last executing test programs: 2m26.164252515s ago: executing program 1 (id=3029): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r4, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0xe0, 0x4, 0x40, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x7, 0xffffffff, 0x8c7}}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x5}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x9c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000880)=[0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0], 0x0, 0x72, &(0x7f0000000900)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0xf5, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0x9c, r4, 0x600, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x41}, 0x40) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r1, @ANYBLOB="20005e800400010008000700b4030000080005002a000004080006"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0xa, 0xfff1}, {0xffe0, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x1, 0xa, 0x4, 0x6, 0xc, 0x18, 0x1, 0x3, 0x4, {0x7ff, 0xffffffff, 0x9, 0x800, 0x8704, 0x27000001}}}}]}, 0x78}}, 0x840) sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r14, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xf, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa}}]}}]}, 0x44}}, 0x20000000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000d40)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0xe7, 0x8, 0xfff, 0x50a, 0xe8, 0x3000, 0x6}, &(0x7f0000000e00)=0x9c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r12, 0x84, 0xf, &(0x7f0000000e40)={r15, @in={{0x2, 0x4e24, @remote}}, 0x7fffffff, 0x7, 0x10001, 0x9}, &(0x7f0000000f00)=0x98) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0x0, 0xa, 0x148, 0x0, 0x60, 0x3c8, 0x2a8, 0x2a8, 0x3c8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x330, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x330, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x60, './file0\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x1, 0x2}, {0x0, 0x1, 0x3}, {0xffffffffffffffff, 0x6, 0x3}, 0x5, 0x401}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x44}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x20000000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4c0) close(r11) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x30, 0xffffffffffffffff, 0x80000000) 2m25.467868188s ago: executing program 1 (id=3037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000090a01040000000000000000faff000008000a40000000000900020073797a31000000000900011073797a3000000000080005400000000d0800034000000008140000001000010000000000000000000084000a"], 0x6c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a00000005000000020000000400000000000000c7d66bd84e924ba0013d0c49956e2a6ee7dfb06082bd3437d6d7d4d457f13c5b92f7dffa271d02d1b0c531ea5e687829ab33190000000000000082186347e37fb2037d4088ccdb0560724cefce3ece6a88f4988ea907c89472efe2e36432fab9131ea3b2d05df40db8012eceb4fe5ba5df94786c0792dc0c2f124b604b696c2e58", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r3, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000580)=0x8, 0x4) close(0x3) ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f00000005c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x8000000) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r11, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @sk_msg}, 0x94) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r12, 0x0, 0x2, &(0x7f0000000040)={0x1, [0x8e, 0x1], 0x490c}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="900000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c000280050001000000000054001880080003400000000b080001"], 0x90}}, 0x0) 2m25.213788702s ago: executing program 1 (id=3040): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfb61cb0106df6c98}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x411, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="180000003c00010325bd7000fcffffff0afffd000400030076"], 0x18}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x3, 0x7}, 0x1c}}, 0x400040c0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xd9, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x7, 0x4, "0403"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000003"], 0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000200)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r8, 0x8983, &(0x7f0000000180)={0x7, 'vlan1\x00', {0x7}, 0x7624}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r9, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0xc4, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000580), &(0x7f0000000600), 0x8, 0xc6, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r9, r5, 0x25, 0x9, @val=@tracing={r10, 0x7a0a}}, 0x20) close(r11) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000007c0)="8cc2aef0cafae5c9c53abcef7171392479e2ea84ad6ee37021800bda32d45d8f32a3c52c317d9fa267d99c0b1220bcedce479bc5cb8ff25d0f4c4369bc3155adb3fc2da3e87acd85718056e86f694a83be8a79d8787123a19bcf0cc203a61b09ed8639cc9a4e655059548a9c724223712f14ffed4dc618012f24ab13fc4ae63735c8a2a0f62101f9ca52632935ac9df2146575c47583dab7531b4a79004334e1ecd9baa37ff0865a62a302a12c69e494154d9c236d64d8e2ee7eba8d21491bc783ad4512ee15f5f0b16ffde2d3a32c38d7b5711024bd861f697543f762c5c2"}, {&(0x7f0000000980)="79a23f6002b0d0df16ace927eda897def29b43b20978d1382836d0550cac8ab300b27547e30798e5533c3efd6d11956ca46832f6146f4fa9b4cfe4453ebe63a53277779d1f02a102bdea9c2194e0d5e3bb697e9ba0818ad1c1cca693328811e85f8ca2af949b59a912ad38cc4355f34e083cdf093bff5bb56e35df91792297e4c214d8308c400fc04bf6971bb49784bfc7fc7e2094ba7ea4a4e98889ca8dd739db1075b7490a738e2266d5624dd48c58177185721605"}, {&(0x7f0000000a40)="3600d24ae04f730c46823a130ebbd69ed7239582a0fc4895235de610a82966e51abdc29007e961a40af8efa2fcd58966bf34bb070cdcfbc4cc91bf73e0a237d0fa5a99fa8270aa6d6b5f0ab5a4036337428de145774f0ca4f87321af224aee73a378b7a1d64230aad4bc300f7d4dc9ea5210b0c43d9e0e89670804129cd907a721a046205821562e31a1ba26ebe1bd107b572e67da60"}, {&(0x7f0000000500)}, {&(0x7f0000000b00)="1fb8498c07a8588996a358f00461241449c4443becc0eea33374fd275f42bb076f8d8c50981e94abd017a13fd237c4d2003918a4dfa619b6f30581686f83bba0aec11a9b7dcaf5abe73b49ecf8791ec2fb931aafb7"}, {&(0x7f0000000b80)="99d573fea6a068155957b6f8df972b0f01d1b9fb00eb53f787863754059f4a55086ac94b84b7a6dcaeddc798a17e3e9f6f2736143071c2376afcb303575ce033c01be84ff1d010f1d121809d63091af23dd57e9bbaee92b93d33066105a6f78b0ee7e56fe3ef39c209c04ddc3885c2c3315009af23e8"}], 0x1, 0x0, 0x0, 0x4}], 0x49249249249267f, 0x20004808) r12 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r12, 0x84, 0x9, &(0x7f0000000380), 0x98) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r11}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x15, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000130000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000300000085000000a600000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 2m24.348589396s ago: executing program 1 (id=3047): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x1a00, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 2m24.241295486s ago: executing program 1 (id=3048): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000ff8000000000feffffffffffffff000a000000000000feffffffff7f4000020000000000000800000000000000000100"], 0xfc}}, 0x0) 2m24.028595408s ago: executing program 1 (id=3050): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002020000000000000000100095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r1, 0x0, 0x2f, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8}}, 0x40) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000240)="800000800000210ee7decd7a000000008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtaction={0x68, 0x30, 0x1, 0x0, 0xfffffffc, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7, 0x0, 0x4, 0x2, 0xa2}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x2004e081) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000009c0)={0x14, 0x4, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffe}}, 0x14}, 0x1, 0x0, 0x0, 0x44040}, 0x4000081) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000008b630000b70800000000800000005600bfa200000000000007020000f8ffffffb703000008000000b70400000000006b81e880bf35a200850000000300010000917a0000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ec0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000e40), &(0x7f0000000e80)=r1}, 0x20) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000f40)=@generic={&(0x7f0000000f00)='./file0\x00', 0x0, 0x10}, 0x18) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x18, 0x11, &(0x7f0000000700)=@raw=[@tail_call, @call={0x85, 0x0, 0x0, 0x5c}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @generic={0x7, 0xe, 0x1, 0x5, 0x9}, @generic={0x89, 0x6, 0x8, 0x2, 0x9}, @tail_call, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}], &(0x7f00000007c0)='syzkaller\x00', 0x2, 0x95, &(0x7f00000008c0)=""/149, 0x41000, 0x2, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000f80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r8, r9, r10, r11, 0xffffffffffffffff], &(0x7f0000000fc0)=[{0x0, 0x2, 0x7, 0x2}, {0x2, 0x5, 0x4, 0x6}], 0x10, 0x401}, 0x94) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r13, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x3c}}, 0x20040000) 3.035081577s ago: executing program 0 (id=4477): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x1, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="18008300", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='c ', @ANYRESOCT], 0xc) close(r2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) pselect6(0x40, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7ffffffe}, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000013060103d21b3564260007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) unshare(0x2c060000) unshare(0x24020000) socket$unix(0x1, 0x1, 0x0) 2.782053952s ago: executing program 0 (id=4479): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x9b}, @printk={@u, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x70bd2a, 0x24dfdbfe, {{@in=@rand_addr=0x64010102, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x102, 0xa, 0x20, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2e, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x3, 0x4e24, 0x4e20, @in=@empty}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000140)={r0, &(0x7f0000000000)='{^', 0x100, &(0x7f0000000080)={@_ha_fsid={[0x0, 0x1]}, {0x3, 0x2, 0x6, 0x5}}, 0xdf, &(0x7f00000000c0), &(0x7f0000000100)=0x8}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x1bc, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c9a85db10d4f4524f492956a0fe9c32c495508c5e4e4daa1"}], @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5f510c2d045aebd425c061a8f1c63ccd418d8b0e58dd512b"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "73c36d0517ff1206be54010a4379d0b83088c07043c6357e"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b131678cd4c6f11abdef9c9fd3c999e4fd5e6e8ffbeb6b4d"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d5bb487bd57b88b2adffbd761b96cd852f893912edb067f5"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e2ab2577718e36bd1088825131ed832815b894eeceb0a588"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x1bc}}, 0x50) 2.624429416s ago: executing program 0 (id=4483): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_proto_private(r1, 0x89e2, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in=@private=0xa010101, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa417, 0x101}, {0x0, 0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4002, 0x32}, 0x0, @in=@loopback, 0x0, 0x3, 0x0, 0xfd, 0x0, 0x1, 0x2}}, 0xe8) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x4b, 0xf, "04000787b64d173dbd2100eca6aa08"}}) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'macsec0\x00'}) r4 = socket$inet(0x2, 0x2, 0x1) connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="08001497", 0x4}, {0x0}], 0x2}}], 0x1, 0x2004000) gettid() socket(0x2c, 0x803, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000ae00000000000022fff200000000000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000300), &(0x7f0000000380)}, 0x20) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000400)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x15, 0x3, 'rr\x00', 0x1, 0x3, 0x72}, 0x2c) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e20, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x2, 0xcb, 0x12d5e, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r7, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0x54}, {@rand_addr=0x64010102, 0x4e26, 0x2000, 0x200, 0x20008001, 0x1}}, 0x44) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000080), 0x8) 2.046420539s ago: executing program 2 (id=4493): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42001, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000200)={'sit0\x00', &(0x7f00000001c0)={@loopback, @dev={0xac, 0x14, 0x14, 0x33}, 0xf, 0x2009}}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x100}) (async) socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r6, {0xffff, 0xfff1}, {0xffff, 0x7}, {0x5, 0xa}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x4, 0x1ff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x1e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x48845) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x808) socket$inet6_sctp(0xa, 0x5, 0x84) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000011cd8c85b8e5758f732ee8229a415cef1c9e538dada624cc5c09e8cabbdf0c4692d0ac5b6455fdf22ea159fd7f81ab4968f89b3950bcd16621d80cc4e38a0a00e42213187332b076ba8b0313052640d37668c7349826625852a1ca3300d4b3c926cbc70b8b9edfaa8fc44ee17041110c8aef97f1f718ebbadb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r13, 0x2000012, 0xe, 0xffffffae, &(0x7f0000000340)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) r14 = socket$alg(0x26, 0x5, 0x0) bind$alg(r14, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) accept$alg(r14, 0x0, 0x0) 1.924041285s ago: executing program 2 (id=4495): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000006c0)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20}], 0x3}}], 0xaa, 0x4000010) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r4 = socket$rxrpc(0x21, 0x2, 0x2) (rerun: 64) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@can_newroute={0x2ac, 0x18, 0x20, 0x70bd2c, 0x25dfdbfe, {0x1d, 0x1, 0x1}, [@CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffd, 0x7a, 0x6, 0x6}}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_CS_CRC8={0x11e, 0x6, {0x25, 0x45, 0x2, 0xff, 0x9, "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", 0x2, "914779bd11b247190a00"}}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x0, 0x0, 0x1}, 0x3, 0x1, 0x0, 0x0, "3eed75df54ad3014"}, 0x4}}, @CGW_MOD_SET={0x15, 0x4, {{{0x4, 0x0, 0x1}, 0x3, 0x1, 0x0, 0x0, "06a6d3caf9ef01ae"}}}, @CGW_CS_CRC8={0x11e, 0x6, {0x49, 0x5f, 0x4d, 0x6, 0x96, "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", 0x2, "bd7ba7adc9a34ff2787b12183c54d6eb99797afd"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "fd050f05257ab89c"}}}]}, 0x2ac}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x74, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'rateest\x00'}, @NFTA_MATCH_INFO={0x4c, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870b81e92a63"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x5}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmmsg$inet(r0, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000680)="12e661cd6ccffacd86d9eb3fcda95cee1c854aa73d979ec435d5b155c2143b201da8b56adb266f3bf2f904736327c2520639af3949684bd2225d2b416a49849b1aff6099", 0x44}], 0x1}}, {{&(0x7f0000000740)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000780)="04436015f2a2fa36519adea47f47e6000bba3071da6c30cdc2e2e64d9330433b163d6fd41ffb5693f77841c6d6dedaf58541c28b3b7c7f759c0141ccf6604b1cf6324060c2a5848679", 0x49}, {&(0x7f0000000800)="938ae698bb55b3ba93ee71a913a0cfc90080434b14f17564493b1dd536d35d8b220d34da315e651246d57d8627db1f22539d089c69a09f32758142b1fe6182a557f22bdf7a53df32bf42906b9be6077fe6939184af9aea5f05e01bf342bb510b592e8c1691effedff2dce8d90c087c7bac2da0a72a28b71ce4e0d4ed237dd0d5a0940c3286e14a70b6e7f176dc0d330700d3e4fefd27986c0f3aa02c95dc", 0x9e}, {&(0x7f00000008c0)="01eab9b3a1b121b4edb46e24eed6df2d0f728cdbe79749c2c8de2cc2334dff71f4eaa98bc65037abd25181408117728b1861241b5878ab198835d41db45b615fac6d981202d7e84e1c4a756472d7551f63addbde44a10344109b7297231ee312b06761dc93409c048d72eb74d0cdcda3a28f0c1373f282c4af945a086010a21a5c6017822c09319981101c5b71eb472550b62089ae834fb56381c22a71d11ff3265b3ea9185b8acd6f162f410a7a756f634d660aa067f00544e708496aa0f3a4432680072599fb027ce34629b5a2cc11bf743a980ebbb1", 0xd7}, {&(0x7f00000009c0)="e53a65678a300ebfba48751548e38a04d53d24748211900a52fdd2549e63f8e047e803523444204e932aa441ba860849783e5e11e7348cbdeb9b02006d847636104feada1af2147040f9abe165d09bb31ef96b8f", 0x54}], 0x4, &(0x7f0000000a80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x48}}, {{&(0x7f0000000b00)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001e40)=[{&(0x7f0000000b40)}, {&(0x7f0000000b80)="488bdfaef6736f1fc446d5b604af66b448a4b2553267c1ddf96ba53ca8333ffec3c48552754d158aa39bc643e5cceff47d563deeada4d35e987654f200282def1507949c38c225ff453c624c39becb34d91ec36b3ec77f3f425271ea791e2f52f690ef11a80eff56fc09bcbe5afadf77eefba91833a174e88f3b727c89e2371f5119198641c4da469aa698fe21018663287cc05a88bb2739ab295ae8a78ac9263c0236c0c9cc753d7084a5dc", 0xac}, {&(0x7f0000000c40)="f4637b2df08239c8d6a4fe2e1503469ba2fc8b348f6a6a15c1a24edb9ae1f2496d4f4319cb65864892bb9a68b0c8c545a589d79bc94130d0272ac57231941bfc5ef760b4775cbe0b7532cbf498aed7ed3e3f2186c6be4eaf52520f48939c0297bf1a6d7ab58d2482e2aba02d6d00c67745e00ad7ff54a45bab878531f5745406908003469cc5016577afbef43feffe5525c89a0b984f0c5140f7aa782cdb4f4577657a796cf25726d3db238003507dcf67a77141e24f5077e7a11fe5b1867daba23e6a61bdde4cb18f620f7dae411faa73d1f65bb9ba4efdd40011687bae2264473cad8a05cd6615906724541b4ed765082552ee91797ce183775442b67375fae0557d0cb136392fc3a37b250ccd0a59c8fcade6cde4277cef57ac23c81006c27fe82540d65c7c298afb3b5d964bc6949e528aa981569695074d04107ef9ac504a7ac7fb104b52c1da7a2798c7cff813dda5e06407aca0de59085d6f355335df37b77d8097adf3da6d3dee1148002178ced0695854d08038f322a44b0fd3d0622a63d976673b709b9a3d6ea9960ae1d68a37c45803d456353444af01bbf28d11e2ce00de8246b7a5ace7d925c5d6e6fb8e03442870e06276ea1ab1d985b2b632170b59c7744a102e7152465b8de5c57c6e66c3bdd60af4d6542b2952627b301327ca0ee5085e8dad964a550369a4db127a4ed04ac3c7f3655accc9708dda1a0c3f26e9be2c59f9bb24d5e83ebbd4a2c8f071458eb5c0358f2bcc60397f07ac8148c4a5c5196f58100b2ac928adab4726149801ab829b36c2c33094397f97d229bc1a13e5323c7dcf4031a8edb809c2d28c4cb087c5dcc18f315f20039ddbb0ec7759d2d0e740757683573672737cefd7dbc2eb0dea01c3b47dbb1889f23b4a8ec711ea35bddb1812f48e8b5514d51975ec02ffa3b7970b97c55fb09f3db2073fceebec3bb4c1dfcb67ff3848af92e0cc510454c79dd1f609f8bb2f6cc2c76da515fb7dfab6946244228b471ed94c2afb1222e3591b18a6bcb5f6843cd0e2eb56fc72ac6083d7706b85131f684161d156dcc1d5a63415afcda441c381dfb8e95377f4c83d3c1aeec6417e4dccc10ba981b3b068cc0d7dd1e05c43ba9ac5397f45065bd2026d0271c5f23a490e7a9fb120533f1f5f7f676d2c101d9245d7d0108f62c1230679e8b0c72ae784b08856fdda4f0f09a55fae1e004795735e602e04a327095962bdfe0c8433ac842cd1a73479e9243fa0b40ebd64cd2f7bfe83793f6ebf0103c26a662b4db0b918aed4b9cfe8e152ba6b8b54702060f89e0a4ec02663efb3fd10ef0a58e612edf8776f36c5e5e5ae4ff4e854a039d4c56f6e9ce4721783ce84ec7590ac6347e7cd786ce4403c757f53d2cb36cd5667c7d757f2aaaf555fec994a948bb440fa239f1b47b1b8758ec0cbb035d90ca4af3515db5acf72b324dd9f58edecbb5cb57d668957c5b37757bc1d381d9e91d9e0f258d27f773dc18d0c77dc171eab4233a39f48808bb6eeabca18a90d61d8c6f11b8dab8aabb3d8ea612428be0c1403776621fbe9b3e28ade320ce6ce6c4e0b94f458128ba2623c0139cd35fe586a42d630d42f3203f6f5146d980e22f38e375094e604347e287c3d8ee959100d1fc98f975828aacb9f5406c1ac855ea129ef7e45f39846a6e28c03f438eca80923b15108e557141192b2afa03ac3ecb09a8a4532f095521f233d3fb87f36345dcb23910b37e2ea8bbc4ed96fdc6fee38452a1e5f70bfb3b672084d60b511aee449c1e4f21ceb2d0b1f9b575f9051e2a0237aa0aac3ddcd4ff187617bfc7f7114a574a4e87ec46e3b9bc3b779a43c2ae3f6b418e4e92951c56ac973d5b7d3cd80e2b3642811321fa97350e3706593f5bddb6139b8e06f2a6be2b361582b9b817ecd5eda1083ce0c5b018f99bf08593e6ddab9443be700b4d3065a7fa6704801bc338f89e2c1191e352316ed6a05dbb2cf39c78590ca9969b248fd50e770051094b9807299a261a3e59e7bbb5dee69c07d3a30e622dc2ff8ba5a01152ac7256d0f6853d702f57bee4381329b0c99979bc60a6a46c566468518b4babc0803f8c1f834ce36c95fc23c87990c627e593445f2c298520c09bb5c2af97c4fdd3146d51986f5e3370e4578839f545a08cb41651f04a9ba83fc6aab536e0f4e556f7f5c3b863667982132139334d735b06fe5d4114e793913561ba9e0521e923c661acdd6463d9ce55d560d9101e049c6a782099ad6497b3b8003dcceffd33d7dbbfa1fa9fdd584d9d32821e3e170732c0860748e227c94efecde9d7f0f266d3918f545f9ca8f36abc43fc5674b5d169dde8de693951481e2b540915bf6b02364461cfa5e126d6b25d84b251fa1f4c768907d67e95aaa9bff452d0c56bd88dde086ac76d580b296081ec6e3db45383421119692bb1bfd472f15811d517f836b694198f00608e09b1af5994a7b0dc928551725ec503085621dcd93406504d69a4cd7694165bb512fab34b486fc7e003dfb6290e7fe08043bd6cf54ec5b10a24992f5744a88d056b1a0da107c3e051db089185b30f6c5cc68582d735236d0738fb4e7a4429f35df8471f641a6662f2c8d6eab54531201649d0ca5110d80994f41fed85666525bbb3c9727ad0efb695632cdce9d9b43239e7f48b6a077136a42ec70ac7a751a02c76413b45a193843c7a0127542d93caee27420d415053031be32cd70ab0ec947fa3d9214d4ea05acda2189f83bd9d5bf4b254b9403b607d2024cf20312fc344835bb1fcd52890ee65647e639c41a508fc4ed7e08d29ae935c4dfa46a1352c64ba5df084933b641676ced7044f4672acd8e7165b45e4c92795eb1985a28baa6d0a21e057e7078dee1c03489b598e67b95a1730cdb2d6ee1fd942a0421d09f5052df073151be986e8dabaee22a913a55f3171c18e65f2931f9c226b382da5464c5fc96c81a6afbeb4332f2e9e82c97043887eb8e2c526ba0e27e09bfb5816dd908e49cab521e94acd4f4580c3f3d756bfb153e3802d2007c0bb7aba14c2ad822798b36a17aca34aceba0f35c55818bc3943cdabb2e5d3b6c57d503062c43191f7a4ac8d277e2a706117a85da507a46e413c235bd96f0a2e9d8e957dc8417e5d7aa4424f873b6e79878462e555378a01fb0dc24a7fd6bd19834538f60dc7fbee4e0c570b1bece3ae5474c62bd3250a6e8dbcc879449da8fadf18bd1348d3e52799738b34ab1da7ded8740c64216c21215506ca164338bc73666bfa0ba352b6e672d2caa91d2be08b31a32b63c9bb48bba4d9a0f1cb26e0f18f1f815f07b1a9743368e3211b230db37fb21173ed86e2a84ea2819635b5ad0ffc2dd7eca522a91525668332042b34eeaa01f7a6c509c7f76de43bb6c003e79a54f1d874e818ac546c2adb618497e11069abb40c4fd7c219deee1e36415cd0104207a55da019821c1a319aed1fcd4c46a98e544af5a7f551a8417576ee38562405652795d30b7cca19f4f5a5c6ba4ec0c400ab6257a1f5a09752a8cdb99ebca52db65b6dbcfc893a2e615efd90217a4145fd46505a2b5bb6cc755e645c7c3ff6ba47a1ad269401aede2185f9b6833df3b871314ca70671411c5bc84484e68e24fefd333ca5412f65b4a0c8b6eb6bc99ad8daea5d97e4f7cfd2c1babb3646ca83e78f9d7204fee7bd65f2da3584f68af7784de695ae5e24465d1a7f4e76ffec35495acb972679314fb26092d97d4d439b1bff666346339a527f4c9740e4eb1944c7ecb249c3cf0edd255e6740c2a98ac0751fd00b1dfbbe0b95ddec59c7873af0ac9c16ec39e51e1e69984a9fdcf10b9443713633e06989d59488fa8da236874a6e9a2a5f930c7595eff20c3a98c78323635ae5fb99ba622c8b7de885c2f6c21f7c3ecac02505241d494accb07a5cd98b5f3cec10c5c5b8c27dfc1d01e363d83fcea63da9149bcd435b690275e276eca11e52a546a4db0252eb018d6f58c0b1db824deef98e2553fbf56e9b5f8ff35005b951e288743f431a7376fb389da8855ce001d0f82583d345cc39ccc69819e52ef8adab70a71f5d656a3e7c1ec32df15a1035612f799375cdc9e85f1a5c1eceb4a955ceed0347aa86567c76d60239b0aa07060b19c60d1a0d3549e5b47cd5764ae7e3407bf51c8aa3a6c6502267b3ab09eff66ed7bcb77ff164890f077cd53aaab2ce0004731c8d5cb0eb3e805589f0f7b22b6ddb66898eaf3c27cb0eb8e725215c5640ff596b03d37a1bb8cc4e8051d8154bcfde14461ece5756ef6d2db4073bcb304b0a97f71f02fb57711e1d4a7d2b83048a9c2a47d1c2f408d92cdf2fba81ce12e1235109fd7594d0dfe0ae389af20645f8885211952c57e0a74429a78175ec3db0469b83d5eb5eae2c44fe4c988dcc04cfaf850d69718bd2748b5a17e9db5a36622b23714a9fcb1aae1942d810af669a4ac214a8ce3b96f02822a20121a9db41721825ead49219823cd3f0da43cdb1ec92742e22bd5f271f336241dbd49984f163a30ecdccfcceeff51c0b47595dca8565557adcc9f0a680fbd528f2bb1357c69c0d35e10dcd0bd3d775f7591a83f57e55367da46c3fcd43c4bbcda9250cf7289eb40ef0dc0debd378bfe9c23bed1e1ea004be58382931e15c8b75c940d6e7e556ddc9c241a4ac43b0b6e458b4b3c7d21c74efa61578ab45f75e1f18deb0acb9386b05a41d765bee868b63667a192bf872843fc6afdd77911b78a8215c0e4cfc418232c44e20aa30766a4aebb70db4a6fde54bcf911f262b5e96a1d7c7e7bab82585653dcfe76d98d457ff3247a88197ef86c6e0c49608cd8080803f792f020be0ff9d170ba93d145f80e363ecb3f7ca4b003d89e6c9f0b4e1bcc750effd2fa47516a3714d30d61257d10ad738c4ab55e98926d20399368bb69d35e06651fb65f60c64d842243f129fcef31a5cdb48c8f60590abbec7b56afe2394c61db3e9c46b687e282ac2bc4429d6e58e432c13024254b128fe0147d197e585500d23d06e9a9511390beeef8203c44f10d320dd56cd039549c3a63dab4b3d8c2f036771d7e69f917d02c663d9c64cd8001090ec1a94aee49453499e16ed3f628897d67f6ce7dbef33aa19e9206d59f909f9715a0cca55c84182a58789ad942e5217724dffa195dc5ac28c66a7397be11f035aec45444fdd46f0b3e046b5b387a9c415cb62bb3090b4665976e8be3ec92b218f74fa84431132336389e468792874d9c8e1a800e684036535682d09eff96feeac01ef43fa141ce2c9034aadb1e8f4a282fb0d810cfa7161deb3d4a4f965469fccfc46380ab52303d914574541d024c4282ccad12bf0754dd859e23eef0dd883cfa08c38998b3b7751d1efa66bb2ba27c82d76a541127e25bce14ced932ceeadc7a945b40571eb39b26feb673cc6fa343af76963f2f4a316cf8a0521329696b2f8d5d70e64340dbcd01a288583f5fd1d17b97acea39fc0923f2d06c6c6f19e75a5e51f719634175cebfb45abd32339e0e156a0ea942809f63ee9483091fcd305ef545a74914be1d37dc26df55884bfdfb01424a049f3fabd4ca276c2191a01c2e00e4df6eb073081ddfa8251665015397e7bb67cb7076f62dda3f05ea364df828e6fef9d5ca625129b50c6c3abb7c157a9542774a927d3f45051e7a29ce430ad241aea8447fdcf077aac44653538ee7591d8ed35d511c0dc40fd73e838a5bcd8bbf277db1eb5d73f4e8d4baf064ffdc5a3642592ec0ad86c4d7439c0b132eb7ec32e070fdc1326175c48a7ea13838340a93d9f4228ddc40f68d50fba6a5723d58cf3fd7", 