last executing test programs: 2.55609353s ago: executing program 3 (id=8473): bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0xe, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x4}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000002aec000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000580)=0x100e77, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000580)=0x100e77, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0xfffd, 0x8000000, @loopback, 0x3}, 0x1c) recvmmsg(r2, &(0x7f0000002000)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006a00831300000000000000ffa60000000000000008000e0000000000080005"], 0x28}, 0x1, 0x0, 0x0, 0x4009050}, 0x2400800c) (async) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006a00831300000000000000ffa60000000000000008000e0000000000080005"], 0x28}, 0x1, 0x0, 0x0, 0x4009050}, 0x2400800c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xdc}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x18103, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140), 0xc, &(0x7f00000005c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="58000000121400032cbd7000ffdbdf2508000300020000000800150004000000080003000000000008004f0003000000080015000400000008004f00040000000800be10ccff8d9401000200000008fb0300030000000800a7553234f0d449874f0fed0fa191a18bc49c469696b094b5aa400b158cb324127d36972739e9e53e72673d3aca803610c367cf85430fca9840016cc0338a0b06b6de3c13db6c70eaea431e67df0ac50a253213c27e05fcb04bbd5b5825724e25c9c3e254a23afa92"], 0x58}}, 0x10) setsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, 0x0, 0x0) (async) setsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="1c0008000100010000003d0000004600003f3000ba15ff0000008490783fff056b713b5dffffac1414", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b40003009078001c0e0300050200000000000000000002d58838068b91000000"], 0x4e) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r10, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) (async) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r10, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) socket$igmp6(0xa, 0x3, 0x2) 2.548191024s ago: executing program 1 (id=8474): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0308004d6b716f288563"], 0xffdd) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) splice(r2, 0x0, r0, 0x0, 0x7ffff040, 0x1200000000000000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000240)={r6, 0xa4, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x8, @remote, 0x6}, @in6={0xa, 0x4e20, 0x3, @remote, 0x8}, @in6={0xa, 0x4e23, 0x912ec26, @empty, 0x10}, @in={0x2, 0x4e22, @private=0xa010101}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @empty}]}, &(0x7f0000000280)=0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080202000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) 1.284311748s ago: executing program 1 (id=8480): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ff90a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.217655278s ago: executing program 2 (id=8481): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) sendmsg$nl_generic(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x84c0) 1.16435649s ago: executing program 1 (id=8482): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000240)="00214717a7070000000003060000000000000000aaa6729043098c737d317c447bd55c0b041d5874f72cf86d73d3b92ef9d7", 0x32}], 0x1, 0x7, 0x58) 1.158091262s ago: executing program 0 (id=8483): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="6eaa000000000000791098000000000018090000", @ANYRES32, @ANYBLOB="000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x3ff, 0xd, 0x1, 0x200, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0x6}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x7, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x24, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x4, 0x0, 0x5, 0xa, 0x7, 0x1, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xbe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x52, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000400)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)=[{0x1, 0x3, 0x3, 0xc}]}, 0x94) 1.004184918s ago: executing program 2 (id=8485): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000000)=0xffffffff, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r4, 0x101, 0x1, &(0x7f0000000240)=0xa, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f00000000c0)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000100)=0x28) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r5, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd06008e0d000000000000080003004ed4b55e3265378ce3ec40278683d517cb111a37bc54b5db133c6188b271d864fae7e6f137a322dd0d46a1a7e87a316b3b850f9d16ddf49774e700"/88, @ANYRES8=r3, @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x28000) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000000)) 1.00349414s ago: executing program 1 (id=8486): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x5}, 0x4, 0x0, 0x1, 0x1, 0x3, 0x3}, {{@in=@empty, 0x4d2, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x31}, 0x3502, 0x1, 0x8, 0x0, 0x9075}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, 0xfffffffffffffffd) sendmsg$tipc(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e48974aae56e0000000000008bdf0100d6b9aa5ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a0900000000000000b2e6b5397f7806b6ff846de37a34c8342bbac5a51eacf8a09cede8676044eafd3d7935f90651aa2d9c57276322b82e8976f5a4d980eaeb3b636630b810f2e200"/150, 0x96}, {&(0x7f0000000140)="27a0e5", 0x3}], 0x2, 0x0, 0x0, 0x44095}, 0x8084) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0xe13, @mcast1, 0x800}], 0x1c) r4 = accept$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast1}, &(0x7f00000001c0)=0x10) ioctl$SIOCGETMIFCNT_IN6(r4, 0x89e0, &(0x7f0000000200)={0xffffffffffffffff}) close(r2) 1.003219943s ago: executing program 0 (id=8487): r0 = socket(0x2c, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f0000001ec0)=[{{&(0x7f0000000080)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/193, 0xc1}, {&(0x7f0000000000)=""/59, 0x3b}, {&(0x7f0000000240)=""/148, 0x94}, {&(0x7f0000000580)=""/174, 0xae}, {&(0x7f0000000640)=""/186, 0xba}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000140)=""/24, 0x18}], 0x8, &(0x7f00000001c0)=""/17, 0x11}, 0xe}, {{&(0x7f0000000800)=@ax25={{0x3, @null}, [@default, @default, @default, @null, @netrom, @rose, @null]}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000880)=""/208, 0xd0}, {&(0x7f0000000980)=""/90, 0x5a}], 0x2, &(0x7f0000000a40)=""/129, 0x81}, 0x8}, {{&(0x7f0000000b00)=@generic, 0x80, &(0x7f0000001d80)=[{&(0x7f0000000b80)=""/236, 0xec}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/232, 0xe8}], 0x3, &(0x7f0000001dc0)=""/218, 0xda}, 0x8}], 0x3, 0x10001, &(0x7f0000001f80)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="211a0000000000002000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0) 904.353557ms ago: executing program 3 (id=8488): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(r4, 0xfffffffffffffffc, r3, 0x0, 0x20, 0x0) (async) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r5, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={'rose', 0x0}, 0x1, 'syz0\x00', @default, 0x1, 0x0, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default]}) (async) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 902.844928ms ago: executing program 4 (id=8489): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, r2, 0x11, 0x0, 0xffffffff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}}, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, r2, 0x11, 0x0, 0xffffffff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r3, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x5c}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}}, 0x4040000) 750.353382ms ago: executing program 4 (id=8490): r0 = socket(0x2c, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'blkio'}, {0x2d, 'rlimit'}]}, 0xf) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@setneightbl={0x5c, 0x43, 0x300, 0x70bd2b, 0x25dfdbfd, {0x7}, [@NDTA_PARMS={0x34, 0x6, 0x0, 0x1, [@NDTPA_PROXY_DELAY={0xc, 0xd, 0x3ff}, @NDTPA_MCAST_PROBES={0x8, 0xb, 0x9}, @NDTPA_MCAST_PROBES={0x8}, @NDTPA_ANYCAST_DELAY={0xc}, @NDTPA_MCAST_REPROBES={0x8, 0x11, 0x75f1}]}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x9}, @NDTA_THRESH2={0x8}]}, 0x5c}}, 0x0) 600.316809ms ago: executing program 3 (id=8491): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x10}, 0xc) (rerun: 32) r1 = socket$kcm(0xa, 0x922000000003, 0x11) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) getsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) (async) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=' ', 0xffffffffffffff27}], 0x1) 600.010727ms ago: executing program 1 (id=8492): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x3}]}}}]}, 0x3c}}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x8}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) 599.726049ms ago: executing program 0 (id=8493): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 555.638945ms ago: executing program 4 (id=8494): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f00008b8000/0x3000)=nil, 0x3000, 0x4000000000000000, 0x13, r2, 0x0) 541.126017ms ago: executing program 2 (id=8495): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x66, 0x0, &(0x7f0000000b80)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) socket$inet6(0xa, 0x800000000000002, 0x0) socket$qrtr(0x2a, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r4}, 0x20) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getpeername(r5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = socket$kcm(0x10, 0x400000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r7, @ANYRES32=r7, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r6], 0x38}}, 0x10) 464.254563ms ago: executing program 3 (id=8496): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="480000002c000100000000000000000004000080340018802d001c800800cf00be6f8b72e380a40890984abb363bb67bcb061b2aafd6e4eb2b29c57a5ef74291b4fdd588ae422a5cbb93b6268fa581c10ec65497eeb90eacea3f25000666eb19c45929fea5b275297b4f90edb26f2bf531b0bd1d682efe8b773f421d3b10dd13", @ANYRES32=0x0, @ANYBLOB="f3cc50fe634d094ec09b27ebad7974a937072c2cb851ba4a0630dbb1fa35788811000000"], 0x48}], 0x1}, 0x0) 429.251963ms ago: executing program 0 (id=8497): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000000000000141000000180017"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x14, 0x14, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10017}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e22}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c00000010003904000008000000000000000000b417e0099e031344a62a3cf81394943a8c33b950d0587a0b2cad0491fde722fdf1e455625e264447bf3b97d7d9c5f2022397fb69cbf88e7e53665c61fb7e2f5baea7c7f3663097175e0aa5298b6552be758e2592fad3d01cac04fde85fbd561081094b894b8a3afcb2a3c592670415acf97abd21cd1a2e4d4decba798916a4d5392b0f39e3ffc61352a251b951394000cb7c17897b4b9413e795b21d3dcd91e5cd6dd2815fa88ff5b3c9c77195bafe16a6121780b2a03b024aba95547b82ee27689a17748e2a87abe32cf52ad8b595dd313a89622fe1aac6fcdc1ade6b5c", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003000000000000000000000000000000000014000200fc0200"/68], 0x5c}}, 0x0) 428.545016ms ago: executing program 1 (id=8498): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0xa0, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r8, {0xd, 0x9}, {}, {0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x70, 0x2, [@TCA_CGROUP_EMATCHES={0x18, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0xfffe}, {0x0, 0x5}}}]}]}, @TCA_CGROUP_ACT={0x54, 0x1, [@m_sample={0x50, 0x12, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x75abbbe7, 0x10000000, 0x1, 0x1ff}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x800}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) bind$rxrpc(r2, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) sendmmsg$sock(r2, &(0x7f0000004740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r11, 0x0, 0x486, &(0x7f00000000c0), &(0x7f00000001c0)=0xc) write$tun(r9, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000e7ffffff204f586973f4c2b5e1ac4f65f260f64748a38e7545cd1a7e30c19852df3e68fd33c14854fd9e653d816f356ab23d6a92d3f41e7c4a5aa237676f4f139eb04bfd2763596392d8d886108c2c18d44a3e8455aa25707f40b9b1b0683c19d4da54cfc536651a5a3564e326910074907baaf687cf6c89"], 0x8) 372.18165ms ago: executing program 4 (id=8499): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb0}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x2000}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010004200000000000000b0000000c000580040001"], 0x20}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20010000", @ANYRES16=r3, @ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00001500000000000000000000000800120002000200000000000000000006000000000000000000000000000000ac1e0001000000000000000000000000ac14140000000000000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000010006"], 0xa8}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x6, 0x4, 0x1, 0x5, 0x2}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r6, 0x3, 0x7f}, &(0x7f00000000c0)=0x8) sendmmsg$inet(r0, &(0x7f0000001c40)=[{{&(0x7f0000000280)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000480)="d1", 0x1}], 0x1}}], 0x1, 0x20048040) 371.937198ms ago: executing program 2 (id=8500): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x890b, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x14, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x5}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x54de}]}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xdf}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x9}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x6}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x9}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x7}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x4ab3}]}, 0x74}, 0x1, 0x0, 0x0, 0x814}, 0x20000850) 325.485057ms ago: executing program 3 (id=8501): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000bc0)={r2}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000cff500000300ffffffff00000700", @ANYRES32=0x0, @ANYBLOB="000000000140060030001280080001006873720024000280050007000100000008000100", @ANYRES32=r6, @ANYBLOB="08000200", @ANYRES32=r4], 0x50}}, 0x4040040) 266.292763ms ago: executing program 2 (id=8502): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x12) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000034000000030a010100000000000000000100000209000b0073797a31000000000900010073797a300000000008000a4000000004"], 0x250}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 211.413198ms ago: executing program 4 (id=8503): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r1, 0x0, 0x9}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x25, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x30004001) r4 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) setsockopt$sock_attach_bpf(r4, 0x6, 0x5, &(0x7f0000000040), 0x4) 195.681231ms ago: executing program 0 (id=8504): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000180)={0x27}, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000200)=0xbe, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0x2}, 0x6) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x2c}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20000014}, 0x24000000) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) ioctl$sock_inet_SIOCGIFNETMASK(r5, 0x891b, 0x0) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0200ffff00f03ef1fdd2a18381007a2cab60bd4248275ea1fbd18014ffdbdf251a000000080001003a00000005009200070000000400cc0008000100380000000800010006000000"], 0x40}, 0x1, 0x0, 0x0, 0x44055}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000180)={0x27}, 0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000200)=0xbe, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0x2}, 0x6) (async) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x2c}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20000014}, 0x24000000) (async) syz_init_net_socket$ax25(0x3, 0x3, 0xcc) (async) ioctl$sock_inet_SIOCGIFNETMASK(r5, 0x891b, 0x0) (async) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0200ffff00f03ef1fdd2a18381007a2cab60bd4248275ea1fbd18014ffdbdf251a000000080001003a00000005009200070000000400cc0008000100380000000800010006000000"], 0x40}, 0x1, 0x0, 0x0, 0x44055}, 0x80) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0) (async) 152.50725ms ago: executing program 4 (id=8505): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000015c0)={0x14, r5, 0x305, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e24, @private=0xa010100}}, [0x87a2, 0x3, 0x1, 0x3, 0x22a2, 0x4, 0x400, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffffffffffff, 0x6]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r8, 0x84, 0xf, &(0x7f0000000680)={r9, @in6={{0xa, 0x4e24, 0x1, @mcast2, 0x6}}, 0x6, 0x80000001, 0x7, 0x3, 0xdc5}, &(0x7f0000000140)=0x98) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x44}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x1400, 0x7, 0x3}]}}]}, 0x48}}, 0x0) ioctl$FICLONE(r7, 0x40049409, r2) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r4) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x234, r11, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1ff, @remote, 0xffff}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xae4e}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x94, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5bb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd9f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x24a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2ca}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xc3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1db6138f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x83}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xd, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x20}, 0x8090) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) 55.051351ms ago: executing program 3 (id=8506): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r1}) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_DELRULE={0x5c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x16c, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x64, 0x6, "2f46eff3ba361c891dfc281a107ec75de6c392f719e9ef1c9f342aefc101e8f50fd6061d2a7ff4cbca095f2e07a796c5cbe960614fd0aa3b20b78371a678b89117d0b870645b3aad485c29dc9078a670bfca803f1d38cee260b9d7f8a6b8c965"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xbc, 0x6, "3825fc3ee3d503ebfaf8a6ba8a26a031262fbe1e19c0599b9193811baa7a1d251e25ee6ed5e8e427d41b5329388893849309d0125d8ef8db2849daf6c5e34d3a87e87b53d2f8a59555b85072e03e35ceb7e4951d4d75c11581c63886dfe2ae8d1cbcd57cc7c93fc3a03b390fa2cc24435bf596a8b97603bfbdcc49e512c77742426e3129d960fdad8148050ab432ca16d4c9761ce0c2f995bad0b5d309b43211953579ccfafd6fe44d2cdbcb6c02df9e6c1b8fd4aadd24ba"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSETELEM={0x50, 0xe, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x3a98, 0xe, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x910, 0x3, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup={{0x8}, @void}}]}, {0x84, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x5f, 0x6, 0x1, 0x0, "046dbae07d07a5dc222846c54b945cdcdd30d3f358abb35e18ddd0458435c664d1a5bbb389850a7152b2b4d30460a6a9e021b80101ce278c7cd9118d02847886f5ff69a8dce36c710ff980e2bcf9066771bde1c18b1d85c1f2cf75"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}]}, {0x1fc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xa7, 0x6, 0x1, 0x0, "6ec97c36b9642706865afb1b7e7f9c27eb3982784b24822a8fdfb3d22de8e5507b76d693a4c053beec2bf6b7be5c9d9de3a74ce20570847d90869d04be201ec2fd0993c097f98738bea3536db3c4571eb64ca0efbd0da119647c3a0195c90ff8d8648ffc563c325bd177b8cfbce15237b4e80339f189303811afb8a8daee703eb4d3714741d9d664ddfc982e7fc4b2a01563657cd3a84937e61c48fd3add21a3eb670a"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY={0x11c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xba, 0x1, "344bb3af61554d65b05e12ebcfd6ca44436c3ed2a648d23a4c90a9327b3e125c386c0c68642fe8d5d1d4749d7f2da6ad5a6bcff42feeb7b88e6ed9251e502188d4d24bbe9c50edcf5248a43dcc2ec033e5f5d3563e77f5517dcd1c6b237d9c72d8e8dfb97187f8c7d18de5fdd2b99e53ee52f1159ddb79138437b695e957846e6644ea79a833ff06886b0170636bab7f458b1557327f412dc016b39904993af94fd7ca36f10ca7838762cbe558805f7af89005778fb6"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x4d, 