last executing test programs: 6m58.309449443s ago: executing program 3 (id=901): r0 = socket(0x2, 0xa, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000026378500000071000000"], &(0x7f0000000300)='GPL\x00', 0xfffffffb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) unshare(0x6a040000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000980)=@ethtool_coalesce={0xe, 0x2, 0x5a6, 0x400, 0x5, 0x10001, 0x2, 0x0, 0x8, 0x38, 0x1ff, 0x5, 0xfffffffd, 0x8, 0x2, 0xb, 0x81, 0x4, 0xfffff20f, 0x1, 0x3, 0x73, 0x9}}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000000000000000000002000069442c31c4707e62ce423dd2cf99f6b5e2bf7177c29d13b43600"/62], 0x0, 0x1a, 0x0, 0x0, 0xffffffff}, 0x28) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0xcc}, 0x8) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r4, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES16=r4, @ANYRES16=r5], 0x1000f) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="180000000003000000"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x3, &(0x7f00000004c0)=ANY=[@ANYRESHEX], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4e, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r8}, 0x18) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000640)=[{0x6, 0x83, 0xfc, 0x2}]}, 0x10) close(r9) r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r7, r7, 0x2f, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r10, r7, 0x4, r6}, 0x10) 6m58.004018325s ago: executing program 2 (id=904): socket$kcm(0x10, 0x2, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = accept4$x25(r0, 0x0, &(0x7f0000000240)=0x53, 0x800) connect$x25(r1, &(0x7f0000000200), 0x12) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000040)="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", 0x146}], 0x1}, 0x881) 6m57.916475041s ago: executing program 2 (id=906): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x1, 0x1, 0x6}}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)}, 0x40004) r2 = epoll_create(0x7) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0xfef49f959c6c40d7) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r4, &(0x7f00000000c0), 0x9) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)="e9be0d1a6e6dca638c6d9507c301a471b5d77a85d6eef5d566c391a4d9748f019181dd0e554ddc2ef94373e89df2e70bb1609114d7065cadca8b17130f4e4a72d33218ca3bea85adfcf713cf51da554588fd4b1ddd85897400811bcb6480493c7437635caaf8eed3f32de7e5bac1da18c5278e7aabb583b8e5d7", 0x7a}, 0x1, 0x0, 0x0, 0x24040001}, 0x20044806) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f42fc3199f000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af735ed41793bdf9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbc68223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f00001000000000eeff7c5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729eec082830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d424c14283a94395b64645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d620100000000000000494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd779a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9b0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000002684c2d8eb8cac98930fa6a893ca44c0f64c07a87eb7b05f56ca6c70cb3a0eb328a15fe96a88235155e6d64bd434f641ddf9db2245e47e5904453577895dd81d"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000480)='rcu_utilization\x00', r4, 0x0, 0xa}, 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x130, 0xa, 0x148, 0x0, 0x60, 0x1c8, 0x2a8, 0x2a8, 0x1c8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0xc0, 0x130, 0x0, {0x200003ae, 0x7f00}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@local, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2c0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x51}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) sendfile(0xffffffffffffffff, r7, 0x0, 0xffffffff000) socket(0xa, 0x800, 0x3a) 6m57.803108536s ago: executing program 1 (id=909): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newtaction={0x80, 0x30, 0x1, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_vlan={0x68, 0x1, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x2, 0x6, 0x1d}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x5}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x80}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newtaction={0x80, 0x30, 0x1, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_vlan={0x68, 0x1, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x2, 0x6, 0x1d}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x5}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x80}}, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) (async) unshare(0x6a040000) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003e7dfffff08300008a00000000f7af95be2c4831198d2c06bd1ce15691000000010000000000000049060000000000000400000000000000000000000000000000000000000000000000000000000000000000000200ffff0700000000000000ffff0000000000000100000001000000ff03000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e20933700"/320]) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYRES32=r3], 0xc0}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r6 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e22, 0x4, @local, 0x2}, 0x1c) (async) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e22, 0x4, @local, 0x2}, 0x1c) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x10}, 0x64}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="5b685c7e778fbbbbbbbbbbbb86dd6a00000000181100fe8800000000000000000000000000b6090200000000000000000000000000014e1d4e2000730acb8edec2c2c21890780408000004008000"], 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="5b685c7e778fbbbbbbbbbbbb86dd6a00000000181100fe8800000000000000000000000000b6090200000000000000000000000000014e1d4e2000730acb8edec2c2c21890780408000004008000"], 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x38, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="00000000520020000f493899fbdbdf2500000000"], 0x18}, 0x1, 0x0, 0x0, 0x400400d0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) (async) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) (async) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 6m57.715009284s ago: executing program 3 (id=910): socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r8, 0x12, 0x2, 0x0, &(0x7f0000002340)) (async) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x3c, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x1}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x918}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x4}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x10}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x6}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x6}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) socket$inet6(0xa, 0x800000000000002, 0x0) (async) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) (async) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, 0x0, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x30}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r11, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x1f00) sendmsg$tipc(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) 6m57.405436461s ago: executing program 1 (id=914): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d3, &(0x7f0000000200)) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000002100010000000000fddbdf250a000008"], 0x30}}, 0x0) 6m57.225190106s ago: executing program 2 (id=916): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x14c, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_CS_CRC8={0x11e, 0x6, {0x0, 0xff, 0xb, 0x0, 0xff, "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", 0x0, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x0, 0x5, 0x0, 0x0, '\t\x00'}, 0x7}}]}, 0x14c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) 6m57.093917329s ago: executing program 3 (id=917): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x18fd9ca9fb75925e}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006500)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0xfff1}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0x7}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000a80)="a4fbdb796b7e", 0x6) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r8], 0x50}}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r11, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc9, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000380), &(0x7f0000000480), 0x8, 0x8001, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4817031a207e538c}, 0xc, &(0x7f0000000a00)={&(0x7f0000000680)={0x354, r4, 0x100, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x230, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa6cf}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd36f}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}]}}]}, 0x354}, 0x1, 0x0, 0x0, 0x4041}, 0x8000) 6m57.09315326s ago: executing program 4 (id=918): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000022bf0000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900ffffffaf0055090100000000009500000000000000db003000a0000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x3, 0xc8, &(0x7f0000000380)=""/200}, 0x94) 6m57.04123091s ago: executing program 1 (id=919): getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0xa9, &(0x7f00000001c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xde, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xbc, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffff8}]}, 0xbc}, 0x1, 0x0, 0x0, 0x10000000}, 0x4000040) r5 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@private2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000000680)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000006c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private=0xa010101, 0x4e21, 0xf, 0x4e20, 0x3, 0xa, 0x30, 0x80, 0x3c, r3, r7}, {0xffffffffffffffff, 0x1332f4e4, 0x1e, 0x1, 0x1ff, 0xe, 0x6, 0x4}, {0x0, 0xffffffff, 0x7, 0x4}, 0x2, 0x6e6bc0, 0x1, 0x1, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d2, 0x2b}, 0x2, @in=@private=0xa010100, 0x3505, 0x2, 0x1, 0x71, 0x10001, 0x5, 0x8}}, 0xe8) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) ppoll(&(0x7f00000007c0)=[{r1, 0x8040}, {r1, 0x4a3b0e11e6a92b9b}, {r0}, {r1, 0x8}, {r9, 0x10c}], 0x5, &(0x7f0000000840)={r10, r11+60000000}, &(0x7f0000000880), 0x8) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000900), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000940)=0x0) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r13, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x21) r15 = accept$packet(0xffffffffffffffff, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000a80)=0x14) bind$packet(r15, &(0x7f0000000ac0)={0x11, 0x11, r4, 0x1, 0x10, 0x6, @local}, 0x14) sendfile(r8, r0, 0x0, 0xb8a7) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000b00)={0x45, 0x9, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @private2}, @enc_lim={0x4, 0x1, 0x14}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x28, {0x1, 0x8, 0x9, 0xa, [0x1, 0x5, 0x7, 0x5]}}]}, 0x58) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000b80)=0x2008, 0x4) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r16) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000e00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x170, r17, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x128, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2d, 0x2, "d0a41a772a83ab27bda955fe322de6aea7156126d8201ff5253141176c87094f6c4ce174d860c9593d"}, @NL80211_BAND_2GHZ={0x14, 0x0, "1c5148caf6cf76f695663edeb33209df"}, @NL80211_BAND_60GHZ={0xe0, 0x2, "c15dbac5aed93832e1d8836ba1aa43098a1c46c45f89ea0a5f64be0a61978bcd37dc699017440471a49a115a7f15b84227e18cd816d8c5a7346e6b087f6dad66d4154cb2dbcfd3ae29f5954a2302425851beadef0874d29accab02b3dc3b93223e19cbf2d17b14577a90aa734d36f79e52e7c979aba344822d6a2d2d6e0d915f5839382c6143d49544e7afe1a79c94b69da9da3cf92cabe28170daf8599a7be677c0e7311aaf3ec632e6cda20e316c7ca9759d6ec20b058ae0dd0782cc695431ecd72b512aa84a8fb537a6bb6b0c8935050c7353e58627ed02b3bc48"}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xf}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x20}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x9}}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x170}, 0x1, 0x0, 0x0, 0x90}, 0x1) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000e40)) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ec0)={0xac, 0x0, 0x7, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8001}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x101}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xa}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8000000000000000}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xffffffffffffff00}]}, 0xac}, 0x1, 0x0, 0x0, 0x20050080}, 0x44805) 6m56.987141507s ago: executing program 2 (id=920): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x3a) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="050000000091c700", 0x8) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000080)=0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20048810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x2000018c) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000280)=0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000a30cfffe2c0004802800018007000100637400001c0002800800024000000011080004400000000c05000300b50000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500000a"], 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f00000000c0)=0x2) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000240)={@private0, 0x58, r7}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000010000108fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="19a904000000000000000167b681d46ef26d0800ecc5", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r9, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) 6m56.901472165s ago: executing program 1 (id=922): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={&(0x7f0000000200)="2288b5e4577846865f21310a98991d550488bff173a534ea87faa90d003f4ee46093ac1dfe60472c8660d6b594326eb6055db9258fd025467cfb41c06396f90a4bf3eff463b272c4dd28d41f2c785e9c373666d9a7d75c085dc323b2ce4e293c7302b0af60fc07603b71f833819c5130836e6a196fc98f91c4281e8b58833c19c5b1523601c2764cedff327f98243b0bd7f8409392317bee60df2ac60cca9546f00786498eb31201bfd86f6c007e51ce4685290a42cfc35abe7516c0", &(0x7f00000000c0)=""/10, &(0x7f0000000300)="17e4977bf0a1bc5a98f70e6d8ee3c61cf6e155f621577665ea8b172adfd9362ce914bb85376a786f01da50aee6cd6423ea4c38de38f2b5962185c2c00b422d7cdd67aeffd1b376a784ceaba13220653a324e0fd453ea17ca405ad04a8a3b05dee112676d111d0168745b9eda9e6c7bb7bcf4cf833c42ec9f19bcc1bc0b5ca42c8daae1c757f6049cc819596d9f3c2a5c6c9c97ce3f89e7d343fdb5e701ea78a51e34959b998cfc018887a9bf8a589b35393d35be0df11a9189", &(0x7f00000003c0)="dd2a4c2b3f67c30353401e6a482e450d0ec1eb2e9b7d634ccbe021aab898cec8555d4ce59c4cd0b3beb944288182490cc4ce327b6d7336bb82f28b558e2079d354df68c66890d85250a1c690285f14fd6c10f94de24beb6824cdeeb84b730e57c054f4265a787a021bd051ee16472ea428c9c28bd9671b7ef0ed568afee36b0df652b8e33b040ce95d6362efe329d1051206c1b9f43ed17abc8f2ec9614ce4c7fb67e34c3337a5fd7f65791101ee262f57a0202002d482794f9304e6fe82f81d670fe22b8f5878ad8d3e860cc481ca7ae0e26a59e83b37330b9112bb", 0x80000000, r4, 0x4}, 0x38) sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="240000001900010000b273c24000000080200040fd0400050007000008000f00ff"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40010) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003500)={0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="e000000013"], 0xe0}], 0x1}, 0x0) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) 6m56.901221614s ago: executing program 4 (id=923): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, 0x0, 0x40012020) unshare(0x600) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000240)=0x2) 6m56.79643239s ago: executing program 4 (id=924): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x5140, 0xc, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x890, 0x3, 0x0, 0x1, [{0x870, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xd0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa7, 0x1, "9b3af6b448fc4123b26ea367e2ff62906dceb0be07964e7d7fb97e7d06bb398fbe264f4b7b92c08afb8d99cb0296248d03d93eb7886e47380ec3a5a03b20e0617e4b8a649ad30345ad764b709ef929ddb20e39a1e89aca3d0d3db18bc67de614ed208c529c5d611687d23e82b973859a75631a3e269dead3e11b347cbc70dd983f482b620b0b59003e1f7a488948a531dda892509d7969b550276deffa0f2e639a8e17"}, @NFTA_DATA_VALUE={0x22, 0x1, "23da30722cb05915f46ba753e0dba56241d68be468c5c16079d05d3773c9"}]}, @NFTA_SET_ELEM_KEY_END={0x1a4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf3, 0x1, "6bc1c4b626ec40a785d9022dc86352bd306a20441061b1db8507102dccd201e80fcb12a4c1dc473473221db68a618814bf931569b3b7308101235f63875f97e067af8a22e7e0a60c35f992fadcf72611fbe5b44a5c9fd33360cbc570f5f9e4350081dc6a9eccd3f5613045698d8028956b89afc25013c3f5f89e50292f1f7e2b9f3de531d8d88c76291ac31e8924a8dad37977375be48c50e56469f73212bf8d1d93e304dc69e8f1d888f7d20dbc7d1aea5e19bbc8a96ec9e93ed3834e713e77abdea8616e29fd6643db471dda10e0dfdd3f2d2333624c34ca6bcb8c77a0df9dc75ff3fb3eb1c44e926d1fad4c050a"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_USERDATA={0xc3, 0x6, 0x1, 0x0, "c9574fc5e7236725ecc8512b77fcab6639f3ab5881127da4e3647862df03353995b400d896c9ae8d93a3b1322e8b305b88474e21e4919c09132de02cf54a63ea770ddf3194e8bd8c75ff67a8bc2b5a12d68a6dc019210016783ccba1a1bb32517dcb15b4ef96abc08ed937720d6a9466f3622c0b440fdbc3ae564d9ddb9df3664fdd6daa197f23e32f6ade9f9c6a34729c7db1846d15acfc1301216f55a1ac337deafccea5a0b509c21ee44d41627b7bfce614eabaa516eaa881c6dced2770"}, @NFTA_SET_ELEM_DATA={0x424, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x102, 0x1, "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"}, @NFTA_DATA_VALUE={0x6c, 0x1, "decaf2e883b31c2b1e28fa1c4f5083382acc9e6bf4de96481daee77a1640c43c393cbf5711b34ea8c067acde8f3f4d340086f281d7f3e133a5120fe44a8bc9866bd2dad4358516abb5c6b05df8c000f0b4335050c58e8366a3b8ccd821c94f72c6747adc6530ad4f"}, @NFTA_DATA_VALUE={0x5f, 0x1, "013363d68d2781d1bad8c0a4b9e3dd9e43039726f5793f8a08e9a8ec77dd15aaacd2b15b1bd99c8d78beae761d544ae9f8df9e013ef64769f2abc7f11c5643adba3e27da30da9007cc9eeb2709ae08f60412a53c0c1f4303210341"}, @NFTA_DATA_VALUE={0xc0, 0x1, "d7c7949950322321b0e48119000a18b67f79ebd554a2ffb6e87b3b4a45ef629912da506bb80eda1c320eb7cbf637aa45e99e1c260068c6b7fc671d6f4ff3bb035f437bbd59376120c6459e4cde4cb92f22d49401110871901bb6335be48e17613391dae9f3d4fbaf1d4d611db6a0ae249a7562026d7dbd08cbee4a28f98ccb52a57393428d4bc64e051d96c49dc60b09d6831fd6af80907dfc3ca2a5c52474c87e6837d7a7c93f54ffd6cddf5a992335d160ea1222ccbad8f00cbfbc"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x8b, 0x1, "caab6f0d7b4abd84d42f7a8d302b1e491621f7c562d7e2d34a23f3360ec8d92a9e8d4d95a937d49bb6b1ba22b933642c2276ee9d1660775a30d4aa65e5a981b1ff4ff56cf96bf7fa531bd03c830aeec4173fd62c0fd865f86ee016607a8f8db04e343170667bc64067f26d2e18b314ee494334a3218bca8e17d99baa231cbb05e9b001bb278fe8"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_USERDATA={0x8c, 0x6, 0x1, 0x0, "34154d28c633d1811ae5f54e64c10dbf8770e67655e22ef96af8bc67963c3bb93d7de2a2f0d9736b037711184fe5af2b98e44a122946d7b279d117862a87077a42980a01def2530f402baf6a4734d0c98249b4ad77ac2dbfb227602e380c7af6ffcd1e6c18c8a532933c1e338fce0607aad3661d41dca41b64e40a35347783394c1dbe81ce9959c1"}, @NFTA_SET_ELEM_EXPRESSIONS={0x84, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x5c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x46a8, 0x3, 0x0, 0x1, [{0x190, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0x58, 0x6, 0x1, 0x0, "8fba20a59095364e0092135ab326c458b901c641c935e38b4ea3a156fdaaf421d7014220e4025a69d81a50f13fdf2322440c092f291c8dc310c898757787b8aa225c893b479c15b7ffda71b88271fe635d94addd"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_SET_ELEM_USERDATA={0x7b, 0x6, 0x1, 0x0, "c8a86ee95045ac5f3541130c8c8d73298d0ca4dd6af74a78400ae3f143f1c8eece0d974814ca4014046c7eadaf7265d86beeb4030c967e2d631302df365c30aadaad89157be4be69603b431bd045a9077cafcbcf6709b9470a2b7a6087bc5739dcb1d2151396a40bc98f2afb24df93e1c6cfdf3b836cbe"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x1c, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_SET_ELEM_EXPR={0x30, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, @NFTA_SET_ELEM_EXPR={0x40, 0x7, 0x0, 0x1, @synproxy={{0xd}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xe07}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x5}]}}}]}, {0x10a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x10a4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x57, 0x1, "ae2cd531c00766ab3f34ac70fef54ba72725cee80c2cd2d942ccc098048c31c2ed4c4609334f808a6890cc37acae008186f9659fe4712555cfb70ec72bb6393923ae032f449ed2bf6f9ffd2444db7bfab34498"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}, {0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x3c8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x4a, 0x6, 0x1, 0x0, "fe254f1fd940367d611fe56fe1f0459325a528d949c2857def5961ddf79ea1c2bc06c0107b057045b762fcb166a2f6ea00ad5fafe6cfc04548f93d97bea5618b885892ef30de"}, @NFTA_SET_ELEM_KEY={0x8c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x62, 0x1, "59979cf4910336a1eb36ed8d0ec1dc0ac6ff3f7d592f3e12295def13e12759429ad8c16fab92feb2ad9718c423f293f06a89e87473de0b4fa80c221ccd44183e3a08b25494d5b82ce87210944c47f6d946da2b53fc46ef7eb04a98ca63e5"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_EXPR={0x50, 0x7, 0x0, 0x1, @rt={{0x7}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xafd7}, @NFTA_SET_ELEM_KEY={0x54, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x17a}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0xfc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf8, 0x1, "7a79622af85ab2db7c3e64fb57f99b1f7a42883764fede0e272d830443ea0a1e3f822f20b8e96348d84acd4a028ce16a2194dbff227236217a215f029fc4c279efa8937b1fe84bc8f21e2f6b469f3a0c1f9ea45febb1c3204d113222f8517b37512b2ac3184e1883b1856ea565153f65c3c353bad8875f46a5ad7fccd5d6f91721d80fe0ef81d5aa9768ad9820bed277522792e535a70858fffbc7cdec01ba9b099e0ebc2ed24030ac447dfbb4c2126911b6c5736d899c504324559f61e1c241d9b24320d091809becb583e2f10bfab02520b86067a0a74ba560859c312f7d7f51f975bf5314ba296103923c484225cfcb29052a"}]}, @NFTA_SET_ELEM_USERDATA={0xf4, 0x6, 0x1, 0x0, "86bab936ffb73709340ad651e643afd082b3e60d69ccb3e0ce25ba888e0c087a1569639280c33f165272e4e05a6c77547f5665365b75fbe43d608ec8c87e949b57444fea76d7f6698334c3d0218729451f655e3ce5c3871a1f47ff3df5c8dd26adcd8ed80c1a55aaa7afc3f869b7fd860fbf2505eca276262b267abd8c8c31ac90f316e97afc9e7e44c5a2a7046d43199b05005c9c6215a572b0c9091192951ab6f329cd91b76d496798ea8faf83e4401bbdbd610634db5807a8845dcf7e29c14d741cefe365eab3953ac18f124809330a245b0d32b539eba5610b973cbef170ad54ceda1661447080c8d23cd02537e7"}]}, {0x2cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x10000}, @NFTA_SET_ELEM_KEY_END={0x11c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xb1, 0x1, "d6685ae8d945b8399adec067de1d39f69c8663394dc17846280f170f701933b9cfdd47fdada208a44e425526a48cd96f047147078e191217b287f2e99c6ed59fbfe601a9a33106928aae93d7bb4b616e65cef9755832cf27d592cd2c7c68316ab5aa1cb1a8d55f786de9e7251f83f3dbb92ef20335946926113770aabced4afa3ae8405ce81e034b2cfd6bed22370e953dc9b9305c7cc3e8007b61bf4b094dc87fc39909bd26f283d4d9ac84c3"}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @fwd={{0x8}, @void}}, @NFTA_SET_ELEM_KEY={0x194, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xbe, 