0x1000}, {&(0x7f0000001c40)="36acc2a7838b5f8a45a9ccd413f8c8c6ec06914340f7b123929201a0bdf7fdc8dc1da10b4ec5c270eb256147fb492df3ff64c7e0f19eaf3f66abe3823b48fddebb023ea2475bcb0f03a87b73aea161e5eb8474788badd58a540bbcaa8c394de47344b538fb63491b1d8325cf619d62eb15a6afe57dc4a705986838b461c45089a04fa5741947d057c51c08e117569b778a189329a32a4cabb1c33eea86741e01897e497179b2a46b8566896d62b24fc54188e535a732e506a6dfa8c5d2047174524562565fd00bd8f75ca64035e6f121b1ca77b872b98662e99c792b81fa6f8fd916f9811eba9b5e56e7", 0xea}, {&(0x7f0000001d40)="40a4d84f4cb30fd914f6a13503cef6599f75be1ad23c01a418a8f1b5bf257d5197f79fc7bc4ae6967368e8c740b1905dacab7f3b0a258caafb2253a0146a6bf4ce1fdf24ab326fe48194ac4d66b9bc875367e08f25637d54bd0e528216227ac26a922f4bb4a290b570c5363f9106eb5af2e13cb2ed26fdd1ca0da75bd0a36995c6355708661522a56b7c31767bd51ce8c4ded7bad45b0aa3aff74514aed2465ea445efec8ee3287e391400b6bb62b02b2c15b9ae673e737e2c7549a6b20689ef26b3c9d653a5b5920b53c09a854a68dc122557e220300a4b0d34389d8e9a1091437a67a12c856741951e0401de5a9f1500", 0xf1}], 0x5, &(0x7f0000001ec0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x18}}, {{&(0x7f0000001f00)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000002480)=[{&(0x7f0000001f40)="96464e701c954ff911f9622da3defa5291a153aabb828229aa7a842f73767d74e7a22e3cf56b94b09004d6fa724543fe820abe1e5a3144124dc198be29da40d3f5db68b5018155e936b0111dbac8b6e03faddf152fa8d61c765e23fa2f4baa5255f96a0d55c9db0e5b251c15fb0be00b651ae322b8cd43433066f483ee9f3a5c706060928f1275a97164e867db6856d7c3d16516b8de3c81", 0x98}, {&(0x7f0000002000)="52ef5ef0f8310d8f5b8200f12b302a844a4817a9312f11518c11013d23e0ca2054b6ca55635d93c23d0a270e8c8ca018dc277043bf54ac063efe3afe9206aecef212cda1d543fcd4e2cd1bb647a19eaf11ede42109bf72f6b178d35bdf907b0d40d9e75f1a6965659416012d1e50ae264f58820cba06f8f89d365e1d342fb82c47334abda31864a6c51f0ec7e580094b8f076bd223b41c891f5ea6360b6902be5d5d5ce2bd290404", 0xa8}, {&(0x7f00000020c0)="483d946b7b331c80c2dddde61b0c8e51cd09f80fc508beefcc85d7984d54d3497a131d1a77ccebe50bcfcfa79161ad1d8626f4", 0x33}, {&(0x7f0000002100)="fec34b919cc2c68ea2f3d768d0db6117d78fb4a5c8652f8072b3bea71955e57d1429ce0f944b25ccf747049fff0a0ab6a571741272f478228bceb494bbe69a498088a9af1c890332c9c3ee6421b2942dfb119bf8ccf259f794138d24af310c950d9dec19db3d71e416b80f599caa5ec637277b741ca1a019d1b9a9996f1fd8c312a3a083", 0x84}, {&(0x7f00000021c0)="0c6a273a9a520ea78389809966a4598c195eec55d2d4e2ba790ff2085723e20b1df5197f4d3f7ac56080d0d958b3aaa8212cc13a4d4dc19f699409492dc3ca1dd263aa0d0dee5c30f4f939dbc1ad9f187cdd82137db13f5879d84d1858232b5738a1dd4ade035a3d68e6b9425e262b4308d65673258da24aeb426959f272fde386cd41cd162bcbec0cca42c1ce9c5ae021c0e606252a68998bf21762a980", 0x9e}, {&(0x7f0000002280)="01c89df4572b73a046cb090ebd73605475cd647afd22043a0250c3c90cdc01cdeb66dc10bad7fc965561940ec900abbc", 0x30}, {&(0x7f00000022c0)="1fca163582cc35", 0x7}, {&(0x7f0000002300)="2d85e80a09bdff889799e7fe6474afea415329c3523ac4a645fd4d24281fad82acfd231ac3e5d9c4f46920dbbbd4cf950b77b00da84b1b6572635d4ddfe3f6f9669697416c78e173edbfe1ea53b25d0329210957f4ac85fc", 0x58}, {&(0x7f0000002380)="2d21a61c54878c753ce308dcecfcd28c4eb512099fb97c95a5bf899d88fb9c0adc5954452713332f7e0aa0632bd88eb1fce4081f501bc98e96bf1279972fa270b3a35c5ac3cdf063169e3bf32fd8325256158d0e0ffc1d422d034c3619ea294968adffebd2a1888e5508249a90a59bb60bb4f43f909b3da881cfd196041d33318f1250e0a60ac8339eefe0819474eff01f0e2092709d3eaeeb728dd102535cfa59a1f230d1908f4eafd875d8fb2c2e0d1281da377188adf79cc8b1d6556e15ae11cd7409fa100e4a71c7f139cfb0fca2be983a91a1face88", 0xd8}], 0x9, &(0x7f0000002540)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x40}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x30}}], 0x4, 0x8810) (async) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r6, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 1.820077601s ago: executing program 2 (id=4498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r4, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014640000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000003800038034000080040001800c000540000000000000004914000b801000010fa60001006f626a72656600000c00044000000000000007f6"], 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) poll(&(0x7f0000000580)=[{r8, 0x6}], 0x1, 0x7ff) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x1, 0x4, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x0, 0x0, 0x47, 0x7, 0x0, 0x2}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000580)={{{@in=@private=0xa010101, @in6=@local, 0x4e24, 0x7, 0x4e23, 0xe, 0xa, 0x80, 0x0, 0x3b}, {0x7fff, 0xec, 0x4, 0x8000000000000001, 0x0, 0x7, 0x9, 0x5}, {0xe, 0x4, 0xfffffffffffffffd, 0x4}, 0x7f, 0x6e6bb9, 0x1, 0x0, 0x2}, {{@in6=@mcast2, 0x4d5, 0x2b}, 0xa, @in6=@local, 0x3503, 0x3, 0x3, 0x89, 0xa, 0x81, 0x7f0000}}, 0xe8) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000626174616476000014020000000000000041544d414e5f4956000000"], 0x44}}, 0x0) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b0a00624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.672765144s ago: executing program 4 (id=4499): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) writev(r3, &(0x7f00000002c0)=[{0x0}], 0x1) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r5, 0x11, 0xa, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x20008850) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c01000011002300"/20, @ANYRES32=r7, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\b\x00.'], 0x14c}, 0x1, 0x0, 0x0, 0x40080c5}, 0x4000000) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x3e}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@private2, {}, {0x0, 0x0, 0x8000000, 0x200}, {0xf1, 0x0, 0x2}, 0x0, 0x0, 0x8, 0x0, 0x0, 0xcd}}, 0xf0}}, 0x800) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1, r0}, 0xc) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x81, 0xfffff034}, {0x6}]}, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f0000000100)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0xfffb, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x0, 0x28, 0x0, @gue={{0x2}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099b"}}}}}}}, 0x4e) 1.672439273s ago: executing program 0 (id=4500): unshare(0x6a040000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r0, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0xffffffffffffff9b) sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES16, @ANYRESDEC=0x0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x50000, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x2, 0xa, 0xe8, 0x5, 0x2, 0x0, 0x70bd25, 0x25dfdbfd}, 0x10}}, 0x810) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r6, 0x0, 0xfdef) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x6, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0x424f, 0x3}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="080bf4e404000000050000000000008073100000", @ANYRES32, @ANYBLOB="0000000600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000500"/28], 0x50) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote, {[@timestamp={0x44, 0x4, 0xe2}]}}, @timestamp={0xd, 0x0, 0x0, 0x9, 0x2, 0x672d, 0x1, 0x9}}}}}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) 1.195389429s ago: executing program 4 (id=4504): socket$kcm(0x2c, 0x3, 0x0) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x38d, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}}, 0x3, 0x6, 0x4, 0x0, 0xfffff6f6}, &(0x7f0000000000)=0x98) (async) writev(0xffffffffffffffff, &(0x7f0000019440)=[{&(0x7f0000000340)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed090f0000600000f3a1bc5603ca00000f7f89e3ff296aa1f6475322f000200000004a2471083ec6991778581acb6c0101ff00", 0x48}], 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fbdbdf250100000008000100ffffffff140004800500030005000046fdf7b56bd06830b6b902f31f1d2d0005"], 0x38}, 0x1, 0x0, 0x0, 0xc0d0}, 0x40000) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000040)=ANY=[@ANYRES16=r0], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x50}, 0x94) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee9, 0x8031, 0xffffffffffffffff, 0x215eb000) (async, rerun: 32) r4 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x61d0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(r0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffcffff03400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 64) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500080a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000140003801000004d32ead93adff46e4f22800c00018006000100582e0000140000001100010000000000000000000300000a447a87156d82c7817853dabfae1bb7be511270ee17a8ca5236cf794e16c5a418a082692566640629e62355ea06c8dc705a7b"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) recvmsg(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000002) (async) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004040)={0x397c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x395c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}]}, {0x4}, {0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}]}, {0x4a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_EXPRESSIONS={0x334, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x24c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x23c, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x230, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xef, 0x1, "52ae04eccc7bb8d8c53a8f70c8ee3bfc1ebe61ad7d9955bb6973b157519cca5818a4b79e91d16a75544273230ef2acf985172eade8214ba1102808ad6c9f32360c45205e1a77a40b634994e4ef04a6d3664d46f1f0e00215ccc2e4c471c5d4c5eec0734799a3dced5342b7e4c3c264d446eec0ea0af4dd7cd0c44b1551374614e1664c84039b169ea0f9609a99bf55556f9d978323e3f845bc5c894431b7a87d45dbcad59248aa6a3b98b5a85e55569a31a28d669a65c66ec52e572d57d7d7c0d95a81eb9ee0f3363c0bf0906fde1bffc214de364d5358c68fcead786e1b0cd7515f7aa302ea5948f9aabc"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x8b, 0x1, "aae4a64c009934e6f5e3dc94aeac0a77f5b8070e5b8da58f420de07c9220ed099dab42e0d4db9864fd4dc1214d30aad57f1a990f89c043e19b5e51d71adb88efd81d04b97cd7e4e575c0178bd66eb8605abf02d9a3d87420f055cd0327566975b43da744416c077b89c094b22be2dc20f2a62f074812627140c14fe088d46c0404b7f1e065116b"}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x7}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}]}}}, {0x80, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x70, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xb}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4c0}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x98, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x34, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xb54}, @NFTA_QUEUE_FLAGS={0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x69, 0x6, 0x1, 0x0, "8a94aa98cdf81f8db8caf614cfb4ba53064f8d1230be1d2540a8c25ac0aa9f3849a011b7cb16fe20a89ccdf62cbbcb5b3b147d1664b57112f4341e78f06faf740b22c0bc91846ff97c058d02a88779aa75eb54e5531b46cb84b2944650ccef54e75cea52b2"}]}, {0x33c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1000}, @NFTA_SET_ELEM_KEY_END={0x16c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xad, 0x1, "91c78492348a956415e45cec94c497415ba985f385f2722d39011bd39921ef226a009ad3cc397cf178a6db9e8f3dbe9c4af3c828a5411a4b77f196f90f987a95f47ed755c7681e80623679b92128b619ca4453f9e1e1e57f9aa6a9334cfd6e4171d066b82596a4472c957e8ed4b2deb2c7a90ee19b074ab046a4201c1762d213bdbc6be339d79c459a0a41a4da829a7e253f03311c335859fb597101938e84951d7b99ac2909a38f3d"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x26, 0x1, "30d43c2e7b228c96396e83633356041fb1cff1819bcaa3ac3e82f45b5d884323b6a5"}]}, @NFTA_SET_ELEM_DATA={0x1b4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe, 0x1, "2c25bc5be971235fbcaa"}, @NFTA_DATA_VALUE={0xc2, 0x1, "e8eead0710cd257a200f204dee4dd5cdbcdc5b537ab0fa4ab048335d98e0ccc172776b1671bf24bb6946003552974e1070ab60e1c9e406bb2dd500e53f0e378dddb4dc9a120d6b5102c3924fe25925f48d8dcde03074e92d43bb2340d7b84b6954a889f25d99b1f10366fff3d6ed8627fa494c1991fad55345207ff680d646c5d223eff50a1cc34f96efd4a4a46c01a20d1e079b6d09582e55914c18a1b81fa05287b0950cfe653445019a0fddb9cc92cd233115f832d452761c5ceb426e"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x20000001}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x92, 0x1, "be5a47f14e8607bca93e16de0733c643db749f793d072795f3a9423d11b8d6678fa895d06b29a0254ed8701c342ac08a9b1dad31bc361552625698b0e78ccce7c572c90049463d35e7f6299c58d87be0d795be8092a812fa360f90bd24cbf65a45b3648577a07eacd190d51e8a7ff4773644903d0ee055121f7e62c5e9ab4393de8224b6d695df95eafa0191fefc"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x4}, {0x9ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x248, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x22, 0x1, "041cd1a06bdc6957336b1e2fd6701378de5ead1f84f9278e7c10d6e0ebdb"}, @NFTA_DATA_VALUE={0x3b, 0x1, "67dd1ac095a86f624ee0ccabb12c4bb246b577e846ad71eaa7cfcb32e87445ace170195da9669bf58100f3dac888f972580687bd970892"}, @NFTA_DATA_VALUE={0xd8, 0x1, "08660c49dba8b929b32b2d18c5a0440edb874177865107f344d28c5a657792b303ad52c3dcdeea0e50aa3e1a09e9f1b8f2a4215b3a23a902e7862ebb01b916c16a8ddea58ca60cc8211a83fedd93f287d2b5992d157fc250c7df2e29b5eb4bf26ce34db54f61c9499c1255d0fa14fa1beef3c04b08bc92c2b496d03a0fc98bda3aa59e5231b9b51ae153e765bc4e2e170b0a99788428298ad02efd92adf546e6e616b04c87ad9b20f0ba5195cd381727bcff33dd5e2ac7e902c4e18bb8b55e8e19ab3bf58966a7f23b4383ffda42186598b114a4"}, @NFTA_DATA_VALUE={0xf8, 0x1, "870406ff6cfe38dde1be441aab2d484880c8619c5d000ba55aa413456cd4c6c28737ef54a2b63d8470481682afb21701e5e9b23f2349eef4fd2972fd2a50930c461a1c8f554454348e4f31ca86119d00cbf27bf515fd7b305f7d5edbfa8ff481cf73880cea80774dec13a9c02b65ab269d0dc234805a9cdf2d58e393cda2bccb5dc010966a59177b4a69993e20e89f9f504b5ee0abd58e8a917e7286771cabf2aa05b886e0e2e060bcc0954ffac7aaabbf6c92e7456cb1cf631ee4d9cbaf50f0e3a48a8745885dbe6e1ff025a7d65c61041c1c2deabe1c2aa7ed5a6803ad406e1c177f787bab053f24eab3f30a5cd3fdc67389b4"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0x64, 0x6, 0x1, 0x0, "cbdd6761a4668b072831b88e0f101a5709b018b728b1bfd0a4f6d0ac4a5dfc29f113a072ce1d917370265f0bb9cec3255bdb433292d3bff55a26e7c8408290077a44c61911338388a89abdaddd8a422712d096bc85602ae902cf6763d4727ae9"}, @NFTA_SET_ELEM_DATA={0x50, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0xda, 0x6, 0x1, 0x0, "6eb58b8aba07681f57a169e0f74f24b29fbf963f162b79936a9ec68a2ca746b6bef2a337d63c158f75cc30ab00430fbb65bc702362fb697ccb5eb959467ccb421c84cf749728277f24116d73538b03819420dc9cf56ad0b6cc104d3467dadfa12a75a15c5cab2f3b6408381e7a7948640a6014724b6977715280d8cacc118d48b9c847fa602653c6795f71c5be5f72465a7c035009371bade92f9ccc251503904b23b221f224091912f6ea32bd754a196f35dedc8c065e71f77dbfd39a062bed508d140400b2b799f9796fa7249b41b2cf66851e75aa"}, @NFTA_SET_ELEM_KEY_END={0x198, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4c, 0x1, "58ec8a49955d95c0d929b521721465b70fa3fd09ebe629f5a604458e27e8588392925db92895ff57a2d62693896085c2bf9a150e05d6e89bb33daee133e8537ec6405e916a9cf79d"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x79, 0x1, "283c14e511e656cdbdd7c3781bfdb0eec806c1adb029cc9032422b6b845ce21b9ab17adbf9644d83a02a4f2d2003d8d161a4350898472cc740394ce4dd3db44f1cc8a8f29e6f67163be7fed32f4467aae2a6053c97c02c341dd89a17cd98fead46e83bebc8f3392900f3b36e3dad7535570e20dc23"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_KEY={0x310, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x8c, 0x1, "5ef1147dda30a197f8aefe9a9fd84f133d1574a127c37f682af178255422d9d3704f5962771b934fc8bf55f16eb40912ac0ce7a5aca41651c6f54049623f8f6c999ac6b213e08407f139a81857f8d17192cc0318c7f8f819ddca953e8ace12a7418ed285dbf9e67f787bcd6eb97ec1f6ac85c2523614e291a1754c9dfcaeedf6602726aaf65cd8c3"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xaa, 0x1, "33df64cb9101558aec0a7902cb8d4720f968dc78acbfa2b913a4a612d8b6b27545b8efff1eebb930fc133696f8a05c00f1dea736924cbaee832f7134cbc0dbf439f12bf1761b7609b6dc803c710de02929d0d27ce2a1534df8b11646e2b80c749952fc08067ff822d4f5cbd766f6efd79f0db7e814d8174ce33969e0649936a21a0985530c1f724d5cfb0cfff49066065e363a78a7914712d17d74cc8117cf8003a297809a44"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x1d, 0x1, "e7f605ac4835a57288dcf93529e2298da5b4206190621f8009"}, @NFTA_DATA_VALUE={0x89, 0x1, "1fd91fcf1290d789b03866f0e816f754db94e7a3d10e1b99fb3da2eed3f6753754e243b758b41124036b2c74b06f31c9bb3ab91abc9ebb6ff9414a670c3e9c77d2a209e5ba732053fc6c99b4d6b69d71144b23075beb3aaa1799ca0d0af6217b5a353442003b135efa80dacd0ad4eca3c97314aa0498aadd535f9d3703f8b35b7361782b13"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xab, 0x1, "9851bcdc8ac1b00bd66e8eb5d32c8b0caf2e0def785759d7969ba5f91f195954d739e003383c19ce8cabe4d077e08af182ee1dfcc1131ebb4fec042142c42374adb10467300e8900b362ae276c41ab756ed639adcac7aab6cda5793c8b04c1476f2a50b811eebd108b5703fb2acc7e3621d98518d21278f55c81b1bd06ee746caac347c3b15235736066c3784f1cda3bd0357fa7628d3a3f1bf2fe034e97349f9a351a88deb2c0"}]}, @NFTA_SET_ELEM_DATA={0xe8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5f, 0x1, "e96cf0f91b86ab37dec31b0aa8fbcbe6af9b297d0a900000000000000010e0d8d9b992d9e4a55e0c297790d4ec177591dfcbd7bb3c16e3c39a6d6f17078b03c982384325b1c26a3ff206f35cd067d0fe8a90f01172ce836e2a098b"}, @NFTA_DATA_VALUE={0x30, 0x1, "b1157beca182f1e4986cb0acc77dbd0e36194829d6ba37eef2f1d1309f368f45549d8a3822d40ba406a56cab"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x3e, 0x1, "a2fa1b86754095db99ba005228e04c0d966d2bc1ba5fafe750a1fc54a4df88b48bba58b395e4e97fbfd93b85e436882414fbb183c32401b4cd0f"}]}, @NFTA_SET_ELEM_USERDATA={0x29, 0x6, 0x1, 0x0, "46ee58393c723e2a11d89df80353d10cd1e24b68a2ac1d10fd50710b1273ceda3c8281559f"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x12e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x30, 0x7, 0x0, 0x1, @synproxy={{0xd}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x401}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x190, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc2, 0x1, "77db30d11e6e9a0367722ba1bd6ccee978fdc9519d620e6a1a39a729150f560d5ff4af9c09712db27e7e98857a9612bdb824e990c83adcaeeada4af402ca1836aa0dfa5e1e080025e68e146b9ca70edb1e8e95132010a884ed5291f17531c2492193774f07eea46f55087aad8d75ede3c9a56ca5d4fbcf01cd05aad5b6cde3d4590e67616e04877ccb09afc53b8584aed9b5779357e5b809cd35758ba24072065862e524ef894d4e122108e547c759ce49ff2589f31acd47bb77c0ad7ea7"}, @NFTA_DATA_VALUE={0xb0, 0x1, "e64eadbc2d1a5a73c11dfc2e18a08892496a814be898061d5aab72ee60295611488cc7e12e3815ab960a6622a99d0de213a86ce54eb2b1453cbcbf7690d30a8848918b5cec24d7fd26300e3e75cfca09d79a1f0c34a9da152de05ae1fa69cef26f62e614703b005e72abdd87cb40f9d466b3d0dd79256f8a7ac4dc55ecf44aa36f5ff09ed36a0cdda27265878e0be639ed1058fc75439163acc899e430a9f0696c3606a7382a4058515ea86c"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}]}]}, @NFTA_SET_ELEM_DATA={0x110c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7e, 0x1, "94a38836c8b3838d809cc58ea6de4e39359eb41d5d8a27500e590357d91fd8044c0694b24691b430591ded03fd6f0b5061893c2b8578e6b7139719f8fed837c3bb875bd6302f33496bf2b3fa63e32ad72f84db5625a8e77c71351d6be81f9529c2859f4b3a9982b343f94261dda233ca3d287d67436a420128ea"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xf, 0x1, "b8e2564badaa845ef7ea39"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x1488, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xb5dc}, @NFTA_SET_ELEM_DATA={0x7c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "cf2493"}, @NFTA_DATA_VALUE={0x6d, 0x1, "3690ddacd1216e5781ed4bdd3beb70e476a4ea64885bedf95e45747cf2bfb110fdcc0089e06d5cc029dcc9bc5a3ffcb6b5a6e6500dc53c60210568db881d59175b948001e6d2d4c2d890f07b393a1280b396c5d3e4831db497671bd1a50b1fc662c16dd2c27c73b29c"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xe4, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x3c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xf}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x60, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x41}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xa4}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xea35}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_QUOTA_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, @NFTA_SET_ELEM_DATA={0x1248, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5d, 0x1, "9013286e49d56d8a08fb40b89f9818a17ba4c43b521f519a98193aafc24899ec75bf9343c3645a8b6c95fdf27e344fae3d98973c53a7c18c1c7b05ddb9049e12f87c6a5338fc3151777ec779350f171c517203edaf7369eefe"}, @NFTA_DATA_VALUE={0xbb, 0x1, "28217ff47a8fd1e03e3d5fd4984e6bb5210be5b70a99557478871b00d201f3a92ff222fdca4a4b61414c9b9c2e1c4999b1faf0d4ff234103044314a183ed57f2814bb529ccf64a769ca40cd915cd8b37a370432284f8ce152a11bce0bbea6cbb1c2b1a0cf37afeaa258c42ad7561085582cc79ef877b903b7ad6ad41541a971d0e5cc6492bb7133b3ec624738d8cde68cf93e147e58cf92a8ec55492e10e349f21f2aeb9afb71638c1b80dbd68dfc4d8e27cc55cf75574"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xf, 0x1, "717fafd43f011180617ad9"}, @NFTA_DATA_VALUE={0x1004, 