0x1, "db87b91676e57a73c413ef72d88624809e6784baa5a5728df0024392a84bc98c239e5dcda10b13a3f36fa91750b2e507288f28684d3f9f883e3dc4ac0ef4ba0f711264726327a538eb"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x22}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}]}, {0x2c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1f8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x91, 0x1, "aea45b93da87861fc3fcf697b07400a53f9a554dafbe076158c3ef7c477d37c54806e90e82d169c1756b8e60388e6ea789ef3f6045bdc7f2decd88f54712030f9ff689fc5991a3bb814f93d698b8243fc1a4958bedb354928eebe468334770aeb48319d7203b104daf3c312aad16427eb7856945cb7406db0b3476bbd3c4e0015b17b48d94bce6063f4f725408"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xde, 0x1, "923463bfa371f146614bfea45df72586ca22edae56a5059a0ff930a105e8c76ab5c309e1601c3643d97ac86dfdbdbeac62e96083a3263699ec7ac58f36e275c1b706c31dbdf94822b6b3bf546126d69288ea6005926ac8bc383bc7f8435d56bfb6436d3d1c5418cb17cae5619224512783a75a90de8e36e8741062a7f6c360d07c09df98b9ee91aeaa2afd3b0cf1afb2035a63227a8e3acef15e405f34ad2bedd5309c99cb14b2f7e19586176320372260c17f5dcea54f400b6e1fe61e3cf6f06d82d87a81c0099309843c62364fb2942c51f5f1bffff481d4a7"}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xb, 0x1, "28dc7d062a9ce5"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0xac, 0x6, 0x1, 0x0, "e2201a797f44a9050267699a0788eaa277f989a1aa5d00693767bd07f6601f8a7ec2626cd612b9f752fdadef62b627482ea69d7d6bb0a8e5de49f6435de7456bd68b5bf4a10a558f917087de6099960cccf305336fd42ee2671f1e4ce7cee727c37e762871c5b5553df5567b5f35e749e2822d61efc77d24f361dc142119b63562d107292b5c96b1114c8eaee6c6bc545ae555c5123c0106cf5a1fe2358bc2cf873988216256f800"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x354, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x400}, @NFTA_SET_ELEM_EXPRESSIONS={0x40, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x2ec, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcc, 0x1, "32e2cd3711e83976324f9e0621b9cfb6fd0ecde6737b0f84901e8b7a02dcb51b9b9167e398992ac3de2eefb4a8ce22115e544a2233ba85a3d59ed4ac388d65e049eac71060f820f127cbf2c19fce1cd2c28c4f2e33414af919aff32a9e1fe999bd194a95e004ed9204e4bdc798df25850ab663cbe9044a96ecdb4c4bea9a2a8f766850b79bcb6487f451b7e9d241f541f843359eb5328d214c32e81b3e39239ea8fc92baef5e3f6a5b8976cb37cb8c53340c748f1f1855fe38da06fef7b3c92dc23ceabd1410cda1"}, @NFTA_DATA_VALUE={0x94, 0x1, "fdf957ddaf4519fbba4040ab85fcb64526fdb43329aad4b67f60859934fe192c7fda3f1bbb77b6b6d0fa7f644de2288fff2486ec10af5fe0eadbc70824e3eaeeac11c3256d28026ac8bf9204cdd4955cf824b1bd1708cae80895c5c2aff82dfb59ed994d6c31640c675876749c9797fbd7f096667d279f39e5218814faf141890474e9a0fa5431239ddbd448e66c41e3"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xe2, 0x1, "a1be45662ed9009e3dfd81e2902a63f0ef55ff9ee0bb0768edbe31ed202418ffdf2dc70304e3885df3b327ae0aa46b5d2be0b70f9a25004a0ff2462ccc0e530cdf5f794fe7be2256606f257f5e1f89d07251cc3072428d0f4d15f2076118124b4c6458a0fadd67d44b5d2e269fd01c0821c34ca4a03e7a078c732a0e1265a1600651f22009ba48d2f3cbd83f595f6ff5b068990ba6651b57efb77f0c6d31b024bba2a95589e25931190b513757b7d70c3c6a99cf2a734e0826109a752fa21069654540bc0bfc8d3b718a17bbe438086febb60402a6007bf0f8bfbcf87122"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x111c, 0x3, 0x0, 0x1, [{0x1118, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10d8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xce, 0x1, "36c50a16e2521bfbbb1915d225b1dc555172862a7b787fae836918fbc75ba090a83809a6f248ccbf99c94a2dbf0e37ea9497bf9fe7db4280acdc918e906d3e1f4a1922e8181d461a847a854b87ff83f83519b4f8222f4e1a27428e9d6dc4212f1e22b0724bee2088a191ca775451996aa3ccef4c621382bb84368c337d190d5109b41432fadc847159ba592f163c5c4f1543909875896ed780c76dbcb9b72892fb7713e6aa79e71a55618b95e7032f9c302e3eb2dee1b72c1ebe532c7bb59674675fef3034ae0af7dcab"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @limit={{0xa}, @void}}, @NFTA_SET_ELEM_KEY={0x20, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x17a4, 0x3, 0x0, 0x1, [{0xd4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xf}, @NFTA_SET_ELEM_KEY_END={0xb8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x20, 0x1, "eb920b50673b77b97a22c5e12f02c36d06198b2f21ebac6fc80db686"}, @NFTA_DATA_VALUE={0x19, 0x1, "73cc7e07e494004873cbe61e182dcd72ce0b94a958"}]}]}, {0x1540, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_CT_SREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}]}}}, @NFTA_SET_ELEM_KEY={0x1204, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x53, 0x1, "845adf5ff30253ba7f2a3052d6ab49b0effb9777fefbdd5c4e50e2687f6948e3130f10ee8901ad55e4300729299d13c1d5dc3d08f883d353371b8535fdaa67ddbd5421bc6fb692dce79e2d1d8bf5de"}, @NFTA_DATA_VALUE={0xe0, 0x1, "205bce19731d009251e938d85e975b5a0ecece74be199a27442efd2e4561d80ab0f4a2819357b6bbb222e06d5d5a6ab26eca653b6f67e11c48dcfff79820fdfcd3168d3232b04d6c8789da92b5a55a0c38f51ed222c0ae45ad9fdeef800c7882391468b3924467c8f723f2e310f52a86028bfc3b5587ac01bd022af479198f41b31c48f2aefeb92bad9a6588f2ebda2e5fd3a841d6a3bb1771007e33408344c7180fa55a69cd9fb85e78a7d64094cc965461791f284c85b2ed1a79f3a34208681aaa3b25fa4092f4751b7e1ce5cfa4469d530b28827e977cdd74cb78"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x3a, 0x1, "1d41047133cec90bcd146c9e7b2ff8e79321b0b647e68116d7ba0feee262f8f6780fa5b16b9a658320ca116a7ad4779528fede565014"}, @NFTA_DATA_VALUE={0x1004, 0x1, "b8754cd59ec5f5ae69d45507748d3befc9ac02a9e28917340e6bd2bcefdf3cdbe2321b3d936a2ccec67a5be0c6c657ae4f0eefb4a6e567160ed76d39af3ae3b9901ddddd532f81f7ad8a5d5248319007d896ac6fe43986bd36fde10a21df8104bc4dce25b901980cd10f7b37253ee47d9a574656cf7139c9d57b980d27fd902646c21b457a40e75cd54856cbbf2c2c2ed396f9cff617653e605bb929643e76578e77385e526d41ac082e74d9d137e6da3e50e9d6221f987aaa240e3788c136f41d64ba65fdd5699827fc3c5b540e536ac5dc4950f8f21d427a2c529c5f042ff2d379da60c55075d273b79c13f3bf593c0b6e58d72b49d2f4a347bac1523a3e2e6b0d2560ce015c75b2aa230fcddff1a52ae0ba7ad3cc0a5687738549aaf62193a5845f248a50e7729ec1da9d212a4fa4bcfe7af83c8a034dcbc24e716ef9f807fbbc95788f389b0c701a0f6257815ca368d6cb7dbb42af8d7030c371bafbc4d56ea18ed062c84a7be7bdff6c075d3509b0bd0ad050ad7bb29c12c3978018ece337c605e0bb586424a403db6bb569d433e25e341bc4ae806ba19c6066701a96facd8cf47276cc58f90af7af1ba38466c3dd416452d8451083b571481e14f732266d32c505543e05681ff1c26143b144b58b9a412f3175d3c914fa6bf7968e02a8f6f5d745c708783d19137aaa04c00dfd7d797bc34792f9b043f8ce55d09dabd37b99e088750f7bf807fe732ea764ef237f8827e8ba5639d0b160aa4d322f7ba3526717d7bbd83d3e25507f525e17949cc29e6cf2463b072f581fd7b25830193207b5f5f308e23b6fe731466e3c7f6373db7252be766d8feb21b1197995e3111519b4ac6942b0f11862c53838fff6ea8d81714b715a79fd58e7ba79ee4b4338183cccfb9d3b7d7c412df7f3895ed8c63cf1267aabc5236e73fb113d8aa598226450bf3b874b46a52ef5ffeea89801226f907afbd9abfc898ff6eb02d1fb25882211ab671d547052e29330a96e5cf874cc7eb38995778e07dbe3b7fee95fd3d78a78a6e0bc7018d2a8116ac52a23c3bdd53ef0c4cd5d2c46d998d33cdfe97b189b75b6d7ce30883f02dfb7d1a08db677e923656f02a70d8a261d1535fcefdd580d8739ed25bd23ef60ccedbcfe5b869a41809bb70fc9d91ab86a77edde578e0a68159cfe3143bb0d7ae6f533ca71b16d25a15f8d203cdad6dfb7a2f398a87aaece8001d320bfd3e3419644c0e75886893cf5d32f7f354c06788ce80fe32e20899012e096d5c141eb9b1ac2579b199be8f517b6c537283eca48047b69618256dfc2f8879e0ae36030df8e0b74950c023c8b3b1b3df6cafad4155fb871a9a45cd691101f4b5da2f678704cf657092f302e39e01b7bb7cbd023eef456c72a8749dcab92839344eddbb2acdfbe23b3533306b9e9acc2a46bf083734572d13645b9bd8a6233623b99b62651d148eedf634f3ef5ddd909b014400cf47328d6e697bfdde41ce86bc440ad75a917df7779ad3492e3a7c9681e9a91ed035b38e5538d5d2e903757e17f17411733cbe421f29f648c88e1915f46c43c6c5073b54a03671c84e8be81e7022fb8d3dedd2bd09afc989d2d56a7e98e76f8a394a24092f316d42adba30caaeb57738b2bc90c3b6dfac3bd4c2e7ed3dc11c87043bbf174b0cb32ceefab0caacd1964aeb27a4ae9a5e0e6c9bb344a461578724c5190a88409781e17553fe7857fa7bc1336db97f0709f8fe958025c90a5d79f4f602bc6e5a34d68486b05dbb9b635471150e5e8e025024d85ced10d2e59675c4faebe1c49c94c7598577924340deb101f7873341b6a3767294d055d0d0e3823451c3dd31ae904ec724fa044f75d216622a0241d9732de0c8b5b98a57ee2524888596016c9d64c84bf0b8a8785d9376d3afe6e216208164b336d81fc243fab5e1baf0707c40a6db700013eb95f90ce043e4c084456d7badf06a84e2e838f0fb9dff0f41327c07855a5256744cca7b165596f825e3fed79b115aa775a1b73c5722bf5a3b7ea92fc042bd2e92db016981e425739efbce56239586f4e382de6a8f04365556de292208eb449bd086a05e85bb4e296518fdd90025a0d286f67bacbae34a01fea7a1f91291ffb38983251e6c23b69228261fe3f355e5f22ca13e1f5009016cb4f49637ce20f7e55701712ba973cddb932b155cb8900d373b61bfe08bf267f31e4ddbfc60ef8396d50bbaf04b093921395dc491a3326536b1cfcc22d445417f6ec471e7cbbb81edf2bea6cbe04f4671884ca1c09533ea8b74c2cf0c9bbe17f703f57a7c2d3d596a1e437bef5d2afecf8f5e7275aacacddda476973d1dbf8b275df2bed9798c42391b9f2c43c8563f6d06b8cd4f40b384ceed06367399f68b5a767b1cc4ba8424d0259d933b5dca6f7dac5a989f7888c0d6449737552046fb50c83f32402e72217f0363a5d9e7bce21902608df2abebc0bf1a796e1fe8bf056222845a6b1badefe19d35bbf2e57dafdac5a5875e24e754e7a0b7443195706f75a96332d310d25096ccc982c45a3b30a60b5f52a49459e44c99b858f8506e9cd853e3c2a73e3de40bbf835c3ba1bf6021622557d4fb066fa95fdf6924f5410bf58f83929b1639e2b2f24d2310a3f943affd712496c0189892b0e8552c90db3b383614d1692a2abb7cdeb591701e93454b48ba98f0eeb21dbf3aef26fe13befecc012dfec14cdfb4d21d1a48ad9f47b1dcf0c120afa22f35cc80f9b440dc4dfc30d9942d959b416c3d474a99bd5739dd6d60a6fc7177f15c34927998591d08cadfe9ed01641f789cac6c3d94279915178fa635bae03098f704574c54a177d6bc234b8e78034cfe32350be4f484658fb72b56215bf57c7655559354620315a4c7db497ed547a0e215e7b2a220d615bae3fe7177c95678a7c744199b2401d89090878434815b9fe8f5b4d34a16eeb39e97f1f141ccc2ccef007b022b30171efbc15ec9142e6a66eac9f93c84edc558bbd3341baf7785f0fc2c0f64206c8329a55608a493a8e2c7b80dffa43203fea05ea6de535b719a093751e6ee8ea61d728686639914b709e07258e2caf5ef72075cd02829c5bfa1f3a2067691e94d2cf2e0b7209172a8ec5b241d387b37b5949022cf848d7b64b2d985ccd0f00657356b6f30e162eb2329bed15b6a780e58e5841bd84a3e6c62ac2eed464122f37aa1d7244c6572551f246c72c2029373902d07a743b2ec18cdb8b6d1cd2f3b32588e7af0da3d9662e6167991467af3369fbfdd75127425d21e4dc071b85a7efa07512d011bbc3da3b7e7c89a16daa7cf651bbebaa9a2f802372d475098102e3159ffadb900ca864bacd870bcc0ada0be2e1584ced6970440725341bbd26ab080b68345c8218c975e8298684192e8c8f6f4c6ce5a5b6167f7383d4cac0497b80d3a646d4d270ac225f2bfd7fd43117a4aba47dcd2a7f888e0e9a200401bb8c2241ad4b313425fbbbc60d5dbe664f8c3c509e1264680b491c6096904e3c6ce10d064467fdb5b05996ee49edd95029b96818665c8b0ba799c0bec11dbcc909659af0c7c9472e7d9783d2dbf7be3bf636b6ba109e998f14d2692f4b153a24f52fc47b46c7af3e81d5709be690a230f1469c4ffafc8586e4ae492e46e07d5c5d8e48b9fbcc898450c5137462db65d2e2488031190663480b1e1e893f870bf9e6e270c60dce27aedf5216015842b7985a3f512c5cf7f54e456ebd231194ed602540212b133ba5c9a1005d998133557a3951cd156cc4e39b692f450a4fb402f95bc83fcf8cd575ed1efa5e952d8164260d7d1ceebee02f53f284c8ef8cf9ee868453caa51d943ae31711ca74b509cca49483dbff9738096476e0f333251d1f7e5d929204823868c4f35583aa8d12102e36af024cf04a516a9be511b08edc63f7be12a3caef8fc5f14439e4305cc8424bf5b8c392103d9749b01af37df2151825a515ca89893fa90b992bfdf7f4fd560daca8ab1ec549f3a786598cbcc97eec6f3ff2ab0fa6b1f0939c12617bca34f63404de74d6113c8a0e27368c3d3750b0cae4127f2a4f8b4b299f316f10cf07b32c221d1c7297884363dca1dff28dc55f8a8c0e64da130b059927ac9d1f8baba9540f58a91d29ea8dcc0cff224275894fda2128f142273dd59e5f446bc486d85570a4d7bf908b7780101d9e1ed069a28be528f192bce89a703bfb563f957697c5f9618f36abfe6981a3545c18efa9d0c6f34f9d8e4333f3bb212eebc91cb9aa364e0bec01df7067de1fdb72c9077f57d259a9b682a892c41dc217bd453cad0db1940e62be4847bdba447ad3487f5161cafdd717fa71de4271bd456ce000dab07c68b1e165689ceea8b555b58c9387433ac2efb9aef085c2fea3011c47d5aaa2ce1629a80a126c31bc982c5dd1229987feff999fce3ca0586b07a6ab096735f58ca7009bcc90c8e81b5ffc0860bb25092ba95be799623946c6c5384d3cc6822ff550d0285d5fd69892e94871dbe400080807e35811a5eab36fdd921f74841edb5b3223a15a0a498a86e1bd7ecdab4b92d23b53149ecc5eb3265f6233a07613213be5247a1defb4dee8b6aab97a512a64f8eb3a83bb49e7a33323a4b2f59a23ff4a00441db2fb07168f255174f618d0bca491174abb8db4e655fc1a3908f689e37de0d7c6a54189c2180f46dfacd1359b9435e8d908dbdc81a1d1564548fd881e055f80b21692aae7a7e89d389f061dfa2fd9fa44e5e7a104b29b0ad96019a698717072f1059f3bd72c998812ccd6b20e9a8d28cc72faa2312301d1118e2debdbd2f3b85d31df7937a21c229928fb7d4e1a31bcca2556cf72f4b48af90055b97c17d75107055eab2dee4c1ec40a06446e9f35427b380310c62c2efca9eda519f63d0ce5582f22e174c197141f5dabd5cea53f44a3cca99694b425122d8e9cb2ffbef4596f873554a216030042252d3c72abc8f3895431fbb977106247d906fcd4b90844e3a0e53474704023c6f46b2373da6c28355fd938ddb5ee69bd387cf1262d4869d6da470535f6729b380a729914c8a6d16a828ddcf9fd146686752369fb95f6c51e8406455d25f52e6e34f1ce4e1155fc0ff64a856609d5d4665559b154493ac6fb23564f7f238e0dd3e0df7179f21b27f59a986458994357cd4f7ae463a2a8efe715bab85c769dd41a90df8eb5d9aa0ab3cf0f22ebf5e788039902acfab6cc122232c14477284a6a168d8799f33e069000f88b20aad0ef69669ab4a81385c8de4d8ea435cd5e588bcdcb862c17f6d7abb495cf7b4d7c67421e8693a06176a5da10349592b2f3b12e73e8b4a6dea81adcf2d2c07c1b674f503d08a75c32c27cf151e92bca8da3bf823d2cd90e04db9c6055898a98a352025f974b12477ea5fe0e8340a864bebe736c3668840fc462805d07a339fa2b9559a53baf1d94d4faed21ef59366bc4b0a8cee0d7a08762e7cf7981686ca97880c9a7230858f1194e5572ae0afd61148b5a49ca7f261656e560848288d83da47c3dc716ca69c2ef59c9e1cc36235a7c68e023039f841678988b81f8c2f13c592ecce21c1818fe94145a5d214579f7c9d4921f270ab7fddbd3b111f80ad4c5f7123323ca2f33200b64b1f896a033634d445902363d4cc242a1ae95514730d658ce306a19fbb662ff0aaf34dd930f071d699e016a1904e1bb933370ff67030887677dab2fc9a130beb5fa21e1517eee6a6886145a444d16fc6705f82955faf2f6bca0686fe345d04c11c0f58f786bfe5a3a6621bd4221e1ecbee9a1da2dd73c19e4d1a1fbd31a84cdb9bbf0"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0xb0, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x3c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x66}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x10}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x8c}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x38, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x6}]}}}]}, @NFTA_SET_ELEM_KEY_END={0x64, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @meta={{0x9}, @void}}, @NFTA_SET_ELEM_DATA={0x144, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9f, 0x1, "c6d8cd005fae3e39af6b677be8df1273a880d02bf7804470ff00b6655cbe7451cddf6a5be873789b9811f1a79a1b350d8cfed0264d36d16e6c9006db0858ddb68880f4ddb49fc7d6c79a48f16d89589b4859bb1ad8bf6213f71e80960736a87de47ecf8f2519ac526aa1d249999e5f7786a38e63f59bc36cd76ef920bddc9b4dd0bf6c175c082afad22f024959979ab7a4e39681b96269eb580f66"}, @NFTA_DATA_VALUE={0x6b, 0x1, "112119c3e79ead329f168a039962d97847f1ad75420e2be138ae270976ff4093247bca75da17f088c28558b4b7955a93e09e340cc733615141ea10d35bf9a7a3587a9a3ed57efd8fc3685b6c6f28a3b706e66b2c6cff9a8a23ee6ab5e094d274d5e8392888bc10"}, @NFTA_DATA_VALUE={0x31, 0x1, "3ae18ba9ade0f0069512adf0d6922e0146ae54c23974bc930f703ccb862ef12f47b72ce4e35f7269bae9e7dcb0"}]}, @NFTA_SET_ELEM_DATA={0x9c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x54, 0x1, "083faeba4caa381a93de03a39a44f2d938ccb45bf35893b97cd95b88be95641713bb5e5464abca27bcdfa65a0e55a819c241aef971c051fdf52224e47169527f4db723ea04512487cbab3b862021e42f"}]}]}, {0x18c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY_END={0x174, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xf6, 0x1, "70101e95a1ac97b992a97dbf4cd33ac20fdb6c6671dd4c9c0879c8a2e070718286763bbeeef186ade730e0bbd69f979960cd4a326c665074ad6f53c84005eb01353379505852882bdb7ab79b9676e53b67b1f51fc49ddea4069320ceab05a7068482e6f329881d379febf3ff0cb2f82ec85312d82ac1b281d86c3d65f43c2d68b1bf067e14c05b3f1de0b2e30c0e5d051ad0dfb972bad2be72b430d66adb56e21ebc33536ee06346f22b03b865e8480c2c1452248ebc438df922008138dedebd9458009671599ab71c572f1e95463cbfe1feb143de15fa18b81a736182ab4325bc8345b32ccc1b3dab6205625559cc636dd8"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x200}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x86c, 0x3, 0x0, 0x1, [{0x4d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x284, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa1, 0x1, "99d1615d95972bda533727b36fa6ea1c102a91374c6deff73acc833395a47054a91c51d30a9195db733190ef526dd6dbf6ee9ac4fca5978a969c1661a3c578445a1c6a2a1d55f536515bdd7cd6c8cf1070beea0a8e49f7e850db927707a26b34b9743f390add5d4c8181dea98a112ec9f44ee74ce406e0361dddf0319da40084a80ca06718cb4c8e871795f43c33224023285351fff4c6710048e1d7f5"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xa5, 0x1, "c38bb2a6dfb709b2b2d629f0df176db687a0bef5a57fddbb1af99d6f130b5d7d54a20272d9e3129ae5e02172e3d578466c3baefb0493c376c682ba9ecbc549fe9260c97e0bfc4960c91073366ac3ae84e65177b36f5360537e121dde10707d1a2c8685af0e9314bc1dd6048484f2d4352990e96065f7135dd3ce53e9f1388af37b53c25cedf329be37e8ae901cd578540d573edd10060f5cc2690abfab92baf8d6"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x1a, 0x1, "61c168aedf51d4a233dbb56590568a30872dedd4425f"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x7}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0xf4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000001}]}, @NFTA_DATA_VALUE={0x95, 0x1, "8f68baaa99df837c2e40540b818b33672363132b82e6ed0264d1bc76c890d5d1d6696f0d4a671326f3e09dd601342cb378e0150bea0f1bb7b02840568b2ca7cad977cfeea64aa3b43d5130c99805c5012fded02f5c9f4fb302189a873e7ed7508a6c0019e298fd5529e4e128ec5c816240561cad47dc0bd8ebb02673dbbf4a1bf03df89318841bc5108d9b017e177642c1"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0xea, 0x6, 0x1, 0x0, "9355f5acfa8637429c2018b1829bb76e27251c459a763687765e2df81c78e2bb37890ca55e38ce34a9973d96b8da84589b1241c25d2f66aa6073fd834ee716dbd46614cf5f3e202e18a91ad343cff8c6f77bdd674bf0c0664b9902a1ae0d73e95526cf09ce945610e331edcda8513bfb75a370ad8a991c2bb16d973915861d3175b12e0480072b6fb5c6477e98f2d0446b01eafe53258d872e822d8c4bcad9a27ebac960ef5ae304f6bb1b8231fb60a4bdc2e8aab6df3b2bef7d282187b68e1a82d4666897c94df0f8de7d5488c3254eafccc7879063e92c16d0418ff83ebcf721301a3a5715"}]}, {0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x30, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}]}, {0x330, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x184, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x9f, 0x1, "50b5513463c9df56f802256445b2a0020e18ca80487117bfedae1f50dc4dd591d61cbeca32424418a695780fa90d5468afdc9acf67cce9408f6f3310b17af005a1e4d20a5db6facbfe854e1cb4270cbfb60c78b6bbb62d86265f58a67f8b7ed1c6476752e783aae360a7ab64304980a7fa2db82f5a58ad129ab60b3e9d4565d9f73346ad7bb18f45ebcab99c69c268cd6886c4b888b44e2bf13232"}, @NFTA_DATA_VALUE={0x74, 0x1, "01bf2e4afcf407d854c8e1304cd2ea805676153f3158a226405acad90a7cbf68aaa25a57e60ac35837df3588f41c6084501cfda093c0fb22653cb8df23201e0130b4c5cab35a7d1ef013a363b4244ec630523953356c1e93f5315d3ece55371a155d10489c7e51e4221fd9749d6cec4c"}, @NFTA_DATA_VALUE={0x45, 0x1, "340c76967a5af2ad273950b5ea99f9f3b3765bd5456d22e84cc85d931cf72b5fbdfa62cc011c4e6b8c36e385320dfe85c3c4e80a455274d71f6c4c444607e104e2"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xe4, 0xb, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x42}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x1c}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, {0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x8}]}}}, {0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x13, 0x1, "dc667d19dc16e500bd0bc343d20922"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_SET_ELEM_USERDATA={0x96, 0x6, 0x1, 0x0, "7e90cf38f22b27f27d6d24815d5c3e1b7f9243dbe5e8c814ab6f9db1ed1134245504b00f28d5bd81a80fe737fce4073e9e67d1869563aa646d93e84ee7ab9e3d33215978ad8c50f6c54399a1d84dcf59a6e088a1c7f198da77b60668916d81a6de289f5172e2c82d4369407fc49bb238f392d82ef97c718ef7412d8d73a053db1cbf01e7fa5b704a16c606baa8678cdf02cb"}, @NFTA_SET_ELEM_USERDATA={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xb}, @NFTA_SET_ELEM_KEY_END={0x1c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x16, 0x1, "bf598a0b0f247604bef36c722dd2afc9200d"}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x30, 0x2, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELTABLE={0x94, 0x2, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_TABLE_USERDATA={0x31, 0x6, "dda1935e863c2b0c60f7285f0396717a26ed719f9ff8bd11f2645f133ce34037406970d0cf8bdd229436bcb8e6"}, @NFTA_TABLE_USERDATA={0x4b, 0x6, "ca97282275ca76db92b874b7cba8fd2ddafc0a1b4253888d431c81ea1cb40ab868c8bb41febf85a2d4ccbd5710dd1597447173c3d41b0235e164fd79e315d2ba37d2e4f0e2d893"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3e2c}, 0x1, 0x0, 0x0, 0x8}, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x1b, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x100000b, 0x13012, r4, 0x0) (async) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000002c0)=0x4, 0x4) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (rerun: 64) pread64(r6, &(0x7f0000000480)=""/61, 0x3d, 0x7fffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6) (async) getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008040) 