last executing test programs: 3m8.118195457s ago: executing program 1 (id=12709): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x2c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x26000000) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x118, 0x2c, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES64=r4], 0x50}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x2c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x26000000) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x118, 0x2c, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES64=r4], 0x50}}, 0x0) (async) 3m7.990404191s ago: executing program 1 (id=12713): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet6_int(r3, 0x29, 0x1, &(0x7f0000000440), 0x4) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x439, 0x40, 0x0, {0x0, 0x0, 0xe403, r4, 0xa000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48050}, 0x200080d0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="24010000160001"], 0x124}}, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0xbf, 0x7, 0x946, 0x4, 0x1, 0x9, 0x1ff, 0x8001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r10 = socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f00000002c0)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r12, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x8, 0x6, 0x6}, 0x76}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) 3m7.03002064s ago: executing program 1 (id=12729): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x8, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x4}}}}]}, 0x34}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$PPPIOCCONNECT(r4, 0x4004743a, &(0x7f00000001c0)=0x1) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x4000) 3m6.81080418s ago: executing program 1 (id=12733): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x44000) 3m6.719554568s ago: executing program 1 (id=12735): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x474c}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_LIMIT={0x6}]}}]}, 0x70}}, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x6, @remote}, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @private=0xa010100}], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) sendmmsg$inet_sctp(r3, &(0x7f0000002ac0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@sndinfo={0x20, 0x84, 0x2, {0x24de, 0x201, 0x4, 0x6f, r4}}], 0x20, 0x20008001}], 0x1, 0x24010000) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x4, 0x90, [0x200000000780, 0x0, 0x0, 0x2000000007b0, 0x200000000ae4], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000001000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff0000000033aaf6d64d95acaec453d203dcf2917e8bf12b61ea4a1418301909dd90639cdaa8c3cb0154d3d516058d96a5797e1a3ef0a84a8615b75c06ea74b009d1804a7b30866fd9dc564f1ded5435197ed58d58f011b66ff44400aff41d3edd5f6611502ad2b2c8d65d3150a8dd1fb7f3fbf4428956c67a160d0df65c468c386d4f55fd9dde890ce2bd42b069adb9f7a9e00d0ce6b1fc514871a853b8083f27f29534875e118234be4b97326bb2ee5b46ba06bccf8943dae9c8badc9091d463982d8dcd5f1d869b256693da8c78b9b574208a1a398f1b699c156c7589c33621cae037ba0149d7cc3cd0a4826212bf33b89819566c52dab844"]}, 0x1fd) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) socket(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) listen(r5, 0x1ad72f7) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r7, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xab}]}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3m5.746123881s ago: executing program 1 (id=12750): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x26, 0x1, 0x7fffd, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x4, 0x4, 0x380, 0xffffffff, 0x1e0, 0x0, 0x1e0, 0xfeffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x41, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000880)={'veth0_to_hsr\x00', 0x0}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_mreqn(r5, 0x0, 0x23, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@private, @multicast2}, &(0x7f0000000180)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'gretap0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x20, 0x40, 0x8, 0x3262, {{0x2a, 0x4, 0x1, 0x2e, 0xa8, 0x67, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x22}, {[@rr={0x7, 0x1f, 0x1b, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @local, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x27}]}, @generic={0x44, 0xd, "487828cf6b9ec66623257e"}, @timestamp_addr={0x44, 0x34, 0xfe, 0x1, 0x8, [{@private=0xa010102, 0x3}, {@rand_addr=0x64010101, 0x5}, {@broadcast, 0x4378}, {@broadcast, 0x401}, {@rand_addr=0x64010100, 0x6719}, {@rand_addr=0x64010102, 0x2}]}, @timestamp={0x44, 0x1c, 0x6, 0x0, 0xe, [0x76, 0x8, 0x3ff, 0x14, 0x9, 0xffffc000]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0x45, 0x3, 0x5, [{@multicast1, 0x7}, {@local, 0x6}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x2a, &(0x7f00000007c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0xf9, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000ac0)={0xfffffffffffffffd, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={0x7c, r6, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0xfffffffffffffe60, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xff}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4894}, 0x20000885) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000a80)=@generic={&(0x7f0000000a00)='./file0\x00', r8}, 0x18) 2m50.69806266s ago: executing program 32 (id=12750): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x26, 0x1, 0x7fffd, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x4, 0x4, 0x380, 0xffffffff, 0x1e0, 0x0, 0x1e0, 0xfeffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x41, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000880)={'veth0_to_hsr\x00', 0x0}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_mreqn(r5, 0x0, 0x23, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@private, @multicast2}, &(0x7f0000000180)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'gretap0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x20, 0x40, 0x8, 0x3262, {{0x2a, 0x4, 0x1, 0x2e, 0xa8, 0x67, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x22}, {[@rr={0x7, 0x1f, 0x1b, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @local, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x27}]}, @generic={0x44, 0xd, "487828cf6b9ec66623257e"}, @timestamp_addr={0x44, 0x34, 0xfe, 0x1, 0x8, [{@private=0xa010102, 0x3}, {@rand_addr=0x64010101, 0x5}, {@broadcast, 0x4378}, {@broadcast, 0x401}, {@rand_addr=0x64010100, 0x6719}, {@rand_addr=0x64010102, 0x2}]}, @timestamp={0x44, 0x1c, 0x6, 0x0, 0xe, [0x76, 0x8, 0x3ff, 0x14, 0x9, 0xffffc000]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0x45, 0x3, 0x5, [{@multicast1, 0x7}, {@local, 0x6}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x2a, &(0x7f00000007c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0xf9, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000ac0)={0xfffffffffffffffd, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={0x7c, r6, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0xfffffffffffffe60, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xff}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4894}, 0x20000885) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000a80)=@generic={&(0x7f0000000a00)='./file0\x00', r8}, 0x18) 2m24.969546643s ago: executing program 0 (id=13278): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x3, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0xc1, 0xffffffff, 0x0, 0x5, 0x85, 0x0, 0x3d38, 0x5, 0x7, 0x0, 0x0, 0x2, 0x0, 0x5, 0xd, 0x6, 0x6, 0x0, 0x6, 0x800, 0x4, 0xa, 0x7, 0xd, 0x3, 0x1, 0x80f, 0x4, 0x6, 0xed, 0x8000, 0x200, 0x3, 0x3, 0x8, 0xb, 0xfffffffa, 0x5, 0xd, 0xffff92e1, 0x2, 0x7, 0x8, 0x8, 0xfff, 0x101, 0xfffffff8, 0xfffffffc, 0x2, 0xa, 0xfffffffd, 0x8, 0x3, 0x6, 0xffff, 0xf0b, 0x6, 0x7, 0x8, 0x0, 0x9, 0x7, 0x9a, 0xe, 0x7fffffff, 0x8, 0xf9, 0x6, 0x6, 0xfffffffc, 0x7a132062, 0x7fff, 0x5, 0x7fff, 0x200, 0xc, 0x6, 0x60000000, 0x1, 0x200, 0x86f0, 0x2, 0x1, 0x3, 0x8, 0x9, 0x7, 0x3, 0x1, 0x7, 0x4e6, 0x4, 0x0, 0x40000, 0x2, 0x4, 0x2, 0x3, 0x8, 0x8, 0x3, 0x9, 0x3, 0x8, 0x7ff, 0x100, 0x5, 0x4, 0x10, 0x4, 0x40000000, 0xffffffee, 0x7ff, 0x2, 0x5, 0x64, 0x2, 0x6, 0xffff, 0x800, 0x8000, 0x2, 0xffffffff, 0x7de, 0x3, 0xe, 0x0, 0x1, 0x6a9, 0x2d, 0x5, 0x9, 0x200, 0x800, 0x6ac, 0x5d1, 0x7, 0x8, 0xd8c, 0x4, 0xfffffedb, 0x9, 0x8, 0xf, 0x6b, 0x6, 0x3, 0x1, 0x1ff, 0x40, 0x584, 0x800, 0x9, 0x5, 0x8, 0xffffffff, 0x4, 0x2, 0x1, 0x7, 0x4ee, 0x1, 0x0, 0x432, 0x62, 0x5, 0xc, 0xacd, 0x31, 0x2, 0x2, 0x7, 0x3, 0x2, 0x0, 0x6, 0x4, 0x0, 0x5, 0x4, 0x786a, 0x3, 0x8, 0x0, 0xfffffffa, 0x1000, 0x3, 0x6, 0x7, 0x6, 0x2, 0x7, 0xadf7, 0x9, 0x10000, 0x8, 0x8, 0x2, 0x7, 0xc, 0x200, 0x3, 0x0, 0xfffffffd, 0x1, 0x3, 0x1, 0x2, 0x7, 0x5, 0x4, 0x8aa, 0x3, 0x55, 0x80000001, 0x2, 0x9, 0x8, 0x7, 0xfff, 0x101, 0x5, 0x9, 0xd16, 0x4, 0x7f, 0x8001, 0x77a3, 0x1, 0xc1, 0x7f, 0x2, 0x7, 0x7, 0x3, 0x81, 0x3, 0x6, 0x9, 0x4, 0x10001, 0x1, 0x9, 0x5, 0x5a, 0x5, 0x0, 0x4a, 0x5, 0x4, 0x1, 0xe7, 0x5, 0x1, 0xec, 0x1]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x7e, 0x2, 0x7, 0x5, 0x2, 0x10000}, {0xfc, 0x1, 0x1000, 0x8000, 0x5, 0x8}, 0x0, 0x4, 0x21db}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4001}, 0x4008000) (async) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x3, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0xc1, 0xffffffff, 0x0, 0x5, 0x85, 0x0, 0x3d38, 0x5, 0x7, 0x0, 0x0, 0x2, 0x0, 0x5, 0xd, 0x6, 0x6, 0x0, 0x6, 0x800, 0x4, 0xa, 0x7, 0xd, 0x3, 0x1, 0x80f, 0x4, 0x6, 0xed, 0x8000, 0x200, 0x3, 0x3, 0x8, 0xb, 0xfffffffa, 0x5, 0xd, 0xffff92e1, 0x2, 0x7, 0x8, 0x8, 0xfff, 0x101, 0xfffffff8, 0xfffffffc, 0x2, 0xa, 0xfffffffd, 0x8, 0x3, 0x6, 0xffff, 0xf0b, 0x6, 0x7, 0x8, 0x0, 0x9, 0x7, 0x9a, 0xe, 0x7fffffff, 0x8, 0xf9, 0x6, 0x6, 0xfffffffc, 0x7a132062, 0x7fff, 0x5, 0x7fff, 0x200, 0xc, 0x6, 0x60000000, 0x1, 0x200, 0x86f0, 0x2, 0x1, 0x3, 0x8, 0x9, 0x7, 0x3, 0x1, 0x7, 0x4e6, 0x4, 0x0, 0x40000, 0x2, 0x4, 0x2, 0x3, 0x8, 0x8, 0x3, 0x9, 0x3, 0x8, 0x7ff, 0x100, 0x5, 0x4, 0x10, 0x4, 0x40000000, 0xffffffee, 0x7ff, 0x2, 0x5, 0x64, 0x2, 0x6, 0xffff, 0x800, 0x8000, 0x2, 0xffffffff, 0x7de, 0x3, 0xe, 0x0, 0x1, 0x6a9, 0x2d, 0x5, 0x9, 0x200, 0x800, 0x6ac, 0x5d1, 0x7, 0x8, 0xd8c, 0x4, 0xfffffedb, 0x9, 0x8, 0xf, 0x6b, 0x6, 0x3, 0x1, 0x1ff, 0x40, 0x584, 0x800, 0x9, 0x5, 0x8, 0xffffffff, 0x4, 0x2, 0x1, 0x7, 0x4ee, 0x1, 0x0, 0x432, 0x62, 0x5, 0xc, 0xacd, 0x31, 0x2, 0x2, 0x7, 0x3, 0x2, 0x0, 0x6, 0x4, 0x0, 0x5, 0x4, 0x786a, 0x3, 0x8, 0x0, 0xfffffffa, 0x1000, 0x3, 0x6, 0x7, 0x6, 0x2, 0x7, 0xadf7, 0x9, 0x10000, 0x8, 0x8, 0x2, 0x7, 0xc, 0x200, 0x3, 0x0, 0xfffffffd, 0x1, 0x3, 0x1, 0x2, 0x7, 0x5, 0x4, 0x8aa, 0x3, 0x55, 0x80000001, 0x2, 0x9, 0x8, 0x7, 0xfff, 0x101, 0x5, 0x9, 0xd16, 0x4, 0x7f, 0x8001, 0x77a3, 0x1, 0xc1, 0x7f, 0x2, 0x7, 0x7, 0x3, 0x81, 0x3, 0x6, 0x9, 0x4, 0x10001, 0x1, 0x9, 0x5, 0x5a, 0x5, 0x0, 0x4a, 0x5, 0x4, 0x1, 0xe7, 0x5, 0x1, 0xec, 0x1]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x7e, 0x2, 0x7, 0x5, 0x2, 0x10000}, {0xfc, 0x1, 0x1000, 0x8000, 0x5, 0x8}, 0x0, 0x4, 0x21db}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4001}, 0x4008000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) epoll_pwait(r3, 0x0, 0x0, 0x45, &(0x7f0000000280)={[0x8]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2m24.900612005s ago: executing program 0 (id=13281): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, '\x00'}, {0x18, 0x110, 0xc, "e8"}], 0x30}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r2, 0x0, 0x5, 0xff, 0x0, 0x1, @private2, @remote, 0x8, 0x80, 0x1, 0x10000}}) 2m24.726702839s ago: executing program 0 (id=13286): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r1, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x68000) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="28090c0093dfe88e2a763d7a42fd1c6a88e9a6d317f0dd5e81e8a9a4267a6fc70000000044518ac129efa6a4bb2f5fbd270f63e7afaf229d66c6d453069864a6f90c393f6300", @ANYRES16=0x0, @ANYBLOB="000828bd7000fcdbdf253e00000008000300", @ANYRES32=r1, @ANYBLOB="0c009900000100005f000000"], 0x28}, 0x1, 0x0, 0x0, 0x8020}, 0x4044000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f0000000000), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100001040300"/20, @ANYRES32=0x0, @ANYBLOB="00010000000000001c0012804f7cc25c626f6e64000000000c00028005001d008a"], 0x3c}}, 0x54) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x7, 0x8, 0x1, 0x20000, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2, 0x5}, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'gre0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x700, 0x40, 0x4, 0xffff, {{0x51, 0x4, 0x2, 0x39, 0x144, 0x64, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, @multicast2, {[@timestamp_addr={0x44, 0x4c, 0x79, 0x1, 0x8, [{@loopback, 0x7}, {@multicast1, 0x7}, {@private=0xa010100}, {@loopback, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0xe1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@multicast1, 0x5}, {@broadcast}]}, @timestamp_prespec={0x44, 0x34, 0x39, 0x3, 0x2, [{@local}, {@broadcast, 0x715d}, {@multicast2, 0xe}, {@private=0xa010100}, {@local, 0xe}, {@broadcast, 0xffffffff}]}, @lsrr={0x83, 0xb, 0x65, [@dev={0xac, 0x14, 0x14, 0x1e}, @private=0xa010101]}, @cipso={0x86, 0x42, 0xffffffffffffffff, [{0x0, 0x7, "0d2496a239"}, {0x2, 0x4, "924d"}, {0x7, 0xb, "51ac38d0c8c128308e"}, {0x7, 0xb, "69311c73079ed85404"}, {0x2, 0x9, "7870b40e0ab3ba"}, {0x0, 0x12, "e36af75a46b3d44aa68009f25281adc0"}]}, @generic={0x94, 0xb, "705e49b6d9914e3c37"}, @ssrr={0x89, 0x23, 0x43, [@dev={0xac, 0x14, 0x14, 0x15}, @remote, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x38}, @broadcast, @local, @broadcast]}, @noop, @timestamp_prespec={0x44, 0x34, 0xde, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@broadcast, 0x3}, {@rand_addr=0x64010101, 0xfffffffa}, {@loopback, 0x8000}, {@multicast2, 0x1}, {@local, 0x8}]}]}}}}}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x3c, r13, 0x1, 0x0, 0x0, {0x30}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x3c}}, 0x48800) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)={0x174, r13, 0x0, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x63}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x174}, 0x1, 0x0, 0x0, 0x10}, 0x4040) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r14, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x64, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x1ff, 0x4, 0x0, 0x5, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x6, 0xea, 0x45eb0a72, 0xfffffff8}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) sendto$packet(r9, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r14, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x20048000}, 0x8081) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x0, '\x00', r7, r8, 0x0, 0x2, 0x2}, 0x50) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r5], 0x1bbc}, 0x1, 0x0, 0x0, 0x404c090}, 0xc000) 2m24.426457046s ago: executing program 0 (id=13292): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) unshare(0x60480) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d30000000001000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40}, 0x94) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x4}, &(0x7f00000000c0)=0x8) (async, rerun: 32) connect$netlink(r1, &(0x7f0000000300)=@unspec, 0xc) (async, rerun: 32) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)={0x20, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x80d4) 2m24.316151115s ago: executing program 0 (id=13294): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x16, 0x2, 0x1, 0x40000000}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x100, 0x0, 0x0, 0x11, 0x0, @empty=0x10000e0, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0xc0, 0x100, @val=0x80}}}}}}}, 0x0) 2m24.028547218s ago: executing program 0 (id=13299): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "12ad"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$unix(0x1, 0x2, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x6e8, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x618, 0xffffffff, 0xffffffff, 0x618, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x330, 0x358, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', {0x6}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xc4, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x748) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r4, &(0x7f0000000040)={0x22, 0xf7, 0x1, 0x1, 0x2}, 0x6) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002600010026bdf0230b404cfc05000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m23.875387435s ago: executing program 3 (id=13304): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000100)=0x8, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a8558405a034ef6aa10933edb10dae072c0dea8f2cc73c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x4, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5a}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x7}}, [], {{0x6, 0x1, 0x3, 0x8}, {0x6, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000010000300000000000000002501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) 2m23.753269044s ago: executing program 3 (id=13306): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x36}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r1, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x38}}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0xb, 0x0, &(0x7f0000000080)=0x1a) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x786c4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 2m23.690414126s ago: executing program 3 (id=13307): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x0) 2m23.527320909s ago: executing program 3 (id=13309): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1cf38a1c00005184f96e5de6cb9a3a2ac0316d80029a99f5"], 0x4) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x64, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x34, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xa6}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_TARGET={0x8, 0x8, 0x6}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x4a}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x64}}, 0x44080) 2m23.370085452s ago: executing program 3 (id=13312): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="efb71d63709f44a16ffe30184716767bec1703ad78a14eee1fe331bd8fce489bf3b05d10d5442179ed165a5863c5901fb9f4c41136b1742141c85321e9f81c0a42fa1fc48fb5534f6808d1a7363c906f9abbb7ae42a490855e7807045d6d7d6154ec054d1d71d3e72463df0be67a09357f3642a589959a1229bbf81ba95913047a42fbcc2d3f90c5190361488686e4ad40127dcf931c9c5a14321f1a3804f1625f42074519a65e9e296b7e0c44af1c5504f1275ea04f00f94d059b7278acca7419a68e", 0xc3}, {&(0x7f0000000140)="661ee1a73dfb6aa7c2b6f7a5d21c72c58275fe53ebc1ba5ea1637070bd1149f56c0c8400de51c7874c2742ec1bdca7e28eeb6bfcfbd96637adc831d659548511b97fc939a2e6c253150496cff18b69f1558ab83642c41d8281d14f04971119e9ccfe1a657c5f335e1ba22a3d7987d6178556681d34985130e51a07592ef10405940593b035e955e4fe8e764848f741c2d771726c273c1ff8dabecb223cade576c02b4df6de72509fcd200d66e6ffd407b36675196d87808801e4bb063860280b4fccebcffa73471768d4df9af35ff10310f441eaa262a9d1f92df75c64eead50d35bb897c456ae49c9e1", 0xea}, {&(0x7f0000000240)="c039ca4b5fae49f7db179be5084e4fb81453b8483f5223a4bb71cc44db565518345534717f324d89d20f5b3edb6b675ec080e7dc6871a24ffadfe92cc43ad928371206c842a2296555db3ee8dec5fc3d35e49f73bf7e655011f6e4da3baa1146273198035f06c75cc5d8404ecb416312276f9a6264cde3ac321f864a8410960e77296b0dcc5d2d66", 0x88}, {&(0x7f0000000300)="13e6a95dc4536572239fce687746dac9d869a5279f881cc1314fc815b493d387a8ee4594acb89785644670a3856e539573c6d5cfd0b44e3364e00e7eb46e40983bc0d16a77bc43f681a07ccf71d04d10a7bad97f186e129c2c91953ef0e36b6421aaceff5e8214455278fd1291d89e394094e8ae0ba7933ed631d3bf9b22c42bab1ecd449ca5320db270c38e55dd5621d0", 0x91}, {&(0x7f00000003c0)="f542a9eecb71fa4b3e4d1485d1be1d52224574e5fa8b8393950f58f3097fede836f2dd1c42f19a91bd87fed14c8c06411e42dd70a4f1ae2135a905f794eccfec5bde84e598c0c41ad8c9bec059f3e238a7af1197b7e50744c2c66c9af74571148085edf10f60b8b8a46790c0eabbf4cda8576c967791cd3c7e2d7bfdb956d2c43a6c35f35e8e9cc941de7e88920a3fff", 0x90}, {&(0x7f0000000480)="d640fa896bfc77e6e98c3ebe371f15aaec101c7db267a3f1d567c3ca6ce0e99e1a317f458bdee8cd5b3b66fe4af24ed3c94ce9beb168c201332baf1407711d73a6a1c041ca2846c76af398f316f7a044ecb7c5e5244eb1d179f80cb7245bf01d54692428b231ecc1914cb985b44471ade57327893016d56657058c6b77f11d4ef9bbb641f4be86647c5ab15810b1134884d93b7526f63ee051", 0x99}, {&(0x7f0000000540)="52d7e342b178fa885ee86cd1c8b38adb8e02580d29d0533ba5fc4c44ea00e23c8801ae97cd25ebe469d54995039baf49fa6cfce48216e9329016d122ab7562adcfd4006cc95a810307b28450bd8525941d05ba5d35d91abb32915a6c63dc7e5210fa1f0ba8b3dcf3ecdb37c358c43c1b8627adbe9d3647c1e530d4b734b4cea2d05e8fb00c51ddff29e487293b59775ad9e30a54abe78facac808f79e041e4c4c39d57c0f7691a5136f8428cda9cd1d7b4908ddea5f66ad5f65dfbce6f58382c9fcf8e26a83227686a92a247453fcddc87d9a923823478a2dd207284", 0xdc}], 0x7, 0x0, 0x0, 0x1f00c00e}, 0x0) 2m23.250508181s ago: executing program 3 (id=13314): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8931, &(0x7f0000000100)={'wlan1\x00', @broadcast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000026000100fdff0700001000000400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)={0x318, 0x2e, 0x1, 0x3, 0x25dfdbfc, "", [@nested={0x305, 0x10f3, 0x0, 0x1, [@nested={0xc, 0xe5, 0x0, 0x1, [@typed={0x8, 0xda, 0x0, 0x0, @pid}]}, @nested={0x15d, 0x7f, 0x0, 0x1, [@generic="cc39cb9db042474549524889905886009171313736215baae9fdfd00355318c9977e4535d6b232b37dc0067392db2608b279505c77b74983531f58fce686effe61b609487abb81bc75d4e67ca3e055d72cb435ab6f1639ffd15c57dfcf7a0a6386e7afb30e5a0ce79b72d75913", @generic="f80bec69229f826d13775d03b15cc5d9882718098ed0675d1935b77f14e53e774732635edbf74182997ee5", @generic="8a1413e08e03a3389678ab2957a52405dabfa582c12516d13e7b20e21bec94abd3cc16f391bb36c846adb1a2dde9e7c38240b38b72f3f4f667a4f434dde0b0aeb0a2f56f7fd8eba140f139432ea7537f6f3f749d8dfca2af8f34aebbe449c0fda2131ad1c773103d88ebb282185baceaa3003f43f6993418a06f3f7a0a4a7342638a92486ebfdd5f632e95a74f510d67c3ea24374ce3676f13e058fe6d39426ccf2a0bf4c7e7ebab5b43d4756cbc7775fed402e1e066532afc62323a1bacacdf62"]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817", @generic="053b3a0b0a3176fa81d5dd205df77d46f70df08bc18894624e7bffe90164484395675b08b5cb590c676c2142be91e216739d0690e72a5925af7fb13fb2a4be76902e2211229172bd7c360f6d603e8eff61b35dd6ff34fe58dc5d3ba23ebb70b0d2f8d302084ad3e98ec61864d2cb9d0647451ab80d4f325eadc8d7ad364274f68cf6f7874b0d0c1b6442967dae092f893ad27643e311bc94a206618e9e36515064a0fab336692db34956ed512f98d73cf478601a5677008289970a674d1b41"]}]}, 0x318}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0x300, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x7, 0xfff3}, {}, {0x7, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c0001800600060088a80000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) socket$kcm(0x10, 0x2, 0x0) 2m9.073703101s ago: executing program 33 (id=13299): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "12ad"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$unix(0x1, 0x2, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x6e8, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x618, 0xffffffff, 0xffffffff, 0x618, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x330, 0x358, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', {0x6}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xc4, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x748) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r4, &(0x7f0000000040)={0x22, 0xf7, 0x1, 0x1, 0x2}, 0x6) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002600010026bdf0230b404cfc05000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m8.19711342s ago: executing program 34 (id=13314): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8931, &(0x7f0000000100)={'wlan1\x00', @broadcast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000026000100fdff0700001000000400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)={0x318, 0x2e, 0x1, 0x3, 0x25dfdbfc, "", [@nested={0x305, 0x10f3, 0x0, 0x1, [@nested={0xc, 0xe5, 0x0, 0x1, [@typed={0x8, 0xda, 0x0, 0x0, @pid}]}, @nested={0x15d, 0x7f, 0x0, 0x1, [@generic="cc39cb9db042474549524889905886009171313736215baae9fdfd00355318c9977e4535d6b232b37dc0067392db2608b279505c77b74983531f58fce686effe61b609487abb81bc75d4e67ca3e055d72cb435ab6f1639ffd15c57dfcf7a0a6386e7afb30e5a0ce79b72d75913", @generic="f80bec69229f826d13775d03b15cc5d9882718098ed0675d1935b77f14e53e774732635edbf74182997ee5", @generic="8a1413e08e03a3389678ab2957a52405dabfa582c12516d13e7b20e21bec94abd3cc16f391bb36c846adb1a2dde9e7c38240b38b72f3f4f667a4f434dde0b0aeb0a2f56f7fd8eba140f139432ea7537f6f3f749d8dfca2af8f34aebbe449c0fda2131ad1c773103d88ebb282185baceaa3003f43f6993418a06f3f7a0a4a7342638a92486ebfdd5f632e95a74f510d67c3ea24374ce3676f13e058fe6d39426ccf2a0bf4c7e7ebab5b43d4756cbc7775fed402e1e066532afc62323a1bacacdf62"]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817", @generic="053b3a0b0a3176fa81d5dd205df77d46f70df08bc18894624e7bffe90164484395675b08b5cb590c676c2142be91e216739d0690e72a5925af7fb13fb2a4be76902e2211229172bd7c360f6d603e8eff61b35dd6ff34fe58dc5d3ba23ebb70b0d2f8d302084ad3e98ec61864d2cb9d0647451ab80d4f325eadc8d7ad364274f68cf6f7874b0d0c1b6442967dae092f893ad27643e311bc94a206618e9e36515064a0fab336692db34956ed512f98d73cf478601a5677008289970a674d1b41"]}]}, 