T30138] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6066'. [ 828.463369][T30138] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6066'. [ 828.519009][T30142] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 829.066238][T30176] netlink: 'syz.4.6073': attribute type 5 has an invalid length. [ 829.270924][T30182] syzkaller1: tun_chr_ioctl cmd 1074025681 [ 829.630014][T30187] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 829.643540][T30187] bond1 (unregistering): Released all slaves [ 829.787466][T30192] sctp: [Deprecated]: syz.3.6078 (pid 30192) Use of struct sctp_assoc_value in delayed_ack socket option. [ 829.787466][T30192] Use struct sctp_sack_info instead [ 829.919517][T30196] syzkaller0: entered promiscuous mode [ 829.925187][T30196] syzkaller0: entered allmulticast mode [ 829.936358][T30196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6079'. [ 831.555033][T30149] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 831.792300][T30207] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6082'. [ 831.970206][T30219] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6084'. [ 832.089804][T30229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6081'. [ 832.611283][T30207] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 832.654473][T30259] syzkaller0: refused to change device tx_queue_len [ 833.034063][T30272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6095'. [ 833.101642][T30272] bond1: option lacp_active: invalid value (5) [ 833.111356][T30272] bond1 (unregistering): Released all slaves [ 833.131211][T30285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6100'. [ 833.176114][T30285] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6100'. [ 833.239508][T30291] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6100'. [ 833.352326][T12565] IPVS: starting estimator thread 0... [ 833.378465][T30298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6104'. [ 833.448046][T30296] IPVS: using max 25 ests per chain, 60000 per kthread [ 833.613040][T30307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 833.759125][T30314] xt_hashlimit: overflow, try lower: 18446744073709551614/255 [ 834.266908][ T5631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 834.286331][ T5631] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 834.301336][ T5631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 834.313729][ T5631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 834.322331][ T5631] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 834.539587][T30334] dummy0: entered promiscuous mode [ 834.564518][T30334] dummy0: left promiscuous mode [ 835.114869][T30354] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6118'. [ 835.162690][T30354] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6118'. [ 835.481632][T30354] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6118'. [ 835.533108][T30355] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6118'. [ 835.564712][T30354] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6118'. [ 835.675886][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 835.847281][T30368] veth0_macvtap: left promiscuous mode [ 836.398380][ T5619] Bluetooth: hci4: command tx timeout [ 837.615111][T30407] syzkaller0: entered promiscuous mode [ 837.621006][T30407] syzkaller0: entered allmulticast mode [ 837.700651][T30326] lo speed is unknown, defaulting to 1000 [ 838.056639][T30422] netlink: 'syz.1.6132': attribute type 1 has an invalid length. [ 838.374759][T13792] bond10 (unregistering): (slave geneve3): Releasing active interface [ 838.392127][T13792] bond4 (unregistering): (slave geneve2): Releasing active interface [ 838.473185][T13792] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 838.485783][ T5619] Bluetooth: hci4: command tx timeout [ 838.511134][T13792] bond8 (unregistering): (slave bridge3): Releasing backup interface [ 838.519445][T13792] bond8 (unregistering): (slave bridge3): the permanent HWaddr of slave - e2:33:f0:82:48:33 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 