52.375018ms ago: executing program 2 (id=8507): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007311350000000000061c0000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 0s ago: executing program 0 (id=8508): r0 = socket$l2tp(0x2, 0x2, 0x73) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x600000a, 0x12, r0, 0x8c1fb000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) syz_emit_ethernet(0x26, &(0x7f0000000040)={@empty, @multicast, @val={@val={0x88a8, 0x1, 0x0, 0x4}, {0x8100, 0x7, 0x0, 0x3}}, {@can={0xc, {{0x3, 0x1, 0x0, 0x1}, 0x86, 0x2, 0x0, 0x0, "d1e65c3fdc6f1c51"}}}}, 0x0) kernel console output (not intermixed with test programs): sim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.921110][T16768] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.991599][T16768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.999887][T16768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.031773][T16773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.040787][T16773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.452853][ T5184] Bluetooth: hci3: command tx timeout [ 584.573960][T12997] TC_ACT_REPEAT abuse ? [ 585.214040][T12983] TC_ACT_REPEAT abuse ? [ 594.709900][T27864] netlink: 'syz.4.6612': attribute type 1 has an invalid length. [ 594.735303][T27864] netlink: 'syz.4.6612': attribute type 10 has an invalid length. [ 594.770641][T27864] netlink: 236 bytes leftover after parsing attributes in process `syz.4.6612'. [ 594.814645][T12983] TC_ACT_REPEAT abuse ? [ 595.006446][T27876] netlink: 'syz.0.6618': attribute type 1 has an invalid length. [ 595.039076][T27876] netlink: 236 bytes leftover after parsing attributes in process `syz.0.6618'. [ 595.543070][T21317] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 595.555694][T21317] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 595.565481][T21317] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 595.579926][T21317] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 595.595885][T21317] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 595.940540][T27911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6628'. [ 596.004093][T27912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6628'. [ 596.321481][T27937] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6633'. [ 596.355284][T27937] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6633'. [ 596.895366][T16768] erspan0 (unregistering): left promiscuous mode [ 597.031504][T16768] dvmrp1 (unregistering): left allmulticast mode [ 597.513968][T16768] bond0 (unregistering): Released all slaves [ 597.530347][T16768] bond1 (unregistering): Released all slaves [ 597.543938][T16768] bond2 (unregistering): Released all slaves [ 597.557353][T16768] bond3 (unregistering): Released all slaves [ 597.576042][T27898] lo speed is unknown, defaulting to 1000 [ 597.647358][T27940] netlink: 'syz.2.6634': attribute type 2 has an invalid length. [ 597.661474][T27940] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6634'. [ 597.680576][T16768] : left promiscuous mode [ 597.812958][T16768] tipc: Left network mode [ 597.843864][T27951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6638'. [ 597.862896][T27951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.937857][ T5184] Bluetooth: hci4: command tx timeout [ 598.017402][T27951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.440610][T27973] tipc: Started in network mode [ 598.453184][T27973] tipc: Node identity 4e1ff6bd6bda, cluster identity 4711 [ 598.473870][T27973] tipc: Enabled bearer , priority 0 [ 598.491670][T27975] syzkaller0: entered promiscuous mode [ 598.505784][T27975] syzkaller0: entered allmulticast mode [ 598.635350][T27981] tipc: Resetting bearer [ 598.695116][T27981] tipc: Disabling bearer [ 599.022433][T28002] Bluetooth: MGMT ver 1.23 [ 599.045624][T28005] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6654'. [ 599.078377][T28007] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6653'. [ 599.086061][T28005] netlink: 'syz.4.6654': attribute type 4 has an invalid length. [ 599.164392][T27898] chnl_net:caif_netlink_parms(): no params data found [ 599.417650][T28014] geneve2: entered promiscuous mode [ 599.430120][T28014] geneve2: entered allmulticast mode [ 599.512378][T16768] batadv_slave_1: left promiscuous mode [ 599.523486][ T6003] TC_ACT_REPEAT abuse ? [ 599.532970][ C1] TC_ACT_REPEAT abuse ? [ 599.547916][T16768] hsr_slave_0: left promiscuous mode [ 599.560262][T16768] hsr_slave_1: left promiscuous mode [ 599.573180][ T6003] TC_ACT_REPEAT abuse ? [ 599.941302][T28037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 600.013006][T21317] Bluetooth: hci4: command tx timeout [ 600.356842][ T5184] block nbd5: Receive control failed (result -32) [ 600.555145][T20830] smc: removing ib device syz0 [ 600.576806][ T6003] lo speed is unknown, defaulting to 1000 [ 600.583090][ T6003] syz0: Port: 1 Link DOWN [ 600.587875][T16773] TC_ACT_REPEAT abuse ? [ 600.861072][T28056] __nla_validate_parse: 1 callbacks suppressed [ 600.861090][T28056] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6667'. [ 600.913533][T28052] pimreg: entered allmulticast mode [ 600.919743][T27898] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.981204][T27898] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.009459][T27898] bridge_slave_0: entered allmulticast mode [ 601.028970][T27898] bridge_slave_0: entered promiscuous mode [ 601.064220][T27898] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.071692][T27898] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.104357][T27898] bridge_slave_1: entered allmulticast mode [ 601.134799][T27898] bridge_slave_1: entered promiscuous mode [ 601.140917][T28066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6669'. [ 601.296790][T28060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6669'. [ 601.768125][T27898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.799850][T20822] TC_ACT_REPEAT abuse ? [ 601.814353][T20822] TC_ACT_REPEAT abuse ? [ 601.962195][T27898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.093112][ T5184] Bluetooth: hci4: command tx timeout [ 602.196942][T28096] netlink: 'syz.4.6680': attribute type 83 has an invalid length. [ 602.238146][T28096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6680'. [ 602.279031][T27898] team0: Port device team_slave_0 added [ 602.312176][T27898] team0: Port device team_slave_1 added [ 602.314911][T28101] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6681'. [ 602.617062][T27898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.635850][T27898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.708669][T27898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.795425][T27898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.819199][ T5968] TC_ACT_REPEAT abuse ? [ 602.829360][T27898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.912100][T27898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.922975][T28121] netlink: 'syz.1.6687': attribute type 2 has an invalid length. [ 603.164185][T28125] batman_adv: batadv0: Interface deactivated: . [ 603.417248][T27898] hsr_slave_0: entered promiscuous mode [ 603.465752][T27898] hsr_slave_1: entered promiscuous mode [ 603.492024][T27898] debugfs: 'hsr0' already exists in 'hsr' [ 603.508605][T27898] Cannot create hsr debugfs directory [ 603.835375][T28141] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.843140][T28141] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.863642][T28151] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6698'. [ 604.062329][T28141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 604.110151][T28141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 604.172821][ T5184] Bluetooth: hci4: command tx timeout [ 604.665500][T20826] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 604.696309][T20826] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.744570][T20826] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 604.772309][T28160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6700'. [ 604.781739][T20826] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.793800][T28125] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 604.799707][T28125] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 604.839147][T20826] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 604.862409][T20826] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.891285][T20826] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 604.905280][T20826] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.030685][T28125] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 605.057669][T28125] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 605.097330][T28125] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 605.113356][T28125] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 605.303736][T28185] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6711'. [ 605.335515][T28125] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 605.351866][T28125] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 605.406035][T16768] IPVS: stop unused estimator thread 0... [ 605.466495][T28190] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6712'. [ 605.505336][T28125] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 605.521485][T28125] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 605.716796][T28206] tipc: Started in network mode [ 605.721782][T28206] tipc: Node identity 668a42f540ab, cluster identity 4711 [ 605.730140][T28206] tipc: Enabled bearer , priority 0 [ 605.808056][T28210] smc: net device bond0 applied user defined pnetid SYZ0 [ 605.819845][T28212] tipc: MTU too low for tipc bearer [ 605.840360][T28210] smc: net device erspan0 erased user defined pnetid SYZ0 [ 605.860627][T28210] smc: net device bond0 erased user defined pnetid SYZ0 [ 605.938556][T28216] syzkaller0: entered promiscuous mode [ 605.946222][T28216] syzkaller0: entered allmulticast mode [ 605.959176][T27898] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 605.976728][T27898] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 605.999980][T27898] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 606.051812][T27898] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 606.073655][T28216] tipc: Resetting bearer [ 606.185895][T27898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.219265][T27898] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.237114][T20831] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.244298][T20831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.266885][T20829] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.274051][T20829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.289515][T28234] tipc: Enabled bearer , priority 0 [ 606.301696][T28234] syzkaller0: entered promiscuous mode [ 606.307434][T28234] syzkaller0: entered allmulticast mode [ 606.340670][T28234] tipc: Resetting bearer [ 606.356904][T28233] tipc: Resetting bearer [ 606.371368][T28233] tipc: Disabling bearer [ 606.540769][T28205] tipc: Resetting bearer [ 606.599241][T28205] tipc: Disabling bearer [ 606.641356][T28242] netlink: 'syz.0.6726': attribute type 2 has an invalid length. [ 606.661833][T28242] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6726'. [ 606.695875][T28245] netlink: 200 bytes leftover after parsing attributes in process `syz.2.6727'. [ 606.731308][T27898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.931005][T28257] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6731'. [ 606.991933][T27898] veth0_vlan: entered promiscuous mode [ 607.030582][T27898] veth1_vlan: entered promiscuous mode [ 607.148511][T28269] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6732'. [ 607.200960][T28269] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 607.373989][T28273] veth1_to_bond: entered allmulticast mode [ 607.388981][T28270] veth1_to_bond: left allmulticast mode [ 607.414578][T27898] veth0_macvtap: entered promiscuous mode [ 607.469336][T27898] veth1_macvtap: entered promiscuous mode [ 607.546068][T27898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.579840][T27898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.702031][T20831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.714582][T28297] openvswitch: netlink: Flow actions attr not present in new flow. [ 607.742667][T20831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.770535][T20829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.798553][T20829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.848042][T28303] netlink: zone id is out of range [ 607.870986][T28303] netlink: zone id is out of range [ 607.878072][T28303] netlink: zone id is out of range [ 607.884038][T28303] netlink: zone id is out of range [ 607.889230][T28303] netlink: zone id is out of range [ 607.914493][T28303] netlink: zone id is out of range [ 607.932339][T28303] netlink: zone id is out of range [ 607.957216][T28303] netlink: zone id is out of range [ 608.018282][T28313] netlink: 'syz.4.6748': attribute type 4 has an invalid length. [ 608.065313][T28316] netlink: 'syz.0.6749': attribute type 1 has an invalid length. [ 608.138482][T28316] 8021q: adding VLAN 0 to HW filter on device bond2 [ 608.219922][T28327] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.6748'. [ 608.253943][T20829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.266460][T20829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.342348][T28329] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6752'. [ 608.355426][T20822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.364600][T20822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.587782][T28335] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6753'. [ 608.598123][T28333] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6611'. [ 608.724132][T28342] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6755'. [ 608.916376][T28344] bridge4: entered promiscuous mode [ 608.928392][T28344] bridge4: entered allmulticast mode [ 609.616205][T28361] netlink: 360 bytes leftover after parsing attributes in process `syz.4.6762'. [ 610.443801][T28393] netlink: 'syz.3.6770': attribute type 5 has an invalid length. [ 611.100659][T28399] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 611.514488][T28409] netlink: 'syz.2.6778': attribute type 10 has an invalid length. [ 611.583819][T28409] batman_adv: batadv0: Adding interface: team0 [ 611.590110][T28409] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.622105][T28409] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 611.937679][T28427] __nla_validate_parse: 2 callbacks suppressed [ 611.937698][T28427] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6784'. [ 612.024125][T28430] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6785'. [ 612.371079][T28443] xt_time: unknown flags 0xf4 [ 612.897363][T28466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6798'. [ 612.923050][T28466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6798'. [ 613.039078][T28475] net_ratelimit: 14 callbacks suppressed [ 613.039096][T28475] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 613.243758][T28482] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6804'. [ 613.456218][T28490] syzkaller0: entered promiscuous mode [ 613.467614][T28498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6808'. [ 613.476974][T28490] syzkaller0: entered allmulticast mode [ 613.556743][T28490] tipc: Enabled bearer , priority 0 [ 613.812682][T28490] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 613.853488][T28493] tipc: Resetting bearer [ 614.036747][T28493] tipc: Resetting bearer [ 614.068452][T28493] tipc: Disabling bearer [ 614.162328][T28532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6818'. [ 614.446508][T28551] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6825'. [ 614.510312][T28559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6825'. [ 614.764494][T20829] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 614.810202][T20829] dvmrp1 (unregistering): left allmulticast mode [ 615.208054][T28571] netlink: 'syz.3.6829': attribute type 1 has an invalid length. [ 615.217180][T28571] netlink: 'syz.3.6829': attribute type 2 has an invalid length. [ 615.291811][T20829] bond0 (unregistering): Released all slaves [ 615.405451][T20829] bond1 (unregistering): (slave bond2): Releasing backup interface [ 615.414539][T20829] bond1 (unregistering): Released all slaves [ 615.526359][T20829] bond2 (unregistering): Released all slaves [ 615.685663][T20829] tipc: Disabling bearer [ 615.703888][T28575] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6830'. [ 615.729967][T20829] tipc: Left network mode [ 615.856005][T28575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 616.260286][T28606] netlink: 'syz.3.6842': attribute type 11 has an invalid length. [ 616.818820][T28621] sctp: [Deprecated]: syz.1.6847 (pid 28621) Use of int in max_burst socket option deprecated. [ 616.818820][T28621] Use struct sctp_assoc_value instead [ 617.011185][T28631] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 617.017653][T28631] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 617.261306][T20829] hsr_slave_0: left promiscuous mode [ 617.279322][T20829] hsr_slave_1: left promiscuous mode [ 617.345345][T28645] netlink: 'syz.3.6855': attribute type 3 has an invalid length. [ 617.363504][T20829] veth1_macvtap: left promiscuous mode [ 617.375660][T20829] veth0_macvtap: left promiscuous mode [ 617.571920][T28657] netlink: 'syz.2.6859': attribute type 11 has an invalid length. [ 618.216223][T28667] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 618.285164][T16768] smc: removing ib device syz! [ 618.351210][T28675] __nla_validate_parse: 67 callbacks suppressed [ 618.351227][T28675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6863'. [ 618.561564][T28654] bridge1: entered promiscuous mode [ 618.605441][T28654] bridge1: entered allmulticast mode [ 618.801876][T12995] IPVS: starting estimator thread 0... [ 618.911284][T28687] IPVS: using max 30 ests per chain, 72000 per kthread [ 619.161098][T28703] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6873'. [ 619.435523][T28705] syzkaller0: entered promiscuous mode [ 619.456546][T28705] syzkaller0: entered allmulticast mode [ 622.210361][T28728] IPv6: sit1: Disabled Multicast RS [ 622.218710][T28728] sit1: entered allmulticast mode [ 622.266034][T28719] hsr0 speed is unknown, defaulting to 1000 [ 622.281948][T28719] hsr0 speed is unknown, defaulting to 1000 [ 622.294390][T28732] netlink: 'syz.2.6879': attribute type 11 has an invalid length. [ 622.319822][T28719] hsr0 speed is unknown, defaulting to 1000 [ 622.358845][T28719] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 622.412460][T28736] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6880'. [ 622.426117][T28719] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 622.433163][T28736] netlink: 'syz.0.6880': attribute type 9 has an invalid length. [ 622.604851][T28719] hsr0 speed is unknown, defaulting to 1000 [ 622.613463][T28719] hsr0 speed is unknown, defaulting to 1000 [ 622.631335][T28719] hsr0 speed is unknown, defaulting to 1000 [ 622.654055][T28719] hsr0 speed is unknown, defaulting to 1000 [ 622.681580][T28719] hsr0 speed is unknown, defaulting to 1000 [ 622.713639][T20829] IPVS: stop unused estimator thread 0... [ 622.726201][T28719] hsr0 speed is unknown, defaulting to 1000 [ 622.770642][T28719] hsr0 speed is unknown, defaulting to 1000 [ 622.778872][T28719] hsr0 speed is unknown, defaulting to 1000 [ 622.792029][T28719] hsr0 speed is unknown, defaulting to 1000 [ 622.800158][T28719] hsr0 speed is unknown, defaulting to 1000 [ 622.809157][T28719] hsr0 speed is unknown, defaulting to 1000 [ 622.860547][T28719] hsr0 speed is unknown, defaulting to 1000 [ 623.233783][T28768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6892'. [ 623.243031][T28768] netlink: 'syz.4.6892': attribute type 3 has an invalid length. [ 623.358351][T28774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6895'. [ 623.459641][T28780] netlink: 'syz.1.6898': attribute type 1 has an invalid length. [ 623.532433][T28780] bond2: (slave gretap1): making interface the new active one [ 623.540844][T28780] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 623.565370][T28780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6898'. [ 623.808474][T28800] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6905'. [ 623.959982][T28809] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6910'. [ 624.027064][T28813] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 