0x318}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0x300, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x7, 0xfff3}, {}, {0x7, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c0001800600060088a80000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) socket$kcm(0x10, 0x2, 0x0) 7.159480935s ago: executing program 5 (id=14630): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0x2, 0x0, 0x0, @private1}, 0xf) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10002) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f00000001c0)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x140}}], 0x2, 0x2400804c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x113, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}, 0x1c}}, 0x4000) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000240}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000}, @exit, @exit, @call={0x85, 0x0, 0x0, 0x94}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 6.217541313s ago: executing program 5 (id=14641): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@ipv4_delrule={0x40, 0x21, 0x4, 0x70bd26, 0x25dfdbfe, {0x2, 0x14, 0x20, 0x0, 0x3, 0x0, 0x0, 0x8, 0x14}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0xfffffffffffffe16, 0xd, 0x4}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xb84}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff1}, {0xe, 0xffe0}, {0xf, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @time_exceed={0x4, 0x1, 0x0, 0x9, '\x00', {0x0, 0x6, "f99063", 0x800, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @loopback, [], "af34000000000000"}}}}}}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 6.077446353s ago: executing program 5 (id=14644): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff1c, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000004000000000000000000000000000000000000000880000004000000000000000000004000000000000000000000000000000000000000000000000025bd70000000000002000001000000000000000008001f0004000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000e65100000000000000000000000000000c001c00"/251, @ANYRESDEC, @ANYBLOB="b58979"], 0x14c}}, 0x4810) 5.846139352s ago: executing program 5 (id=14646): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000f80)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x70}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 4.103663445s ago: executing program 5 (id=14648): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000cbc0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x0, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {}, {0xfff, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xe1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r1 = socket(0xa, 0x3, 0x3a) getsockopt$nfc_llcp(r1, 0x3a, 0x1, 0x0, 0x20000000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\a\x00\x00B\x00'], 0xfe33) recvmsg(0xffffffffffffffff, 0x0, 0x40000020) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r7], 0x20}}, 0x8080) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r3, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r5], 0x34}}, 0x4008000) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r8, 0x0, 0x41, &(0x7f0000000340)={'filter\x00', 0xd1, "eb15538b47965726112c439e2515ecc000040945c73d41f8537ad754c194510d39426dfcb488e3197c9f032408f4a104ec4721ba26b63444ab54a3b8cde3d927303a6c9ec0f42936318676b3b3fb0438a6887ea7d1c2eed56b1ed1162653aae6ff46eb8097acc9a5a3860621de6b9f5065ca4fb7140397c830b6e2a9c37e3e5013d71843a1279fc2c21b7d12e070de6c6a92c9a36005277b388c9bb7b0d8977bc34c8df825545013241f855400878bdb4f3bc8fa0acadefa67dde52257fac40ce040cf5f02dc1b0ce74ae106e3e27ad8be"}, &(0x7f00000001c0)=0xf5) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) getpeername(r9, &(0x7f0000000080)=@nfc, &(0x7f0000000100)=0x80) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xf5, 0x0, 0x0, @ipv4=@multicast2}]}, 0x18}], 0x1}, 0x0) sendmsg$inet(r8, &(0x7f00000052c0)={&(0x7f0000003fc0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="280000000000001308000000070000008617ffffffff021190261cf17d180c5deb1100b4cd8cc300"], 0x28}, 0x4040080) 3.674182636s ago: executing program 5 (id=14655): r0 = socket$inet6(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x4000) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000300)={0x9, 0x81, 0x0, 0x4, 0x1, [0x9, 0x9, 0x8, 0x5]}) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100000000000000000008"], 0x14}], 0x1}, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x4}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000100000000"], 0x8) accept$inet6(r5, 0x0, &(0x7f00000002c0)) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fedbdf2505000000080009000200000006aa0a0000050004003400"/46], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_per_queue_op={0x4b, 0x1, [0x80, 0x6579, 0x9, 0x400, 0xfffffffa, 0x80000000, 0x0, 0x0, 0xa8, 0x9, 0x5, 0x40, 0x4, 0x38, 0x800, 0x10001, 0x3, 0x7, 0x7fff, 0x97, 0x4, 0x8001, 0x4, 0x2, 0x7, 0x2, 0x380000, 0x6, 0xb, 0xb4, 0x5, 0x1, 0x1000, 0x1, 0x1, 0x32146399, 0x6, 0xfff, 0x3, 0x9, 0x3, 0x5, 0x9, 0x800, 0x5, 0xe, 0x9e3, 0xfffeffff, 0x7fffffff, 0x5, 0x1ec0, 0x2c22, 0x9, 0x6, 0x2, 0x6, 0xc20a, 0x5, 0x1, 0x26bd, 0x5, 0xe406, 0x4, 0x4, 0x2, 0x400, 0x7, 0xffffffff, 0x7, 0xffff, 0xfffffffb, 0x1, 0x5, 0x7, 0x2, 0x10, 0xbee, 0xc7, 0x10, 0x5, 0xda, 0x401, 0xf, 0x6, 0xfffffffe, 0xe74a, 0x10, 0xffff8b55, 0x8, 0x2893, 0x0, 0x5d, 0x4, 0x4, 0x6, 0x7, 0x4, 0x9, 0xffffffff, 0x5, 0xffff, 0x3, 0x200, 0x801, 0x3, 0x2, 0xffff7fff, 0x7, 0xda62, 0x5a0, 0xa9, 0x9, 0x3, 0x3, 0x6, 0x100, 0x1, 0x0, 0x9, 0x4, 0x8, 0x5, 0x7ff, 0x7, 0x9, 0x5, 0x7068, 0xfff]}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r8 = socket$unix(0x1, 0x2, 0x0) listen(r8, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)=@o_path={&(0x7f0000000180)='./file0\x00', r11, 0x4000, r8}, 0xfffffffffffffeb1) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000000000003900000008000300", @ANYRES32=r10, @ANYBLOB="1c005a80180004801400040006"], 0x38}}, 0x2400c090) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 3.530190877s ago: executing program 4 (id=14657): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x70bd2b, 0x0, {0x6, 0x0, 0x900}}, 0x14}, 0x2, 0x34005}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000980)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000f4ff00000000000000000000000000000019000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000001"], 0x90) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x100000c6}, 0x24000010) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) sendto$inet6(r5, &(0x7f0000000180)="33c2d8fd561b40", 0x7, 0x4080, &(0x7f00000001c0)={0xa, 0x4e23, 0x8, @mcast2, 0xc}, 0x1c) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)="657cfbeaeb5ebbb936d6c45a759393942f348663f3bca546b8983dc5400ce031b9b9692101dd4a54cccfa93fa34af6580f6e47c5e727468f8dd634c6a63a11a51c32290f8ad12bff3560d7710b0adc6050c34e3190d08d8feb20f8b80ebe6d2534b1ba785590a7abf31815a3c2911420a12e53fafa8a23a28effd9d50b123116a746b9ecd6e57e465ab034880ee3665f7dab45b250073b682583765095d4019c7ea3b91c23621d379a870cedc21381b8725178cd42777aaf3528e4ab1df53f94ec6ade841454d24a22aec938ae263158198a8f5bd7b01208bb05ad9b82cb4773eb", 0xe1) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @private=0xa010102, {[@generic={0x7, 0x7, "0441b613a3"}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x6) ioctl$SIOCAX25CTLCON(r6, 0x89e8, &(0x7f0000000080)={@default, @default, @null, 0x63, 0xffffffffffff0001, 0x7, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000280)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x1c) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0x7d, &(0x7f0000000700)={0x0, 0xfffff801, 0x11e2000, 0x62c, 0x100, 0x2, 0x2, 0x4, {0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x3, 0xfffffffb, 0x3, 0x1000, 0x1}}, &(0x7f00000007c0)=0xb0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x5, &(0x7f0000000100)=[{0x8, 0x85, 0x1, 0x9}, {0xf, 0x4, 0xf6, 0x101}, {0x8, 0x8, 0xad, 0x3}, {0x0, 0x80, 0x9, 0x4}, {0xe, 0x7, 0x2, 0x257}]}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYBLOB="b14888b2515df969854f81d0ac68c1fbb884b96efabb538562b2a79e89057d5c761cc329061daf569be40ae7f0891e5692789e6f1d663f446e85f9c6928aec516f6535fa43946b28154fb2d7dfdf2e09ef623422f995ec5dcae0b694f8b30c8e2e91c84b67f76a8c43f518f8d2da5c97998af740831e6a85069445e2cab16e195e396d3cdf4ed499527ffd381b1bf105c98d6466a20caed24a06e0bc885370a9c36f89c84c0344f35357dc487d816497046e1a9e8162cdf8e2d4", @ANYRES16, @ANYBLOB="fdff0dfdffffffffffffffffffffffff00000000000000004fc4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000020000000000000000000000000000000000000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c0000000a000000fc0000010000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000004d63200000000000000200100000000000000000000000000040000000000000000000000000700000000000000fc020000000000000000000000000001000000003c00000002009900ac14142500000000000000000004350000012037f4061611c784a01692bb134a5aee50633d6d1f4e1037a4c3b13bf959b6661ffb8c3e4c02f6"], 0x23c}}, 0x0) 2.6209025s ago: executing program 4 (id=14669): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000000), 0x10) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xffffffff}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071104f000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xd2, &(0x7f00000001c0)=""/210, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000180), 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000002e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002120207b1a00fe00000000bfa10000000000000701000078ffffffb702000008000000b70300000000000085000000c700000095"], &(0x7f0000000040)='syzkaller\x00', 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000002e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002120207b1a00fe00000000bfa10000000000000701000078ffffffb702000008000000b70300000000000085000000c700000095"], &(0x7f0000000040)='syzkaller\x00', 0x9}, 0x90) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) 2.48003651s ago: executing program 7 (id=14673): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x6b}, [@ldst={0x6}]}, &(0x7f0000000180)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$AUTOFS_IOC_READY(r0, 0x400442c9, 0x200000f3) 2.459616582s ago: executing program 6 (id=14674): r0 = socket(0xa, 0x3, 0x87) write(r0, &(0x7f0000000080)="cd4d82b3ebd7e99cb32f2489fa91c7382e30f51a6b9b19ad24f7254c4e83412f6bc06d65", 0x24) unshare(0x28000400) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x11, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x11}]}, 0x108) r2 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x4000000, 'aegis128-generic\x00'}, 0x58) sendmmsg$unix(r0, &(0x7f0000004440)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0}}], 0x1, 0x40000a0) socket(0xa, 0x3, 0x87) (async) write(r0, &(0x7f0000000080)="cd4d82b3ebd7e99cb32f2489fa91c7382e30f51a6b9b19ad24f7254c4e83412f6bc06d65", 0x24) (async) unshare(0x28000400) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x11, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x11}]}, 0x108) (async) socket$alg(0x26, 0x5, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x4000000, 'aegis128-generic\x00'}, 0x58) (async) sendmmsg$unix(r0, &(0x7f0000004440)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0}}], 0x1, 0x40000a0) (async) 2.349959162s ago: executing program 4 (id=14675): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)="c1", 0x1}], 0x1}, 0x0) setsockopt$sock_int(r2, 0x1, 0x200000010, &(0x7f0000000000)=0xfffffffc, 0x4) recvmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)}, 0x40000000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$igmp6(0xa, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r7 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, 0x0, &(0x7f0000000240)) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x5c, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x5, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'veth0_macvtap\x00', {0x3}, 0x101}) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x420, 0xffffffff, 0x278, 0x0, 0x118, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x20}, {[0x8, 0x1ff], 0x3, 0x10, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "4dd4", 0x1}}, @common=@hbh={{0x48}, {0x6043, 0x2, 0x1, [0x2, 0x4, 0x4f, 0x0, 0x3, 0x5, 0x7ff, 0x1, 0x6, 0x401, 0x9, 0x7, 0x3ff, 0x3, 0x0, 0x800], 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) socket$inet(0x2, 0x3, 0x100001) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000001c0)={r0, &(0x7f0000000040)='!\x00', 0x2a01, &(0x7f00000000c0)={@_ha_fsid={[0x3, 0x1]}, {0x0, 0xd, 0x7f, 0x4}}, 0x3, &(0x7f0000000140), &(0x7f0000000180)}) sendmsg$IPSET_CMD_GET_BYNAME(r10, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0xe, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, 0x0, 0x402, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x4f}, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_batadv\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_1\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x80}, 0x1, 0x0, 0x0, 0x8010}, 0x4001) 2.348429715s ago: executing program 7 (id=14676): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f00000025c0)="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", 0x4e5}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000100)=[{r2, 0x18d}], 0x1, 0x8001) close(r2) write$cgroup_subtree(r3, &(0x7f0000000040), 0xfffffc3f) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.281807128s ago: executing program 6 (id=14678): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000440)="0b0000000980ffff", 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003"], 0x0, 0x37}, 0x28) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1000001, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='syzkaller\x00', 0x7, 0x7b, &(0x7f0000000200)=""/123, 0x40f00, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x5}, 0xfffffffffffffe2b, 0x10, &(0x7f0000000400)={0x0, 0x0, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000480)=[0x1, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x4, 0x3, 0x8, 0xb}], 0x10, 0x5}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'syztnl1\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x4, 0x88, 0xc, 0x5, 0x41, @ipv4={'\x00', '\xff\xff', @empty}, @mcast1, 0x80, 0x7f03, 0x8, 0xd}}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x608, 0x3, 0x200, 0x8a8, 0x7, 0x18000000, 0x8a8, 0x1c0, 0x978, 0x290, 0x290, 0x978, 0x290, 0x3, 0x0, {[{{@ip={@private, @multicast2, 0x0, 0x0, 'batadv_slave_0\x00', 'bridge_slave_1\x00'}, 0x0, 0x70, 0x98, 0x0, {0x36020000}}, @common=@inet=@SET1={0x28}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'erspan0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={r2, r3, 0x25, 0x16, @void}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007800911fdabcf8b3077fa54a07"], 0xfe33) r5 = socket$key(0xf, 0x3, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r7, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r7}}, 0x1c) sendmsg$key(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x4044814) r8 = socket$inet6(0xa, 0x6, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@empty, 0x0, 0x56, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x100000002, 0xfffffffffffffff6, 0x2000000, 0x1, 0x8}, {0x7, 0x0, 0x4}, 0x932, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0x6c}, 0xa, @in=@loopback, 0x2, 0x4, 0x0, 0x0, 0xfffffffc, 0x8, 0x4}}, 0xe8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) r9 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r10, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYBLOB="60010000", @ANYRES16=r11, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x94}, 0x40) sendmsg$TIPC_NL_BEARER_ENABLE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000000000001800d0001007564703a73797a310000000038000400200001000a00000000000100ff0100000000000000000000000000010000000014217abe3100"/83], 0x60}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r12 = gettid() socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, [@IFLA_NET_NS_PID={0x8, 0x13, r12}]}, 0x28}}, 0x4000000) 1.388662852s ago: executing program 7 (id=14683): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000200)='\x00', 0x521080, &(0x7f0000000240)={@align=0xb891, {0x4, 0xbd5, 0x9, 0x8}}, 0xfffffffd, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x7}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'vlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000500)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x48, r2}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r3, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) recvmmsg(r7, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/5, 0x5}], 0x1}, 0x8}], 0x1, 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r8, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x6, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x100}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x24008004) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e1f, 0x3, 'lblc\x00', 0x11, 0x10000004, 0x8}, 0x2c) socket$kcm(0xa, 0x2, 0x0) r14 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000080)={{0x0, @multicast2, 0x4e25, 0x3, 'wrr\x00', 0x25, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x412d61, 0x12d58}}, 0x44) sendmsg$NFT_BATCH(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000cc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0x30, 0x8, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x600}]}]}, @NFT_MSG_NEWRULE={0x198, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_USERDATA={0x9e, 0x7, 0x1, 0x0, "a2af43002d515afcc4c55d32b87df900ea747221a3ea0835e0c88553be150c4c8b45f4f4d30e6dd86117330ea04c2bbb6da6e1f6d0bddc5636e31cc65a57e71e63fde93408cc84707a9010d39d71a4ed3f84db4d1d16c7cfdaabcbba6eabc568ce20611b1f8868657369c895710b29147a042dc0d5b4d9fea9a48addc086a9c8f048d8538daea5aa983da5ea0f31a419e6d7c6d4147f669db8b2"}, @NFTA_RULE_EXPRESSIONS={0xe4, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x28, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1e}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x19}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x40}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}]}, @NFT_MSG_NEWSET={0x268, 0x9, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_SET_EXPRESSIONS={0x64, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x50, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @lookup={{0xb}, @void}}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_EXPRESSIONS={0x1b0, 0x12, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x81}, @NFTA_LOG_PREFIX={0x8, 0x2, 0x1, 0x0, '\'-!\x00'}, @NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x7}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xffff}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xe}]}}}, {0x44, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0xfffffffc}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x6}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x1000}, @NFTA_HASH_SREG={0x8}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x38, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x8}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xfbff}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x7}]}}}, {0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xb}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xde7f4ab0bf260901}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x7c, 0x14, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x5a, 0x8, "3864aeb9ba572c6f9668fea558d6ef991736beaa9f30076e3d26ee441f3943ea3b1419cc8ad81c8460d9d290b1f60ae293a07ff6df73bff85167b4109a5c8d65da923b3442a2ef6cbfd6e6e40a604ce1197a44e3f918"}]}, @NFT_MSG_NEWSETELEM={0x12d4, 0xc, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1288, 0x3, 0x0, 0x1, [{0x16c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x168, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xcc, 0x1, "f6dfc9ccf3990302ddf0c57339d9f90bcfeaf50b8ddbd0c4b14c536919985aea3bb99954dfce95cdfa79203dfabd816cc77cc6bb178f2d2fec10c01c3d4a019cd140ea27a5fc49b1f6d88869703ea85763865cbca89d8a1c48e8551f76a82ee6aea24d44a45b0a76c2dfc9b5fd01f62b9d6031b52baa02054a47431f2671d0cf9ad702d7f7f174ab4a9387ae565df3ae7464386b2c8a258f62dbf3d703060c4b8040a567611be5f1529e93acf17a1dd16aacc18a3d4dddec7de7c80d1d17305ac5ddc9dad1042b4b"}, @NFTA_DATA_VALUE={0x54, 0x1, "e17f00fbfdcce26d249875782b6159cc8370473bc182558920b7188068de2b87bb04a5ea0647e7312ed617baa4275df51582fe8f62e72d61387122ed1cd9d7d8ad20f9298c820cbdd321a4b304984197"}]}]}, {0x10c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xef, 0x6, 0x1, 0x0, "4f7f0d220074e4070ba2ef55587fe5b5fe8f95466018e37ea40cfeae5e1598e3815961a66ee02bdfd0c9120d9304d2d11a05fad680d6db9d6f9b3aec8671b78475f93c267d38315b83d25c889d2fbebb2f6ec9fccc5f849efb810856f0c2f0b1abc670e66ce9fd1a09eddbb851bf09bf130516ad05a0d3ced32a2f7e6551740a0ec2b1ac7b88aee28d4f60042b9588cfc00b46a7aa8730226410de8fe288c95cae9c0d0fcd85d61a428615c5a7603e9c490b852421ef68bda3c8522ef9c15945dc9db07d8894d6fed48e6a9ba9d6fb4067869cccd327529aeb645f1f0196456c889f0a2d170d29ff60742a"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}]}, {0x60, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xe814}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7ff}]}, {0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x28, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_USERDATA={0x13, 0x6, 0x1, 0x0, "98c622e3f44a86d1b736e308db3c5c"}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @counter={{0xc}, @void}}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x81}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1ff}]}, {0x570, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x394, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3e, 0x1, "3d83edba8457067995b290e8c850dd07caa46284b8f9d00ae0e8fb048cbffc03f86e87449f7e47e25e3ad653c6b57958861659388c7bd56b2a35"}, @NFTA_DATA_VALUE={0x9b, 0x1, "7d81500f15ba799c7b238ec2dd4e20e67e502021b651bba531be99a83dd5cae6e70f0f9601691b8112b9b8db4cf56fa401f1b9a3f982683f59806e1e1f4a2d44fd1c2b4f29f2e4edc41e99b3196ef8d6e7726b480ff63ca95c12bfa82bd7100aff9460875c53d1225235e06b2a5f33d563ab437ff892dd500ffecc18a74bceea1d40e6e4ef622698802451259b206352a2b079f49bb403"}, @NFTA_DATA_VALUE={0xda, 0x1, "bd06ecc7d753b63e64d891e4ea65bce76e841f62ee229a11e9bf9b5c292ebf7847be057ef8a71ffd9465b96c108a877abdab51c20c44f8012c018eaab817a1c6573365d12752ff91c8c755e0fb2a811952675d4194b793cac4a0364a1cdd9ea5f4af3ab2ccf2f7e809036a412809bb3bc8be7a93bde8d7abe18ea1ee150ff221fd50b62bead8bf2ce468c9ce311e0dd2680c829ddbcd0edde8ca8975f85bd5e02c5024a46df9c43129eb1b17a18ccbaa365fd0698575e124da68c09355ce11bd4447219914143a0424c51315a417235024a24642bde8"}, @NFTA_DATA_VALUE={0xd2, 0x1, "70aeb4371a5c8b4d6f565791c253533279760c789384a8c5ee5cb6c868423d25924e69c4f22121be5b292ad02c2d965e28a6618fcb24b8cbf4d20019808c2ea28702b85bb9ff5e49dceddef78b1d20f9d9968d06f0ad7a766aabe3c85ce32e86bf4f224d9da1a09c48ddfb2ee435ddca06857eb7f02e590dc2f5d06c3aaf96b2ae07e0b479ab966cd68ff44cc54cfa91df64a6f75afe9cd31019dae119c731667843c33bf702fcfd80786d2eb25b23547efed742ff051a5b8e6e91b8fcee49b1c935abcdcf6b05f024206c8c24cb"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x1b, 0x1, "ac5fdd2ac571b935cb8bc0caf7d1ae4c55f91a0a895652"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xae, 0x1, "a7be5e7d061350d9fa02acd4a0979657a6d782c4f13e86a9ac55065cbe4667d8bdc909942aa338210cd68aa81ed0d2399fd6244d2c7c2f53eba3de6483f32c178f8e620a8d5ce671d4dc2c1fc5f23dd8d4dacbba5d4f9b46eef46353d7e4ea42b1ef4350153d78af3128c15603e45b3bbedcf5316079333544cc9481176aee4e38980d848f71a0dd0c60a924c09fdcedb55f7d947a2f166f47d23341f000be81e749c5084178799a3040"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_DATA={0xa4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9e, 0x1, "a8b7ea312c5b1645a1eaf116399437a42df68f8f4371d63e5b00ad809ec8609a3b91406c2a3f65f9f31339aab09455b04a7862aff4899828efbc1fbd069da864246032d2de4eade51e5c2c27facc63cc77ca4479c4161a4e606c41cdb677410839d26261116de95c2bd003ab20de621da864a85de71fec2ebf4121f7dbe619e235d526e42ef3724f13382b47741bdcd260e4eea9c5280ea696d2"}]}, @NFTA_SET_ELEM_KEY={0x134, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xff, 0x1, "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"}]}]}, {0x518, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x138, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa5, 0x1, "6f4658df3d07274c1f75f8267aa767ea3336dba4e767b6c930d77b55ff4b66d8fa4c5fecd88690640fefbd2495915300d3116ab33f079d981ce93a0a3860b64f27f5c97a1010274bae95863698ab916be277d3771f7b8ab6c74f3fa024ee48a308598b43f034cd29fe04bcfbcc9d860d9c721f36b1b26d8215adad98be1bd6a537856fc219b2b44cb4e42255201ae4763459018d4dbde418c35f6e99eb59fc2d04"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_KEY={0x144, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe6, 