0x1, "7f35e2255c3dfab16c493a31109ce2ecad9f01ba094b8899cd03c7a9be5f47db4cc57733b712ce0d182d9470e6b30e731deefd42af4035e0e0601cfc4210f3cae0fcb0757bd7777e21fcf5f09795dd2d0c5af94a1a540eb7543dd8c86c1acaf401cb606392a05d1ce08bc0a18a8a782f764b5dd3ef5633d818e2fef5fae4ad5e5c678c680e00c8ca28b4a0d88c4967f2144208014882cb8693aef20ed41f7c26f9e1ba07ad310691c9a78755ea2a2768eea77be12162730a8764"}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x508, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x144, 0xb, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xd}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff6}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x7f}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x34, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x31}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x6c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @meta={{0x9}, @void}}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xcd}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x45}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x29}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_DATA={0x10c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfc, 0x1, "c355cd283d8100255f793012860c4b36be2c840da3b151190fb25f3154b7e8c87cb291402dd2a6a46f4bd76e14236eb3f645126e4e2b2a832ce299c1148164b36b7540578b0e6c83d917e46790ffb18dffa1350acd4d1120bfc8b1475a311b1a4bfc59bf3c2fc24170eadfed21dca8e218b80abf9b7dbf267cfef9ea1e6728ded50274a90904d51812b29f52551085760c4b7f251c0b8163227612b12ce8cf91d8a28bf4ca097af2853bca4b8a813d71dfab89a40d7f0f5cae6c41f2b753b0307d6c3a3405de8f858802ef75b30a95eda557920ab6b417bb3ccb9243294a245de7d1864b21a39533e998bb7a0fe2cec30c3492fa645334df"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_USERDATA={0xbf, 0x6, 0x1, 0x0, "9e5ef909969afafae2f3eb9d1c5e383bbdab56f88c3d748c639cda7667dd2175f7ca31937200a37d681b261e0ad109bce8c96bfbc5f9eba9731b74dc71a54365b28e894f324e289bfd6280ac291e6f5f06a663d74497250a45a05466ba903a2ca69baafb7e510cefdf33be618f864a37a8466cb0bf309f74bf9ae1d5809d658963ed1cf29f29df3eeb4370f7166a150c5f0158ba855cf106d2e1b2bf76bf2d05377ab12cab43ee8b6790c31c71148d3ad97f5c36149953ff5de11d"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x160, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x401}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x3c, 0x1, "ea65b02ba8f979135901c84ce754238476df187c2ea37c0d8405c66b6fa8d245dc200f9064aef491578a1cd9bf27e15969e4b9c14881f9b9"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x91}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0xf0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPRESSIONS={0x6c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x3c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x6}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x8}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPR={0x60, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}}}]}, {0x368, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x16}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xc6}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x8e}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x74}]}}}, @NFTA_SET_ELEM_USERDATA={0x9d, 0x6, 0x1, 0x0, "632aba8cd16b91bc0430b41410f4440a592be1885f9e935574e05370e4ecf6abb1a1bcbe02587ed910e758a4b925280f6ee628b32b86b3530f994033a794a8b948011c5ea65016016e923075f92cbc9f96f078a69a10192884a3967b4e7aab85f1da7d9aa8fa5c30ba933d598ffba7c891d808b461551787e23830884b3560737d6d06c41b02319ddcc069f83b9b585db68e82a8c629d5af08"}, @NFTA_SET_ELEM_KEY_END={0x268, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x102, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xc2, 0x1, "e10ecaf0ba17a23eb382c62b7f879313bf018f0632a317ae69274ac1c8da6e9b205c97f86a6330a0fe5f8a4f7920c397c8c93f3767207027187de101f5126a012ef39c4dcb229fbfea1fbc9b676bac823d0e702ec1c653b6bddfa4736e9e5bb4ef0bd3c001d69001631f2b36e8f27a1cb65817fdc4dde365cb03974b802f71450eb012ce68547082304eadde6743fd672aee03ee40b8b10fd74b84ce47a4443b18ed1a1b71095e2b37381c92c0c237b88ffc45b1e380191c5f5877a161c7"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0x2448, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FIB_RESULT={0x8}]}}}, @NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @socket={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x13}]}}}, @NFTA_SET_ELEM_USERDATA={0xa8, 0x6, 0x1, 0x0, "df7b8539ddb82e8e671a2e2d7108b77f3535935cedd2094ecb3d08602d055e916c1f1d4614bc0de5f34219a5a7022eb5549d7b6dccfeb993fbf79863b3f939c6f86ddca2d95148ca9e13dc2529c8f8dd522c4c674466395749df3426a10bf654810c0dfd1388916e803757d9a950adc58a473809655b5717fc569783e7f5c046694f22fb9c3ee517003c4766836e62b8e06cd42b44ae42b23f3dce2586b86fc81130475e"}, @NFTA_SET_ELEM_KEY_END={0x105c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x1f, 0x1, "d81c74048b2f7f01493fd722ab1e550b61724fd9badcbe76be5e3c"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_DATA={0x124c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x33, 0x1, "a81daa142d731f2fdb89dd52764fc8dd0ae3fd42cef3564a6d9a434f9d8178dfa28daaa74a3686a27b9cfaa9daa868"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xb4, 0x1, "233d340cbe3d607714af79b3c76154f5ebd508f10277970e1ce3d9cd8679cfd8512a0945eeef7fda7a61aa24656794c89216b187c8fa1c4482dba904da79bb9cbde9b5d08b8aba9c8d49fd9f60085f9eee2a18717457234dbb1d577f1c237a828b6529b262a827d3aeba85eb0b9860da351a3ff37c6d914928f7d8f71071e0fa162678e2f06e11559ebb26078e03f47340c06a072953d4942feb8b74365907e66d937e5965fb259e674147c7ffb4416e"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x8f, 0x1, "62a202503fbf8ac38405120974f314902dab6fc30ec4a310137fb9accce1bf8d8a14e1b4c10652eec3f8cb3826bb385ba662815e32e0970683391fbb6b3cbfd24798957cb38431d48ec92939182a6c31450f22d5ef82fc1ed7342a85e924430de89ed765c7972a75fac45aa0590048510c9d6700b53135a51c994a573de10a7ced74df02e1980989e4fc6e"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_USERDATA={0x94, 0x6, 0x1, 0x0, "fa941868ef2047935d062299f5becc59e48364f7a4773c1122eac0783fc4d65c28189146dad2355bd5ad980dbabd2d44785a4232773072fe43ffe38dbcbf31e89e07a36afe8e4f3985a812b5cc3823c0a4a16f00c84eb297cba868d0a95f186beb2fc3db46bbe3a9d2ed49abcd247c16dbea38a7b8f3c6be725da4e9322cbd6c5e0e12f91183188dc81ca982c6f9c9b6"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x40}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1ac, 0x3, 0x0, 0x1, [{0x198, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, @NFTA_SET_ELEM_KEY={0x170, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x77, 0x1, "e1ab50d222a8f23d3da7e4f7b7365e754e966cf0333c643adaa7325f1e30f80f33330ed2739778ddd3f3469829b0a69abe465207097f42c7fd03ac5afb8c6ac2e7e648a2645c8b0d144e41051213f7e7a94ea85ea77bb20853b5e904540ea5756c6c326f55e5754497609334bf5e1ae7ee7575"}, @NFTA_DATA_VALUE={0xd5, 0x1, "67a4ae69a4d95081fc1d9c26708fd6aa2751854a36fab7a59fae29e5521b0e5ae3e1d70a5f2ac3acc3e919807bdb96b24e073f098cd87acc2c4ca1053224c6d0d17b7475b6374b4d5b0cfd77ff050f6239076e7d6c7dc4d3992f81759c3afb8a5e64c46ef7e478315a9478b8c5626fbecb0ab33577ff693cf132e71b0736edf2af1acd3116c0281f07ea0b05eb48742bdfa7a41aa93c2c7dfdad794ec89a84e7e2e5a3f86d1c98a0dad9da69a90a8bb5e39cbe7349e597b5c4007d5eb5431d4be69267e5700cfd046cb7ee672aa91c0326"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @nat={{0x8}, @void}}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5168}, 0x1, 0x0, 0x0, 0x40005}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000000203030008000000000002140000000008000100010000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x2a}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@can_delroute={0x1c, 0x19, 0x5, 0x70bd2d, 0x25dfdbff, {}, [@CGW_LIM_HOPS={0x5, 0xd, 0x8}]}, 0x1c}}, 0x4040850) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xfff1, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffa}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4024}, 0x0) 6m56.681580386s ago: executing program 3 (id=925): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x34, 0x0, 0x8, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c000}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x32, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x13, 0x1, {{0x0, 0x0, 0x0, 0x12000000, 0x6}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x0, 0x2, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x8}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e20}}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000844}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(ctr(camellia),cmac(des-generic))\x00'}, 0x58) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c001680"], 0x30}}, 0x0) 6m56.602349183s ago: executing program 4 (id=927): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) r0 = socket(0x10, 0x2, 0x0) unshare(0x28000600) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2e, 0x100008, 0x0, 0x8, 0xf, 0x3, 0x3, 0xf8, 0x0, 0x1, 0x0, 0x4020000, 0x0, 0xff, 0x0, 0xfffffeff, [0x0, 0xd257]}}) mmap$xdp(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x700000d, 0x811, r1, 0x180000000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x4011}, 0xc) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000005001000050000000500000001000000", @ANYRES32, @ANYBLOB='\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r5, &(0x7f0000000100), &(0x7f0000000180)=""/177}, 0x20) r6 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x2000, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x40000}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x1, 0x7}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000140)) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) socket$netlink(0x10, 0x3, 0x14) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e20, 0xfffffffb, @empty, 0x5}, 0x1c) getpeername$packet(r0, 0x0, 0x0) 6m56.5253884s ago: executing program 1 (id=928): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000aabb00002000"], 0x48}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x282}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0xba01, 0x0, 0x4000000}, 0x0) (async) r6 = socket(0x8000000010, 0x2, 0x0) write(r6, &(0x7f00000002c0)="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", 0xfc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r7, 0x8946, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r7, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x2, 0x8, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x2000c842) r8 = socket(0x840000000002, 0x3, 0x100) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) sendmmsg$inet(r8, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010101}}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 6m56.493945294s ago: executing program 4 (id=929): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x6, 0x0, 0x0, 0x7fffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3a}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000080)={r1, 0x7, 0x6, 0x63}) getpeername$ax25(r4, &(0x7f0000000140)={{0x3, @null}, [@netrom, @rose, @remote, @netrom, @bcast, @bcast, @bcast]}, &(0x7f00000001c0)=0x48) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r2, @ANYRES32=r3, @ANYBLOB="0c000280060001"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 6m56.439234763s ago: executing program 2 (id=930): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=@base={0xa, 0x360, 0x7, 0x7f}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000280), &(0x7f00000001c0)=@tcp, 0x2}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) 6m56.376701494s ago: executing program 3 (id=931): syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="24000000071c0510040000000000000007000007050001000700000015000640000000cf"], 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20002000) 6m56.12841373s ago: executing program 2 (id=933): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, &(0x7f0000000400)) ioctl$sock_netrom_SIOCADDRT(r0, 0x61f0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@deltclass={0x24, 0x29, 0xf0a, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x3, 0x6}, {0x4, 0x10}}}, 0xfffffc96}, 0x1, 0x0, 0x0, 0x20000895}, 0x880) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000380), &(0x7f0000000440)=0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x14, 0x2, 0x8, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 6m56.125955787s ago: executing program 3 (id=934): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, 0x0, 0x40012020) unshare(0x600) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000240)=0x2) 6m55.752605274s ago: executing program 32 (id=933): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, &(0x7f0000000400)) ioctl$sock_netrom_SIOCADDRT(r0, 0x61f0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@deltclass={0x24, 0x29, 0xf0a, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x3, 0x6}, {0x4, 0x10}}}, 0xfffffc96}, 0x1, 0x0, 0x0, 0x20000895}, 0x880) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000380), &(0x7f0000000440)=0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x14, 0x2, 0x8, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 6m55.74387719s ago: executing program 33 (id=934): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, 0x0, 0x40012020) unshare(0x600) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000240)=0x2) 6m55.68154862s ago: executing program 4 (id=938): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000040000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000002000000000000000000000000000000000000000000000000020000000000000000000000000000000000000010000000000000044000500"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 6m55.565210765s ago: executing program 34 (id=938): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000040000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000002000000000000000000000000000000000000000000000000020000000000000000000000000000000000000010000000000000044000500"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 6m55.209130887s ago: executing program 1 (id=939): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r2, 0x104, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r3 = socket(0x14, 0x2, 0x4) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000005c0), 0x10) recvmmsg(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}, {&(0x7f0000000700)=""/9, 0x9}], 0x2}, 0x7}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) ioctl$SIOCGSTAMPNS(r6, 0x8907, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000801) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) listen(r3, 0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window={0x3, 0x7, 0x400}, @mss={0x2, 0xc9a}, @mss={0x2, 0x7}, @timestamp, @timestamp], 0x6) socket$inet(0x2, 0x3, 0x6) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x2b4815de34c00aa9, 0x8, 0x8000, 0x4, 0xaa94691b663c22f0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@bloom_filter={0x1e, 0x2, 0xd720, 0x7, 0x3c0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x3}, 0x50) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r9, 0x351, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1, 0x1d, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@jmp={0x5, 0x0, 0xd, 0x8, 0x8, 0x10, 0x4}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xa}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, 0x0, 0xffff8000, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x1, 0xd, 0x0, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000c00)=[0xffffffffffffffff, r5, 0xffffffffffffffff, r10, 0xffffffffffffffff, r7, r8, r9], &(0x7f0000000c40)=[{0x3, 0x2, 0x6, 0x8}, {0x5, 0x1, 0xd, 0xa}, {0x0, 0x3, 0x3, 0x3}, {0x5, 0x5, 0x0, 0x6}, {0x1, 0x2, 0x2, 0x1}]}, 0x94) epoll_create1(0x80000) socket$key(0xf, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x60}}, 0x810) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) 6m54.817758302s ago: executing program 35 (id=939): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r2, 0x104, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r3 = socket(0x14, 0x2, 0x4) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000005c0), 0x10) recvmmsg(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}, {&(0x7f0000000700)=""/9, 0x9}], 0x2}, 0x7}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) ioctl$SIOCGSTAMPNS(r6, 0x8907, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000801) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) listen(r3, 0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window={0x3, 0x7, 0x400}, @mss={0x2, 0xc9a}, @mss={0x2, 0x7}, @timestamp, @timestamp], 0x6) socket$inet(0x2, 0x3, 0x6) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x2b4815de34c00aa9, 0x8, 0x8000, 0x4, 0xaa94691b663c22f0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@bloom_filter={0x1e, 0x2, 0xd720, 0x7, 0x3c0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x3}, 0x50) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r9, 0x351, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1, 0x1d, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@jmp={0x5, 0x0, 0xd, 0x8, 0x8, 0x10, 0x4}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xa}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, 0x0, 0xffff8000, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x1, 0xd, 0x0, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000c00)=[0xffffffffffffffff, r5, 0xffffffffffffffff, r10, 0xffffffffffffffff, r7, r8, r9], &(0x7f0000000c40)=[{0x3, 0x2, 0x6, 0x8}, {0x5, 0x1, 0xd, 0xa}, {0x0, 0x3, 0x3, 0x3}, {0x5, 0x5, 0x0, 0x6}, {0x1, 0x2, 0x2, 0x1}]}, 0x94) epoll_create1(0x80000) socket$key(0xf, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x60}}, 0x810) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) 4.830176762s ago: executing program 6 (id=5174): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000500)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fc414a", 0x34, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[@hopopts={0x62, 0x3, '\x00', [@hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x8, {0x1, 0x0, 0x2, 0x3}}]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0xa, 0xa}], 0x10, 0x7ff}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 3.448286106s ago: executing program 6 (id=5178): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) shutdown(0xffffffffffffffff, 0x0) r1 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b1a, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r2, 0x27, 0x36, 0x0, &(0x7f0000000880)="f8ad1dcc02cb29dcc8003200810066a286ddc6617f503e7457188353133a3d4070574ac945c1be1c9b296e268bd0fabb3a4ba7534035", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8000) getsockname$packet(r1, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4010, r3, 0x83476000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x1b, 0x0, &(0x7f0000000040)) 3.334769735s ago: executing program 6 (id=5189): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000000000000400"/20, @ANYRES32=0x0, @ANYBLOB="0000040000000000140012800b000100627269646765000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000003500010326bd7000fcffffff06"], 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES64, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e640000000c000380"], 0x38}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109005000118049002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd00000020010680d353"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="1b000280725eb862cec9a478ce2057c5241935e6782507e230d5480008000700", @ANYRES16=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0xc050}, 0x4040) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-twofish-3way\x00'}, 0xfffffffffffffff0) r5 = accept4(r4, 0x0, 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) socket(0x9, 0x1, 0xfffffffe) r7 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r7, &(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfc, 0x800000}, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000480)={'ip_vti0\x00', 0x0, 0x20, 0x20, 0x3, 0x83, {{0x25, 0x4, 0x2, 0x3e, 0x94, 0x65, 0x0, 0x40, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x24}, {[@lsrr={0x83, 0x13, 0x6f, [@broadcast, @private=0xa010142, @private=0xa010102, @multicast2]}, @timestamp_prespec={0x44, 0x14, 0xfb, 0x3, 0x8, [{@private=0xa010100, 0x9e}, {@local, 0x40}]}, @end, @generic={0x88, 0x11, "2a4d62750fe97ca4287df0c3ddfc5e"}, @ra={0x94, 0x4}, @cipso={0x86, 0x24, 0x3, [{0x2, 0x2}, {0x1, 0x5, "fba59d"}, {0x6, 0x3, "ee"}, {0x2, 0xe, "e44cca510d63b2116560e5a7"}, {0x2, 0x6, "79b516b8"}]}, @ssrr={0x89, 0x13, 0x4a, [@broadcast, @broadcast, @broadcast, @local]}, @lsrr={0x83, 0xb, 0x65, [@local, @multicast1]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'veth1_virt_wifi\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0) unshare(0x6a040000) socket$can_raw(0x1d, 0x3, 0x1) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000200)=[{0x0}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0xffffffffffffff04) syz_init_net_socket$ax25(0x3, 0x2, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x91081000) 3.222453525s ago: executing program 5 (id=5193): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@loopback, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x2e, 0x2e, 0x2e]}}, 0x0, 0x31, 0x0, 0x1, 0x7}, 0x28) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@updsa={0x1d4, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0xfffd, 0xa, 0x0, 0x0, 0x5c}, {@in6=@private2, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x3}, {0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3ff}, {0x0, 0xfffffffffffffffd, 0x1}, {0x0, 0xd}, 0x0, 0x0, 0xa, 0x2, 0x80}, [@sa={0xe4, 0x6, {{@in=@rand_addr=0x64010100, @in6=@private2, 0x4e21, 0x5, 0x4e20, 0x4, 0x2, 0x20, 0x80, 0x33, r1, r2}, {@in=@broadcast, 0x4d6, 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x6, 0xfff, 0x62, 0x7fff, 0x2, 0x5, 0x1}, {0x8, 0x10001, 0xffffffff, 0x10000}, {0x12, 0x40, 0x3}, 0x70bd29, 0x3503, 0xa, 0x4, 0x0, 0x28}}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20004005}, 0x0) 3.126805893s ago: executing program 5 (id=5194): r0 = socket(0xa, 0x3, 0x87) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async, rerun: 64) socket$kcm(0xa, 0x7, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) pselect6(0x40, &(0x7f00000000c0)={0x3, 0x8, 0x7fffffff, 0x2, 0x3, 0x100000001, 0x27e2, 0xd}, &(0x7f0000000100)={0x5, 0x3, 0x101, 0xb21b, 0x0, 0x8000000000000001, 0x10001, 0x6}, 0x0, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x6e3]}, 0x8}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010010000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="20000000280e0400280012800b0001006d61637365630000180002800500030008"], 0x48}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffffffff}, 0x1c) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) (async) unshare(0x2020400) (async) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r6, 0x0, 0xd1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r7 = socket(0x2, 0x3, 0x6) bind$inet(r7, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r8, 0xffffffffffffffff, 0x13, 0x0, @val=@iter={0x0}}, 0x20) (async, rerun: 64) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) (async, rerun: 64) sendto$inet(r7, 0x0, 0x0, 0x4040800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) (async, rerun: 32) sendto$llc(r0, &(0x7f0000000300)="474dcc7fb4d7e15016e0b24a6fe7403d7163c39d1d2ba93340a0663f26acb945e1f39127196c05190a37cf8257d2903efe05942039798b6e559af2fe912457c24c83768a81020a745ea713036b5d639a2b1a4bcd2a57fd003a95e0ed7d28f8c2259154857b6ad14aed54c6883ba2ba2967be71f1a95b5ebe5324464bfbe0800f4751c3187ef70cceaf9f6bd7291319f9e44f93e0a798902287fc0c19307fa1f1fe1fcd58e3704748d4b72af1856818d83851e74a6add53211987b760a3dfeb39bb5d8fe1c7d5ed", 