624.267542][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 624.314831][T28828] netlink: 'syz.2.6919': attribute type 7 has an invalid length. [ 625.347766][ T5968] hsr0 speed is unknown, defaulting to 1000 [ 625.390914][T28892] netlink: 'syz.1.6937': attribute type 4 has an invalid length. [ 625.560763][T20831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.575312][T20831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.771461][T28914] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6945'. [ 625.856008][T28917] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6946'. [ 625.878772][T28917] vlan0: entered allmulticast mode [ 625.977676][T28925] netlink: 176 bytes leftover after parsing attributes in process `syz.3.6948'. [ 626.046717][T28925] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6948'. [ 626.127638][T28933] netlink: 'syz.0.6952': attribute type 9 has an invalid length. [ 626.314488][T28947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6956'. [ 626.381445][T28952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6959'. [ 627.095604][T28997] netlink: 'syz.4.6974': attribute type 10 has an invalid length. [ 627.097159][T12997] IPVS: starting estimator thread 0... [ 627.145059][T28997] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 627.170880][T29006] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 627.222599][T29003] IPVS: using max 26 ests per chain, 62400 per kthread [ 627.387790][T29015] netlink: 'syz.0.6982': attribute type 4 has an invalid length. [ 627.406110][T29020] netlink: 'syz.1.6980': attribute type 1 has an invalid length. [ 627.494773][T29015] tap0: tun_chr_ioctl cmd 2148553947 [ 627.539817][T29012] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 627.608940][T29020] veth5: entered promiscuous mode [ 627.625951][T29020] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 627.894958][T29051] FAULT_INJECTION: forcing a failure. [ 627.894958][T29051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.919208][T29051] CPU: 0 UID: 0 PID: 29051 Comm: syz.3.6994 Not tainted syzkaller #0 PREEMPT(full) [ 627.919232][T29051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 627.919243][T29051] Call Trace: [ 627.919251][T29051] [ 627.919259][T29051] dump_stack_lvl+0x189/0x250 [ 627.919284][T29051] ? __pfx____ratelimit+0x10/0x10 [ 627.919308][T29051] ? __pfx_dump_stack_lvl+0x10/0x10 [ 627.919328][T29051] ? __pfx__printk+0x10/0x10 [ 627.919358][T29051] ? __might_fault+0xb0/0x130 [ 627.919392][T29051] should_fail_ex+0x414/0x560 [ 627.919419][T29051] _copy_from_iter+0x1de/0x1790 [ 627.919444][T29051] ? rcu_is_watching+0x15/0xb0 [ 627.919464][T29051] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 627.919488][T29051] ? __pfx__copy_from_iter+0x10/0x10 [ 627.919508][T29051] ? __build_skb_around+0x257/0x3e0 [ 627.919530][T29051] ? netlink_sendmsg+0x642/0xb30 [ 627.919545][T29051] ? skb_put+0x11b/0x210 [ 627.919566][T29051] netlink_sendmsg+0x6b2/0xb30 [ 627.919592][T29051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 627.919612][T29051] ? aa_sock_msg_perm+0xf1/0x1d0 [ 627.919632][T29051] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 627.919650][T29051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 627.919668][T29051] __sock_sendmsg+0x219/0x270 [ 627.919694][T29051] ____sys_sendmsg+0x505/0x830 [ 627.919720][T29051] ? __pfx_____sys_sendmsg+0x10/0x10 [ 627.919748][T29051] ? import_iovec+0x74/0xa0 [ 627.919771][T29051] ___sys_sendmsg+0x21f/0x2a0 [ 627.919793][T29051] ? __pfx____sys_sendmsg+0x10/0x10 [ 627.919849][T29051] ? __fget_files+0x2a/0x420 [ 627.919864][T29051] ? __fget_files+0x3a0/0x420 [ 627.919890][T29051] __x64_sys_sendmsg+0x19b/0x260 [ 627.919912][T29051] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 627.919941][T29051] ? __pfx_ksys_write+0x10/0x10 [ 627.919960][T29051] ? rcu_is_watching+0x15/0xb0 [ 627.919983][T29051] ? do_syscall_64+0xbe/0x3b0 [ 627.920003][T29051] do_syscall_64+0xfa/0x3b0 [ 627.920018][T29051] ? lockdep_hardirqs_on+0x9c/0x150 [ 627.920040][T29051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.920058][T29051] ? clear_bhb_loop+0x60/0xb0 [ 627.920078][T29051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.920095][T29051] RIP: 0033:0x7f6e8278eba9 [ 627.920111][T29051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.920125][T29051] RSP: 002b:00007f6e83618038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 627.920145][T29051] RAX: ffffffffffffffda RBX: 00007f6e829d5fa0 RCX: 00007f6e8278eba9 [ 627.920158][T29051] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 627.920169][T29051] RBP: 00007f6e83618090 R08: 0000000000000000 R09: 0000000000000000 [ 627.920180][T29051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.920191][T29051] R13: 00007f6e829d6038 R14: 00007f6e829d5fa0 R15: 00007ffdc7380c08 [ 627.920222][T29051] [ 628.327920][T29053] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 628.353716][T29061] unsupported nlmsg_type 40 [ 628.492097][T29076] openvswitch: netlink: EtherType 0 is less than min 600 [ 628.884117][T29078] __nla_validate_parse: 5 callbacks suppressed [ 628.884135][T29078] netlink: 232 bytes leftover after parsing attributes in process `syz.3.7004'. [ 629.000215][T29108] FAULT_INJECTION: forcing a failure. [ 629.000215][T29108] name failslab, interval 1, probability 0, space 0, times 0 [ 629.016940][T29108] CPU: 1 UID: 0 PID: 29108 Comm: syz.0.7012 Not tainted syzkaller #0 PREEMPT(full) [ 629.016963][T29108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 629.016975][T29108] Call Trace: [ 629.016983][T29108] [ 629.016992][T29108] dump_stack_lvl+0x189/0x250 [ 629.017016][T29108] ? __pfx____ratelimit+0x10/0x10 [ 629.017042][T29108] ? __pfx_dump_stack_lvl+0x10/0x10 [ 629.017062][T29108] ? __pfx__printk+0x10/0x10 [ 629.017090][T29108] ? __pfx___might_resched+0x10/0x10 [ 629.017106][T29108] ? fs_reclaim_acquire+0x7d/0x100 [ 629.017135][T29108] should_fail_ex+0x414/0x560 [ 629.017162][T29108] should_failslab+0xa8/0x100 [ 629.017188][T29108] __kmalloc_cache_noprof+0x70/0x3d0 [ 629.017208][T29108] ? genl_start+0x1c9/0x6c0 [ 629.017232][T29108] genl_start+0x1c9/0x6c0 [ 629.017250][T29108] ? netlink_lookup+0x30/0x200 [ 629.017281][T29108] __netlink_dump_start+0x466/0x7e0 [ 629.017313][T29108] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 629.017338][T29108] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 629.017356][T29108] ? genl_get_cmd+0x7d9/0x910 [ 629.017378][T29108] ? __pfx___mutex_lock+0x10/0x10 [ 629.017396][T29108] ? __pfx_genl_start+0x10/0x10 [ 629.017413][T29108] ? __pfx_genl_dumpit+0x10/0x10 [ 629.017429][T29108] ? __pfx_genl_done+0x10/0x10 [ 629.017455][T29108] ? stack_trace_save+0x9c/0xe0 [ 629.017482][T29108] genl_rcv_msg+0x5da/0x790 [ 629.017515][T29108] ? __pfx_genl_rcv_msg+0x10/0x10 [ 629.017534][T29108] ? __pfx_nl802154_dump_interface+0x10/0x10 [ 629.017575][T29108] netlink_rcv_skb+0x208/0x470 [ 629.017595][T29108] ? __lock_acquire+0xab9/0xd20 [ 629.017618][T29108] ? __pfx_genl_rcv_msg+0x10/0x10 [ 629.017640][T29108] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 629.017684][T29108] ? down_read+0x1ad/0x2e0 [ 629.017705][T29108] genl_rcv+0x28/0x40 [ 629.017723][T29108] netlink_unicast+0x82f/0x9e0 [ 629.017755][T29108] ? __pfx_netlink_unicast+0x10/0x10 [ 629.017779][T29108] ? netlink_sendmsg+0x642/0xb30 [ 629.017794][T29108] ? skb_put+0x11b/0x210 [ 629.017815][T29108] netlink_sendmsg+0x805/0xb30 [ 629.017843][T29108] ? __pfx_netlink_sendmsg+0x10/0x10 [ 629.017863][T29108] ? aa_sock_msg_perm+0xf1/0x1d0 [ 629.017883][T29108] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 629.017905][T29108] ? __pfx_netlink_sendmsg+0x10/0x10 [ 629.017923][T29108] __sock_sendmsg+0x219/0x270 [ 629.017949][T29108] ____sys_sendmsg+0x505/0x830 [ 629.017975][T29108] ? __pfx_____sys_sendmsg+0x10/0x10 [ 629.018005][T29108] ? import_iovec+0x74/0xa0 [ 629.018029][T29108] ___sys_sendmsg+0x21f/0x2a0 [ 629.018050][T29108] ? __pfx____sys_sendmsg+0x10/0x10 [ 629.018111][T29108] ? __fget_files+0x2a/0x420 [ 629.018126][T29108] ? __fget_files+0x3a0/0x420 [ 629.018154][T29108] __x64_sys_sendmsg+0x19b/0x260 [ 629.018176][T29108] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 629.018205][T29108] ? __pfx_ksys_write+0x10/0x10 [ 629.018224][T29108] ? rcu_is_watching+0x15/0xb0 [ 629.018247][T29108] ? do_syscall_64+0xbe/0x3b0 [ 629.018268][T29108] do_syscall_64+0xfa/0x3b0 [ 629.018283][T29108] ? lockdep_hardirqs_on+0x9c/0x150 [ 629.018304][T29108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.018321][T29108] ? clear_bhb_loop+0x60/0xb0 [ 629.018342][T29108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.018359][T29108] RIP: 0033:0x7fad9d18eba9 [ 629.018374][T29108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.018389][T29108] RSP: 002b:00007fad9dfdc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 629.018408][T29108] RAX: ffffffffffffffda RBX: 00007fad9d3d5fa0 RCX: 00007fad9d18eba9 [ 629.018421][T29108] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 629.018433][T29108] RBP: 00007fad9dfdc090 R08: 0000000000000000 R09: 0000000000000000 [ 629.018444][T29108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.018454][T29108] R13: 00007fad9d3d6038 R14: 00007fad9d3d5fa0 R15: 00007fff5d9b9718 [ 629.018486][T29108] [ 629.576271][T29114] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7015'. [ 629.592112][T29121] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7013'. [ 629.841602][T29127] netlink: 'syz.4.7017': attribute type 1 has an invalid length. [ 629.957824][T29127] 8021q: adding VLAN 0 to HW filter on device bond1 [ 630.010978][T29139] vlan2: entered promiscuous mode [ 630.018560][T29139] bond1: entered promiscuous mode [ 630.024994][T29139] vlan2: entered allmulticast mode [ 630.025091][T29136] netlink: 'syz.2.7020': attribute type 21 has an invalid length. [ 630.030108][T29139] bond1: entered allmulticast mode [ 630.055339][T29136] IPv6: NLM_F_CREATE should be specified when creating new route [ 630.091722][T29136] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 630.098983][T29136] IPv6: NLM_F_CREATE should be set when creating new route [ 630.106274][T29136] IPv6: NLM_F_CREATE should be set when creating new route [ 630.109902][T29147] IPv6: sit1: Disabled Multicast RS [ 630.113504][T29136] IPv6: NLM_F_CREATE should be set when creating new route [ 630.261185][T29151] FAULT_INJECTION: forcing a failure. [ 630.261185][T29151] name failslab, interval 1, probability 0, space 0, times 0 [ 630.284751][T29152] nbd: nbd4 already in use [ 630.289696][T29152] block nbd4: NBD_DISCONNECT [ 630.295179][T29152] block nbd4: Send disconnect failed -32 [ 630.302173][T29152] block nbd4: shutting down sockets [ 630.333494][T29151] CPU: 0 UID: 0 PID: 29151 Comm: syz.1.7025 Not tainted syzkaller #0 PREEMPT(full) [ 630.333517][T29151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 630.333528][T29151] Call Trace: [ 630.333536][T29151] [ 630.333545][T29151] dump_stack_lvl+0x189/0x250 [ 630.333570][T29151] ? __pfx____ratelimit+0x10/0x10 [ 630.333595][T29151] ? __pfx_dump_stack_lvl+0x10/0x10 [ 630.333614][T29151] ? __pfx__printk+0x10/0x10 [ 630.333642][T29151] ? __pfx___might_resched+0x10/0x10 [ 630.333664][T29151] should_fail_ex+0x414/0x560 [ 630.333692][T29151] should_failslab+0xa8/0x100 [ 630.333716][T29151] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 630.333740][T29151] ? __alloc_skb+0x112/0x2d0 [ 630.333763][T29151] __alloc_skb+0x112/0x2d0 [ 630.333785][T29151] netlink_dump+0x1b7/0xe90 [ 630.333822][T29151] ? __pfx_netlink_dump+0x10/0x10 [ 630.333864][T29151] ? genl_start+0x499/0x6c0 [ 630.333893][T29151] __netlink_dump_start+0x5cb/0x7e0 [ 630.333926][T29151] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 630.333951][T29151] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 630.333970][T29151] ? genl_get_cmd+0x7d9/0x910 [ 630.333992][T29151] ? __pfx___mutex_lock+0x10/0x10 [ 630.334010][T29151] ? __pfx_genl_start+0x10/0x10 [ 630.334026][T29151] ? __pfx_genl_dumpit+0x10/0x10 [ 630.334044][T29151] ? __pfx_genl_done+0x10/0x10 [ 630.334069][T29151] ? stack_trace_save+0x9c/0xe0 [ 630.334096][T29151] genl_rcv_msg+0x5da/0x790 [ 630.334122][T29151] ? __pfx_genl_rcv_msg+0x10/0x10 [ 630.334141][T29151] ? __pfx_nl802154_dump_interface+0x10/0x10 [ 630.334180][T29151] netlink_rcv_skb+0x208/0x470 [ 630.334200][T29151] ? __lock_acquire+0xab9/0xd20 [ 630.334218][T29151] ? __pfx_genl_rcv_msg+0x10/0x10 [ 630.334235][T29151] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 630.334269][T29151] ? down_read+0x1ad/0x2e0 [ 630.334285][T29151] genl_rcv+0x28/0x40 [ 630.334299][T29151] netlink_unicast+0x82f/0x9e0 [ 630.334325][T29151] ? __pfx_netlink_unicast+0x10/0x10 [ 630.334344][T29151] ? netlink_sendmsg+0x642/0xb30 [ 630.334355][T29151] ? skb_put+0x11b/0x210 [ 630.334371][T29151] netlink_sendmsg+0x805/0xb30 [ 630.334392][T29151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 630.334413][T29151] ? aa_sock_msg_perm+0xf1/0x1d0 [ 630.334428][T29151] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 630.334442][T29151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 630.334456][T29151] __sock_sendmsg+0x219/0x270 [ 630.334477][T29151] ____sys_sendmsg+0x505/0x830 [ 630.334497][T29151] ? __pfx_____sys_sendmsg+0x10/0x10 [ 630.334519][T29151] ? import_iovec+0x74/0xa0 [ 630.334541][T29151] ___sys_sendmsg+0x21f/0x2a0 [ 630.334558][T29151] ? __pfx____sys_sendmsg+0x10/0x10 [ 630.334603][T29151] ? __fget_files+0x2a/0x420 [ 630.334615][T29151] ? __fget_files+0x3a0/0x420 [ 630.334636][T29151] __x64_sys_sendmsg+0x19b/0x260 [ 630.334653][T29151] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 630.334676][T29151] ? __pfx_ksys_write+0x10/0x10 [ 630.334692][T29151] ? rcu_is_watching+0x15/0xb0 [ 630.334710][T29151] ? do_syscall_64+0xbe/0x3b0 [ 630.334726][T29151] do_syscall_64+0xfa/0x3b0 [ 630.334738][T29151] ? lockdep_hardirqs_on+0x9c/0x150 [ 630.334756][T29151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.334770][T29151] ? clear_bhb_loop+0x60/0xb0 [ 630.334786][T29151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.334799][T29151] RIP: 0033:0x7fb56038eba9 [ 630.334812][T29151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.334824][T29151] RSP: 002b:00007fb56127e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 630.334840][T29151] RAX: ffffffffffffffda RBX: 00007fb5605d5fa0 RCX: 00007fb56038eba9 [ 630.334850][T29151] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 630.334859][T29151] RBP: 00007fb56127e090 R08: 0000000000000000 R09: 0000000000000000 [ 630.334867][T29151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.334876][T29151] R13: 00007fb5605d6038 R14: 00007fb5605d5fa0 R15: 00007ffd545fce28 [ 630.334900][T29151] [ 630.341992][T12983] IPVS: starting estimator thread 0... [ 630.383218][T29152] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20004 [ 630.455138][T29160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7024'. [ 630.670828][T29157] IPVS: using max 28 ests per chain, 67200 per kthread [ 630.802349][T29168] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 630.993745][T29180] sctp: [Deprecated]: syz.3.7034 (pid 29180) Use of int in maxseg socket option. [ 630.993745][T29180] Use struct sctp_assoc_value instead [ 631.061813][T29184] netlink: 'syz.4.7036': attribute type 17 has an invalid length. [ 631.080295][T29186] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 631.090086][T29184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7036'. [ 631.101103][T29184] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7036'. [ 631.183056][T29184] erspan0: entered promiscuous mode [ 631.194624][T29184] erspan0: left promiscuous mode [ 631.306076][T29186] IPv6: sit1: Disabled Multicast RS [ 631.337041][T29186] sit1: entered allmulticast mode [ 631.418150][T29205] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7042'. [ 631.420045][T29210] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 631.437916][T29210] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 631.696017][T29222] netlink: 'syz.2.7049': attribute type 2 has an invalid length. [ 631.720708][T29222] : entered promiscuous mode [ 631.745577][T29227] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 631.784653][T29227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7047'. [ 631.837389][T29230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7047'. [ 631.855284][T29231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7050'. [ 631.881590][T16773] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.913683][T16773] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.922397][T16773] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.937370][T20826] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.017394][T29237] tls_set_device_offload_rx: netdev not found [ 632.033959][T29239] ªªªªªª: renamed from vlan0 (while UP) [ 632.678644][T29275] tipc: Started in network mode [ 632.683938][T29275] tipc: Node identity 56f14d29bf26, cluster identity 4711 [ 632.692010][T29275] tipc: Enabled bearer , priority 0 [ 632.705159][T29275] syzkaller0: entered promiscuous mode [ 632.710775][T29275] syzkaller0: entered allmulticast mode [ 632.733116][T29275] tipc: Resetting bearer [ 632.748662][T29273] tipc: Resetting bearer [ 632.785985][T29273] tipc: Disabling bearer [ 632.877815][T29286] tipc: New replicast peer: 255.255.255.255 [ 632.885552][T29286] tipc: Enabled bearer , priority 10 [ 632.946763][T29287] 8021q: adding VLAN 0 to HW filter on device bond2 [ 632.987129][T29284] xt_HMARK: spi-set and port-set can't be combined [ 633.568554][T29327] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 633.734994][T29335] xt_policy: neither incoming nor outgoing policy selected [ 633.890381][T12989] tipc: Node number set to 3573284268 [ 633.972182][T29353] netlink: 'syz.0.7090': attribute type 1 has an invalid length. [ 633.996429][T29353] netlink: 'syz.0.7090': attribute type 2 has an invalid length. [ 634.261743][T29376] __nla_validate_parse: 13 callbacks suppressed [ 634.261763][T29376] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7097'. [ 634.286190][T29376] 8021q: VLANs not supported on gre0 [ 634.508350][T29396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7102'. [ 634.825666][T29415] netlink: 'syz.0.7108': attribute type 1 has an invalid length. [ 635.008660][T29415] 8021q: adding VLAN 0 to HW filter on device bond3 [ 635.495352][ T5184] block nbd4: Receive control failed (result -32) [ 635.506982][T29448] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 635.664387][T29463] netlink: 'syz.3.7121': attribute type 1 has an invalid length. [ 635.768391][T29463] bond1: entered promiscuous mode [ 635.777307][T29463] 8021q: adding VLAN 0 to HW filter on device bond1 [ 635.830351][T29464] 8021q: adding VLAN 0 to HW filter on device bond2 [ 635.843171][T29464] bond1: (slave bond2): making interface the new active one [ 635.853483][T29464] bond2: entered promiscuous mode [ 635.859417][T29464] bond1: (slave bond2): Enslaving as an active interface with an up link [ 636.067416][T29476] netlink: 'syz.4.7126': attribute type 2 has an invalid length. [ 636.525219][T29508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7135'. [ 636.568655][T29508] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 636.600393][T29516] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7138'. [ 636.610316][T29508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 636.692723][T20826] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 636.708353][T29520] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 636.736895][T29523] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 637.277854][T29562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7154'. [ 637.963661][T29594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7159'. [ 638.465632][T29608] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 638.706745][T29631] sctp: [Deprecated]: syz.3.7170 (pid 29631) Use of int in max_burst socket option. [ 638.706745][T29631] Use struct sctp_assoc_value instead [ 638.780275][T29634] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7173'. [ 638.920440][T29635] syzkaller0: entered allmulticast mode [ 638.931846][T29638] 8021q: VLANs not supported on ip_vti0 [ 639.356749][T29654] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7179'. [ 639.367589][T29654] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7179'. [ 640.830989][T29640] 8021q: VLANs not supported on ip_vti0 [ 640.960622][T29669] netlink: 'syz.1.7186': attribute type 1 has an invalid length. [ 641.132745][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 641.210144][T29685] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20002 [ 641.219892][T29685] netlink: 'syz.3.7188': attribute type 10 has an invalid length. [ 641.695850][T16773] bond0 (unregistering): (slave team0): Releasing backup interface [ 641.713573][T16773] bond0 (unregistering): Released all slaves [ 641.825154][T16773] bond1 (unregistering): Released all slaves [ 641.942643][T16773] bond2 (unregistering): Released all slaves [ 642.055213][T16773] bond3 (unregistering): Released all slaves [ 642.161530][T16773] bond4 (unregistering): Released all slaves [ 642.175442][T16773] bond5 (unregistering): Released all slaves [ 642.193742][T29669] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 642.194352][T29673] !: renamed from dummy0 (while UP) [ 642.305581][T29685] team0: Port device dummy0 added [ 642.453664][T16773] tipc: Disabling bearer [ 642.462094][T16773] tipc: Left network mode [ 642.614534][T29711] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7195'. [ 642.934200][T29728] netlink: 'syz.2.7203': attribute type 2 has an invalid length. [ 643.055465][T29733] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 643.063073][T29733] team0: Device macvtap1 is already an upper device of the team interface [ 643.419092][T29745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7207'. [ 643.576963][T29757] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7209'. [ 643.744386][T29767] netlink: 'syz.4.7214': attribute type 1 has an invalid length. [ 644.024646][T29777] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7217'. [ 644.235057][T29767] 8021q: adding VLAN 0 to HW filter on device bond2 [ 644.260320][T29800] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 644.467699][T29812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7223'. [ 644.722192][T20826] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 644.770608][T12983] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 644.789609][T20826] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 644.803089][T29820] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7227'. [ 644.895506][ T6003] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 644.929812][T16773] hsr_slave_0: left promiscuous mode [ 644.940117][T16773] hsr_slave_1: left promiscuous mode [ 644.953455][T16773] batman_adv: batadv0: Removing interface: ipvlan2 [ 644.975902][T16773] batman_adv: batadv0: Removing interface: dummy0 [ 645.003964][T12983] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 645.018792][T29843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7233'. [ 645.060110][T29845] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7234'. [ 645.086788][T29845] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 645.094373][ C0] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 645.101205][ C0] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 645.594510][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 646.620240][T29851] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7235'. [ 646.719224][T29850] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 647.116097][T29881] netlink: 'syz.0.7244': attribute type 2 has an invalid length. [ 647.147791][T29883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7245'. [ 647.159092][T29881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7244'. [ 647.174887][T29885] netlink: 'syz.0.7244': attribute type 2 has an invalid length. [ 647.184063][T29885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7244'. [ 647.217501][T29883] 8021q: adding VLAN 0 to HW filter on device bond3 [ 647.260493][T16773] IPVS: stop unused estimator thread 0... [ 647.323555][T29886] vlan0: entered allmulticast mode [ 647.332812][T29886] bond3: entered allmulticast mode [ 647.979456][T29921] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7257'. [ 648.155489][T29931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7260'. [ 648.233959][T29934] netlink: 'syz.1.7261': attribute type 1 has an invalid length. [ 648.361108][T29939] bond0: entered promiscuous mode [ 648.376111][T29939] bond_slave_0: entered promiscuous mode [ 648.382060][T29939] bond_slave_1: entered promiscuous mode [ 648.397329][T29939] mac80211_hwsim hwsim53 wlan1: entered promiscuous mode [ 648.433917][T29939] bond0: left promiscuous mode [ 648.441991][T29939] bond_slave_0: left promiscuous mode [ 648.449087][T29939] bond_slave_1: left promiscuous mode [ 648.462344][T29939] mac80211_hwsim hwsim53 wlan1: left promiscuous mode [ 648.516044][T29947] tipc: Enabling of bearer rejected, failed to enable media [ 648.691048][T29957] netlink: 'syz.0.7268': attribute type 1 has an invalid length. [ 648.799241][T29967] : renamed from geneve1 [ 649.051411][T29970] syzkaller0: entered promiscuous mode [ 649.067054][T29993] netlink: 'syz.4.7278': attribute type 21 has an invalid length. [ 649.072640][T29970] syzkaller0: entered allmulticast mode [ 649.113571][T29993] netlink: 'syz.4.7278': attribute type 1 has an invalid length. [ 649.141587][T29987] syz.0.7276: vmalloc error: size 4198400, failed to allocated page array size 8200, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 649.145826][T29993] netlink: 'syz.4.7278': attribute type 23 has an invalid length. [ 649.196280][T29987] CPU: 1 UID: 0 PID: 29987 Comm: syz.0.7276 Not tainted syzkaller #0 PREEMPT(full) [ 649.196303][T29987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 649.196314][T29987] Call Trace: [ 649.196322][T29987] [ 649.196331][T29987] dump_stack_lvl+0x189/0x250 [ 649.196357][T29987] ? __pfx_dump_stack_lvl+0x10/0x10 [ 649.196377][T29987] ? __pfx__printk+0x10/0x10 [ 649.196400][T29987] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 649.196420][T29987] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 649.196441][T29987] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 649.196464][T29987] warn_alloc+0x214/0x310 [ 649.196494][T29987] ? __pfx_warn_alloc+0x10/0x10 [ 649.196525][T29987] ? __get_vm_area_node+0x28f/0x300 [ 649.196547][T29987] ? hash_ipport_create+0x741/0x1410 [ 649.196574][T29987] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 649.196625][T29987] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 649.196652][T29987] ? rcu_is_watching+0x15/0xb0 [ 649.196671][T29987] ? hash_ipport_create+0x741/0x1410 [ 649.196693][T29987] ? hash_ipport_create+0x741/0x1410 [ 649.196712][T29987] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 649.196734][T29987] ? hash_ipport_create+0x741/0x1410 [ 649.196758][T29987] ? hash_ipport_create+0x6d5/0x1410 [ 649.196785][T29987] hash_ipport_create+0x741/0x1410 [ 649.196811][T29987] ? __lock_acquire+0xab9/0xd20 [ 649.196849][T29987] ? __pfx_hash_ipport_create+0x10/0x10 [ 649.196875][T29987] ? __nla_parse+0x40/0x60 [ 649.196898][T29987] ? __pfx_hash_ipport_create+0x10/0x10 [ 649.196923][T29987] ip_set_create+0xa97/0x1940 [ 649.196945][T29987] ? ip_set_create+0x4a2/0x1940 [ 649.196983][T29987] ? __pfx_ip_set_create+0x10/0x10 [ 649.197043][T29987] nfnetlink_rcv_msg+0xb4a/0x1130 [ 649.197066][T29987] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 649.197109][T29987] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 649.197128][T29987] ? kasan_save_free_info+0x46/0x50 [ 649.197200][T29987] netlink_rcv_skb+0x208/0x470 [ 649.197226][T29987] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 649.197249][T29987] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 649.197285][T29987] ? bpf_lsm_capable+0x9/0x20 [ 649.197306][T29987] ? security_capable+0x7e/0x2e0 [ 649.197337][T29987] nfnetlink_rcv+0x26a/0x2520 [ 649.197362][T29987] ? __dev_queue_xmit+0x1d79/0x3b50 [ 649.197395][T29987] ? __dev_queue_xmit+0x27b/0x3b50 [ 649.197428][T29987] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 649.197450][T29987] ? __pfx___dev_queue_xmit+0x10/0x10 [ 649.197485][T29987] ? ref_tracker_free+0x63a/0x7d0 [ 649.197509][T29987] ? __asan_memcpy+0x40/0x70 [ 649.197527][T29987] ? __pfx_ref_tracker_free+0x10/0x10 [ 649.197567][T29987] ? skb_clone+0x246/0x3a0 [ 649.197591][T29987] ? __netlink_deliver_tap+0x807/0x850 [ 649.197614][T29987] ? netlink_deliver_tap+0x2e/0x1b0 [ 649.197644][T29987] ? netlink_deliver_tap+0x2e/0x1b0 [ 649.197676][T29987] netlink_unicast+0x82f/0x9e0 [ 649.197707][T29987] ? __pfx_netlink_unicast+0x10/0x10 [ 649.197732][T29987] ? netlink_sendmsg+0x642/0xb30 [ 649.197747][T29987] ? skb_put+0x11b/0x210 [ 649.197768][T29987] netlink_sendmsg+0x805/0xb30 [ 649.197796][T29987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.197817][T29987] ? aa_sock_msg_perm+0xf1/0x1d0 [ 649.197838][T29987] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 649.197856][T29987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.197874][T29987] __sock_sendmsg+0x219/0x270 [ 649.197901][T29987] ____sys_sendmsg+0x505/0x830 [ 649.197927][T29987] ? __pfx_____sys_sendmsg+0x10/0x10 [ 649.197961][T29987] ? import_iovec+0x74/0xa0 [ 649.197985][T29987] ___sys_sendmsg+0x21f/0x2a0 [ 649.198007][T29987] ? __pfx____sys_sendmsg+0x10/0x10 [ 649.198066][T29987] ? __fget_files+0x2a/0x420 [ 649.198081][T29987] ? __fget_files+0x3a0/0x420 [ 649.198109][T29987] __x64_sys_sendmsg+0x19b/0x260 [ 649.198131][T29987] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 649.198163][T29987] ? rcu_is_watching+0x15/0xb0 [ 649.198186][T29987] ? do_syscall_64+0xbe/0x3b0 [ 649.198208][T29987] do_syscall_64+0xfa/0x3b0 [ 649.198223][T29987] ? lockdep_hardirqs_on+0x9c/0x150 [ 649.198245][T29987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.198263][T29987] ? clear_bhb_loop+0x60/0xb0 [ 649.198284][T29987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.198300][T29987] RIP: 0033:0x7fad9d18eba9 [ 649.198317][T29987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 649.198332][T29987] RSP: 002b:00007fad9dfdc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 649.198352][T29987] RAX: ffffffffffffffda RBX: 00007fad9d3d5fa0 RCX: 00007fad9d18eba9 [ 649.198365][T29987] RDX: 0000000000004020 RSI: 0000200000000280 RDI: 0000000000000005 [ 649.198377][T29987] RBP: 00007fad9d211e19 R08: 0000000000000000 R09: 0000000000000000 [ 649.198389][T29987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.198399][T29987] R13: 00007fad9d3d6038 R14: 00007fad9d3d5fa0 R15: 00007fff5d9b9718 [ 649.198430][T29987] [ 649.348244][T29987] Mem-Info: [ 649.350990][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 649.355208][T29987] active_anon:9824 inactive_anon:0 isolated_anon:0 [ 649.355208][T29987] active_file:3411 inactive_file:40100 isolated_file:0 [ 649.355208][T29987] unevictable:768 dirty:182 writeback:0 [ 649.355208][T29987] slab_reclaimable:14205 slab_unreclaimable:145623 [ 649.355208][T29987] mapped:29477 shmem:1367 pagetables:1184 [ 649.355208][T29987] sec_pagetables:0 bounce:0 [ 649.355208][T29987] kernel_misc_reclaimable:0 [ 649.355208][T29987] free:1263903 free_pcp:14460 free_cma:0 [ 649.750066][T29987] Node 0 active_anon:39396kB inactive_anon:0kB active_file:13644kB inactive_file:160192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117908kB dirty:728kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17492kB pagetables:4796kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 649.791686][T29987] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 649.826165][T29987] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 649.858204][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 649.867671][T29987] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 649.873491][T29987] Node 0 DMA32 free:1158904kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39508kB inactive_anon:0kB active_file:13644kB inactive_file:158632kB unevictable:1536kB writepending:728kB present:3129332kB managed:2557432kB mlocked:0kB bounce:0kB free_pcp:35352kB local_pcp:20136kB free_cma:0kB [ 649.913680][T29987] lowmem_reserve[]: 0 0 1 1 1 [ 649.919466][T29987] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1560kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 649.959042][T29987] lowmem_reserve[]: 0 0 0 0 0 [ 649.964232][T29987] Node 1 Normal free:3881376kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22400kB local_pcp:6720kB free_cma:0kB [ 649.995896][T29987] lowmem_reserve[]: 0 0 0 0 0 [ 650.000706][T29987] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 650.013487][T29987] Node 0 DMA32: 5086*4kB (UME) 1500*8kB (UME) 614*16kB (UM) 386*32kB (UME) 184*64kB (UME) 126*128kB (UME) 83*256kB (UME) 39*512kB (UM) 39*1024kB (UM) 12*2048kB (UME) 237*4096kB (UM) = 1158904kB [ 650.033527][T29987] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 650.046107][T29987] Node 1 Normal: 204*4kB (UE) 64*8kB (UME) 41*16kB (UME) 103*32kB (UME) 32*64kB (UME) 4*128kB (UME) 5*256kB (UM) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 944*4096kB (M) = 3881376kB [ 650.065821][T29987] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 650.075711][T29987] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 650.085221][T29987] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 650.095396][T29987] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 650.104874][T29987] 44874 total pagecache pages [ 650.109741][T29987] 0 pages in swap cache [ 650.114050][T29987] Free swap = 124996kB [ 650.118273][T29987] Total swap = 124996kB [ 650.130210][T29987] 2097051 pages RAM [ 650.134120][T29987] 0 pages HighMem/MovableOnly [ 650.138793][T29987] 425667 pages reserved [ 650.150152][T29987] 0 pages cma reserved [ 651.738353][T30020] netlink: 'syz.0.7290': attribute type 11 has an invalid length. [ 651.771943][T30026] __nla_validate_parse: 3 callbacks suppressed [ 651.771959][T30026] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7288'. [ 651.815546][T30026] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7288'. [ 651.838060][T30026] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7288'. [ 651.884764][T30032] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7291'. [ 651.894587][T30026] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7288'. [ 652.017904][T30040] netlink: 'syz.2.7294': attribute type 1 has an invalid length. [ 652.026729][T30040] netlink: 232 bytes leftover after parsing attributes in process `syz.2.7294'. [ 652.063192][T30040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7294'. [ 652.078735][T30041] openvswitch: netlink: Message has 225 unknown bytes. [ 652.095945][T30041] netlink: 27 bytes leftover after parsing attributes in process `syz.3.7293'. [ 652.143660][T30040] netlink: 'syz.2.7294': attribute type 1 has an invalid length. [ 652.155504][T30040] netlink: 232 bytes leftover after parsing attributes in process `syz.2.7294'. [ 652.164669][T30052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7296'. [ 652.401909][T30063] veth1_to_bond: entered allmulticast mode [ 652.593591][T30064] bond0: (slave bond_slave_1): Releasing backup interface [ 652.663201][T30064] veth1_to_bond (unregistering): left allmulticast mode [ 652.670975][T30083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 652.672817][T30080] nbd: must specify an index to disconnect [ 652.785700][T30090] veth0: entered promiscuous mode [ 652.794475][T30089] veth0: left promiscuous mode [ 655.294423][T30185] netlink: 'syz.2.7341': attribute type 6 has an invalid length. [ 655.478477][T30196] netlink: 'syz.2.7345': attribute type 10 has an invalid length. [ 656.050383][T30222] netlink: 'syz.0.7353': attribute type 5 has an invalid length. [ 656.528532][T30262] netlink: 'syz.0.7365': attribute type 1 has an invalid length. [ 656.587155][T30262] bond5: entered promiscuous mode [ 656.592858][T30262] 8021q: adding VLAN 0 to HW filter on device bond5 [ 656.882232][T30286] __nla_validate_parse: 15 callbacks suppressed [ 656.882249][T30286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7373'. [ 656.903969][T30286] netlink: 176 bytes leftover after parsing attributes in process `syz.1.7373'. [ 656.914576][T30286] netlink: 'syz.1.7373': attribute type 5 has an invalid length. [ 656.965927][T30291] netlink: 'syz.3.7374': attribute type 2 has an invalid length. [ 656.984329][T30291] netlink: 'syz.3.7374': attribute type 8 has an invalid length. [ 657.003441][T30291] netlink: 1148 bytes leftover after parsing attributes in process `syz.3.7374'. [ 657.021682][T30294] netlink: 'syz.0.7376': attribute type 12 has an invalid length. [ 657.648865][T30325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7386'. [ 657.780338][T30329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7388'. [ 657.786244][T30330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7388'. [ 657.978467][T30337] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7391'. [ 657.987939][T30336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7391'. [ 658.170051][T30342] netlink: 'syz.4.7393': attribute type 2 has an invalid length. [ 658.182679][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 658.223669][T30344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 658.335495][T30349] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20000 [ 658.339061][T30351] netlink: 'syz.4.7395': attribute type 10 has an invalid length. [ 658.351637][T30350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7396'. [ 658.358674][T30351] veth0_vlan: entered allmulticast mode [ 658.374866][T30351] veth0_vlan: left promiscuous mode [ 658.381539][T30351] veth0_vlan: entered promiscuous mode [ 658.397059][T30351] team0: Device veth0_vlan failed to register rx_handler [ 658.410065][T30353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7396'. [ 658.638267][T30370] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component [ 659.201844][T30406] netlink: 'syz.2.7414': attribute type 28 has an invalid length. [ 659.228965][T30406] netlink: 'syz.2.7414': attribute type 3 has an invalid length. [ 659.606100][T30439] tipc: Enabled bearer , priority 0 [ 659.633543][T30438] tipc: Enabling of bearer rejected, already enabled [ 659.674689][T30446] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 659.740130][T30437] syzkaller0: entered promiscuous mode [ 659.745861][T30437] syzkaller0: entered allmulticast mode [ 659.859427][T30439] tipc: Resetting bearer [ 660.713016][ T6003] tipc: Node number set to 3923201321 [ 661.391675][T30439] tipc: Disabling bearer [ 667.132815][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 674.812831][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 680.489839][T30465] dvmrp1: entered allmulticast mode [ 680.941701][T30493] macsec1: entered promiscuous mode [ 680.961554][T30493] macsec1: entered allmulticast mode [ 681.014157][T30496] __nla_validate_parse: 6 callbacks suppressed [ 681.014173][T30496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7442'. [ 681.162102][T30510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7446'. [ 681.616540][T30537] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7453'. [ 681.919521][T30541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7455'. [ 682.460959][T12983] IPVS: starting estimator thread 0... [ 682.461864][T30574] tipc: Started in network mode [ 682.541024][T30589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7467'. [ 682.555183][T30583] IPVS: using max 33 ests per chain, 79200 per kthread [ 682.586218][T30574] tipc: Node identity ac1414aa, cluster identity 4711 [ 682.612855][T30574] tipc: Enabled bearer , priority 10 [ 682.688300][T30598] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 682.830544][T30606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7472'. [ 682.876564][T30606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7472'. [ 683.070309][T30606] team0: Port device dummy0 removed [ 683.098927][T30606] bridge_slave_0: left allmulticast mode [ 683.128425][T30606] bridge_slave_0: left promiscuous mode [ 683.156320][T30606] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.210872][T30606] bridge_slave_1: left allmulticast mode [ 683.243222][T30606] bridge_slave_1: left promiscuous mode [ 683.262836][T30606] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.356295][T30606] bond0: (slave bond_slave_0): Releasing backup interface [ 683.459235][T30606] team0: Port device team_slave_0 removed [ 683.486184][T30606] team0: Port device team_slave_1 removed [ 683.535432][T30606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 683.566178][T30606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 683.598927][T30606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 683.618159][T30606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 683.682788][T30606] bond1: (slave bond2): Releasing backup interface [ 683.689325][T30606] bond2: left promiscuous mode [ 683.725679][ T5923] tipc: Node number set to 2886997162 [ 683.951387][T30628] tipc: Enabled bearer , priority 0 [ 684.009242][T30633] syzkaller0: entered promiscuous