0x1, "58cf42a0c1955ef5753d6aaa06fb3b53d2c88179ab407046ca96d47d47da9d9bc2acd357894601e912fe3fd98be8db71599c101e441a6d5a3fc8b6ebced1ac754088b45aced3891f4040a0aaf6fdc66e6af6822c333b31aae4c2943399e29c141d851fdd3fad4dd0fae7d322e61175e531ab6410b577c615c0232c21657be089fb4c67764ef3b9c091ce4dc231143c4ee3afa6cc110cb776395d66258176680f967452e5843fd35cd6c4844d5f8bd9208a1f9624de822e5436262b0310452218c9df37829d19937834fe28c28af90c0cfd3009f568b3121dad1762c60c101cf17262"}, @NFTA_DATA_VALUE={0x17, 0x1, "38bc9c5be9748be8ff2739d249049c74813011"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_DATA={0xd4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @last={{0x9}, @void}}, @NFTA_SET_ELEM_KEY={0x4c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x46, 0x1, "9912fb8d70f970c9b83050cd943f03759201c331772b8c73051c1b1a01136b6d7bffc8a4ae435bb3fbfe67116a302dca75d61ce96ee12fd709fdeefc7b7e1ec6c32b"}]}, @NFTA_SET_ELEM_KEY_END={0x140, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x6, 0x1, "1565"}, @NFTA_DATA_VALUE={0xf4, 0x1, "30ed417e1975147b885427582cc07285ddf61213f112ff6cc2d453ebf4591657bd7ec8c8520f0b22042dd9886fe104be326b546f369adbe1f23e65f9c66ca980a96437731794883b3313af59eaf88c07c79e29ffbe301155a1129a5232e1265a0918f2829a59364b9ba172cb40cdf312d27398cac707dbde48b2e4c42c90ca3e894a0bdaedd587bb2bc46da77c0ee24ca984cbbd018e6e9f0dc1618121f5271739c93164da777d98f13a07e71d755200129fce068c173e01be1b10a8b478dca571702d8c3055fad6a2109b4d4b8eda02f84357e9405d49948c043e25ca7fb4e6498a61622332916b32cc3fd94f26948a"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}]}, {0x38c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x228, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe9, 0x1, "c67418127c7707abe99d92caa251ee7ef0605d4cff347c58c1200d5e9e62318f33cbdcd1b5509860c9a8e3ed4124d5e98ee2079302b1a6adf5fc373366405d3ee82376f51dfa494157f87092deb5e6a79bd9d8e5a1f8e5b641da3be5450265847bb20adac02c58f4c0603d3768ab1f49469e04331422b22f657f6e874b943314e898dd689bf5e6246f52cf4139e748809f1f1d371640cb15f0a75b81caba1ae19e89b927319ac48805ac543d0924bc0388966b96509b5cecefd3571a7656903f67c6ec23c2f0c5adf08a215af2ceca67f56412090c1604bf2bcf8d825b5ed25e0dc6042fcb"}, @NFTA_DATA_VALUE={0x4f, 0x1, "9ecdd09f325910e10f9a8d4a25fb9cd62d2b127419a04f2c3e9ec8ae5d8a9d8da3c56657941258f155fc1e90dd792cfc6a611f117469251476e499a62ae585f8a77131acad6039f27646c2"}, @NFTA_DATA_VALUE={0xe1, 0x1, "da025bf65fd34fdd51b51fde62f9397cd303fa60534e020acb1a153a71443aeeab53c9622ff0013112616b6b9437ec4fd65702d1475006f6ce1943afb23e28058978b7424e74788da3f6277162d1d3ddbee670150626fdd62f079e66cdd4894358cd6f83b4b3ce76210eccd3dd8ed15b40facb6f83b1230b5a13c01f921e9fd6d7625a079f2a0836d71e8f6ebe626b21e27e316f881aaab05052bb03373b95fb48c8568692b9d1ba861bf95068af9b4b84eacd716cce288551c0bfe6d49932af78444d38249417c92d10df4a379b6bdcb9425175d8bc5fd4f317a553cf"}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x158, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x48, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xb}]}}}, {0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x4c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x10}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x58, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x104, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_EXPR={0x64, 0x7, 0x0, 0x1, @last={{0x9}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x10001}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xcd}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x3ff}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_KEY_END={0x64, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @lookup={{0xb}, @void}}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0xec, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_USERDATA={0xb3, 0xc, "0f0561e997a586fcafb8182f65f811aa43124385e79a2c0f99e015ab7f769773e95b60d5d6bf2bd498bf5022f345087c5bb4b50b8120198db681281526da51e307ba08bbfbe68abe49766cad8e7d6531385f24398b08fffcdc251852549514eab9e3ccc27888b950eb13fd3ee17f5e4f1f99704ab59e694bcbfb28c4c27e63155b200e2a953afc8165474214125d728a43e4961bbcd7d226ecdf7e17df182fdeaa026a037561b3aa393b83a64ad0e3"}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_NEWSETELEM={0x2e80, 0xc, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x2e48, 0x3, 0x0, 0x1, [{0x1758, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x350, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x92, 0x1, "fc42ba4150728adca9eff321087a58a56bfedd35f301d2c39178a7bd4462ce2ee8819e03f729534b105a0734bb08ea3b8efc954ddc64174872e453840528ec1d4e0c80829b9f59affdb5716729dd19ad08a9a0581a56e8783bbee61a5e7f98b81cc190e721f517a464581b6b3b115e2cba72bdbccb5d3e3559f931f22bbb8445e3e176099b05a485216209d6a1db"}, @NFTA_DATA_VALUE={0x98, 0x1, "a298d38279c9cf73bbb41162a33842403a259f9c4355f5de507495ad780405b7b658d148efb6718e161d6c8d364dde8fa7b057640500e6652f215c7e19bbbde044e602bd5e06a08787afa6f2c3e08dd88bbfc6ad077960032eaaf24d21df2145cde03eec1441c9295aafb89877c3856fe69a08e38c5b8d38143bbdfd3d9a71f728504850de31e3ebdc3a05093dcb639740c6e848"}, @NFTA_DATA_VALUE={0x19, 0x1, "d5bacd6fc0c319078c58ff2ca9fde8900699fe580d"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xe2, 0x1, "e1cb1e3a55655b8f60eca00eef00e6f739c802757361141473c79d1ff38838844bf08d486b928ab95e1c911d2c59a5fe51db680ebe0b192592821de891306d29427a8e12fa91a689a174a392693b30c8786e1f800c6f7c579c3c3f94069b2ea9bb3ff1d27aa11b87a20c3ca11be7bb320f9affaf0f3a8f36f27eb8572422822ffda1fc819c97168fa39e9ec5440b4d90d0efecbf75f880e3e541dab4ae3c706a07ccd0c5554770ebbde259b11c146459f0a376bc611889fe3ff68ede08d7590379e1ec6095694d60ee8a6d885ce84f3b9bcdd4554be59d5e88d696082989"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x89, 0x1, "972f461e9ea970250188541ba18012a9c191b2c06a8decc73a797ed7e25ddf5b1deb2a9f1b6d351358de731c933c7a48178b9d3a9e1a4ac145fdeffeec3fd512177f64fd1c77f402341dd95dc8dc32db3d5e3cb010600f955d883e95eda9d789a013d8f4be14be680ed2e5f51e4a4ef5294a0b33f60010493e8eb33ec42928dc710d4211f2"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @xfrm={{0x9}, @void}}, @NFTA_SET_ELEM_DATA={0x1ec, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x48, 0x1, "0cd7cccb1d18232dd491a4f90d2cd3cfd424756be844dc74af09925288800f56b127df5907bbb8f720314e92fb9c46b5329e5181b45e0d73abc7a2803301721bb963dd9e"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x24, 0x1, "5d0ed51488f576ac17bba3dd65fcebf9ff90496bded60fa3268f7c0c006338ee"}, @NFTA_DATA_VALUE={0x102, 0x1, "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"}, @NFTA_DATA_VALUE={0x73, 0x1, "193adee2812ac6850d4e3c360d5566555d45ad0811c61394d74e2b3dd5614e4c3838fef2589a0aa7959195e1632df35f45002feb8e7fd1952c0856fd56e13aa9bcb33a2d0f7ef2e40ff6f7e16fa35a5ecfc1e8e9db78b88d02bbefe8a3c71b7940a8471f4d8f2ff766af54e5ad5888"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x100000000}, @NFTA_SET_ELEM_EXPR={0x60, 0x7, 0x0, 0x1, @limit={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_DATA={0x119c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xc1, 0x1, "90939bc4df6696a16cd03f031940b4a6c2837d63774312b125f775f17ab06bd973ccbdab357b29375d65d68e039a4380002df7dd78af7b2c80767175d96d5fe0cc8a1caeaaa713b5a9dfbb1d870b8d7ae8963cabfd1ae48e0f1b010ade65a17c70b6b5bc17731b2b517fc831f45b95f8393a78267b0ea11e0b7aa3c882ce8a2523e0271f27aa76da3f027912451ff118933030d8320443db220d4d52f2c6a697512eaaf9202b0b7f5cee18b026b18d8b7d35a47b55eb2aacc3a09b110a"}, @NFTA_DATA_VALUE={0x1004, 0x1, "94a393b346b3246b41124ce2b158513c8e195ca76e7cf679941cc5108f8496f96367f38e8c344da686779a5b2b48b2f7587141870daa8e87375e349309c93e5cf60b669ce072b13c63b1d6e3e0e7e6c0d7d47b36080e0639c0bc9255800731010837e4a863e38bcd90bbed73f0a1595353af1bd55146421f3d7411e9f46a6856b2e8aaefe4d519e2256d692961d7975c56717c3ebe7f4110b8f5b91d0766f985ffaf598eb324a88ef6bdc1b83cec89f0949f989ee2b15fce046702b0fb4e9780252e8cd5b4b2e2c8cf065730d8725c1825117f458082d5940ef4a94ce478d8315fc3c18414704f16a35048a7e0400de1e4262faafe646be40f919554e7e94df68d653064e339c65b8bf9ae40eed1211584b3f123e23e19d4c026c0a56a56b8d0d3fdeb4c6a5287ebbd63b076ae7c5b5c140b21c51edc49235463146ed1702f490b4aa3ab2e4b86b6a27b2b9b9278bc6a42d83a0f2fe2f9b64c2bf4e20e637b4bc0f8d93651c872c9ed4caa016b5db2de0e46491437dbf162b1ed9652c5f1e1f7f310b1c5791c7586fe321e7e58f3bdda03649e203d254a7d6bf28826baf4725c3bbc071dab8ebf442af9a95fdf8be45cfd42c10bb3ab999a09a7289a2c09a935260fc8cffc4788edd19fab82b1294674f9d4aab8562a2358a13d6537fc628e0ac2cd2535ef603ef21c198123357bb5842e79a74f9430715af408f1c51896f6caf857425bfc7d2d9cd96a268d8e226173719b074f6f5ddd8fde5a84d464cef9403d2f29cc63e4b72c19df17d9389a869003d840c66f789fd9dd830948c7dc26557c3f16a1220df4fa4a06f0a0eb0614ab9ff6754f6fcee798c11b4e837cffb5500ed68b81c2544d3ac9980da53a60a009651da048b3484106e5b25c3a860157154602d5d548848277da4b49c19b78e839693597bf7008a3ade532c528479650b4e669007e93ee62ae2f42d5690ea0b54a31b7f3102cb1c87f01bd4f2a67118dec93e1eb25ee3e782a55f61b193c855cfce541e51a153e67c562e3889fec197ff85da4c48f8e6f0d48c50b67c70f94bee57b3f0ce3b43170f7e8d537898a2e01b53388075b743cbe6818b6c12eb1a2878a6991f6240d5b4c3104db1b22dc26a287a2fd70bb015225ad96358a5c46c1e71e52bc75aa4e3879c520c32cfb5111cbe554c45c5537be8e4229252be988d4be0b7cacea15058df1048bdf5bd78939fca111d05b5989362972926f5c3c559d143903fff96dbfdc280d61893d77fcf231730650690b9a3a33fe6996290bb6e25e6b2067c7f4b292a8d6daeeba1a32cbc1f3840ce0c50af7be462810ce57a00301938d207830608da5aeda2324e4cc8aec75430bed44d89f7ab5ccabbfba881aef9b33dcf62200dfa12918eb49e00a1e7c500c97075f368bc465f78161e193aaf4825cfbc401b5d8ec783a4e3221bc81f0faa2835db77274759bf0913517146e8bfef7f593bb060dd6c70f4150ed375ad8ad9a3260f26c95491dd1af5dcc4c229a9c5c4db6c6e625aac7ebfc6d86bfd5cbaaec77f2640a8d2b95dfa2e761760695fa5ffc13f185a819834b1beb447f7f9fb763be08e693322acb6fb26deafaebad6e3d181fcab766c507cc1643c10b4ede51682dcb5d52770842ed786276128283344c4717d8843914108272dff0e7dd37dbab3709ea01a68cf3ddcb8fa621467660eafa5c5094f18f7f6277934a5756540f6a18a13b85aec76e47e7c95e446c935192e353a18c1aa5606828e645bcdf2f359e09b23fa783567b7561ade558f357e585a4567867da38a998bda9a977e45edbec5d7958f017871bba10b741c271cc22b195938a683af477593fbc9d28a15a1ee0e31a81fa7f382cbe2a5a8d729457bdef7f4c7630d35aab015a4f4ae6cb1af74020dc4436f46e70d352c37d1b7eba47eaf85ba7967b84136b172b719078bbc8836757872d441031390c499ce60709084959e31541df642ea68ad549109c73506caed4211ddc145c3d56738a82f36c300eded71a95cb3d29061974b387de68d7f8a89c4f97137c3e36ae5b67c5a6e8b387954c0e77f3ab18d338a318df1ee887304653e686bd6422efbeb4e8e86b8f580f63866117aebc28f7845fc55175e09aa2fcefeedcc0190ef791339c281a4b509d66fd64d24f5a316a2f7cdfb01ae7dcf2666a616f262161b966154aad7978ebfb658edae595c6613fdff484cbaee70f2d9fda6c29e2f0c02318f944b7183d8efbd7051b619ca85018080b65acefe46354f6de8302f539512c633be3f5da4e77f30522911d236ca9bf05747ffe0c785ccb47afcd1b0c1674a5a02f40df1b76b3bd16225e95040b20738afa81f7beb4a33aa94b4faa8afd35de0456216cab38cf9d2275bb46c8a4ff58abdd335f4e9d58a80042e2a7c1611dcbed7aebba1cd8c8d30b9922f7b196c85921f2dbe6645e4b728f7bdf41a2bf1aca40229d048d8c25a050110a4d4cc531393280c036c6bdf885dac0d9d91ff1a9a15afa7148d4aa2ce1bad47328f0d09b81d6821b795ff5f688a650ff0b5e4237fcf9d69d26267bd2d64fb7fe53ffa583d84db16ca00189e2049da01488ad030d49093e39f15f007af281406786ce4358e9095eb624e74edb97ae17ac9eb7171eb2c5ed645803d56a08ab6f455d3b9ed10fd50db3c753b63ad46c5d13a9a53f27b9774636f1ca2e29f25ed117080f836fb4613e58e23a395796d7971ddecd31ca4bcd186d154e7ca32386207c230436fe902d4f3ced86a279ef7967abafb43877511c28f9b11a95885003a7d95d2cd4cc34f75e0a6375e45b2f2b93c76608e3d0d4a3bed9e3f06da7a455a4bdbfa6d166a49f8a323977ddf8d374712ee761a80387adbc02b3a3f6ccd65df456a41649f7c2150d824fb1aba2d57e096c86a52f064add3e47c261137d8cd5b5c8f2b776166f9f12b6bb0eaeab1829353dbcb72194428d3599d7305998458bffb7c244d5fb92a8ce8fafd1faa376e26f1d279fdd3ae91da686d06f38ec419412e9fcf8e8824e2ea59d7e3fe0c8d1720cde6b7f9c58382420ba2c3f3fb1a0634643a86f077e07aefb11e5d8da5cc9cdcbfbfaf8d0a788aea5f6701fc8352f9bf2f8b9861e49d25632c45cf9b2d19a010a23715d566262cb1044173bfe967e120a85cf1c5ef87dc59b2705297760cf00d1c3e574a0796d64383e25da28a272528a29cc7229565bcf24b5989794a751f0a54f48bcdcaf6afac1f7dd72467a1b4830b8f68c6000af65e01c5051fc9ecd193f9c17063314e53d01c79e287a7fae6fa1011d1d6d89283cb925ac20ad850d08b5f76ab1d14156913c164348344efb2934828982e95bc7c24d6c609528df730664d8d7b4ed77558d19176359fedc5d4b55980ef73b5f106b3920e5c665c09291931e473e2fe47c24cccbc4f911b617887060de110275a5ea90c0bcb621434f4077cff0ac7d508845e8ed71e552ccdd093451ca3d50b9b1e664c9debffb5fe3464791b0d1a5d00fbfbb8bc83264ba7c0947685e102e65386f7fd798cd76d302db25b42a0e43176fc3fc8cf2345369bfa117d9d269e455dbacbc1a785f32bf7a0a6f68f7fd3c7424733c3903143bb82e716cc9547ebb6cdcba37ae7e80eb36f383f4df6d2f03b21dd85e9236e6d94da275f29dc8ecd2680c4448653d8384a9aa4137080a00ee422ce6159c1519c752dbb2c5749d3b1776e1e1c4758e204108c36d581be33186710884c500105661ff3d685d09ee20acb08d630f69c90ffbd35a67b7db3d3dfe853c4eb3fb82f944f195485986d5be559e848fda88da72a52ae04cc52d18ffa64502db8467f0164e67ce4ef83913c6a810f956d497be6b89c8af4d275bf1a7773ad7576c343916ab3df4f62f43899953f3ffb45c3acba8fa352c89e8b3e7fb696789582aab17d77f1636491ece23318d4bc66bd5e165cc901c368a9c11d1a2106c0380a22d3a4195615a6d0329ef15470ecb57389933b5e5d5b93995de26abe11d38ecff4ee97c166949fe08c3fbcb278178b90064bbad46a84d7338d711696540cc44826e3f6525f6fc356a037a34574911509cad33aac1184280010e307aea8271a2d8a2e8d49a5d51f4254ea8443235d6e9a115520cf52e187d04740f223591ed8e2bae91438fa942fc69d5f9aac627c2f5735f1b2f7f52f94a40c438a700ac30c0a61dd00fc1a15315cf4eaf015b6e074f48e4fd18f6c16e3226d0ee013dfe9e126e38f1bc47e61404e535532d0787a6107752fb9ed73ecf88157782b97ed018cc7f2034dd5f11be9de9c6c4ea700f511a19e662391bce57ad180f7ba1821590ae5846c7b7996d266bdc664f225cc152674a80ec36a178a7a2feb3fa94e556ce87e200cb977061df00a1f3ef55101a8db7c4971c604f19456eb232d23fe397447545f2980f17064a654d0b40f5be41ec885ffbce71259f006c9d6101b7a87bbd4d8a9fc26f62f08aaf49568debe6c73da8505723d30b8ee045d3937eacf74f0e357bd8fb2b5a98a40b1acd60e28a42d536f3683115ed39eb790474d6e7ecf20dd8928979e3815a04bfbfde00501de18df536343e1217850fac30b380357263f2cc50583b5e18332acb3b15f09ab1ca61ad7c3848ed90a24ecce0227252b343d65a0bfa4b3f906c86290fea35d757025ff2545a93d907405e83ca01c66b2f73ebd68109fcb0a1ea1d50e72cd524b17b6c644617b2518048ba4dc6cd0ec65d3319be9b83969773966ed7e6874d4e88e50a2ac1ada9c5cd9debc7b488ee58bc9a73b763dc6f9b778562643dd6645f8aa9031a57abbf282b4e90e6771fae5161c1c28eb6993d63d37f0c03958c7748c674d2f5e6be55a7441c291f8d70016e091eb43cf73ad33a3d548de809cf5ea62d70080e9a368642d4a70bdce32b36c622568758a433ce560bea6f567d7ea82e30fd43a986c6343afbc4db06ceef58ead38e8366981e09d96f697935fad8f7b36b494c94e2a264308d30b02e404b37262c9f598d5c0d7cd797d29eb7a2d9cd397975394ab92729ca928ab7c6ed4892358388c305102569547b5b552dd27a0221d937c333ba7f22f3720f1c4420d52d13224f8edb9d38d4fa37944d9f821afb154e0343911097226dd5421f834e6940cb1ea0b18a4bf58a09d68b3ad48e78725f680eb48c9dc5168a6ace337b74b977e7751b585c611f62599651b96c4dc6410b13b4280c0fa2d0dedb7b220ab78f215d9f94fbb4f6b156c609241dca127dc5128996d679d4139a235383c33f1bdb0f413e71e54e0132459d481e0c59e82420f5070fdfe65472a5f3f60c560db87e3650a9ee4bce494835972a8573245c5bdb3eb21037d4bdbbf214674faf4dc87984ef02797ec76cdecebec8323bcafca02dc16802d64df58d226911824ca32c78c1b92c874ecbd3330aab24964a77a4ed98b017117ef93a4e3781da8a0786e053af7584cc03138bf5de3a269cdb585a1170dfde84fd0a13e525659c86602dc2f56cae59255d4f8b5cd7b3da5c6b2e6e844198cd7e9205e4decf9249340f05d654e4a2d353e436959a76b774871f1ba749dd2962e1809e741370e3a2509f803a5b8d9e3e2c73c490a63a43744a52089204dea942a9bfbd62a0772363f4ecd15301d582acfc4d395544ae12a8b6e80015803b9aeb418c3cfac05b71ecd9058478967582b6c99e958091d578730310ec992fc7fcc57ce4328c9ff07ab353a501955dcae45d664d2e0f91f53069f438b81c261fb25f0b8819fef220a366d40f1ff632675018ef5a7a81c4e42e5480d8c922d4a6f1b76f31d492076d056fff"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x57, 0x1, "bf025fd7061bbed160e6b6f0266c6bd7cb1ba491379c7f3711591890bdbc373b3e03078f2ee624936f1776b526693d9223597601bac4219083a32a4e334bed9f62e27fd975bed996869eb6b78de9c791cc3ff0"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xffffff80}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x1160, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x115c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}, {0x58c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_USERDATA={0x77, 0x6, 0x1, 0x0, "f6a542d6c434418ce0c191017deb609a1125d84ed312f55b30af95c316955a2bd84cfe70a3c530769d18765bff853152a3d6be8fd1b54e300c0b42eb01adaeed8cd839656bbd6fd19eeed472a4d85626053bd40572dc7271fd5d98f0c2f4c7050959372938e10981c1f5200e0f65b3875e0a7b"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x324, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xab, 0x1, "41acd96b8064408d05d73adba37de17027044dde563b56db6e6061d0a9419e73e0ae22a599ab63921c1a8a4b133cf4705d4f1427b62fc7e086acc0b3af6fd9b5773134e748fcb1cade5d35787525cb5d5145109dd51d5db356299889b2ac366570d038c46aa7a8483423eed84a677868450ae9cdc3da5e052972d76bda8dac322c6ffb4955fee8ad08db75ad3418cdbf31d9b7d8cd3fc53cac36d738c3b1dc1a6206785edb3b09"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x86, 0x1, "c7cdd8b928b716e8e17e9a2135627853409ad563d1822681fd1b48ceabdb1b36a59105e8e77917d25444d3a600095b7c7d370cf8d76d9e47aed8a55503f969b0e930cd932efc7e885a498ed94283e7e9966143e9c91555d5cfcccce151ca867a0b0edc236157490d0943fe4290cd672fcd47dc45f8a820b2ba08ed1066c6dcdf3ef3"}, @NFTA_DATA_VALUE={0x102, 0x1, "c535e471e5399c18fb826260d6fe1ae91c82cb6622c0861588a3aa4106b55cdfd89867c63f1fc616f37fe88dd9ef32d7f88ae975579cd7ad1cba0d0ef28ac12336f39511b3b6d028013c7833acd7d8ec247727faf94a9ad914567e17465011035899463ade1eea984499f41d1c4b5588c987e1fd1629e442607b3a8d4edac2b822c64a03a5bf69a1ddc6520a0bcb8dd578b333e951416eba3f424884505d5b60e669d8b8a04acaefa949695c0eedb4ebd7c7214517fd67f36d402cd3fde0c7d670e6b9afd6c4ee8abef996801b8d06f9ac9cfbb6525b0ddb697fc5a9f2797fd1ff65407422fea4f2fb704e6a28399124b086246e69941b4686099db8b458"}, @NFTA_DATA_VALUE={0x64, 0x1, "f014e88278ea567f726a009211012954ce354dc4cf2b4942e783bfce998b5c81de54f56e5d8455741f63ebd554fd64c517852f64eb10dd9be40288bc89a4c04fe628d59b18c463564216799a6d9e6cfe57bd9f9eebdc9a7e5c1faf44c7b1245a"}, @NFTA_DATA_VALUE={0x17, 0x1, "3e2b2021c5bf377067066cb8d6c366835f31ca"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xf4, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x18, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x14}]}}}, {0x5c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x99}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xca}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x65}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x3e}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_REV={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0xd0, 0xb, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x8000}, @NFTA_HASH_TYPE={0x8}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_SEED={0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @meta={{0x9}, @void}}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x20}]}}}, {0x18, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x4714}, 0x1, 0x0, 0x0, 0x4000091}, 0x8000) setsockopt$IP_VS_SO_SET_ADDDEST(r14, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) 1.274484893s ago: executing program 6 (id=14685): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000000000000000000203000000020000000000000700000000000000000000000d02000000000051"], 0x0, 0x40}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) sendmsg$nl_route(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@dellink={0x28, 0x11, 0x300, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_MTU={0x8, 0x4, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x240000c0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}}, 0x50) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x38, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdc05, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xb, 0xb}, {0x6, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x0, 0x2, {0x2b4, 0x9, 0x1ff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x20, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}]}]}, 0x20}}, 0x0) 1.230745618s ago: executing program 4 (id=14686): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1e, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb08004500003000000000002f907864010101ac1414aa80009000000000007f000001e3ef1fa624fd8a757a2de57fa8b80d624836b37e3640ddc9f6940b1c4b05ad5f56c76b65fed904df1217f4935fd31845f8a430d437ab191bd9db331629c7ee3483323bed71b596b9c0c3d696eaefc72b5538b83ca28614b9a2a4345931302a83d5e1ab216e598f4de5aea4ba53960efe9a028f1ca7042721fbdbbc49dc285a6d1e7dba10f439c5dfd95bde16"], 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r1, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2400000000000000290000003b000000fc010000000000000000000000000001", @ANYRESOCT=0x0, @ANYRES64=r1], 0x28}, 0x40080) 1.114509555s ago: executing program 7 (id=14687): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000000206010100000000000000000000000005000100070000000c0003006861"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x8081) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (async) write$tun(r0, &(0x7f0000000a80)={@void, @val={0x1, 0x4, 0x7, 0x3, 0x0, 0x6eae}, @ipv6=@udp={0x5, 0x6, "e87d66", 0x1123, 0x11, 0xff, @private2, @mcast2, {[@dstopts={0x0, 0x204, '\x00', [@pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @enc_lim={0x4, 0x1, 0x2}, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0xe1}, @padn={0x1, 0x1, [0x0]}, @generic={0xfc, 0x1000, "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"}]}, @srh={0x32, 0x2, 0x4, 0x1, 0x4, 0x18, 0x4, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @srh={0x2f, 0x2, 0x4, 0x1, 0x1, 0x18, 0x5, [@empty]}, @srh={0x2f, 0xc, 0x4, 0x6, 0x16, 0x28, 0x8001, [@empty, @empty, @dev={0xfe, 0x80, '\x00', 0x41}, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x7, 0x0}]}], {0x4e20, 0x4e23, 0x5b, 0x0, @opaque="20a5574d16fb516d0329ce183c41d92930e92d41af6630410b2bc1e64b77f7ed7075481994ed331e813c28faa67a48448233906320b26ecdd7846242d22ca01baf190ec2624e62f0bc97182772afe7e2b8b890"}}}}, 0x1155) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000080)={'pimreg1\x00'}) (async) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214717a70700000000430600000000000000000000721d5874f72c000000000000000feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x3e42, 0x407ff) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x44, r5, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x7}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x40}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x10}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x18}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000380)="df8c52c9f3", 0x5}, {&(0x7f0000000400)="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", 0xfb}, {&(0x7f0000000500)="aebc67c874846255757329b82e47e99bef44a62b4c0f01756a96a83a345a89934982df2098cff4aa3e4f6c18de099198078bc5b8c499be11244ec21349ca0ec65fcf64805916d00c459f0819cd05084fb781a80e0c020257beb2821704d64dda69c206d324105baba86b6b75", 0x6c}, {&(0x7f0000000580)="71363a431c063f58b69df84f6bbe3e6543a8236ac407e7969e45487ec2d29842ffad46528b76151bf0529f53f1d503bb2da3adf589361b974fbcb339661d2bf886a54eb4df35f28bfa80a8e49b5c20263991eb99cdc05b72ecfe343b4887bb46e34e19667a196bcb32eaf3283d9f82ffebdce9db3c73f39a95aef59c92817e21bc32a76837a27b3f2d2f46f4b04f538547c7aa7b4146504d35cbf954062f03b86f03c5b94fb6260f0b0038c9e45297511564cf02fa7b4583", 0xb8}, {&(0x7f0000000640)="4f36c10b6c6eadd71f5df1e1fe5491aea3323a1af0ba0130349f7081b4b7afe83de2d465089d82616473b43e2e918cce3f455f4707f84a8e34cd2c", 0x3b}], 0x6) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000040)=0x1) 1.093262375s ago: executing program 2 (id=14688): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/cgroup\x00') ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1\x00', &(0x7f00000000c0)=@ethtool_flash={0x33, 0x6, './file0\x00'}}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", '\x00', "4f9e86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r2, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) unshare(0x6a040000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x8, 0x3, 0x3) ioctl$sock_netrom_SIOCADDRT(r3, 0x6180, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r3, 0x6180, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) (async) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010029bd700000000006001c004e2400"/35], 0x24}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) 1.051692959s ago: executing program 4 (id=14689): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3, 0x1, 0x1}, 0x31, 0x1, 0x0, 0x0, "f05324f3378d9d86b67978f2e6ebc4dacc38024597c12977a404d9ccb67200d8543eff4d99cdbc1de165d91736840127682bf4f6455edb7bcae0c4a07dfca0f7"}, 0x48}, 0x1, 0x0, 0x0, 0x408c0}, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) setsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f0000000200), 0x4) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x1, 0x5}) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 806.195688ms ago: executing program 2 (id=14690): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x45, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0xf, 0x1, 0x5}]}}, &(0x7f0000000040)=""/249, 0x26, 0xf9, 0x6}, 0x20) (async) socket$kcm(0x29, 0x5, 