0x1, "2f1358d289e97c8fbe26605f3bd44626ad78f8e7071d651886fa4c773d56dade75cdcd814a938784b8eeed7a01b16f6fb4cae360f2d424a77cd28969b8730088b0a5753ada4989d2957e675ccbf6c18e1cc44cd8acf93f7d970709001ab6fe6994f55367cb8cb2a52afda808d8b246a632eb1deea474a0e1df4b455a1c727aedc25464296b47a66fb614e410ecc039063c403c31fa5d46237de7c798e675d24630224874cc81070bda8688e00c19ecbddd3271193cce5bd710677e29a77e8b4cb295512eb524c7ee9ae0954b776dcef2ad1dc4ef4f560859ebc19cfa6e3f853965ca209b3287bd870ec914c3075561031ac89c417fb4317758663edb54747ab9677becbab8d68cac867ba035a37c336cd2cd0b814d52b3e30f1a7ff173644390fc1b0301e347d605b09f9cc81c02912dfdc768659a84434acd52db623a94f533d30f5550f6efc7a3dccc80c60250af5330713191b5df2642d634905fd93649f98b4e15c4577372748dae235a721da4aedcfee3526e4f5fcebee225c988cc2dd678122a5a4d780def4d946c5140d37d134236cceb456b19a7626044d632e98b84529d8188cc968c636d1699c288bb74f58733278c896e05f562cd08d39536e6e30753cf162516e42863480aee6cca02831bc7bf63eb96e0b25b55fdc066836048f158425132fdcb6a61404468745dc601caa045f74974dcd71e2bd7718a5180191656066266f242be55c136d1bd9b5a06b2910ab10f4bb89be1259d92e45c2beb830a8ec38e0bba92a7e7fdfbb6cf5c99040a915254dc0718804d8661d71899fd596581398f916bc42e844349c5450574e3a74e57617651427cfd148d490f64de678844bb7b316ee5693793cc34205df67284361ce1bd8bf96fda2661b14cfb197ba97f2ee5f6d418bdac5c277bf83ce1a05b731c2f722089c1d6fe25c5405c2db8b870a735ce3dae26cabc0fcdf378a7489e762e810c14236a7616b379872509eadb9af3193b1330f20bd5e086dcdc19cf2541738ac6f7c474a9a32761e6b7c4d87ff12aaa910597c73f66e980a08a9d882d893caf7820495129d92bde46a4f62412151179507fb65ea70ce48b760e5d4c88704331c1ca5225d4eade5048e70c9c04c0bfd6d639527b767114ffb24fd90848fadd1a9764a65444e26c3a3c09c16325a5c4d9116415e294108eb7391bb4c5f5a701eec009c32a6c5f97bd3ffe6df0cf62072dee22d7bd1d33b8097d7c36ac7209910d2e157e00e829063178b0591275851964b8c33c980ba242644279f9e0e30f19b32840a16a980e96bb712b0ff0f6ac690bf715fc56429d007574948c9fe94925865b1114e2b729954616ed04f65d62cea1f481a2d18dd188d11d350207ce2e08427809d21218d55eadb3b3552bf97f8fec97b54458e1fae3fbdefafafba46b3695c33967f70b1698d30b24dc3b0ab656d33bdb8e5febec61e6533c2c2a4b9f9e7f7e46e283667ba21b725916b01c9e965916ea2e9b2fc257a852cc02d35b67ac55b68994a87836d79860fa41314b9a2cdae601c6e798ad56c9013dd462a81cee38b6e98241b9069ae03753320bcc580df3307e5f84603e1c331746b1fffa807152e68904fc5baf1714356800413a36989cc8c0bc65fde4e0d68d11b463a3c7daf66bd143891f6d7a5bfd40d35e621d9eab1fed6e25aee1d3dcc1e60eb73f4d0edf5c3992fa6bcfe610da53fb15e3a4c557f5417a4c76835eb5a30d5f892c7a448b2dedf07cf8ef83d5cc37b1ab86fd13fe1790c77e6e3f5156e99553b19f16af020c21761b5706bf24580cb2b26b4ba005d3725f32b31be38c4cb36d7bb2383862e75f4605769f65e80b5c2608c43fb8d993ae38ed5947017ff88b293bf28f295c50da5ed73e57233e6017a482c586113e5b4d50d40e62b77823fe836ebb8849a5fb2f53f0c0c48b9c6ef861e777ba953fb86d472a4d9e9211ef959fba7c0f89cfbe83a3336f3f8e651a23e2b5bfba57488c38057a6d70afc9640e71483b17502f016f1501476a1f1ce04f75da0968a1ec5a81b3d89aad24b477b205c906630b5fb5e218db84469e13da2fd6dd19467bfd0234f7af2d23d9648d10ff6e1e75b2f36c734163757cb5d665fc1fd40f46dffc4e6a86fc1e3b53c64fc51895bba0b13c3fb8fa5f8d05fbc281f8854a5d0822a6170877b9b8587c34b8e5ab9cfc91d2fc17e855175b4961fa7a50a9cbdd80d92ce38931d3d6ff70831e0d64f536cd8130e366c050c3b7f4b5324db722bb827bc012953340d2225202395a1249edfc1cd577c3455beaa735c39cff398d25115b8581898f3edc22aaded89a22ad86163a14859af1aea5f0b9056b0646bb5813689fb9ec1ed3f5c7e7e1321df73e1d6c100dd120e17eb145080fc4a540bce268f23731c857aeae9e33205ab4b21ef6f8a157d5ddc26ddf358d5c07a9bed12113573cdd14677919a179b6598b2ed15e8a9961860630525e44380fcc8d513aa4b7117bb429d83f48555243e81a60c39cea3d4bce92f3a56a9996510623247ab25a4cd029addda94161e1bda890b0c5986be77fe0aa02e3889f685688b4fa8f41c1e8c73d9134cb9bb9fe0407d9dad646220c071ad40629c359d53cbacfb9ebf349cc98c0aae52f8f140ddd4a85fe56396b8487e289b08a469146ab0eeb0c7e958d01f048d7f5f876ce3482760a7aebc55d7443e4c78e05dd420bb63bffa2e7ec3eefcdc3be884bf6a76fb2909442394b8270b97a18c45d2a190647f9d6a0bcc42eaa6b5b21f5f0e069bd2c0d4814fb452c0dee6685b81772393aa218bc9b2ad88c3759c41d07100c71467df2a6643ae0abe315bf8147d7b8a80794d93b41ee8bb5d2259a8c819ec20e0e9c1d3ed68d52f5e713ebc92a20a9677232925df4692b3dd697cd816a8e538f4d0d030bec2addbeb901b3428962efdf74bbec7f6ec90c1368e9b3d75930066203f66788221904f4b4553a7ff5aa485090640126aee91d251f5a71a1d02564161f2502d365758ba4860c51bb0972348ad78fd6d0d05b5f5b129c905a4268e2c3c6ff90ba88090f678a18d89dee5042d8c8aed220d5586b9f8a57cd169b65054ec529c39ff5d8b56e6ed234830e4b02ea5ca1ff48b7fdbbc742824ead58967f7d1b3fa20c208db8e104212ea17cdf97162c5a2b47d5390da1b18f78f5c4943a1d18123c3b69214012a0bdf3b6ccad01c676b2833862bd4e494b9d02dd553d9f9f893ab2d0795e5a9cc3a3467c0a32e3cb1dd3425dfbb8f6442c19db4277d8bfdd87cce7457beb61cc94ac758fef49c3e1eb54b6c2dc0d3e34fa97161abba2046896cd471a50cd54a575eff0e429b8753e71d083b8c2c7d01670687f13be3e009b93787f61ea4ad35a71eded65463abefa672548264d17cfd875b0ba2f644ad415477f20869568c747dbf246933dcb074b1a4fb38a49c9caf82ec7aa0d69890a41dccf88adf71b7a77a7a52bd33f5ebfdb8a80f97d8ae82282072f7d19b39e5f10c8a627fd9ef069404f250bff379f28c628292baf8ab51bbad14cf9239af3aecb98a364a6339b9781e4965606fba2d645d35312df22565f30e0637b7b01c25470780746c571ad3fbe02c5b6c73a7f56a5e78311528d3e8d04081fc43b6ceb9ca1f72b1b565940e40433939e945aea12f97fa088826f5377992559c97da0fbbb0a5edefb1afcbcb8224ab9195df2734a0cfc6f098908db8226ca107c7182ebc683db8f0e594614bcb8295b32a93468a572cd26d573ca1587aaf23e6e57f39aca0b086b3135512bd689d928f24392532a48d134fe8f50a17c30318ec9a0c3442e0b4181d7d6a34dbe7f4e6946a0b7b1da9ba5ddf63696154199d21946fcf9a475df008d535ef3168da98e59eb878ce72937a09f77f759fe4c7cdcdf804e681a63efc5b8e3b3b8991da6d3a9eae874dccb767a6bc43afe9f3b22d8b2acf26c01f09c6f97f307b8d8c5ce0314e78ac704adb012784ffdc32d74824051720f5dbafd72e5898f31e04620922636c0411a0402c8fb2273f19067e19693ab89622894072a0cbcdbf2a3b0661857190f962aa1c132bce2165ed84a0504bf4d976e9a9112d446ae4083e8637846ca118c87a466b7e4561ded09123c59e9d1059daa82f3452d3eb56b515f2ce21c5668ce5da1b77bb560bf2d0d42905fd121ef42ade697bcc016194e4f5ca447f11f2172f35938829fdbc53a9a9d74632ee8cd7c05deb84c6e13243fe0816a6fb386c07e8d36b79fdc0549b4a176c2ee0259488850d260fd71b6c1260c602145276e2372be1970667d3e79432d7d83924c6d7eb653727f1da8450218bb567917e2c70486eb512cdc7b1d69157ef0db5acdfd802d9a28271476573a76eeee2c6dc3a74c51aaaf8581269c103819e7fc01f1de1f5a5a35c8d09b6c60c9a68c28e8c62ceab28404ffdada7e1e9bfe4803e0467cd39410597e12393a02a7880b170808c97514d2eef137fa575801cec2756780658f4cf9724007ae1072734649f7408c7c6f99f89495edc4cdc737dba4d6c5087520e56e595cc1da935bda2acafbb2aa8b3b4d352130a3b83020a3572bdfcb12029b92f5df20bc5d2fe91f80ae5a2c8c8a1a77b16d842a1a94e9980af6081562f1f517722700c3a747367e06cc4c4cc82b4c8c1aa3fca9cfa5b55077aedc5176b538c43602477ba7ff1550e67a3c02e0b5b41e6e054c1ac2863c38afd09813e9fb0d007f8fc60cdd0870c708947e84e926e807b982515eb515ce32cfed3aa84aa3289ab9c5127547de80c4f1b304a2d49bc908cf36003f4a06309ac845c84ac178d8dc1e85f49c4a72712654d70ed1e35a645d5c14062f25b28a006ab68099495a3c85718dec631c83e689e114e2088eb726d167fd750903d1846304ae2b8dd33705d2c28d9cc0f981a9b9db8b0bef1c2184b70f101a8e7dbcaabab275cfff72f722a9e8c63305ea6770a48bbba32696238e22375b9605137b1cf231bd0844fe9228c4f9a4b2b169cf003af736d9246bcabf53b829a3b623667544c1962b1e6eb86ef972b160bdc0e8f404ad1cf6cd7197282b1d6f85e7566d39b0ed5bdd6aeaad32bafd2652ba2ee7c51cba1a404b9aa97a9b37362ea21126bc113ecb8380de32ae38d91a7fc315763cdb92f03262176e16e7b3292b90b3c021ad427445501052521d7a4e54a9854c1fecf1415caa11c5fec42e4b626fb9b387f0162f31dbcf6388fe8683297c865f2878ee9724444095abe634f70e12ff2cbc0070dd16d3e7ad11810630cd1075639a2aef2c96f1b9bee98ad6c268763e181ca801de6c516befb695108e2354c8806433c5c97ed8c9e80bf598dafd2e5c42683f660123238b256f87957762451685ee633c29fd94c16d2c20598f91777f3006dbdfcefce19a8caf2eac15eb7d4a7f409f0ebc49d6a9a906a31aa35518ede18b4b2f8ce708d00c2a1d0b3e2be216408dba5e48876af40524e32781516c4f1880cf13c22fa33c8fc1ecc238f9d6ea48a4c3dd8b174bab2abec9dcd6c44e68cac7b38a6e42a81850324ce9fba4d38fc91008277e772505c471c022c769172fc185cebd895546a61fc67d54f4573f78297b8f8494b31b01b86b4281d8e1df925592f76529406ee7692f64ab466c55f17ff1adb3747fea6fb0b6e1b7076f1816a6fe6370b876576a929b0810cb5eb2e8b03e717f0faf4faccf4d13a916be49065280cee94662c732056d7d82843d19b243cc4a544809b1dab2f7d7850b8165169ae9f31168b6d1ccc740eeadf54f8bf829e9e267ebbd19031e43bf3fc7a3693af539f314de"}, @NFTA_DATA_VALUE={0xf2, 0x1, "694ea83f805e851707d3b27e2c5e2f6178a1433f5e3333be77678c85fc1dc91e88da32ba3c4f537806ece79b6dfce37a1666ef1d3c5f8c655909a986041a24307b3c9384375ccf74cf803cb340407b50bb6ee2fb40c979fe6304e962d3387f6ee7748298fef4de3fe9fed4eff020bafdb483976865353bb95a0815914db0f1445c019bf656ce3024e8988b58ddfe50e38dd6d72015122d3322f8c48f3dc1cd30300cb0f4653692efa4cc62881d6956c953733b176670a155a0b1eb7fb334ced396d39345a82ecb6f660d8ba35cdeeba17590973d466e433c286a1cf05fec33fd07531bf7c9b1c5d91fa8596f90b6"}]}, @NFTA_SET_ELEM_DATA={0xc4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xa7, 0x1, "d9c1ecc8677d0582e99eeb192af63ea49ce6c5d9dbe659c54d9770e874fb4ef3283d22ad1a52b2eb432b334602ce81271d2a908f02e43a9c7dff9a22a2df53300abd3fd3d0558165c3a8ff00b7890cc06b5e868ee751f93bcd83d847eb6ede67f71ba7ef38e1d1b07fc4f10219a1107fb10d7d35ae5982b10af819447254c1bc0b79ce1b204f03c11d82bb932a41a3a8104a3ade32aa67e92616a48122f31d2104f7ca"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}]}]}, 0x397c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002c0007012bbd7000ffdbc025087c0000080001800400dd80080003"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f00000003c0)=0x1) 917.661306ms ago: executing program 4 (id=4506): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@call={0x85, 0x0, 0x0, 0xc}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x84}}, {0x95, 0x0, 0x70}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @sock_ops=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x91) 834.803291ms ago: executing program 3 (id=4507): unshare(0x26020480) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x44000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r0}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 834.637071ms ago: executing program 4 (id=4508): socket(0x10, 0x803, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000406240012800b0001006970766c616e0000140002800600020001000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0fe792d55cd0bc2fff760cecc22ecf7230d3ceb1dd173179c65257db6d7ab76465e48ebafd045b"], 0x54}}, 0x0) 628.942126ms ago: executing program 3 (id=4509): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x8, &(0x7f0000000680)=""/203, &(0x7f0000000240)=0xcb) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0xa, 0xb, 0x2, 0x5, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_address={0x3, 0x17, 0x3c9a5253c36338db, 0x0, 0x0, @in={0x2, 0x4e21, @remote}}]}, 0x28}}, 0x20008004) syz_emit_ethernet(0x36, &(0x7f00000007c0)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "1cc825", 0x0, 0x3c, 0x1, @dev={0xfe, 0x80, '\x00', 0xb}, @local}}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="b702000024000000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000001294fba0ed5020e6474ac921fee1f6d8ad6a80c0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57abb19700f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d58625cf9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333aab1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807970727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486d65ceec8bcaffbe800a041a378b40dc9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3c1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cf471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d75007606000000b2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a082c5242c8fa7f01e0873c9c5c604108ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a0338c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b198246d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4c98274eeb666aa1f5fcf91990cf0dcfef9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e9101734a9e9c6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000000de00d23dd63b7761d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a38e7868dc32e132124ecf52327631b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f2a70d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd038c1817f0d4652a29353b05b16b3c5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df625a47bade4ba41ee014184395a479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2a65246779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04edac11aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f41253a8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd020000000000000000000000d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a244609ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e7a5dd7503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d58bb5603895f265685fdd11263c946f8ef3ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0fb92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c8e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a18668298a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c1423cd597345253baa1537eb6962a3ce1fe5d5ab46938e8fb23fa7047bc59c4345e912585a9adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cfa48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89f11a300510776934e87bb3c21394f46954a012b2a3b0760f1bad1dbd6b466ed7153bd18ee2c0b2353c38df9e0782eb"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x200) 628.489966ms ago: executing program 4 (id=4510): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r4, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0xe0, 0x4, 0x40, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x7, 0xffffffff, 0x8c7}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x5}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x9c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000880)=[0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0], 0x0, 0x72, &(0x7f0000000900)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0xf5, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0x9c, r4, 0x600, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x41}, 0x40) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r1, @ANYBLOB="20005e800400010008000700b4030000080005002a000004080006"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0xa, 0xfff1}, {0xffe0, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x1, 0xa, 0x4, 0x6, 0xc, 0x18, 0x1, 0x3, 0x4, {0x7ff, 0xffffffff, 0x9, 0x800, 0x8704, 0x27000001}}}}]}, 0x78}}, 0x840) sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r14, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xf, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa}}]}}]}, 0x44}}, 0x20000000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000d40)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0xe7, 0x8, 0xfff, 0x50a, 0xe8, 0x3000, 0x6}, &(0x7f0000000e00)=0x9c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r12, 0x84, 0xf, &(0x7f0000000e40)={r15, @in={{0x2, 0x4e24, @remote}}, 0x7fffffff, 0x7, 0x10001, 0x9}, &(0x7f0000000f00)=0x98) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0x0, 0xa, 0x148, 0x0, 0x60, 0x3c8, 0x2a8, 0x2a8, 0x3c8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x330, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x330, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x60, './file0\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x1, 0x2}, {0x0, 0x1, 0x3}, {0xffffffffffffffff, 0x6, 0x3}, 0x5, 0x401}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x44}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x20000000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4c0) close(r11) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x30, 0xffffffffffffffff, 0x80000000) 620.342357ms ago: executing program 2 (id=4511): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r0 = socket$qrtr(0x2a, 0x2, 0x0) writev(r0, &(0x7f0000000000), 0x74) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWSET={0x15c, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x108, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_CONCAT={0xfc, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x47001874}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1b29}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3849}]}]}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6f}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x884c}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x44, 0x18, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_DELTABLE={0x1c, 0x2, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0xa4, 0x5, 0xa, 0xc00, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x54f}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_DELTABLE={0x68, 0x2, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x42, 0x2, 0x1, 0x0, 0x6}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3f0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000854) 548.334901ms ago: executing program 3 (id=4512): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{}, [@netrom, @null, @rose, @netrom, @bcast, @default, @remote, @bcast]}, &(0x7f0000000080)=0x48, 0x1000) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x7, 'syz0\x00', @default, 0x67, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null]}) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000140)={'TPROXY\x00'}, &(0x7f0000000180)=0x1e) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$XFS_IOC_GETBMAPX(r3, 0xc0205838, &(0x7f00000001c0)={0x7, 0xd, 0xc, 0x2, 0x5, 0x3f, 0x5}) (async) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f0000000240)={0x2, [0x0, 0x0]}) (async) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async, rerun: 32) r5 = accept4(r2, 0x0, &(0x7f0000000300), 0x80000) (async, rerun: 32) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r6, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x80, 0x63}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000000}, 0x8851) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000004c0)={0x4, 0xa, 0x8001, 0xfffffffe, 0x0}, &(0x7f0000000500)=0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000540)={r8, 0xc7, "a76c887ca7eb8927a2f2842a15ed28541335878b1bf6f9a4c2e26c5aa6607a2a696bca3a68249cd9f36253e6150bc8447146825f443a26b0afb2eeeaea20f0a0dfb44ab00f1404c55efda4140522287289dbe3304c2d5a70c5981af924f4fa938887873b2acff537657b2ee1c1b51f4b906017c5276f7762f2cf003b5fad4e68cfc98e77be0201f88ddf22a81592a97c3c4cf98e42ad99003f3ff56c5772ca396ab60da3641e5179a772a3665cfa2af5bdec10774247adcd5eb19c1be1237435b5bc1cbb20bc2b"}, &(0x7f0000000640)=0xcf) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)={0x150, r11, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x43f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1378}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xab}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb9a6c57}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x80000}, 0x1) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000940)=[0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0], 0x0, 0xea, &(0x7f00000009c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0xa8, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000c40)={@ipv4={'\x00', '\xff\xff', @empty}, 0x62, r12}) (async) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000c80)={'xfrm0\x00', {0x2, 0x0, @dev}}) (async) r13 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r13, &(0x7f0000000cc0)=0x1, 0x7fffffff) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000d00), 0xffffffffffffffff) (async) pipe(&(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = openat$cgroup_ro(r15, &(0x7f0000000d80)='memory.swap.current\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r16, 0x84, 0x77, &(0x7f0000000dc0)={r9, 0x3, 0x6, [0x8, 0xfbff, 0x8000, 0xffff, 0x804d, 0x1]}, &(0x7f0000000e00)=0x14) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r14, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x28, r6, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x64}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40895) (async) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x1c}}, 0x20000000) 389.215004ms ago: executing program 3 (id=4513): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) 308.661057ms ago: executing program 4 (id=4514): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0xcb, &(0x7f0000000000)=0x6, 0x4) r3 = socket$can_j1939(0x1d, 0x2, 0x7) readv(r3, &(0x7f00000002c0), 0x44) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, 0x0, 0x78) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003b00)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x262, @private0, 0x5}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000340)="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", 0xfc}, {&(0x7f0000000500)="e920dc9b50b2bafda8e096e8ec7c398f2d12e89b416b676a902578b6cdddedc228d7e5ea01a066c5e132752c76f9e5d043e7d60a79661b9e6877bf50f5666ac83b84ae2fa925e444101ec73feaddd413d455069bc600e69b582c2a405821f696b955758fd6abcf7c22821ee39987bdb85ac02bdc8ce4363e2f344c7d75453170dbd9b0c2fde36eea0f83a2d0af6d9b9a46a188d1561ca788a0b8e994563b5db8ab87e5a9e4c210689da3c7dbe5484ea016b075e0e9d837623b8c78163de23b311fb3ed5f8b5a401ed115767454e07ae5dfb4d67840ed0c6730e4849fe564ddd19e6bc5d23dd1e78f49984083580122ad", 0xf0}], 0x2}}, {{&(0x7f0000000180)={0xa, 0x4e21, 0x0, @remote, 0x80000001}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000240)="f42740", 0x3}, {&(0x7f0000000600)="2db89e5540acb36d8845b44455793804f04b42e532868afb823cfded01b4aa8062ddd24e46f5df326d2d3ff9ded1b74ceb876e6abd865a7ee37bfba5353e54caa46db9e2278805b510f9f68144d0ecb8bfc448384739b90bad21b84611949c0aa0b3153609ed1132fbbf3fe6fed97d3f1fe284d783cdf22c0ed2885c1d534da838616650e93f7370010f257c6e8522a7704050a5b06bb0e6817d124913be4302e304468d2549ecd09d19a514", 0xac}, {&(0x7f00000002c0)="a99f660dd87eb3fdda4e0c0ed7d68c0a195d", 0x12}, {&(0x7f00000006c0)="9f7a5a89e194b8aa7108176cfca6a82d40d36161c2f395fcee1f3d0fb95638bdf4e06b07a95989a8ae811cf7e19c10dae3ce2670b92569c9f94ba7e191b92522e3b06113c863616b185e0af07caab561b2453ba09429c1df1cc46f99a090495b2d16df46f6eceaace637614e853798fc503d8b6292eadaedca51339e5469a23dc6e945e93b91f41d951f5e3165f52073e0cf689c9dfc762f1172e3d4540130afa2d75f31c27afea6093a6c82f4a2547bfcea1f875f71b824b741c053499948a075ec45", 0xc3}, {&(0x7f0000000440)="39f225", 0x3}, {&(0x7f00000007c0)="d7e1864a95f95d3bb0ebecf98f42da2843364136410997da26d99f09e0cd14b892b9af150a48cb0bb436a162ccabb63e862b4b4317aee74a57c3523f48b266badc5b0cf1aeaefefc5991015444b7aa9f3e52c24fb5e08b4af6192ef2b599a623b89e194925918433e28fa2d848c53192d7ca74483c1f5b9f87f607a5fb19ff95411c146540b4c5d8881d44db50f712e068bc98c1c8e32abf407a8e9fb1ba2f346bdd6130ea77ae20ca4eed0d59db15e0b135289e010197b62ed40642567ccf703892f207632ee14eed30b934e8c3cb8ce9044b6020933df1e15241cba94a76d31f96e762362cd3e16ebf68ff5bb4bacf5fc7f19b71dc1c8db49f6b", 0xfb}, {&(0x7f00000008c0)="8dabdbb8030526d06b292d77a86f3079237c6990c4add39baf6d35a76d31ca7bfa99ec8b6f8870fa1444fbdf1fb09e7dd7b56ca7f0b8031b7bc7cbf31d9f3b49ead6200b02cf1109daf61de0207093955a9e1c42acf530221fff0c7e0d70d9665f1ae08ff772ba65c60cc7096342b1", 0x6f}], 0x7, &(0x7f0000000a00)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @dstopts={{0x1f8, 0x29, 0x37, {0x11, 0x3c, '\x00', [@ra={0x5, 0x2, 0x3ff}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x44, 0xed, "b3d5777cbeeecae98aa49b5511567e587a53f79c8e76d2f67cc20f0c6d277250db979dff8dfd5e612a5db5d6b8c542a9b24e9cd293f3b348369f65fea55b34d21ba3325d8f18e3176468f114781573c9cd586c4f37bc034007f8c342d8fc3eaf778f8c35e8290de1157ef5caef6bbaa6bb21953e8e8fab89728904a47d3b374d6aabd67fa3ae504f9b1d3a1160d02bd7bffa8529eb0a00cc57c122eca323a2db388318d5e0fc9d346f68ab78bb56bb56fa56d345c96a913180a28d41ef8d5ed0eaf8789db2b48ea25122c5387c5240ede66713440fc5b12e43d71536885e1e1658eeea6f9e8499f5fc4428baa2"}, @jumbo={0xc2, 0x4, 0xed8}, @generic={0x8, 0xde, "9797386f950b6d8e07a361495fa0b820743b06e1c82c1564128387a4edc0e7958961e71c2b3f61c008aac1f10b4c2bc8c7fa47e33c98188c939f7d3ec3f58a7e9dcbc6f629edc9a5d31c05ce602ee1d01b744ca942e318be4c4ef5c699dc8c27353d18ba65c52a4c9db4752f97c5446fb36c837dd1e2b1b79a4574088558f8d0b9a7d774567e015a1b948dbdea2438bb2c199fab7780c91a8270e58280703e33b19a9627f9e0dda5d96093495c93c8c0b0577aa31a0e446ea879ec736ed249267fe8cea3c604bfede7fac2455060dc9ffb937758294318ad4e7b2dc0aa36"}, @ra={0x5, 0x2, 0x6}]}}}, @dstopts_2292={{0xa8, 0x29, 0x4, {0x87, 0x11, '\x00', [@hao={0xc9, 0x10, @empty}, @generic={0x6, 0x76, "8e26b9895ab900ff1339c37cdaa3328e6f68aceb37dc5064c0e5b181dda31646df6f71cca9e83259bc1a057f2d3c456a237925b2ee3983b3e380d349b7d6e98a0ff99bd091008f64e407872473749015c26e9e4be951635df1a390c8250a0d8dac0e552eb45b2cefa6f55826bdce49c42500d2e3a7d7"}]}}}, @rthdrdstopts={{0x40, 0x29, 0x37, {0x3b, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0xffff}, @jumbo={0xc2, 0x4, 0x9}, @jumbo={0xc2, 0x4, 0x42f}, @ra={0x5, 0x2, 0x4}, @ra={0x5, 0x2, 0x7}, @enc_lim={0x4, 0x1, 0x7}, @pad1, @ra={0x5, 0x2, 0x4}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r1}}}], 0x330}}, {{&(0x7f0000000d40)={0xa, 0x4e24, 0x1, @local, 0xd0}, 0x1c, &(0x7f0000001000)=[{&(0x7f0000000d80)="6f28e606d902", 0x6}, {&(0x7f0000000dc0)="f7e23d5e3e03cd3a0a64e154936a765984c6eace9b14ec653e4ed8cdf269fce99868d20b065f685636522f02bcc2b3d2dff820333cf4de5d6d224c6f2257bdca22ac77cf907fd3d4fa05d439d33e1db87fdea6b0721051c89c8fe39223006ffa0af892386c466d13a358af323fd6e1321198e96bdef1600fc4d3faad7d35c68d45b81e86eb0c76e174662c53075e59a11c18ec5381285f5e79a3991a9d5dd215a48c8f5f16cc62c4b011f03b65e4672f7ce1510340bc6c66ccbc4fb8b443", 0xbe}, {&(0x7f0000000ec0)}, {&(0x7f0000000f80)="a1b13b6f03db6a8653f9b436d8efc78c59f2e203c5afa870e3ced93e3e3baa06ddfd9ed45fcc75a459120ae74645046e61a795df4408a82fd38b16ed541eeae25f61244df79255f1dbb6eb8945443868f089588c4029421c34b058e0d4c513f4f409af32e2c6", 0x66}], 0x4, &(0x7f0000001180)=[@hopopts_2292={{0xf0, 0x29, 0x36, {0x1d, 0x1b, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @ra={0x5, 0x2, 0x9}, @generic={0x5, 