838.538258][T13792] bond8 (unregistering): (slave bridge4): making interface the new active one [ 838.547690][T13792] bond8 (unregistering): (slave bridge4): Error 16 setting MAC of new active slave [ 838.569306][T13792] bond8 (unregistering): (slave bridge4): Releasing backup interface [ 838.600628][T13792] bond1 (unregistering): Released all slaves [ 838.623772][T13792] bond2 (unregistering): Released all slaves [ 838.653333][T13792] bond3 (unregistering): Released all slaves [ 838.692057][T13792] bond4 (unregistering): Released all slaves [ 838.710566][T13792] bond5 (unregistering): Released all slaves [ 838.736487][T13792] bond6 (unregistering): Released all slaves [ 838.762899][T13792] bond7 (unregistering): Released all slaves [ 838.787622][T13792] bond8 (unregistering): Released all slaves [ 838.815103][T13792] bond9 (unregistering): Released all slaves [ 838.836179][T13792] bond0 (unregistering): Released all slaves [ 838.866955][T13792] bond10 (unregistering): Released all slaves [ 839.813277][T30389] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 839.828199][T30419] netlink: 'syz.1.6132': attribute type 11 has an invalid length. [ 840.560457][ T5619] Bluetooth: hci4: command tx timeout [ 842.646547][ T5619] Bluetooth: hci4: command tx timeout [ 842.858677][T30423] gretap1: entered allmulticast mode [ 842.870517][T30423] bond10: (slave gretap1): making interface the new active one [ 842.889282][T30423] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 842.930655][T13792] D†'|o: left promiscuous mode [ 843.088447][T13792] tipc: Disabling bearer [ 843.144167][T13792] tipc: Left network mode [ 843.305162][T30446] __nla_validate_parse: 2 callbacks suppressed [ 843.305193][T30446] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6137'. [ 843.351070][T30446] netlink: 'syz.1.6137': attribute type 1 has an invalid length. [ 843.466789][T30446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6137'. [ 844.911456][T30503] netlink: 'syz.5.6147': attribute type 333 has an invalid length. [ 844.921579][T30502] IPVS: set_ctl: invalid protocol: 33 172.20.20.46:20004 [ 845.014760][T30503] netlink: 316 bytes leftover after parsing attributes in process `syz.5.6147'. [ 845.760291][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 846.107952][T30326] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.146004][T30326] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.154037][T30326] bridge_slave_0: entered allmulticast mode [ 846.193176][T30326] bridge_slave_0: entered promiscuous mode [ 846.223292][T30326] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.245359][T30534] No such timeout policy "syz0" [ 846.256561][T30326] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.282238][T30326] bridge_slave_1: entered allmulticast mode [ 846.307793][T30326] bridge_slave_1: entered promiscuous mode [ 846.641387][T30326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 846.718996][T30326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 846.830879][T13792] hsr_slave_0: left promiscuous mode [ 846.860243][T13792] hsr_slave_1: left promiscuous mode [ 846.934488][T30556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6161'. [ 847.275059][ T13] smc: removing ib device syz2 [ 847.874149][T30544] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6158'. [ 848.013148][T30579] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 848.041234][ T13] smbdirect: ib_dev[syz2] removed [ 848.067018][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2 [ 848.139459][T30580] netlink: 'syz.5.6164': attribute type 10 has an invalid length. [ 848.205458][T30579] tipc: New replicast peer: 255.255.255.255 [ 848.224935][T30579] tipc: Enabled bearer , priority 10 [ 848.248617][T30580] team0: left allmulticast mode [ 848.265963][T30580] team_slave_0: left allmulticast mode [ 848.273304][T30580] team_slave_1: left allmulticast mode [ 848.279622][T30580] team0: left promiscuous mode [ 848.285173][T30580] team_slave_0: left promiscuous mode [ 848.294966][T30580] team_slave_1: left promiscuous mode [ 848.313448][T30585] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6166'. [ 848.332056][T30580] bridge0: port 3(team0) entered disabled state [ 848.342809][T30585] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6166'. [ 848.450843][T30580] 8021q: adding VLAN 0 to HW filter on device team0 [ 848.484794][T30580] bond0: (slave team0): Enslaving as an active interface with an up link [ 848.527750][T30326] team0: Port device team_slave_0 added [ 848.600935][T30326] team0: Port device team_slave_1 added [ 849.033321][T30595] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6167'. [ 849.073741][T30595] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6167'. [ 849.130867][T30605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6170'. [ 849.402105][T12551] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.572939][T30599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6169'. [ 849.646066][T30599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6169'. [ 849.657522][T30599] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6169'. [ 849.675243][T30598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6169'. [ 849.696626][T30598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6169'. [ 849.728830][T30326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.752678][T30326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.805167][T30326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 849.851378][T11681] tipc: Node number set to 996273464 [ 849.874068][T30326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.899936][T30326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.058358][T30326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.451628][T30625] netlink: 'syz.1.6175': attribute type 6 has an invalid length. [ 850.813344][T30326] hsr_slave_0: entered promiscuous mode [ 850.836385][T30326] hsr_slave_1: entered promiscuous mode [ 850.873053][T30326] debugfs: 'hsr0' already exists in 'hsr' [ 850.905445][T30326] Cannot create hsr debugfs directory [ 851.043582][T16592] block nbd7: Possible stuck request ffff888027680000: control (read@0,1024B). Runtime 330 seconds [ 851.055043][T16592] block nbd7: Possible stuck request ffff8880276801c0: control (read@1024,1024B). Runtime 330 seconds [ 851.066412][T16592] block nbd7: Possible stuck request ffff888027680380: control (read@2048,1024B). Runtime 330 seconds [ 851.077875][T16592] block nbd7: Possible stuck request ffff888027680540: control (read@3072,1024B). Runtime 330 seconds [ 851.269680][T30655] netlink: 'syz.1.6182': attribute type 32 has an invalid length. [ 851.318309][T30647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.366122][T30658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 851.677317][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 852.456100][T30687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 852.822384][T30699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 852.951310][T30704] netlink: 'syz.0.6190': attribute type 1 has an invalid length. [ 853.293571][T30715] ip_tables: iptables: counters copy to user failed while replacing table [ 853.597500][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 853.608119][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 853.671596][ T5271] 8021q: adding VLAN 0 to HW filter on device eth3 [ 856.410906][T30770] ±ÿ: renamed from lo (while UP) [ 857.035963][T30739] lo speed is unknown, defaulting to 1000 [ 857.185001][T13792] IPVS: stop unused estimator thread 0... [ 857.702206][T30800] __nla_validate_parse: 7 callbacks suppressed [ 857.702228][T30800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6208'. [ 857.750935][T30800] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6208'. [ 858.162567][T30812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6211'. [ 858.584010][T30819] syzkaller1: entered promiscuous mode [ 858.602220][T30819] syzkaller1: entered allmulticast mode [ 858.775357][T13443] IPVS: starting estimator thread 0... [ 