0x0) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) (async) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000980)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000f4ff00000000000000000000000000000019000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000001"], 0x90) (async) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x2, 0x13, 0x3, 0x9, 0x1a, 0x0, 0x70bd26, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x4, 0x7, 0xffffffffffffffff, 0x1, 0x1}, @sadb_x_sec_ctx={0x7, 0x18, 0x2, 0x0, 0x2c, "dadeb2a364748203f77c092bfdf0248d705bc467dd46b06c8aa0224c2647b55c874665c20401797caa2ffa36"}, @sadb_sa={0x2, 0x1, 0x4d6, 0x81, 0x8, 0xab, 0x3, 0xa0000000}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e20}, @sadb_x_filter={0x5, 0x1a, @in6=@empty, @in=@remote, 0x15, 0x14, 0x4}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d6}, @sadb_address={0x3, 0x6, 0x32, 0x0, 0x0, @in={0x2, 0x4e22, @rand_addr=0x64010102}}]}, 0xd0}}, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@int={0x6, 0x0, 0x0, 0x1, 0x0, 0x27, 0x0, 0x10, 0x2}]}, {0x0, [0x6f, 0x5f, 0x5f, 0x0, 0x30]}}, 0x0, 0x2f, 0x0, 0x1, 0xd6f}, 0x28) sendmsg$tipc(r3, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x2, 0x4000}, 0xfffffffb}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc000}, 0x0) bind$tipc(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0x4, 0x4, 0x13d8, 0xffffffff, 0x1218, 0x1218, 0x1218, 0xfeffffff, 0xffffffff, 0x1308, 0x1308, 0x1308, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x1100, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x1, './cgroup.cpu/syz0\x00', 0x1fc, {0x8}}}, @common=@eui64={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'pim6reg0\x00', {0xf18}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', [0xff, 0x0, 0xffffffff], [0x0, 0x0, 0xff000000, 0xff], 'team0\x00', '\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 'veth1_to_bond\x00', {0xffffffffffff3ebb}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x145b) 739.093662ms ago: executing program 6 (id=14691): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000580)={&(0x7f0000000080)=@hci={0x1f, 0x3, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)="2223ee604ffd6a2a3fec4d571b32f5c5df43c10d37db15b1f4272302c9cbab1b868383b36a25a2c312e37f8bf76a4991c588a70b2b73d71cda81f76dd5a0e92e37b9aba95b2f806db70b1ef25a44086303dd8cfcf23be1cd75280ba50eccfa1d4b8fa2b3fd8c3ac0a82a5862b94bf3207610bd0286823d2503641c3e2d8cf54f7140921ebc63808f5e1985915b4ab057317bf548675b40ff93ad7a17a328138cc435fbd681a00068305b6a0e7d1334f6df488bc0b6baeb41", 0xb8}, {&(0x7f00000001c0)="974c28d822c0ddca7318d82c40f8b7cc239dafb980605a5f9166207bb3e99ae89c8b966baaf6aaaff9582303c04df1bd9d861653af7a005a5e7ddf907e193a7dd8bddb9f88cc395440e06f6b2fb2039dcee3d0db1130f5edac63edf01f918949a947b1fdb8586d4c66e3d26dc3e014321b9d87ff298ade7844b702beb36b2be138bdaf410b43ecfb602ca6e612d773d706d5afceab27df4b753210e49663d35785", 0xa1}, {&(0x7f0000000280)="4c66356303b53b82b21ef31a34f22d2744740e735997d90ee003003064", 0x1d}, {&(0x7f00000003c0)="e36387f669c92dfbc1d235e3fdac78951062b9dab556de3f8566a49379c7fd7f70c5e3f0777a88bb2c433ecb16d72b3cc0c4695c7c7750ad50a4983f8ab1d33d9320a089aa152a2c3595fd0745a35db6fa38d45f07e9648d9875f8a6ae064c450f23dca68cf93ad3234f6e60e5c5bfb52c98907b9ff59afbdc0f06f765258af2f3a4c98fb9d55cbd8d9e7a448d133df2b2ef271882be2e89090c5d3921458232aaf3aee3cff5fb0a84b69909cf7694d1f3e17770068a897101b7d733d373ee5c2be03fef8b59e5a517bb5611664fc430eb", 0xd1}, {&(0x7f00000002c0)="1fd9bbd9e827152c7d43d167f1ce153f9a739c3b2383b1", 0x17}, {&(0x7f00000004c0)="e159fd8f28429adfcbec77d941f5e3009d49adc8f8c1dd7e399c20c4828b27ced8bf966b0b9321dca049d642caa3b89e96a7ccc90e6235e4d64bf7918497edbdd061824e51dfe2b25b5530554ee4dae2d148884f671d5909b110567bfdfbf9d5a5f3b4a3dea3102c53502f9ab13c35d299ac283bcbf21c6a6af4ebb1fb8902f8b7a4768b18240ee73a3a66d1ca86040dd84c7a619367fc3ff6032c37791575785a80d13b2f894573c19d7706401191b5ec5fb290b99a315a", 0xb8}], 0x6}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e51fc050000000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000002000800000000000092010000000000000600000000000000a4330000000000001c250800000000000600000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f000000000000000700000000000000020000006c000000000000002abd700004350000020001002000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000240009000f00000000000000ceed00000000000009000000000000000001"], 0x15c}, 0x1, 0x0, 0x0, 0x4c815}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@newsa={0xf8, 0x1a, 0x1, 0xfffffffa, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x80, 0x20, 0x87}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, 0x4d4, 0x6c}, @in6=@mcast1, {0xfe, 0x1000000000000195, 0xf, 0xcbed, 0x8251c, 0x3, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xf8}, 0x1, 0x0, 0x0, 0x81}, 0x844) (async) r2 = accept(r0, &(0x7f00000005c0)=@can, &(0x7f0000000640)=0x80) (async, rerun: 64) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) setsockopt$inet6_buf(r3, 0x29, 0xcd, &(0x7f0000000100)="339fa6d300d77add2c233966072f85aec8a8a81753269416add12259134f696b9b19882c69b53053359ce3b4a9eb3db323e7b02d68a254cb13ff5f3db7ad1d97861dd1800935b0f95a3559b81492f09e15aafd6ea57db0c745cfb0f4", 0x5c) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) r6 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 64) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) (rerun: 64) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bind$ax25(r5, &(0x7f0000000000)={{0x3, @default, 0xfffffffe}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) (async, rerun: 64) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r5) (async, rerun: 64) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, r8, 0xf13, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x24}}, 0x0) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, r9, 0x4, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x400) 611.067044ms ago: executing program 2 (id=14692): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000240)={r1, r1, 0x4, 0x4, &(0x7f00000001c0)="afe5c64e", 0xc0, 0x4, 0x9c3f, 0x6, 0x5, 0x2, 0x7, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 502.404085ms ago: executing program 2 (id=14693): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x36, 0x0, 0x1, 0x9}, 0x28) r1 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') 454.472037ms ago: executing program 4 (id=14694): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @remote}}}, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x800, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1900bbd0d7b210358d740001085ddf3fe2d1b74e79d468dbfcd2452e3bc559a861"], 0x50) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x14, r5, 0xb01}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x4044804}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x1, &(0x7f0000000000)=@raw=[@generic={0x9, 0x0, 0x4, 0x6, 0x2d4f}], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x5, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2], 0x1, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x4, 0x0, 0x0, 0x3, 0x400, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="2400012bbd7000a10600843b00000400028035b8cf08045282e99ca108f98e28bd29dfa89b6e16d9fb92a8"], 0x24}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000c00060001000000000000000c00020000000000000000001c0007"], 0x48}}, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="04010000160002000000000000000000fe80000000000000000000000000000000000000000000000000000000dfd1a0b3782cdbc29e0bb99c8f65987062050000000000000006bc599c253cc6b011c4115fd9b00fe48d000000001bfafc7e5293d7470464003fd98e606e2299cc01d9beb49e376ca2a7d7b969a1910502177797194fde72b49e997134ff388a34252d83432df949342afccdd6d87a0c7a8e60274ccaf35b30e0666155c54bfcb8d91e052f9943094db47600"/212, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000033000000fe8000000000000000000000000000bbfcffffffffffffff0000000000000000000000000000000009000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000a000000000000000000000000000000000000000c0015005b073500faffffff"], 0x104}}, 0x4c090) sendmsg$nl_xfrm(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@delpolicy={0xf4, 0x14, 0x1, 0x70bd29, 0x25dfdbfd, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2e}, @in=@remote, 0x4e24, 0xabb, 0x4e22, 0x0, 0xa, 0x80, 0xb0, 0x1d}}, [@etimer_thresh={0x8, 0xc, 0x6}, @migrate={0x9c, 0x11, [{@in6=@rand_addr=' \x01\x00', @in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x43}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x358c0525a7d7d9e2, 0xa}, {@in6=@mcast1, @in=@remote, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @in6=@private1, 0x2b, 0x0, 0x0, 0x34ff, 0x2, 0x2}]}]}, 0xf4}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r11, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r11, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x8}, 0x8) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9c0cf6ad322b01", @ANYRES16=r12, @ANYBLOB="0100feffffff0000000001000000040007800c000200ffff000000000000"], 0x24}}, 0x20000000) 453.79304ms ago: executing program 7 (id=14695): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r2, &(0x7f0000000640)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000140)="a0002883591ecc0e", 0x8}], 0x1}}], 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) bind(r1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000040)={0x6, 'ip6erspan0\x00', {}, 0x105}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f00000006c0)={0x0, 'macvtap0\x00', {0xffe}, 0x2b1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r5, 0x0) ppoll(&(0x7f0000000000)=[{r4}, {r5, 0x1008}], 0x2, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002214000000110001"], 0xd8}, 0x1, 0x0, 0x0, 0x4000881}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$kcm(0x2, 0x200000000000001, 0x106) (async) socket$inet6(0xa, 0x2, 0x3a) (async) sendmmsg$inet6(r2, &(0x7f0000000640)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000140)="a0002883591ecc0e", 0x8}], 0x1}}], 0x1, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) (async) bind(r1, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000040)={0x6, 'ip6erspan0\x00', {}, 0x105}) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f00000006c0)={0x0, 'macvtap0\x00', {0xffe}, 0x2b1}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) bind$bt_sco(r5, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async) listen(r5, 0x0) (async) ppoll(&(0x7f0000000000)=[{r4}, {r5, 0x1008}], 0x2, 0x0, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002214000000110001"], 0xd8}, 0x1, 0x0, 0x0, 0x4000881}, 0x0) (async) 384.342863ms ago: executing program 2 (id=14696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000001c0)={r1, &(0x7f00000000c0)=',./}/@}\x00', 0x0, &(0x7f0000000100)={@_ha_fsid={[0x6, 0x9]}, {0x0, 0x7, 0x42d7042f, 0xffff}}, 0x89a, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)}) bind$802154_dgram(r3, &(0x7f0000000200)={0x24, @short={0x2, 0xffff}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000280)={0x24, @none={0x0, 0x2}}, 0x14) (async) connect$802154_dgram(r0, &(0x7f0000000280)={0x24, @none={0x0, 0x2}}, 0x14) write$cgroup_pid(r2, &(0x7f0000000380), 0x12) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 277.457339ms ago: executing program 6 (id=14697): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x12a0, 0x1100, 0x18c, 0x203, 0x0, 0x19030000, 0x11d0, 0x2e0, 0x2e0, 0x11d0, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x10d8, 0x1100, 0x0, {0x1000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x7d, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0xfffffffc, {0x3}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x9, 0x74c}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1300) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_ADDRESS={0xa, 0x1, @random="4af29c3ff049"}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 58.374631ms ago: executing program 2 (id=14698): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x11, 0x4000}]}}]}, 0x38}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r4, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0) 57.889261ms ago: executing program 7 (id=14699): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0x0, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x5, 0x7, 0x5, 0x1, 0x0, 0x6}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x6, 0x8}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @dev}, &(0x7f0000000380)=0x10, 0x100000) bind$inet(r4, &(0x7f0000000400)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000002c0)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/91, 0x5b}], 0x2}}], 0x48}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05004c6a9ecb0000ed00001b9e6e000e", @ANYRES64=r6, @ANYRES64=r7/1000+60000, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000200100000002000020020100008bec8f19e2784547d71d7e7bd996df3278c90c03c3ce93f7ea8ab12f4ba20270395c4549198c87e5c6c1e30a381e932517c0b9700aca445a63f62a91a862963d"], 0x80}, 0x1, 0x0, 0x0, 0x4090}, 0x80) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b16000000e8fe55a11800150006001400030000120800040048000300a80016000a0001400d000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 0s ago: executing program 6 (id=14700): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r1}) connect$vsock_stream(r4, &(0x7f0000000180)={0x28, 0x0, 0x0, @my=0x1}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000200)={0x10000011}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_CARRIER={0x5, 0x21, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100d0000000fbdbdf252100000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}}, 0x0) kernel console output (not intermixed with test programs): not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1315.219314][T19430] netlink: 'syz.0.12759': attribute type 1 has an invalid length. [ 1315.336616][T19438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12763'. [ 1315.569972][T19456] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12771'. [ 1315.678579][T19465] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1315.678884][ T2591] IPVS: starting estimator thread 0... [ 1315.786000][T19469] IPVS: using max 30 ests per chain, 72000 per kthread [ 1315.844693][T27547] Bluetooth: hci3: command tx timeout [ 1315.861964][T19480] netlink: 165 bytes leftover after parsing attributes in process `syz.3.12775'. [ 1315.931272][T19482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12776'. [ 1316.331031][T19507] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1316.344036][T19507] bond1 (unregistering): Released all slaves [ 1317.182258][T19535] macvtap0: entered promiscuous mode [ 1317.189620][T19535] tipc: Resetting bearer [ 1317.197623][T19535] veth0_macvtap: left promiscuous mode [ 1317.250854][T19535] macvtap0 (unregistering): left promiscuous mode [ 1317.257985][T19535] tipc: Disabling bearer [ 1317.432222][T19545] syzkaller0: entered promiscuous mode [ 1317.448988][T19547] netlink: 'syz.3.12794': attribute type 10 has an invalid length. [ 1317.450512][T19545] syzkaller0: entered allmulticast mode [ 1317.682093][T19559] lo speed is unknown, defaulting to 1000 [ 1317.924729][T27547] Bluetooth: hci3: command tx timeout [ 1317.960365][T19559] netlink: 'syz.4.12799': attribute type 4 has an invalid length. [ 1317.974632][T19559] netlink: 'syz.4.12799': attribute type 1 has an invalid length. [ 1318.121695][T19580] bond0: option lp_interval: invalid value (0) [ 1318.144072][T19580] bond0: option lp_interval: allowed values 1 - 2147483647 [ 1318.163102][T19580] bond0 (unregistering): Released all slaves [ 1318.462998][T19607] netlink: 'syz.4.12812': attribute type 1 has an invalid length. [ 1318.468026][T19604] netlink: 'syz.2.12810': attribute type 24 has an invalid length. [ 1321.438191][T19602] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1321.573678][T19638] netlink: 'syz.0.12821': attribute type 2 has an invalid length. [ 1321.724574][T19639] __nla_validate_parse: 11 callbacks suppressed [ 1321.724594][T19639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12820'. [ 1321.745283][T19639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12820'. [ 1321.868504][T19653] lo speed is unknown, defaulting to 1000 [ 1321.896045][T19659] netlink: 156 bytes leftover after parsing attributes in process `syz.3.12828'. [ 1322.235130][T19689] netlink: 54 bytes leftover after parsing attributes in process `syz.3.12835'. [ 1322.250908][T19689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12835'. [ 1322.309440][T19691] netlink: 'syz.4.12836': attribute type 21 has an invalid length. [ 1322.317552][T19691] netlink: 128 bytes leftover after parsing attributes in process `syz.4.12836'. [ 1322.329826][T19691] netlink: 3 bytes leftover after parsing attributes in process `syz.4.12836'. [ 1322.507671][T19696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12839'. [ 1322.515113][T19699] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.12840'. [ 1322.526992][T19696] netlink: 'syz.3.12839': attribute type 1 has an invalid length. [ 1322.546784][T19696] netlink: 'syz.3.12839': attribute type 2 has an invalid length. [ 1322.583706][T19697] bond2: option lp_interval: invalid value (0) [ 1322.591894][T19697] bond2: option lp_interval: allowed values 1 - 2147483647 [ 1322.602577][T19697] bond2 (unregistering): Released all slaves [ 1322.631727][T19705] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1322.639992][T19705] gretap1: entered promiscuous mode [ 1322.645477][T19705] gretap1: entered allmulticast mode [ 1322.737714][T19712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12842'. [ 1322.920790][T19724] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1323.349129][T19748] lo speed is unknown, defaulting to 1000 [ 1323.364118][T19753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1323.564173][T19767] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1323.612490][T19773] netlink: 'syz.4.12859': attribute type 1 has an invalid length. [ 1323.659665][T19773] netlink: 'syz.4.12859': attribute type 2 has an invalid length. [ 1323.806196][T19786] netlink: 'syz.0.12863': attribute type 1 has an invalid length. [ 1323.815099][T19786] netlink: 'syz.0.12863': attribute type 1 has an invalid length. [ 1323.868516][T19790] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1324.672039][T19815] netlink: 'syz.4.12871': attribute type 10 has an invalid length. [ 1324.674093][T19813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1324.727504][T19815] team0: Port device dummy0 added [ 1324.751592][T19820] sctp: [Deprecated]: syz.3.12872 (pid 19820) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1324.751592][T19820] Use struct sctp_sack_info instead [ 1325.179116][T19842] netlink: 'syz.3.12879': attribute type 9 has an invalid length. [ 1325.403391][T19858] openvswitch: netlink: Message has 3 unknown bytes. [ 1325.425165][T19853] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1325.451022][T19853] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1325.946143][T19883] tc_dump_action: action bad kind [ 1326.158328][T19895] siw: device registration error -23 [ 1326.439476][T19918] FAULT_INJECTION: forcing a failure. [ 1326.439476][T19918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1326.479631][T19918] CPU: 0 UID: 0 PID: 19918 Comm: syz.2.12900 Not tainted syzkaller #0 PREEMPT(full) [ 1326.479659][T19918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1326.479670][T19918] Call Trace: [ 1326.479679][T19918] [ 1326.479687][T19918] dump_stack_lvl+0xe8/0x150 [ 1326.479717][T19918] should_fail_ex+0x412/0x560 [ 1326.479749][T19918] _copy_from_user+0x2d/0xb0 [ 1326.479856][T19918] ___sys_sendmsg+0x1c6/0x360 [ 1326.479885][T19918] ? __pfx____sys_sendmsg+0x10/0x10 [ 1326.479940][T19918] ? __fget_files+0x2a/0x420 [ 1326.479965][T19918] ? __fget_files+0x3a0/0x420 [ 1326.480000][T19918] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1326.480023][T19918] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1326.480054][T19918] ? __pfx_ksys_write+0x10/0x10 [ 1326.480083][T19918] do_syscall_64+0x14d/0xf80 [ 1326.480105][T19918] ? trace_irq_disable+0x3b/0x150 [ 1326.480121][T19918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.480138][T19918] ? clear_bhb_loop+0x40/0x90 [ 1326.480161][T19918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.480179][T19918] RIP: 0033:0x7f95e9d9c819 [ 1326.480198][T19918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1326.480213][T19918] RSP: 002b:00007f95ead1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1326.480231][T19918] RAX: ffffffffffffffda RBX: 00007f95ea015fa0 RCX: 00007f95e9d9c819 [ 1326.480244][T19918] RDX: 0000000000044000 RSI: 0000200000000100 RDI: 0000000000000004 [ 1326.480255][T19918] RBP: 00007f95ead1a090 R08: 0000000000000000 R09: 0000000000000000 [ 1326.480266][T19918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1326.480277][T19918] R13: 00007f95ea016038 R14: 00007f95ea015fa0 R15: 00007ffca961e278 [ 1326.480304][T19918] [ 1326.946536][T19944] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1327.000097][T19944] __nla_validate_parse: 19 callbacks suppressed [ 1327.000119][T19944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12906'. [ 1327.056168][T19947] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 1327.114620][T19951] validate_nla: 4 callbacks suppressed [ 1327.114640][T19951] netlink: 'syz.2.12907': attribute type 12 has an invalid length. [ 1327.342362][T19971] vlan2: entered promiscuous mode [ 1327.348274][T19971] vlan2: entered allmulticast mode [ 1327.365544][T19971] hsr_slave_1: entered allmulticast mode [ 1327.434678][T19977] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12916'. [ 1327.495751][T19979] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1327.690519][T19996] Bluetooth: MGMT ver 1.23 [ 1327.705639][T19996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12922'. [ 1327.727490][T19996] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12922'. [ 1327.877777][T20003] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12923'. [ 1328.184843][T20028] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12929'. [ 1328.669801][T20046] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.12932'. [ 1328.690873][T20046] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12932'. [ 1328.701936][T20047] openvswitch: netlink: Flow actions attr not present in new flow. [ 1328.862861][T20057] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.870070][T20057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1329.078347][T20069] netlink: 'syz.4.12938': attribute type 1 has an invalid length. [ 1329.269820][T20085] syzkaller0: entered promiscuous mode [ 1329.275732][T20085] syzkaller0: entered allmulticast mode [ 1329.338088][T20092] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12946'. [ 1329.359049][T20092] geneve2: entered promiscuous mode [ 1329.398861][T20092] netlink: 'syz.4.12946': attribute type 83 has an invalid length. [ 1329.415891][T20092] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12946'. [ 1329.983050][ T5145] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1329.998524][ T5145] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1330.016078][T20143] Bluetooth: MGMT ver 1.23 [ 1330.020774][ T5145] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1330.031099][ T5145] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1330.039557][ T5145] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1330.094486][T20145] FAULT_INJECTION: forcing a failure. [ 1330.094486][T20145] name failslab, interval 1, probability 0, space 0, times 0 [ 1330.109033][T20145] CPU: 0 UID: 0 PID: 20145 Comm: syz.4.12956 Not tainted syzkaller #0 PREEMPT(full) [ 1330.109058][T20145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1330.109070][T20145] Call Trace: [ 1330.109077][T20145] [ 1330.109085][T20145] dump_stack_lvl+0xe8/0x150 [ 1330.109113][T20145] should_fail_ex+0x412/0x560 [ 1330.109142][T20145] should_failslab+0xa8/0x100 [ 1330.109163][T20145] ? skb_clone+0x212/0x3a0 [ 1330.109184][T20145] kmem_cache_alloc_noprof+0x87/0x650 [ 1330.109203][T20145] ? __netlink_lookup+0xc6/0x8b0 [ 1330.109226][T20145] skb_clone+0x212/0x3a0 [ 1330.109250][T20145] __netlink_deliver_tap+0x404/0x850 [ 1330.109287][T20145] ? netlink_deliver_tap+0x2e/0x1b0 [ 1330.109315][T20145] netlink_deliver_tap+0x19c/0x1b0 [ 1330.109342][T20145] netlink_unicast+0x7e3/0x9b0 [ 1330.109375][T20145] ? __pfx_netlink_unicast+0x10/0x10 [ 1330.109402][T20145] ? netlink_sendmsg+0x650/0xb40 [ 1330.109419][T20145] ? skb_put+0x11b/0x210 [ 1330.109441][T20145] netlink_sendmsg+0x813/0xb40 [ 1330.109469][T20145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1330.109490][T20145] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1330.109518][T20145] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1330.109542][T20145] ____sys_sendmsg+0x972/0x9f0 [ 1330.109573][T20145] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1330.109604][T20145] ? import_iovec+0x73/0xa0 [ 1330.109629][T20145] ___sys_sendmsg+0x2a5/0x360 [ 1330.109656][T20145] ? __pfx____sys_sendmsg+0x10/0x10 [ 1330.109712][T20145] ? __fget_files+0x2a/0x420 [ 1330.109738][T20145] ? __fget_files+0x3a0/0x420 [ 