0xc9, "1ee72e9f6b8026914c049fc1530ddf4cf4098763d278142316c99ad3963beea5bb5971a8649f19f64a5398520132f7d3ff6c901710ea5e1abc664e1a5cb2ba02115fc23c38ec02f461cfee8e767a9da8701cf06314325fda8a68e42d89c78b7aefbdc4c34b720659159efe9d14bda6e89dda973cd3e216f993c5643c5b14048dc03524325ab98c49bdc632cd8cd5b087d5ed2f4e61488dd3c21c0bf3a2117304288262d79aa9ad451ca2175cf6ba88ac8e70af2527680487eb360b56414ffc009a14dc4c58ab00de06"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @rthdrdstopts={{0xc0, 0x29, 0x37, {0x84, 0x14, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x5}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x2, 0x76, "e22be1488bd7924140b76629cb131159458b2726a14527e21b3c8f51656d6d9c39d109cc5ea39a06373c764a004848c55f8fb1b3c2be396b45b9cfb8013d4a6999a20d0f781578e8c7bf7a07da9869fa21c719705f0871f101e9153c824c4a4209266e25321bb2537244cb96e00984e9866aba791460"}, @jumbo={0xc2, 0x4, 0x8d}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @hopopts={{0x100, 0x29, 0x36, {0x33, 0x1c, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @ra={0x5, 0x2, 0x3}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xe, 0x1f, "c72ddd9effed1d31d8e9be57665c5513a9113c70c9d97aa762d0be64a0e7dc"}, @calipso={0x7, 0x58, {0x1, 0x14, 0x4e, 0x1, [0x100000000, 0x101, 0x3, 0x97, 0x36a, 0x100000000, 0x7, 0x2, 0x2, 0x7]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x2}, @enc_lim={0x4, 0x1, 0x7}, @calipso={0x7, 0x40, {0x3, 0xe, 0x8, 0x9, [0x8001, 0x0, 0xf, 0x1, 0xf8, 0x8000000000000000, 0x3]}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xffffffff}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x21, 0x0, 0x2, 0x6}}}], 0x2e0}}, {{&(0x7f0000001080)={0xa, 0x4e20, 0x5, @loopback, 0xbc25}, 0x1c, &(0x7f0000003980)=[{&(0x7f0000001500)="f5012022c6190e82f11e3cd4174f2f99fe2bfe9b3eb3ae27fe554be99796f1d9c93f3d603c250a33cd4b8d45f4d2cfb1518259612deeac073d5b2648ce71a4295a92af89e2dd3d7f6c7f56d7e0710ee2dd27a1c61ab1350541c29de867039bf789c560ea96721813bc24d282ed11b73675a5213688a43aa5616d3facb2ae218a630c65cc51d5be58d89e193923edad6d294e992e43110c0d6d85007d6753a912c8414698533ef9d0eff593920e41bada4a647244c75d8d19e49b268223181772b5c68e6f42258524d00221e0d34ce48a3ed73794d49c1c431d00b94559777ef3b9", 0xe1}, {&(0x7f0000001600)="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", 0xfff}, {&(0x7f00000010c0)="06a5bcef05fa203bcd6f30421be37bc8097b671f1f66acfb92b70ce206427efff9cf0855d0da746a742b1c77f1cd27de4f75aadfb95d389760bf58cd2ec095bcb0af03587db0a20c6fe11a62137d", 0x4e}, {&(0x7f0000002600)="b69a33ada3a059e16f06fadbdcc5396d72e411c96797b6dc2b34392cbb4d27b5d9076ba5ab7d79d854440cf0ca72261ccab9fce0c69442b4ec4756c6035ad482bc8970bf3cc8a49b2d28b6f8e48250c1507d4d163439e2c7d4690c3360426a75eee41812090ef81d22107ec82874ce2f2394dc9ef7b7927b672d17a813ec371b9daf3f4f82b24a0ab346681a6155eb9bc1254711965e5c9e11157c1d27709854c60f2444ac6b21a27b207d50bff207549e8ee0e45dcc8dd259ae8ebf7a388bd8e296c5617935bc277f736a6e26964a77922e6c0a39b04c22beb769c6ff5132aad0e407e5", 0xe4}, {&(0x7f0000002700)="c988715c3e73d1caed584aa1352fcbf905c0d936613e0a68c52ffae98c3e3658e3205a56f9855312cb93c682ce4d9ff42748d377ac576d3393", 0x39}, {&(0x7f0000002740)="20cc71ee1b2e19a98d72b7d89eb68d47f2dd756b4256e3e280fa3b5689a87fbf481c3e24f81bac6e64831f2a4a6e7d852dc3ba6bbe198b219ea040ad264424c9a8af8d9f5c1c", 0x46}, {&(0x7f00000027c0)="937411e05e8638bd467777d4c94ba37654d7364559ac794ae1cca4ee400ebb211e6647725ec7ec9e53391a11ded85180bcb7a2f3fa1d0993551716db09cca7afa27b424491a21145efb43ac29d442abc03b4366a97bb9b39a8e82c6d3dfcb650eaeea0474cd08e6e42f7bd730d7f07b90b98de7fb8a96cb9130b4f32d58c3a4ad8bed0aefa2a91b19fb202645dcc5b9455d556aa1535a4a8daebbafeffe11403d06e4c83a8aac2f307a5557749cc56e8b09236190d12c57c9e56f5c402bd3decd874e524", 0xc4}, {&(0x7f00000028c0)="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", 0xffe}, {&(0x7f00000038c0)="5a347f97cd8c9fda6266271f68dd78e147bd372d5c9676b670efb28d585b0d492d7c044870764687de4643d5047bb060af6505d90e910c733d7b11f1094c692424b1820a23ba47c310aab8adf3be90d58116e955c552895ede2e3f204a5c5ba3dc95c7664f45e065a7800572c18dcdd9aa676124b91a5d", 0x77}, {&(0x7f0000003940)="d3b46e7b9d57e1a1dc6a1b3f9333de5d51b10b39dee1509b90739345a665a98d64a66c50469a92ace7d554b27da58765", 0x30}], 0xa, &(0x7f0000003a40)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x89, 0xc, 0x0, 0x81, 0x0, [@dev={0xfe, 0x80, '\x00', 0x1a}, @remote, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local]}}}], 0x90}}], 0x4, 0x44010) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r5], 0x68}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48000) r6 = gettid() r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x8, {0xa, 0x37}, [@IFAL_ADDRESS={0x14, 0x1, @private0}]}, 0x30}}, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r6}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_macvtap\x00'}, @IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) 288.404542ms ago: executing program 0 (id=4515): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 212.18937ms ago: executing program 3 (id=4516): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000580)="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", 0x551}], 0x1, &(0x7f0000001dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @empty=0x5005}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@noop, @generic={0x82, 0x10, "66581ddb34253c0556c786172934"}, @timestamp_prespec={0x44, 0x14, 0x67, 0x3, 0x7, [{@local, 0x2cb9}, {@rand_addr=0x64010102, 0x5e}]}]}}}], 0x58}, 0x4) 197.902304ms ago: executing program 2 (id=4517): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480), 0x4) (async) sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x8}}, 0x10, 0x0}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000100)=0x10001, 0x4) recvmmsg(r1, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000840)=""/201, 0xc9}], 0x1, &(0x7f0000000540)=""/75, 0x4b}, 0x9}], 0x1, 0x13023, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x1}}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_NAT_DST={0x14, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}]}]}, 0x78}}, 0x0) 149.922959ms ago: executing program 3 (id=4518): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000001000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) 165.506µs ago: executing program 2 (id=4519): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$inet_sctp(r3, &(0x7f0000000400)={&(0x7f0000000140)=@in={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000240)="7a3859372a3cbbb68924ca16115b09988dd4c72f32b172d6faf17577f942ca7510be1554095f70584224ab", 0x2b}, {&(0x7f0000000280)="d098c45f23e17482bcdab82bd41b58c6e3564174a0c6982302c1fbb0c0ab7a13a4ad473a0528e6150ab8adcdc3884f84a0f1630c95845846067f26c20b47311c633348ed0e59416444a80d26e0b285f4f4163a6a3922dc47d309cee7aa5a3c431dabd053fa505dd16ef732ad207965ea2671dfa0398a362bc68aee3825bc47a797", 0x81}], 0x2}, 0x0) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x70bd2a, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x80, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) (async) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) accept4$x25(r2, &(0x7f0000000540)={0x9, @remote}, &(0x7f0000000600)=0x12, 0x80000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x6, 0x12, r3, 0xfffff000) (async) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x6, 0x12, r3, 0xfffff000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) (async) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x2000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=4520): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/143, 0x8f}, {&(0x7f0000001780)=""/4104, 0x1008}, {&(0x7f0000000540)=""/124, 0x7c}, {&(0x7f0000000240)=""/84, 0x54}, {&(0x7f0000000000)=""/8, 0x8}, {&(0x7f0000000100)=""/38, 0x26}], 0x6}, 0x0) (async) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/143, 0x8f}, {&(0x7f0000001780)=""/4104, 0x1008}, {&(0x7f0000000540)=""/124, 0x7c}, {&(0x7f0000000240)=""/84, 0x54}, {&(0x7f0000000000)=""/8, 0x8}, {&(0x7f0000000100)=""/38, 0x26}], 0x6}, 0x0) kernel console output (not intermixed with test programs): 2 family 0 port 6081 - 0 [ 376.943443][ T5841] Bluetooth: hci0: command tx timeout [ 377.111827][ T13] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.158364][ T13] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.311921][T17050] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.321335][T17050] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.329674][T17050] bridge_slave_0: entered allmulticast mode [ 377.339393][T17050] bridge_slave_0: entered promiscuous mode [ 377.367668][T17050] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.387601][T17119] netlink: 'syz.3.2981': attribute type 7 has an invalid length. [ 377.388960][T17050] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.409798][T17050] bridge_slave_1: entered allmulticast mode [ 377.420318][T17050] bridge_slave_1: entered promiscuous mode [ 377.619079][T17050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.643925][T17050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.769828][T17050] team0: Port device team_slave_0 added [ 377.790753][T17050] team0: Port device team_slave_1 added [ 377.796943][ T13] batadv0: left allmulticast mode [ 377.809316][ T13] bridge0: port 3(batadv0) entered disabled state [ 377.818867][ T5841] Bluetooth: hci2: command tx timeout [ 377.829175][ T13] bridge_slave_1: left allmulticast mode [ 377.834910][ T13] bridge_slave_1: left promiscuous mode [ 377.863916][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.885027][ T13] bridge_slave_0: left allmulticast mode [ 377.892492][ T13] bridge_slave_0: left promiscuous mode [ 377.916210][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.783669][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 378.793352][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.801188][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.811099][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 378.854807][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.867622][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.879464][ T13] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 378.893520][ T13] bond0 (unregistering): Released all slaves [ 378.910993][ T13] bond1 (unregistering): Released all slaves [ 378.925513][ T13] bond2 (unregistering): Released all slaves [ 378.940730][ T13] bond3 (unregistering): Released all slaves [ 378.956699][ T13] bond4 (unregistering): Released all slaves [ 378.979968][ T13] bond5 (unregistering): Released all slaves [ 378.994064][ T13] bond6 (unregistering): Released all slaves [ 379.007743][ T13] bond7 (unregistering): Released all slaves [ 379.023249][ T13] bond8 (unregistering): Released all slaves [ 379.038217][ T13] bond9 (unregistering): Released all slaves [ 379.056256][ T13] bond10 (unregistering): Released all slaves [ 379.076946][ T13] bond11 (unregistering): Released all slaves [ 379.233552][T17050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.252026][T17050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.279050][T17050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.326204][T17050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.347203][T17050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.427668][T17050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.455587][T17146] lo speed is unknown, defaulting to 1000 [ 379.455616][ T13] tipc: Left network mode [ 379.677327][T17050] hsr_slave_0: entered promiscuous mode [ 379.707440][T17050] hsr_slave_1: entered promiscuous mode [ 379.723028][T17050] debugfs: 'hsr0' already exists in 'hsr' [ 379.729172][T17050] Cannot create hsr debugfs directory [ 379.899879][ T5841] Bluetooth: hci2: command tx timeout [ 380.049121][T17185] lo speed is unknown, defaulting to 1000 [ 380.332770][T17200] lo speed is unknown, defaulting to 1000 [ 380.401731][ T5489] veth1_macvtap: left promiscuous mode [ 380.436402][ T5489] veth1_macvtap: entered promiscuous mode [ 380.605260][T17206] x_tables: duplicate entry at hook 3 [ 380.648193][ T13] hsr_slave_0: left promiscuous mode [ 380.665656][ T13] hsr_slave_1: left promiscuous mode [ 380.708681][ T13] veth1_macvtap: left allmulticast mode [ 380.717271][ T13] veth1_macvtap: left promiscuous mode [ 380.734893][ T13] veth1_vlan: left promiscuous mode [ 380.748700][ T13] veth0_vlan: left promiscuous mode [ 381.071679][ T13] macsec0 (unregistering): left allmulticast mode [ 381.300654][T17216] __nla_validate_parse: 4 callbacks suppressed [ 381.300671][T17216] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3001'. [ 381.319982][T17222] netlink: 'syz.1.3003': attribute type 322 has an invalid length. [ 381.328229][T17226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3004'. [ 381.584925][T17238] xt_bpf: check failed: parse error [ 381.988495][ T5841] Bluetooth: hci2: command tx timeout [ 382.090235][T17050] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 382.163032][T17050] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 382.205424][T17259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3010'. [ 382.234836][T17259] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3010'. [ 382.269823][T17050] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 382.278404][T17259] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3010'. [ 382.462926][T17259] vlan3: entered allmulticast mode [ 382.484230][T17259] dummy0: entered allmulticast mode [ 382.548530][T17050] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 382.663691][T17286] netlink: 'syz.4.3015': attribute type 211 has an invalid length. [ 382.672054][T17273] bridge0: entered promiscuous mode [ 382.677313][T17273] bridge0: entered allmulticast mode [ 382.703863][T17273] team0: Port device bridge0 added [ 382.937317][T17050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.973852][T17301] xt_bpf: check failed: parse error [ 383.044936][T17050] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.086210][ T8174] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.093418][ T8174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.161321][ T8174] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.168565][ T8174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.512421][T17320] bond0: (slave sit0): Error: Device type is different from other slaves [ 383.777977][T17050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.863587][T17335] lo speed is unknown, defaulting to 1000 [ 383.915320][T17340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3028'. [ 384.058425][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5250 ms [ 384.066310][ T5841] Bluetooth: hci2: command tx timeout [ 384.066547][ C0] lec:lec_tx_timeout: lec0 [ 384.290710][T17050] veth0_vlan: entered promiscuous mode [ 384.351468][T17050] veth1_vlan: entered promiscuous mode [ 384.450092][T17369] xt_bpf: check failed: parse error [ 384.612720][T17050] veth0_macvtap: entered promiscuous mode [ 384.672454][T17050] veth1_macvtap: entered promiscuous mode [ 384.760436][T17378] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3036'. [ 384.772820][T17050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.790980][T17050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.814140][ T8174] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.866569][T17381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3037'. [ 384.875784][T17381] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3037'. [ 384.906793][ T8174] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.944597][ T8174] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.993734][T10133] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.024320][T17390] netlink: 'syz.1.3040': attribute type 13 has an invalid length. [ 385.600310][T10133] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.617690][T10133] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.726208][T10133] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.793159][T13168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.810573][T13168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.863153][T17428] xt_bpf: check failed: parse error [ 385.950274][T17431] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3048'. [ 385.968823][T13168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.977173][T13168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.163578][T17435] syzkaller0: entered promiscuous mode [ 386.169236][T17435] syzkaller0: entered allmulticast mode [ 386.179977][T17436] hsr0: entered promiscuous mode [ 386.189111][T17436] hsr_slave_0: left promiscuous mode [ 386.195328][T17436] hsr_slave_1: left promiscuous mode [ 386.215698][T17436] hsr0 (unregistering): left promiscuous mode [ 386.312709][T17442] bond1: Unable to set up delay as MII monitoring is disabled [ 386.326102][T17442] bond1 (unregistering): Released all slaves [ 386.339844][T17445] __nla_validate_parse: 1 callbacks suppressed [ 386.339861][T17445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2963'. [ 386.374642][T17447] geneve2: entered allmulticast mode [ 386.587039][T17416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.704967][T17457] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3057'. [ 386.740384][T17457] Bluetooth: MGMT ver 1.23 [ 386.883868][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 386.893918][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 386.902146][T17466] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3060'. [ 386.912313][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 386.920969][T17470] xt_bpf: check failed: parse error [ 386.926806][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 386.934777][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 387.051933][T17468] lo speed is unknown, defaulting to 1000 [ 387.218479][T17473] ipvlan2: entered allmulticast mode [ 387.235570][T17473] erspan0: entered allmulticast mode [ 387.252780][T17475] netlink: 'syz.0.3062': attribute type 8 has an invalid length. [ 387.264510][T17475] sch_fq: defrate 0 ignored. [ 387.416425][T17492] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3068'. [ 387.552947][T17502] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3070'. [ 387.588845][T17468] chnl_net:caif_netlink_parms(): no params data found [ 387.712631][T17520] xt_bpf: check failed: parse error [ 387.916608][T17528] lo speed is unknown, defaulting to 1000 [ 387.968447][T17533] ipvlan2: entered promiscuous mode [ 387.973732][T17533] ipvlan2: entered allmulticast mode [ 388.003610][T17468] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.018521][T17468] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.038445][T17468] bridge_slave_0: entered allmulticast mode [ 388.057358][T17468] bridge_slave_0: entered promiscuous mode [ 388.090990][T17468] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.115245][T17468] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.124481][T17468] bridge_slave_1: entered allmulticast mode [ 388.134190][T17468] bridge_slave_1: entered promiscuous mode [ 388.248243][T17538] syzkaller1: entered promiscuous mode [ 388.258578][T17538] syzkaller1: entered allmulticast mode [ 388.276208][T17542] syzkaller1: left promiscuous mode [ 388.286031][T17542] syzkaller1: left allmulticast mode [ 388.321210][T17468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.344531][T17468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.475948][T17468] team0: Port device team_slave_0 added [ 388.485343][T17468] team0: Port device team_slave_1 added [ 388.536095][T17468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.548422][T17468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.603888][T17468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.618186][T17468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.627455][T17468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.658705][T17468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.694109][T17555] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 388.701701][T17555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.744286][T17559] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3084'. [ 388.760395][T17555] 8021q: VLANs not supported on caif0 [ 388.818908][T17468] hsr_slave_0: entered promiscuous mode [ 388.844273][T17468] hsr_slave_1: entered promiscuous mode [ 388.859265][T17468] debugfs: 'hsr0' already exists in 'hsr' [ 388.865027][T17468] Cannot create hsr debugfs directory [ 388.951324][T17562] tipc: Enabling of bearer rejected, failed to enable media [ 389.033720][ T5841] Bluetooth: hci4: command tx timeout [ 389.337547][T17584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3088'. [ 389.571007][T17591] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3091'. [ 389.880267][T17600] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3096'. [ 389.913974][T17468] netdevsim netdevsim1 netdevsim0 (unregistering): tearing down IPsec offload with 1 SAs left [ 389.951692][T17602] FAULT_INJECTION: forcing a failure. [ 389.951692][T17602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.986837][T17602] CPU: 0 UID: 0 PID: 17602 Comm: syz.2.3094 Not tainted syzkaller #0 PREEMPT(full) [ 389.986864][T17602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 389.986876][T17602] Call Trace: [ 389.986885][T17602] [ 389.986892][T17602] dump_stack_lvl+0xe8/0x150 [ 389.986924][T17602] should_fail_ex+0x412/0x560 [ 389.986952][T17602] _copy_from_user+0x2d/0xb0 [ 389.986980][T17602] copy_from_sockptr+0x5e/0x90 [ 389.987011][T17602] do_ip_setsockopt+0x1b85/0x2ea0 [ 389.987049][T17602] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 389.987078][T17602] ? aa_sk_perm+0x82d/0x960 [ 389.987107][T17602] ? __pfx_aa_sk_perm+0x10/0x10 [ 389.987130][T17602] ? __fget_files+0x2a/0x420 [ 389.987155][T17602] ? aa_sock_opt_perm+0xff/0x1a0 [ 389.987179][T17602] ip_setsockopt+0x66/0x110 [ 389.987195][T17602] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 389.987220][T17602] do_sock_setsockopt+0x17c/0x1b0 [ 389.987250][T17602] __x64_sys_setsockopt+0x13d/0x1b0 [ 389.987283][T17602] do_syscall_64+0x14d/0xf80 [ 389.987309][T17602] ? trace_irq_disable+0x3b/0x150 [ 389.987342][T17602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.987362][T17602] ? clear_bhb_loop+0x40/0x90 [ 389.987385][T17602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.987403][T17602] RIP: 0033:0x7f44e259c629 [ 389.987421][T17602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.987437][T17602] RSP: 002b:00007f44e3500028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 389.987457][T17602] RAX: ffffffffffffffda RBX: 00007f44e2815fa0 RCX: 00007f44e259c629 [ 389.987471][T17602] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000003 [ 389.987482][T17602] RBP: 00007f44e3500090 R08: 000000000000000c R09: 0000000000000000 [ 389.987494][T17602] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 389.987505][T17602] R13: 00007f44e2816038 R14: 00007f44e2815fa0 R15: 00007ffef32b3f38 [ 389.987538][T17602] [ 390.310564][T17616] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3101'. [ 390.352099][T17612] 8021q: VLANs not supported on nlmon0 [ 390.557670][T17620] syzkaller0: entered promiscuous mode [ 390.563409][T17620] syzkaller0: entered allmulticast mode [ 390.844436][T17630] lo speed is unknown, defaulting to 1000 [ 391.106109][ T5841] Bluetooth: hci4: command tx timeout [ 391.402503][T17671] lo speed is unknown, defaulting to 1000 [ 391.628910][T17686] __nla_validate_parse: 5 callbacks suppressed [ 391.628930][T17686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3126'. [ 391.724163][T17692] FAULT_INJECTION: forcing a failure. [ 391.724163][T17692] name failslab, interval 1, probability 0, space 0, times 0 [ 391.725941][T17691] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3129'. [ 391.747519][T17692] CPU: 0 UID: 0 PID: 17692 Comm: syz.3.3127 Not tainted syzkaller #0 PREEMPT(full) [ 391.747542][T17692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 391.747553][T17692] Call Trace: [ 391.747560][T17692] [ 391.747568][T17692] dump_stack_lvl+0xe8/0x150 [ 391.747598][T17692] should_fail_ex+0x412/0x560 [ 391.747623][T17692] should_failslab+0xa8/0x100 [ 391.747647][T17692] __kmalloc_cache_noprof+0x88/0x660 [ 