mode [ 684.016832][T30633] syzkaller0: entered allmulticast mode [ 684.029407][T30658] ip6gre0: Master is either lo or non-ether device [ 684.054384][T30649] tipc: Resetting bearer [ 684.063114][T30617] tipc: Resetting bearer [ 684.098445][T30617] tipc: Disabling bearer [ 684.604975][T30694] netlink: 'syz.4.7489': attribute type 1 has an invalid length. [ 684.616411][T30694] netlink: 'syz.4.7489': attribute type 10 has an invalid length. [ 684.625341][T30694] netlink: 'syz.4.7489': attribute type 4 has an invalid length. [ 684.637934][T30692] bond0: entered promiscuous mode [ 684.650010][T30694] netlink: 136 bytes leftover after parsing attributes in process `syz.4.7489'. [ 684.680254][T30691] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7487'. [ 684.701005][T30703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7490'. [ 684.958068][T30722] Bluetooth: MGMT ver 1.23 [ 684.983374][T30722] sock: sock_timestamping_bind_phc: sock not bind to device [ 684.992785][T30723] IPVS: set_ctl: invalid protocol: 43 172.30.0.5:20000 [ 685.007819][T30725] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 685.059413][T30715] ip6tnl0: entered promiscuous mode [ 685.068781][T30715] ip6tnl0: entered allmulticast mode [ 685.415291][T30744] netlink: 'syz.0.7502': attribute type 1 has an invalid length. [ 685.514307][T30745] pim6reg1: entered promiscuous mode [ 685.519816][T30745] pim6reg1: entered allmulticast mode [ 685.528557][T30719] hsr0 speed is unknown, defaulting to 1000 [ 685.700538][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 686.010948][T30768] 8021q: adding VLAN 0 to HW filter on device team0 [ 686.089345][T30768] batman_adv: batadv0: Interface activated: team0 [ 686.121980][T30768] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 686.875383][T30793] __nla_validate_parse: 3 callbacks suppressed [ 686.875401][T30793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7514'. [ 686.897631][T30798] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7513'. [ 686.907086][T30797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7515'. [ 687.044691][T30806] netlink: 'syz.3.7518': attribute type 11 has an invalid length. [ 687.079620][T30806] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7518'. [ 687.151560][T30813] tipc: Enabling not permitted [ 687.191660][T30813] tipc: Enabling of bearer rejected, failed to enable media [ 687.334727][T30822] bond0: entered promiscuous mode [ 687.342693][T30822] bond_slave_0: entered promiscuous mode [ 687.348548][T30822] bond_slave_1: entered promiscuous mode [ 687.371240][T30826] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7524'. [ 687.380777][T30822] batadv0: entered promiscuous mode [ 687.408011][T30822] batadv0: left promiscuous mode [ 687.422994][T30822] bond0: left promiscuous mode [ 687.427943][T30822] bond_slave_0: left promiscuous mode [ 687.437081][T30822] bond_slave_1: left promiscuous mode [ 687.452902][T30830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 687.775575][T30861] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7530'. [ 687.892467][T30871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7535'. [ 687.924157][T30873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7536'. [ 687.940652][T30873] netlink: 'syz.0.7536': attribute type 3 has an invalid length. [ 688.096960][T30884] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 688.393223][T30902] netlink: 67 bytes leftover after parsing attributes in process `syz.2.7543'. [ 688.657150][T30916] IPVS: set_ctl: invalid protocol: 33 172.30.1.5:20004 [ 688.705481][T30922] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7553'. [ 688.807590][T30928] netlink: 'syz.3.7555': attribute type 1 has an invalid length. [ 689.246368][T30966] netlink: 'syz.3.7567': attribute type 1 has an invalid length. [ 689.296622][T30966] bond3: (slave gretap1): making interface the new active one [ 689.304999][T30966] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 689.327034][T30969] mac80211_hwsim hwsim59 wlan1: entered allmulticast mode [ 689.431841][T30976] netlink: 'syz.2.7569': attribute type 10 has an invalid length. [ 689.540386][T30976] team0: Device hsr_slave_0 failed to register rx_handler [ 689.565207][T30977] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 689.578378][T30977] bridge0: port 3(syz_tun) entered disabled state [ 689.586298][T30977] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.594012][T30977] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.694571][T30983] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2 [ 689.707082][T30983] netdevsim netdevsim2: Falling back to sysfs fallback for: ..€ [ 689.998613][T30992] netlink: 'syz.0.7574': attribute type 5 has an invalid length. [ 690.192027][ T5184] Bluetooth: hci4: command tx timeout [ 690.318867][T31023] netlink: zone id is out of range [ 690.324393][T31023] netlink: zone id is out of range [ 690.329553][T31023] netlink: zone id is out of range [ 690.334891][T31023] netlink: get zone limit has 8 unknown bytes [ 690.575049][T31037] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 690.598946][T31037] netlink: 'syz.1.7588': attribute type 10 has an invalid length. [ 690.625219][T31037] bond0: (slave wlan1): Opening slave failed [ 691.512302][T31071] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 691.530211][T31071] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 691.615695][T31074] bridge0: entered promiscuous mode [ 691.622890][T31074] macsec1: entered promiscuous mode [ 691.637086][T31074] macsec1: entered allmulticast mode [ 691.650398][T31074] bridge0: entered allmulticast mode [ 691.663359][T31074] bridge0: port 3(macsec1) entered blocking state [ 691.681000][T31074] bridge0: port 3(macsec1) entered disabled state [ 691.693991][T31074] bridge0: left allmulticast mode [ 691.699330][T31074] bridge0: left promiscuous mode [ 691.940034][T31099] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.953575][T31098] netlink: 'syz.0.7606': attribute type 1 has an invalid length. [ 691.961407][T31098] nbd: error processing sock list [ 691.968788][T31098] block nbd6: shutting down sockets [ 692.118980][T31099] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.146457][T31110] __nla_validate_parse: 13 callbacks suppressed [ 692.146476][T31110] netlink: 248 bytes leftover after parsing attributes in process `syz.4.7608'. [ 692.256581][T31114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7609'. [ 692.288483][T31099] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.386451][T31119] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 692.419782][T31099] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.462300][T20821] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 692.479875][T20821] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 692.498883][T20821] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 692.531151][T20821] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 692.615745][T31136] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7616'. [ 692.638630][T20830] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.650375][T31138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7616'. [ 692.671373][T31131] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 692.691857][T20830] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.710001][T31142] netlink: 'syz.4.7618': attribute type 11 has an invalid length. [ 692.721047][T31142] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7618'. [ 692.741116][T20830] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.767760][T31142] netlink: 'syz.4.7618': attribute type 11 has an invalid length. [ 692.775850][T31142] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7618'. [ 692.777387][T20830] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.808982][T31144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7619'. [ 692.984455][T31154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7623'. [ 693.044085][T31158] tipc: Enabled bearer , priority 0 [ 693.052073][T31158] syzkaller0: entered promiscuous mode [ 693.057735][T31158] syzkaller0: entered allmulticast mode [ 693.066442][T31158] netlink: 'syz.4.7625': attribute type 2 has an invalid length. [ 693.075189][T31158] netlink: 'syz.4.7625': attribute type 1 has an invalid length. [ 693.086033][T31158] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 693.137272][T31158] tipc: Resetting bearer [ 693.152076][T31157] tipc: Resetting bearer [ 693.174844][T31157] tipc: Disabling bearer [ 693.193892][T31161] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7626'. [ 693.207752][T31160] delete_channel: no stack [ 693.366644][T31174] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7630'. [ 694.055973][T31223] tipc: Enabled bearer , priority 10 [ 694.187648][T31223] bridge2: entered promiscuous mode [ 694.222453][T31223] bridge2: entered allmulticast mode [ 694.435780][T31237] bridge3: entered promiscuous mode [ 694.460264][T31237] bridge3: entered allmulticast mode [ 694.469674][T31244] netlink: 'syz.2.7654': attribute type 16 has an invalid length. [ 694.498855][T31244] netlink: 'syz.2.7654': attribute type 17 has an invalid length. [ 694.508081][T31247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 694.567639][T31244] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 694.618665][T31251] netlink: 'syz.1.7657': attribute type 5 has an invalid length. [ 694.662008][T31251] geneve2: entered promiscuous mode [ 694.671502][T31251] geneve2: entered allmulticast mode [ 694.714583][T20830] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 694.743465][T20830] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 694.771698][T20830] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 694.825714][T20830] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 694.880748][T31257] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 694.918596][T31218] hsr0 speed is unknown, defaulting to 1000 [ 695.130861][T31279] netlink: 'syz.2.7664': attribute type 4 has an invalid length. [ 695.656836][T31314] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 695.736678][T31311] dvmrp8: entered allmulticast mode [ 695.826902][T31321] syzkaller1: entered promiscuous mode [ 695.832400][T31321] syzkaller1: entered allmulticast mode [ 696.059697][T31334] netlink: 'syz.2.7679': attribute type 1 has an invalid length. [ 696.076263][T31334] netlink: 'syz.2.7679': attribute type 2 has an invalid length. [ 696.345179][T31306] dvmrp8: left allmulticast mode [ 697.032225][T31374] syz_tun: entered allmulticast mode [ 697.046703][T31374] dvmrp8: entered allmulticast mode [ 697.061201][T31374] syz_tun: left allmulticast mode [ 697.066985][T31374] dvmrp8: left allmulticast mode [ 697.168697][T31381] tipc: Enabling of bearer rejected, failed to enable media [ 697.191349][T31384] __nla_validate_parse: 11 callbacks suppressed [ 697.191365][T31384] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7694'. [ 697.217285][T31381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7692'. [ 697.221192][T31384] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 697.238038][T31381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7692'. [ 697.246692][T31384] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 697.355832][T31395] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7697'. [ 697.484952][T31401] netlink: 'syz.2.7699': attribute type 15 has an invalid length. [ 697.600831][T31408] mac80211_hwsim hwsim59 wlan1: left allmulticast mode [ 697.680746][T31411] syzkaller1: entered promiscuous mode [ 697.690564][T31411] syzkaller1: entered allmulticast mode [ 697.820203][T31421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7708'. [ 698.175262][T31448] IPVS: length: 32 != 8 [ 698.188165][T31450] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7713'. [ 698.433841][T31459] netlink: 'syz.2.7716': attribute type 39 has an invalid length. [ 698.458363][T31461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7717'. [ 698.557882][T31471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7719'. [ 698.674032][T31471] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 698.699965][T31471] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 698.709459][T31471] gretap2: entered promiscuous mode [ 698.714876][T31471] gretap2: entered allmulticast mode [ 698.865292][T31490] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7723'. [ 698.877152][T31490] openvswitch: netlink: Flow actions attr not present in new flow. [ 698.951982][T31494] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.7725'. [ 699.274096][T31520] netlink: 'syz.0.7733': attribute type 14 has an invalid length. [ 699.311199][T31520] netlink: 'syz.0.7733': attribute type 14 has an invalid length. [ 699.741452][T31549] syzkaller0: entered promiscuous mode [ 699.762671][T31549] syzkaller0: entered allmulticast mode [ 699.772756][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 700.400728][T31587] netlink: 'syz.2.7753': attribute type 21 has an invalid length. [ 701.248698][T31631] netlink: 'syz.0.7767': attribute type 8 has an invalid length. [ 701.703188][T31657] hsr0: entered promiscuous mode [ 701.708172][T31657] hsr0: entered allmulticast mode [ 701.721652][T31657] hsr_slave_0: entered allmulticast mode [ 701.728199][T31657] hsr_slave_1: entered allmulticast mode [ 701.820780][T31661] : renamed from hsr0 (while UP) [ 702.058172][T31649] hsr0 speed is unknown, defaulting to 1000 [ 702.193128][T31678] netlink: 'syz.1.7781': attribute type 2 has an invalid length. [ 702.673579][T31703] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 702.887758][T31722] __nla_validate_parse: 9 callbacks suppressed [ 702.887776][T31722] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7794'. [ 702.906227][T31719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7793'. [ 702.926367][T31722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7794'. [ 702.962270][T31720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7793'. [ 703.193264][T31732] tipc: Enabling of bearer rejected, failed to enable media [ 703.442454][T31732] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7797'. [ 705.743265][T31789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7814'. [ 705.759479][T31778] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.7814'. [ 706.163474][T31807] netlink: 'syz.1.7822': attribute type 9 has an invalid length. [ 706.222293][T31807] netlink: 'syz.1.7822': attribute type 9 has an invalid length. [ 706.249686][T31817] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7826'. [ 706.299479][T31807] netlink: 'syz.1.7822': attribute type 4 has an invalid length. [ 706.310509][T31807] netlink: 'syz.1.7822': attribute type 4 has an invalid length. [ 706.506664][T31830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7830'. [ 706.538007][T31832] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7831'. [ 706.610965][T31838] bond0: option ad_select: unable to set because the bond device is up [ 706.802082][T31847] netlink: 'syz.4.7837': attribute type 12 has an invalid length. [ 706.835424][T31849] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20000 [ 706.841170][T31851] mac80211_hwsim hwsim56 syzkaller0: entered promiscuous mode [ 706.935342][T31851] mac80211_hwsim hwsim56 syzkaller0: entered allmulticast mode [ 707.116779][T31863] tipc: Enabled bearer , priority 0 [ 707.133453][T31863] syzkaller0: entered promiscuous mode [ 707.138938][T31863] syzkaller0: entered allmulticast mode [ 707.189377][T31863] tipc: Resetting bearer [ 707.220141][T31862] tipc: Resetting bearer [ 707.262225][T31862] tipc: Disabling bearer [ 707.311068][T31876] openvswitch: netlink: IP tunnel dst address not specified [ 707.375712][T31876] openvswitch: netlink: IPv4 tun info is not correct [ 707.452962][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 707.985477][T31927] __nla_validate_parse: 6 callbacks suppressed [ 707.985495][T31927] netlink: 260 bytes leftover after parsing attributes in process `syz.0.7866'. [ 708.020328][T31928] netlink: 260 bytes leftover after parsing attributes in process `syz.0.7866'. [ 708.292169][T31941] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 708.645701][T31966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7876'. [ 708.701771][T31972] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7879'. [ 708.726817][T31974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7878'. [ 708.809977][T31979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7881'. [ 709.546085][T31999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7888'. [ 709.676811][T32011] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7890'. [ 709.700574][T32011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7890'. [ 709.821466][T32015] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7892'. [ 710.008620][T32033] netlink: 'syz.4.7898': attribute type 1 has an invalid length. [ 710.059762][T32039] FAULT_INJECTION: forcing a failure. [ 710.059762][T32039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 710.086700][T32033] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 710.132025][T32039] CPU: 0 UID: 0 PID: 32039 Comm: syz.0.7900 Not tainted syzkaller #0 PREEMPT(full) [ 710.132052][T32039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 710.132064][T32039] Call Trace: [ 710.132072][T32039] [ 710.132080][T32039] dump_stack_lvl+0x189/0x250 [ 710.132106][T32039] ? __pfx____ratelimit+0x10/0x10 [ 710.132130][T32039] ? __pfx_dump_stack_lvl+0x10/0x10 [ 710.132151][T32039] ? __pfx__printk+0x10/0x10 [ 710.132186][T32039] should_fail_ex+0x414/0x560 [ 710.132213][T32039] _copy_to_user+0x31/0xb0 [ 710.132234][T32039] simple_read_from_buffer+0xe1/0x170 [ 710.132262][T32039] proc_fail_nth_read+0x1b3/0x220 [ 710.132285][T32039] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 710.132314][T32039] ? rw_verify_area+0x2a6/0x4d0 [ 710.132335][T32039] ? __lock_acquire+0xab9/0xd20 [ 710.132357][T32039] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 710.132378][T32039] vfs_read+0x200/0xa30 [ 710.132398][T32039] ? fdget_pos+0x247/0x320 [ 710.132418][T32039] ? __pfx___mutex_lock+0x10/0x10 [ 710.132436][T32039] ? __pfx_vfs_read+0x10/0x10 [ 710.132459][T32039] ? __fget_files+0x2a/0x420 [ 710.132483][T32039] ? __fget_files+0x3a0/0x420 [ 710.132496][T32039] ? __fget_files+0x2a/0x420 [ 710.132520][T32039] ksys_read+0x145/0x250 [ 710.132544][T32039] ? __pfx_ksys_read+0x10/0x10 [ 710.132561][T32039] ? rcu_is_watching+0x15/0xb0 [ 710.132585][T32039] ? do_syscall_64+0xbe/0x3b0 [ 710.132606][T32039] do_syscall_64+0xfa/0x3b0 [ 710.132622][T32039] ? lockdep_hardirqs_on+0x9c/0x150 [ 710.132645][T32039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.132662][T32039] ? clear_bhb_loop+0x60/0xb0 [ 710.132684][T32039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.132701][T32039] RIP: 0033:0x7fad9d18d5bc [ 710.132718][T32039] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 710.132733][T32039] RSP: 002b:00007fad9dfdc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 710.132753][T32039] RAX: ffffffffffffffda RBX: 00007fad9d3d5fa0 RCX: 00007fad9d18d5bc [ 710.132767][T32039] RDX: 000000000000000f RSI: 00007fad9dfdc0a0 RDI: 0000000000000003 [ 710.132779][T32039] RBP: 00007fad9dfdc090 R08: 0000000000000000 R09: 0000000000000000 [ 710.132789][T32039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 710.132799][T32039] R13: 00007fad9d3d6038 R14: 00007fad9d3d5fa0 R15: 00007fff5d9b9718 [ 710.132829][T32039] [ 710.735839][T32067] tipc: Enabled bearer , priority 0 [ 710.753532][T32067] syzkaller0: entered promiscuous mode [ 710.759015][T32067] syzkaller0: entered allmulticast mode [ 710.849059][T32067] tipc: Resetting bearer [ 710.928086][T32067] tipc: Disabling bearer [ 711.495344][T20822] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 711.529676][T20822] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 711.581451][T20822] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 711.611459][T32123] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 711.620862][T20822] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 711.669994][T32127] netlink: 'syz.0.7921': attribute type 13 has an invalid length. [ 711.700156][T32127] veth0_macvtap: left promiscuous mode [ 711.742787][T32127] macvtap0: entered allmulticast mode [ 711.783930][T32127] macvtap0: refused to change device tx_queue_len [ 711.806590][T32129] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 712.029765][T32147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 712.072228][T32153] netlink: 'syz.0.7930': attribute type 11 has an invalid length. [ 