0xc7, 0x40, &(0x7f0000000200)={0x1a, 0x325, 0x6c, 0x5, 0x6, 0x58, @random="151926805f70"}, 0x10) (async, rerun: 32) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) 3.067063891s ago: executing program 8 (id=5197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f0000000680)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)="8fc8bf70342c6d1600bae5de9614410848dd95e7b8523bfbf4a6cbcc911b443e673a8fa77ce58a13432ac99e4be38c9c2661a892682d81d9b9022ea9", 0x3c}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x2, 0x488c4) (async) sendmmsg$sock(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0xc2, 0x1, 0x4, @link_local}, 0x80, 0x0}}], 0x1, 0x48094) (async, rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f00000000c0)={0x7, 'netdevsim0\x00', {0x7}, 0x7}) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000080), 0x4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@getchain={0x24, 0x66, 0x601, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x16, 0x2}, {0x10, 0x7}, {0xffff, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) (async) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10) 2.965224768s ago: executing program 7 (id=5199): socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rx_ntuple={0x35, {0xd, @usr_ip4_spec={@loopback, @private=0xa010102, 0x480000, 0xf6, 0x1, 0x7}, @ah_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x7}, 0x9, 0x17, 0x3, 0x0, 0xffffffffffffffff}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="08000000000043348ad5ca54f39f500add4fb8f73ce0c6b303d245d66bc87b9b1556c41a5e4c89bb661ca284f932ed509688e1e3dbbdba4d652ea0a0e2b78dc4a7300d423762567d0d6cfb6a069ebe079e0e75fd3af4338f6e9006ff12b58550ee211ae57632e65e9d777c958b8480e21d1cddc02f77a5b610ba4be90237c085600d5d081d711a83fc23992f1d1fc20476825a602127c199c284875639960a3e8b449bf049dd32690ae1982280c7481e345442fcef22dcc027956b96ba9c217bb46b5a2e6bc4b3ba393c24dd10951bea41eeb10c430508f2f1f91f4b3b807ff3fa7bad"], 0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r5, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$xdp(0x2c, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000a}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xffffffff, 0x9}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) mmap(&(0x7f000062b000/0x2000)=nil, 0x2000, 0x2000004, 0x110, 0xffffffffffffffff, 0xa51bd000) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r9, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) splice(r2, 0x0, r4, 0x0, 0x10d00, 0xf) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.897163676s ago: executing program 8 (id=5201): socket$netlink(0x10, 0x3, 0x7) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb7758ee5bb094b83c8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b7191584bcd4fbe40a21424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000013c0)=""/49, 0x94}, {0x0}], 0x2}, 0x5}], 0x1, 0x40000000, 0x0) socket$kcm(0xa, 0x1, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0xc, 0x0, 0x1, 0x8, 0x6, @broadcast}, 0x14) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)=ANY=[], 0xfdef) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="d48b4467190b556708"], 0x3c}}, 0x4c014) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000000c0)={'TPROXY\x00'}, &(0x7f0000000340)=0x1e) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adb7a888400000001400128000000000000000", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x44}}, 0x8000) 2.569403237s ago: executing program 5 (id=5204): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) (async, rerun: 32) r1 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000440)=0x8, 0x4) (async, rerun: 32) sendmsg$inet(r1, &(0x7f0000000700)={&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="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", 0xffe3}], 0x1, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @local}}}], 0x20}, 0x0) (rerun: 32) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async, rerun: 64) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1}, 0x0, &(0x7f00000002c0)}, 0xfffffffffffffea4) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000080)=0x80) (async) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000300)="80fd0fa67941", 0x6}], 0x1, 0x0, 0x0) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r3}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xda, 0xda, 0xa, [@struct={0x3, 0x3, 0x0, 0x4, 0x1, 0x1, [{0x5, 0x1, 0xc}, {0x20000c, 0x2, 0x40}, {0xd, 0x5}]}, @const={0x0, 0x0, 0x0, 0xa, 0x1}, @volatile={0x4, 0x0, 0x0, 0x9, 0x4}, @datasec={0x6, 0x2, 0x0, 0xf, 0x2, [{0x3, 0xe0, 0x5}, {0x4, 0x7fff, 0xfffffffd}], "7699"}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xf, 0x3}, {0x6, 0x4}, {0x8, 0x1}]}, @func={0x6, 0x0, 0x0, 0xc, 0x4}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x4f, 0x0, 0x1f, 0x7}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x20, 0x0, 0x45, 0x4}, @typedef={0xc}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x3}]}, {0x0, [0x61, 0x61, 0x0, 0x61, 0x5f, 0x5f, 0x30, 0x30]}}, &(0x7f0000000940)=""/213, 0xfe, 0xd5, 0x0, 0x7fb0, 0x10000, @value=r4}, 0x28) (async) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000480)=ANY=[@ANYBLOB="0c00000009000000080000000004000000020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500000000000400"/28], 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r5}, @call={0x85, 0x0, 0x0, 0x1f}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0x2f00, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) socketpair(0x6, 0x0, 0xffffffd6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)=@o_path={&(0x7f0000000240)='./file0\x00', r6, 0x4000, r7}, 0x18) (async, rerun: 64) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r8) sendmsg$IEEE802154_DISASSOCIATE_REQ(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x60) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000800c00028008000001000014bb0a0001"], 0x48}}, 0x0) (async, rerun: 64) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000304000000000000000100000300", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000006200028008004040bdf144ba"], 0x3c}}, 0x0) 2.186052232s ago: executing program 6 (id=5207): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00"], 0xfe33) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0xd, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000500)='GPL\x00', 0x4, 0x1008, &(0x7f0000001700)=""/4104}, 0x94) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x7, 0x4) 2.0634104s ago: executing program 7 (id=5209): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000000010000060a010400000000000000000100000008000b4000000000d8000480d40001800a0001006d61746368000000c400028008000240000000030e000100636f6e6e747261636b000000a8000300954e71e128424148363c42c69c1f5b30d090d958af3c97099d6af2550811c6c3e5852f945c80238cc4010adb1897a06f27b3b0ebe974221e691d0432fe7570b90d4c4f2f7da63b3affdf2c76fdc7126f53e014d95588a6e1fce700a52aed7767ee080f42c91b04fcf6567d4494ca80b062090416d5ec0f3dee6e295a7b446808208ef7ae04c36cf67189a0688bfd76d5a97a5baf7e177d4ed024b188100f5d0dea493a990900010073797a30"], 0x174}}, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r1, 0x0) (async) recvmmsg(r1, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) (async) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) (async) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) (async) listen(r4, 0x80) (async) accept$netrom(r4, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x922000000003, 0x11) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) 764.030918ms ago: executing program 7 (id=5210): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth0_virt_wifi\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x3, 0x8, 0xfffffffd, "050040010082"}}) (async) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000000)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="c5e7478621e3576e879973920c50492b60ce6b12498556934047aa01180eda6ac7647cdba01bc58f9217787d", 0x2c}], 0x1, &(0x7f0000000200)=[{0x108, 0x10d, 0x4, "4e27fc56c88cddccf589e9821c1c098d221a25e557f52311b9fe6dc886efa04e685fefe6357b8bfb389710804a925bf2ef1037626f30a4693aa39e122505bc63465f6ab565b9ae3aa3021c989e0e5f8018349970d5926c2ad6e56ee015399eada63ffd266cf6f16e2b5aa96697c0d01917c3d8e7e16368461baa920c07e1fcd8b0e45fa59a560145374e83ecc8c812924c1a8ac9d37ec35db82b84838bbd7050429134588d2fbfdc4566370e95e7301ef0ac78d89d40e072cf2e1b792f5550a5d5fe3e488d78f310dbe6ba98a4a9eea8749b8de999452032022a436a9f56744f6c84db60d538b74f619ca8beb75f4571ce2818"}, {0x68, 0x88, 0x4, "83459629e55df2dfe3409b42ee943a74771c32d966d6aa9e94e82bada59a03a7d76ec98634b591ac2e2bc1953b9582f9e53f7d0b81ecfbd93120b1b1ffb62989115df5b6c0722b9a8f0b0015a7afd9b7619f2450363c"}, {0x18, 0x115, 0x200, "a1fccd8ea4"}, {0x50, 0x109, 0x2, "9175fc61f6b52c20e4506a1d356d5a429c40ccd286756dc7fe611eb1d437b5bfac984a3654c3a5ed26f8ed149bea8018fbe35acba0e5174eb34d752c6c59c5"}], 0x1d8}, 0x0) 751.049552ms ago: executing program 0 (id=5211): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x64, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x4}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) socket$inet(0x2, 0x2, 0x1) (async) r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000500, 0x0, 0x0, 0x200000000530, 0x200000000560], 0x0, 0x0, &(0x7f0000000500)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0x7ffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) (async) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000500, 0x0, 0x0, 0x200000000530, 0x200000000560], 0x0, 0x0, &(0x7f0000000500)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0x7ffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) r1 = socket(0x10, 0x803, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 750.492152ms ago: executing program 7 (id=5212): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'pim6reg\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) 747.460349ms ago: executing program 8 (id=5213): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@local, @private0, @private2, 0x2, 0x1, 0x6, 0x0, 0x1}) shutdown(r0, 0x1) (async) ppoll(&(0x7f0000000140)=[{r0, 0x2400}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) r2 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, &(0x7f0000000100)) ioctl$int_in(r5, 0x5452, &(0x7f00000021c0)=0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0xffffffff, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x7, 0x2234, 0x7f, 0x81b, 0x800, 0x5, 0x5b8, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x5, 0x58b, 0x85a, 0x1003ff, 0x9, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xfffffffb, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x103, 0x100006, 0xd, 0xff, 0x4, 0x10000, 0x6, 0x6b7, 0x1ff, 0x4, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0x100, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x4, 0x6, 0x12a, 0x80000001, 0x7, 0x1d24, 0x2, 0x5, 0x1, 0x7f, 0xf, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x2000000, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x9, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x3e, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0xffffffff, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x70, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x9, 0x10001, 0x7, 0x7f, 0x5, 0x3, 0x200000a, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x89d1, 0xfca, 0x399d, 0x9, 0x8ab6, 0x18000, 0x9, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xef, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0xa, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x2007, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7e, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x4, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0xec2, 0x1, 0x80000008, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0x3, 0x5, 0x37f, 0x30, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x2004, 0x5, 0x7, 0x46, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x40006, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xfdc4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x2, 0x325, 0x8, 0x8, 0x4000000f, 0x8, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x1000092, 0x0, 0x7, 0x1, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x200101, 0xadd9, 0x1, 0x4, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x9, 0x4, 0x3, 0x40008, 0x7, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x8d7, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x101000, 0x7ff, 0x1, 0x1f6, 0x9, 0x7, 0x40000000, 0x5, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x5, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x5, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x5, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xc8, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x8, 0x0, 0x1ff, 0x4000003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xffffffec, 0x5, 0x0, 0xb9a6, 0x522, 0x101, 0x2, 0x900, 0x6, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dca, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xffe, 0x1, 0x89d, 0x8, 0x3, 0x710, 0xe, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x1, 0x5, 0x1, 0xdbe8, {0x8, 0x1, 0x8001, 0x5, 0x7, 0x9}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x8, 0xffffffff, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0) (async, rerun: 32) r6 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000000314010028bd7000f6dbdf250900020073797a31001800000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x810) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r7, @ANYBLOB="000000000000000018100000", @ANYRES32=r8, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async, rerun: 32) r10 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x50}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x44}}, 0x400c4) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r9, r13}, 0xc) (async) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xd}}, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r14}, 0x10) 746.642635ms ago: executing program 0 (id=5214): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @null}, [@bcast, @rose, @remote, @netrom, @remote, @null, @rose, @netrom]}, &(0x7f0000000080)=0x48, 0x800) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f00000001c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) 745.928408ms ago: executing program 8 (id=5215): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000007d9153625ca47ee000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000110500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000940), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) write$cgroup_int(r0, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001e00010a030000000000009b2d"], 0x28}}, 0x4040) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r7, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x6, 0x12, r7, 0xfffff000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r7, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r7, 0x2000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) 745.596304ms ago: executing program 8 (id=5216): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x18, 0x1411, 0x7, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}]}, 0x18}, 0x1, 0x0, 0x0, 0x404c000}, 0x804) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080)=0x5, 0x4) 743.606399ms ago: executing program 0 (id=5217): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000008b2f00001c00128009000100626f6e64000000000c00028008000500ffedffff08000300cf"], 0x44}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DONE(r2, 0x29, 0xc9, 0x0, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000140)={0x84, r3, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0x4e, 0x1, '\x03\xdf\xe4\xdd\x9en\xfa\x9er\xe4\x06^\x1d\xd0\xabL?\x17V\x84\x92\xfa\x01\x92%\xf4\xf5W$\xdb\xd9\xd7&H\x80\xef|\xefM\xa0\x8at\xe9G\xa3\x1c\xe6u\x0f\x9a\x05\xe4K\xd9]zn\xda\b;\xb4\x0e\xa3\xd6>\f\x00\x00\xdd\xd4\xa0\xc6\xf5\xe4'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x84}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r10) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r8) close(r2) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r10, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRESHEX=0x0, @ANYRESHEX=r7], 0x14}, 0x1, 0x0, 0x0, 0x400c084}, 0x8005) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="4d7e00000000000000002a00000008002f00000000c337246e643e108746132028d15970000500360008da00010c00050000ff010000", @ANYRES32=r12, @ANYBLOB="060006000300000006000400feff0000"], 0x50}, 0x4, 0x700000000000000}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)={0x14, r5, 0x300, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x402c0c0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r13, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r13, 0x6, 0x1d, &(0x7f00000004c0), &(0x7f0000000080)=0x14) r14 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272}) 743.09935ms ago: executing program 7 (id=5218): bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x4, 0x0, 0x5, "750538440ff92fe2aaf1beea7cedc151042cd9893bc31f80716a120d8be6d7f81cd81e960c000386e7255f0669b7401fcb8d69d00000d51de08a00ee1d9a27", 0x33}, 0x60) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) (async) socket(0x22, 0xa, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) (async) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f00000001c0)=0x10, 0x4) (async) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) (async) recvmmsg(r1, &(0x7f00000005c0), 0x6a, 0x12141, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71184e000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x2, 0x3, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2c}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc4}, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 742.20427ms ago: executing program 0 (id=5219): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000600000006000000004000000020000000000000c02000000000000000900000d000000000b000000000000000b000000040000000b0000000100000001000000050000001e0000000100000010000000030000000e00000003000000070000000400000000000000f700000000005f"], 0x0, 0x7c}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="200000001200010a0000e6ffffff000080a0bf20e230ffd1510c3ca95ab4c9f175814b9f92efe74cfe7e69e08fa8728d998f645cc964356515ce913f54ec90534e881ac2ebf53745a514cd920bcd71aa4dab1923e1685d04b9228340f51bba0ec832fef5"], 0x26}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000005c0)={'wg1\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r6, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000880)={0x0, r6}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x7, 0xd, 0x1, 0x20001, r1, 0x9, '\x00', r5, r6, 0x1, 0x0, 0x1}, 0x50) sendmsg$qrtr(r3, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x5, 0x9, 0x41, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x7, 0x80000001, 0x2}}) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0xfffffffc, 0x0, r8, 0x5, '\x00', r9, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r11}, 0x18) connect$inet6(r7, &(0x7f0000000800)={0xa, 0x4e24, 0xca, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfff}, 0x1c) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@cgroup=r10, 0xffffffffffffffff, 0xe, 0x201c, r7, @value=r4}, 0x20) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007ca20efff5a115001c00ff11142603600e12080005007a010401a80016002000034004000000035c0461c9c67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b3d7a37077646f948017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a56e2b0137bdfc65025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xd8}], 0x1}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000080000a3c000000120a010200000000000000000200000009000200737905000000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x5e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x10}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 646.423174ms ago: executing program 8 (id=5220): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000005000000020000000700000002000000", @ANYRES64=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000084521e430000000000000000"], 0x50) r2 = socket(0x40000000015, 0x5, 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x46, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x300, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x6}]}}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000580)={r4, 0xb, 0x20}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000005c0)={0x4, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}}, {{0x2, 0x4e20, @loopback}}}, 0x108) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}, {0x0, [0x0, 0x51]}}, 0x0, 0x40, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x10006, '\x00', 0x0, r6, 0x2, 0x3}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) 637.307824ms ago: executing program 5 (id=5221): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000200000000000000000000c0020000000ade2392ae30fb0e6e03204000000ddc6f14a1b1e9301da2cd9031fae240000000000000000000fa76a430c91720bd072ce452c31c857aab9", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000feffffff0000000000000000b7080000000000007b8af8ff00000000b7080000010000807b8af0ff00000000bfa100000000000007b8a771a7fc010000f8ffffffbfa400000000000007048000f0ffffffb702000008000000fd220000a00a4252c45129338251291b2163925ebb51ac39e340e5", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000090ffffff85000000a50000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 635.540034ms ago: executing program 6 (id=5222): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x2, @remote, 'ip6gretap0\x00'}}, 0x1e) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000080)=0x4, 0xfffffebd) (async) write$cgroup_int(r4, &(0x7f0000000080)=0x4, 0xfffffebd) sendfile(r3, r4, 0x0, 0x9) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @private0, 0x7}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x4, 0x0, 0x9, 0x900}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_INDEX={0x8, 0x2, 0x9}}}}]}, 0x38}}, 0x2000a080) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000286dd6018232500088800fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000010100000008"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000000)="b9ff03076003008cb89e08f086ddcef11086808ba3a1cc136e6931fe9ccb9db10495161309e01b6f48d9233fc814ff81feb4c3490f42", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000000)="b9ff03076003008cb89e08f086ddcef11086808ba3a1cc136e6931fe9ccb9db10495161309e01b6f48d9233fc814ff81feb4c3490f42", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) 633.594751ms ago: executing program 7 (id=5223): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000080)={r3, 0x1, 0x2}) (async) bind$x25(r2, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, 0x0, &(0x7f0000000300)) (async, rerun: 32) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r1) (async, rerun: 32) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) (async, rerun: 32) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @window={0x3, 0x0, 0x1}, @mss={0x2, 0x1}, @mss={0x2, 0x1}, @window, @timestamp, @window={0x3, 0xfff5, 0x8}, @timestamp], 0x8) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='cubic', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) (async) shutdown(r0, 0x1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000280)={0x0, 'vlan0\x00', {0x1}, 0x1}) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000540)={0x0, 0xcf, 0x2}, 