391.747667][T17692] ? ____ip_mc_inc_group+0x518/0xdd0 [ 391.747690][T17692] ____ip_mc_inc_group+0x518/0xdd0 [ 391.747718][T17692] __ip_mc_join_group+0x430/0x500 [ 391.747746][T17692] do_ip_setsockopt+0x2097/0x2ea0 [ 391.747782][T17692] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 391.747809][T17692] ? aa_sk_perm+0x82d/0x960 [ 391.747836][T17692] ? __pfx_aa_sk_perm+0x10/0x10 [ 391.747857][T17692] ? __fget_files+0x2a/0x420 [ 391.747880][T17692] ? aa_sock_opt_perm+0xff/0x1a0 [ 391.747903][T17692] ip_setsockopt+0x66/0x110 [ 391.747918][T17692] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 391.747941][T17692] do_sock_setsockopt+0x17c/0x1b0 [ 391.747970][T17692] __x64_sys_setsockopt+0x13d/0x1b0 [ 391.748000][T17692] do_syscall_64+0x14d/0xf80 [ 391.748025][T17692] ? trace_irq_disable+0x3b/0x150 [ 391.748050][T17692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.748068][T17692] ? clear_bhb_loop+0x40/0x90 [ 391.748090][T17692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.748108][T17692] RIP: 0033:0x7f981779c629 [ 391.748125][T17692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.748140][T17692] RSP: 002b:00007f98185cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 391.748159][T17692] RAX: ffffffffffffffda RBX: 00007f9817a15fa0 RCX: 00007f981779c629 [ 391.748172][T17692] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000003 [ 391.748200][T17692] RBP: 00007f98185cb090 R08: 000000000000000c R09: 0000000000000000 [ 391.748211][T17692] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 391.748223][T17692] R13: 00007f9817a16038 R14: 00007f9817a15fa0 R15: 00007fff0f766dc8 [ 391.748261][T17692] [ 392.006822][T17691] netlink: 'syz.2.3129': attribute type 1 has an invalid length. [ 392.014740][T17691] netlink: 280 bytes leftover after parsing attributes in process `syz.2.3129'. [ 392.264157][T17701] lo speed is unknown, defaulting to 1000 [ 392.299214][T17710] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 392.453020][T17709] lo speed is unknown, defaulting to 1000 [ 392.596245][T17728] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3137'. [ 392.625151][T17728] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3137'. [ 392.937173][T17740] sctp: [Deprecated]: syz.0.3140 (pid 17740) Use of int in maxseg socket option. [ 392.937173][T17740] Use struct sctp_assoc_value instead [ 392.954383][T17739] netlink: 'syz.4.3141': attribute type 4 has an invalid length. [ 393.028090][ T5912] IPVS: starting estimator thread 0... [ 393.118431][T17748] IPVS: using max 33 ests per chain, 79200 per kthread [ 393.180495][ T5841] Bluetooth: hci4: command tx timeout [ 393.301796][ T7666] lec:lec_start_xmit: lec0:No lecd attached [ 393.353636][T17761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3148'. [ 393.388385][T17761] openvswitch: netlink: Missing key (keys=40, expected=80) [ 393.608515][T17766] netlink: 'syz.2.3150': attribute type 1 has an invalid length. [ 393.706010][T17766] bond1: entered promiscuous mode [ 393.711625][T17766] 8021q: adding VLAN 0 to HW filter on device bond1 [ 394.112741][T17797] IPv6: addrconf: prefix option has invalid lifetime [ 394.224842][T17804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3164'. [ 394.357174][T17812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3164'. [ 394.781380][T17835] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3173'. [ 394.922361][T17843] ipvlan2: entered allmulticast mode [ 394.940854][T17843] erspan0: entered allmulticast mode [ 394.964201][T17849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3177'. [ 395.258721][ T5841] Bluetooth: hci4: command tx timeout [ 395.691845][T10117] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.701633][T10117] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.739053][T10117] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.758401][T10117] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.875152][T17897] lo speed is unknown, defaulting to 1000 [ 396.755019][T17940] __nla_validate_parse: 6 callbacks suppressed [ 396.755040][T17940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3205'. [ 396.810344][T17941] bridge0: entered allmulticast mode [ 397.370770][T17965] lo speed is unknown, defaulting to 1000 [ 397.589402][T17974] lo speed is unknown, defaulting to 1000 [ 398.028513][T18001] netlink: 'syz.0.3222': attribute type 3 has an invalid length. [ 398.036501][T18001] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3222'. [ 398.046338][T18001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3222'. [ 398.332018][T18012] lo speed is unknown, defaulting to 1000 [ 398.372253][T18017] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3225'. [ 398.400989][T18015] lo speed is unknown, defaulting to 1000 [ 398.963950][T18048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3234'. [ 399.009400][T18050] batman_adv: batadv0: Adding interface: ipvlan2 [ 399.022031][T18050] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 399.062486][T18050] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 399.098371][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5800 ms [ 399.106416][ C0] lec:lec_tx_timeout: lec0 [ 399.124278][T18050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3235'. [ 399.283194][T18064] lo speed is unknown, defaulting to 1000 [ 400.026863][T18087] lo speed is unknown, defaulting to 1000 [ 400.361855][T18114] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3246'. [ 400.398569][T18114] netlink: 'syz.4.3246': attribute type 1 has an invalid length. [ 400.575135][T18119] lo speed is unknown, defaulting to 1000 [ 400.836273][T18130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3252'. [ 400.880800][T18133] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3253'. [ 400.903414][T18134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3252'. [ 400.963025][T18138] tipc: Enabling of bearer rejected, failed to enable media [ 400.986193][T18133] lo: entered allmulticast mode [ 400.993564][T18133] lo: left allmulticast mode [ 401.098755][T18142] veth0: entered promiscuous mode [ 401.104961][T18141] veth0: left promiscuous mode [ 401.165334][T18144] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 401.193686][T18147] 8021q: adding VLAN 0 to HW filter on device bond5 [ 401.251658][T18147] ipvlan3: entered promiscuous mode [ 401.257115][T18147] ipvlan3: entered allmulticast mode [ 401.263347][T18147] bond5: entered allmulticast mode [ 401.592262][T18163] FAULT_INJECTION: forcing a failure. [ 401.592262][T18163] name failslab, interval 1, probability 0, space 0, times 0 [ 401.606350][T18163] CPU: 0 UID: 0 PID: 18163 Comm: syz.4.3262 Not tainted syzkaller #0 PREEMPT(full) [ 401.606374][T18163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 401.606386][T18163] Call Trace: [ 401.606393][T18163] [ 401.606401][T18163] dump_stack_lvl+0xe8/0x150 [ 401.606432][T18163] should_fail_ex+0x412/0x560 [ 401.606456][T18163] ? __d_alloc+0x37/0x6f0 [ 401.606485][T18163] should_failslab+0xa8/0x100 [ 401.606510][T18163] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 401.606549][T18163] __d_alloc+0x37/0x6f0 [ 401.606583][T18163] d_alloc+0x4b/0x190 [ 401.606608][T18163] ? lookup_one_qstr_excl+0xc8/0x360 [ 401.606638][T18163] lookup_one_qstr_excl+0xdc/0x360 [ 401.606671][T18163] ? lookup_noperm_common+0x245/0x430 [ 401.606701][T18163] start_dirop+0x5c/0x90 [ 401.606727][T18163] simple_start_creating+0xcc/0x110 [ 401.606756][T18163] ? __pfx_simple_start_creating+0x10/0x10 [ 401.606784][T18163] ? do_raw_spin_unlock+0xf5/0x210 [ 401.606805][T18163] ? mntput+0x65/0xc0 [ 401.606831][T18163] debugfs_start_creating+0xdb/0x1a0 [ 401.606861][T18163] __debugfs_create_file+0x6f/0x400 [ 401.606891][T18163] debugfs_create_file_full+0x3f/0x60 [ 401.606919][T18163] ref_tracker_dir_debugfs+0x197/0x360 [ 401.606944][T18163] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 401.606995][T18163] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 401.607015][T18163] ? alloc_netdev_mqs+0xa6/0x11b0 [ 401.607037][T18163] ? __raw_spin_lock_init+0x45/0x100 [ 401.607058][T18163] alloc_netdev_mqs+0x272/0x11b0 [ 401.607076][T18163] ? __pfx_tun_setup+0x10/0x10 [ 401.607103][T18163] tun_set_iff+0x532/0xf00 [ 401.607137][T18163] __tun_chr_ioctl+0x7bb/0x1e10 [ 401.607169][T18163] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 401.607200][T18163] ? __fget_files+0x2a/0x420 [ 401.607225][T18163] ? __fget_files+0x3a0/0x420 [ 401.607250][T18163] ? __fget_files+0x2a/0x420 [ 401.607279][T18163] ? bpf_lsm_file_ioctl+0x9/0x20 [ 401.607302][T18163] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 401.607330][T18163] __se_sys_ioctl+0xfc/0x170 [ 401.607352][T18163] do_syscall_64+0x14d/0xf80 [ 401.607377][T18163] ? trace_irq_disable+0x3b/0x150 [ 401.607402][T18163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.607421][T18163] ? clear_bhb_loop+0x40/0x90 [ 401.607442][T18163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.607459][T18163] RIP: 0033:0x7f2ad099c629 [ 401.607476][T18163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.607491][T18163] RSP: 002b:00007f2ad181c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 401.607511][T18163] RAX: ffffffffffffffda RBX: 00007f2ad0c15fa0 RCX: 00007f2ad099c629 [ 401.607524][T18163] RDX: 0000200000000080 RSI: 00000000400454ca RDI: 0000000000000003 [ 401.607535][T18163] RBP: 00007f2ad181c090 R08: 0000000000000000 R09: 0000000000000000 [ 401.607546][T18163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.607557][T18163] R13: 00007f2ad0c16038 R14: 00007f2ad0c15fa0 R15: 00007ffee5883c48 [ 401.607588][T18163] [ 402.408980][T18177] lo speed is unknown, defaulting to 1000 [ 402.456977][T18182] geneve2: entered promiscuous mode [ 402.474267][T10117] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 402.484281][T10117] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 402.499758][T10117] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 402.508503][T10117] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 402.671248][T18190] __nla_validate_parse: 3 callbacks suppressed [ 402.671264][T18190] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3269'. [ 402.671922][T18185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3269'. [ 403.078177][T18212] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3276'. [ 403.111427][T18206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3276'. [ 403.241848][T18218] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3280'. [ 403.274772][T18221] lo speed is unknown, defaulting to 1000 [ 403.718014][T18243] lo speed is unknown, defaulting to 1000 [ 403.743987][T18245] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 404.064054][T18256] IPv6: NLM_F_CREATE should be specified when creating new route [ 404.107523][T18254] lo speed is unknown, defaulting to 1000 [ 404.664065][T18271] lo speed is unknown, defaulting to 1000 [ 404.943753][T18288] lo speed is unknown, defaulting to 1000 [ 406.289506][T18325] lo speed is unknown, defaulting to 1000 [ 408.201678][T18297] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 408.426110][T18338] lo speed is unknown, defaulting to 1000 [ 408.492676][T18345] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3317'. [ 408.512019][T18345] nbd: must specify a size in bytes for the device [ 408.577176][T18349] lo speed is unknown, defaulting to 1000 [ 409.182866][T18380] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3328'. [ 409.216019][T18380] tipc: Started in network mode [ 409.234306][T18380] tipc: Node identity 7f000001, cluster identity 4711 [ 409.272410][T18380] tipc: Enabling of bearer rejected, failed to enable media [ 409.310115][T18380] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 409.319239][T18380] tipc: Enabled bearer , priority 10 [ 409.331139][T18380] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3328'. [ 409.472920][T18388] nbd: must specify at least one socket [ 409.650513][T18396] ipvlan4: entered promiscuous mode [ 409.655853][T18396] ipvlan4: entered allmulticast mode [ 409.662470][T18396] erspan0: entered allmulticast mode [ 409.701067][T18398] ipvlan2: entered promiscuous mode [ 409.706346][T18398] ipvlan2: entered allmulticast mode [ 409.712164][T18398] erspan0: entered allmulticast mode [ 409.846331][T18406] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.3336'. [ 409.966969][T18411] netlink: 'syz.4.3338': attribute type 7 has an invalid length. [ 410.225125][T18417] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3342'. [ 410.438568][ T7760] tipc: Node number set to 2130706433 [ 410.456029][T18415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3341'. [ 410.465058][T18415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3341'. [ 410.488408][T18415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3341'. [ 410.727954][T18442] lo speed is unknown, defaulting to 1000 [ 410.913424][T18447] lo speed is unknown, defaulting to 1000 [ 410.967537][T18454] lo speed is unknown, defaulting to 1000 [ 411.045242][T18458] FAULT_INJECTION: forcing a failure. [ 411.045242][T18458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.127151][T18458] CPU: 0 UID: 0 PID: 18458 Comm: syz.0.3354 Not tainted syzkaller #0 PREEMPT(full) [ 411.127178][T18458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 411.127190][T18458] Call Trace: [ 411.127198][T18458] [ 411.127206][T18458] dump_stack_lvl+0xe8/0x150 [ 411.127237][T18458] should_fail_ex+0x412/0x560 [ 411.127265][T18458] _copy_from_user+0x2d/0xb0 [ 411.127292][T18458] generic_map_update_batch+0x69a/0x990 [ 411.127326][T18458] ? __pfx_generic_map_update_batch+0x10/0x10 [ 411.127358][T18458] ? __pfx_generic_map_update_batch+0x10/0x10 [ 411.127381][T18458] bpf_map_do_batch+0x39b/0x630 [ 411.127404][T18458] __sys_bpf+0x7c1/0x950 [ 411.127433][T18458] ? __pfx___sys_bpf+0x10/0x10 [ 411.127458][T18458] ? kmem_cache_free+0x187/0x630 [ 411.127492][T18458] ? ksys_write+0x1fc/0x270 [ 411.127513][T18458] ? __pfx_ksys_write+0x10/0x10 [ 411.127539][T18458] __x64_sys_bpf+0x7c/0x90 [ 411.127564][T18458] do_syscall_64+0x14d/0xf80 [ 411.127592][T18458] ? trace_irq_disable+0x3b/0x150 [ 411.127618][T18458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.127638][T18458] ? clear_bhb_loop+0x40/0x90 [ 411.127661][T18458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.127680][T18458] RIP: 0033:0x7ff56659c629 [ 411.127698][T18458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.127715][T18458] RSP: 002b:00007ff5674e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 411.127735][T18458] RAX: ffffffffffffffda RBX: 00007ff566815fa0 RCX: 00007ff56659c629 [ 411.127749][T18458] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 411.127760][T18458] RBP: 00007ff5674e1090 R08: 0000000000000000 R09: 0000000000000000 [ 411.127772][T18458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 411.127783][T18458] R13: 00007ff566816038 R14: 00007ff566815fa0 R15: 00007ffdc6ded8d8 [ 411.127814][T18458] [ 411.441041][T18461] lo speed is unknown, defaulting to 1000 [ 412.741095][T18499] bond2: option arp_interval: invalid value (18446744073709551615) [ 412.760440][T18499] bond2: option arp_interval: allowed values 0 - 2147483647 [ 412.787868][T18499] bond2 (unregistering): Released all slaves [ 413.184989][T18513] lo speed is unknown, defaulting to 1000 [ 413.240064][T18515] netlink: 'syz.4.3371': attribute type 10 has an invalid length. [ 413.385705][T18525] : entered promiscuous mode [ 413.683452][T18542] xt_bpf: check failed: parse error [ 413.700456][T18543] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3380'. [ 413.714018][T18543] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3380'. [ 413.753671][T18543] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3380'. [ 414.248866][T18567] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3387'. [ 414.568774][T18586] xt_bpf: check failed: parse error [ 414.755825][T18584] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.768994][T18584] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.913960][T18584] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.930878][T18584] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.013942][T18584] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.025639][T18584] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.066491][T18604] lo speed is unknown, defaulting to 1000 [ 415.214103][T18584] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.225163][T18584] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.723153][ T8174] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.769052][ T8174] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.831961][T13168] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.849464][T13168] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.890510][T10117] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.909179][T10117] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.952348][T10117] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.971175][T10117] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.376517][T18644] xt_bpf: check failed: parse error [ 416.432944][T18648] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3409'. [ 416.481091][T18652] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3410'. [ 416.682111][T18659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3413'. [ 416.737509][T18659] 8021q: adding VLAN 0 to HW filter on device bond6 [ 416.897004][T18670] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3418'. [ 416.992690][T18669] lo speed is unknown, defaulting to 1000 [ 417.415844][T18701] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3426'. [ 417.427910][T18705] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3428'. [ 417.577063][T18708] lo speed is unknown, defaulting to 1000 [ 417.760258][T18721] lo speed is unknown, defaulting to 1000 [ 417.965914][T18716] lo speed is unknown, defaulting to 1000 [ 418.254696][T18746] FAULT_INJECTION: forcing a failure. [ 418.254696][T18746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.268361][T18746] CPU: 0 UID: 0 PID: 18746 Comm: syz.4.3443 Not tainted syzkaller #0 PREEMPT(full) [ 418.268385][T18746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 418.268396][T18746] Call Trace: [ 418.268403][T18746] [ 418.268411][T18746] dump_stack_lvl+0xe8/0x150 [ 418.268442][T18746] should_fail_ex+0x412/0x560 [ 418.268467][T18746] _copy_from_user+0x2d/0xb0 [ 418.268493][T18746] generic_map_update_batch+0x69a/0x990 [ 418.268526][T18746] ? __pfx_generic_map_update_batch+0x10/0x10 [ 418.268557][T18746] ? __pfx_generic_map_update_batch+0x10/0x10 [ 418.268578][T18746] bpf_map_do_batch+0x39b/0x630 [ 418.268602][T18746] __sys_bpf+0x7c1/0x950 [ 418.268630][T18746] ? __pfx___sys_bpf+0x10/0x10 [ 418.268654][T18746] ? kmem_cache_free+0x187/0x630 [ 418.268696][T18746] ? ksys_write+0x1fc/0x270 [ 418.268715][T18746] ? __pfx_ksys_write+0x10/0x10 [ 418.268740][T18746] __x64_sys_bpf+0x7c/0x90 [ 418.268766][T18746] do_syscall_64+0x14d/0xf80 [ 418.268793][T18746] ? trace_irq_disable+0x3b/0x150 [ 418.268818][T18746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.268848][T18746] ? clear_bhb_loop+0x40/0x90 [ 418.268870][T18746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.268887][T18746] RIP: 0033:0x7f2ad099c629 [ 418.268904][T18746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.268917][T18746] RSP: 002b:00007f2ad181c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 418.268936][T18746] RAX: ffffffffffffffda RBX: 00007f2ad0c15fa0 RCX: 00007f2ad099c629 [ 418.268949][T18746] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 418.268960][T18746] RBP: 00007f2ad181c090 R08: 0000000000000000 R09: 0000000000000000 [ 418.268970][T18746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 418.268979][T18746] R13: 00007f2ad0c16038 R14: 00007f2ad0c15fa0 R15: 00007ffee5883c48 [ 418.269008][T18746] [ 418.897202][T18765] netlink: 'syz.3.3449': attribute type 12 has an invalid length. [ 418.922118][T18765] netlink: 'syz.3.3449': attribute type 29 has an invalid length. [ 418.966347][T18765] __nla_validate_parse: 5 callbacks suppressed [ 418.966364][T18765] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3449'. [ 419.038363][T18765] netlink: 59 bytes leftover after parsing attributes in process `syz.3.3449'. [ 419.850396][T18811] lo speed is unknown, defaulting to 1000 [ 419.897969][T18812] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 421.991586][T18770] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 422.130207][T18818] FAULT_INJECTION: forcing a failure. [ 422.130207][T18818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.146637][T18818] CPU: 0 UID: 0 PID: 18818 Comm: syz.0.3464 Not tainted syzkaller #0 PREEMPT(full) [ 422.146661][T18818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 422.146689][T18818] Call Trace: [ 422.146696][T18818] [ 422.146703][T18818] dump_stack_lvl+0xe8/0x150 [ 422.146733][T18818] should_fail_ex+0x412/0x560 [ 422.146760][T18818] _copy_from_user+0x2d/0xb0 [ 422.146787][T18818] generic_map_update_batch+0x648/0x990 [ 422.146819][T18818] ? __pfx_generic_map_update_batch+0x10/0x10 [ 422.146851][T18818] ? __pfx_generic_map_update_batch+0x10/0x10 [ 422.146873][T18818] bpf_map_do_batch+0x39b/0x630 [ 422.146896][T18818] __sys_bpf+0x7c1/0x950 [ 422.146924][T18818] ? __pfx___sys_bpf+0x10/0x10 [ 422.146949][T18818] ? kmem_cache_free+0x187/0x630 [ 422.146983][T18818] ? ksys_write+0x1fc/0x270 [ 422.147004][T18818] ? __pfx_ksys_write+0x10/0x10 [ 422.147030][T18818] __x64_sys_bpf+0x7c/0x90 [ 422.147055][T18818] do_syscall_64+0x14d/0xf80 [ 422.147081][T18818] ? trace_irq_disable+0x3b/0x150 [ 422.147108][T18818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.147127][T18818] ? clear_bhb_loop+0x40/0x90 [ 422.147149][T18818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.147168][T18818] RIP: 0033:0x7ff56659c629 [ 422.147185][T18818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.147201][T18818] RSP: 002b:00007ff5674e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 422.147222][T18818] RAX: ffffffffffffffda RBX: 00007ff566815fa0 RCX: 00007ff56659c629 [ 422.147235][T18818] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 422.147247][T18818] RBP: 00007ff5674e1090 R08: 0000000000000000 R09: 0000000000000000 [ 422.147258][T18818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 422.147269][T18818] R13: 00007ff566816038 R14: 00007ff566815fa0 R15: 00007ffdc6ded8d8 [ 422.147300][T18818] [ 422.463366][T18828] lo speed is unknown, defaulting to 1000 [ 422.791714][T18840] lo speed is unknown, defaulting to 1000 [ 422.952733][T18848] lo speed is unknown, defaulting to 1000 [ 423.159492][T18848] netlink: 312 bytes leftover after parsing attributes in process `syz.4.3473'. [ 423.211773][T18856] lo speed is unknown, defaulting to 1000 [ 423.408221][T18859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3476'. [ 425.024305][T18911] lo speed is unknown, defaulting to 1000 [ 425.780697][T18936] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3495'. [ 425.813447][T18935] lo speed is unknown, defaulting to 1000 [ 425.842145][T18937] IPv6: NLM_F_CREATE should be specified when creating new route [ 426.142022][T18951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.235793][T18947] xt_TCPMSS: Only works on TCP SYN packets [ 426.264587][T18956] lo speed is unknown, defaulting to 1000 [ 426.364058][T18947] lo speed is unknown, defaulting to 1000 [ 426.785567][T18975] lo speed is unknown, defaulting to 1000 [ 426.960795][T18983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3509'. [ 427.099693][T18986] lo speed is unknown, defaulting to 1000 [ 427.108091][T18987] IPv6: NLM_F_CREATE should be specified when creating new route [ 427.399527][T18991] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3511'. [ 427.427693][T18991] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3511'. [ 427.740060][T19003] lo speed is unknown, defaulting to 1000 [ 428.006004][T19017] lo speed is unknown, defaulting to 1000 [ 428.533883][T19034] netlink: 'syz.3.3526': attribute type 1 has an invalid length. [ 428.751468][T19039] lo speed is unknown, defaulting to 