858.835187][T30833] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:65534 [ 858.865988][T30832] IPVS: using max 29 ests per chain, 69600 per kthread [ 859.092872][T30326] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 859.149876][T30326] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 859.591160][T30326] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 859.662917][T30326] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 859.691265][T13443] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.698606][T13443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 859.714196][T30857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6217'. [ 859.998563][ T31] INFO: task udevd:17301 blocked in I/O wait for more than 143 seconds. [ 860.020151][ T31] Not tainted syzkaller #0 [ 860.033123][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 860.050224][ T31] task:udevd state:D stack:26184 pid:17301 tgid:17301 ppid:4976 task_flags:0x400140 flags:0x00080802 [ 860.080316][ T31] Call Trace: [ 860.088450][ T31] [ 860.096588][ T31] __schedule+0x17d9/0x56c0 [ 860.105305][ T31] ? __lock_acquire+0x683/0x2cf0 [ 860.118604][ T31] ? __pfx___schedule+0x10/0x10 [ 860.130273][ T31] ? schedule+0x90/0x2b0 [ 860.141309][ T31] schedule+0x164/0x2b0 [ 860.152305][ T31] io_schedule+0x7f/0xd0 [ 860.162352][ T31] folio_wait_bit_common+0x836/0xbc0 [ 860.172177][ T31] ? filemap_get_entry+0xcd/0x3f0 [ 860.178144][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 860.184238][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 860.191583][ T31] ? __filemap_get_folio_mpol+0x7c8/0x1000 [ 860.205806][ T31] do_read_cache_folio+0x1ac/0x590 [ 860.213901][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 860.220110][ T31] read_part_sector+0xb6/0x2b0 [ 860.227079][ T31] adfspart_check_POWERTEC+0x9a/0x7a0 [ 860.232659][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 860.240816][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 860.247671][ T31] ? bdev_disk_changed+0x56c/0x17a0 [ 860.253194][ T31] ? bdev_disk_changed+0x56c/0x17a0 [ 860.259029][ T31] bdev_disk_changed+0x851/0x17a0 [ 860.264467][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 860.270821][ T31] blkdev_get_whole+0x372/0x510 [ 860.276179][ T31] bdev_open+0x324/0xd70 [ 860.280638][ T31] blkdev_open+0x461/0x600 [ 860.285311][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 860.291244][ T31] do_dentry_open+0x816/0x1380 [ 860.298257][ T31] vfs_open+0x3b/0x340 [ 860.302806][ T31] ? path_openat+0x2e2d/0x3830 [ 860.309295][ T31] path_openat+0x2e44/0x3830 [ 860.314759][ T31] ? kasan_save_track+0x3e/0x80 [ 860.322885][ T31] ? do_sys_openat2+0xcc/0x200 [ 860.328661][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.335002][ T31] do_file_open+0x23e/0x4a0 [ 860.341672][ T31] ? __pfx_do_file_open+0x10/0x10 [ 860.347696][ T31] ? _raw_spin_unlock+0x28/0x50 [ 860.353021][ T31] ? alloc_fd+0x651/0x6c0 [ 860.358656][ T31] do_sys_openat2+0x115/0x200 [ 860.363801][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 860.370047][ T31] ? __x64_sys_epoll_wait+0x1d7/0x230 [ 860.376819][ T31] __x64_sys_openat+0x138/0x170 [ 860.381954][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.389075][ T31] do_syscall_64+0x174/0x580 [ 860.394031][ T31] ? clear_bhb_loop+0x70/0xc0 [ 860.401941][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.410567][ T31] RIP: 0033:0x7fe7566a7407 [ 860.415392][ T31] RSP: 002b:00007ffe87af0610 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 860.425572][ T31] RAX: ffffffffffffffda RBX: 00007fe756e48880 RCX: 00007fe7566a7407 [ 860.435177][ T31] RDX: 00000000000a0800 RSI: 000055e1494b6240 RDI: ffffffffffffff9c [ 860.444034][ T31] RBP: 000055e14948e910 R08: 0000000000000000 R09: 0000000000000000 [ 860.454659][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055e1494b0f30 [ 860.463500][ T31] R13: 000055e14949c190 R14: 0000000000000000 R15: 000055e1494b0f30 [ 860.472925][ T31] [ 860.480746][ T31] [ 860.480746][ T31] Showing all locks held in the system: [ 860.512992][ T31] 1 lock held by khungtaskd/31: [ 