0x8) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r7, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) 540.579274ms ago: executing program 0 (id=5224): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)={0x28, r3, 0x1, 0x1070bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4049}, 0x4c080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff7f00000000000000b703000000000000850000000600008095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x101, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x2}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r5, 0x0, 0xc9, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) 525.230525ms ago: executing program 5 (id=5225): socket$nl_route(0x10, 0x3, 0x0) 437.638247ms ago: executing program 6 (id=5226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000003780)=[{{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001740)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000001780)='\"', 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000200)=[{&(0x7f0000002540)="9d8bc2", 0x3}], 0x1}}], 0x3, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r3, 0xd}, 0x8) r4 = socket$unix(0x1, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r5}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) unshare(0x26020480) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$xdp(0x2c, 0x3, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000340)=r8, 0x4) sendmsg$inet(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x44000) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffe, 0x0, 0x20000000000000, 0x0, 0x400080000}, 0x0, &(0x7f0000000400)={0x3fd, 0x0, 0xfffffffffffffffe, 0x8000009, 0x8, 0x4c, 0x7fffffff, 0x3}, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001ac0)={r9, 0x0, 0x0}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x2, 0x2, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc040}, 0x4008000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) 343.661009ms ago: executing program 5 (id=5227): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x58) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) getsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000200), &(0x7f0000000280)=0x4) 0s ago: executing program 0 (id=5228): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f00000000c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x48}}, 0x0) kernel console output (not intermixed with test programs): 45.515016][T19900] chnl_net:caif_netlink_parms(): no params data found [ 445.794876][T19900] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.808033][T19900] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.815379][T19900] bridge_slave_0: entered allmulticast mode [ 445.823844][T19900] bridge_slave_0: entered promiscuous mode [ 445.856772][ T7346] netdevsim netdevsim8 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.900665][T19900] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.916687][T19900] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.924270][T19900] bridge_slave_1: entered allmulticast mode [ 445.933393][T19900] bridge_slave_1: entered promiscuous mode [ 446.054818][T19900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.081363][ T7346] netdevsim netdevsim8 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.110162][T19900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.286664][T17269] vlan3: left promiscuous mode [ 446.294629][T17269] bridge_slave_0: left promiscuous mode [ 446.301700][T17269] bridge0: port 3(vlan3) entered disabled state [ 446.328163][T17269] vlan4: left promiscuous mode [ 446.333447][T17269] bridge7: port 3(vlan4) entered disabled state [ 446.342734][T17269] veth0_to_bond: left allmulticast mode [ 446.365138][T17269] veth0_to_bond: left promiscuous mode [ 446.374726][T17269] bridge7: port 2(veth0_to_bond) entered disabled state [ 446.404931][T17269] veth1: left promiscuous mode [ 446.420406][T17269] bridge7: port 1(veth1) entered disabled state [ 446.939788][ T5148] Bluetooth: hci2: command tx timeout [ 446.984355][T17269] bond8 (unregistering): (slave gretap2): Releasing active interface [ 447.012997][T17269] bond11 (unregistering): (slave gretap3): Releasing active interface [ 447.088153][T17269] dvmrp0 (unregistering): left allmulticast mode [ 447.404985][T17269] bond8 (unregistering): (slave bridge5): Releasing active interface [ 447.682377][T17269] bond12 (unregistering): (slave bridge11): Releasing active interface [ 447.915197][T17269] bond0 (unregistering): Released all slaves [ 448.122503][T17269] bond1 (unregistering): Released all slaves [ 448.140358][T17269] bond2 (unregistering): Released all slaves [ 448.356066][T17269] bond3 (unregistering): Released all slaves [ 448.526777][T17269] bond4 (unregistering): Released all slaves [ 448.692059][T17269] bond5 (unregistering): Released all slaves [ 448.856496][T17269] bond6 (unregistering): Released all slaves [ 448.871174][T17269] bond7 (unregistering): Released all slaves [ 448.887083][T17269] bond8 (unregistering): Released all slaves [ 448.901394][T17269] bond9 (unregistering): Released all slaves [ 449.018913][ T5148] Bluetooth: hci2: command tx timeout [ 449.066700][T17269] bond10 (unregistering): Released all slaves [ 449.227835][T17269] bond11 (unregistering): Released all slaves [ 449.381051][T17269] bond12 (unregistering): Released all slaves [ 449.402159][ T7346] netdevsim netdevsim8 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.410717][ T7346] netdevsim netdevsim8 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.449648][T19900] team0: Port device team_slave_0 added [ 449.490090][T19900] team0: Port device team_slave_1 added [ 449.591483][T19980] netlink: 'syz.7.3780': attribute type 1 has an invalid length. [ 449.672122][T19980] 8021q: adding VLAN 0 to HW filter on device bond1 [ 449.709124][T19980] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3780'. [ 449.728146][T19900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.747968][T19900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.790389][T19900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.813970][T19900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.821931][T19900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.849256][T19900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.876374][T17269] tipc: Left network mode [ 450.184664][T19980] bond1 (unregistering): Released all slaves [ 450.243752][T20005] netlink: 'syz.0.3786': attribute type 11 has an invalid length. [ 450.268395][T20005] netlink: 199788 bytes leftover after parsing attributes in process `syz.0.3786'. [ 450.347988][T19900] hsr_slave_0: entered promiscuous mode [ 450.354734][T19900] hsr_slave_1: entered promiscuous mode [ 450.373028][T19900] debugfs: 'hsr0' already exists in 'hsr' [ 450.387281][T20011] netlink: 'syz.7.3788': attribute type 4 has an invalid length. [ 450.395247][T20009] netlink: 'syz.7.3788': attribute type 4 has an invalid length. [ 450.406766][T19900] Cannot create hsr debugfs directory [ 451.097921][ T5148] Bluetooth: hci2: command tx timeout [ 451.372189][T19900] netdevsim netdevsim8 eth20 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.420112][T20036] x_tables: ip_tables: osf match: only valid for protocol 6 [ 451.524960][T19900] netdevsim netdevsim8 eth19 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.639615][T14124] IPVS: starting estimator thread 0... [ 451.674663][T20044] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3799'. [ 451.701764][T19900] netdevsim netdevsim8 eth18 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.738402][T20048] IPVS: using max 33 ests per chain, 79200 per kthread [ 451.882757][T19900] netdevsim netdevsim8 eth17 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.110260][T20051] netlink: 'syz.6.3797': attribute type 30 has an invalid length. [ 452.210770][T20051] bond1: option arp_missed_max: invalid value (0) [ 452.218034][T20051] bond1: option arp_missed_max: allowed values 1 - 255 [ 452.226672][T20051] bond1 (unregistering): Released all slaves [ 452.251421][T20065] xt_CT: You must specify a L4 protocol and not use inversions on it [ 452.329877][T19900] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 452.354317][T20067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3804'. [ 452.371741][T19900] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 452.393546][T19900] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 452.465536][T19900] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 452.843766][T19900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.946180][T19900] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.959687][ T7346] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.966900][ T7346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.988676][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.995940][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.177446][ T5148] Bluetooth: hci2: command tx timeout [ 453.190786][T20084] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3807'. [ 453.397293][T17269] hsr_slave_0: left promiscuous mode [ 453.405992][T17269] hsr_slave_1: left promiscuous mode [ 453.425562][T20090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3808'. [ 455.015531][T20106] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3812'. [ 455.035755][T19900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.052536][T20106] netlink: 29 bytes leftover after parsing attributes in process `syz.6.3812'. [ 455.108038][T20106] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3812'. [ 455.126716][T20106] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3812'. [ 455.281288][T20125] netlink: 'syz.6.3816': attribute type 8 has an invalid length. [ 455.429679][T17269] IPVS: stop unused estimator thread 0... [ 455.705765][T20150] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3820'. [ 455.799302][T20148] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 455.894376][T20155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3818'. [ 456.042961][T19900] veth0_vlan: entered promiscuous mode [ 456.059503][T19900] veth1_vlan: entered promiscuous mode [ 456.098001][T19900] veth0_macvtap: entered promiscuous mode [ 456.108839][T19900] veth1_macvtap: entered promiscuous mode [ 456.130887][T19900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.154910][T19900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.199947][T20166] netlink: 6040 bytes leftover after parsing attributes in process `syz.6.3825'. [ 456.312699][ T1158] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.321684][ T1158] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.365177][ T1158] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.378529][ T1158] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.756466][ T7346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.767936][ T7346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.000559][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.022814][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.918727][T20231] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3846'. [ 457.929019][T20233] netlink: 'syz.0.3849': attribute type 1 has an invalid length. [ 457.942364][T20236] netlink: 92 bytes leftover after parsing attributes in process `syz.7.3848'. [ 457.967571][T20233] 8021q: adding VLAN 0 to HW filter on device bond4 [ 457.998723][T20235] 8021q: adding VLAN 0 to HW filter on device bond4 [ 458.005954][T20235] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 458.018124][T20235] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 458.084950][T20233] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 458.095951][T20233] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 458.933744][T20246] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 459.294808][T20313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3869'. [ 459.328722][T20313] netlink: 'syz.0.3869': attribute type 2 has an invalid length. [ 459.353104][T20313] : entered promiscuous mode [ 459.418148][T20323] netlink: 'syz.7.3875': attribute type 9 has an invalid length. [ 459.426969][T20323] netlink: 'syz.7.3875': attribute type 7 has an invalid length. [ 459.435073][T20323] netlink: 'syz.7.3875': attribute type 8 has an invalid length. [ 460.019834][T20344] bridge_slave_0: left allmulticast mode [ 460.037230][T20344] bridge_slave_0: left promiscuous mode [ 460.043060][T20344] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.068625][T20345] netlink: 'syz.6.3880': attribute type 10 has an invalid length. [ 460.119615][T20344] bridge_slave_1: left allmulticast mode [ 460.149058][T20344] bridge_slave_1: left promiscuous mode [ 460.154954][T20344] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.199805][T20344] bond0: (slave bond_slave_0): Releasing backup interface [ 460.248232][T20344] bond0: (slave bond_slave_1): Releasing backup interface [ 460.271259][T20344] team0: Port device team_slave_0 removed [ 460.305825][T20344] team0: Port device team_slave_1 removed [ 460.313313][T20344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.322647][T20344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.332521][T20344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.341794][T20344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.352116][T20344] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 460.381365][T20345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.393027][T20345] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 460.693931][T20378] __nla_validate_parse: 2 callbacks suppressed [ 460.693950][T20378] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3890'. [ 460.783043][T20383] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3890'. [ 460.885834][T20391] tipc: Enabled bearer , priority 0 [ 460.914745][T20390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3891'. [ 460.934439][T20390] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3891'. [ 460.957958][T20390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3891'. [ 460.973905][T20391] tipc: Disabling bearer [ 460.982998][T20390] netlink: 'syz.0.3891': attribute type 5 has an invalid length. [ 461.104206][T20402] xt_hashlimit: size too large, truncated to 1048576 [ 461.172556][T20402] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 461.442209][T20395] bridge1: left allmulticast mode [ 461.552141][T20413] syzkaller1: entered promiscuous mode [ 461.564726][T20413] syzkaller1: entered allmulticast mode [ 461.579349][ T1158] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.609393][ T1158] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.651528][ T1158] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.677962][ T1158] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.756418][T20421] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3900'. [ 461.780277][T20424] syzkaller0: entered promiscuous mode [ 461.786155][T20424] syzkaller0: entered allmulticast mode [ 462.075314][T20444] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3904'. [ 462.114895][T20446] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 462.165536][T20449] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3905'. [ 462.287443][T20460] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3909'. [ 462.370953][T20454] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3906'. [ 462.607747][T20485] tipc: Started in network mode [ 462.612747][T20485] tipc: Node identity 1a246579e696, cluster identity 4711 [ 462.626858][T20485] tipc: Enabled bearer , priority 0 [ 462.669875][T20485] syzkaller0: entered promiscuous mode [ 462.675449][T20485] syzkaller0: entered allmulticast mode [ 462.871394][T20485] tipc: Resetting bearer [ 462.908200][T20484] tipc: Resetting bearer [ 462.931930][T20484] tipc: Disabling bearer [ 463.202101][T20480] netlink: 'syz.8.3914': attribute type 6 has an invalid length. [ 463.442032][T20513] netlink: 'syz.0.3923': attribute type 11 has an invalid length. [ 464.056688][T20546] 0X: renamed from caif0 [ 464.073534][T20546] 0X: entered allmulticast mode [ 464.098300][T20546] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 465.466143][T20607] netlink: 'syz.6.3948': attribute type 6 has an invalid length. [ 465.475292][T20601] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 465.476861][T20600] syzkaller1: entered promiscuous mode [ 465.482653][T20601] IPv6: NLM_F_CREATE should be set when creating new route [ 465.482764][T20601] IPv6: NLM_F_CREATE should be set when creating new route [ 465.521757][T20600] syzkaller1: entered allmulticast mode [ 465.617954][T20623] netlink: 'syz.0.3951': attribute type 2 has an invalid length. [ 465.633511][T20623] netlink: 'syz.0.3951': attribute type 1 has an invalid length. [ 465.930895][T20618] __nla_validate_parse: 10 callbacks suppressed [ 465.930914][T20618] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3950'. [ 465.976985][T20618] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3950'. [ 465.978698][T20641] sch_tbf: burst 2 is lower than device tunl0 mtu (1480) ! [ 466.308948][T20650] IPv6: NLM_F_CREATE should be specified when creating new route [ 466.429295][T20663] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3964'. [ 466.513595][T20667] netlink: 'syz.7.3966': attribute type 1 has an invalid length. [ 466.602981][T20667] 8021q: adding VLAN 0 to HW filter on device bond1 [ 467.123914][T20698] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3972'. [ 467.133222][T20698] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3972'. [ 467.619147][T20720] nbd: must specify a size in bytes for the device [ 467.691668][T20723] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3982'. [ 467.760958][T20724] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3979'. [ 467.784744][T20724] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3979'. [ 467.829350][T20725] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3982'. [ 467.983626][T20725] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3982'. [ 468.174092][T20738] netlink: 'syz.8.3986': attribute type 9 has an invalid length. [ 468.191136][T20739] lo: entered allmulticast mode [ 468.217216][T20738] hsr0: entered promiscuous mode [ 468.222693][T20738] macvlan2: entered promiscuous mode [ 468.234563][T20738] macvlan2: entered allmulticast mode [ 468.240208][T20738] hsr0: entered allmulticast mode [ 468.245561][T20738] hsr_slave_0: entered allmulticast mode [ 468.252796][T20738] hsr_slave_1: entered allmulticast mode [ 468.271125][ T1158] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.280296][ T1158] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.300818][ T1158] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.317334][ T1158] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.335718][T20738] lo: left allmulticast mode [ 468.586804][T20755] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.729429][T20753] syz_tun: entered promiscuous mode [ 468.734831][T20753] macvtap1: entered promiscuous mode [ 468.784239][T20755] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.811175][T14124] IPVS: starting estimator thread 0... [ 468.895569][T20770] ip6t_rpfilter: unknown options [ 468.907247][T20771] IPVS: using max 32 ests per chain, 76800 per kthread [ 468.943002][T20755] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.063035][T20755] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.185403][ T9698] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.211244][T17269] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.256403][ T9696] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.295130][ T9698] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.493668][T20800] netlink: 'syz.7.4004': attribute type 13 has an invalid length. [ 469.838050][T20811] bridge_slave_0: left allmulticast mode [ 469.844097][T20811] bridge_slave_0: left promiscuous mode [ 469.852317][T20811] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.916149][T20811] bridge_slave_1: left allmulticast mode [ 469.925143][T20811] bridge_slave_1: left promiscuous mode [ 469.936963][T20811] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.991363][T20822] netlink: 'syz.5.4008': attribute type 10 has an invalid length. [ 470.005784][T20811] bond0: (slave bond_slave_0): Releasing backup interface [ 470.119636][T20811] bond0: (slave bond_slave_1): Releasing backup interface [ 470.138698][T20811] `: Port device team_slave_0 removed [ 470.191234][T20811] `: Port device team_slave_1 removed [ 470.205271][T20811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.213771][T20811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.229392][T20811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.237085][T20811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.246689][T20811] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 470.276973][T20822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.333459][T20822] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 470.443993][T20836] syzkaller1: entered promiscuous mode [ 470.450350][T20836] syzkaller1: entered allmulticast mode [ 471.465150][T20861] tipc: Enabled bearer , priority 0 [ 471.545406][T20864] netlink: 'syz.5.4022': attribute type 83 has an invalid length. [ 471.623515][T20869] netlink: 'syz.5.4023': attribute type 3 has an invalid length. [ 471.632004][T20869] __nla_validate_parse: 5 callbacks suppressed [ 471.632023][T20869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4023'. [ 471.713822][T20872] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4024'. [ 471.754358][T20872] vlan0: entered allmulticast mode [ 471.760172][T20872] bridge0: entered allmulticast mode [ 471.765972][T20872] bridge2: port 1(vlan0) entered blocking state [ 471.774406][T20872] bridge2: port 1(vlan0) entered disabled state [ 471.784463][T20872] vlan0: entered promiscuous mode [ 471.789749][T20872] bridge0: entered promiscuous mode [ 471.804870][T20872] mac80211_hwsim hwsim25 wlan0: entered allmulticast mode [ 472.137870][T20880] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4027'. [ 472.247033][T20888] hsr0: entered allmulticast mode [ 472.252682][T20888] hsr_slave_0: entered allmulticast mode [ 472.258720][T20888] hsr_slave_1: entered allmulticast mode [ 472.313278][T20890] hsr_slave_0: left promiscuous mode [ 472.318240][T20892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.329739][T20890] hsr_slave_1: left promiscuous mode [ 472.354471][T20890] hsr0 (unregistering): left allmulticast mode [ 472.753976][T20894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4030'. [ 472.770303][T20899] bond6: option lacp_rate: invalid value (255) [ 472.787479][T20899] bond6 (unregistering): Released all slaves [ 472.804271][T20895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4030'. [ 473.195026][T20909] syzkaller0: entered promiscuous mode [ 473.200720][T20909] syzkaller0: entered allmulticast mode [ 473.224431][T20909] tipc: Enabled bearer , priority 0 [ 473.233560][T20908] tipc: Resetting bearer [ 473.256164][T20908] tipc: Disabling bearer [ 474.249304][T20934] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4041'. [ 474.345289][T20942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4043'. [ 474.539941][T20946] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4045'. [ 474.549101][T20946] netlink: 43 bytes leftover after parsing attributes in process `syz.7.4045'. [ 474.558300][T20946] netlink: 'syz.7.4045': attribute type 5 has an invalid length. [ 474.579021][T20946] netlink: 43 bytes leftover after parsing attributes