1000 [ 428.906848][T19053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3533'. [ 428.917035][T19053] syzkaller1: entered promiscuous mode [ 428.923096][T19053] syzkaller1: entered allmulticast mode [ 429.296635][T19076] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 432.183710][T19066] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 432.706755][T19119] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3555'. [ 432.721544][T19119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3555'. [ 432.742652][T19119] netlink: 'syz.4.3555': attribute type 39 has an invalid length. [ 433.472226][T19166] netlink: 'syz.2.3569': attribute type 8 has an invalid length. [ 433.498248][T19163] batadv0: entered promiscuous mode [ 433.507999][T19163] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 433.892540][T19189] netlink: 'syz.3.3576': attribute type 12 has an invalid length. [ 433.914182][T19189] netlink: 'syz.3.3576': attribute type 29 has an invalid length. [ 433.942571][T19189] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3576'. [ 433.966680][T19189] netlink: 59 bytes leftover after parsing attributes in process `syz.3.3576'. [ 434.201740][T19200] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3579'. [ 434.276481][T19202] lo speed is unknown, defaulting to 1000 [ 434.360800][T19200] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.408770][T19200] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.559731][T19200] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.570448][T19200] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.714972][T19200] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.739373][T19200] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.811894][T19206] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 434.953654][T19200] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.984469][T19200] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.203391][T10119] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.248683][T10119] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.286481][T10119] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.309392][T10119] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.365526][T10134] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.389704][T10134] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.398075][T10134] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.418838][T10134] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.081014][T19281] lo speed is unknown, defaulting to 1000 [ 437.114848][T19287] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3604'. [ 437.493576][T19304] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3610'. [ 437.637834][T19312] bridge2: entered promiscuous mode [ 438.133365][T19325] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3616'. [ 438.144188][T19325] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3616'. [ 438.166542][T19325] vlan3: entered promiscuous mode [ 438.171868][T19325] bond0: entered promiscuous mode [ 438.177117][T19325] bond_slave_0: entered promiscuous mode [ 438.183459][T19325] bond_slave_1: entered promiscuous mode [ 438.200569][T19325] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 438.440131][T19337] xt_bpf: check failed: parse error [ 438.672907][T19353] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3627'. [ 438.721541][T19353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3627'. [ 438.731497][T19356] netlink: 'syz.4.3628': attribute type 1 has an invalid length. [ 438.758404][T19356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3628'. [ 438.767505][T19356] netlink: 'syz.4.3628': attribute type 1 has an invalid length. [ 438.803309][T19356] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3628'. [ 438.821316][T19356] tipc: Invalid UDP bearer configuration [ 438.821366][T19356] tipc: Enabling of bearer rejected, failed to enable media [ 439.301549][T19380] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3637'. [ 440.228741][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 440.238012][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.245009][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.254397][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 440.375119][T19400] FAULT_INJECTION: forcing a failure. [ 440.375119][T19400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.408505][T19400] CPU: 1 UID: 0 PID: 19400 Comm: syz.0.3642 Not tainted syzkaller #0 PREEMPT(full) [ 440.408534][T19400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 440.408547][T19400] Call Trace: [ 440.408555][T19400] [ 440.408564][T19400] dump_stack_lvl+0xe8/0x150 [ 440.408597][T19400] should_fail_ex+0x412/0x560 [ 440.408627][T19400] _copy_from_user+0x2d/0xb0 [ 440.408656][T19400] generic_map_update_batch+0x648/0x990 [ 440.408692][T19400] ? __pfx_generic_map_update_batch+0x10/0x10 [ 440.408726][T19400] ? __pfx_generic_map_update_batch+0x10/0x10 [ 440.408751][T19400] bpf_map_do_batch+0x39b/0x630 [ 440.408776][T19400] __sys_bpf+0x7c1/0x950 [ 440.408837][T19400] ? __pfx___sys_bpf+0x10/0x10 [ 440.408863][T19400] ? kmem_cache_free+0x187/0x630 [ 440.408900][T19400] ? ksys_write+0x1fc/0x270 [ 440.408929][T19400] ? __pfx_ksys_write+0x10/0x10 [ 440.408957][T19400] __x64_sys_bpf+0x7c/0x90 [ 440.408984][T19400] do_syscall_64+0x14d/0xf80 [ 440.409012][T19400] ? trace_irq_disable+0x3b/0x150 [ 440.409044][T19400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.409092][T19400] ? clear_bhb_loop+0x40/0x90 [ 440.409118][T19400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.409138][T19400] RIP: 0033:0x7ff56659c629 [ 440.409158][T19400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.409174][T19400] RSP: 002b:00007ff5674e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 440.409194][T19400] RAX: ffffffffffffffda RBX: 00007ff566815fa0 RCX: 00007ff56659c629 [ 440.409207][T19400] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 440.409217][T19400] RBP: 00007ff5674e1090 R08: 0000000000000000 R09: 0000000000000000 [ 440.409228][T19400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 440.409237][T19400] R13: 00007ff566816038 R14: 00007ff566815fa0 R15: 00007ffdc6ded8d8 [ 440.409264][T19400] [ 440.978146][T19421] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3651'. [ 440.998525][T19421] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3651'. [ 441.026455][T19421] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3651'. [ 443.911984][T19413] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 444.069844][T19463] syz_tun: entered promiscuous mode [ 444.079264][T19463] syz_tun: refused to change device tx_queue_len [ 444.096597][T19463] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 444.148837][T19467] lo speed is unknown, defaulting to 1000 [ 444.194472][T19469] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 444.792788][T19489] sctp: [Deprecated]: syz.2.3671 (pid 19489) Use of int in max_burst socket option. [ 444.792788][T19489] Use struct sctp_assoc_value instead [ 445.268321][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 445.276417][ C0] lec:lec_tx_timeout: lec0 [ 445.325914][T19507] syzkaller0: entered promiscuous mode [ 445.331941][T19507] syzkaller0: entered allmulticast mode [ 445.600798][T19526] xt_TCPMSS: Only works on TCP SYN packets [ 447.119461][T19542] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 447.134227][T19542] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 447.144694][T19542] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 447.168684][T19542] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 447.176689][T19542] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 447.315011][T19540] lo speed is unknown, defaulting to 1000 [ 447.713226][T19554] __nla_validate_parse: 2 callbacks suppressed [ 447.713245][T19554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3690'. [ 447.829128][T19554] 8021q: adding VLAN 0 to HW filter on device bond7 [ 447.950017][T19561] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3691'. [ 447.983033][T19555] lo speed is unknown, defaulting to 1000 [ 448.245880][T19540] chnl_net:caif_netlink_parms(): no params data found [ 448.363896][T19570] lo speed is unknown, defaulting to 1000 [ 448.627991][T19587] netlink: 'syz.2.3699': attribute type 1 has an invalid length. [ 448.662054][T19587] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3699'. [ 448.828646][T19540] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.850056][T19540] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.878649][T19540] bridge_slave_0: entered allmulticast mode [ 448.910180][T19540] bridge_slave_0: entered promiscuous mode [ 448.963023][T19540] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.978536][T19540] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.993462][T19540] bridge_slave_1: entered allmulticast mode [ 449.006382][T19540] bridge_slave_1: entered promiscuous mode [ 449.144902][T19599] lo speed is unknown, defaulting to 1000 [ 449.156365][T19540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.187172][T19540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.265281][T19542] Bluetooth: hci1: command tx timeout [ 449.278649][T19540] team0: Port device team_slave_0 added [ 449.312264][T19540] team0: Port device team_slave_1 added [ 449.455052][T19610] lo speed is unknown, defaulting to 1000 [ 449.509243][T19540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.527696][T19540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.564352][T19540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.639867][T19540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.657186][T19540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.699410][T19540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.735888][T19629] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3710'. [ 449.743533][T19626] batadv0: entered promiscuous mode [ 449.759407][T19626] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 449.815428][T19625] lo speed is unknown, defaulting to 1000 [ 449.915085][T19540] hsr_slave_0: entered promiscuous mode [ 449.922136][T19540] hsr_slave_1: entered promiscuous mode [ 449.928745][T19540] debugfs: 'hsr0' already exists in 'hsr' [ 449.934581][T19540] Cannot create hsr debugfs directory [ 450.184956][T19636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3712'. [ 450.884404][T19666] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.895511][T19666] bridge_slave_1: left allmulticast mode [ 450.901639][T19666] bridge_slave_1: left promiscuous mode [ 450.923508][T19666] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.946658][T19666] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 451.113022][T19680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3723'. [ 451.133522][T19680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3723'. [ 451.165748][T19676] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3723'. [ 451.312624][T19682] xt_HMARK: spi-set and port-set can't be combined [ 451.343876][T19542] Bluetooth: hci1: command tx timeout [ 451.385789][T19682] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3725'. [ 451.395626][T19682] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3725'. [ 451.501562][T19693] Cannot find set identified by id 2 to match [ 451.581873][T19693] lo speed is unknown, defaulting to 1000 [ 452.293275][T19730] 8021q: adding VLAN 0 to HW filter on device bond3 [ 452.358996][T19731] nbd4: detected capacity change from 0 to 63 [ 452.367422][T19542] block nbd4: Receive control failed (result -32) [ 452.377569][T19474] block nbd4: Dead connection, failed to find a fallback [ 452.388034][T19740] lo speed is unknown, defaulting to 1000 [ 452.411465][T19474] block nbd4: shutting down sockets [ 452.418217][T19474] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.441997][T19474] Buffer I/O error on dev nbd4, logical block 0, async page read [ 452.449976][T19474] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.460464][T19474] Buffer I/O error on dev nbd4, logical block 1, async page read [ 452.468548][T19474] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.498550][T19474] Buffer I/O error on dev nbd4, logical block 2, async page read [ 452.516668][T19474] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.541518][T19474] Buffer I/O error on dev nbd4, logical block 3, async page read [ 452.556315][T19474] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.585595][T19474] Buffer I/O error on dev nbd4, logical block 0, async page read [ 452.605875][T19474] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.632672][T19747] netlink: 'syz.4.3745': attribute type 2 has an invalid length. [ 452.661975][T19474] Buffer I/O error on dev nbd4, logical block 1, async page read [ 452.696402][T19474] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.697622][T19747] : entered promiscuous mode [ 452.738727][T19474] Buffer I/O error on dev nbd4, logical block 2, async page read [ 452.746574][T19474] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.757030][T19474] Buffer I/O error on dev nbd4, logical block 3, async page read [ 452.765306][T19474] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.776798][T19749] __nla_validate_parse: 2 callbacks suppressed [ 452.776816][T19749] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3745'. [ 452.792245][T19474] Buffer I/O error on dev nbd4, logical block 0, async page read [ 452.800176][T19474] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.809735][T19474] Buffer I/O error on dev nbd4, logical block 1, async page read [ 452.819424][T19474] ldm_validate_partition_table(): Disk read failed. [ 452.848913][T19474] Dev nbd4: unable to read RDB block 0 [ 452.855126][T19474] nbd4: unable to read partition table [ 452.942247][T19474] ldm_validate_partition_table(): Disk read failed. [ 452.950789][T19474] Dev nbd4: unable to read RDB block 0 [ 452.956834][T19474] nbd4: unable to read partition table [ 453.004965][T19754] netlink: 'syz.3.3746': attribute type 3 has an invalid length. [ 453.017357][T19754] netlink: 666 bytes leftover after parsing attributes in process `syz.3.3746'. [ 453.028145][T19764] netlink: 'syz.0.3749': attribute type 2 has an invalid length. [ 453.062480][T19764] hmac(sha224): entered promiscuous mode [ 453.267181][T19772] ipvlan2: entered promiscuous mode [ 453.435000][T19542] Bluetooth: hci1: command tx timeout [ 453.501799][T19776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3754'. [ 453.528806][T19776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3754'. [ 453.545130][T19776] netlink: 'syz.4.3754': attribute type 13 has an invalid length. [ 453.557478][T19776] netlink: 'syz.4.3754': attribute type 5 has an invalid length. [ 453.669513][T19788] lo speed is unknown, defaulting to 1000 [ 453.709764][T19791] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input10 [ 454.035370][T19804] lo speed is unknown, defaulting to 1000 [ 454.087856][T19807] netlink: 'syz.4.3765': attribute type 3 has an invalid length. [ 454.096406][T19807] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.3765'. [ 454.253985][T19812] netlink: 'syz.4.3767': attribute type 4 has an invalid length. [ 454.856539][T19834] FAULT_INJECTION: forcing a failure. [ 454.856539][T19834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.870176][T19834] CPU: 0 UID: 0 PID: 19834 Comm: syz.0.3777 Not tainted syzkaller #0 PREEMPT(full) [ 454.870196][T19834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 454.870205][T19834] Call Trace: [ 454.870211][T19834] [ 454.870217][T19834] dump_stack_lvl+0xe8/0x150 [ 454.870242][T19834] should_fail_ex+0x412/0x560 [ 454.870263][T19834] _copy_from_user+0x2d/0xb0 [ 454.870284][T19834] generic_map_update_batch+0x648/0x990 [ 454.870317][T19834] ? __pfx_generic_map_update_batch+0x10/0x10 [ 454.870342][T19834] ? __pfx_generic_map_update_batch+0x10/0x10 [ 454.870361][T19834] bpf_map_do_batch+0x39b/0x630 [ 454.870379][T19834] __sys_bpf+0x7c1/0x950 [ 454.870402][T19834] ? __pfx___sys_bpf+0x10/0x10 [ 454.870423][T19834] ? kmem_cache_free+0x187/0x630 [ 454.870450][T19834] ? ksys_write+0x1fc/0x270 [ 454.870466][T19834] ? __pfx_ksys_write+0x10/0x10 [ 454.870486][T19834] __x64_sys_bpf+0x7c/0x90 [ 454.870506][T19834] do_syscall_64+0x14d/0xf80 [ 454.870526][T19834] ? trace_irq_disable+0x3b/0x150 [ 454.870550][T19834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.870585][T19834] ? clear_bhb_loop+0x40/0x90 [ 454.870611][T19834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.870631][T19834] RIP: 0033:0x7ff56659c629 [ 454.870651][T19834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.870674][T19834] RSP: 002b:00007ff5674e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 454.870690][T19834] RAX: ffffffffffffffda RBX: 00007ff566815fa0 RCX: 00007ff56659c629 [ 454.870702][T19834] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 454.870711][T19834] RBP: 00007ff5674e1090 R08: 0000000000000000 R09: 0000000000000000 [ 454.870720][T19834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 454.870729][T19834] R13: 00007ff566816038 R14: 00007ff566815fa0 R15: 00007ffdc6ded8d8 [ 454.870752][T19834] [ 455.497432][T19853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3782'. [ 455.514034][T19542] Bluetooth: hci1: command tx timeout [ 455.842244][T19853] 8021q: adding VLAN 0 to HW filter on device bond1 [ 456.021563][T19856] lo speed is unknown, defaulting to 1000 [ 456.102881][T19863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3783'. [ 456.134063][T19863] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3783'. [ 456.692811][T19883] netlink: 'syz.2.3788': attribute type 4 has an invalid length. [ 456.884256][T19893] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3791'. [ 457.000915][T19898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3793'. [ 457.021019][T19900] lo speed is unknown, defaulting to 1000 [ 457.049682][ T7666] lec:lec_start_xmit: lec0:No lecd attached [ 457.126840][T19905] 8021q: adding VLAN 0 to HW filter on device bond4 [ 457.366508][T19919] syzkaller0: entered promiscuous mode [ 457.373644][T19919] syzkaller0: entered allmulticast mode [ 458.443166][T19941] __nla_validate_parse: 1 callbacks suppressed [ 458.443186][T19941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3806'. [ 458.588507][T19946] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3808'. [ 458.837187][T19967] lo speed is unknown, defaulting to 1000 [ 459.882050][T19991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3820'. [ 460.122027][T20001] lo speed is unknown, defaulting to 1000 [ 460.163842][T20002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3824'. [ 460.173232][T20002] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 460.180551][T20002] IPv6: NLM_F_CREATE should be set when creating new route [ 460.189554][T20002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3824'. [ 460.852531][T10134] bond5 (unregistering): (slave geneve2): Releasing active interface [ 461.127566][T10134] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 461.138583][T10134] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 461.148224][T10134] bond0 (unregistering): Released all slaves [ 461.160910][T10134] bond1 (unregistering): Released all slaves [ 461.175522][T10134] bond2 (unregistering): Released all slaves [ 461.191069][T10134] bond3 (unregistering): Released all slaves [ 461.207904][T10134] bond4 (unregistering): (slave veth5): Releasing active interface [ 461.219361][T10134] bond4 (unregistering): Released all slaves [ 461.234828][T10134] bond5 (unregistering): Released all slaves [ 461.249991][T10134] bond6 (unregistering): Released all slaves [ 461.336879][T10134] !: left promiscuous mode [ 461.398107][T10134] tipc: Disabling bearer [ 461.407588][T10134] tipc: Left network mode [ 461.703429][T10134] hsr_slave_0: left promiscuous mode [ 461.709461][T10134] hsr_slave_1: left promiscuous mode [ 461.744127][T19961] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 461.953646][T20012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3826'. [ 462.058312][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 462.066397][ C0] lec:lec_tx_timeout: lec0 [ 462.527378][T20044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3831'. [ 462.686977][T10134] team0 (unregistering): Port device dummy0 removed [ 462.741572][T20012] syzkaller1: entered promiscuous mode [ 462.747118][T20012] syzkaller1: entered allmulticast mode [ 462.791293][T20044] 8021q: adding VLAN 0 to HW filter on device bond8 [ 463.004126][T20055] lo speed is unknown, defaulting to 1000 [ 463.070938][T20061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3834'. [ 463.520932][T20085] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.539006][T20097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3839'. [ 463.548584][T20085] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.607760][T20082] lo speed is unknown, defaulting to 1000 [ 463.667390][T20085] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.688483][T20085] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.750615][T20102] netlink: 'syz.4.3843': attribute type 21 has an invalid length. [ 463.767952][T20085] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.788395][T20085] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.875281][T20085] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.907557][T20085] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.043060][T10119] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.072982][T10119] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.120591][T20121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3849'. [ 464.140473][T20122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3850'. [ 464.168643][T20122] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 464.175911][T20122] IPv6: NLM_F_CREATE should be set when creating new route [ 464.196879][T20121] 8021q: adding VLAN 0 to HW filter on device bond2 [ 464.215566][T10132] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.226702][T10132] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.271047][T10118] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.280684][T20117] lo speed is unknown, defaulting to 1000 [ 464.297902][T10118] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.349869][T10118] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.371201][T10118] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.395196][T20131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3851'. [ 464.442169][T20137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3851'. [ 464.850735][T20165] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3859'. [ 464.923430][T10134] IPVS: stop unused estimator thread 0... [ 465.283562][T20187] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3864'. [ 465.344930][T20190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3867'. [ 465.429712][T20185] lo speed is unknown, defaulting to 1000 [ 465.493648][T20196] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 466.079845][T20219] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3872'. [ 466.291093][T20229] FAULT_INJECTION: forcing a failure. [ 466.291093][T20229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.322163][T20229] CPU: 1 UID: 0 PID: 20229 Comm: syz.3.3876 Not tainted syzkaller #0 PREEMPT(full) [ 466.322190][T20229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 466.322202][T20229] Call Trace: [ 466.322210][T20229] [ 466.322218][T20229] dump_stack_lvl+0xe8/0x150 [ 466.322251][T20229] should_fail_ex+0x412/0x560 [ 466.322278][T20229] _copy_from_user+0x2d/0xb0 [ 466.322307][T20229] generic_map_update_batch+0x648/0x990 [ 466.322341][T20229] ? __pfx_generic_map_update_batch+0x10/0x10 [ 466.322374][T20229] ? __pfx_generic_map_update_batch+0x10/0x10 [ 466.322396][T20229] bpf_map_do_batch+0x39b/0x630 [ 466.322433][T20229] __sys_bpf+0x7c1/0x950 [ 466.322462][T20229] ? __pfx___sys_bpf+0x10/0x10 [ 466.322486][T20229] ? kmem_cache_free+0x187/0x630 [ 466.322520][T20229] ? ksys_write+0x1fc/0x270 [ 466.322540][T20229] ? __pfx_ksys_write+0x10/0x10 [ 466.322564][T20229] __x64_sys_bpf+0x7c/0x90 [ 466.322589][T20229] do_syscall_64+0x14d/0xf80 [ 466.322642][T20229] ? trace_irq_disable+0x3b/0x150 [ 466.322669][T20229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.322689][T20229] ? clear_bhb_loop+0x40/0x90 [ 466.322713][T20229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.322733][T20229] RIP: 0033:0x7f981779c629 [ 466.322751][T20229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.322773][T20229] RSP: 002b:00007f98185cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 466.322794][T20229] RAX: ffffffffffffffda RBX: 00007f9817a15fa0 RCX: 00007f981779c629 [ 466.322808][T20229] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 466.322821][T20229] RBP: 00007f98185cb090 R08: 0000000000000000 R09: 0000000000000000 [ 466.322833][T20229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 466.322844][T20229] R13: 00007f9817a16038 R14: 00007f9817a15fa0 R15: 00007fff0f766dc8 [ 466.322874][T20229] [ 466.699782][T20239] lo speed is unknown, defaulting to 1000 [ 469.924469][T20254] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 470.218753][T20305] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 470.352133][T20317] netlink: 'syz.0.3901': attribute type 1 has an invalid length. [ 470.389392][T20317] netlink: 13 bytes leftover after parsing attributes in process `syz.0.3901'. [ 470.492966][T20309] lo speed is unknown, defaulting to 1000 [ 470.705483][T20340] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3906'. [ 470.913725][ T5489] veth0_vlan: left promiscuous mode [ 470.937285][ T5489] veth0_vlan: entered promiscuous mode [ 471.985552][T20359] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode [ 473.455721][T20323] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 473.812943][T20383] lo speed is unknown, defaulting to 1000 [ 474.672505][T20425] FAULT_INJECTION: forcing a failure. [ 474.672505][T20425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 474.689225][T20425] CPU: 1 UID: 0 PID: 20425 Comm: syz.0.3926 Not tainted syzkaller #0 PREEMPT(full) [ 474.689250][T20425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 474.689262][T20425] Call Trace: [ 474.689269][T20425] [ 474.689277][T20425] dump_stack_lvl+0xe8/0x150 [ 474.689307][T20425] should_fail_ex+0x412/0x560 [ 474.689332][T20425] _copy_from_user+0x2d/0xb0 [ 474.689357][T20425] ___sys_sendmsg+0x1c6/0x360 [ 474.689395][T20425] ? __pfx____sys_sendmsg+0x10/0x10 [ 474.689451][T20425] ? __fget_files+0x2a/0x420 [ 474.689475][T20425] ? __fget_files+0x3a0/0x420 [ 474.689507][T20425] __x64_sys_sendmsg+0x1bd/0x2a0 [ 474.689536][T20425] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 474.689568][T20425] ? __pfx_ksys_write+0x10/0x10 [ 474.689613][T20425] do_syscall_64+0x14d/0xf80 [ 474.689640][T20425] ? trace_irq_disable+0x3b/0x150 [ 474.689667][T20425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.689685][T20425] ? clear_bhb_loop+0x40/0x90 [ 474.689708][T20425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.689727][T20425] RIP: 0033:0x7ff56659c629 [ 474.689744][T20425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.689761][T20425] RSP: 002b:00007ff5674e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 474.689781][T20425] RAX: ffffffffffffffda RBX: 00007ff566815fa0 RCX: 00007ff56659c629 [ 474.689795][T20425] RDX: 0000000000000004 RSI: 0000200000001ec0 RDI: 0000000000000003 [ 474.689805][T20425] RBP: 00007ff5674e1090 R08: 0000000000000000 R09: 0000000000000000 [ 474.689817][T20425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.689827][T20425] R13: 00007ff566816038 R14: 00007ff566815fa0 R15: 00007ffdc6ded8d8 [ 474.689858][T20425] [ 474.977537][T20433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3929'. [ 475.034239][T20433] 8021q: adding VLAN 0 to HW filter on device bond2 [ 475.203614][T20445] lo speed is unknown, defaulting to 1000 [ 475.337488][T20457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3934'. [ 475.430326][T20460] netlink: 'syz.2.3934': attribute type 3 has an invalid length. [ 475.448486][T20460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3934'. [ 475.507523][T20462] lo speed is unknown, defaulting to 1000 [ 476.367042][T20471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3937'. [ 477.176906][T20407] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 477.337508][T20478] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3940'. [ 477.432455][T20482] lo speed is unknown, defaulting to 1000 [ 477.786153][T20493] lo speed is unknown, defaulting to 1000 [ 477.818003][T20507] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input11 [ 477.831566][T20500] lo speed is unknown, defaulting to 1000 [ 478.517899][T20536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3958'. [ 478.572523][T20542] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3960'. [ 478.615296][T20541] syzkaller0: entered promiscuous mode [ 478.624727][T20541] syzkaller0: entered allmulticast mode [ 478.833067][T20551] batadv0: entered promiscuous mode [ 478.844052][T20551] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 479.218802][T20581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3970'. [ 480.011228][T20585] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3971'. [ 480.067313][T20587] lo speed is unknown, defaulting to 1000 [ 481.833614][T20554] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 481.974461][T20597] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3977'. [ 481.986767][T20601] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3976'. [ 482.007275][T20601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3976'. [ 482.091617][T20609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3981'. [ 482.101845][T20609] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3981'. [ 482.133395][T20611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3978'. [ 482.282913][T20617] lo speed is unknown, defaulting to 1000 [ 482.396618][T20630] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3984'. [ 482.443888][T20630] netlink: 'syz.0.3984': attribute type 4 has an invalid length. [ 482.604679][T20630] lo speed is unknown, defaulting to 1000 [ 482.701192][T20640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3985'. [ 482.726598][T20639] lo speed is unknown, defaulting to 1000 [ 483.481498][T20670] FAULT_INJECTION: forcing a failure. [ 483.481498][T20670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.497941][T20670] CPU: 0 UID: 0 PID: 20670 Comm: syz.2.3992 Not tainted syzkaller #0 PREEMPT(full) [ 483.497967][T20670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 483.497978][T20670] Call Trace: [ 483.497985][T20670] [ 483.497993][T20670] dump_stack_lvl+0xe8/0x150 [ 483.498024][T20670] should_fail_ex+0x412/0x560 [ 483.498051][T20670] _copy_from_user+0x2d/0xb0 [ 483.498079][T20670] generic_map_update_batch+0x648/0x990 [ 483.498111][T20670] ? __pfx_generic_map_update_batch+0x10/0x10 [ 483.498142][T20670] ? __pfx_generic_map_update_batch+0x10/0x10 [ 483.498165][T20670] bpf_map_do_batch+0x39b/0x630 [ 483.498189][T20670] __sys_bpf+0x7c1/0x950 [ 483.498219][T20670] ? __pfx___sys_bpf+0x10/0x10 [ 483.498244][T20670] ? kmem_cache_free+0x187/0x630 [ 483.498281][T20670] ? ksys_write+0x1fc/0x270 [ 483.498304][T20670] ? __pfx_ksys_write+0x10/0x10 [ 483.498328][T20670] __x64_sys_bpf+0x7c/0x90 [ 483.498354][T20670] do_syscall_64+0x14d/0xf80 [ 483.498381][T20670] ? trace_irq_disable+0x3b/0x150 [ 483.498407][T20670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.498426][T20670] ? clear_bhb_loop+0x40/0x90 [ 483.498449][T20670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.498468][T20670] RIP: 0033:0x7f44e259c629 [ 483.498485][T20670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.498501][T20670] RSP: 002b:00007f44e3500028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 483.498521][T20670] RAX: ffffffffffffffda RBX: 00007f44e2815fa0 RCX: 00007f44e259c629 [ 483.498544][T20670] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 483.498556][T20670] RBP: 00007f44e3500090 R08: 0000000000000000 R09: 0000000000000000 [ 483.498568][T20670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 483.498578][T20670] R13: 00007f44e2816038 R14: 00007f44e2815fa0 R15: 00007ffef32b3f38 [ 483.498614][T20670] [ 483.863613][T20677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3993'. [ 483.992705][T20683] netlink: 208 bytes leftover after parsing attributes in process `syz.3.3995'. [ 486.086782][T20649] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 486.547505][T20723] lo speed is unknown, defaulting to 1000 [ 486.567787][T20724] syzkaller0: entered promiscuous mode [ 486.576206][T20724] syzkaller0: entered allmulticast mode [ 486.869356][T20738] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 487.064675][T20750] FAULT_INJECTION: forcing a failure. [ 487.064675][T20750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.095237][T20750] CPU: 0 UID: 0 PID: 20750 Comm: syz.2.4009 Not tainted syzkaller #0 PREEMPT(full) [ 487.095263][T20750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 487.095275][T20750] Call Trace: [ 487.095282][T20750] [ 487.095290][T20750] dump_stack_lvl+0xe8/0x150 [ 487.095327][T20750] should_fail_ex+0x412/0x560 [ 487.095354][T20750] _copy_from_iter+0x1d3/0x1670 [ 487.095405][T20750] ? sock_alloc_send_pskb+0x896/0x990 [ 487.095444][T20750] ? __pfx__copy_from_iter+0x10/0x10 [ 487.095479][T20750] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 487.095515][T20750] skb_copy_datagram_from_iter+0xf5/0x710 [ 487.095553][T20750] ? skb_put+0x11b/0x210 [ 487.095583][T20750] tun_get_user+0xc38/0x3dd0 [ 487.095623][T20750] ? aa_file_perm+0x12d/0x1630 [ 487.095654][T20750] ? aa_file_perm+0x440/0x1630 [ 487.095687][T20750] ? __pfx_tun_get_user+0x10/0x10 [ 487.095719][T20750] ? __lock_acquire+0x6b5/0x2cf0 [ 487.095756][T20750] ? ref_tracker_alloc+0x363/0x4d0 [ 487.095785][T20750] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 487.095816][T20750] ? tun_get+0x1c/0x2f0 [ 487.095848][T20750] ? tun_get+0x1c/0x2f0 [ 487.095873][T20750] ? tun_get+0x1c/0x2f0 [ 487.095903][T20750] tun_chr_write_iter+0x113/0x200 [ 487.095933][T20750] vfs_write+0x61d/0xb90 [ 487.095972][T20750] ? __pfx_vfs_write+0x10/0x10 [ 487.096004][T20750] ? __fget_files+0x2a/0x420 [ 487.096041][T20750] ksys_write+0x150/0x270 [ 487.096064][T20750] ? __pfx_ksys_write+0x10/0x10 [ 487.096097][T20750] do_syscall_64+0x14d/0xf80 [ 487.096131][T20750] ? trace_irq_disable+0x3b/0x150 [ 487.096160][T20750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.096182][T20750] ? clear_bhb_loop+0x40/0x90 [ 487.096208][T20750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.096228][T20750] RIP: 0033:0x7f44e255cece [ 487.096248][T20750] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 487.096266][T20750] RSP: 002b:00007f44e34fffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 487.096288][T20750] RAX: ffffffffffffffda RBX: 00007f44e35006c0 RCX: 00007f44e255cece [ 487.096302][T20750] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 00000000000000c8 [ 487.096315][T20750] RBP: 00007f44e3500090 R08: 0000000000000000 R09: 0000000000000000 [ 487.096327][T20750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.096339][T20750] R13: 00007f44e2816038 R14: 00007f44e2815fa0 R15: 00007ffef32b3f38 [ 487.096371][T20750] [ 487.568726][T20758] __nla_validate_parse: 3 callbacks suppressed [ 487.568746][T20758] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4011'. [ 487.938559][T20769] netlink: 'syz.3.4014': attribute type 6 has an invalid length. [ 487.994483][T20771] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 488.092761][T20776] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input12 [ 488.141076][T20767] netlink: 'syz.2.4013': attribute type 4 has an invalid length. [ 488.168674][T20767] netlink: 'syz.2.4013': attribute type 1 has an invalid length. [ 488.177440][T20767] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4013'. [ 488.266720][T20773] lo speed is unknown, defaulting to 1000 [ 488.687358][T20799] netlink: 732 bytes leftover after parsing attributes in process `syz.3.4022'. [ 488.701897][T20799] netlink: 732 bytes leftover after parsing attributes in process `syz.3.4022'. [ 488.932026][T20811] lo speed is unknown, defaulting to 1000 [ 489.662436][T20847] FAULT_INJECTION: forcing a failure. [ 489.662436][T20847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.695606][T20847] CPU: 0 UID: 0 PID: 20847 Comm: syz.4.4035 Not tainted syzkaller #0 PREEMPT(full) [ 489.695633][T20847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 489.695644][T20847] Call Trace: [ 489.695650][T20847] [ 489.695658][T20847] dump_stack_lvl+0xe8/0x150 [ 489.695686][T20847] should_fail_ex+0x412/0x560 [ 489.695712][T20847] _copy_from_user+0x2d/0xb0 [ 489.695738][T20847] generic_map_update_batch+0x69a/0x990 [ 489.695769][T20847] ? __pfx_generic_map_update_batch+0x10/0x10 [ 489.695798][T20847] ? __pfx_generic_map_update_batch+0x10/0x10 [ 489.695820][T20847] bpf_map_do_batch+0x39b/0x630 [ 489.695842][T20847] __sys_bpf+0x7c1/0x950 [ 489.695870][T20847] ? __pfx___sys_bpf+0x10/0x10 [ 489.695894][T20847] ? kmem_cache_free+0x187/0x630 [ 489.695926][T20847] ? ksys_write+0x1fc/0x270 [ 489.695945][T20847] ? __pfx_ksys_write+0x10/0x10 [ 489.695969][T20847] __x64_sys_bpf+0x7c/0x90 [ 489.695992][T20847] do_syscall_64+0x14d/0xf80 [ 489.696016][T20847] ? trace_irq_disable+0x3b/0x150 [ 489.696044][T20847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.696062][T20847] ? clear_bhb_loop+0x40/0x90 [ 489.696083][T20847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.696100][T20847] RIP: 0033:0x7f2ad099c629 [ 489.696117][T20847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.696131][T20847] RSP: 002b:00007f2ad181c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 489.696149][T20847] RAX: ffffffffffffffda RBX: 00007f2ad0c15fa0 RCX: 00007f2ad099c629 [ 489.696162][T20847] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 489.696172][T20847] RBP: 00007f2ad181c090 R08: 0000000000000000 R09: 0000000000000000 [ 489.696182][T20847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 489.696192][T20847] R13: 00007f2ad0c16038 R14: 00007f2ad0c15fa0 R15: 00007ffee5883c48 [ 489.696219][T20847] [ 490.120151][T20854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4037'. [ 490.553006][T20890] netlink: 'syz.2.4050': attribute type 1 has an invalid length. [ 490.562408][T20890] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4050'. [ 490.674234][T20896] FAULT_INJECTION: forcing a failure. [ 490.674234][T20896] name failslab, interval 1, probability 0, space 0, times 0 [ 490.687987][T20896] CPU: 0 UID: 0 PID: 20896 Comm: syz.4.4052 Not tainted syzkaller #0 PREEMPT(full) [ 490.688012][T20896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 490.688022][T20896] Call Trace: [ 490.688028][T20896] [ 490.688035][T20896] dump_stack_lvl+0xe8/0x150 [ 490.688061][T20896] should_fail_ex+0x412/0x560 [ 490.688084][T20896] should_failslab+0xa8/0x100 [ 490.688106][T20896] __kmalloc_noprof+0xe8/0x760 [ 490.688123][T20896] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 490.688150][T20896] tomoyo_realpath_from_path+0xe3/0x5d0 [ 490.688179][T20896] ? tomoyo_path_number_perm+0x219/0x630 [ 490.688196][T20896] tomoyo_path_number_perm+0x246/0x630 [ 490.688226][T20896] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 490.688262][T20896] ? __lock_acquire+0x6b5/0x2cf0 [ 490.688298][T20896] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 490.688347][T20896] ? __fget_files+0x2a/0x420 [ 490.688376][T20896] ? __fget_files+0x2a/0x420 [ 490.688401][T20896] ? __fget_files+0x3a0/0x420 [ 490.688424][T20896] ? __fget_files+0x2a/0x420 [ 490.688453][T20896] security_file_ioctl+0xc3/0x2a0 [ 490.688484][T20896] __se_sys_ioctl+0x47/0x170 [ 490.688508][T20896] do_syscall_64+0x14d/0xf80 [ 490.688533][T20896] ? trace_irq_disable+0x3b/0x150 [ 490.688559][T20896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.688578][T20896] ? clear_bhb_loop+0x40/0x90 [ 490.688602][T20896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.688639][T20896] RIP: 0033:0x7f2ad099c629 [ 490.688657][T20896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.688674][T20896] RSP: 002b:00007f2ad181c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 490.688695][T20896] RAX: ffffffffffffffda RBX: 00007f2ad0c15fa0 RCX: 00007f2ad099c629 [ 490.688709][T20896] RDX: 0000200000000180 RSI: 0000000000008916 RDI: 0000000000000008 [ 490.688721][T20896] RBP: 00007f2ad181c090 R08: 0000000000000000 R09: 0000000000000000 [ 490.688732][T20896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.688743][T20896] R13: 00007f2ad0c16038 R14: 00007f2ad0c15fa0 R15: 00007ffee5883c48 [ 490.688773][T20896] [ 490.907827][T20896] ERROR: Out of memory at tomoyo_realpath_from_path. [ 491.047146][T20902] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4053'. [ 491.190723][T20914] FAULT_INJECTION: forcing a failure. [ 491.190723][T20914] name failslab, interval 1, probability 0, space 0, times 0 [ 491.217989][T20914] CPU: 1 UID: 0 PID: 20914 Comm: syz.3.4058 Not tainted syzkaller #0 PREEMPT(full) [ 491.218016][T20914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 491.218028][T20914] Call Trace: [ 491.218036][T20914] [ 491.218044][T20914] dump_stack_lvl+0xe8/0x150 [ 491.218076][T20914] should_fail_ex+0x412/0x560 [ 491.218104][T20914] should_failslab+0xa8/0x100 [ 491.218129][T20914] __kmalloc_cache_noprof+0x88/0x660 [ 491.218149][T20914] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 491.218178][T20914] ? genl_start+0x1c9/0x6c0 [ 491.218209][T20914] genl_start+0x1c9/0x6c0 [ 491.218234][T20914] ? netlink_lookup+0x30/0x200 [ 491.218269][T20914] __netlink_dump_start+0x469/0x7e0 [ 491.218298][T20914] genl_family_rcv_msg_dumpit+0x213/0x310 [ 491.218330][T20914] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 491.218357][T20914] ? genl_get_cmd+0x4a8/0x930 [ 491.218398][T20914] ? __pfx_genl_start+0x10/0x10 [ 491.218420][T20914] ? __pfx_genl_dumpit+0x10/0x10 [ 491.218442][T20914] ? __pfx_genl_done+0x10/0x10 [ 491.218489][T20914] ? __lock_acquire+0x6b5/0x2cf0 [ 491.218520][T20914] genl_rcv_msg+0x5e8/0x7a0 [ 491.218553][T20914] ? __pfx_genl_rcv_msg+0x10/0x10 [ 491.218579][T20914] ? __pfx_netdev_nl_queue_get_dumpit+0x10/0x10 [ 491.218606][T20914] ? __lock_acquire+0x6b5/0x2cf0 [ 491.218640][T20914] netlink_rcv_skb+0x232/0x4b0 [ 491.218663][T20914] ? __pfx_genl_rcv_msg+0x10/0x10 [ 491.218701][T20914] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 491.218737][T20914] ? down_read+0x272/0x2e0 [ 491.218753][T20914] ? genl_rcv+0xd/0x40 [ 491.218778][T20914] genl_rcv+0x28/0x40 [ 491.218800][T20914] netlink_unicast+0x80f/0x9b0 [ 491.218826][T20914] ? __pfx_netlink_unicast+0x10/0x10 [ 491.218846][T20914] ? netlink_sendmsg+0x650/0xb40 [ 491.218865][T20914] ? skb_put+0x11b/0x210 [ 491.218892][T20914] netlink_sendmsg+0x813/0xb40 [ 491.218922][T20914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.218946][T20914] ? aa_sock_msg_perm+0xf1/0x1b0 [ 491.218969][T20914] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 491.218990][T20914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.219009][T20914] ____sys_sendmsg+0xa68/0xad0 [ 491.219043][T20914] ? __pfx_____sys_sendmsg+0x10/0x10 [ 491.219076][T20914] ? import_iovec+0x73/0xa0 [ 491.219104][T20914] ___sys_sendmsg+0x2a5/0x360 [ 491.219133][T20914] ? __pfx____sys_sendmsg+0x10/0x10 [ 491.219190][T20914] ? __fget_files+0x2a/0x420 [ 491.219214][T20914] ? __fget_files+0x3a0/0x420 [ 491.219253][T20914] __x64_sys_sendmsg+0x1bd/0x2a0 [ 491.219305][T20914] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 491.219346][T20914] ? __pfx_ksys_write+0x10/0x10 [ 491.219379][T20914] do_syscall_64+0x14d/0xf80 [ 491.219407][T20914] ? trace_irq_disable+0x3b/0x150 [ 491.219437][T20914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.219457][T20914] ? clear_bhb_loop+0x40/0x90 [ 491.219483][T20914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.219503][T20914] RIP: 0033:0x7f981779c629 [ 491.219523][T20914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.219541][T20914] RSP: 002b:00007f98185cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 491.219563][T20914] RAX: ffffffffffffffda RBX: 00007f9817a15fa0 RCX: 00007f981779c629 [ 491.219578][T20914] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 491.219591][T20914] RBP: 00007f98185cb090 R08: 0000000000000000 R09: 0000000000000000 [ 491.219604][T20914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.219616][T20914] R13: 00007f9817a16038 R14: 00007f9817a15fa0 R15: 00007fff0f766dc8 [ 491.219650][T20914] [ 492.086355][T20958] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4073'. [ 492.139808][T20958] tipc: Failed to remove unknown binding: 66,0,0/2130706433:3494578731/3494578732 [ 492.169050][T20958] tipc: Failed to remove unknown binding: 66,0,0/2130706433:3494578731/3494578732 [ 492.477432][ T5833] IPVS: starting estimator thread 0... [ 492.555600][T20981] lo speed is unknown, defaulting to 1000 [ 492.568410][T20982] IPVS: using max 36 ests per chain, 86400 per kthread [ 492.583249][T20988] IPVS: set_ctl: invalid protocol: 136 127.0.0.1:20003 [ 492.598945][T20986] bridge_slave_1: left allmulticast mode [ 492.604645][T20986] bridge_slave_1: left promiscuous mode [ 492.610869][T20986] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.621180][T20986] bridge_slave_0: left promiscuous mode [ 492.626943][T20986] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.862012][T20999] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4085'. [ 492.954142][T20999] bond3: entered promiscuous mode [ 493.115789][T21014] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4093'. [ 493.331755][T21027] lo speed is unknown, defaulting to 1000 [ 493.563884][T21038] lo speed is unknown, defaulting to 1000 [ 493.705669][T21045] FAULT_INJECTION: forcing a failure. [ 493.705669][T21045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.720623][T21049] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4103'. [ 493.729586][T21045] CPU: 1 UID: 0 PID: 21045 Comm: syz.2.4102 Not tainted syzkaller #0 PREEMPT(full) [ 493.729618][T21045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 493.729629][T21045] Call Trace: [ 493.729637][T21045] [ 493.729646][T21045] dump_stack_lvl+0xe8/0x150 [ 493.729686][T21045] should_fail_ex+0x412/0x560 [ 493.729710][T21045] _copy_from_iter+0x1d3/0x1670 [ 493.729743][T21045] ? __pfx__copy_from_iter+0x10/0x10 [ 493.729762][T21045] ? sock_alloc_send_pskb+0x896/0x990 [ 493.729813][T21045] ? __pfx__copy_from_iter+0x10/0x10 [ 493.729837][T21045] ? page_copy_sane+0x16a/0x270 [ 493.729861][T21045] copy_page_from_iter+0xdd/0x170 [ 493.729918][T21045] skb_copy_datagram_from_iter+0x306/0x710 [ 493.729973][T21045] tun_get_user+0xc38/0x3dd0 [ 493.730009][T21045] ? aa_file_perm+0x12d/0x1630 [ 493.730043][T21045] ? aa_file_perm+0x440/0x1630 [ 493.730066][T21045] ? __pfx_tun_get_user+0x10/0x10 [ 493.730168][T21045] ? __lock_acquire+0x6b5/0x2cf0 [ 493.730275][T21045] ? ref_tracker_alloc+0x363/0x4d0 [ 493.730337][T21045] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 493.730406][T21045] ? tun_get+0x1c/0x2f0 [ 493.730481][T21045] ? tun_get+0x1c/0x2f0 [ 493.730532][T21045] ? tun_get+0x1c/0x2f0 [ 493.730605][T21045] tun_chr_write_iter+0x113/0x200 [ 493.730672][T21045] vfs_write+0x61d/0xb90 [ 493.730744][T21045] ? __pfx_vfs_write+0x10/0x10 [ 493.730823][T21045] ? __fget_files+0x2a/0x420 [ 493.730909][T21045] ksys_write+0x150/0x270 [ 493.730956][T21045] ? __pfx_ksys_write+0x10/0x10 [ 493.731038][T21045] do_syscall_64+0x14d/0xf80 [ 493.731103][T21045] ? trace_irq_disable+0x3b/0x150 [ 493.731168][T21045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.731213][T21045] ? clear_bhb_loop+0x40/0x90 [ 493.731268][T21045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.731308][T21045] RIP: 0033:0x7f44e255cece [ 493.731353][T21045] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 493.731391][T21045] RSP: 002b:00007f44e34fffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 493.731442][T21045] RAX: ffffffffffffffda RBX: 