860.527420][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 860.550025][ T31] 2 locks held by getty/5366: [ 860.568726][ T31] #0: ffff8880361b10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 860.586325][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 860.597524][ T31] 3 locks held by kworker/1:12/8443: [ 860.603035][ T31] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 860.615076][ T31] #1: ffffc9000394fc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 860.632931][ T31] #2: ffffffff90029200 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 860.654568][ T31] 3 locks held by kworker/1:15/11681: [ 860.661143][ T31] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 860.674127][ T31] #1: ffffc9000391fc40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 860.685375][ T31] #2: ffffffff90029200 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x6f/0x770 [ 860.696676][ T31] 3 locks held by kworker/u8:43/13774: [ 860.702327][ T31] #0: ffff88803266f940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 860.714856][ T31] #1: ffffc90004ff7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 860.730544][ T31] #2: ffffffff90029200 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 860.742941][ T31] 1 lock held by udevd/17301: [ 860.748218][ T31] #0: ffff88801dfec350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 860.759422][ T31] 1 lock held by syz-executor/30326: [ 860.764890][ T31] #0: ffffffff90029200 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 860.775008][ T31] 2 locks held by syz.0.6213/30818: [ 860.782216][ T31] #0: ffffffff90029200 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 860.792430][ T31] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 860.813090][ T31] 1 lock held by syz.1.6215/30841: [ 860.819658][ T31] #0: ffffffff90029200 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 860.829513][ T31] 2 locks held by syz.5.6217/30856: [ 860.835562][ T31] #0: ffffffff90099ba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 860.844922][ T31] #1: ffffffff90029200 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5e/0x890 [ 860.857540][ T31] 2 locks held by syz.5.6217/30857: [ 860.862906][ T31] #0: ffffffff8f76b0c8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 860.874543][ T31] #1: ffffffff90029200 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 860.888572][ T31] 2 locks held by syz.3.6218/30860: [ 860.893945][ T31] #0: ffff888056d8d880 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 860.905770][ T31] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 860.918720][ T31] 1 lock held by syz.3.6218/30861: [ 860.924050][ T31] #0: ffffffff90029200 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 860.934661][ T31] 1 lock held by rm/30869: [ 860.939860][ T31] [ 860.959895][ T31] ============================================= [ 860.959895][ T31] [ 860.977749][ T31] NMI backtrace for cpu 1 [ 860.977776][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 860.977800][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 860.977813][ T31] Call Trace: [ 860.977821][ T31] [ 860.977830][ T31] dump_stack_lvl+0xe8/0x150 [ 860.977897][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 860.977990][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 860.978031][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 860.978062][ T31] sys_info+0x135/0x170 [ 860.978085][ T31] watchdog+0xfd7/0x1030 [ 860.978139][ T31] ? watchdog+0x1c7/0x1030 [ 860.978173][ T31] kthread+0x388/0x470 [ 860.978203][ T31] ? __pfx_watchdog+0x10/0x10 [ 860.978224][ T31] ? __pfx_kthread+0x10/0x10 [ 860.978255][ T31] ret_from_fork+0x514/0xb70 [ 860.978306][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 860.978336][ T31] ? __switch_to+0xc89/0x1420 [ 860.978364][ T31] ? __pfx_kthread+0x10/0x10 [ 860.978395][ T31] ret_from_fork_asm+0x1a/0x30 [ 860.978443][ T31] [ 860.978498][ T31] Sending NMI from CPU 1 to CPUs 0: [ 861.092003][ C0] NMI backtrace for cpu 0 [ 861.092023][ C0] CPU: 0 UID: 0 PID: 13441 Comm: kworker/u8:37 