1330.109774][T20145] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1330.109799][T20145] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1330.109831][T20145] ? __pfx_ksys_write+0x10/0x10 [ 1330.109863][T20145] do_syscall_64+0x14d/0xf80 [ 1330.109884][T20145] ? trace_irq_disable+0x3b/0x150 [ 1330.109900][T20145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1330.109919][T20145] ? clear_bhb_loop+0x40/0x90 [ 1330.109941][T20145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1330.109959][T20145] RIP: 0033:0x7f2da419c819 [ 1330.110005][T20145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1330.110021][T20145] RSP: 002b:00007f2da23f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1330.110041][T20145] RAX: ffffffffffffffda RBX: 00007f2da4415fa0 RCX: 00007f2da419c819 [ 1330.110055][T20145] RDX: 0000000000044000 RSI: 0000200000000100 RDI: 0000000000000004 [ 1330.110067][T20145] RBP: 00007f2da23f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1330.110078][T20145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1330.110090][T20145] R13: 00007f2da4416038 R14: 00007f2da4415fa0 R15: 00007fffd705ded8 [ 1330.110120][T20145] [ 1330.112089][T20145] bridge0: port 1(bridge_slave_0) entered blocking state [ 1330.383332][T20145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1330.403995][T20140] lo speed is unknown, defaulting to 1000 [ 1330.677316][T20140] chnl_net:caif_netlink_parms(): no params data found [ 1330.759496][T20140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1330.767217][T20140] bridge0: port 1(bridge_slave_0) entered disabled state [ 1330.772964][T20166] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1330.789595][T20140] bridge_slave_0: entered allmulticast mode [ 1330.797054][T20140] bridge_slave_0: entered promiscuous mode [ 1330.806018][T20140] bridge0: port 2(bridge_slave_1) entered blocking state [ 1330.813315][T20140] bridge0: port 2(bridge_slave_1) entered disabled state [ 1330.820685][T20140] bridge_slave_1: entered allmulticast mode [ 1330.827820][T20140] bridge_slave_1: entered promiscuous mode [ 1330.856768][T20140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1330.868636][T20140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1330.907509][T20140] team0: Port device team_slave_0 added [ 1330.915469][T20140] team0: Port device team_slave_1 added [ 1330.938494][T20140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1330.945601][T20140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1330.971925][T20140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1330.985751][T20140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1330.993407][T20140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1331.019650][T20140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1331.061382][T20140] hsr_slave_0: entered promiscuous mode [ 1331.068669][T20140] hsr_slave_1: entered promiscuous mode [ 1331.075495][T20140] debugfs: 'hsr0' already exists in 'hsr' [ 1331.081224][T20140] Cannot create hsr debugfs directory [ 1331.497083][T11291] lec:lec_start_xmit: lec0:No lecd attached [ 1331.728703][T20183] FAULT_INJECTION: forcing a failure. [ 1331.728703][T20183] name failslab, interval 1, probability 0, space 0, times 0 [ 1331.742151][T20183] CPU: 1 UID: 0 PID: 20183 Comm: syz.0.12966 Not tainted syzkaller #0 PREEMPT(full) [ 1331.742167][T20183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1331.742219][T20183] Call Trace: [ 1331.742226][T20183] [ 1331.742231][T20183] dump_stack_lvl+0xe8/0x150 [ 1331.742250][T20183] should_fail_ex+0x412/0x560 [ 1331.742268][T20183] should_failslab+0xa8/0x100 [ 1331.742283][T20183] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1331.742294][T20183] ? __alloc_skb+0x186/0x7d0 [ 1331.742305][T20183] ? __alloc_skb+0x1d0/0x7d0 [ 1331.742314][T20183] ? __local_bh_enable_ip+0xd0/0x130 [ 1331.742329][T20183] __alloc_skb+0x1d0/0x7d0 [ 1331.742339][T20183] ? netlink_ack_tlv_len+0x6c/0x210 [ 1331.742356][T20183] netlink_ack+0x146/0xa50 [ 1331.742368][T20183] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1331.742437][T20183] ? ref_tracker_free+0x693/0x840 [ 1331.742474][T20183] ? __copy_skb_header+0xa3/0x4a0 [ 1331.742487][T20183] ? __pfx_ref_tracker_free+0x10/0x10 [ 1331.742506][T20183] netlink_rcv_skb+0x2b6/0x4b0 [ 1331.742521][T20183] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1331.742532][T20183] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1331.742552][T20183] ? netlink_deliver_tap+0x2e/0x1b0 [ 1331.742570][T20183] netlink_unicast+0x80f/0x9b0 [ 1331.742587][T20183] ? __pfx_netlink_unicast+0x10/0x10 [ 1331.742602][T20183] ? netlink_sendmsg+0x650/0xb40 [ 1331.742610][T20183] ? skb_put+0x11b/0x210 [ 1331.742622][T20183] netlink_sendmsg+0x813/0xb40 [ 1331.742636][T20183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1331.742648][T20183] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1331.742663][T20183] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1331.742677][T20183] ____sys_sendmsg+0x972/0x9f0 [ 1331.742694][T20183] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1331.742709][T20183] ? import_iovec+0x73/0xa0 [ 1331.742723][T20183] ___sys_sendmsg+0x2a5/0x360 [ 1331.742737][T20183] ? __pfx____sys_sendmsg+0x10/0x10 [ 1331.742769][T20183] ? __fget_files+0x2a/0x420 [ 1331.742784][T20183] ? __fget_files+0x3a0/0x420 [ 1331.742802][T20183] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1331.742815][T20183] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1331.742831][T20183] ? __pfx_ksys_write+0x10/0x10 [ 1331.742855][T20183] do_syscall_64+0x14d/0xf80 [ 1331.742867][T20183] ? trace_irq_disable+0x3b/0x150 [ 1331.742876][T20183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.742886][T20183] ? clear_bhb_loop+0x40/0x90 [ 1331.742899][T20183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.742909][T20183] RIP: 0033:0x7f9e3759c819 [ 1331.742920][T20183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1331.742929][T20183] RSP: 002b:00007f9e384b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1331.742940][T20183] RAX: ffffffffffffffda RBX: 00007f9e37815fa0 RCX: 00007f9e3759c819 [ 1331.742948][T20183] RDX: 0000000000044000 RSI: 0000200000000100 RDI: 0000000000000004 [ 1331.742954][T20183] RBP: 00007f9e384b8090 R08: 0000000000000000 R09: 0000000000000000 [ 1331.742960][T20183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1331.742966][T20183] R13: 00007f9e37816038 R14: 00007f9e37815fa0 R15: 00007ffc5b8986e8 [ 1331.742981][T20183] [ 1332.084611][ T5145] Bluetooth: hci2: command tx timeout [ 1332.710983][T20118] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1332.741535][T20140] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1332.812141][T20140] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1332.870395][T20140] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1332.900617][T20140] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1332.938515][T20207] __nla_validate_parse: 3 callbacks suppressed [ 1332.938533][T20207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12974'. [ 1332.955814][T20210] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.962929][T20210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1332.971540][T20206] syzkaller0: entered promiscuous mode [ 1332.977227][T20206] syzkaller0: entered allmulticast mode [ 1332.987231][T20206] 0: reclassify loop, rule prio 0, protocol 800 [ 1333.030993][T20217] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1333.039331][T20217] bridge0: port 1(bridge_slave_0) entered blocking state [ 1333.046515][T20217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1333.108164][T20219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12977'. [ 1333.156149][T20221] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001 [ 1333.197947][T20140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1333.236354][T20140] 8021q: adding VLAN 0 to HW filter on device team0 [ 1333.269288][T14999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1333.276492][T14999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1333.299022][T30242] bridge0: port 2(bridge_slave_1) entered blocking state [ 1333.306238][T30242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1333.452767][T20230] netlink: 68 bytes leftover after parsing attributes in process `syz.4.12982'. [ 1333.463674][T20232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12983'. [ 1333.498868][T20230] openvswitch: netlink: Message has 165 unknown bytes. [ 1333.666797][T20249] netlink: 76 bytes leftover after parsing attributes in process `syz.4.12985'. [ 1333.686144][T20249] nbd: illegal input index -8454144 [ 1333.740825][T20252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12985'. [ 1333.771554][T20140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1333.798481][T20252] openvswitch: netlink: Unknown nsh attribute 0 [ 1334.026727][T20272] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 1334.168528][ T5145] Bluetooth: hci2: command tx timeout [ 1334.413538][T20140] veth0_vlan: entered promiscuous mode [ 1334.464586][T20140] veth1_vlan: entered promiscuous mode [ 1334.532938][T20307] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13003'. [ 1334.579485][T20140] veth0_macvtap: entered promiscuous mode [ 1334.611049][T20140] veth1_macvtap: entered promiscuous mode [ 1334.657653][T20313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13005'. [ 1334.698103][T20140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1334.741053][T20140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1334.790961][T30245] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.815964][T30245] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.856772][T30245] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.914637][T30245] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.017919][T20328] x9: renamed from bridge_slave_0 (while UP) [ 1335.095692][T20330] netlink: 17 bytes leftover after parsing attributes in process `syz.0.13010'. [ 1335.160567][T30245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1335.175774][T20330] Cannot find add_set index 0 as target [ 1335.184706][T30245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1335.202016][T20336] gtp1: entered promiscuous mode [ 1335.210708][T20336] gtp1: entered allmulticast mode [ 1335.228766][T20338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13013'. [ 1335.238295][T20340] netlink: 'syz.2.13014': attribute type 1 has an invalid length. [ 1335.269864][T20340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1335.296980][T14996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1335.311409][T14996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1335.377994][T20349] xt_l2tp: wrong L2TP version: 0 [ 1335.413692][T20336] syzkaller0: entered promiscuous mode [ 1335.416060][T20350] netlink: 'syz.3.13012': attribute type 10 has an invalid length. [ 1335.432946][T20336] syzkaller0: entered allmulticast mode [ 1335.536216][T20350] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1335.665749][T20362] netlink: 'syz.2.13019': attribute type 1 has an invalid length. [ 1336.254722][ T5145] Bluetooth: hci2: command tx timeout [ 1336.885863][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5390 ms [ 1336.893939][ C0] lec:lec_tx_timeout: lec0 [ 1337.407098][T20362] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1337.822080][T20407] syzkaller0: entered promiscuous mode [ 1337.856728][T20407] syzkaller0: entered allmulticast mode [ 1337.969971][T20410] __nla_validate_parse: 7 callbacks suppressed [ 1337.969991][T20410] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13031'. [ 1337.987233][T20405] team0: Port device dummy0 removed [ 1338.008611][T20407] : entered promiscuous mode [ 1338.169869][T20435] bond4: option lp_interval: invalid value (0) [ 1338.177022][T20435] bond4: option lp_interval: allowed values 1 - 2147483647 [ 1338.189357][T20435] bond4 (unregistering): Released all slaves [ 1338.329359][ T5145] Bluetooth: hci2: command tx timeout [ 1338.413746][T20455] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13043'. [ 1338.606976][T20465] lo speed is unknown, defaulting to 1000 [ 1338.684126][T20472] netlink: 59 bytes leftover after parsing attributes in process `syz.3.13048'. [ 1338.814705][T20476] netlink: 332 bytes leftover after parsing attributes in process `syz.3.13050'. [ 1338.873177][T20477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13050'. [ 1339.164109][T20495] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13055'. [ 1339.755696][T20536] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13066'. [ 1339.863838][T20538] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13066'. [ 1340.013684][T20538] nbd: device at index 64 is going down [ 1340.371602][T19139] udevd[19139]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1340.425511][T18850] udevd[18850]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1341.021738][T20617] FAULT_INJECTION: forcing a failure. [ 1341.021738][T20617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1341.036695][T20616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13084'. [ 1341.074576][T20617] CPU: 0 UID: 0 PID: 20617 Comm: syz.3.13085 Not tainted syzkaller #0 PREEMPT(full) [ 1341.074604][T20617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1341.074614][T20617] Call Trace: [ 1341.074622][T20617] [ 1341.074630][T20617] dump_stack_lvl+0xe8/0x150 [ 1341.074659][T20617] should_fail_ex+0x412/0x560 [ 1341.074689][T20617] _copy_to_user+0x31/0xb0 [ 1341.074712][T20617] simple_read_from_buffer+0xe1/0x170 [ 1341.074741][T20617] proc_fail_nth_read+0x1bb/0x230 [ 1341.074770][T20617] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1341.074797][T20617] ? rw_verify_area+0x2a6/0x4d0 [ 1341.074813][T20617] ? tun_chr_write_iter+0xe0/0x200 [ 1341.074912][T20617] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1341.074938][T20617] vfs_read+0x20c/0xa70 [ 1341.074955][T20617] ? fdget_pos+0x246/0x320 [ 1341.074977][T20617] ? __pfx___mutex_lock+0x10/0x10 [ 1341.075001][T20617] ? __pfx_vfs_read+0x10/0x10 [ 1341.075023][T20617] ? __fget_files+0x2a/0x420 [ 1341.075053][T20617] ? __fget_files+0x3a0/0x420 [ 1341.075078][T20617] ? __fget_files+0x2a/0x420 [ 1341.075111][T20617] ksys_read+0x150/0x270 [ 1341.075133][T20617] ? __pfx_ksys_read+0x10/0x10 [ 1341.075162][T20617] do_syscall_64+0x14d/0xf80 [ 1341.075183][T20617] ? trace_irq_disable+0x3b/0x150 [ 1341.075198][T20617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.075223][T20617] ? clear_bhb_loop+0x40/0x90 [ 1341.075244][T20617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.075260][T20617] RIP: 0033:0x7f672035d04e [ 1341.075277][T20617] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1341.075292][T20617] RSP: 002b:00007f672121dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1341.075310][T20617] RAX: ffffffffffffffda RBX: 00007f672121e6c0 RCX: 00007f672035d04e [ 1341.075322][T20617] RDX: 000000000000000f RSI: 00007f672121e0a0 RDI: 0000000000000004 [ 1341.075333][T20617] RBP: 00007f672121e090 R08: 0000000000000000 R09: 0000000000000000 [ 1341.075343][T20617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1341.075354][T20617] R13: 00007f6720616038 R14: 00007f6720615fa0 R15: 00007fff26e0af98 [ 1341.075382][T20617] [ 1341.087307][T20610] lo speed is unknown, defaulting to 1000 [ 1341.103582][T20615] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13083'. [ 1341.198455][T20611] lo speed is unknown, defaulting to 1000 [ 1341.351824][T20629] netlink: 'syz.3.13088': attribute type 6 has an invalid length. [ 1343.446300][T20656] bridge0: port 1(bridge_slave_0) entered blocking state [ 1343.453489][T20656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1343.480790][T20660] __nla_validate_parse: 2 callbacks suppressed [ 1343.480808][T20660] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13094'. [ 1343.534082][T20661] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13094'. [ 1343.711036][T20672] netlink: 'syz.4.13097': attribute type 1 has an invalid length. [ 1343.835925][T20672] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1343.861485][T20675] bond1: (slave ip6gretap1): making interface the new active one [ 1343.958945][T20675] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1344.137804][T20699] lo speed is unknown, defaulting to 1000 [ 1344.215339][T20705] netlink: 'syz.0.13109': attribute type 64 has an invalid length. [ 1344.323035][T20708] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13110'. [ 1344.351916][T20708] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13110'. [ 1344.442256][T20708] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13110'. [ 1344.452064][T20708] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13110'. [ 1344.503084][T20717] bond2: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1344.513260][T15002] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1344.523934][T15002] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1344.554084][T15002] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1344.563344][T15002] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1344.580452][T20699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13107'. [ 1344.801684][T20730] openvswitch: netlink: IP tunnel dst address not specified [ 1344.829289][T20733] openvswitch: netlink: IP tunnel dst address not specified [ 1344.888305][T20732] caif0: mtu less than device minimum [ 1344.916214][T20726] netlink: 56 bytes leftover after parsing attributes in process `syz.5.13114'. [ 1344.947166][T20735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13117'. [ 1345.211591][T20757] bridge0: port 1(bridge_slave_0) entered blocking state [ 1345.218845][T20757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1345.440201][T20773] bond4: entered allmulticast mode [ 1345.458354][T20773] ip6gretap1: entered promiscuous mode [ 1345.463969][T20773] ip6gretap1: entered allmulticast mode [ 1345.473902][T20773] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1345.533862][T11784] IPVS: starting estimator thread 0... [ 1345.634625][T20783] IPVS: using max 32 ests per chain, 76800 per kthread [ 1345.923486][T20799] netlink: 'syz.0.13137': attribute type 29 has an invalid length. [ 1345.936591][T20799] netlink: 'syz.0.13137': attribute type 29 has an invalid length. [ 1345.946304][T20799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13137'. [ 1346.186590][T20824] bond1: ARP target 1.0.0.0 is already present [ 1346.192983][T20824] bond1: option arp_ip_target: invalid value (1) [ 1346.254724][T20824] bond1 (unregistering): Released all slaves [ 1346.467654][T30242] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1346.492405][T30242] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1346.509647][T30242] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1346.527996][T30242] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1346.623337][T20850] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1346.895723][T20866] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1347.373630][T20888] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1347.392143][T20888] bond1 (unregistering): Released all slaves [ 1347.768877][T20921] syzkaller0: entered promiscuous mode [ 1347.788944][T20921] syzkaller0: entered allmulticast mode [ 1347.893063][T20933] netlink: 'syz.5.13168': attribute type 32 has an invalid length. [ 1348.636827][T20942] __nla_validate_parse: 8 callbacks suppressed [ 1348.636847][T20942] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13173'. [ 1349.607276][T20932] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1349.608149][T20933] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1349.701227][T20946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13174'. [ 1349.894553][T20959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13179'. [ 1349.894553][T20961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13179'. [ 1349.961561][T20965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13181'. [ 1349.968541][T20969] syzkaller0: entered promiscuous mode [ 1349.971759][T20965] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13181'. [ 1349.991534][T20970] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20001 [ 1350.005453][T20969] syzkaller0: entered allmulticast mode [ 1350.211280][T20981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13187'. [ 1350.513500][T21003] netlink: 27 bytes leftover after parsing attributes in process `syz.3.13192'. [ 1350.925927][T30246] tipc: Subscription rejected, illegal request [ 1351.003668][T21032] sock: sock_timestamping_bind_phc: sock not bind to device [ 1351.122112][T21039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13205'. [ 1351.133021][T21044] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13207'. [ 1351.161592][T21046] xt_hashlimit: size too large, truncated to 1048576 [ 1351.966391][T21094] syzkaller0: entered promiscuous mode [ 1351.972043][T21094] syzkaller0: entered allmulticast mode [ 1352.329415][T21113] bridge0: port 1(bridge_slave_0) entered blocking state [ 1352.336601][T21113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1352.370404][T21118] xt_hashlimit: size too large, truncated to 1048576 [ 1352.379932][T21119] xt_hashlimit: size too large, truncated to 1048576 [ 1352.397053][T21124] IPv6: sit1: Disabled Multicast RS [ 1352.403679][T21124] sit1: entered allmulticast mode [ 1352.452037][T21121] netlink: 'syz.2.13225': attribute type 1 has an invalid length. [ 1352.654896][T21130] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1352.676806][T21132] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1352.799656][T21141] openvswitch: netlink: IP tunnel dst address not specified [ 1352.828422][T21141] netlink: 'syz.5.13231': attribute type 3 has an invalid length. [ 1353.252725][T21182] netlink: 'syz.2.13243': attribute type 20 has an invalid length. [ 1353.278467][T21182] IPv6: NLM_F_CREATE should be specified when creating new route [ 1353.335891][T21177] bridge0: port 1(bridge_slave_0) entered blocking state [ 1353.343063][T21177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1353.360990][T21182] netlink: 'syz.2.13243': attribute type 83 has an invalid length. [ 1353.493872][T21196] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1354.451438][T21244] netlink: 'syz.0.13260': attribute type 1 has an invalid length. [ 1354.484721][T21244] __nla_validate_parse: 6 callbacks suppressed [ 1354.484742][T21244] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13260'. [ 1354.493652][T21250] netlink: 'syz.2.13262': attribute type 1 has an invalid length. [ 1354.567347][T21249] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13261'. [ 1354.611070][T21249] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13261'. [ 1354.650618][T21246] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1354.661397][T21246] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1354.680125][T21246] bond1: (slave ip6gre1): making interface the new active one [ 1354.688664][T21246] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 1354.871024][T21273] FAULT_INJECTION: forcing a failure. [ 1354.871024][T21273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1354.914875][T21273] CPU: 0 UID: 0 PID: 21273 Comm: syz.5.13268 Not tainted syzkaller #0 PREEMPT(full) [ 1354.914903][T21273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1354.914915][T21273] Call Trace: [ 1354.914922][T21273] [ 1354.914932][T21273] dump_stack_lvl+0xe8/0x150 [ 1354.914961][T21273] should_fail_ex+0x412/0x560 [ 1354.914994][T21273] _copy_to_user+0x31/0xb0 [ 1354.915017][T21273] simple_read_from_buffer+0xe1/0x170 [ 1354.915048][T21273] proc_fail_nth_read+0x1bb/0x230 [ 1354.915078][T21273] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1354.915107][T21273] ? rw_verify_area+0x2a6/0x4d0 [ 1354.915127][T21273] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1354.915154][T21273] vfs_read+0x20c/0xa70 [ 1354.915173][T21273] ? fdget_pos+0x246/0x320 [ 1354.915195][T21273] ? __pfx___mutex_lock+0x10/0x10 [ 1354.915219][T21273] ? __pfx_vfs_read+0x10/0x10 [ 1354.915241][T21273] ? __fget_files+0x2a/0x420 [ 1354.915272][T21273] ? __fget_files+0x3a0/0x420 [ 1354.915297][T21273] ? __fget_files+0x2a/0x420 [ 1354.915332][T21273] ksys_read+0x150/0x270 [ 1354.915354][T21273] ? __pfx_ksys_read+0x10/0x10 [ 1354.915386][T21273] do_syscall_64+0x14d/0xf80 [ 1354.915407][T21273] ? trace_irq_disable+0x3b/0x150 [ 1354.915424][T21273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.915443][T21273] ? clear_bhb_loop+0x40/0x90 [ 1354.915466][T21273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.915484][T21273] RIP: 0033:0x7fa08ed5d04e [ 1354.915502][T21273] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1354.915519][T21273] RSP: 002b:00007fa08fc29fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1354.915539][T21273] RAX: ffffffffffffffda RBX: 00007fa08fc2a6c0 RCX: 00007fa08ed5d04e [ 1354.915553][T21273] RDX: 000000000000000f RSI: 00007fa08fc2a0a0 RDI: 0000000000000004 [ 1354.915565][T21273] RBP: 00007fa08fc2a090 R08: 0000000000000000 R09: 0000000000000000 [ 