712.280390][T20830] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.291719][T20830] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.335051][T20830] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.375378][T20830] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.380240][T32175] netlink: 'syz.0.7937': attribute type 1 has an invalid length. [ 712.554719][T32183] bond8: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 712.586704][T32183] bond8: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 712.608255][T32183] bond8: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 712.719625][T32186] tipc: Enabled bearer , priority 0 [ 712.936909][T32201] delete_channel: no stack [ 713.411556][T32222] __nla_validate_parse: 74 callbacks suppressed [ 713.411575][T32222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7951'. [ 713.460486][T32221] netlink: 'syz.2.7952': attribute type 1 has an invalid length. [ 713.578253][T32221] 8021q: adding VLAN 0 to HW filter on device bond5 [ 713.700203][T32228] bond5: (slave veth5): Enslaving as an active interface with a down link [ 713.713732][ T5923] tipc: Node number set to 639714037 [ 713.782199][T32221] bond5: (slave veth0_to_bond): making interface the new active one [ 713.807256][T32221] veth0_to_bond: entered promiscuous mode [ 713.815790][T32244] netlink: 'syz.4.7957': attribute type 11 has an invalid length. [ 713.820593][T32221] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 714.015105][T32255] netlink: 'syz.4.7961': attribute type 1 has an invalid length. [ 714.034872][T32255] netlink: 244 bytes leftover after parsing attributes in process `syz.4.7961'. [ 714.047187][T32250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7958'. [ 714.068571][T32250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7958'. [ 714.125857][T32259] openvswitch: netlink: Key 9 has unexpected len 0 expected 4 [ 714.181252][T32259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7963'. [ 714.458813][T32281] openvswitch: netlink: EtherType 50a is less than min 600 [ 714.725202][T32290] can: request_module (can-proto-5) failed. [ 714.909981][T32307] delete_channel: no stack [ 714.977681][T32313] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7980'. [ 715.119007][T32322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7983'. [ 715.131599][T32323] ip6gre3: entered allmulticast mode [ 715.148768][T32323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 715.149720][T32322] tipc: Enabled bearer , priority 0 [ 715.178063][T32322] +: renamed from syzkaller0 [ 715.184557][T32322] tipc: Disabling bearer [ 715.251258][T32325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7984'. [ 715.640805][T32336] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 715.680291][T32344] netlink: 'syz.3.7990': attribute type 1 has an invalid length. [ 715.761183][T32344] netlink: 212 bytes leftover after parsing attributes in process `syz.3.7990'. [ 715.796571][T32344] netlink: 'syz.3.7990': attribute type 1 has an invalid length. [ 715.946816][T32356] netlink: 4388 bytes leftover after parsing attributes in process `syz.4.7993'. [ 716.046389][T32360] bridge_slave_1: left allmulticast mode [ 716.060174][T32360] bridge_slave_1: left promiscuous mode [ 716.069475][T32360] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.104198][T32360] bridge_slave_0: left allmulticast mode [ 716.118689][T32360] bridge_slave_0: left promiscuous mode [ 716.135201][T32360] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.351275][T32376] openvswitch: netlink: Missing key (keys=40, expected=80) [ 716.622329][T32392] FAULT_INJECTION: forcing a failure. [ 716.622329][T32392] name failslab, interval 1, probability 0, space 0, times 0 [ 716.642598][T32392] CPU: 0 UID: 0 PID: 32392 Comm: syz.1.8007 Not tainted syzkaller #0 PREEMPT(full) [ 716.642624][T32392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 716.642636][T32392] Call Trace: [ 716.642644][T32392] [ 716.642652][T32392] dump_stack_lvl+0x189/0x250 [ 716.642678][T32392] ? __pfx____ratelimit+0x10/0x10 [ 716.642702][T32392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 716.642722][T32392] ? __pfx__printk+0x10/0x10 [ 716.642752][T32392] ? __pfx___might_resched+0x10/0x10 [ 716.642766][T32392] ? fs_reclaim_acquire+0x7d/0x100 [ 716.642801][T32392] should_fail_ex+0x414/0x560 [ 716.642828][T32392] should_failslab+0xa8/0x100 [ 716.642853][T32392] kmem_cache_alloc_noprof+0x73/0x3c0 [ 716.642874][T32392] ? vm_area_alloc+0x24/0x140 [ 716.642902][T32392] vm_area_alloc+0x24/0x140 [ 716.642926][T32392] mmap_region+0xdc7/0x20c0 [ 716.642943][T32392] ? __lock_acquire+0xab9/0xd20 [ 716.642979][T32392] ? __lock_acquire+0xab9/0xd20 [ 716.643004][T32392] ? __pfx_mmap_region+0x10/0x10 [ 716.643090][T32392] ? aa_file_perm+0x13a/0x1550 [ 716.643109][T32392] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 716.643145][T32392] ? bpf_lsm_mmap_addr+0x9/0x20 [ 716.643164][T32392] ? security_mmap_addr+0x71/0x270 [ 716.643187][T32392] ? shmem_mapping+0xd/0x50 [ 716.643204][T32392] ? memfd_check_seals_mmap+0xc5/0x200 [ 716.643225][T32392] do_mmap+0xc45/0x10d0 [ 716.643258][T32392] ? __pfx_do_mmap+0x10/0x10 [ 716.643275][T32392] ? down_write_killable+0x178/0x230 [ 716.643296][T32392] ? __pfx_down_write_killable+0x10/0x10 [ 716.643312][T32392] ? common_file_perm+0x1b5/0x230 [ 716.643335][T32392] vm_mmap_pgoff+0x2a6/0x4d0 [ 716.643364][T32392] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 716.643387][T32392] ? __fget_files+0x2a/0x420 [ 716.643408][T32392] ? __fget_files+0x3a0/0x420 [ 716.643422][T32392] ? __fget_files+0x2a/0x420 [ 716.643444][T32392] ksys_mmap_pgoff+0x51f/0x760 [ 716.643472][T32392] do_syscall_64+0xfa/0x3b0 [ 716.643487][T32392] ? lockdep_hardirqs_on+0x9c/0x150 [ 716.643509][T32392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.643526][T32392] ? clear_bhb_loop+0x60/0xb0 [ 716.643547][T32392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.643564][T32392] RIP: 0033:0x7fb56038eba9 [ 716.643581][T32392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 716.643595][T32392] RSP: 002b:00007fb56127e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 716.643614][T32392] RAX: ffffffffffffffda RBX: 00007fb5605d5fa0 RCX: 00007fb56038eba9 [ 716.643627][T32392] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 00002000008b8000 [ 716.643639][T32392] RBP: 00007fb56127e090 R08: 0000000000000004 R09: 0000000000000000 [ 716.643650][T32392] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 716.643661][T32392] R13: 00007fb5605d6038 R14: 00007fb5605d5fa0 R15: 00007ffd545fce28 [ 716.643694][T32392] [ 717.395424][T32425] netlink: 'syz.0.8012': attribute type 2 has an invalid length. [ 717.521336][T32436] FAULT_INJECTION: forcing a failure. [ 717.521336][T32436] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 717.548553][T32439] sock: sock_set_timeout: `syz.4.8021' (pid 32439) tries to set negative timeout [ 717.557880][T32436] CPU: 0 UID: 0 PID: 32436 Comm: syz.3.8020 Not tainted syzkaller #0 PREEMPT(full) [ 717.557903][T32436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 717.557914][T32436] Call Trace: [ 717.557922][T32436] [ 717.557930][T32436] dump_stack_lvl+0x189/0x250 [ 717.557954][T32436] ? __pfx____ratelimit+0x10/0x10 [ 717.557979][T32436] ? __pfx_dump_stack_lvl+0x10/0x10 [ 717.557998][T32436] ? __pfx__printk+0x10/0x10 [ 717.558022][T32436] ? fs_reclaim_acquire+0x7d/0x100 [ 717.558056][T32436] should_fail_ex+0x414/0x560 [ 717.558083][T32436] prepare_alloc_pages+0x213/0x610 [ 717.558109][T32436] __alloc_frozen_pages_noprof+0x123/0x370 [ 717.558132][T32436] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 717.558163][T32436] ? __mutex_trylock_common+0x153/0x260 [ 717.558187][T32436] alloc_pages_mpol+0x232/0x4a0 [ 717.558216][T32436] alloc_pages_noprof+0xa9/0x190 [ 717.558241][T32436] pte_alloc_one+0x21/0x170 [ 717.558263][T32436] __pte_alloc+0x25/0x1a0 [ 717.558278][T32436] ? walk_to_pmd+0x2b8/0x460 [ 717.558301][T32436] insert_page+0x28f/0x2c0 [ 717.558326][T32436] ? __pfx_insert_page+0x10/0x10 [ 717.558344][T32436] ? vm_insert_page+0x25a/0x390 [ 717.558369][T32436] remap_vmalloc_range_partial+0x331/0x390 [ 717.558401][T32436] bpf_map_mmap+0x4dc/0x670 [ 717.558426][T32436] mmap_region+0x18ae/0x20c0 [ 717.558444][T32436] ? __lock_acquire+0xab9/0xd20 [ 717.558483][T32436] ? __pfx_mmap_region+0x10/0x10 [ 717.558570][T32436] ? aa_file_perm+0x13a/0x1550 [ 717.558589][T32436] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 717.558625][T32436] ? bpf_lsm_mmap_addr+0x9/0x20 [ 717.558644][T32436] ? security_mmap_addr+0x71/0x270 [ 717.558667][T32436] ? shmem_mapping+0xd/0x50 [ 717.558684][T32436] ? memfd_check_seals_mmap+0xc5/0x200 [ 717.558706][T32436] do_mmap+0xc45/0x10d0 [ 717.558746][T32436] ? __pfx_do_mmap+0x10/0x10 [ 717.558763][T32436] ? down_write_killable+0x178/0x230 [ 717.558785][T32436] ? __pfx_down_write_killable+0x10/0x10 [ 717.558801][T32436] ? common_file_perm+0x1b5/0x230 [ 717.558827][T32436] vm_mmap_pgoff+0x2a6/0x4d0 [ 717.558860][T32436] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 717.558883][T32436] ? __fget_files+0x2a/0x420 [ 717.558904][T32436] ? __fget_files+0x3a0/0x420 [ 717.558918][T32436] ? __fget_files+0x2a/0x420 [ 717.558939][T32436] ksys_mmap_pgoff+0x51f/0x760 [ 717.558968][T32436] do_syscall_64+0xfa/0x3b0 [ 717.558984][T32436] ? lockdep_hardirqs_on+0x9c/0x150 [ 717.559005][T32436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.559023][T32436] ? clear_bhb_loop+0x60/0xb0 [ 717.559045][T32436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.559062][T32436] RIP: 0033:0x7f6e8278eba9 [ 717.559078][T32436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 717.559093][T32436] RSP: 002b:00007f6e83618038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 717.559112][T32436] RAX: ffffffffffffffda RBX: 00007f6e829d5fa0 RCX: 00007f6e8278eba9 [ 717.559125][T32436] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 00002000008b8000 [ 717.559137][T32436] RBP: 00007f6e83618090 R08: 0000000000000004 R09: 0000000000000000 [ 717.559149][T32436] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000002 [ 717.559160][T32436] R13: 00007f6e829d6038 R14: 00007f6e829d5fa0 R15: 00007ffdc7380c08 [ 717.559191][T32436] [ 717.559612][T32440] sock: sock_set_timeout: `syz.4.8021' (pid 32440) tries to set negative timeout [ 717.768003][T32446] netlink: 'syz.3.8022': attribute type 3 has an invalid length. [ 718.247517][T32469] netlink: 'syz.0.8028': attribute type 10 has an invalid length. [ 718.272432][T32469] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 718.300761][T32474] macsec0: entered promiscuous mode [ 718.308686][T32472] netlink: 'syz.2.8030': attribute type 9 has an invalid length. [ 718.317303][T32474] macsec0: entered allmulticast mode [ 718.326951][T32474] veth1_macvtap: entered allmulticast mode [ 718.351251][T32474] bridge0: port 3(macsec0) entered blocking state [ 718.366673][T32477] FAULT_INJECTION: forcing a failure. [ 718.366673][T32477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 718.391151][T32474] bridge0: port 3(macsec0) entered disabled state [ 718.420820][T32477] CPU: 0 UID: 0 PID: 32477 Comm: syz.1.8032 Not tainted syzkaller #0 PREEMPT(full) [ 718.420844][T32477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 718.420855][T32477] Call Trace: [ 718.420862][T32477] [ 718.420870][T32477] dump_stack_lvl+0x189/0x250 [ 718.420895][T32477] ? __pfx____ratelimit+0x10/0x10 [ 718.420919][T32477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 718.420939][T32477] ? __pfx__printk+0x10/0x10 [ 718.420974][T32477] should_fail_ex+0x414/0x560 [ 718.421002][T32477] _copy_to_user+0x31/0xb0 [ 718.421025][T32477] simple_read_from_buffer+0xe1/0x170 [ 718.421053][T32477] proc_fail_nth_read+0x1b3/0x220 [ 718.421076][T32477] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 718.421098][T32477] ? rw_verify_area+0x2a6/0x4d0 [ 718.421118][T32477] ? __lock_acquire+0xab9/0xd20 [ 718.421138][T32477] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 718.421159][T32477] vfs_read+0x200/0xa30 [ 718.421179][T32477] ? fdget_pos+0x247/0x320 [ 718.421199][T32477] ? __pfx___mutex_lock+0x10/0x10 [ 718.421217][T32477] ? __pfx_vfs_read+0x10/0x10 [ 718.421240][T32477] ? __fget_files+0x2a/0x420 [ 718.421260][T32477] ? __fget_files+0x3a0/0x420 [ 718.421274][T32477] ? __fget_files+0x2a/0x420 [ 718.421300][T32477] ksys_read+0x145/0x250 [ 718.421323][T32477] ? __pfx_ksys_read+0x10/0x10 [ 718.421350][T32477] ? do_syscall_64+0xbe/0x3b0 [ 718.421371][T32477] do_syscall_64+0xfa/0x3b0 [ 718.421387][T32477] ? lockdep_hardirqs_on+0x9c/0x150 [ 718.421409][T32477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.421427][T32477] ? clear_bhb_loop+0x60/0xb0 [ 718.421448][T32477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.421464][T32477] RIP: 0033:0x7fb56038d5bc [ 718.421480][T32477] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 718.421495][T32477] RSP: 002b:00007fb56127e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 718.421514][T32477] RAX: ffffffffffffffda RBX: 00007fb5605d5fa0 RCX: 00007fb56038d5bc [ 718.421528][T32477] RDX: 000000000000000f RSI: 00007fb56127e0a0 RDI: 0000000000000005 [ 718.421540][T32477] RBP: 00007fb56127e090 R08: 0000000000000000 R09: 0000000000000000 [ 718.421551][T32477] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000002 [ 718.421563][T32477] R13: 00007fb5605d6038 R14: 00007fb5605d5fa0 R15: 00007ffd545fce28 [ 718.421595][T32477] [ 718.681636][T32482] netlink: 'syz.0.8035': attribute type 19 has an invalid length. [ 718.765151][T32487] tipc: Enabled bearer , priority 0 [ 718.798545][T32491] __nla_validate_parse: 13 callbacks suppressed [ 718.798562][T32491] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8036'. [ 718.800664][T32493] netlink: 'syz.0.8037': attribute type 1 has an invalid length. [ 718.961165][T32484] tipc: Disabling bearer [ 719.289383][T32528] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 719.292326][T32527] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 719.388155][T32535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8044'. [ 719.422790][T32537] netlink: 'syz.2.8047': attribute type 29 has an invalid length. [ 719.460976][T32537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8047'. [ 719.603670][T32541] sctp: [Deprecated]: syz.1.8048 (pid 32541) Use of struct sctp_assoc_value in delayed_ack socket option. [ 719.603670][T32541] Use struct sctp_sack_info instead [ 720.045853][T32515] lec:lec_atm_close: lec0: Shut down! [ 720.143299][T32570] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8056'. [ 720.228006][T32573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8057'. [ 720.239815][T32574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8057'. [ 720.256412][T32574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8057'. [ 720.265980][T32573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8057'. [ 720.276467][T32574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8057'. [ 720.476393][T32587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8061'. [ 720.793769][T32604] bridge6: port 1(veth7) entered blocking state [ 720.821252][T32604] bridge6: port 1(veth7) entered disabled state [ 720.830307][T32604] veth7: entered allmulticast mode [ 720.847111][T32604] veth7: entered promiscuous mode [ 721.318288][T32636] gtp1: entered promiscuous mode [ 721.330286][T32636] gtp1: entered allmulticast mode [ 721.632874][T32648] bridge_slave_0: left allmulticast mode [ 721.638548][T32648] bridge_slave_0: left promiscuous mode [ 721.676862][T32648] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.701277][T32648] bridge_slave_1: left allmulticast mode [ 721.710087][T32648] bridge_slave_1: left promiscuous mode [ 721.727569][T32648] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.750006][T32648] bond0: (slave bond_slave_0): Releasing backup interface [ 721.817539][T32648] bond0: (slave bond_slave_1): Releasing backup interface [ 721.854944][T32648] team0: Port device team_slave_0 removed [ 721.873714][T32648] team0: Port device team_slave_1 removed [ 721.881278][T32648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 721.896911][T32648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 721.917587][T32648] veth1_macvtap: left allmulticast mode [ 721.940304][T32648] bridge0: port 3(macsec0) entered disabled state [ 721.961963][T32648] bond0: (slave wlan1): Releasing backup interface [ 722.089067][T20823] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.109354][T20820] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.154874][T20820] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.160499][T32662] nbd: must specify a size in bytes for the device [ 722.183301][T20820] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.379475][T32670] netlink: 'syz.2.8090': attribute type 1 has an invalid length. [ 722.571572][T32679] netlink: 'syz.2.8094': attribute type 1 has an invalid length. [ 722.655310][T32685] netlink: 'syz.0.8096': attribute type 15 has an invalid length. [ 723.425916][T32713] tipc: Enabled bearer , priority 0 [ 723.545958][T32713] syzkaller0: entered promiscuous mode [ 723.551511][T32713] syzkaller0: entered allmulticast mode [ 723.559171][T32713] tipc: Resetting bearer [ 723.585781][T32712] tipc: Resetting bearer [ 725.304236][T32712] tipc: Disabling bearer [ 725.403567][T20820] veth0_to_bond: left promiscuous mode [ 725.433914][T32740] netlink: 'syz.3.8114': attribute type 10 has an invalid length. [ 725.475686][T32740] team0: Device ipvlan1 failed to register rx_handler [ 725.509781][T32749] netlink: 'syz.1.8118': attribute type 1 has an invalid length. [ 725.607858][T32753] __nla_validate_parse: 18 callbacks suppressed [ 725.607878][T32753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8119'. [ 725.640444][T32753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8119'. [ 725.659442][T32749] netlink: 'syz.1.8118': attribute type 11 has an invalid length. [ 725.852885][ T304] mac80211_hwsim hwsim50 wlan1: entered promiscuous mode [ 725.859956][ T304] mac80211_hwsim hwsim50 wlan1: entered allmulticast mode [ 725.873437][ T305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8124'. [ 725.889790][ T304] netlink: 'syz.0.8123': attribute type 10 has an invalid length. [ 725.919679][ T303] team0: Device gtp0 is up. Set it down before adding it as a team port [ 725.986030][ T315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8123'. [ 726.007425][ T316] openvswitch: netlink: Key type 29 is not supported [ 726.025060][ T315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8123'. [ 726.034451][ T304] mac80211_hwsim hwsim50 wlan1: left promiscuous mode [ 726.034475][ T304] mac80211_hwsim hwsim50 wlan1: left allmulticast mode [ 726.041198][ T313] netlink: 'syz.1.8127': attribute type 10 has an invalid length. [ 726.055497][ T304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8123'. [ 726.101797][ T313] dummy0: entered promiscuous mode [ 726.124351][ T313] team0: Port device dummy0 added [ 726.277720][ T325] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 726.413517][ T334] !: renamed from dummy0 [ 726.783935][ T358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8141'. [ 727.290229][ T394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8150'. [ 727.784476][ T414] IPVS: set_ctl: invalid protocol: 98 172.30.0.2:20001 [ 727.934782][ T420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8158'. [ 728.028576][ T423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8161'. [ 728.457611][ T440] tipc: Enabled bearer , priority 0 [ 728.465766][ T440] syzkaller0: entered promiscuous mode [ 728.477986][ T440] syzkaller0: entered allmulticast mode [ 728.594865][ T439] tipc: Resetting bearer [ 728.847931][ T456] netlink: 'syz.4.8170': attribute type 39 has an invalid length. [ 728.858568][ T439] tipc: Disabling bearer [ 728.948708][ T460] netlink: 'syz.1.8171': attribute type 5 has an invalid length. [ 729.249911][ T475] syzkaller1: entered promiscuous mode [ 729.283198][ T475] syzkaller1: entered allmulticast mode [ 729.609368][ T496] netlink: 'syz.4.8184': attribute type 1 has an invalid length. [ 729.713995][ T496] 8021q: adding VLAN 0 to HW filter on device bond5 [ 729.723559][ T496] bond4: (slave bond5): making interface the new active one [ 729.731732][ T496] bond4: (slave bond5): Enslaving as an active interface with an up link [ 729.751363][ T504] bond4: entered promiscuous mode [ 729.759286][ T504] bond5: entered promiscuous mode [ 729.781967][ T504] bond4: entered allmulticast mode [ 729.806247][ T504] bond5: entered allmulticast mode [ 729.820935][ T504] 8021q: adding VLAN 0 to HW filter on device bond4 [ 730.753979][ T559] __nla_validate_parse: 