in process `syz.7.4045'. [ 474.604439][T20946] tipc: Started in network mode [ 474.609642][T20946] tipc: Node identity 02d65ef2081, cluster identity 4711 [ 474.617048][T20946] tipc: Enabled bearer , priority 0 [ 474.626676][T20946] syzkaller0: entered promiscuous mode [ 474.632510][T20946] syzkaller0: entered allmulticast mode [ 474.659888][T20946] openvswitch: netlink: Message has 4 unknown bytes. [ 474.685995][T20946] tipc: Resetting bearer [ 474.699395][T20945] tipc: Resetting bearer [ 474.744129][T20945] tipc: Disabling bearer [ 474.856169][T20963] netlink: 'syz.0.4048': attribute type 15 has an invalid length. [ 474.871034][T20964] wg1 speed is unknown, defaulting to 1000 [ 474.876974][T20964] wg1 speed is unknown, defaulting to 1000 [ 474.895011][T20964] wg1 speed is unknown, defaulting to 1000 [ 474.911503][T20958] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 474.915301][T20964] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 474.982901][T20964] wg1 speed is unknown, defaulting to 1000 [ 474.990649][T20964] wg1 speed is unknown, defaulting to 1000 [ 474.999621][T20964] wg1 speed is unknown, defaulting to 1000 [ 475.014779][T20964] wg1 speed is unknown, defaulting to 1000 [ 475.029218][T20964] wg1 speed is unknown, defaulting to 1000 [ 475.260476][T20993] wg1 speed is unknown, defaulting to 1000 [ 475.291608][T20994] netlink: 'syz.5.4054': attribute type 13 has an invalid length. [ 475.300178][T20994] netlink: 'syz.5.4054': attribute type 17 has an invalid length. [ 475.404768][T20994] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 475.438036][T20998] wg1 speed is unknown, defaulting to 1000 [ 475.940386][T21023] netlink: 'syz.7.4062': attribute type 1 has an invalid length. [ 476.068330][T21027] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 476.093564][T21027] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 476.145791][T21023] bond2: (slave bridge3): Enslaving as an active interface with a down link [ 476.184419][T21028] gretap1: entered promiscuous mode [ 476.190025][T21028] gretap1: entered allmulticast mode [ 476.200561][T21028] bond2: (slave gretap1): making interface the new active one [ 476.212103][T21028] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 476.449680][T21032] wg1 speed is unknown, defaulting to 1000 [ 476.927446][T21032] __nla_validate_parse: 3 callbacks suppressed [ 476.927465][T21032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4063'. [ 476.952996][T21032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4063'. [ 476.989471][T21067] netlink: 'syz.5.4076': attribute type 11 has an invalid length. [ 477.603873][T21095] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4083'. [ 477.673360][T21095] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4083'. [ 477.754306][T21087] wg1 speed is unknown, defaulting to 1000 [ 478.474623][T21145] wg1 speed is unknown, defaulting to 1000 [ 478.842772][T21159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4102'. [ 478.973436][T21169] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4104'. [ 478.985906][T21169] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4104'. [ 479.085054][T21173] wg1 speed is unknown, defaulting to 1000 [ 479.172537][T21179] netlink: 'syz.8.4108': attribute type 10 has an invalid length. [ 479.187782][T21179] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4108'. [ 479.389912][T21179] team0: Port device geneve0 added [ 479.647043][T21204] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4114'. [ 479.711524][T21206] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.922652][T21206] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.065538][T21230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4121'. [ 480.145876][T21206] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.406603][T21237] xt_limit: Overflow, try lower: 271964/0 [ 480.461132][T21230] bridge_slave_1: left allmulticast mode [ 480.467429][T21230] bridge_slave_1: left promiscuous mode [ 480.473348][T21230] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.485055][T21230] bridge_slave_0: left allmulticast mode [ 480.491262][T21230] bridge_slave_0: left promiscuous mode [ 480.498527][T21230] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.769274][T21206] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.860475][T21245] gre1: entered allmulticast mode [ 480.997049][ T7346] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.021807][ T7346] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.066342][T21262] bridge0: entered allmulticast mode [ 481.133010][ T9698] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.210548][ T7346] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.443601][T21290] tipc: Enabled bearer , priority 0 [ 481.454040][T21290] syzkaller0: entered promiscuous mode [ 481.460872][T21290] syzkaller0: entered allmulticast mode [ 481.544472][T21290] tipc: Resetting bearer [ 481.550676][T21290] syzkaller0: tun_net_xmit 90 [ 481.565146][T21288] tipc: Resetting bearer [ 481.635669][T21288] tipc: Disabling bearer [ 481.805439][T21301] netlink: 'syz.0.4143': attribute type 4 has an invalid length. [ 482.145918][T21319] netlink: 'syz.5.4142': attribute type 1 has an invalid length. [ 482.154791][T21319] netlink: 'syz.5.4142': attribute type 3 has an invalid length. [ 482.163089][T21319] __nla_validate_parse: 4 callbacks suppressed [ 482.163107][T21319] netlink: 172 bytes leftover after parsing attributes in process `syz.5.4142'. [ 482.189676][T21319] NCSI netlink: No device for ifindex 813332851 [ 482.366499][T21321] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.490000][T21321] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.554147][T21336] netdevsim netdevsim7: Direct firmware load for failed with error -2 [ 482.585236][T21336] netdevsim netdevsim7: Falling back to sysfs fallback for: [ 482.632331][T21321] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.700934][T21339] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4151'. [ 482.785518][T21321] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.867774][T21340] batadv0: entered promiscuous mode [ 482.873639][T21340] macvtap0: entered promiscuous mode [ 482.881037][T21340] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 482.924847][T21340] batadv0: left promiscuous mode [ 482.968434][T21348] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4153'. [ 483.053677][ T9698] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.104063][ T9698] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.118411][ T9698] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.146570][ T9698] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.183661][T18382] Bluetooth: hci1: command 0x0405 tx timeout [ 483.201961][T21356] wg1 speed is unknown, defaulting to 1000 [ 483.476549][T21384] netlink: 'syz.8.4165': attribute type 1 has an invalid length. [ 483.486854][T21385] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4165'. [ 483.551990][T21384] 8021q: adding VLAN 0 to HW filter on device bond2 [ 483.612431][T21398] xt_hashlimit: size too large, truncated to 1048576 [ 483.887084][T21418] wg1 speed is unknown, defaulting to 1000 [ 484.296315][T21437] netlink: 'syz.8.4175': attribute type 21 has an invalid length. [ 484.310399][T21437] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4175'. [ 484.640350][T21444] netlink: 'syz.0.4177': attribute type 25 has an invalid length. [ 484.672615][T21448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.695220][T21449] bridge0: entered promiscuous mode [ 484.742725][T21449] bridge0: port 1(macvtap1) entered blocking state [ 484.749963][T21449] bridge0: port 1(macvtap1) entered disabled state [ 484.756970][T21449] macvtap1: entered allmulticast mode [ 484.762827][T21449] bridge0: entered allmulticast mode [ 484.782020][T21449] macvtap1: left allmulticast mode [ 484.787572][T21449] bridge0: left allmulticast mode [ 484.794297][T21449] bridge0: left promiscuous mode [ 485.066560][T21466] wg1 speed is unknown, defaulting to 1000 [ 485.675147][T21489] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4189'. [ 485.710696][T21490] wg1 speed is unknown, defaulting to 1000 [ 485.713840][T21491] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4189'. [ 485.729489][T21491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4189'. [ 486.212191][T21496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4190'. [ 486.262421][T21501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4190'. [ 486.505375][T21513] netlink: 'syz.0.4194': attribute type 27 has an invalid length. [ 486.688976][T21513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.703290][T21513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.866821][T21517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.887199][T21517] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.899804][T21517] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 486.939277][ T7346] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.956172][ T7346] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.001836][ T7346] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.012863][ T7346] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.022896][ T7346] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.031948][ T7346] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.062913][ T7346] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.073785][ T7346] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.199295][T21550] __nla_validate_parse: 2 callbacks suppressed [ 487.199313][T21550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4201'. [ 487.322249][T21548] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4204'. [ 487.703260][T21573] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4211'. [ 487.993482][T21587] netlink: 'syz.8.4216': attribute type 10 has an invalid length. [ 488.020208][T21587] team0: Cannot enslave team device to itself [ 488.058558][T21596] xt_addrtype: ipv6 does not support BROADCAST matching [ 488.151321][T21599] netlink: 'syz.5.4213': attribute type 29 has an invalid length. [ 488.178063][T21599] netlink: 'syz.5.4213': attribute type 29 has an invalid length. [ 488.199847][T21604] tipc: Enabled bearer , priority 0 [ 488.261040][T21599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.275255][T21604] syzkaller0: entered promiscuous mode [ 488.317350][T21604] syzkaller0: entered allmulticast mode [ 488.483912][T21620] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4224'. [ 490.880698][T21598] tipc: Resetting bearer [ 490.919777][T21598] tipc: Disabling bearer [ 490.942862][T14124] tipc: Node number set to 180772594 [ 491.207595][T21645] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4231'. [ 491.748335][T21679] sctp: [Deprecated]: syz.7.4238 (pid 21679) Use of int in maxseg socket option. [ 491.748335][T21679] Use struct sctp_assoc_value instead [ 491.773488][T21663] syzkaller0: entered promiscuous mode [ 491.779510][T21663] syzkaller0: entered allmulticast mode [ 491.912065][T21684] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4239'. [ 494.580606][T21703] netlink: 'syz.6.4243': attribute type 12 has an invalid length. [ 494.591995][T21703] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4243'. [ 494.602996][T21703] netlink: 'syz.6.4243': attribute type 4 has an invalid length. [ 494.644207][T21692] wg1 speed is unknown, defaulting to 1000 [ 494.898869][T21723] geneve2: entered promiscuous mode [ 494.931059][ T7346] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.940872][ T7346] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.958026][ T7346] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.967049][ T7346] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.073339][T21730] netlink: 'syz.0.4252': attribute type 11 has an invalid length. [ 495.085988][T21727] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 495.094987][T21727] syzkaller1: Linktype set failed because interface is up [ 495.312671][T21738] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 495.349236][T21740] netlink: 'syz.7.4256': attribute type 1 has an invalid length. [ 495.467750][T21742] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4256'. [ 495.479408][T21740] bond3: entered promiscuous mode [ 495.484546][T21740] bond3: entered allmulticast mode [ 495.496022][T21742] bond3: left promiscuous mode [ 495.502037][T21742] bond3: left allmulticast mode [ 495.511829][T21742] 8021q: adding VLAN 0 to HW filter on device bond3 [ 495.544519][T21744] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.582689][T21746] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4258'. [ 495.665553][T21744] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.744394][T21744] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.826403][T21744] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.029573][ T1158] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.051060][T21760] wg1 speed is unknown, defaulting to 1000 [ 496.064945][ T1158] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.145499][ T1158] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.209541][ T9693] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.361161][T21775] netlink: 'syz.0.4267': attribute type 1 has an invalid length. [ 496.371659][T21767] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4262'. [ 496.381451][T21767] unsupported nlmsg_type 40 [ 496.388351][T21775] netlink: 'syz.0.4267': attribute type 2 has an invalid length. [ 496.530935][T21777] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 496.571083][T21782] netlink: 'syz.0.4270': attribute type 1 has an invalid length. [ 496.580676][T21777] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 496.598913][T21782] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4270'. [ 496.608374][T21781] netlink: 'syz.5.4262': attribute type 1 has an invalid length. [ 496.643057][T21781] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4262'. [ 496.937687][T21803] netlink: 'syz.7.4274': attribute type 1 has an invalid length. [ 497.025153][T21807] netlink: 'syz.0.4275': attribute type 1 has an invalid length. [ 497.062547][T21808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4275'. [ 497.105940][T21807] bond5: entered promiscuous mode [ 497.111142][T21807] bond5: entered allmulticast mode [ 497.116991][T21807] 8021q: adding VLAN 0 to HW filter on device bond5 [ 497.152028][T21807] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4275'. [ 497.292847][T21820] xt_TCPMSS: Only works on TCP SYN packets [ 497.300563][T21820] netlink: 'syz.8.4278': attribute type 8 has an invalid length. [ 497.346457][T21823] wg1 speed is unknown, defaulting to 1000 [ 497.544612][T21831] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4282'. [ 497.605195][T21838] xt_hashlimit: max too large, truncated to 1048576 [ 497.636599][T21838] xt_bpf: check failed: parse error [ 497.841253][T21846] wg1 speed is unknown, defaulting to 1000 [ 497.894349][T21849] dvmrp1: entered allmulticast mode [ 498.257457][T21869] netlink: 56 bytes leftover after parsing attributes in process `syz.8.4290'. [ 498.618141][T21879] vlan2: entered promiscuous mode [ 498.623586][T21879] vlan2: entered allmulticast mode [ 498.653777][T21883] x9: renamed from bridge_slave_0 (while UP) [ 498.872190][T21897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 499.274702][T21923] wg1 speed is unknown, defaulting to 1000 [ 499.480701][T21934] veth0: entered promiscuous mode [ 499.489745][T21933] veth0: left promiscuous mode [ 499.742253][T21966] batadv_slave_1: entered promiscuous mode [ 499.759736][T21958] __nla_validate_parse: 25 callbacks suppressed [ 499.759756][T21958] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4319'. [ 499.776311][T21967] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4317'. [ 499.793899][T21967] wg1: entered promiscuous mode [ 499.798944][T21967] wg1: entered allmulticast mode [ 499.807043][T21958] netdevsim0: renamed from veth0_to_team [ 499.816270][T21969] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4321'. [ 499.816418][T21958] netdevsim0: entered promiscuous mode [ 499.826092][T21969] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4321'. [ 499.848232][T21969] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 499.859444][T21969] ip6gretap1: entered allmulticast mode [ 499.884286][T21958] wg1 speed is unknown, defaulting to 1000 [ 499.925294][T21973] validate_nla: 5 callbacks suppressed [ 499.925312][T21973] netlink: 'syz.8.4322': attribute type 7 has an invalid length. [ 500.124960][T21983] netlink: 'syz.8.4324': attribute type 4 has an invalid length. [ 500.263073][T21988] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4325'. [ 500.500425][T21951] batadv_slave_1: left promiscuous mode [ 500.620997][T22015] smc: net device geneve0 erased user defined pnetid SYZ0 [ 500.821737][T22021] wg1 speed is unknown, defaulting to 1000 [ 501.248034][T22044] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 501.280612][T22045] tipc: Enabled bearer , priority 0 [ 501.304351][T22045] syzkaller0: entered promiscuous mode [ 501.310001][T22045] syzkaller0: entered allmulticast mode [ 501.325219][T22045] tipc: Resetting bearer [ 501.339793][T22042] tipc: Resetting bearer [ 501.389505][T22042] tipc: Disabling bearer [ 501.425624][T22054] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4333'. [ 501.631668][T22054] macvtap1: entered promiscuous mode [ 501.645806][T22054] `: entered promiscuous mode [ 501.654072][T22054] macvtap1: entered allmulticast mode [ 501.727720][T22054] `: entered allmulticast mode [ 501.733052][T22054] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 501.760176][T22057] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 501.861762][T22067] macvtap1: left promiscuous mode [ 501.866974][T22067] `: left promiscuous mode [ 501.873330][T22067] macvtap1: left allmulticast mode [ 501.894868][T22067] `: left allmulticast mode [ 501.927329][T22080] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4341'. [ 502.283060][T22103] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4346'. [ 502.326145][T22116] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4348'. [ 502.562680][T22129] netlink: 260 bytes leftover after parsing attributes in process `syz.7.4355'. [ 502.741599][T22129] wg1 speed is unknown, defaulting to 1000 [ 502.770903][T22134] wg1 speed is unknown, defaulting to 1000 [ 502.952393][ T30] audit: type=1800 audit(1763159601.986:6): pid=22131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4354" name="cgroup.controllers" dev="tmpfs" ino=577 res=0 errno=0 [ 503.051543][T22142] wg1 speed is unknown, defaulting to 1000 [ 503.258023][T22150] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20001 [ 503.474748][T22152] wg1 speed is unknown, defaulting to 1000 [ 504.070614][T22166] wg1 speed is unknown, defaulting to 1000 [ 504.541116][T22186] syz_tun: entered allmulticast mode [ 504.567386][T22184] syz_tun: left allmulticast mode [ 504.732460][T22198] netlink: 'syz.8.4368': attribute type 1 has an invalid length. [ 504.903943][T22201] __nla_validate_parse: 9 callbacks suppressed [ 504.903961][T22201] netlink: 172 bytes leftover after parsing attributes in process `syz.7.4370'. [ 504.938346][T22201] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 505.034054][T22203] wg1 speed is unknown, defaulting to 1000 [ 505.054221][T22206] netlink: 'syz.8.4371': attribute type 8 has an invalid length. [ 505.096245][T22205] wg1 speed is unknown, defaulting to 1000 [ 505.154051][T22206] wg1 speed is unknown, defaulting to 1000 [ 505.499867][T22219] netlink: 'syz.8.4373': attribute type 27 has an invalid length. [ 505.628688][T22224] FAULT_INJECTION: forcing a failure. [ 505.628688][T22224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.647621][T22224] CPU: 0 UID: 0 PID: 22224 Comm: syz.7.4377 Not tainted syzkaller #0 PREEMPT(full) [ 505.647648][T22224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 505.647658][T22224] Call Trace: [ 505.647666][T22224] [ 505.647673][T22224] dump_stack_lvl+0x189/0x250 [ 505.647701][T22224] ? __pfx____ratelimit+0x10/0x10 [ 505.647727][T22224] ? __pfx_dump_stack_lvl+0x10/0x10 [ 505.647757][T22224] ? __pfx__printk+0x10/0x10 [ 505.647773][T22224] ? __might_fault+0xb0/0x130 [ 505.647805][T22224] should_fail_ex+0x414/0x560 [ 505.647833][T22224] _copy_from_user+0x2d/0xb0 [ 505.647853][T22224] ___sys_sendmsg+0x158/0x2a0 [ 505.647874][T22224] ? __pfx____sys_sendmsg+0x10/0x10 [ 505.647921][T22224] ? __fget_files+0x2a/0x420 [ 505.647936][T22224] ? __fget_files+0x3a0/0x420 [ 505.647959][T22224] __x64_sys_sendmsg+0x19b/0x260 [ 505.647981][T22224] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 505.648008][T22224] ? __pfx_ksys_write+0x10/0x10 [ 505.648033][T22224] ? do_syscall_64+0xbe/0xfa0 [ 505.648054][T22224] do_syscall_64+0xfa/0xfa0 [ 505.648069][T22224] ? lockdep_hardirqs_on+0x9c/0x150 [ 505.648086][T22224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.648102][T22224] ? clear_bhb_loop+0x60/0xb0 [ 505.648123][T22224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.648139][T22224] RIP: 0033:0x7f5f7558f6c9 [ 505.648155][T22224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.648169][T22224] RSP: 002b:00007f5f763b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.648188][T22224] RAX: ffffffffffffffda RBX: 00007f5f757e5fa0 RCX: 00007f5f7558f6c9 [ 505.648199][T22224] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000003 [ 505.648210][T22224] RBP: 00007f5f763b1090 R08: 0000000000000000 R09: 0000000000000000 [ 505.648221][T22224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.648230][T22224] R13: 00007f5f757e6038 R14: 00007f5f757e5fa0 R15: 00007ffec6316378 [ 505.648256][T22224] [ 505.924703][T22219] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.932557][T22219] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.013871][T22219] 0X: left allmulticast mode [ 506.144146][T22219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.162778][T22219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.417891][T22219] hsr0: left allmulticast mode [ 506.422702][T22219] hsr_slave_0: left allmulticast mode [ 506.431058][T22219] macvlan2: left promiscuous mode [ 506.436289][T22219] macvlan2: left allmulticast mode [ 506.448901][T22219] macvtap1: left promiscuous mode [ 506.502581][T22219] vlan2: left promiscuous mode [ 506.509544][T22219] vlan2: left allmulticast mode [ 506.514530][T22219] hsr_slave_1: left allmulticast mode [ 506.521326][T22219] ip6gretap1: left allmulticast mode [ 506.575459][T22222] syz_tun: left promiscuous mode [ 506.602744][T22222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.612345][T22222] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.623500][T22222] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 506.666141][T22226] bridge1: entered promiscuous mode [ 506.676730][T22226] bridge1: entered allmulticast mode [ 506.691089][ T5892] wg1 speed is unknown, defaulting to 1000 [ 506.696952][ T5892] syz0: Port: 1 Link DOWN [ 506.710009][ T9696] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.727378][ T9696] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.735791][ T9696] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.864858][T22236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.891456][ T9696] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.930211][T22245] wg1 speed is unknown, defaulting to 1000 [ 507.550669][T22256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4384'. [ 507.591905][ T7342] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.600461][T22256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4384'. [ 507.601917][T22259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4384'. [ 507.610453][ T7342] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.631109][ T7342] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.641467][ T7342] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.040569][T22282] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4394'. [ 508.294724][T22294] netlink: 'syz.7.4396': attribute type 10 has an invalid length. [ 508.849175][T22304] netlink: 'syz.7.4401': attribute type 4 has an invalid length. [ 509.085588][T22311] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4404'. [ 509.512802][T22303] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 509.681967][T22334] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4409'. [ 510.053664][T22313] wg1 speed is unknown, defaulting to 1000 [ 510.786668][T22358] wg1 speed is unknown, defaulting to 1000 [ 510.823222][T22361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4418'. [ 510.842348][T22354] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20000 [ 511.025148][T22368] netdevsim0: entered allmulticast mode [ 511.034640][T22368] siw: device registration error -23 [ 511.065635][T22368] xt_TCPMSS: Only works on TCP SYN packets [ 511.316955][T22381] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4424'. [ 511.492612][T22389] sch_fq: defrate 4294967293 ignored. [ 511.644702][T22396] wg1 speed is unknown, defaulting to 1000 [ 511.724067][T22399] wg1 speed is unknown, defaulting to 1000 [ 511.791526][T22401] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4430'. [ 512.430044][T22424] wg1 speed is unknown, defaulting to 1000 [ 512.473191][T22396] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4428'. [ 512.630818][T22420] bond3: ARP target 9.0.0.0 is already present [ 512.635022][T22429] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4435'. [ 512.640965][T22420] bond3: option arp_ip_target: invalid value (9) [ 512.656013][T22420] bond3 (unregistering): Released all slaves [ 512.840110][T22452] tipc: Resetting bearer [ 512.851542][T22452] syzkaller0: entered allmulticast mode [ 513.531630][T22470] netlink: 'syz.6.4444': attribute type 1 has an invalid length. [ 513.550258][T22470] netlink: 232 bytes leftover after parsing attributes in process `syz.6.4444'. [ 513.674412][T22481] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4447'. [ 513.718045][T22480] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4448'. [ 513.809342][T22483] wg1 speed is unknown, defaulting to 1000 [ 513.866633][T22495] netlink: 'syz.7.4453': attribute type 1 has an invalid length. [ 513.923555][T22499] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4455'. [ 513.988832][T22495] netlink: 1 bytes leftover after parsing attributes in process `syz.7.4453'. [ 514.083626][T22504] smc: net device geneve0 applied user defined pnetid SYZ0 [ 514.350027][T22523] wg1 speed is unknown, defaulting to 1000 [ 514.385640][T22526] wg1 speed is unknown, defaulting to 1000 [ 514.550805][T22528] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 516.421580][T22576] 8021q: adding VLAN 0 to HW filter on device bond1 [ 516.458298][T22579] __nla_validate_parse: 4 callbacks suppressed [ 516.458321][T22579] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4475'. [ 516.487609][T22589] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4478'. [ 516.503432][T22589] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4478'. [ 516.537040][T22579] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4475'. [ 516.748065][T22601] netlink: 'syz.7.4482': attribute type 2 has an invalid length. [ 516.751983][T22603] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4483'. [ 516.756034][T22601] netlink: 'syz.7.4482': attribute type 1 has an invalid length. [ 516.773255][T22601] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4482'. [ 517.346299][T22636] SET target dimension over the limit! [ 517.347047][T22634] pim6reg1: entered promiscuous mode [ 517.363267][T22636] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4491'. [ 517.381680][T22634] pim6reg1: entered allmulticast mode [ 517.469577][T22642] netlink: 45 bytes leftover after parsing attributes in process `syz.5.4493'. [ 517.600791][T22656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4497'. [ 517.813569][T22667] netlink: 'syz.8.4500': attribute type 1 has an invalid length. [ 517.871162][T22667] 8021q: adding VLAN 0 to HW filter on device bond3 [ 518.069375][T22683] wg1 speed is unknown, defaulting to 1000 [ 518.286578][T22695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4506'. [ 518.300973][T22695] netlink: 'syz.0.4506': attribute type 11 has an invalid length. [ 518.309047][T22695] netlink: 'syz.0.4506': attribute type 13 has an invalid length. [ 518.712813][T22709] syzkaller0: entered promiscuous mode [ 518.720351][T22709] syzkaller0: entered allmulticast mode [ 521.920563][T22732] __nla_validate_parse: 2 callbacks suppressed [ 521.920583][T22732] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4517'. [ 522.046565][T22737] netlink: 'syz.5.4520': attribute type 1 has an invalid length. [ 522.276090][T22742] vlan3: entered allmulticast mode [ 522.281964][T22742] bond6: entered allmulticast mode [ 522.415149][T22757] openvswitch: netlink: Flow actions attr not present in new flow. [ 522.544751][T22763] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4524'. [ 522.589687][T22762] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4524'. [ 522.708000][T22779] syzkaller0: Caught tx_queue_len zero misconfig [ 522.745643][T22777] tipc: Enabled bearer , priority 0 [ 522.753244][T22777] syzkaller0: entered promiscuous mode [ 522.758782][T22777] syzkaller0: entered allmulticast mode [ 522.820104][T22785] netlink: 'syz.0.4532': attribute type 15 has an invalid length. [ 522.835464][T22777] tipc: Resetting bearer [ 522.877426][T22777] tipc: Resetting bearer [ 522.898482][T22777] tipc: Disabling bearer [ 523.020295][T22794] sctp: [Deprecated]: syz.7.4536 (pid 22794) Use of struct sctp_assoc_value in delayed_ack socket option. [ 523.020295][T22794] Use struct sctp_sack_info instead [ 523.235885][T22796] wg1 speed is unknown, defaulting to 1000 [ 523.591095][T22818] dvmrp1: left allmulticast mode [ 523.608127][T22820] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4544'. [ 523.910394][T22835] netlink: 'syz.5.4549': attribute type 15 has an invalid length. [ 523.943230][T22839] tipc: Started in network mode [ 523.950037][T22839] tipc: Node identity 6e5fdc6dd9e7, cluster identity 4711 [ 523.957463][T22839] tipc: Enabled bearer , priority 0 [ 523.965956][T22835] IPVS: Unknown mcast interface: vcan0 [ 524.088033][T22839] syzkaller0: entered promiscuous mode [ 524.093720][T22839] syzkaller0: entered allmulticast mode [ 524.166639][T22839] tipc: Resetting bearer [ 524.173175][T22839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.232634][T22839] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4547'. [ 524.311786][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.389463][T22863] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4555'. [ 524.397311][T22861] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 524.447251][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.508730][T22861] team0: Mode changed to "loadbalance" [ 524.561656][T22870] bond4: Removing last ns target with arp_interval on [ 524.597446][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.695098][T22880] netlink: 'syz.7.4561': attribute type 1 has an invalid length. [ 524.737579][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.747516][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.788614][T22883] IPVS: length: 223 != 24 [ 524.846321][T22890] x_tables: duplicate underflow at hook 4 [ 524.887476][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.028800][ T9] tipc: Node number set to 3082345581 [ 525.130437][T22911] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4571'. [ 525.140107][T22911] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4571'. [ 525.166956][T22913] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4570'. [ 525.177387][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.836087][T22967] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.4579'. [ 526.068328][T22977] ip6gre2: entered promiscuous mode [ 526.073582][T22977] ip6gre2: entered allmulticast mode [ 526.252173][T22981] netlink: 'syz.8.4591': attribute type 3 has an invalid length. [ 526.397749][T22989] syzkaller0: entered promiscuous mode [ 526.403272][T22989] syzkaller0: entered allmulticast mode [ 526.526773][T23002] xt_TCPMSS: Only works on TCP SYN packets [ 526.534047][T23002] netlink: 'syz.8.4597': attribute type 21 has an invalid length. [ 526.542432][T23002] netlink: 'syz.8.4597': attribute type 1 has an invalid length. [ 526.969031][T23024] wg1 speed is unknown, defaulting to 1000 [ 527.455762][T23027] netlink: 'syz.8.4604': attribute type 1 has an invalid length. [ 527.708223][T23067] __nla_validate_parse: 4 callbacks suppressed [ 527.708242][T23067] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4610'. [ 528.030315][T23083] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.057174][ C0] net_ratelimit: 4 callbacks suppressed [ 528.057191][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.108146][T23083] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.198712][T23083] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.255227][T23083] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.341462][ T9693] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.370827][ T9693] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.395489][ T9693] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.440081][T17268] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.505432][T23098] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4619'. [ 528.596636][T23103] netlink: 'syz.8.4622': attribute type 9 has an invalid length. [ 528.644661][T23111] nbd: must specify a size in bytes for the device [ 528.665944][T23111] nbd: must specify a size in bytes for the device [ 528.798411][T23117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4624'. [ 528.828124][T23119] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4625'. [ 528.838655][T23117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4624'. [ 529.016366][T23134] wg1 speed is unknown, defaulting to 1000 [ 529.097258][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.395472][T23146] wg1 speed is unknown, defaulting to 1000 [ 529.440944][T23148] wg1 speed is unknown, defaulting to 1000 [ 529.694023][T23159] wg1 speed is unknown, defaulting to 1000 [ 529.763696][T23165] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4636'. [ 529.935431][T23168] netlink: 240 bytes leftover after parsing attributes in process `syz.7.4638'. [ 529.946515][T23168] netlink: 88 bytes leftover after parsing attributes in process `syz.7.4638'. [ 530.074352][T23172] netlink: 'syz.7.4639': attribute type 8 has an invalid length. [ 530.089994][T23172] netlink: 'syz.7.4639': attribute type 9 has an invalid length. [ 530.106910][T23172] netlink: 'syz.7.4639': attribute type 10 has an invalid length. [ 530.115428][T23172] netlink: 'syz.7.4639': attribute type 11 has an invalid length. [ 530.123606][T23172] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4639'. [ 530.147207][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.184411][T23172] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4639'. [ 530.279518][T23176] tipc: Enabled bearer , priority 6 [ 530.937769][ T5148] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 531.177178][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.297307][T14124] tipc: Node number set to 4239549817 [ 532.227163][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.839641][T23257] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 532.920744][T23260] ip6tnl2: entered allmulticast mode [ 533.257177][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.608105][T23190] Set syz1 is full, maxelem 65536 reached [ 533.821525][T23303] delete_channel: no stack [ 534.297222][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.350832][T23329] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 534.537541][T23333] nbd2: detected capacity change from 0 to 127 [ 534.544989][ T5148] block nbd2: Receive control failed (result -32) [ 534.850104][T23350] wg1 speed is unknown, defaulting to 1000 [ 535.347169][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.512455][T23366] sctp: [Deprecated]: syz.0.4696 (pid 23366) Use of struct sctp_assoc_value in delayed_ack socket option. [ 535.512455][T23366] Use struct sctp_sack_info instead [ 535.704123][T23369] wg1 speed is unknown, defaulting to 1000 [ 536.023503][T23380] bond7: option ad_user_port_key: invalid value (65535) [ 536.033329][T23380] bond7: option ad_user_port_key: allowed values 0 - 1023 [ 536.059271][T23380] bond7 (unregistering): Released all slaves [ 536.124764][ T5892] IPVS: starting estimator thread 0... [ 536.230655][T23387] IPVS: using max 34 ests per chain, 81600 per kthread [ 536.255062][T23393] bond0: Device is already in use. [ 536.377187][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.905084][T23414] wg1: entered promiscuous mode [ 536.914141][T23414] wg1: entered allmulticast mode [ 536.930825][T14133] wg1 speed is unknown, defaulting to 1000 [ 536.936696][T14133] syz0: Port: 1 Link ACTIVE [ 536.942043][T23417] __nla_validate_parse: 2 callbacks suppressed [ 536.942061][T23417] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4711'. [ 536.975070][T23417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4711'. [ 537.088739][T23424] syzkaller0: entered promiscuous mode [ 537.094247][T23424] syzkaller0: entered allmulticast mode [ 537.150499][T23416] wg1 speed is unknown, defaulting to 1000 [ 537.275030][T23420] wg1 speed is unknown, defaulting to 1000 [ 537.356516][T23432] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4714'. [ 537.410014][T23432] tipc: Enabled bearer , priority 18 [ 537.417224][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.959731][T23457] netlink: 'syz.8.4723': attribute type 1 has an invalid length. [ 537.967816][T23457] netlink: 'syz.8.4723': attribute type 6 has an invalid length. [ 537.975657][T23457] netlink: 'syz.8.4723': attribute type 3 has an invalid length. [ 538.070772][T23461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.159941][T23463] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode [ 538.222105][T23463] bond0: (slave wlan1): Releasing backup interface [ 538.269761][T23463] bond4: (slave bridge1): Releasing active interface [ 538.288115][T23476] IPv6: NLM_F_CREATE should be specified when creating new route [ 538.303216][T23477] netlink: 'syz.5.4724': attribute type 10 has an invalid length. [ 538.314597][T23463] vlan0: left promiscuous mode [ 538.319810][T23463] bridge0: left promiscuous mode [ 538.325309][T23463] bridge2: port 1(vlan0) entered disabled state [ 538.467409][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.534549][T23477] mac80211_hwsim hwsim26 wlan1: left allmulticast mode [ 538.546703][T23477] bond0: (slave wlan1): Opening slave failed [ 538.603526][T23486] wg1 speed is unknown, defaulting to 1000 [ 538.684614][T23497] IPv4: Oversized IP packet from 127.202.26.0 [ 538.971351][T23512] No such timeout policy "syz1" [ 539.174771][T23519] netlink: 'syz.8.4740': attribute type 178 has an invalid length. [ 539.497176][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.622374][T23532] SET target dimension over the limit! [ 539.631935][T23532] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4744'. [ 539.710139][T23534] netlink: 'syz.8.4745': attribute type 21 has an invalid length. [ 539.808363][T23536] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.982116][T23536] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.033604][T23549] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.4749'. [ 540.075262][T23536] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.133873][T23556] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4747'. [ 540.211970][T23536] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.371463][T17272] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.380323][T17272] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.407645][ T9693] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.430787][T23284] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.547174][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.159275][T23579] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4756'. [ 541.577169][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.728427][T23598] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4763'. [ 541.765027][T23598] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4763'. [ 541.983263][T23598] hsr_slave_1 (unregistering): left promiscuous mode [ 542.543151][T23628] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4772'. [ 542.617167][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.798251][T23649] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4778'. [ 542.849966][T23648] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4779'. [ 542.904016][T23652] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4779'. [ 543.014526][T23661] netlink: 'syz.8.4782': attribute type 12 has an invalid length. [ 543.047761][T23661] netlink: 'syz.8.4782': attribute type 29 has an invalid length. [ 543.091156][T23661] netlink: 148 bytes leftover after parsing attributes in process `syz.8.4782'. [ 543.125898][T23664] wg1 speed is unknown, defaulting to 1000 [ 543.403022][T23686] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4789'. [ 543.421989][T23684] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4788'. [ 543.574254][T23694] wg1 speed is unknown, defaulting to 1000 [ 543.657202][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.902989][T23717] tipc: Started in network mode [ 543.915361][T23717] tipc: Node identity a275b81dee5e, cluster identity 4711 [ 543.928225][T23717] tipc: Enabled bearer , priority 0 [ 543.960610][T23710] syzkaller0: entered promiscuous mode [ 543.971263][T23710] syzkaller0: entered allmulticast mode [ 543.983396][T23719] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 544.066311][T23710] tipc: Resetting bearer [ 544.097631][T23725] C: renamed from team_slave_0 [ 544.108337][T23725] netlink: 'syz.7.4796': attribute type 4 has an invalid length. [ 544.112821][T23727] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 544.116954][T23725] netlink: 'syz.7.4796': attribute type 2 has an invalid length. [ 544.135338][T23725] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 544.151875][T23709] tipc: Resetting bearer [ 544.186126][T23709] tipc: Disabling bearer [ 544.244789][T23733] wg1 speed is unknown, defaulting to 1000 [ 544.483618][T23746] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4802'. [ 544.618067][T23665] Bluetooth: hci5: command 0x0406 tx timeout [ 544.697964][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.103192][T23776] netlink: 'syz.8.4809': attribute type 1 has an invalid length. [ 545.156701][T23776] 8021q: adding VLAN 0 to HW filter on device bond6 [ 545.177469][T18382] Bluetooth: hci2: command 0x0405 tx timeout [ 545.179594][T23780] bond6: (slave geneve3): making interface the new active one [ 545.192662][T23780] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 545.216230][T23778] wg1 speed is unknown, defaulting to 1000 [ 545.226765][T23771] tipc: Enabled bearer , priority 6 [ 545.244635][ T9693] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 545.247512][T23770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4805'. [ 545.278998][ T9693] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 545.315834][ T9693] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 545.376066][ T9693] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 545.412084][T23772] wg1 speed is unknown, defaulting to 1000 [ 545.699539][T23796] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4813'. [ 545.737170][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.012625][T23803] bridge0: port 1(veth5) entered blocking state [ 546.021702][T23803] bridge0: port 1(veth5) entered disabled state [ 546.028281][T23803] veth5: entered allmulticast mode [ 546.035670][T23803] veth5: entered promiscuous mode [ 546.054271][T23807] bridge0: port 2(veth0_to_bond) entered blocking state [ 546.062829][T23807] bridge0: port 2(veth0_to_bond) entered disabled state [ 546.077224][T23807] veth0_to_bond: entered allmulticast mode [ 546.086072][T23807] veth0_to_bond: entered promiscuous mode [ 546.129645][T23803] vlan2: entered allmulticast mode [ 546.135809][T23803] veth1: entered allmulticast mode [ 546.143559][T23803] bridge0: port 3(vlan2) entered blocking state [ 546.151364][T23803] bridge0: port 3(vlan2) entered disabled state [ 546.163420][T23803] vlan2: entered promiscuous mode [ 546.170475][T23803] veth1: entered promiscuous mode [ 546.440361][T23832] syz.8.4822: vmalloc error: size 5758976, failed to allocated page array size 11248, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 546.520562][T23832] CPU: 0 UID: 0 PID: 23832 Comm: syz.8.4822 Not tainted syzkaller #0 PREEMPT(full) [ 546.520590][T23832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 546.520600][T23832] Call Trace: [ 546.520608][T23832] [ 546.520617][T23832] dump_stack_lvl+0x189/0x250 [ 546.520649][T23832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 546.520673][T23832] ? __pfx__printk+0x10/0x10 [ 546.520692][T23832] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 546.520715][T23832] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 546.520738][T23832] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 546.520765][T23832] warn_alloc+0x214/0x310 [ 546.520796][T23832] ? __pfx_warn_alloc+0x10/0x10 [ 546.520830][T23832] ? __get_vm_area_node+0x28f/0x300 [ 546.520853][T23832] ? bpf_check+0x1aa/0x1d720 [ 546.520879][T23832] __vmalloc_node_range_noprof+0x690/0x12d0 [ 546.520931][T23832] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 546.520956][T23832] ? rcu_is_watching+0x15/0xb0 [ 546.520978][T23832] ? trace_kmalloc+0x1f/0xd0 [ 546.520998][T23832] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 546.521022][T23832] ? bpf_check+0x1aa/0x1d720 [ 546.521044][T23832] vzalloc_noprof+0xb2/0xf0 [ 546.521067][T23832] ? bpf_check+0x1aa/0x1d720 [ 546.521091][T23832] bpf_check+0x1aa/0x1d720 [ 546.521120][T23832] ? page_table_check_set+0x18d/0x730 [ 546.521145][T23832] ? page_table_check_set+0x18d/0x730 [ 546.521178][T23832] ? __handle_mm_fault+0x3ac9/0x5400 [ 546.521205][T23832] ? __handle_mm_fault+0x3ada/0x5400 [ 546.521231][T23832] ? css_rstat_updated+0x23a/0x4f0 [ 546.521254][T23832] ? __pfx_css_rstat_updated+0x10/0x10 [ 546.521287][T23832] ? count_memcg_event_mm+0x21/0x260 [ 546.521312][T23832] ? __up_read+0x280/0x680 [ 546.521339][T23832] ? __lock_acquire+0xab9/0xd20 [ 546.521363][T23832] ? __pfx_bpf_check+0x10/0x10 [ 546.521393][T23832] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 546.521414][T23832] ? lockdep_hardirqs_on+0x9c/0x150 [ 546.521432][T23832] ? ktime_get_with_offset+0x93/0x2a0 [ 546.521450][T23832] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 546.521471][T23832] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 546.521501][T23832] ? __asan_memset+0x22/0x50 [ 546.521522][T23832] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 