1354.915577][T21273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1354.915588][T21273] R13: 00007fa08f016038 R14: 00007fa08f015fa0 R15: 00007ffdaa686b88 [ 1354.915620][T21273] [ 1355.653526][T21304] can: request_module (can-proto-3) failed. [ 1355.661955][T21304] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13280'. [ 1355.854730][T21316] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1355.857422][T21321] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13284'. [ 1355.876733][T21321] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1355.898271][T21321] netlink: 164 bytes leftover after parsing attributes in process `syz.5.13284'. [ 1356.090692][T21341] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13291'. [ 1356.143785][T21341] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1356.188823][T21341] bond0 (unregistering): Released all slaves [ 1356.729181][T21381] netlink: 'syz.4.13303': attribute type 1 has an invalid length. [ 1356.803384][T21388] ip6gre2: entered allmulticast mode [ 1356.842889][T21389] bond2: (slave gretap3): making interface the new active one [ 1356.851362][T21389] bond2: (slave gretap3): Enslaving as an active interface with an up link [ 1357.364136][T21409] netlink: 408 bytes leftover after parsing attributes in process `syz.3.13314'. [ 1357.427274][T21420] openvswitch: netlink: Invalid VLAN frame [ 1357.947519][T21431] netlink: 404 bytes leftover after parsing attributes in process `syz.4.13319'. [ 1358.006630][T21433] tap0: tun_chr_ioctl cmd 2148553947 [ 1358.085211][T21435] ip6gre0: Master is either lo or non-ether device [ 1358.156561][T21439] netlink: 'syz.2.13323': attribute type 1 has an invalid length. [ 1358.166960][T21439] netlink: 96 bytes leftover after parsing attributes in process `syz.2.13323'. [ 1358.178096][T21439] netlink: 'syz.2.13323': attribute type 1 has an invalid length. [ 1358.186311][T21439] netlink: 'syz.2.13323': attribute type 8 has an invalid length. [ 1358.309994][T21441] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1358.785406][T21476] lo speed is unknown, defaulting to 1000 [ 1358.809320][T21475] lo speed is unknown, defaulting to 1000 [ 1358.862815][T21483] netlink: 'syz.5.13335': attribute type 1 has an invalid length. [ 1358.878532][T21483] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1359.089721][T21493] vcan1: entered promiscuous mode [ 1359.103316][T21493] vcan1: entered allmulticast mode [ 1359.285545][ T5145] Bluetooth: hci2: command tx timeout [ 1359.499159][T21517] tipc: Started in network mode [ 1359.504134][T21517] tipc: Node identity ac14140f, cluster identity 4711 [ 1359.514705][T21517] tipc: New replicast peer: 255.255.255.255 [ 1359.522528][T21517] tipc: Enabled bearer , priority 10 [ 1359.532019][T21517] __nla_validate_parse: 8 callbacks suppressed [ 1359.532037][T21517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13346'. [ 1359.588327][T21520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13348'. [ 1359.815793][T21534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13354'. [ 1359.830571][T21532] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input11 [ 1359.969865][T21543] netlink: 'syz.2.13356': attribute type 1 has an invalid length. [ 1359.995438][T21545] openvswitch: netlink: Tunnel attr 1288 out of range max 16 [ 1360.031007][T21543] bond2: entered promiscuous mode [ 1360.040546][T21543] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1360.095460][T21543] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1360.107309][T21543] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 1360.121136][T21543] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 1360.140235][T21543] bond2: (slave vcan1): making interface the new active one [ 1360.147701][T21543] vcan1: entered promiscuous mode [ 1360.154008][T21543] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 1360.271587][T21562] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13364'. [ 1360.352198][T21568] openvswitch: netlink: Flow actions attr not present in new flow. [ 1360.437437][T21571] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13368'. [ 1360.488405][T21571] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1360.508426][T21571] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1360.516625][T21571] gretap1: entered promiscuous mode [ 1360.521867][T21571] gretap1: entered allmulticast mode [ 1360.631057][T21582] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1360.632187][T21581] tipc: Started in network mode [ 1360.665049][T21581] tipc: Node identity ac14140f, cluster identity 4711 [ 1360.680822][T21581] tipc: New replicast peer: 255.255.255.255 [ 1360.701134][T21581] tipc: Enabled bearer , priority 10 [ 1360.714674][ T2596] tipc: Node number set to 2886997007 [ 1360.876508][T21596] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13369'. [ 1361.113644][T21607] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13378'. [ 1361.123587][T21607] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13378'. [ 1361.141853][T21607] syzkaller0: entered promiscuous mode [ 1361.161963][T21607] syzkaller0: entered allmulticast mode [ 1361.542763][T21643] tc_dump_action: action bad kind [ 1361.617706][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 1361.814347][ T2583] tipc: Node number set to 2886997007 [ 1361.828318][T21664] vlan2: entered allmulticast mode [ 1361.833570][T21664] veth0_to_bond: entered allmulticast mode [ 1361.886488][T21666] bond3: Removing last arp target with arp_interval on [ 1361.982712][T21678] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13397'. [ 1361.996431][T21670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13396'. [ 1362.018813][T21670] openvswitch: netlink: Flow actions attr not present in new flow. [ 1362.094087][T21672] netlink: 'syz.2.13396': attribute type 10 has an invalid length. [ 1362.272809][T21693] openvswitch: netlink: Missing valid actions attribute. [ 1362.307201][T21694] netlink: 'syz.2.13402': attribute type 2 has an invalid length. [ 1362.315729][T21693] netlink: 'syz.2.13402': attribute type 2 has an invalid length. [ 1362.684569][T21724] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 1362.833969][T21731] tipc: Enabled bearer , priority 0 [ 1362.929005][T21731] syzkaller0: entered promiscuous mode [ 1362.935246][T21731] syzkaller0: entered allmulticast mode [ 1362.943295][T21731] tipc: Resetting bearer [ 1362.953370][T21730] tipc: Resetting bearer [ 1363.285021][T21747] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1364.743089][T21730] tipc: Disabling bearer [ 1364.851332][T21752] __nla_validate_parse: 7 callbacks suppressed [ 1364.851352][T21752] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13414'. [ 1365.806446][T21767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13419'. [ 1365.833364][T21769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13420'. [ 1365.886849][T21767] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1365.902770][T21775] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13420'. [ 1365.958503][T21774] syzkaller0: entered promiscuous mode [ 1365.964015][T21774] syzkaller0: entered allmulticast mode [ 1366.728937][T21784] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13423'. [ 1366.746081][T21784] netlink: 'syz.2.13423': attribute type 3 has an invalid length. [ 1366.884882][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5270 ms [ 1366.892996][ C0] lec:lec_tx_timeout: lec0 [ 1367.899980][T21791] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13426'. [ 1367.935500][T21795] netlink: 'syz.2.13428': attribute type 15 has an invalid length. [ 1367.943497][T21795] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13428'. [ 1367.957404][T21791] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13426'. [ 1368.179410][T21802] IPv6: Can't replace route, no match found [ 1368.185867][T21802] IPv6: Can't replace route, no match found [ 1368.283386][T21808] openvswitch: netlink: EtherType 50a is less than min 600 [ 1368.947196][T21822] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13437'. [ 1369.514094][T21854] netlink: 64 bytes leftover after parsing attributes in process `syz.5.13446'. [ 1369.528151][T21854] syzkaller1: entered promiscuous mode [ 1369.533747][T21854] syzkaller1: entered allmulticast mode [ 1370.028604][T21873] smc: net device team0 applied user defined pnetid SYZ2 [ 1370.251996][T21877] netlink: 'syz.2.13454': attribute type 8 has an invalid length. [ 1370.827202][T21882] xt_hashlimit: size too large, truncated to 1048576 [ 1370.880005][T21885] __nla_validate_parse: 1 callbacks suppressed [ 1370.880026][T21885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13457'. [ 1370.909393][T21885] team0: Device gtp0 is up. Set it down before adding it as a team port [ 1370.959230][T21888] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13457'. [ 1370.980962][T21888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13457'. [ 1370.990981][T21889] netlink: 'syz.5.13456': attribute type 1 has an invalid length. [ 1371.373191][T21903] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.13463'. [ 1371.400738][T21903] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1371.414836][T21903] macsec1: entered promiscuous mode [ 1371.515556][T21910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13468'. [ 1371.651655][T27547] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1371.662194][T27547] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1371.670890][T27547] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1371.680185][T27547] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1371.687929][T27547] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1371.777969][T21921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13472'. [ 1371.807626][T21913] lo speed is unknown, defaulting to 1000 [ 1372.085247][T21927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1372.193770][T21931] netlink: 'syz.2.13475': attribute type 21 has an invalid length. [ 1372.194372][T21932] netlink: 'syz.2.13475': attribute type 21 has an invalid length. [ 1372.225087][T21932] IPv6: NLM_F_CREATE should be specified when creating new route [ 1372.420845][T21913] chnl_net:caif_netlink_parms(): no params data found [ 1372.652417][T27547] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1372.667453][T21951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13479'. [ 1372.680860][T27547] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1372.691733][T27547] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1372.700139][T27547] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1372.708767][T27547] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1372.784958][T21913] bridge0: port 1(bridge_slave_0) entered blocking state [ 1372.794615][T21913] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.801919][T21913] bridge_slave_0: entered allmulticast mode [ 1372.814130][T21913] bridge_slave_0: entered promiscuous mode [ 1372.858444][T21913] bridge0: port 2(bridge_slave_1) entered blocking state [ 1372.866390][T21913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1372.875405][T21913] bridge_slave_1: entered allmulticast mode [ 1372.883140][T21913] bridge_slave_1: entered promiscuous mode [ 1372.925014][T21952] lo speed is unknown, defaulting to 1000 [ 1372.940759][T21913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1372.942899][T21959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13481'. [ 1373.022501][T21913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1373.069721][T21959] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13481'. [ 1373.190146][T21913] team0: Port device team_slave_0 added [ 1373.208359][T21913] team0: Port device team_slave_1 added [ 1373.262121][T21913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1373.269478][T21913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1373.301636][T21913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1373.335959][T21913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1373.343218][T21913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1373.370530][T21913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1373.429717][T21980] netlink: 'syz.2.13485': attribute type 21 has an invalid length. [ 1373.537761][T21995] netlink: 'syz.5.13489': attribute type 8 has an invalid length. [ 1373.546601][T21995] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13489'. [ 1373.563401][T21913] hsr_slave_0: entered promiscuous mode [ 1373.572003][T21913] hsr_slave_1: entered promiscuous mode [ 1373.581985][T21913] debugfs: 'hsr0' already exists in 'hsr' [ 1373.597969][T21913] Cannot create hsr debugfs directory [ 1373.765331][T27547] Bluetooth: hci6: command tx timeout [ 1373.791569][T21995] bond0: entered promiscuous mode [ 1373.798821][T21995] bond_slave_0: entered promiscuous mode [ 1373.804999][T21995] bond_slave_1: entered promiscuous mode [ 1373.812209][T21995] gretap0: entered promiscuous mode [ 1373.818617][T21995] veth1_to_team: entered promiscuous mode [ 1373.825745][T21995] debugfs: 'hsr1' already exists in 'hsr' [ 1373.831458][T21995] Cannot create hsr debugfs directory [ 1373.837037][T21995] hsr1: entered promiscuous mode [ 1374.152802][T21952] chnl_net:caif_netlink_parms(): no params data found [ 1374.465975][T22016] syzkaller0: entered promiscuous mode [ 1374.472288][T22016] syzkaller0: entered allmulticast mode [ 1374.485668][T22019] netlink: 'syz.2.13495': attribute type 12 has an invalid length. [ 1374.590557][T22024] netlink: 'syz.2.13496': attribute type 24 has an invalid length. [ 1374.621675][T21952] bridge0: port 1(bridge_slave_0) entered blocking state [ 1374.629502][T21952] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.637625][T21952] bridge_slave_0: entered allmulticast mode [ 1374.660218][T21952] bridge_slave_0: entered promiscuous mode [ 1374.718493][T21952] bridge0: port 2(bridge_slave_1) entered blocking state [ 1374.748544][T21952] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.759793][T21952] bridge_slave_1: entered allmulticast mode [ 1374.769289][T21952] bridge_slave_1: entered promiscuous mode [ 1374.806251][T27547] Bluetooth: hci7: command tx timeout [ 1374.911137][T21952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1374.926352][T21952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1374.983346][T22034] nbd: must specify at least one socket [ 1375.127498][T21952] team0: Port device team_slave_0 added [ 1375.183392][T21952] team0: Port device team_slave_1 added [ 1375.274053][T21913] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1375.299040][T21952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1375.307949][T21952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1375.337178][T21952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1375.352168][T21913] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1375.370054][T21913] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1375.417169][T21952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1375.424131][T21952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1375.481993][T21952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1375.501356][T21913] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1375.668762][T21952] hsr_slave_0: entered promiscuous mode [ 1375.679887][T21952] hsr_slave_1: entered promiscuous mode [ 1375.705369][T21952] debugfs: 'hsr0' already exists in 'hsr' [ 1375.719921][T21952] Cannot create hsr debugfs directory [ 1375.846872][T27547] Bluetooth: hci6: command tx timeout [ 1375.928055][T22070] __nla_validate_parse: 12 callbacks suppressed [ 1375.928074][T22070] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13508'. [ 1376.000990][T21913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1376.062420][T22075] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13509'. [ 1376.091637][T22075] team0 (unregistering): Port device team_slave_0 removed [ 1376.103666][T22079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13507'. [ 1376.104064][T22075] team0 (unregistering): Port device team_slave_1 removed [ 1376.140603][T21913] 8021q: adding VLAN 0 to HW filter on device team0 [ 1376.191319][T14999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1376.198500][T14999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1376.221972][T30241] bridge0: port 2(bridge_slave_1) entered blocking state [ 1376.229161][T30241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1376.291432][T21952] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1376.320037][T21952] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1376.334664][T21952] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1376.357689][T21952] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1376.381657][T22085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13512'. [ 1376.522290][T21952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1376.551258][T21952] 8021q: adding VLAN 0 to HW filter on device team0 [ 1376.569469][T14982] bridge0: port 1(bridge_slave_0) entered blocking state [ 1376.576602][T14982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1376.618826][T14989] bridge0: port 2(bridge_slave_1) entered blocking state [ 1376.626010][T14989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1376.668566][T21913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1376.778800][T22071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1376.884655][T27547] Bluetooth: hci7: command tx timeout [ 1377.109961][T21952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1377.161152][T21913] veth0_vlan: entered promiscuous mode [ 1377.211490][T21913] veth1_vlan: entered promiscuous mode [ 1377.227427][T22127] netlink: 64 bytes leftover after parsing attributes in process `syz.2.13519'. [ 1377.301145][T21913] veth0_macvtap: entered promiscuous mode [ 1377.323144][T21913] veth1_macvtap: entered promiscuous mode [ 1377.403041][T21913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1377.432372][T21913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1377.445637][T22134] netlink: 'syz.5.13520': attribute type 1 has an invalid length. [ 1377.478950][T30242] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.489761][T30242] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.518539][T30242] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.537761][T30242] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.775208][T21952] veth0_vlan: entered promiscuous mode [ 1377.794151][T30242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1377.802787][T30242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1377.884919][T21952] veth1_vlan: entered promiscuous mode [ 1377.927622][T27547] Bluetooth: hci6: command tx timeout [ 1377.973809][T14989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1377.984514][T14989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1378.025266][T22154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1378.043474][T22154] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1378.158343][T21952] veth0_macvtap: entered promiscuous mode [ 1378.249629][T21952] veth1_macvtap: entered promiscuous mode [ 1378.348246][T21952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1378.369165][T21952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1378.386782][T22161] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13527'. [ 1378.401719][T22169] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13529'. [ 1378.483391][T30242] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.524430][T30242] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.571479][T30242] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.602404][T30242] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.723444][T22161] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13527'. [ 1378.737970][T22186] netlink: 'syz.2.13532': attribute type 1 has an invalid length. [ 1378.778579][T22182] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1378.790777][T22182] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.910681][T22182] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1378.925409][T22182] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.964776][T27547] Bluetooth: hci7: command tx timeout [ 1378.973860][T22190] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 1379.014980][T30245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1379.040913][T30245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1379.081013][T22182] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1379.091920][T22182] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.157299][T14989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1379.171092][T14989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1379.217236][T22182] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1379.233243][T22182] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.473158][T22180] delete_channel: no stack [ 1379.557153][T14982] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1379.585079][T14982] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1379.655666][T22216] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.13541'. [ 1379.667850][T22220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13542'. [ 1379.675776][T30241] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1379.707121][T30241] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1379.843990][T30241] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1379.865942][T30241] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1379.922423][T30241] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1379.940763][T30241] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1379.965890][T22241] bond2: entered allmulticast mode [ 1379.971055][T22241] vcan1: entered allmulticast mode [ 1380.005823][T27547] Bluetooth: hci6: command tx timeout [ 1380.045272][T22241] pimreg: entered allmulticast mode [ 1380.072885][T22241] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1380.085063][T22240] bond2: left allmulticast mode [ 1380.090074][T22240] vcan1: left allmulticast mode [ 1380.387518][T22263] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1380.396266][T22265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1380.422040][T22267] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1380.445483][T22263] netlink: 'syz.6.13555': attribute type 11 has an invalid length. [ 1380.576809][T22278] netlink: 'syz.2.13560': attribute type 4 has an invalid length. [ 1380.844048][T22297] siw: device registration error -23 [ 1380.916100][T22298] erspan0: entered promiscuous mode [ 1380.938641][T22298] erspan0: entered allmulticast mode [ 1380.960301][T22294] syzkaller0: entered promiscuous mode [ 1380.985237][T22294] syzkaller0: entered allmulticast mode [ 1381.045338][T27547] Bluetooth: hci7: command tx timeout [ 1381.201059][T22303] syzkaller0: entered promiscuous mode [ 1381.209519][T22303] syzkaller0: entered allmulticast mode [ 1381.221283][T22310] tipc: Enabling of bearer rejected, already enabled [ 1381.514574][T22322] netlink: 'syz.6.13577': attribute type 10 has an invalid length. [ 1381.547672][T22322] team0 (unregistering): Port device team_slave_0 removed [ 1381.580665][T22326] netlink: 'syz.4.13579': attribute type 1 has an invalid length. [ 1381.583960][T22322] team0 (unregistering): Port device team_slave_1 removed [ 1381.619976][T22330] __nla_validate_parse: 7 callbacks suppressed [ 1381.619995][T22330] netlink: 512 bytes leftover after parsing attributes in process `syz.7.13580'. [ 1381.899834][T22343] netlink: 'syz.7.13585': attribute type 1 has an invalid length. [ 1381.919061][T22343] netlink: 'syz.7.13585': attribute type 2 has an invalid length. [ 1381.941135][T22343] netlink: 'syz.7.13585': attribute type 1 has an invalid length. [ 1381.958217][T22343] netlink: 16 bytes leftover after parsing attributes in process `syz.7.13585'. [ 1382.352171][T22370] syzkaller0: entered promiscuous mode [ 1382.358529][T22370] syzkaller0: entered allmulticast mode [ 1382.371892][T22372] syzkaller0: entered promiscuous mode [ 1382.377543][T22378] netlink: 'syz.4.13596': attribute type 1 has an invalid length. [ 1382.386910][T22372] syzkaller0: entered allmulticast mode [ 1382.395636][T22378] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1382.405944][T22370] tipc: Started in network mode [ 1382.422339][T22370] tipc: Node identity 5aec6e5806af, cluster identity 4711 [ 1382.430204][T22372] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input12 [ 1382.441923][T22370] tipc: Enabled bearer , priority 0 [ 1382.470781][T22369] tipc: Resetting bearer [ 1382.512192][T22369] tipc: Disabling bearer [ 1382.765490][T22399] netlink: 'syz.7.13600': attribute type 1 has an invalid length. [ 1382.773643][T22398] netlink: 'syz.7.13600': attribute type 1 has an invalid length. [ 1382.862055][T22403] vcan0: entered allmulticast mode [ 1382.907145][T22407] netlink: 16 bytes leftover after parsing attributes in process `syz.7.13603'. [ 1383.035022][T22411] erspan0: entered promiscuous mode [ 1383.047053][T22411] erspan0: entered allmulticast mode [ 1383.250837][T22417] bond1 (unregistering): Released all slaves [ 1383.258244][T22422] netlink: 