Not tainted syzkaller #0 PREEMPT(full) [ 861.092049][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 861.092062][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 861.092204][ C0] RIP: 0010:stack_trace_consume_entry+0x51/0x280 [ 861.092229][ C0] Code: 0f b6 44 15 00 84 c0 0f 85 09 01 00 00 44 8b 4f 10 4c 8d 77 08 4d 89 f5 49 c1 ed 03 41 0f b6 44 15 00 84 c0 0f 85 22 01 00 00 <45> 3b 0e 73 3a 48 8d 5f 0c 49 89 df 49 c1 ef 03 41 0f b6 04 17 84 [ 861.092245][ C0] RSP: 0018:ffffc90005907538 EFLAGS: 00000246 [ 861.092260][ C0] RAX: 0000000000000000 RBX: ffffc90005907640 RCX: ffffc90005907500 [ 861.092273][ C0] RDX: dffffc0000000000 RSI: ffffffff81b1fc19 RDI: ffffc90005907640 [ 861.092287][ C0] RBP: 1ffff92000b20eca R08: ffffc90005907650 R09: 0000000000000000 [ 861.092299][ C0] R10: ffffc900059075d8 R11: ffffffff81b1fc80 R12: ffff88802d93be00 [ 861.092313][ C0] R13: 1ffff92000b20ec9 R14: ffffc90005907648 R15: ffffc90005907588 [ 861.092326][ C0] FS: 0000000000000000(0000) GS:ffff888124f4a000(0000) knlGS:0000000000000000 [ 861.092341][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 861.092353][ C0] CR2: 000056430059d138 CR3: 000000004dbac000 CR4: 00000000003526f0 [ 861.092371][ C0] Call Trace: [ 861.092378][ C0] [ 861.092385][ C0] ? stack_trace_save+0xa9/0x100 [ 861.092408][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 861.092429][ C0] arch_stack_walk+0x10f/0x150 [ 861.092449][ C0] ? stack_trace_save+0xa9/0x100 [ 861.092472][ C0] stack_trace_save+0xa9/0x100 [ 861.092493][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 861.092515][ C0] ? __lock_acquire+0x683/0x2cf0 [ 861.092544][ C0] kasan_save_track+0x3e/0x80 [ 861.092598][ C0] kasan_save_free_info+0x40/0x50 [ 861.092616][ C0] __kasan_slab_free+0x5c/0x80 [ 861.092639][ C0] kfree+0x1c5/0x640 [ 861.092668][ C0] ? skb_release_data+0x85e/0xab0 [ 861.092741][ C0] skb_release_data+0x85e/0xab0 [ 861.092769][ C0] __kfree_skb+0x5d/0x210 [ 861.092790][ C0] nsim_dev_trap_report_work+0x7ac/0xb40 [ 861.092822][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 861.092841][ C0] process_scheduled_works+0xa8e/0x14e0 [ 861.092876][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 861.092899][ C0] ? assign_work+0x3cf/0x5d0 [ 861.092920][ C0] worker_thread+0xa47/0xfb0 [ 861.092955][ C0] kthread+0x388/0x470 [ 861.092978][ C0] ? __pfx_worker_thread+0x10/0x10 [ 861.092996][ C0] ? __pfx_kthread+0x10/0x10 [ 861.093020][ C0] ret_from_fork+0x514/0xb70 [ 861.093051][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 861.093075][ C0] ? __switch_to+0xc89/0x1420 [ 861.093096][ C0] ? __pfx_kthread+0x10/0x10 [ 861.093120][ C0] ret_from_fork_asm+0x1a/0x30 [ 861.093154][ C0] [ 861.375620][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 861.382528][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 861.391668][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 861.401759][ T31] Call Trace: [ 861.405074][ T31] [ 861.408038][ T31] vpanic+0x56c/0xa60 [ 861.412065][ T31] ? __pfx___schedule+0x10/0x10 [ 861.416955][ T31] ? __pfx_vpanic+0x10/0x10 [ 861.421499][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 861.427697][ T31] panic+0xc5/0xd0 [ 861.431457][ T31] ? __pfx_panic+0x10/0x10 [ 861.435929][ T31] ? preempt_schedule_common+0x82/0xd0 [ 861.441429][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 861.446841][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 861.453018][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 861.459215][ T31] watchdog+0x1030/0x1030 [ 861.463586][ T31] ? watchdog+0x1c7/0x1030 [ 861.468017][ T31] kthread+0x388/0x470 [ 861.472110][ T31] ? __pfx_watchdog+0x10/0x10 [ 861.476800][ T31] ? __pfx_kthread+0x10/0x10 [ 861.481435][ T31] ret_from_fork+0x514/0xb70 [ 861.486073][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 861.491227][ T31] ? __switch_to+0xc89/0x1420 [ 861.495937][ T31] ? __pfx_kthread+0x10/0x10 [ 861.500557][ T31] ret_from_fork_asm+0x1a/0x30 [ 861.505376][ T31] [ 861.509017][ T31] Kernel Offset: disabled [ 861.513530][ T31] Rebooting in 86400 seconds..