00007f44e35006c0 RCX: 00007f44e255cece [ 493.731472][T21045] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 00000000000000c8 [ 493.731500][T21045] RBP: 00007f44e3500090 R08: 0000000000000000 R09: 0000000000000000 [ 493.731533][T21045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 493.731571][T21045] R13: 00007f44e2816038 R14: 00007f44e2815fa0 R15: 00007ffef32b3f38 [ 493.731653][T21045] [ 493.991768][T21049] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4103'. [ 494.131269][ T1225] IPVS: starting estimator thread 0... [ 494.188847][T21062] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4107'. [ 494.207112][T21063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4105'. [ 494.229095][T21060] IPVS: using max 35 ests per chain, 84000 per kthread [ 494.345374][T21068] xt_bpf: check failed: parse error [ 494.480146][T21073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4110'. [ 494.560494][T21073] bond4: entered promiscuous mode [ 494.755566][T21095] lo speed is unknown, defaulting to 1000 [ 494.943385][T21108] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4118'. [ 495.117189][T21119] xt_bpf: check failed: parse error [ 495.209059][T21122] sctp: [Deprecated]: syz.0.4122 (pid 21122) Use of struct sctp_assoc_value in delayed_ack socket option. [ 495.209059][T21122] Use struct sctp_sack_info instead [ 495.390607][T21131] xt_TCPMSS: Only works on TCP SYN packets [ 495.484649][T21132] netlink: 'syz.0.4122': attribute type 10 has an invalid length. [ 495.667007][T21143] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4131'. [ 495.677517][T21132] team0: Cannot enslave team device to itself [ 495.782681][T21145] syzkaller0: entered promiscuous mode [ 495.791331][T21145] syzkaller0: entered allmulticast mode [ 495.982660][T21159] xt_bpf: check failed: parse error [ 496.237417][T21168] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 496.276648][T21168] bond5: (slave lo): Enslaving as an active interface with an up link [ 496.350974][T21168] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 497.132295][T21207] xt_bpf: check failed: parse error [ 497.486345][T21218] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4151'. [ 497.840143][T21243] xt_bpf: check failed: parse error [ 498.226093][T21265] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4164'. [ 498.610438][T21272] lo speed is unknown, defaulting to 1000 [ 498.618662][T21187] Bluetooth: hci5: command 0x041b tx timeout [ 498.624821][T21187] Bluetooth: hci2: command 0x0406 tx timeout [ 498.667506][T21282] xt_bpf: check failed: parse error [ 498.990607][T21293] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4174'. [ 499.269335][T21279] IPVS: length: 132 != 8 [ 499.293654][T21279] pimreg: entered allmulticast mode [ 499.361012][T21279] pimreg: left allmulticast mode [ 500.040712][T21319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4181'. [ 500.136674][T21319] bond4: entered promiscuous mode [ 500.147037][T21319] bond4: entered allmulticast mode [ 500.290978][T21330] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4185'. [ 500.687831][T21359] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4199'. [ 500.815673][T21371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4205'. [ 500.855300][T21371] bond5: entered promiscuous mode [ 500.861257][T21371] bond5: entered allmulticast mode [ 501.204266][T21383] batadv0: entered promiscuous mode [ 501.308478][T21383] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 501.678620][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 501.687804][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.694396][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.706924][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 501.839905][T21395] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4212'. [ 501.996276][T21397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4213'. [ 502.008220][T21405] lo speed is unknown, defaulting to 1000 [ 502.102810][T21413] xt_bpf: check failed: parse error [ 502.417122][T21427] 8021q: adding VLAN 0 to HW filter on device bond9 [ 502.447995][T21435] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4225'. [ 502.482449][T21433] tipc: Started in network mode [ 502.487396][T21433] tipc: Node identity def7131ef955, cluster identity 4711 [ 502.539114][T21433] tipc: Enabled bearer , priority 0 [ 502.564771][T21441] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4228'. [ 502.577067][T21438] syzkaller0: entered promiscuous mode [ 502.583877][T21438] syzkaller0: entered allmulticast mode [ 502.592933][T21441] mac80211_hwsim hwsim34 syzkaller0: left allmulticast mode [ 502.605016][T21433] tipc: Resetting bearer [ 502.618465][T21431] tipc: Resetting bearer [ 502.646897][T21431] tipc: Disabling bearer [ 502.727847][T21446] lo speed is unknown, defaulting to 1000 [ 502.772551][T21449] xt_bpf: check failed: parse error [ 502.957225][T21458] FAULT_INJECTION: forcing a failure. [ 502.957225][T21458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 502.993364][T21458] CPU: 1 UID: 0 PID: 21458 Comm: syz.3.4233 Not tainted syzkaller #0 PREEMPT(full) [ 502.993393][T21458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 502.993406][T21458] Call Trace: [ 502.993415][T21458] [ 502.993423][T21458] dump_stack_lvl+0xe8/0x150 [ 502.993456][T21458] should_fail_ex+0x412/0x560 [ 502.993485][T21458] _copy_from_user+0x2d/0xb0 [ 502.993522][T21458] do_ip_vs_set_ctl+0x353/0xaf0 [ 502.993556][T21458] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 502.993598][T21458] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 502.993636][T21458] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 502.993672][T21458] ? __pfx_aa_sk_perm+0x10/0x10 [ 502.993701][T21458] nf_setsockopt+0x26f/0x290 [ 502.993733][T21458] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 502.993758][T21458] do_sock_setsockopt+0x17c/0x1b0 [ 502.993791][T21458] __x64_sys_setsockopt+0x13d/0x1b0 [ 502.993824][T21458] do_syscall_64+0x14d/0xf80 [ 502.993853][T21458] ? trace_irq_disable+0x3b/0x150 [ 502.993881][T21458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.993902][T21458] ? clear_bhb_loop+0x40/0x90 [ 502.993927][T21458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.993947][T21458] RIP: 0033:0x7f981779c629 [ 502.993977][T21458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.993993][T21458] RSP: 002b:00007f98185cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 502.994014][T21458] RAX: ffffffffffffffda RBX: 00007f9817a15fa0 RCX: 00007f981779c629 [ 502.994027][T21458] RDX: 0000000000000487 RSI: 0000000000000000 RDI: 0000000000000003 [ 502.994038][T21458] RBP: 00007f98185cb090 R08: 0000000000000044 R09: 0000000000000000 [ 502.994049][T21458] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.994060][T21458] R13: 00007f9817a16038 R14: 00007f9817a15fa0 R15: 00007fff0f766dc8 [ 502.994089][T21458] [ 503.565713][T21485] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4241'. [ 503.608810][T21485] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4241'. [ 503.716693][T21490] xt_bpf: check failed: parse error [ 503.744938][T21494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4245'. [ 503.772358][T21493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4243'. [ 503.796251][T21494] bond10: entered promiscuous mode [ 503.802096][T21494] bond10: entered allmulticast mode [ 503.827954][T21499] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4246'. [ 503.837327][T21497] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4244'. [ 503.915660][T21501] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4247'. [ 504.084130][T21515] netlink: 'syz.0.4251': attribute type 1 has an invalid length. [ 504.241735][T21527] FAULT_INJECTION: forcing a failure. [ 504.241735][T21527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.255625][T21527] CPU: 0 UID: 0 PID: 21527 Comm: syz.4.4256 Not tainted syzkaller #0 PREEMPT(full) [ 504.255650][T21527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 504.255662][T21527] Call Trace: [ 504.255669][T21527] [ 504.255677][T21527] dump_stack_lvl+0xe8/0x150 [ 504.255709][T21527] should_fail_ex+0x412/0x560 [ 504.255736][T21527] _copy_to_user+0x31/0xb0 [ 504.255764][T21527] simple_read_from_buffer+0xe1/0x170 [ 504.255794][T21527] proc_fail_nth_read+0x1bb/0x230 [ 504.255833][T21527] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 504.255865][T21527] ? rw_verify_area+0x2a6/0x4d0 [ 504.255882][T21527] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 504.255907][T21527] vfs_read+0x20c/0xa70 [ 504.255942][T21527] ? fdget_pos+0x246/0x320 [ 504.255976][T21527] ? __pfx___mutex_lock+0x10/0x10 [ 504.256008][T21527] ? __pfx_vfs_read+0x10/0x10 [ 504.256030][T21527] ? __fget_files+0x2a/0x420 [ 504.256063][T21527] ? __fget_files+0x3a0/0x420 [ 504.256090][T21527] ? __fget_files+0x2a/0x420 [ 504.256128][T21527] ksys_read+0x150/0x270 [ 504.256151][T21527] ? __pfx_ksys_read+0x10/0x10 [ 504.256183][T21527] do_syscall_64+0x14d/0xf80 [ 504.256212][T21527] ? trace_irq_disable+0x3b/0x150 [ 504.256241][T21527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.256263][T21527] ? clear_bhb_loop+0x40/0x90 [ 504.256288][T21527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.256308][T21527] RIP: 0033:0x7f2ad095cece [ 504.256327][T21527] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 504.256345][T21527] RSP: 002b:00007f2ad181bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 504.256368][T21527] RAX: ffffffffffffffda RBX: 00007f2ad181c6c0 RCX: 00007f2ad095cece [ 504.256383][T21527] RDX: 000000000000000f RSI: 00007f2ad181c0a0 RDI: 0000000000000004 [ 504.256395][T21527] RBP: 00007f2ad181c090 R08: 0000000000000000 R09: 0000000000000000 [ 504.256408][T21527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.256421][T21527] R13: 00007f2ad0c16038 R14: 00007f2ad0c15fa0 R15: 00007ffee5883c48 [ 504.256456][T21527] [ 504.562864][T21533] IPv6: NLM_F_CREATE should be specified when creating new route [ 504.584564][T21533] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4257'. [ 504.653915][T21540] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4260'. [ 504.724449][T21544] lo speed is unknown, defaulting to 1000 [ 504.989880][T21555] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4266'. [ 505.141014][T21560] x_tables: duplicate underflow at hook 1 [ 505.226249][T21560] lo speed is unknown, defaulting to 1000 [ 505.887108][T21583] lo speed is unknown, defaulting to 1000 [ 506.078863][T21589] lo speed is unknown, defaulting to 1000 [ 506.113437][T21595] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input13 [ 506.609599][T21615] lo speed is unknown, defaulting to 1000 [ 507.098776][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5390 ms [ 507.106832][ C0] lec:lec_tx_timeout: lec0 [ 507.240151][T21640] bond5: entered promiscuous mode [ 507.384925][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 507.396944][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 507.404963][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 507.407782][T21640] bond5: entered allmulticast mode [ 507.420545][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 507.429911][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 507.535850][T21643] lo speed is unknown, defaulting to 1000 [ 507.694905][T21646] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 507.793730][T21648] lo speed is unknown, defaulting to 1000 [ 507.824810][T21643] chnl_net:caif_netlink_parms(): no params data found [ 507.966845][T21658] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 508.147788][T21658] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 508.305161][T21658] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 508.330040][T21643] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.347580][T21643] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.365616][T21643] bridge_slave_0: entered allmulticast mode [ 508.383900][T21643] bridge_slave_0: entered promiscuous mode [ 508.410081][T21643] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.427439][T21643] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.435028][T21643] bridge_slave_1: entered allmulticast mode [ 508.444675][T21643] bridge_slave_1: entered promiscuous mode [ 508.454812][T21658] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 508.493895][T21689] netlink: 'syz.2.4305': attribute type 10 has an invalid length. [ 508.558785][T21643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.612682][T21643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.698321][T10125] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 508.710589][T21643] team0: Port device team_slave_0 added [ 508.722196][T21643] team0: Port device team_slave_1 added [ 508.750500][T13168] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 508.806084][T21643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.821663][T21643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.849828][T21643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.875748][T10125] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 508.919210][T21643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.926313][T21643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.954714][T21643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.974349][T13168] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 508.990613][T21701] lo speed is unknown, defaulting to 1000 [ 509.005105][T21699] lo speed is unknown, defaulting to 1000 [ 509.060492][T21643] hsr_slave_0: entered promiscuous mode [ 509.067399][T21643] hsr_slave_1: entered promiscuous mode [ 509.073888][T21643] debugfs: 'hsr0' already exists in 'hsr' [ 509.079978][T21643] Cannot create hsr debugfs directory [ 509.329840][T21725] __nla_validate_parse: 11 callbacks suppressed [ 509.329862][T21725] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4315'. [ 509.370276][T21723] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4314'. [ 509.499493][ T5841] Bluetooth: hci6: command tx timeout [ 509.577161][T21736] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4314'. [ 509.760422][T21747] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 509.798594][T21748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4323'. [ 509.844893][T21753] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 511.578431][ T5841] Bluetooth: hci6: command tx timeout [ 511.851885][T21703] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 511.992220][T21760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4327'. [ 512.019098][T21760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4327'. [ 512.075511][T21762] lo speed is unknown, defaulting to 1000 [ 512.656569][T21816] lo speed is unknown, defaulting to 1000 [ 512.697517][T21817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4340'. [ 513.658990][ T5841] Bluetooth: hci6: command tx timeout [ 515.342814][T21791] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 515.612218][T21828] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 515.682752][T21836] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4349'. [ 515.742459][ T5841] Bluetooth: hci6: command tx timeout [ 515.852990][T21841] lo speed is unknown, defaulting to 1000 [ 516.103819][T21866] netlink: 'syz.0.4357': attribute type 30 has an invalid length. [ 516.120109][T21867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4355'. [ 516.231551][T21870] lo speed is unknown, defaulting to 1000 [ 518.951174][T21852] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 519.191064][T21894] lo speed is unknown, defaulting to 1000 [ 519.233740][T21902] xt_bpf: check failed: parse error [ 519.602072][T21919] lo speed is unknown, defaulting to 1000 [ 519.879294][T21933] lo speed is unknown, defaulting to 1000 [ 519.904488][T21936] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input14 [ 520.194196][T21952] xt_bpf: check failed: parse error [ 520.234111][T21953] lo speed is unknown, defaulting to 1000 [ 520.522277][T21967] netlink: 348 bytes leftover after parsing attributes in process `syz.2.4383'. [ 520.561341][T21968] netlink: 'syz.0.4381': attribute type 1 has an invalid length. [ 520.618411][T21968] 8021q: adding VLAN 0 to HW filter on device bond6 [ 520.846343][T21974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4384'. [ 520.872063][T21969] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4385'. [ 521.102198][T21974] team0: Port device team_slave_0 removed [ 521.651455][T22005] xt_bpf: check failed: parse error [ 521.666820][ T7666] lec:lec_start_xmit: lec0:No lecd attached [ 521.779503][T22012] netlink: 348 bytes leftover after parsing attributes in process `syz.0.4395'. [ 521.854046][T22015] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4396'. [ 521.967374][T22024] openvswitch: netlink: IP tunnel dst address not specified [ 522.002425][T22023] lo speed is unknown, defaulting to 1000 [ 522.095765][T22017] lo speed is unknown, defaulting to 1000 [ 522.439771][T22039] xt_bpf: check failed: parse error [ 522.645147][T22063] netlink: 348 bytes leftover after parsing attributes in process `syz.0.4408'. [ 522.816012][T22068] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.828125][T22068] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.923730][T22068] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.935376][T22068] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.041057][T22068] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.051143][T22068] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.126116][T22068] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.136336][T22068] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.251088][ T2997] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.264199][ T2997] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.295893][ T2997] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.308572][ T2997] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.330224][T13168] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.339853][T13168] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.361760][T10125] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.398357][T10125] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.453215][T22090] netlink: 280 bytes leftover after parsing attributes in process `syz.4.4418'. [ 523.519434][T22094] netlink: 'syz.4.4420': attribute type 21 has an invalid length. [ 523.648096][T22102] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4421'. [ 523.907036][T22120] netlink: 280 bytes leftover after parsing attributes in process `syz.2.4429'. [ 524.189810][T22147] FAULT_INJECTION: forcing a failure. [ 524.189810][T22147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.210104][T22144] lo speed is unknown, defaulting to 1000 [ 524.216049][T22147] CPU: 1 UID: 0 PID: 22147 Comm: syz.4.4439 Not tainted syzkaller #0 PREEMPT(full) [ 524.216076][T22147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 524.216089][T22147] Call Trace: [ 524.216098][T22147] [ 524.216107][T22147] dump_stack_lvl+0xe8/0x150 [ 524.216140][T22147] should_fail_ex+0x412/0x560 [ 524.216168][T22147] _copy_from_user+0x2d/0xb0 [ 524.216198][T22147] generic_map_update_batch+0x648/0x990 [ 524.216233][T22147] ? __pfx_generic_map_update_batch+0x10/0x10 [ 524.216277][T22147] ? __pfx_generic_map_update_batch+0x10/0x10 [ 524.216301][T22147] bpf_map_do_batch+0x39b/0x630 [ 524.216327][T22147] __sys_bpf+0x7c1/0x950 [ 524.216358][T22147] ? __pfx___sys_bpf+0x10/0x10 [ 524.216385][T22147] ? kmem_cache_free+0x187/0x630 [ 524.216422][T22147] ? ksys_write+0x1fc/0x270 [ 524.216444][T22147] ? __pfx_ksys_write+0x10/0x10 [ 524.216472][T22147] __x64_sys_bpf+0x7c/0x90 [ 524.216500][T22147] do_syscall_64+0x14d/0xf80 [ 524.216528][T22147] ? trace_irq_disable+0x3b/0x150 [ 524.216557][T22147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.216578][T22147] ? clear_bhb_loop+0x40/0x90 [ 524.216602][T22147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.216622][T22147] RIP: 0033:0x7f2ad099c629 [ 524.216641][T22147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.216659][T22147] RSP: 002b:00007f2ad181c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 524.216681][T22147] RAX: ffffffffffffffda RBX: 00007f2ad0c15fa0 RCX: 00007f2ad099c629 [ 524.216695][T22147] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 524.216708][T22147] RBP: 00007f2ad181c090 R08: 0000000000000000 R09: 0000000000000000 [ 524.216721][T22147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 524.216733][T22147] R13: 00007f2ad0c16038 R14: 00007f2ad0c15fa0 R15: 00007ffee5883c48 [ 524.216765][T22147] [ 524.561149][T22152] netlink: 'syz.3.4440': attribute type 1 has an invalid length. [ 524.633801][T22152] netlink: 'syz.3.4440': attribute type 2 has an invalid length. [ 524.673923][T22155] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4440'. [ 524.683111][T22152] netlink: 'syz.3.4440': attribute type 2 has an invalid length. [ 524.683147][T22152] netlink: 'syz.3.4440': attribute type 1 has an invalid length. [ 524.683163][T22152] netlink: 'syz.3.4440': attribute type 1 has an invalid length. [ 524.709322][T22155] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4440'. [ 525.288162][T22172] bond0: (slave macvlan2): Opening slave failed [ 525.659777][T22186] syzkaller1: entered promiscuous mode [ 525.665312][T22186] syzkaller1: entered allmulticast mode [ 525.896077][T22202] syzkaller0: entered promiscuous mode [ 525.901912][T22202] syzkaller0: entered allmulticast mode [ 525.939018][T22202] tipc: Enabled bearer , priority 0 [ 526.023763][T22200] tipc: Resetting bearer [ 526.050531][T22200] tipc: Disabling bearer [ 526.464886][T22224] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 526.971755][T22251] __nla_validate_parse: 8 callbacks suppressed [ 526.971774][T22251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4474'. [ 527.051259][T22253] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 527.067749][T22251] lo speed is unknown, defaulting to 1000 [ 527.098403][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5430 ms [ 527.106485][ C0] lec:lec_tx_timeout: lec0 [ 527.319070][T22262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4478'. [ 527.362703][T22262] 8021q: adding VLAN 0 to HW filter on device bond11 [ 527.763388][T22281] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 527.926750][T22289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4490'. [ 527.984708][T22292] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 528.325554][T22318] netlink: 'syz.3.4497': attribute type 3 has an invalid length. [ 528.335456][T22318] syzkaller0: entered promiscuous mode [ 528.341757][T22318] syzkaller0: entered allmulticast mode [ 528.432390][T22321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4498'. [ 528.490241][T22321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4498'. [ 528.517779][T22325] lo speed is unknown, defaulting to 1000 [ 528.526330][T22323] netlink: 292 bytes leftover after parsing attributes in process `syz.4.4499'. [ 528.539649][T22321] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4498'. [ 529.013288][T22340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4504'. [ 529.680032][T22369] xt_bpf: check failed: parse error [ 529.790587][T22372] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4511'. [ 530.138631][T17468] unregister_netdevice: waiting for netdevsim0 to become free. Usage count = 2 [ 530.149300][T17468] ref_tracker: netdev@ffff888033090620 has 1/1 users at [ 530.149300][T17468] xfrm_dev_state_add+0x6e7/0xc30 [ 530.149300][T17468] xfrm_add_sa+0x34ca/0x4230 [ 530.149300][T17468] xfrm_user_rcv_msg+0x746/0xb20 [ 530.149300][T17468] netlink_rcv_skb+0x232/0x4b0 [ 530.149300][T17468] xfrm_netlink_rcv+0x79/0x90 [ 530.149300][T17468] netlink_unicast+0x80f/0x9b0 [ 530.149300][T17468] netlink_sendmsg+0x813/0xb40 [ 530.149300][T17468] ____sys_sendmsg+0xa68/0xad0 [ 530.149300][T17468] ___sys_sendmsg+0x2a5/0x360 [ 530.149300][T17468] __x64_sys_sendmsg+0x1bd/0x2a0 [ 530.149300][T17468] do_syscall_64+0x14d/0xf80 [ 530.149300][T17468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.149300][T17468]