546.521542][T23832] ? security_bpf_prog_load+0x125/0x3f0 [ 546.521569][T23832] bpf_prog_load+0x13ba/0x19e0 [ 546.521600][T23832] ? __pfx_bpf_prog_load+0x10/0x10 [ 546.521641][T23832] ? bpf_lsm_bpf+0x9/0x20 [ 546.521659][T23832] ? security_bpf+0x7e/0x300 [ 546.521682][T23832] __sys_bpf+0x507/0x860 [ 546.521702][T23832] ? __pfx___sys_bpf+0x10/0x10 [ 546.521717][T23832] ? count_memcg_event_mm+0x21/0x260 [ 546.521751][T23832] ? exc_page_fault+0x82/0x100 [ 546.521772][T23832] ? do_user_addr_fault+0xc85/0x1380 [ 546.521797][T23832] __x64_sys_bpf+0x7c/0x90 [ 546.521822][T23832] do_syscall_64+0xfa/0xfa0 [ 546.521839][T23832] ? lockdep_hardirqs_on+0x9c/0x150 [ 546.521855][T23832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.521873][T23832] ? clear_bhb_loop+0x60/0xb0 [ 546.521894][T23832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.521911][T23832] RIP: 0033:0x7f2d6dd8f6c9 [ 546.521929][T23832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.521944][T23832] RSP: 002b:00007f2d6ecbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 546.521965][T23832] RAX: ffffffffffffffda RBX: 00007f2d6dfe6090 RCX: 00007f2d6dd8f6c9 [ 546.521978][T23832] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 546.521990][T23832] RBP: 00007f2d6de11f91 R08: 0000000000000000 R09: 0000000000000000 [ 546.522001][T23832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.522012][T23832] R13: 00007f2d6dfe6128 R14: 00007f2d6dfe6090 R15: 00007fff351bf8b8 [ 546.522042][T23832] [ 546.522064][T23832] Mem-Info: [ 546.782264][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.923909][T23832] active_anon:6280 inactive_anon:0 isolated_anon:0 [ 546.923909][T23832] active_file:3537 inactive_file:40081 isolated_file:0 [ 546.923909][T23832] unevictable:768 dirty:240 writeback:0 [ 546.923909][T23832] slab_reclaimable:13364 slab_unreclaimable:142897 [ 546.923909][T23832] mapped:33158 shmem:2884 pagetables:1223 [ 546.923909][T23832] sec_pagetables:0 bounce:0 [ 546.923909][T23832] kernel_misc_reclaimable:0 [ 546.923909][T23832] free:1274977 free_pcp:17808 free_cma:0 [ 546.978622][T23832] Node 0 active_anon:28888kB inactive_anon:0kB active_file:14148kB inactive_file:160124kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136376kB dirty:968kB writeback:0kB shmem:13796kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13320kB pagetables:4792kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 547.042619][T23832] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 547.079856][T23832] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 547.116587][T23832] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 547.123428][T23832] Node 0 DMA32 free:1197480kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26572kB inactive_anon:0kB active_file:14148kB inactive_file:160124kB unevictable:1536kB writepending:968kB zspages:0kB present:3129332kB managed:2565108kB mlocked:0kB bounce:0kB free_pcp:51268kB local_pcp:24612kB free_cma:0kB [ 547.158475][T23832] lowmem_reserve[]: 0 0 0 0 0 [ 547.163899][T23832] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 547.196797][T23832] lowmem_reserve[]: 0 0 0 0 0 [ 547.202540][T23832] Node 1 Normal free:3888960kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16992kB local_pcp:5824kB free_cma:0kB [ 547.235744][T23832] lowmem_reserve[]: 0 0 0 0 0 [ 547.242267][T23832] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 547.276316][T23832] Node 0 DMA32: 239*4kB (ME) 899*8kB (UME) 1032*16kB (UME) 820*32kB (UME) 270*64kB (UME) 159*128kB (UME) 166*256kB (UM) 105*512kB (UM) 55*1024kB (UM) 13*2048kB (UM) 229*4096kB (UM) = 1205716kB [ 547.298501][T23832] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 547.314149][T23832] Node 1 Normal: 198*4kB (UE) 51*8kB (UME) 47*16kB (UME) 157*32kB (UME) 48*64kB (UME) 10*128kB (UME) 5*256kB (UME) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3888960kB [ 547.332739][T23832] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 547.347830][T23832] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 547.370546][T23832] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 547.381992][T23832] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 547.393458][T23832] 44993 total pagecache pages [ 547.398482][T23832] 0 pages in swap cache [ 547.402856][T23832] Free swap = 124996kB [ 547.407376][T23832] Total swap = 124996kB [ 547.411541][T23832] 2097051 pages RAM [ 547.415437][T23832] 0 pages HighMem/MovableOnly [ 547.424829][T23832] 424132 pages reserved [ 547.429425][T23832] 0 pages cma reserved [ 547.613909][T23869] __nla_validate_parse: 3 callbacks suppressed [ 547.613926][T23869] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4831'. [ 547.799279][T23872] netlink: 'syz.8.4836': attribute type 3 has an invalid length. [ 547.817404][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.025197][T23883] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4837'. [ 548.035133][T23883] netlink: 'syz.6.4837': attribute type 1 has an invalid length. [ 548.047431][T23883] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4837'. [ 548.071374][T23883] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4837'. [ 548.183927][T23884] netlink: 332 bytes leftover after parsing attributes in process `syz.0.4838'. [ 548.193172][T23884] netlink: 'syz.0.4838': attribute type 9 has an invalid length. [ 548.200970][T23884] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4838'. [ 548.214560][T23884] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4838'. [ 548.227044][T23878] sctp: [Deprecated]: syz.0.4838 (pid 23878) Use of struct sctp_assoc_value in delayed_ack socket option. [ 548.227044][T23878] Use struct sctp_sack_info instead [ 548.330403][T23898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 548.354762][T23905] netlink: 'syz.7.4842': attribute type 10 has an invalid length. [ 548.492766][T23909] wg1 speed is unknown, defaulting to 1000 [ 548.536846][T23916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4846'. [ 548.857273][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.082019][T23892] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 549.184216][T23934] netlink: 'syz.7.4851': attribute type 13 has an invalid length. [ 549.211616][T23936] netlink: 'syz.8.4852': attribute type 2 has an invalid length. [ 549.220741][T23936] netlink: 'syz.8.4852': attribute type 27 has an invalid length. [ 549.261344][T23937] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4851'. [ 549.314586][T23284] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.335060][T23284] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.352971][T23284] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.369455][T23284] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.454465][T23950] syzkaller1: entered promiscuous mode [ 549.469686][T23950] syzkaller1: entered allmulticast mode [ 549.484727][T23950] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4855'. [ 549.818610][T23950] bond0 (unregistering): Released all slaves [ 549.897300][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.937507][T23972] syzkaller0: entered promiscuous mode [ 549.942009][T23974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 549.943271][T23972] syzkaller0: entered allmulticast mode [ 550.416552][T23987] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 550.473802][T23989] wg1 speed is unknown, defaulting to 1000 [ 550.786524][T24000] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 550.823016][T23989] tipc: Started in network mode [ 550.828249][T23989] tipc: Node identity d22e7b208dd9, cluster identity 4711 [ 550.835533][T23989] tipc: Enabled bearer , priority 0 [ 550.843747][T23989] syzkaller0: entered promiscuous mode [ 550.849416][T23989] syzkaller0: entered allmulticast mode [ 550.900598][T23989] tipc: Resetting bearer [ 550.906628][T23989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.921722][T23988] tipc: Resetting bearer [ 550.953576][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.969052][T23988] tipc: Disabling bearer [ 551.251008][ T9693] tipc: Left network mode [ 551.639346][T24025] wg1 speed is unknown, defaulting to 1000 [ 551.726027][T24027] wg1 speed is unknown, defaulting to 1000 [ 551.758179][T24051] tipc: Enabling of bearer rejected, already enabled [ 551.802308][T24053] netlink: 'syz.0.4890': attribute type 9 has an invalid length. [ 551.846324][T24053] netlink: 'syz.0.4890': attribute type 9 has an invalid length. [ 551.921851][T24053] netlink: 'syz.0.4890': attribute type 9 has an invalid length. [ 551.987191][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.010124][T24053] netlink: 'syz.0.4890': attribute type 9 has an invalid length. [ 552.927462][T24091] tipc: Enabled bearer , priority 0 [ 552.935419][T24091] syzkaller0: entered promiscuous mode [ 552.941754][T24091] syzkaller0: entered allmulticast mode [ 553.027158][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.043272][T24091] tipc: Resetting bearer [ 553.509691][T24114] __nla_validate_parse: 13 callbacks suppressed [ 553.509711][T24114] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4903'. [ 553.720919][T24090] tipc: Resetting bearer [ 553.763014][T24090] tipc: Disabling bearer [ 553.918154][T24133] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 553.929164][T24134] netlink: 277 bytes leftover after parsing attributes in process `syz.0.4910'. [ 554.002316][T24133] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 554.028141][T24137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4912'. [ 554.057284][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.097026][T24137] 8021q: adding VLAN 0 to HW filter on device bond7 [ 554.246137][T24148] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4914'. [ 554.343041][T24138] bond7 (unregistering): Released all slaves [ 554.374616][T24133] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 554.593788][T24133] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 554.722112][T17270] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 554.776415][ T9693] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 554.787999][T24175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4924'. [ 554.788009][ T9693] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 554.809567][T24178] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4923'. [ 554.818696][ T9693] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 554.830586][T24174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4924'. [ 554.932223][T24183] IPVS: set_ctl: invalid protocol: 16303 255.255.255.255:20001 [ 554.954926][T24167] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4921'. [ 555.004190][T24189] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4928'. [ 555.047415][T24187] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4927'. [ 555.097222][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.468791][T24213] wg1 speed is unknown, defaulting to 1000 [ 555.560797][T24217] validate_nla: 29 callbacks suppressed [ 555.560818][T24217] netlink: 'syz.8.4936': attribute type 2 has an invalid length. [ 555.656268][T24217] : entered promiscuous mode [ 555.942975][T24224] netlink: 'syz.7.4937': attribute type 6 has an invalid length. [ 556.137459][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.697402][T24241] tipc: Enabled bearer , priority 0 [ 556.754170][T24242] syzkaller0: entered promiscuous mode [ 556.760753][T24242] syzkaller0: entered allmulticast mode [ 556.767492][T24242] tipc: Resetting bearer [ 556.778556][T24244] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 557.036647][T24259] netlink: set zone limit has 8 unknown bytes [ 557.177231][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.227250][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.267270][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.567979][T24242] tipc: Resetting bearer [ 559.986738][T18382] Bluetooth: hci3: command 0x0406 tx timeout [ 560.297599][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.353915][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.191099][T24242] tipc: Disabling bearer [ 562.208808][ T981] tipc: Node number set to 1277933597 [ 562.231016][T24167] wg1 speed is unknown, defaulting to 1000 [ 562.324921][T24292] delete_channel: no stack [ 562.348148][T24293] delete_channel: no stack [ 562.377225][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.471177][T24301] __nla_validate_parse: 5 callbacks suppressed [ 562.471196][T24301] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4955'. [ 562.666420][T24310] tap0: tun_chr_ioctl cmd 1074025678 [ 562.675225][T24310] tap0: group set to 0 [ 562.961185][T24332] netlink: 'syz.0.4963': attribute type 3 has an invalid length. [ 562.973852][T24332] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4963'. [ 563.046108][T24332] netlink: 'syz.0.4963': attribute type 1 has an invalid length. [ 563.170997][T24332] 8021q: adding VLAN 0 to HW filter on device bond7 [ 563.207364][T24341] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4965'. [ 563.233155][T24336] bond7: (slave geneve2): making interface the new active one [ 563.300478][T24336] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 563.312524][T17272] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.332263][T17272] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.427281][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.478603][T17272] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.517873][T17272] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.870415][T24369] block nbd3: server does not support multiple connections per device. [ 563.892787][T24369] block nbd3: shutting down sockets [ 563.932246][T24347] netlink: 277 bytes leftover after parsing attributes in process `syz.6.4966'. [ 563.966794][T24374] syzkaller1: entered promiscuous mode [ 563.974274][T24374] syzkaller1: entered allmulticast mode [ 564.250648][T24389] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4976'. [ 564.263155][T24389] netlink: 'syz.8.4976': attribute type 3 has an invalid length. [ 564.275860][T24389] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4976'. [ 564.467154][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.500848][T24391] syzkaller0: entered promiscuous mode [ 564.506514][T24391] syzkaller0: entered allmulticast mode [ 564.531395][T24391] tipc: Enabled bearer , priority 0 [ 564.600992][T24401] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 564.672116][T24408] Cannot find del_set index 2 as target [ 564.987478][T24426] netlink: 'syz.6.4986': attribute type 13 has an invalid length. [ 564.995670][T24426] netlink: 'syz.6.4986': attribute type 17 has an invalid length. [ 565.345922][T24435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.499525][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.547185][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.213650][T24405] tipc: Resetting bearer [ 567.225169][T24403] dummy0: entered promiscuous mode [ 567.230995][T24403] macvtap2: entered allmulticast mode [ 567.236720][T24403] dummy0: entered allmulticast mode [ 567.244650][T24403] dummy0: left allmulticast mode [ 567.249858][T24403] dummy0: left promiscuous mode [ 567.315859][T24426] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 567.346689][T24390] tipc: Resetting bearer [ 567.369200][T24390] tipc: Disabling bearer [ 567.403001][T24432] wg1 speed is unknown, defaulting to 1000 [ 567.546417][T24448] sctp: [Deprecated]: syz.7.4991 (pid 24448) Use of int in max_burst socket option deprecated. [ 567.546417][T24448] Use struct sctp_assoc_value instead [ 567.587161][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.626036][T24452] netlink: 'syz.0.4992': attribute type 1 has an invalid length. [ 567.638841][T24455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4992'. [ 567.660516][T24452] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4992'. [ 567.683751][T24455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4992'. [ 568.140239][T24481] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5000'. [ 568.154409][T24476] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5000'. [ 568.187142][T24476] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.196929][T24476] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.244856][T24476] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.255463][T24476] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.314071][T24476] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.325302][T24476] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.386406][T24476] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.397894][T24476] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.483325][T24492] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5006'. [ 568.493988][T17272] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.502431][T17272] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.617169][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.629021][T23284] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.638213][T23284] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.638666][T24500] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5009'. [ 568.666495][ T9692] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.675242][ T9692] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.706172][ T9692] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.717223][ T9692] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.792003][T24509] netlink: 'syz.8.5012': attribute type 10 has an invalid length. [ 568.809905][T24509] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 569.090656][T24535] No such timeout policy "syz1" [ 569.415462][ T9] wg1 speed is unknown, defaulting to 1000 [ 569.422242][ T9694] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 569.431291][ T9] syz0: Port: 1 Link DOWN [ 569.432221][ T9694] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 569.448532][T24533] wg1 speed is unknown, defaulting to 1000 [ 569.454448][ T9694] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 569.463113][ T9694] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 569.624393][T24557] IPv6: sit2: Disabled Multicast RS [ 569.635445][T24557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 569.667155][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.744898][T24563] netlink: 'syz.0.5025': attribute type 2 has an invalid length. [ 569.763469][T24563] 9: entered promiscuous mode [ 569.933523][T24576] No such timeout policy "syz1" [ 570.108441][T24584] tipc: New replicast peer: 255.255.255.255 [ 570.122423][T24584] tipc: Enabled bearer , priority 6 [ 570.156876][T24584] netlink: 'syz.7.5033': attribute type 11 has an invalid length. [ 570.165545][T24584] netlink: 'syz.7.5033': attribute type 11 has an invalid length. [ 570.174564][T24584] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5033'. [ 570.190017][T24585] No such timeout policy "syz1" [ 570.197049][T24595] netlink: 'syz.8.5035': attribute type 1 has an invalid length. [ 570.239414][T24595] 8021q: adding VLAN 0 to HW filter on device bond7 [ 570.294248][T24584] bridge5: entered promiscuous mode [ 570.313254][T24584] bridge5: entered allmulticast mode [ 570.363516][T24603] wg1 speed is unknown, defaulting to 1000 [ 570.515414][T24614] netlink: 'syz.7.5041': attribute type 7 has an invalid length. [ 570.547836][T24618] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5040'. [ 570.702201][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.821456][T24631] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5046'. [ 570.933868][T24633] No such timeout policy "syz1" [ 570.966183][T24636] wg1 speed is unknown, defaulting to 1000 [ 571.737267][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.750560][T24664] wg1 speed is unknown, defaulting to 1000 [ 571.757463][T24677] netlink: 'syz.5.5055': attribute type 1 has an invalid length. [ 571.822374][T24677] bond0: entered promiscuous mode [ 571.827715][T24677] bond0: entered allmulticast mode [ 571.848607][T24680] bridge4: entered promiscuous mode [ 571.854140][T24680] bridge4: entered allmulticast mode [ 571.871772][T24680] bond0: (slave bridge4): making interface the new active one [ 571.922132][T24680] bond0: (slave bridge4): Enslaving as an active interface with an up link [ 571.994752][T24689] bond4 (unregistering): Released all slaves [ 572.077749][T24692] bond0: entered promiscuous mode [ 572.083033][T24692] mac80211_hwsim hwsim94 wlan1: entered promiscuous mode [ 572.092372][T24692] batadv0: entered promiscuous mode [ 572.108984][T24692] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 572.122250][T24692] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 572.134076][T24692] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 572.143239][T24692] bond0: left promiscuous mode [ 572.150567][T24692] mac80211_hwsim hwsim94 wlan1: left promiscuous mode [ 572.163310][T24692] batadv0: left promiscuous mode [ 572.330890][T24691] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.343839][T24691] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.430044][T24702] netlink: 'syz.7.5062': attribute type 1 has an invalid length. [ 572.430735][T24703] netlink: 'syz.7.5062': attribute type 1 has an invalid length. [ 572.472134][T24702] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 572.477547][T24703] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 572.496566][T24691] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.515750][T24691] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.605885][T24691] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.631073][T24691] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.704091][T24691] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.714320][T24691] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.777148][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.786959][T24717] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.819578][T17272] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.829133][T17272] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.863590][T17270] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.877607][T17270] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.911157][T17270] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.920073][T17270] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.928709][T17270] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.938531][T17270] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.956926][T24717] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.062898][T24717] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.123777][T24717] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.232303][ T9692] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.269171][T17272] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.292998][T17272] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.321521][ T9692] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.691102][T24734] bond3: option ad_user_port_key: invalid value (65535) [ 573.698680][T24734] bond3: option ad_user_port_key: allowed values 0 - 1023 [ 573.755606][T24734] bond3 (unregistering): Released all slaves [ 573.817178][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.820088][T24744] __nla_validate_parse: 2 callbacks suppressed [ 573.820106][T24744] netlink: 80 bytes leftover after parsing attributes in process `syz.7.5073'. [ 573.841650][T24744] netlink: 'syz.7.5073': attribute type 1 has an invalid length. [ 573.934529][T24752] netlink: 