17 callbacks suppressed [ 730.753999][ T559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8202'. [ 730.968355][ T566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 730.980134][ T570] netlink: 1196 bytes leftover after parsing attributes in process `syz.2.8206'. [ 731.260551][ T592] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.8216'. [ 731.450982][ T600] netlink: 'syz.3.8218': attribute type 8 has an invalid length. [ 731.479535][ T604] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8220'. [ 731.500725][ T608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8219'. [ 731.881418][ T633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8226'. [ 731.998017][ T626] kthread_run failed with err -4 [ 732.156069][ T647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8229'. [ 732.210298][ T647] erspan0: entered promiscuous mode [ 732.225293][ T647] erspan0: entered allmulticast mode [ 732.287782][ T660] netlink: 'syz.1.8234': attribute type 1 has an invalid length. [ 732.326127][ T660] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8234'. [ 732.351678][ T662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8235'. [ 732.353446][ T667] netlink: 'syz.2.8237': attribute type 1 has an invalid length. [ 732.410731][ T667] netlink: 'syz.2.8237': attribute type 4 has an invalid length. [ 732.450787][ T667] netlink: 188 bytes leftover after parsing attributes in process `syz.2.8237'. [ 732.516564][ T667] NCSI netlink: No device for ifindex 458760 [ 732.746639][ T696] nbd: must specify a size in bytes for the device [ 732.924121][ T706] tipc: Enabling of bearer rejected, already enabled [ 733.395483][ T739] bridge_slave_0: invalid flags given to default FDB implementation [ 733.517601][ T748] netlink: 'syz.0.8262': attribute type 1 has an invalid length. [ 733.563870][ T748] pim6reg: entered allmulticast mode [ 734.105513][ T787] netlink: 'syz.4.8276': attribute type 1 has an invalid length. [ 734.220009][ T794] netlink: 'syz.0.8277': attribute type 21 has an invalid length. [ 734.268530][ T787] 8021q: adding VLAN 0 to HW filter on device bond6 [ 734.276886][ T783] netlink: 'syz.2.8275': attribute type 1 has an invalid length. [ 734.285115][ T783] netlink: 'syz.2.8275': attribute type 1 has an invalid length. [ 734.383197][ T774] hsr0 speed is unknown, defaulting to 1000 [ 734.421099][ T803] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 734.431107][ T803] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 734.649900][ T810] tipc: Enabled bearer , priority 0 [ 734.663721][ T810] syzkaller0: entered promiscuous mode [ 734.669213][ T810] syzkaller0: entered allmulticast mode [ 734.804464][ T810] syzkaller0: mtu greater than device maximum [ 734.875683][ T807] tipc: Resetting bearer [ 734.880418][ T830] netlink: 'syz.2.8289': attribute type 7 has an invalid length. [ 734.951090][ T834] netlink: 'syz.2.8289': attribute type 7 has an invalid length. [ 734.964951][ T807] tipc: Disabling bearer [ 735.138757][ T843] block nbd2: NBD_DISCONNECT [ 735.151664][ T843] block nbd2: Send disconnect failed -32 [ 735.173380][ T843] block nbd2: shutting down sockets [ 735.274008][ T842] nbd2: detected capacity change from 0 to 63 [ 735.283049][ T5184] block nbd2: Receive control failed (result -32) [ 735.938716][ T875] __nla_validate_parse: 15 callbacks suppressed [ 735.938735][ T875] netlink: 252 bytes leftover after parsing attributes in process `syz.3.8304'. [ 735.972260][ T877] netlink: 'syz.4.8305': attribute type 1 has an invalid length. [ 735.992241][ T877] netlink: 15 bytes leftover after parsing attributes in process `syz.4.8305'. [ 736.180105][ T891] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 736.248732][ T895] netlink: 'syz.2.8310': attribute type 21 has an invalid length. [ 736.267244][ T895] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8310'. [ 736.328131][ T895] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 736.401473][ T898] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.8311'. [ 736.506130][ T903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8313'. [ 736.512988][ T909] netlink: 100 bytes leftover after parsing attributes in process `syz.1.8315'. [ 736.597666][ T906] netlink: 'syz.3.8314': attribute type 1 has an invalid length. [ 736.675626][ T906] bond4 (unregistering): Released all slaves [ 737.157153][ T963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8325'. [ 737.218110][ T967] netlink: 100 bytes leftover after parsing attributes in process `syz.3.8326'. [ 737.230482][ T967] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8326'. [ 737.254955][ T969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8325'. [ 737.627001][ T993] nbd: must specify at least one socket [ 738.771751][ T1078] netlink: 'syz.4.8351': attribute type 1 has an invalid length. [ 738.861784][ T1078] 8021q: adding VLAN 0 to HW filter on device bond7 [ 739.184172][ T1100] netlink: 'syz.1.8358': attribute type 1 has an invalid length. [ 739.244796][ T1103] netlink: 'syz.2.8360': attribute type 1 has an invalid length. [ 739.321389][ T1114] veth0_to_bridge: entered promiscuous mode [ 739.349511][ T1114] veth0_to_bridge: left promiscuous mode [ 739.624660][ T1132] can: request_module (can-proto-0) failed. [ 739.650326][ T1127] vlan1: entered allmulticast mode [ 739.678624][ T1127] mac80211_hwsim hwsim60 wlan0: entered allmulticast mode [ 739.716842][ T1137] netlink: 'syz.2.8370': attribute type 10 has an invalid length. [ 739.841257][ T1146] ksmbd: Unknown IPC event: 3, ignore. [ 739.948228][ T1153] netlink: 'syz.1.8376': attribute type 1 has an invalid length. [ 739.989208][ T1153] netlink: 'syz.1.8376': attribute type 1 has an invalid length. [ 739.994256][ T1158] netlink: 'syz.2.8378': attribute type 10 has an invalid length. [ 740.012674][ T1153] netlink: 'syz.1.8376': attribute type 2 has an invalid length. [ 740.031443][ T1158] team0: Port device 0! added [ 740.042637][ T1153] netlink: 'syz.1.8376': attribute type 2 has an invalid length. [ 740.074148][ T1158] netlink: 'syz.2.8378': attribute type 10 has an invalid length. [ 740.877870][ T1206] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 740.923289][ T1215] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 741.351818][ T1243] __nla_validate_parse: 14 callbacks suppressed [ 741.351836][ T1243] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8400'. [ 741.432370][ T1243] unknown channel width for channel at 909000KHz? [ 741.437701][ T1246] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 741.688233][ T1263] netlink: 'syz.3.8406': attribute type 11 has an invalid length. [ 741.737888][ T1266] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 742.004781][ T1284] nbd: must specify at least one socket [ 742.116157][T20829] veth0_to_bridge: left allmulticast mode [ 742.121919][T20829] veth0_to_bridge: left promiscuous mode [ 742.148423][T20829] bridge0: port 4(veth0_to_bridge) entered disabled state [ 742.149803][ T1293] can: request_module (can-proto-5) failed. [ 742.209454][T20829] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.271597][T20829] bridge_slave_0: left allmulticast mode [ 742.292721][T20829] bridge_slave_0: left promiscuous mode [ 742.299956][T20829] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.638683][T20829] bond3 (unregistering): (slave ip6erspan0): Releasing active interface [ 743.150731][T20829] team0: Port device geneve0 removed [ 743.652000][T20829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 743.661971][T20829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 743.676289][T20829] bond0 (unregistering): (slave team0): Releasing backup interface [ 743.687994][T20829] bond0 (unregistering): Released all slaves [ 743.700834][T20829] bond1 (unregistering): Released all slaves [ 743.715985][T20829] bond2 (unregistering): Released all slaves [ 743.834538][T20829] bond3 (unregistering): Released all slaves [ 743.848075][T20829] bond4 (unregistering): Released all slaves [ 743.860660][T20829] bond5 (unregistering): Released all slaves [ 743.972795][T20829] bond6 (unregistering): Released all slaves [ 743.989891][ T1311] netlink: 284 bytes leftover after parsing attributes in process `syz.1.8418'. [ 744.314129][ T1365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8432'. [ 744.396801][ T1369] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8431'. [ 744.729910][ T1392] netem: change failed [ 744.747666][ T1392] netlink: 'syz.3.8440': attribute type 29 has an invalid length. [ 744.765608][ T1392] netlink: 'syz.3.8440': attribute type 29 has an invalid length. [ 744.768615][ T1395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8441'. [ 744.786904][ T1392] netlink: 500 bytes leftover after parsing attributes in process `syz.3.8440'. [ 745.290226][ T1408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8444'. [ 745.537570][ T1419] dummy0: left promiscuous mode [ 745.547556][ T1419] team0: Port device dummy0 removed [ 745.579024][ T1419] bond0: (slave bond_slave_0): Releasing backup interface [ 745.593789][ T1419] bond0: (slave bond_slave_1): Releasing backup interface [ 745.645869][ T1419] team_slave_0: left promiscuous mode [ 745.674545][ T1419] team0: Port device team_slave_0 removed [ 745.697649][ T1419] team_slave_1: left promiscuous mode [ 745.710747][ T1430] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 745.718888][ T1419] team0: Port device team_slave_1 removed [ 745.720451][ T1419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 745.734664][ T1419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 745.751403][ T1419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 745.759272][ T1419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 745.781262][ T1419] bond2: (slave gretap1): Releasing active interface [ 745.801533][ T1419] bond3: (slave ip6gretap1): Releasing backup interface [ 745.812190][ T1419] bond3: (slave ip6gretap1): the permanent HWaddr of slave - 4e:a3:ec:8f:62:f1 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 745.838263][ T1419] bond3: (slave veth5): Releasing backup interface [ 745.873708][T20829] : left promiscuous mode [ 745.874880][ T6003] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 745.923460][ T6003] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 745.979024][T20829] tipc: Disabling bearer [ 745.990771][T20829] tipc: Left network mode [ 746.107470][T20829] IPVS: stopping backup sync thread 18300 ... [ 746.763170][ T1476] netlink: 'syz.1.8466': attribute type 1 has an invalid length. [ 746.851683][ T1483] syzkaller0: entered promiscuous mode [ 746.870747][ T1483] syzkaller0: entered allmulticast mode [ 746.887407][ T1487] netlink: 1268 bytes leftover after parsing attributes in process `syz.3.8470'. [ 747.139670][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 747.203786][T20829] hsr_slave_0: left promiscuous mode [ 747.217736][T20829] hsr_slave_1: left promiscuous mode [ 747.227002][T20829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 747.236388][T20829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 747.253519][T20829] batman_adv: batadv0: Removing interface: . [ 747.266161][T20829] ve¤-: left allmulticast mode [ 747.292088][ T1465] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 747.817822][T20829] team0 (unregistering): Port device team_slave_0 removed [ 748.194274][ T1509] mac80211_hwsim hwsim56 syzkaller0: left promiscuous mode [ 748.201538][ T1509] mac80211_hwsim hwsim56 syzkaller0: left allmulticast mode [ 748.220233][ T1511] netlink: 'syz.1.8474': attribute type 1 has an invalid length. [ 748.233939][ T1514] veth1_macvtap: left promiscuous mode [ 748.243525][ T1514] macsec0: entered promiscuous mode [ 748.270354][ T1514] macsec0: entered allmulticast mode [ 748.309631][ T1515] veth1_macvtap: entered promiscuous mode [ 748.341888][ T1515] veth1_macvtap: entered allmulticast mode [ 748.364366][ T1515] macsec0: left promiscuous mode [ 748.383790][ T1515] macsec0: left allmulticast mode [ 748.388841][ T1515] veth1_macvtap: left allmulticast mode [ 748.534188][ T1528] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8484'. [ 748.723144][ T1538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8487'. [ 748.760171][ T1538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8487'. [ 748.821788][ T1545] netlink: 'syz.3.8488': attribute type 10 has an invalid length. [ 749.042013][ T1556] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 749.275253][ T1571] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8499'. [ 749.309518][ T1573] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8497'. [ 749.336490][ T1570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8498'. [ 749.393542][ T1578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8501'. [ 749.410759][ T1578] dummy0: entered promiscuous mode [ 749.428966][ T1578] batadv_slave_1: entered promiscuous mode [ 749.450274][ T1583] netlink: 'syz.2.8502': attribute type 11 has an invalid length. [ 749.499788][ T1570] syzkaller1: entered promiscuous mode [ 749.521218][ T1570] syzkaller1: entered allmulticast mode [ 749.640574][ T1598] [ 749.642932][ T1598] ====================================================== [ 749.649954][ T1598] WARNING: possible circular locking dependency detected [ 749.656985][ T1598] syzkaller #0 Not tainted [ 749.661402][ T1598] ------------------------------------------------------ [ 749.668413][ T1598] syz.4.8505/1598 is trying to acquire lock: [ 749.674391][ T1598] ffffffff8f68ea58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 749.683698][ T1598] [ 749.683698][ T1598] but task is already holding lock: [ 749.691044][ T1598] ffff8880303dfc70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 749.700337][ T1598] [ 749.700337][ T1598] which lock already depends on the new lock. [ 749.700337][ T1598] [ 749.710721][ T1598] [ 749.710721][ T1598] the existing dependency chain (in reverse order) is: [ 749.719718][ T1598] [ 749.719718][ T1598] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 749.727698][ T1598] lock_acquire+0x120/0x360 [ 749.732749][ T1598] _raw_spin_lock_bh+0x36/0x50 [ 749.738031][ T1598] nr_rt_device_down+0x12a/0x720 [ 749.743477][ T1598] nr_device_event+0x137/0x150 [ 749.748749][ T1598] notifier_call_chain+0x1b3/0x3e0 [ 749.754365][ T1598] __dev_notify_flags+0x18d/0x2e0 [ 749.759893][ T1598] netif_change_flags+0xe8/0x1a0 [ 749.765334][ T1598] dev_change_flags+0x130/0x260 [ 749.770707][ T1598] dev_ioctl+0x7b4/0x1150 [ 749.775547][ T1598] sock_do_ioctl+0x22c/0x300 [ 749.780644][ T1598] sock_ioctl+0x576/0x790 [ 749.785476][ T1598] __se_sys_ioctl+0xfc/0x170 [ 749.790571][ T1598] do_syscall_64+0xfa/0x3b0 [ 749.795574][ T1598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.801973][ T1598] [ 749.801973][ T1598] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 749.809782][ T1598] lock_acquire+0x120/0x360 [ 749.814797][ T1598] _raw_spin_lock_bh+0x36/0x50 [ 749.820072][ T1598] nr_rt_device_down+0xa9/0x720 [ 749.825447][ T1598] nr_device_event+0x137/0x150 [ 749.830726][ T1598] notifier_call_chain+0x1b3/0x3e0 [ 749.836359][ T1598] netif_close_many+0x29c/0x410 [ 749.841728][ T1598] netif_close+0x158/0x210 [ 749.846661][ T1598] dev_close+0x10a/0x220 [ 749.851405][ T1598] bpq_device_event+0x377/0x6a0 [ 749.856771][ T1598] notifier_call_chain+0x1b3/0x3e0 [ 749.862415][ T1598] netif_close_many+0x29c/0x410 [ 749.867773][ T1598] netif_close+0x158/0x210 [ 749.872697][ T1598] dev_close+0x10a/0x220 [ 749.877444][ T1598] bond_setup_by_slave+0x5f/0x3f0 [ 749.882982][ T1598] bond_enslave+0x7a0/0x3a20 [ 749.888093][ T1598] bond_do_ioctl+0x635/0x9b0 [ 749.893186][ T1598] bond_siocdevprivate+0x17e/0x350 [ 749.898802][ T1598] dev_ifsioc+0xb57/0xf00 [ 749.903645][ T1598] dev_ioctl+0x84c/0x1150 [ 749.908481][ T1598] sock_ioctl+0x719/0x790 [ 749.913326][ T1598] __se_sys_ioctl+0xfc/0x170 [ 749.918463][ T1598] do_syscall_64+0xfa/0x3b0 [ 749.923472][ T1598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.929872][ T1598] [ 749.929872][ T1598] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 749.937768][ T1598] validate_chain+0xb9b/0x2140 [ 749.943039][ T1598] __lock_acquire+0xab9/0xd20 [ 749.948227][ T1598] lock_acquire+0x120/0x360 [ 749.953237][ T1598] _raw_spin_lock_bh+0x36/0x50 [ 749.958509][ T1598] nr_remove_neigh+0x25/0xe0 [ 749.963607][ T1598] nr_add_node+0x1d9f/0x2570 [ 749.968728][ T1598] nr_rt_ioctl+0xc12/0xd50 [ 749.973676][ T1598] sock_do_ioctl+0xdc/0x300 [ 749.978689][ T1598] sock_ioctl+0x576/0x790 [ 749.983523][ T1598] __se_sys_ioctl+0xfc/0x170 [ 749.988616][ T1598] do_syscall_64+0xfa/0x3b0 [ 749.993620][ T1598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.000015][ T1598] [ 750.000015][ T1598] other info that might help us debug this: [ 750.000015][ T1598] [ 750.010223][ T1598] Chain exists of: [ 750.010223][ T1598] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 750.010223][ T1598] [ 750.024026][ T1598] Possible unsafe locking scenario: [ 750.024026][ T1598] [ 750.031453][ T1598] CPU0 CPU1 [ 750.036801][ T1598] ---- ---- [ 750.042146][ T1598] lock(&nr_node->node_lock); [ 750.046894][ T1598] lock(nr_node_list_lock); [ 750.053999][ T1598] lock(&nr_node->node_lock); [ 750.061272][ T1598] lock(nr_neigh_list_lock); [ 750.065956][ T1598] [ 750.065956][ T1598] *** DEADLOCK *** [ 750.065956][ T1598] [ 750.074085][ T1598] 1 lock held by syz.4.8505/1598: [ 750.079086][ T1598] #0: ffff8880303dfc70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 750.088820][ T1598] [ 750.088820][ T1598] stack backtrace: [ 750.094704][ T1598] CPU: 1 UID: 0 PID: 1598 Comm: syz.4.8505 Not tainted syzkaller #0 PREEMPT(full) [ 750.094722][ T1598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 750.094731][ T1598] Call Trace: [ 750.094740][ T1598] [ 750.094748][ T1598] dump_stack_lvl+0x189/0x250 [ 750.094769][ T1598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 750.094784][ T1598] ? __pfx__printk+0x10/0x10 [ 750.094801][ T1598] ? stack_trace_save+0x9c/0xe0 [ 750.094822][ T1598] print_circular_bug+0x2ee/0x310 [ 750.094839][ T1598] check_noncircular+0x134/0x160 [ 750.094856][ T1598] validate_chain+0xb9b/0x2140 [ 750.094869][ T1598] ? do_syscall_64+0xfa/0x3b0 [ 750.094890][ T1598] __lock_acquire+0xab9/0xd20 [ 750.094910][ T1598] ? nr_remove_neigh+0x25/0xe0 [ 750.094927][ T1598] lock_acquire+0x120/0x360 [ 750.094944][ T1598] ? nr_remove_neigh+0x25/0xe0 [ 750.094976][ T1598] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 750.094997][ T1598] ? nr_remove_neigh+0x25/0xe0 [ 750.095014][ T1598] _raw_spin_lock_bh+0x36/0x50 [ 750.095031][ T1598] ? nr_remove_neigh+0x25/0xe0 [ 750.095048][ T1598] nr_remove_neigh+0x25/0xe0 [ 750.095066][ T1598] nr_add_node+0x1d9f/0x2570 [ 750.095084][ T1598] ? dev_get_by_name+0x21/0x200 [ 750.095100][ T1598] ? dev_get_by_name+0x21/0x200 [ 750.095115][ T1598] ? dev_get_by_name+0x21/0x200 [ 750.095130][ T1598] ? nr_call_to_digi+0x136/0x1b0 [ 750.095148][ T1598] nr_rt_ioctl+0xc12/0xd50 [ 750.095168][ T1598] ? kasan_quarantine_put+0xdd/0x220 [ 750.095185][ T1598] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 750.095205][ T1598] ? apparmor_capable+0x137/0x1b0 [ 750.095224][ T1598] ? capable+0x89/0xe0 [ 750.095239][ T1598] ? nr_ioctl+0x1b1/0x3b0 [ 750.095255][ T1598] sock_do_ioctl+0xdc/0x300 [ 750.095274][ T1598] ? __pfx_sock_do_ioctl+0x10/0x10 [ 750.095289][ T1598] ? __lock_acquire+0xab9/0xd20 [ 750.095312][ T1598] sock_ioctl+0x576/0x790 [ 750.095330][ T1598] ? __pfx_sock_ioctl+0x10/0x10 [ 750.095346][ T1598] ? __fget_files+0x2a/0x420 [ 750.095358][ T1598] ? __fget_files+0x3a0/0x420 [ 750.095369][ T1598] ? __fget_files+0x2a/0x420 [ 750.095382][ T1598] ? bpf_lsm_file_ioctl+0x9/0x20 [ 750.095399][ T1598] ? __pfx_sock_ioctl+0x10/0x10 [ 750.095415][ T1598] __se_sys_ioctl+0xfc/0x170 [ 750.095432][ T1598] do_syscall_64+0xfa/0x3b0 [ 750.095444][ T1598] ? lockdep_hardirqs_on+0x9c/0x150 [ 750.095462][ T1598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.095476][ T1598] ? clear_bhb_loop+0x60/0xb0 [ 750.095491][ T1598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.095505][ T1598] RIP: 0033:0x7f860b18eba9 [ 750.095519][ T1598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 750.095532][ T1598] RSP: 002b:00007f86093d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 750.095547][ T1598] RAX: ffffffffffffffda RBX: 00007f860b3d6090 RCX: 00007f860b18eba9 [ 750.095558][ T1598] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000004 [ 750.095568][ T1598] RBP: 00007f860b211e19 R08: 0000000000000000 R09: 0000000000000000 [ 750.095577][ T1598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 750.095586][ T1598] R13: 00007f860b3d6128 R14: 00007f860b3d6090 R15: 00007ffd3f1aaa48 [ 750.095602][ T1598]