348 bytes leftover after parsing attributes in process `syz.2.13610'. [ 1383.503425][T22436] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13614'. [ 1383.571488][T22443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13617'. [ 1383.822921][T22461] netlink: 165 bytes leftover after parsing attributes in process `syz.4.13622'. [ 1383.851523][T22460] netlink: 165 bytes leftover after parsing attributes in process `syz.4.13622'. [ 1383.901921][T22458] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.916359][T22458] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.955490][T22469] netlink: 'syz.7.13623': attribute type 16 has an invalid length. [ 1383.973794][T22469] netlink: 'syz.7.13623': attribute type 17 has an invalid length. [ 1384.070332][T22469] erspan0: left promiscuous mode [ 1384.076993][T22469] erspan0: left allmulticast mode [ 1384.149351][T22469] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1384.183293][T22477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13627'. [ 1384.209421][T22474] tap0: tun_chr_ioctl cmd 2148553947 [ 1384.214731][T22490] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13630'. [ 1384.224763][T22488] netlink: 'syz.2.13629': attribute type 1 has an invalid length. [ 1384.295956][T22488] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1384.404051][T22495] vlan1: entered allmulticast mode [ 1384.410864][T22495] bond3: entered allmulticast mode [ 1384.482398][T22502] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1384.505426][T22488] bond3: (slave gretap1): making interface the new active one [ 1384.523287][T22488] gretap1: entered allmulticast mode [ 1384.551546][T22488] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 1384.734856][T22512] xt_hashlimit: size too large, truncated to 1048576 [ 1384.754558][T22517] netlink: 'syz.6.13637': attribute type 9 has an invalid length. [ 1384.791661][T22523] netlink: 'syz.2.13640': attribute type 1 has an invalid length. [ 1385.192705][T22531] delete_channel: no stack [ 1385.748893][T22563] netlink: 'syz.4.13650': attribute type 13 has an invalid length. [ 1385.757154][T22563] netlink: 'syz.4.13650': attribute type 58 has an invalid length. [ 1386.044120][T22554] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1386.458791][T22591] netlink: 'syz.6.13659': attribute type 1 has an invalid length. [ 1386.559755][T22591] bond1: entered promiscuous mode [ 1386.569733][T22591] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1386.629627][T22598] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1386.748544][T22604] __nla_validate_parse: 2 callbacks suppressed [ 1386.748563][T22604] netlink: 220 bytes leftover after parsing attributes in process `syz.7.13661'. [ 1386.880256][T22619] netlink: 164 bytes leftover after parsing attributes in process `syz.5.13667'. [ 1386.890808][T22619] netlink: 164 bytes leftover after parsing attributes in process `syz.5.13667'. [ 1386.915282][T22619] netlink: 60 bytes leftover after parsing attributes in process `syz.5.13667'. [ 1386.937880][T22619] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.13667'. [ 1387.002492][T22623] syzkaller0: entered promiscuous mode [ 1387.010400][T22623] syzkaller0: entered allmulticast mode [ 1387.272713][T22634] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13673'. [ 1389.025741][T22651] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13676'. [ 1389.055790][T22651] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13676'. [ 1389.161799][T22652] lo speed is unknown, defaulting to 1000 [ 1389.211743][T22662] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13679'. [ 1389.253764][T22662] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13679'. [ 1389.287379][ T5145] Bluetooth: hci1: command 0x0406 tx timeout [ 1389.353713][T22674] validate_nla: 2 callbacks suppressed [ 1389.353732][T22674] netlink: 'syz.4.13682': attribute type 7 has an invalid length. [ 1389.387740][T22674] netlink: 'syz.4.13682': attribute type 8 has an invalid length. [ 1389.695469][T22686] netlink: 'syz.2.13686': attribute type 12 has an invalid length. [ 1389.725396][T22689] wg1 speed is unknown, defaulting to 1000 [ 1389.731429][T22689] wg1 speed is unknown, defaulting to 1000 [ 1389.738454][T22689] wg1 speed is unknown, defaulting to 1000 [ 1389.848439][T22689] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1389.986286][T22689] wg1 speed is unknown, defaulting to 1000 [ 1389.997024][T22689] wg1 speed is unknown, defaulting to 1000 [ 1390.007370][T22689] wg1 speed is unknown, defaulting to 1000 [ 1390.015609][T22689] wg1 speed is unknown, defaulting to 1000 [ 1390.029875][T22689] wg1 speed is unknown, defaulting to 1000 [ 1390.066250][T22689] wg1 speed is unknown, defaulting to 1000 [ 1390.089711][T22689] wg1 speed is unknown, defaulting to 1000 [ 1390.120881][T22689] wg1 speed is unknown, defaulting to 1000 [ 1390.128618][T22689] wg1 speed is unknown, defaulting to 1000 [ 1390.135715][T22689] wg1 speed is unknown, defaulting to 1000 [ 1390.142633][T22689] wg1 speed is unknown, defaulting to 1000 [ 1390.150133][T22689] wg1 speed is unknown, defaulting to 1000 [ 1390.157315][T22689] wg1 speed is unknown, defaulting to 1000 [ 1390.164125][T22689] wg1 speed is unknown, defaulting to 1000 [ 1390.253392][T22717] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1390.598878][T22737] netlink: 'syz.7.13697': attribute type 1 has an invalid length. [ 1390.721005][T22745] bridge5: entered promiscuous mode [ 1390.736135][T22745] bridge5: entered allmulticast mode [ 1390.749552][T22737] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1390.840442][T22751] netlink: 'syz.6.13701': attribute type 10 has an invalid length. [ 1390.866219][T22751] bridge0: port 2(bridge_slave_1) entered disabled state [ 1390.878702][T22751] bridge_slave_1: left allmulticast mode [ 1390.901454][T22751] bridge_slave_1: left promiscuous mode [ 1390.912310][T22751] bridge0: port 2(bridge_slave_1) entered disabled state [ 1390.960012][T22751] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1390.971933][T22761] xt_socket: unknown flags 0x50 [ 1390.991363][T22761] xt_socket: unknown flags 0x50 [ 1391.202203][T22773] tipc: Invalid UDP bearer configuration [ 1391.202254][T22773] tipc: Enabling of bearer rejected, failed to enable media [ 1391.536408][T22794] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 1391.901483][T22827] syzkaller0: entered promiscuous mode [ 1391.908172][T22827] syzkaller0: entered allmulticast mode [ 1391.974683][T22832] netlink: 'syz.7.13721': attribute type 10 has an invalid length. [ 1391.982914][T22832] __nla_validate_parse: 14 callbacks suppressed [ 1391.982931][T22832] netlink: 224 bytes leftover after parsing attributes in process `syz.7.13721'. [ 1392.365148][T22857] syzkaller0: entered promiscuous mode [ 1392.378616][T22857] syzkaller0: entered allmulticast mode [ 1392.401705][T22857] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13725'. [ 1392.424821][T22857] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13725'. [ 1392.459941][T22857] tc action pedit offset must be on 32 bit boundaries [ 1392.577141][T22870] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13728'. [ 1392.795150][T22882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13732'. [ 1392.822640][T22882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13732'. [ 1392.947107][T22896] netlink: 'syz.6.13735': attribute type 3 has an invalid length. [ 1393.100699][T22905] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13738'. [ 1393.158800][T22905] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13738'. [ 1393.253206][T22917] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13741'. [ 1393.262693][T22918] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13741'. [ 1393.686865][T22942] nbd: must specify at least one socket [ 1393.787422][T22952] vlan2: entered promiscuous mode [ 1393.799403][T22952] geneve1: entered promiscuous mode [ 1393.810390][T22952] vlan2: entered allmulticast mode [ 1393.823614][T22952] geneve1: entered allmulticast mode [ 1394.404333][ T5145] Bluetooth: hci4: command 0x0406 tx timeout [ 1394.423890][T23002] macvlan0: entered promiscuous mode [ 1394.655455][T23012] syzkaller0: entered promiscuous mode [ 1394.663452][T23012] syzkaller0: entered allmulticast mode [ 1394.694519][T11291] lec:lec_start_xmit: lec0:No lecd attached [ 1394.852554][T23022] veth5: entered allmulticast mode [ 1394.856211][T23033] netlink: 'syz.6.13774': attribute type 3 has an invalid length. [ 1395.149955][T23049] nftables ruleset with unbound chain [ 1395.166240][T23053] netlink: 'syz.5.13780': attribute type 4 has an invalid length. [ 1395.174075][T23053] netlink: 'syz.5.13780': attribute type 3 has an invalid length. [ 1395.223453][T23054] netlink: 'syz.5.13780': attribute type 4 has an invalid length. [ 1395.235204][T23054] netlink: 'syz.5.13780': attribute type 3 has an invalid length. [ 1395.281296][T23056] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1395.387457][T23056] bond5: (slave lo): Enslaving as an active interface with an up link [ 1395.461051][T23056] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1395.876315][T23080] netlink: 'syz.4.13785': attribute type 1 has an invalid length. [ 1395.934645][T23081] syzkaller0: entered promiscuous mode [ 1395.940151][T23081] syzkaller0: entered allmulticast mode [ 1396.010812][T23087] IPVS: set_ctl: invalid protocol: 33 224.0.0.1:20000 [ 1396.115268][T23092] delete_channel: no stack [ 1396.572216][T23093] syzkaller0: entered promiscuous mode [ 1396.581202][T23093] syzkaller0: entered allmulticast mode [ 1396.604300][T23104] x_tables: duplicate underflow at hook 3 [ 1397.036973][T23124] netlink: 'syz.7.13798': attribute type 23 has an invalid length. [ 1398.707051][T23123] vlan4: entered promiscuous mode [ 1398.712481][T23123] bridge0: entered promiscuous mode [ 1398.748886][T23135] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1399.741728][T23180] bridge0: port 2(bridge_slave_1) entered disabled state [ 1399.844502][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5150 ms [ 1399.852583][ C0] lec:lec_tx_timeout: lec0 [ 1399.876613][T23196] netlink: 'syz.2.13813': attribute type 1 has an invalid length. [ 1400.193685][T23210] __nla_validate_parse: 16 callbacks suppressed [ 1400.193704][T23210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13817'. [ 1400.250845][T23210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13817'. [ 1400.278987][T23215] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13818'. [ 1400.390708][T23215] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1400.433347][T23221] bond3: entered promiscuous mode [ 1400.454545][T23221] bond3: entered allmulticast mode [ 1400.484049][T23222] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1400.545697][T23215] vxcan3: entered promiscuous mode [ 1400.551809][T23215] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1400.565742][T23215] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1400.609995][T23223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13820'. [ 1400.626704][T23223] syzkaller0: entered allmulticast mode [ 1400.926731][T23249] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1401.439969][T23282] bridge0: entered allmulticast mode [ 1401.679557][T23300] netlink: 64 bytes leftover after parsing attributes in process `syz.2.13840'. [ 1401.918354][T23309] lo speed is unknown, defaulting to 1000 [ 1401.936583][T23309] wg1 speed is unknown, defaulting to 1000 [ 1402.238883][T23327] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.13849'. [ 1402.290860][T23334] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13852'. [ 1402.305149][T23333] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13852'. [ 1402.336207][T23334] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13852'. [ 1402.346854][T23338] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13849'. [ 1402.748800][T23365] netlink: 'syz.5.13859': attribute type 1 has an invalid length. [ 1402.768880][T23364] lo speed is unknown, defaulting to 1000 [ 1402.780837][T23364] wg1 speed is unknown, defaulting to 1000 [ 1402.792409][T23358] xt_hashlimit: size too large, truncated to 1048576 [ 1403.081314][ T2585] IPVS: starting estimator thread 0... [ 1403.159352][T23372] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1403.214549][T23375] IPVS: using max 27 ests per chain, 64800 per kthread [ 1403.301045][ T2597] hid (null): unknown global tag 0xe [ 1403.323510][ T2597] hid-generic 0005:9C3F:0006.0002: unknown main item tag 0x1 [ 1403.347667][ T2597] hid-generic 0005:9C3F:0006.0002: unknown global tag 0xe [ 1403.356280][ T2597] hid-generic 0005:9C3F:0006.0002: item 0 4 1 14 parsing failed [ 1403.391238][ T2597] hid-generic 0005:9C3F:0006.0002: probe with driver hid-generic failed with error -22 [ 1403.499085][T30246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1403.539322][T30246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1403.706700][T23401] tipc: Enabling of bearer rejected, failed to enable media [ 1403.708429][T23402] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 1404.047356][T23417] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1404.204856][T23419] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1404.212875][T23419] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1404.220858][T23419] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1404.228793][T23419] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1404.236726][T23419] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1404.244668][T23419] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1404.252551][T23419] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1404.260490][T23419] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1404.268398][T23419] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1404.276310][T23419] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1404.390073][T23432] syzkaller0: entered promiscuous mode [ 1404.408316][T23432] syzkaller0: entered allmulticast mode [ 1405.362094][T23491] __nla_validate_parse: 8 callbacks suppressed [ 1405.362114][T23491] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13904'. [ 1405.371439][T23487] netlink: 60 bytes leftover after parsing attributes in process `syz.5.13902'. [ 1405.379700][T23491] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13904'. [ 1405.391407][T23487] netlink: 60 bytes leftover after parsing attributes in process `syz.5.13902'. [ 1406.331827][T27547] Bluetooth: hci7: command 0x0405 tx timeout [ 1408.281120][T23506] vlan2: entered allmulticast mode [ 1408.294583][T23506] hsr0: entered allmulticast mode [ 1408.311059][T23506] hsr_slave_0: entered allmulticast mode [ 1408.324385][T23506] hsr_slave_1: entered allmulticast mode [ 1408.393008][T23521] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13911'. [ 1408.508451][T23540] netlink: 48 bytes leftover after parsing attributes in process `syz.5.13913'. [ 1408.550684][T23519] syzkaller0: entered promiscuous mode [ 1409.772763][ T5145] Bluetooth: hci5: command 0x0406 tx timeout [ 1411.325152][T23571] netlink: 'syz.2.13920': attribute type 1 has an invalid length. [ 1411.372571][T23571] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1411.400573][T23571] bond4: (slave bridge6): making interface the new active one [ 1411.409610][T23571] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 1411.487035][T29499] hid (null): unknown global tag 0xe [ 1411.513693][T29499] hid-generic 0005:9C3F:0006.0003: unknown main item tag 0x1 [ 1411.554437][T29499] hid-generic 0005:9C3F:0006.0003: unknown global tag 0xe [ 1411.574579][T29499] hid-generic 0005:9C3F:0006.0003: item 0 4 1 14 parsing failed [ 1411.588594][T23586] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13923'. [ 1411.593914][T29499] hid-generic 0005:9C3F:0006.0003: probe with driver hid-generic failed with error -22 [ 1411.632792][T23588] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13926'. [ 1411.809163][T23602] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13929'. [ 1411.996453][T23615] syz_tun: entered allmulticast mode [ 1412.021057][T23615] pimreg: entered allmulticast mode [ 1412.049584][T23620] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.13934'. [ 1412.074894][T23622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13932'. [ 1412.098811][T23614] syz_tun: left allmulticast mode [ 1412.156631][T23626] netlink: 'syz.2.13936': attribute type 11 has an invalid length. [ 1412.258908][T23631] netlink: 40 bytes leftover after parsing attributes in process `syz.7.13937'. [ 1412.324402][T23631] netlink: 'syz.7.13937': attribute type 1 has an invalid length. [ 1412.325161][T23632] netlink: 40 bytes leftover after parsing attributes in process `syz.7.13937'. [ 1412.338638][T23631] netlink: 224 bytes leftover after parsing attributes in process `syz.7.13937'. [ 1413.326699][ T2585] hid (null): unknown global tag 0xe [ 1413.342882][ T2585] hid-generic 0005:9C3F:0006.0004: unknown main item tag 0x1 [ 1413.381856][ T2585] hid-generic 0005:9C3F:0006.0004: unknown global tag 0xe [ 1413.397702][ T2585] hid-generic 0005:9C3F:0006.0004: item 0 4 1 14 parsing failed [ 1413.417118][ T2585] hid-generic 0005:9C3F:0006.0004: probe with driver hid-generic failed with error -22 [ 1413.589690][T23710] netlink: 72 bytes leftover after parsing attributes in process `syz.7.13959'. [ 1413.711574][T23715] lo speed is unknown, defaulting to 1000 [ 1413.738324][T23715] wg1 speed is unknown, defaulting to 1000 [ 1414.070121][T23729] netlink: 52 bytes leftover after parsing attributes in process `syz.7.13966'. [ 1414.191504][T23733] netlink: 'syz.4.13968': attribute type 29 has an invalid length. [ 1414.207192][T23733] netlink: 'syz.4.13968': attribute type 29 has an invalid length. [ 1414.217239][T23733] netlink: 'syz.4.13968': attribute type 29 has an invalid length. [ 1414.226929][T23733] netlink: 'syz.4.13968': attribute type 29 has an invalid length. [ 1414.242414][T23733] netlink: 'syz.4.13968': attribute type 29 has an invalid length. [ 1414.253996][T23733] netlink: 'syz.4.13968': attribute type 29 has an invalid length. [ 1414.263418][T23733] netlink: 'syz.4.13968': attribute type 29 has an invalid length. [ 1414.499817][T23747] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 1414.523516][T23748] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 1414.847589][T23763] gretap0: entered promiscuous mode [ 1414.904723][T23763] vlan5: entered promiscuous mode [ 1414.925196][T18178] hid (null): unknown global tag 0xe [ 1414.933587][T18178] hid-generic 0005:9C3F:0006.0005: unknown main item tag 0x1 [ 1414.943650][T18178] hid-generic 0005:9C3F:0006.0005: unknown global tag 0xe [ 1414.968531][T18178] hid-generic 0005:9C3F:0006.0005: item 0 4 1 14 parsing failed [ 1414.980419][T18178] hid-generic 0005:9C3F:0006.0005: probe with driver hid-generic failed with error -22 [ 1415.153607][T23782] mac80211_hwsim hwsim156 wlan0: entered promiscuous mode [ 1415.263581][T23787] bond6: entered promiscuous mode [ 1415.457114][T23796] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1416.152179][T23847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1416.285923][T23847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1416.476026][T23864] erspan0: entered promiscuous mode [ 1416.519529][T23866] netlink: 'syz.6.14012': attribute type 4 has an invalid length. [ 1416.666004][T23877] netlink: 'syz.2.14015': attribute type 10 has an invalid length. [ 1416.676430][T23877] __nla_validate_parse: 8 callbacks suppressed [ 1416.676443][T23877] netlink: 396 bytes leftover after parsing attributes in process `syz.2.14015'. [ 1417.160515][T23919] netlink: 20 bytes leftover after parsing attributes in process `syz.7.14029'. [ 1417.188597][T23921] netlink: 'syz.5.14031': attribute type 29 has an invalid length. [ 1417.206277][T23921] netlink: 'syz.5.14031': attribute type 29 has an invalid length. [ 1417.232246][T23921] netlink: 500 bytes leftover after parsing attributes in process `syz.5.14031'. [ 1417.238883][T23925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14033'. [ 1417.282859][T23925] netlink: 'syz.2.14033': attribute type 2 has an invalid length. [ 1417.307173][T23925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14033'. [ 1417.329864][T23932] netlink: 'syz.2.14033': attribute type 2 has an invalid length. [ 1417.488897][T23923] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.496583][T23923] bridge0: port 1(0x9) entered disabled state [ 1417.527520][T23944] net_ratelimit: 45 callbacks suppressed [ 1417.527543][T23944] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 1417.762071][T23950] netlink: 20 bytes leftover after parsing attributes in process `syz.7.14038'. [ 1417.877992][T23923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1417.916215][T23923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1418.344324][T14999] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1418.363789][T14999] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.385177][T14999] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1418.404936][T14999] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.417141][T14982] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1418.433383][T14982] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.448397][T14982] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1418.457696][T14982] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.469020][T23957] netlink: 'syz.2.14040': attribute type 39 has an invalid length. [ 1418.737800][T23972] netlink: 'syz.2.14044': attribute type 3 has an invalid length. [ 1419.139443][T23999] bond5: (slave lo): Releasing backup interface [ 1419.153681][T23999] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1419.166774][T23999] x9: left allmulticast mode [ 1419.171642][T23999] x9: left promiscuous mode [ 1419.178078][T23999] bridge0: port 1(0x9) entered disabled state [ 1419.206802][T23999] bridge_slave_1: left allmulticast mode [ 1419.213084][T23999] bridge_slave_1: left promiscuous mode [ 1419.221727][T23999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.241155][T23999] bond0: (slave bond_slave_0): Releasing backup interface [ 1419.251272][T23999] bond0: (slave bond_slave_1): Releasing backup interface [ 1419.264884][T23999] team0: Port device team_slave_0 removed [ 1419.273164][T23999] team0: Port device team_slave_1 removed [ 1419.280196][T23999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1419.290684][T23999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1419.299736][T23999] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1419.329155][T24003] team0: Mode changed to "random" [ 1419.390520][T24015] netlink: 16215 bytes leftover after parsing attributes in process `syz.5.14053'. [ 1419.429843][T24017] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14054'. [ 1419.450021][T24017] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14054'. [ 1419.472891][T24017] openvswitch: netlink: IPv4 tun info is not correct [ 1419.562748][T24023] xt_hashlimit: overflow, rate too high: 0 [ 1419.576237][T24025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14058'. [ 1419.702287][T24034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1419.887042][T24059] =a: renamed from lo [ 1420.109020][T24072] syzkaller0: entered promiscuous mode [ 1420.117220][T24072] syzkaller0: entered allmulticast mode [ 1420.739504][T24088] geneve2: entered promiscuous mode [ 1420.750720][T14994] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 59657 - 0 [ 1420.761250][T14994] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 59657 - 0 [ 1420.771027][T14994] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 59657 - 0 [ 1420.780277][T14994] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 59657 - 0 [ 1422.680295][T24032] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1423.051983][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 1423.098694][T24106] __nla_validate_parse: 8 callbacks suppressed [ 1423.098713][T24106] netlink: 52 bytes leftover after parsing attributes in process `syz.2.14081'. [ 1423.182393][T24119] netlink: 'syz.6.14087': attribute type 2 has an invalid length. [ 1423.238276][T24119] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14087'. [ 1423.296752][T24122] Bluetooth: MGMT ver 1.23 [ 1423.470340][T24136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14092'. [ 1423.504524][T24136] block nbd0: reconnected socket [ 1423.504543][T27547] block nbd0: Receive control failed (result -107) [ 1423.622291][T14994] batadv1: left allmulticast mode [ 1423.646540][T14994] batadv1: left promiscuous mode [ 1423.651721][T14994] bridge0: port 1(batadv1) entered disabled state [ 1423.763078][T24154] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14096'. [ 1423.841586][T14994] bond25 (unregistering): (slave ip6gre1): Releasing backup interface [ 1423.856281][T14994] ip6gre1 (unregistering): left promiscuous mode [ 1423.899278][T24159] netlink: 'syz.4.14099': attribute type 1 has an invalid length. [ 1423.907753][T24161] xt_bpf: check failed: parse error [ 1423.908647][T24159] netlink: 224 bytes leftover after parsing attributes in process `syz.4.14099'. [ 1423.914592][T24161] x_tables: duplicate underflow at hook 2 [ 1424.108120][T14994] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1424.285859][T14994] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 1424.390072][T14994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1424.400992][T14994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1424.411530][T14994] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1424.421678][T14994] bond0 (unregistering): Released all slaves [ 1424.435419][T14994] bond1 (unregistering): Released all slaves [ 1424.452593][T14994] bond2 (unregistering): Released all slaves [ 1424.472005][T14994] bond3 (unregistering): Released all slaves [ 1424.492113][T14994] bond4 (unregistering): Released all slaves [ 1424.506180][T14994] bond5 (unregistering): Released all slaves [ 1424.519386][T14994] bond6 (unregistering): Released all slaves [ 1424.532169][T14994] bond7 (unregistering): Released all slaves [ 1424.547389][T14994] bond8 (unregistering): Released all slaves [ 1424.563224][T14994] bond9 (unregistering): Released all slaves [ 1424.582847][T14994] bond10 (unregistering): Released all slaves [ 1424.602910][T14994] bond11 (unregistering): Released all slaves [ 1424.618594][T14994] bond12 (unregistering): Released all slaves [ 1424.632042][T14994] bond13 (unregistering): Released all slaves [ 1424.647730][T14994] bond14 (unregistering): Released all slaves [ 1424.668515][T14994] bond15 (unregistering): Released all slaves [ 1424.682104][T14994] bond16 (unregistering): Released all slaves [ 1424.698269][T14994] bond17 (unregistering): Released all slaves [ 1424.713782][T14994] bond18 (unregistering): Released all slaves [ 1424.730334][T14994] bond19 (unregistering): Released all slaves [ 1424.743162][T14994] bond20 (unregistering): Released all slaves [ 1424.760193][T14994] bond21 (unregistering): Released all slaves [ 1424.781655][T14994] bond22 (unregistering): Released all slaves [ 1424.798600][T14994] bond23 (unregistering): Released all slaves [ 1424.816024][T14994] bond24 (unregistering): Released all slaves [ 1424.830649][T14994] bond25 (unregistering): Released all slaves [ 1424.853509][T24147] syzkaller0: entered promiscuous mode [ 1424.859994][T24147] syzkaller0: entered allmulticast mode [ 1425.089552][T14994] tipc: Left network mode [ 1425.226779][T24196] tipc: Started in network mode [ 1425.231677][T24196] tipc: Node identity 4, cluster identity 4711 [ 1425.275341][T24196] tipc: Node number set to 4 [ 1425.286352][T24202] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14110'. [ 1425.347362][T24202] netlink: 'syz.5.14110': attribute type 1 has an invalid length. [ 1425.439102][T24208] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14114'. [ 1425.567309][T24215] netlink: 164 bytes leftover after parsing attributes in process `syz.4.14116'. [ 1425.670083][T24222] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20000 [ 1425.677892][T24221] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20000 [ 1425.813613][T24227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14121'. [ 1426.200942][T24236] lo: entered allmulticast mode [ 1426.391511][T14994] hsr_slave_0: left promiscuous mode [ 1426.428501][T14994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1426.803329][T14994] team0 (unregistering): Port device team_slave_1 removed [ 1426.828797][T14994] team0 (unregistering): Port device team_slave_0 removed [ 1426.956418][T24234] lo: left allmulticast mode [ 1426.993909][T24266] team0: Mode changed to "activebackup" [ 1427.061311][T24261] lo speed is unknown, defaulting to 1000 [ 1427.068701][T24278] syzkaller0: entered promiscuous mode [ 1427.098923][T24278] syzkaller0: entered allmulticast mode [ 1427.110789][T24278] netlink: 40 bytes leftover after parsing attributes in process `syz.5.14135'. [ 1427.129248][T24261] wg1 speed is unknown, defaulting to 1000 [ 1427.235402][T24284] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1427.335336][T24284] macvlan2: entered promiscuous mode [ 1427.341668][T24284] macvlan2: entered allmulticast mode [ 1427.348139][T24284] bond7: entered allmulticast mode [ 1427.358683][T24284] bond7: entered promiscuous mode [ 1427.368414][T24284] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1427.377563][T24284] team0: Port device macvlan2 added [ 1427.399015][T24290] syzkaller0: entered promiscuous mode [ 1427.429734][T24290] syzkaller0: entered allmulticast mode [ 1427.492879][T24294] hsr_slave_0: left promiscuous mode [ 1427.508686][T24294] hsr_slave_1: left promiscuous mode [ 1428.173398][T24339] __nla_validate_parse: 10 callbacks suppressed [ 1428.173419][T24339] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14153'. [ 1428.353270][T24350] netlink: 32 bytes leftover after parsing attributes in process `syz.5.14154'. [ 1428.561284][T24358] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1428.608752][T24360] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14158'. [ 1428.622620][T24358] xt_nat: multiple ranges no longer supported [ 1428.628923][T24362] xt_nat: multiple ranges no longer supported [ 1428.642930][T24362] syzkaller1: entered promiscuous mode [ 1428.649537][T24362] syzkaller1: entered allmulticast mode [ 1428.884236][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 1428.892381][ C0] lec:lec_tx_timeout: lec0 [ 1429.051380][T24379] netlink: 'syz.2.14162': attribute type 10 has an invalid length. [ 1429.125994][T24383] netlink: 92 bytes leftover after parsing attributes in process `syz.6.14165'. [ 1429.196576][T24386] netlink: 'syz.2.14166': attribute type 1 has an invalid length. [ 1429.228920][T24386] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1429.276409][T24386] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1429.283626][T24386] bond5: (slave vcan2): The slave device specified does not support setting the MAC address [ 1429.299712][T24386] bond5: (slave vcan2): Error -95 calling set_mac_address [ 1429.345081][T24394] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14168'. [ 1429.416287][T24401] netlink: 'syz.6.14170': attribute type 1 has an invalid length. [ 1429.487580][T24401] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1429.498555][T24401] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14170'. [ 1429.520628][T24401] bond4: (slave geneve2): making interface the new active one [ 1429.530266][T24401] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 1429.569022][T24403] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14173'. [ 1429.900912][T24422] macvtap1: entered promiscuous mode [ 1429.912009][T24422] macvtap1: entered allmulticast mode [ 1429.918545][T24422] veth1_vlan: entered allmulticast mode [ 1429.947368][T24428] vlan5: entered allmulticast mode [ 1429.961944][T24422] macvtap2: entered promiscuous mode [ 1429.968608][T24422] macvtap2: entered allmulticast mode [ 1429.989644][T24426] netlink: 84 bytes leftover after parsing attributes in process `syz.6.14180'. [ 1430.154076][T24439] netlink: 'syz.2.14184': attribute type 3 has an invalid length. [ 1430.181218][T24439] netlink: 'syz.2.14184': attribute type 1 has an invalid length. [ 1430.201441][T24439] netlink: 204 bytes leftover after parsing attributes in process `syz.2.14184'. [ 1430.221799][T24447] netlink: 'syz.5.14187': attribute type 8 has an invalid length. [ 1430.452577][T24464] tipc: Enabling of bearer rejected, media not registered [ 1430.515932][T24467] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14194'. [ 1430.563320][T24469] xt_HMARK: proto mask must be zero with L3 mode [ 1430.575922][T24467] netlink: 'syz.5.14194': attribute type 12 has an invalid length. [ 1430.596225][T24471] netlink: 'syz.2.14196': attribute type 1 has an invalid length. [ 1430.759426][T24482] openvswitch: netlink: EtherType 50a is less than min 600 [ 1430.847781][T24471] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1430.921971][T24490] netem: invalid attributes len -24 [ 1430.994238][T24490] netem: change failed [ 1431.437164][T24496] netem: invalid attributes len -24 [ 1431.442397][T24496] netem: change failed [ 1431.457878][T24501] bond0: entered promiscuous mode [ 1431.463154][T24501] bond_slave_0: entered promiscuous mode [ 1431.469193][T24501] bond_slave_1: entered promiscuous mode [ 1431.490175][T24501] bridge0: entered promiscuous mode [ 1431.499049][T24501] debugfs: 'hsr0' already exists in 'hsr' [ 1431.506452][T24501] Cannot create hsr debugfs directory [ 1431.513848][T24501] hsr0: Slave B (bridge0) is not up; please bring it up to get a fully working HSR network [ 1431.878800][T24536] syzkaller0: entered promiscuous mode [ 1431.904276][T24536] syzkaller0: entered allmulticast mode [ 1434.556940][T24576] netlink: 'syz.5.14219': attribute type 24 has an invalid length. [ 1434.711816][T24589] netlink: 'syz.7.14225': attribute type 1 has an invalid length. [ 1434.715829][T24581] netlink: 'syz.4.14224': attribute type 29 has an invalid length. [ 1434.746896][T24587] __nla_validate_parse: 14 callbacks suppressed [ 1434.746915][T24587] netlink: 596 bytes leftover after parsing attributes in process `syz.4.14224'. [ 1434.828374][T24595] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input13 [ 1434.959592][T24606] siw: device registration error -23 [ 1434.968477][T24606] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1434.975301][T24612] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14231'. [ 1434.985955][T24606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1435.058928][T24610] geneve2: entered promiscuous mode [ 1435.067059][T30246] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 47519 - 0 [ 1435.079824][T30246] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 47519 - 0 [ 1435.090796][T24614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14232'. [ 1435.110841][T24614] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14232'. [ 1435.124631][T30246] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 47519 - 0 [ 1435.144354][T30246] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 47519 - 0 [ 1435.210774][T24626] Cannot find add_set index 2 as target [ 1435.211026][T24614] geneve3: entered promiscuous mode [ 1435.237659][T24614] geneve3: entered allmulticast mode [ 1435.266602][T14982] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.293833][T14982] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.336056][T24630] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14237'. [ 1435.343568][T24629] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14238'. [ 1435.347789][T14982] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.364874][T27547] Bluetooth: hci3: command 0x0406 tx timeout [ 1435.386525][T14982] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.420539][T24637] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input14 [ 1435.466829][T24629] team0: Port device team_slave_0 removed [ 1435.547911][T24630] bridge0: entered promiscuous mode [ 1435.566444][T24630] macsec2: entered promiscuous mode [ 1435.573737][T24630] macsec2: entered allmulticast mode [ 1435.595024][T24630] bridge0: entered allmulticast mode [ 1435.608143][T24630] bridge0: port 3(macsec2) entered blocking state [ 1435.620596][T24630] bridge0: port 3(macsec2) entered disabled state [ 1435.637030][T24630] bridge0: left allmulticast mode [ 1435.642353][T24630] bridge0: left promiscuous mode [ 1435.770688][T24653] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14246'. [ 1435.804912][T24655] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14247'. [ 1435.858391][T24657] netlink: 48 bytes leftover after parsing attributes in process `syz.5.14248'. [ 1435.880862][T24657] netlink: 48 bytes leftover after parsing attributes in process `syz.5.14248'. [ 1436.547857][T24708] netlink: 'syz.7.14263': attribute type 1 has an invalid length. [ 1436.741911][T24712] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1436.751364][T24712] bond1: (slave bond2): making interface the new active one [ 1436.776245][T24712] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1436.827937][T24708] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 1436.908582][T24716] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1437.005758][T24714] lo speed is unknown, defaulting to 1000 [ 1437.013624][T24714] wg1 speed is unknown, defaulting to 1000 [ 1437.387855][T24746] ksmbd: Unknown IPC event: 3, ignore. [ 1437.552732][T24748] bond7: entered promiscuous mode [ 1437.558561][T24748] bond7: entered allmulticast mode [ 1437.564355][T24748] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1437.802271][T24766] sctp: [Deprecated]: syz.2.14278 (pid 24766) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1437.802271][T24766] Use struct sctp_sack_info instead [ 1438.176117][T24790] bridge0: port 1(bridge_slave_0) entered disabled state [ 1438.289636][ T30] audit: type=1107 audit(1774916718.563:11): pid=24795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Lڢ_kfAH)nu.DsXd{u)aKCR ,uk71|&T昁ٝeV[53kcْz Cp LKq2B4'[:0o'$F(K[#*PyU9mrhzFLSVr>^:u@;v"dddɻ$J $^W  0_;$IΜ!#NjXIXqd6W!_+`Qj67{z<ܛ1Ts[`#F|>Ɓ<&O`VZ.FVO~iEMYr;bAdg, ^1FVp٪) x7B1("XcN|QU]fjb `ӃŤ_^n`XRi&8f+'yGH. -]c, {zܧIFFA4x }v6c$l[$H<"~ԕnmty*nPE>\\\b.js'{O~٨*eS@]o1cdaě#m0odkimo /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1500.575908][ T31] task:syz.0.13299 state:D stack:23768 pid:21371 tgid:21367 ppid:16527 task_flags:0x400140 flags:0x00080002 [ 1500.608800][ T31] Call Trace: [ 1500.621016][ T31] [ 1500.631815][ T31] __schedule+0x15dd/0x52d0 [ 1500.650284][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 1500.666955][ T31] ? irqentry_exit+0x59e/0x620 [ 1500.678461][ T31] ? __pfx___schedule+0x10/0x10 [ 1500.688943][ T31] ? schedule+0x90/0x360 [ 1500.699243][ T31] schedule+0x164/0x360 [ 1500.709886][ T31] schedule_preempt_disabled+0x13/0x30 [ 1500.725894][ T31] __mutex_lock+0x7fe/0x1300 [ 1500.737822][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1500.753821][ T31] ? nfsd_nl_version_get_doit+0x17c/0xc40 [ 1500.769583][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1500.778145][ T31] ? __nlmsg_put+0xef/0x1b0 [ 1500.782854][ T31] ? genlmsg_put+0x137/0x2e0 [ 1500.796464][ T31] nfsd_nl_version_get_doit+0x17c/0xc40 [ 1500.802151][ T31] ? kmem_cache_free+0x187/0x630 [ 1500.817322][ T31] ? nlmon_xmit+0xb0/0x100 [ 1500.824781][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1500.830944][ T31] ? dev_hard_start_xmit+0x802/0x870 [ 1500.837065][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 1500.842695][ T31] ? __asan_memcpy+0x40/0x70 [ 1500.848697][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1500.855303][ T31] genl_rcv_msg+0x61c/0x7a0 [ 1500.860011][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1500.865520][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1500.871788][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1500.880081][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1500.888984][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1500.894580][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1500.900085][ T31] ? down_read+0x272/0x2e0 [ 1500.907394][ T31] ? genl_rcv+0xd/0x40 [ 1500.911653][ T31] genl_rcv+0x28/0x40 [ 1500.916948][ T31] netlink_unicast+0x80f/0x9b0 [ 1500.921916][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1500.928919][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1500.934032][ T31] ? skb_put+0x11b/0x210 [ 1500.939440][ T31] netlink_sendmsg+0x813/0xb40 [ 1500.944980][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1500.950374][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1500.956066][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1500.961473][ T31] ____sys_sendmsg+0x972/0x9f0 [ 1500.985676][ T31] ? futex_unqueue+0x211/0x240 [ 1500.990616][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1500.997118][ T31] ? import_iovec+0x73/0xa0 [ 1501.001791][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1501.007059][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1501.012510][ T31] ? futex_wait+0x29a/0x380 [ 1501.017995][ T31] ? __fget_files+0x2a/0x420 [ 1501.022759][ T31] ? __fget_files+0x3a0/0x420 [ 1501.028518][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1501.033603][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1501.039906][ T31] ? rcu_is_watching+0x15/0xb0 [ 1501.045681][ T31] do_syscall_64+0x14d/0xf80 [ 1501.050430][ T31] ? trace_irq_disable+0x3b/0x150 [ 1501.056667][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1501.062890][ T31] ? clear_bhb_loop+0x40/0x90 [ 1501.068239][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1501.074621][ T31] RIP: 0033:0x7f9e3759c819 [ 1501.080509][ T31] RSP: 002b:00007f9e384b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1501.090058][ T31] RAX: ffffffffffffffda RBX: 00007f9e37815fa0 RCX: 00007f9e3759c819 [ 1501.100597][ T31] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 1501.110410][ T31] RBP: 00007f9e37632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1501.119749][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1501.128636][ T31] R13: 00007f9e37816038 R14: 00007f9e37815fa0 R15: 00007ffc5b8986e8 [ 1501.137028][ T31] [ 1501.149585][ T31] [ 1501.149585][ T31] Showing all locks held in the system: [ 1501.158103][ T31] 3 locks held by kworker/1:1/29: [ 1501.173965][ T31] #0: ffff8880b873ae60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1501.185962][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1501.204721][ T31] #2: ffffffff8e75e620 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x23c0 [ 1501.244909][ T31] 1 lock held by khungtaskd/31: [ 1501.254304][ T31] #0: ffffffff8e75e620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1501.273223][ T31] 2 locks held by getty/5580: [ 1501.278704][ T31] #0: ffff88803234e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1501.290062][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1501.300565][ T31] 4 locks held by kworker/u8:17/14994: [ 1501.306765][ T31] 2 locks held by syz.1.12750/19404: [ 1501.312122][ T31] #0: ffffffff8fc3cf30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1501.320446][ T31] #1: ffffffff8ea86788 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 1501.331448][ T31] 2 locks held by syz.0.13299/21371: [ 1501.338351][ T31] #0: ffffffff8fc3cf30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1501.346799][ T31] #1: ffffffff8ea86788 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xc40 [ 1501.357157][ T31] 2 locks held by syz.3.13314/21414: [ 1501.362463][ T31] #0: ffffffff8fc3cf30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1501.372343][ T31] #1: ffffffff8ea86788 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 1501.384537][ T31] 3 locks held by syz.7.14699/26220: [ 1501.390691][ T31] #0: ffff8880a8b21348 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1501.401210][ T31] #1: ffff88802a01a260 (sk_lock-AF_CAN){+.+.}-{0:0}, at: bcm_release+0x1cd/0x940 [ 1501.411019][ T31] #2: ffffffff8e764938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1501.423808][ T31] 2 locks held by sed/26248: [ 1501.428607][ T31] #0: ffff8880b873ae60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1501.439429][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1501.449914][ T31] [ 1501.486035][ T31] ============================================= [ 1501.486035][ T31] [ 1501.512113][ T31] NMI backtrace for cpu 0 [ 1501.512131][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1501.512152][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1501.512162][ T31] Call Trace: [ 1501.512171][ T31] [ 1501.512179][ T31] dump_stack_lvl+0xe8/0x150 [ 1501.512210][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1501.512299][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1501.512325][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1501.512355][ T31] sys_info+0x135/0x170 [ 1501.512378][ T31] watchdog+0xfd9/0x1030 [ 1501.512401][ T31] ? watchdog+0x21a/0x1030 [ 1501.512425][ T31] kthread+0x388/0x470 [ 1501.512455][ T31] ? __pfx_watchdog+0x10/0x10 [ 1501.512470][ T31] ? __pfx_kthread+0x10/0x10 [ 1501.512490][ T31] ret_from_fork+0x51e/0xb90 [ 1501.512516][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1501.512538][ T31] ? __switch_to+0xc7d/0x1450 [ 1501.512562][ T31] ? __pfx_kthread+0x10/0x10 [ 1501.512582][ T31] ret_from_fork_asm+0x1a/0x30 [ 1501.512630][ T31] [ 1501.512638][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1501.626239][ C1] NMI backtrace for cpu 1 [ 1501.626256][ C1] CPU: 1 UID: 0 PID: 26254 Comm: dhcpcd-run-hook Not tainted syzkaller #0 PREEMPT(full) [ 1501.626274][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1501.626283][ C1] RIP: 0010:mark_lock+0x9a/0x190 [ 1501.626309][ C1] Code: 0e 00 75 13 48 8d 3d 65 3d 73 0e 48 c7 c6 94 6c 01 8e 67 48 0f b9 3a 90 31 c9 4c 89 fe 4c 89 f7 b8 01 00 00 00 85 69 60 74 10 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 07 1e 10 0a cc 49 89 fe 49 89 f7 [ 1501.626323][ C1] RSP: 0000:ffffc90005aef6b0 EFLAGS: 00000006 [ 1501.626337][ C1] RAX: 0000000000000001 RBX: 0000000000000009 RCX: ffffffff93c53988 [ 1501.626349][ C1] RDX: 0000000000000008 RSI: ffff88809862e7a0 RDI: ffff88809862db80 [ 1501.626359][ C1] RBP: 0000000000000200 R08: ffffffff8200c81c R09: ffffffff8e75e620 [ 1501.626370][ C1] R10: 0000000000000406 R11: 0000000000000000 R12: 0000000000000003 [ 1501.626380][ C1] R13: ffff88809862e7a0 R14: ffff88809862db80 R15: 0000000000000005 [ 1501.626390][ C1] FS: 00007fac5e678c80(0000) GS:ffff88812555a000(0000) knlGS:0000000000000000 [ 1501.626404][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1501.626415][ C1] CR2: 00007fac5e9704ae CR3: 0000000034d9a000 CR4: 00000000003526f0 [ 1501.626429][ C1] Call Trace: [ 1501.626436][ C1] [ 1501.626444][ C1] __lock_acquire+0x6b5/0x2cf0 [ 1501.626469][ C1] ? pfn_valid+0xba/0x480 [ 1501.626491][ C1] lock_acquire+0xf0/0x2e0 [ 1501.626508][ C1] ? folio_try_get+0x1c/0x340 [ 1501.626526][ C1] ? folio_try_get+0x1c/0x340 [ 1501.626542][ C1] folio_try_get+0x38/0x340 [ 1501.626557][ C1] ? folio_try_get+0x1c/0x340 [ 1501.626572][ C1] next_uptodate_folio+0xcb/0x5d0 [ 1501.626602][ C1] filemap_map_pages+0x14fc/0x2050 [ 1501.626622][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1501.626642][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1501.626661][ C1] ? filemap_map_pages+0x185/0x2050 [ 1501.626681][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1501.626703][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1501.626721][ C1] do_pte_missing+0x211a/0x3490 [ 1501.626738][ C1] ? do_pte_missing+0x130a/0x3490 [ 1501.626758][ C1] ? handle_mm_fault+0xee/0x3310 [ 1501.626781][ C1] handle_mm_fault+0x1bec/0x3310 [ 1501.626807][ C1] ? handle_mm_fault+0xee/0x3310 [ 1501.626830][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 1501.626849][ C1] ? lock_vma_under_rcu+0x45a/0x500 [ 1501.626873][ C1] do_user_addr_fault+0xa73/0x1340 [ 1501.626895][ C1] ? rcu_is_watching+0x15/0xb0 [ 1501.626916][ C1] ? trace_page_fault_user+0x84/0x210 [ 1501.626936][ C1] exc_page_fault+0x6a/0xc0 [ 1501.626953][ C1] asm_exc_page_fault+0x26/0x30 [ 1501.626967][ C1] RIP: 0033:0x7fac5e9704ae [ 1501.626981][ C1] Code: 06 48 83 f8 ff 75 0c 48 8d 3d 95 1b 05 00 e9 89 0e fc ff 0f b6 4a 01 48 8d 3d 8f 1b 05 00 48 d3 e8 48 96 31 c0 e9 d2 11 fc ff <31> c9 0f b6 04 0f 0f b6 14 0e 39 d0 75 0e 48 ff c1 85 c0 74 15 83 [ 1501.626997][ C1] RSP: 002b:00007ffc72d5e6f8 EFLAGS: 00010202 [ 1501.627009][ C1] RAX: 0000558bc2aaf820 RBX: 0000558bc2aaee90 RCX: 0000000000000027 [ 1501.627020][ C1] RDX: 0000000000000006 RSI: 0000558bc2abd3f2 RDI: 0000558bc2aaf850 [ 1501.627030][ C1] RBP: 0000558bc2abd3f2 R08: 0000558bc2abd3f2 R09: 0000000000000001 [ 1501.627040][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000201 [ 1501.627050][ C1] R13: 0000558bc2abd3f1 R14: 0000000000000001 R15: 0000558bc2aaec30 [ 1501.627067][ C1] [ 1501.961492][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1501.968360][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1501.977561][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1501.987618][ T31] Call Trace: [ 1501.990903][ T31] [ 1501.993840][ T31] vpanic+0x56c/0xa60 [ 1501.997838][ T31] ? __pfx___schedule+0x10/0x10 [ 1502.002701][ T31] ? __pfx_vpanic+0x10/0x10 [ 1502.007213][ T31] ? __pfx_console_unlock+0x10/0x10 [ 1502.012433][ T31] panic+0xc5/0xd0 [ 1502.016165][ T31] ? __pfx_panic+0x10/0x10 [ 1502.020587][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1502.025948][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1502.032098][ T31] watchdog+0x1023/0x1030 [ 1502.036418][ T31] ? watchdog+0x21a/0x1030 [ 1502.040826][ T31] kthread+0x388/0x470 [ 1502.044880][ T31] ? __pfx_watchdog+0x10/0x10 [ 1502.049535][ T31] ? __pfx_kthread+0x10/0x10 [ 1502.054113][ T31] ret_from_fork+0x51e/0xb90 [ 1502.058696][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1502.063795][ T31] ? __switch_to+0xc7d/0x1450 [ 1502.068466][ T31] ? __pfx_kthread+0x10/0x10 [ 1502.073042][ T31] ret_from_fork_asm+0x1a/0x30 [ 1502.077812][ T31] [ 1502.081163][ T31] Kernel Offset: disabled [ 1502.085468][ T31] Rebooting in 86400 seconds..