'syz.7.5075': attribute type 21 has an invalid length. [ 573.945026][T24752] netlink: 'syz.7.5075': attribute type 6 has an invalid length. [ 573.953221][T24752] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5075'. [ 574.046399][T24757] netlink: 'syz.7.5078': attribute type 1 has an invalid length. [ 574.059400][T24757] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5078'. [ 574.223943][T24757] siw: device registration error -23 [ 574.247686][T24770] batadv_slave_1: entered promiscuous mode [ 574.265163][T24771] xt_hashlimit: size too large, truncated to 1048576 [ 574.697390][T24786] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.708691][T24786] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.808533][T24786] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.822073][T24786] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.857272][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.905079][T24786] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.935959][T24786] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.017589][T24799] IPVS: set_ctl: invalid protocol: 47 172.30.1.9:20004 [ 575.021721][T24786] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.037766][T24786] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.069076][T24773] batadv_slave_1: left promiscuous mode [ 575.099552][T24800] wg1 speed is unknown, defaulting to 1000 [ 575.197965][ T9693] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.206284][ T9693] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.269563][ T9693] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.279952][ T9693] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.302698][ T9693] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.311141][ T9693] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.414467][ T9693] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.424909][ T9693] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.716280][T24811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5096'. [ 575.747475][T24811] netlink: 'syz.0.5096': attribute type 30 has an invalid length. [ 575.771016][T24811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5096'. [ 575.897227][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.201566][T24823] netlink: 'syz.5.5101': attribute type 11 has an invalid length. [ 576.210143][T24823] netlink: 190972 bytes leftover after parsing attributes in process `syz.5.5101'. [ 576.347273][T24824] netlink: 'syz.6.5100': attribute type 11 has an invalid length. [ 576.362942][T24824] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5100'. [ 576.607257][T24833] syzkaller1: entered promiscuous mode [ 576.613084][T24833] syzkaller1: entered allmulticast mode [ 576.937233][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.957015][T24845] syz_tun: entered allmulticast mode [ 576.986110][T24845] dvmrp0: left allmulticast mode [ 577.326601][T24848] 8021q: adding VLAN 0 to HW filter on device bond4 [ 577.376756][T24840] syz_tun: left allmulticast mode [ 577.410134][T24865] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5111'. [ 577.480776][T24865] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5111'. [ 577.635020][T24877] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5113'. [ 577.977177][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.004396][T24895] bridge0: left allmulticast mode [ 578.019271][T24895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.039463][T24895] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.238274][T24895] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 578.430270][T24899] wg1 speed is unknown, defaulting to 1000 [ 578.480261][T24900] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 579.017275][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.111420][T24917] __nla_validate_parse: 18 callbacks suppressed [ 579.111440][T24917] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5122'. [ 579.127341][T24917] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5122'. [ 579.181583][T24924] FAULT_INJECTION: forcing a failure. [ 579.181583][T24924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 579.220757][T24926] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5126'. [ 579.242246][T24924] CPU: 1 UID: 0 PID: 24924 Comm: syz.8.5125 Not tainted syzkaller #0 PREEMPT(full) [ 579.242272][T24924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 579.242284][T24924] Call Trace: [ 579.242292][T24924] [ 579.242301][T24924] dump_stack_lvl+0x189/0x250 [ 579.242330][T24924] ? __pfx____ratelimit+0x10/0x10 [ 579.242355][T24924] ? __pfx_dump_stack_lvl+0x10/0x10 [ 579.242374][T24924] ? __pfx__printk+0x10/0x10 [ 579.242391][T24924] ? __might_fault+0xb0/0x130 [ 579.242423][T24924] should_fail_ex+0x414/0x560 [ 579.242452][T24924] _copy_from_user+0x2d/0xb0 [ 579.242475][T24924] ___sys_sendmsg+0x158/0x2a0 [ 579.242497][T24924] ? __pfx____sys_sendmsg+0x10/0x10 [ 579.242548][T24924] ? __fget_files+0x2a/0x420 [ 579.242565][T24924] ? __fget_files+0x3a0/0x420 [ 579.242590][T24924] __sys_sendmmsg+0x227/0x430 [ 579.242615][T24924] ? __pfx___sys_sendmmsg+0x10/0x10 [ 579.242653][T24924] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 579.242689][T24924] ? ksys_write+0x22a/0x250 [ 579.242714][T24924] ? __pfx_ksys_write+0x10/0x10 [ 579.242741][T24924] __x64_sys_sendmmsg+0xa0/0xc0 [ 579.242763][T24924] do_syscall_64+0xfa/0xfa0 [ 579.242779][T24924] ? lockdep_hardirqs_on+0x9c/0x150 [ 579.242797][T24924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.242815][T24924] ? clear_bhb_loop+0x60/0xb0 [ 579.242835][T24924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.242852][T24924] RIP: 0033:0x7f2d6dd8f6c9 [ 579.242868][T24924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.242882][T24924] RSP: 002b:00007f2d6ecde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 579.242902][T24924] RAX: ffffffffffffffda RBX: 00007f2d6dfe5fa0 RCX: 00007f2d6dd8f6c9 [ 579.242915][T24924] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000003 [ 579.242926][T24924] RBP: 00007f2d6ecde090 R08: 0000000000000000 R09: 0000000000000000 [ 579.242937][T24924] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 579.242948][T24924] R13: 00007f2d6dfe6038 R14: 00007f2d6dfe5fa0 R15: 00007fff351bf8b8 [ 579.242978][T24924] [ 579.270922][T24926] ip6gretap1: entered promiscuous mode [ 579.308950][T24919] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5123'. [ 579.483792][T24938] No such timeout policy "syz1" [ 579.487216][T24926] ip6gretap1: entered allmulticast mode [ 579.531677][T24922] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5123'. [ 579.608077][T24942] wg1 speed is unknown, defaulting to 1000 [ 579.885255][T24959] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5131'. [ 580.057455][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.299499][T24990] FAULT_INJECTION: forcing a failure. [ 580.299499][T24990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 580.313088][T24990] CPU: 1 UID: 0 PID: 24990 Comm: syz.5.5138 Not tainted syzkaller #0 PREEMPT(full) [ 580.313115][T24990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 580.313126][T24990] Call Trace: [ 580.313134][T24990] [ 580.313142][T24990] dump_stack_lvl+0x189/0x250 [ 580.313170][T24990] ? __pfx____ratelimit+0x10/0x10 [ 580.313195][T24990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 580.313217][T24990] ? __pfx__printk+0x10/0x10 [ 580.313249][T24990] should_fail_ex+0x414/0x560 [ 580.313278][T24990] _copy_from_user+0x2d/0xb0 [ 580.313300][T24990] __copy_msghdr+0x3c5/0x5b0 [ 580.313324][T24990] ___sys_sendmsg+0x1a5/0x2a0 [ 580.313347][T24990] ? __pfx____sys_sendmsg+0x10/0x10 [ 580.313403][T24990] ? __fget_files+0x2a/0x420 [ 580.313420][T24990] ? __fget_files+0x3a0/0x420 [ 580.313444][T24990] __sys_sendmmsg+0x227/0x430 [ 580.313469][T24990] ? __pfx___sys_sendmmsg+0x10/0x10 [ 580.313494][T24990] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 580.313524][T24990] ? ksys_write+0x22a/0x250 [ 580.313549][T24990] ? __pfx_ksys_write+0x10/0x10 [ 580.313576][T24990] __x64_sys_sendmmsg+0xa0/0xc0 [ 580.313597][T24990] do_syscall_64+0xfa/0xfa0 [ 580.313612][T24990] ? lockdep_hardirqs_on+0x9c/0x150 [ 580.313628][T24990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.313644][T24990] ? clear_bhb_loop+0x60/0xb0 [ 580.313665][T24990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.313682][T24990] RIP: 0033:0x7f356018f6c9 [ 580.313698][T24990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 580.313713][T24990] RSP: 002b:00007f3561017038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 580.313739][T24990] RAX: ffffffffffffffda RBX: 00007f35603e5fa0 RCX: 00007f356018f6c9 [ 580.313753][T24990] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000003 [ 580.313763][T24990] RBP: 00007f3561017090 R08: 0000000000000000 R09: 0000000000000000 [ 580.313775][T24990] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 580.313786][T24990] R13: 00007f35603e6038 R14: 00007f35603e5fa0 R15: 00007ffd3fe572c8 [ 580.313817][T24990] [ 580.536486][T24987] No such timeout policy "syz1" [ 580.869725][T25007] ip6erspan0: entered allmulticast mode [ 580.892825][T25003] SET target dimension over the limit! [ 581.093050][T25014] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5146'. [ 581.102627][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.156505][T25016] wg1 speed is unknown, defaulting to 1000 [ 581.382554][T25040] No such timeout policy "syz1" [ 581.433776][T25019] wg1 speed is unknown, defaulting to 1000 [ 581.470493][T25043] netlink: 25 bytes leftover after parsing attributes in process `syz.8.5154'. [ 581.486381][T25043] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5154'. [ 581.568140][T25047] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5154'. [ 581.585095][T25047] IPv6: Can't replace route, no match found [ 581.876079][T25058] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 581.992462][T25063] bond0: (slave team0): Releasing backup interface [ 582.009882][T25063] team0: Port device dummy0 removed [ 582.015696][T25063] veth0_to_bond: left allmulticast mode [ 582.025340][T25063] veth0_to_bond: left promiscuous mode [ 582.031144][T25063] bridge0: port 2(veth0_to_bond) entered disabled state [ 582.045954][T25063] bond0: (slave bond_slave_0): Releasing backup interface [ 582.056370][T25063] bond0: (slave bond_slave_1): Releasing backup interface [ 582.073107][T25063] team0: Port device team_slave_0 removed [ 582.083051][T25063] team0: Port device team_slave_1 removed [ 582.090598][T25063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.100047][T25063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.109612][T25063] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 582.137148][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.251209][T25074] x_tables: duplicate underflow at hook 2 [ 582.911738][T25095] netlink: 'syz.7.5168': attribute type 4 has an invalid length. [ 583.177229][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.648841][T25113] netlink: 'syz.6.5170': attribute type 12 has an invalid length. [ 583.779165][T25117] wg1 speed is unknown, defaulting to 1000 [ 583.797751][T25120] No such timeout policy "syz1" [ 584.217171][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.324203][T25131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.406352][T25135] wg1 speed is unknown, defaulting to 1000 [ 584.464699][T25150] __nla_validate_parse: 2 callbacks suppressed [ 584.464719][T25150] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5184'. [ 584.507872][T25150] wg1 speed is unknown, defaulting to 1000 [ 584.625852][T25156] No such timeout policy "syz1" [ 585.154481][T25160] netlink: 'syz.0.5186': attribute type 1 has an invalid length. [ 585.184900][T25160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.194005][T25166] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5190'. [ 585.229070][T25161] netlink: 'syz.0.5186': attribute type 13 has an invalid length. [ 585.252459][T25161] netlink: 'syz.0.5186': attribute type 17 has an invalid length. [ 585.260403][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.264832][T25172] netlink: 'syz.8.5191': attribute type 3 has an invalid length. [ 585.324277][T25161] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.341052][T25161] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 585.363701][T25170] syzkaller0: entered promiscuous mode [ 585.369549][T25170] syzkaller0: entered allmulticast mode [ 585.436180][T25187] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5195'. [ 585.513759][T25189] No such timeout policy "syz1" [ 585.602253][T25180] wg1 speed is unknown, defaulting to 1000 [ 585.761260][T25211] Cannot find del_set index 4 as target [ 585.915486][T25217] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 585.928736][T25217] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5201'. [ 585.946783][T25210] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5201'. [ 585.956260][T25210] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5201'. [ 586.128657][T25201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 586.297148][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.547988][T25230] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5204'. [ 586.562246][T25247] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5204'. [ 586.664898][T25247] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5204'. [ 586.684600][T25247] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5204'. [ 587.030439][T25275] wg1 speed is unknown, defaulting to 1000 [ 587.337278][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.865206][T25290] netlink: 'syz.0.5219': attribute type 28 has an invalid length. [ 587.874548][T25290] netlink: 'syz.0.5219': attribute type 3 has an invalid length. [ 587.893893][T25292] syz.7.5223: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 587.913016][T25292] CPU: 0 UID: 0 PID: 25292 Comm: syz.7.5223 Not tainted syzkaller #0 PREEMPT(full) [ 587.913038][T25292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 587.913047][T25292] Call Trace: [ 587.913053][T25292] [ 587.913060][T25292] dump_stack_lvl+0x189/0x250 [ 587.913085][T25292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 587.913103][T25292] ? __pfx__printk+0x10/0x10 [ 587.913117][T25292] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 587.913136][T25292] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 587.913155][T25292] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 587.913174][T25292] warn_alloc+0x214/0x310 [ 587.913199][T25292] ? __pfx_warn_alloc+0x10/0x10 [ 587.913224][T25292] ? __get_vm_area_node+0x28f/0x300 [ 587.913243][T25292] ? xskq_create+0xbf/0x170 [ 587.913265][T25292] __vmalloc_node_range_noprof+0x690/0x12d0 [ 587.913305][T25292] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 587.913326][T25292] ? __kasan_kmalloc+0x93/0xb0 [ 587.913343][T25292] vmalloc_user_noprof+0xad/0xf0 [ 587.913362][T25292] ? xskq_create+0xbf/0x170 [ 587.913381][T25292] xskq_create+0xbf/0x170 [ 587.913402][T25292] xsk_init_queue+0xb0/0x110 [ 587.913422][T25292] xsk_setsockopt+0x57b/0x8d0 [ 587.913441][T25292] ? __pfx_xsk_setsockopt+0x10/0x10 [ 587.913462][T25292] ? __pfx_aa_sk_perm+0x10/0x10 [ 587.913481][T25292] ? aa_sock_opt_perm+0xff/0x1b0 [ 587.913503][T25292] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 587.913516][T25292] ? __pfx_xsk_setsockopt+0x10/0x10 [ 587.913534][T25292] do_sock_setsockopt+0x17c/0x1b0 [ 587.913554][T25292] __x64_sys_setsockopt+0x13f/0x1b0 [ 587.913573][T25292] do_syscall_64+0xfa/0xfa0 [ 587.913585][T25292] ? lockdep_hardirqs_on+0x9c/0x150 [ 587.913600][T25292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.913613][T25292] ? clear_bhb_loop+0x60/0xb0 [ 587.913630][T25292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.913642][T25292] RIP: 0033:0x7f5f7558f6c9 [ 587.913656][T25292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.913667][T25292] RSP: 002b:00007f5f763b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 587.913682][T25292] RAX: ffffffffffffffda RBX: 00007f5f757e5fa0 RCX: 00007f5f7558f6c9 [ 587.913692][T25292] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004 [ 587.913700][T25292] RBP: 00007f5f75611f91 R08: 0000000000000004 R09: 0000000000000000 [ 587.913709][T25292] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 587.913717][T25292] R13: 00007f5f757e6038 R14: 00007f5f757e5fa0 R15: 00007ffec6316378 [ 587.913740][T25292] [ 587.913748][T25292] Mem-Info: [ 588.182567][T25292] active_anon:4726 inactive_anon:0 isolated_anon:0 [ 588.182567][T25292] active_file:3470 inactive_file:40097 isolated_file:0 [ 588.182567][T25292] unevictable:768 dirty:214 writeback:0 [ 588.182567][T25292] slab_reclaimable:13648 slab_unreclaimable:152608 [ 588.182567][T25292] mapped:29612 shmem:1359 pagetables:1256 [ 588.182567][T25292] sec_pagetables:0 bounce:0 [ 588.182567][T25292] kernel_misc_reclaimable:0 [ 588.182567][T25292] free:1253779 free_pcp:29862 free_cma:0 [ 588.239939][T25292] Node 0 active_anon:18904kB inactive_anon:0kB active_file:13880kB inactive_file:160188kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118448kB dirty:856kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13244kB pagetables:4892kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 588.277265][T25292] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 588.308969][T25292] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 588.317502][T25310] geneve3: entered promiscuous mode [ 588.342011][T25292] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 588.351270][T25310] geneve3: entered allmulticast mode [ 588.359428][T25292] Node 0 DMA32 free:1110796kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18904kB inactive_anon:0kB active_file:13880kB inactive_file:160188kB unevictable:1536kB writepending:856kB zspages:0kB present:3129332kB managed:2565108kB mlocked:0kB bounce:0kB free_pcp:101280kB local_pcp:56148kB free_cma:0kB [ 588.393221][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.408007][T25292] lowmem_reserve[]: 0 0 0 0 0 [ 588.412911][T25292] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 588.442845][T25292] lowmem_reserve[]: 0 0 0 0 0 [ 588.447808][T25292] Node 1 Normal free:3888960kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16996kB local_pcp:11172kB free_cma:0kB [ 588.481040][T25292] lowmem_reserve[]: 0 0 0 0 0 [ 588.485917][T25292] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 588.498950][T25292] Node 0 DMA32: 2169*4kB (UM) 1001*8kB (UME) 543*16kB (UME) 907*32kB (UME) 377*64kB (UME) 79*128kB (UME) 26*256kB (UM) 108*512kB (UM) 62*1024kB (UM) 22*2048kB (UM) 208*4096kB (UM) = 1111100kB [ 588.546387][T25313] [ 588.546888][T25292] Node 0 [ 588.549474][T25313] ============================= [ 588.549493][T25313] WARNING: suspicious RCU usage [ 588.549515][T25313] syzkaller #0 Not tainted [ 588.549526][T25313] ----------------------------- [ 588.549534][T25313] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 588.549548][T25313] [ 588.549548][T25313] other info that might help us debug this: [ 588.549548][T25313] [ 588.549556][T25313] [ 588.549556][T25313] rcu_scheduler_active = 2, debug_locks = 1 [ 588.549569][T25313] 1 lock held by syz.6.5226/25313: [ 588.549582][T25313] #0: ffffffff8df3d880 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80 [ 588.549644][T25313] [ 588.549644][T25313] stack backtrace: [ 588.549655][T25313] CPU: 1 UID: 0 PID: 25313 Comm: syz.6.5226 Not tainted syzkaller #0 PREEMPT(full) [ 588.549676][T25313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 588.549687][T25313] Call Trace: [ 588.549695][T25313] [ 588.549704][T25313] dump_stack_lvl+0x189/0x250 [ 588.549732][T25313] ? __pfx_dump_stack_lvl+0x10/0x10 [ 588.549756][T25313] ? __pfx__printk+0x10/0x10 [ 588.549790][T25313] lockdep_rcu_suspicious+0x140/0x1d0 [ 588.549814][T25313] get_callchain_entry+0x2b6/0x3c0 [ 588.549843][T25313] get_perf_callchain+0xb3/0x6f0 [ 588.549874][T25313] ? __pfx_get_perf_callchain+0x10/0x10 [ 588.549898][T25313] ? futex_unqueue+0x22/0x240 [ 588.549916][T25313] ? futex_unqueue+0x22/0x240 [ 588.549936][T25313] ? futex_unqueue+0x22/0x240 [ 588.549958][T25313] ? futex_unqueue+0x211/0x240 [ 588.549992][T25313] __bpf_get_stack+0x3fa/0xa60 [ 588.550026][T25313] ? __pfx___bpf_get_stack+0x10/0x10 [ 588.550048][T25313] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 588.550086][T25313] bpf_get_stack+0x33/0x50 [ 588.550108][T25313] ? bpf_prog_42db8cfdf50901c9+0x46/0x4e [ 588.550125][T25313] bpf_get_stack_raw_tp+0x1a9/0x220 [ 588.550155][T25313] bpf_prog_42db8cfdf50901c9+0x46/0x4e [ 588.550172][T25313] bpf_prog_run_pin_on_cpu+0x143/0x470 [ 588.550198][T25313] bpf_prog_test_run_syscall+0x312/0x4b0 [ 588.550221][T25313] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 588.550240][T25313] ? __fget_files+0x2a/0x420 [ 588.550263][T25313] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 588.550284][T25313] bpf_prog_test_run+0x2c7/0x340 [ 588.550307][T25313] __sys_bpf+0x562/0x860 [ 588.550326][T25313] ? __pfx___sys_bpf+0x10/0x10 [ 588.550364][T25313] ? rcu_is_watching+0x15/0xb0 [ 588.550391][T25313] __x64_sys_bpf+0x7c/0x90 [ 588.550416][T25313] do_syscall_64+0xfa/0xfa0 [ 588.550433][T25313] ? lockdep_hardirqs_on+0x9c/0x150 [ 588.550450][T25313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.550468][T25313] ? clear_bhb_loop+0x60/0xb0 [ 588.550488][T25313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.550506][T25313] RIP: 0033:0x7fa5a298f6c9 [ 588.550521][T25313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.550536][T25313] RSP: 002b:00007fa5a38b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 588.550555][T25313] RAX: ffffffffffffffda RBX: 00007fa5a2be6090 RCX: 00007fa5a298f6c9 [ 588.550569][T25313] RDX: 0000000000000010 RSI: 0000200000001ac0 RDI: 000000000000000a [ 588.550581][T25313] RBP: 00007fa5a2a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 588.550593][T25313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 588.550604][T25313] R13: 00007fa5a2be6128 R14: 00007fa5a2be6090 R15: 00007fff720d5f78 [ 588.550635][T25313] [ 588.899952][T25292] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 588.912355][T25292] Node 1 Normal: 198*4kB (UE) 51*8kB (UME) 47*16kB (UME) 157*32kB (UME) 48*64kB (UME) 10*128kB (UME) 5*256kB (UME) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3888960kB [ 588.934733][T25292] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 588.944887][T25292] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 588.954545][T25292] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 588.964420][T25292] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 588.973758][T25292] 44922 total pagecache pages [ 588.978474][T25292] 0 pages in swap cache [ 588.982627][T25292] Free swap = 124996kB [ 588.986782][T25292] Total swap = 124996kB [ 588.991128][T25292] 2097051 pages RAM [ 588.994928][T25292] 0 pages HighMem/MovableOnly [ 588.999614][T25292] 424132 pages reserved [ 589.003751][T25292] 0 pages cma reserved [ 589.417164][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.457171][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.497187][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.537211][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.577391][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.617182][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.657502][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.697471][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.747187][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog