last executing test programs:

1m45.403297329s ago: executing program 3 (id=2205):
unshare(0x400)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000100000002000000ffff000005"], 0x48)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0xfe33)
ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000100))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, 0x0, 0x0}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r0, 0x0, 0x0}, 0x20)
r2 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x130, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x130}, 0x1, 0x0, 0x0, 0x20004844}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b70400000000040085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f00000012c0)=ANY=[@ANYBLOB="1800000002000000000000000400000018110000", @ANYRES32, @ANYBLOB="0000400000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe75}, 0xb6)

1m44.996195832s ago: executing program 3 (id=2211):
socket$inet_udp(0x2, 0x2, 0x0) (async)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x400, @loopback}}}, 0x108)
setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000480)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000008000000000000000900000073119d000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000008000000000000000900000073119d000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000000))
socket$can_raw(0x1d, 0x3, 0x1) (async)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
syz_genetlink_get_family_id$tipc2(&(0x7f000000bac0), r1)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$key(0xf, 0x3, 0x2)
recvmsg(r2, &(0x7f0000000500)={&(0x7f0000001240)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x10100)
pipe(&(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
readv(r5, &(0x7f0000001300)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) (async)
readv(r5, &(0x7f0000001300)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1)
write$cgroup_int(r6, &(0x7f0000000140), 0xfffffdef)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000007, 0x4000010, r4, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfc, 0x80000}, 0xc)
r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$6lowpan_control(r7, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:10 2', 0x1b)
sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, 0x0, 0x4)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a00000004000000081000000a0000000000", @ANYRES32, @ANYBLOB="fdffffff0000000000000000000000000000000019bb4f4b5c99ebf3f9cfa9ac0780e7127ae9a7d2b1d6234c897e663ae9f471e9d4b1e24032768e64f035fb76768fd998169fde5be20f3a97ed8958f74e9eb46d9f3c1840a0f2d9bba1d679d4a51e9ff22e7b014753aff3150e03b13cbeae05", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9}, &(0x7f0000000040), &(0x7f0000000080)=r10}, 0x20)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x11, 0x14, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x3e, '\x00', 0x0, @fallback=0x29, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x11, 0x14, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x3e, '\x00', 0x0, @fallback=0x29, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc)

1m43.958423135s ago: executing program 3 (id=2222):
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "89"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000800)

1m43.771677032s ago: executing program 3 (id=2225):
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @remote, @val={@void, {0x8100, 0x5, 0x0, 0x3}}, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @dev={0xac, 0x14, 0x14, 0x41}, {[@end]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xfffd}}}}}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000100001082cbd7000ffffffff01000000", @ANYRES32=0x0, @ANYBLOB="fffe01000100000008001b0000"], 0x28}}, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0xc, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000000000000000000000000100085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2af}, 0x94)
recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/25, 0x19}}, {{&(0x7f0000000340)=@alg, 0x80, &(0x7f0000000900)=[{&(0x7f0000000440)=""/79, 0x4f}, {&(0x7f00000005c0)=""/245, 0xf5}, {&(0x7f00000006c0)=""/153, 0x99}, {&(0x7f0000000780)=""/131, 0x83}, {&(0x7f0000000840)=""/131, 0x83}], 0x5, &(0x7f0000000980)=""/74, 0x4a}, 0x100}], 0x2, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=ANY=[@ANYBLOB="2000000010003904000800006ca1288986e7ec2e", @ANYRES32=0x0, @ANYBLOB="0958010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r2, &(0x7f0000000100)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xc, @remote}, 0x10)
syz_emit_ethernet(0x11, &(0x7f0000000200)={@local, @remote, @void, {@llc={0x4, {@llc={0xc, 0xd, 's'}}}}}, 0x0)
syz_emit_ethernet(0x11, &(0x7f0000000300)={@local, @remote, @void, {@llc={0x4, {@llc={0xc, 0xd, 's'}}}}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
r4 = socket(0x15, 0x80005, 0x0)
getsockopt(r4, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss={0x2, 0xb}, @mss, @window={0x3, 0x6, 0xff81}, @timestamp, @timestamp, @sack_perm, @window={0x3, 0x800, 0x5}], 0x8)
sendto$inet(r5, &(0x7f0000000000)="b8", 0x1, 0x2400a044, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r5, &(0x7f0000000380)='x', 0x1, 0x480c1, 0x0, 0x0)
r6 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r6, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0)
setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4)

1m43.510151098s ago: executing program 1 (id=2228):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8, 0x6, 0xff, 0x0, 0x1}, 0x401, 0x1, 0x0, 0x4, 0x4, 0x7, 0x16, 0x9, 0x8, 0x401, {0x5, 0x8, 0x8000, 0x5b, 0x2, 0x1}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x3c, 0x20, 0x10, 0x70bd2a, 0x25dfdbfb, {0x2, 0x0, 0x10, 0x7, 0x2, 0x0, 0x0, 0x6, 0x12}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'syzkaller0\x00'}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4010)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890)

3.410110446s ago: executing program 1 (id=2235):
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0x4, &(0x7f0000000200)=@framed={{}, [@generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}]}, &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet(0x2, 0x2, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@cgroup, 0xffffffffffffffff, 0x8, 0xb}, 0x20)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, 0x2c)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r1 = accept(r0, &(0x7f00000002c0)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000340)=0x80)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x2c, r2, 0x3, 0x70bd29, 0xe, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x22}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x4008000)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, r2, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_FAMILY={0x5, 0xd, 0x25}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDR6={0x14, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_VERSION={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1000}, 0xc000)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01030000000000000000010000010900010073797a31000000004c000000030aef000000000000000000010000000900030073797a31000000000900010073797a30000000000900010073797a310000000014000480080002407c42280f080001400000000028000000000a010800000000000000000100000a08000240000000010900010073797a3100000000140000001100010000000000000000000000000a"], 0xbc}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000003300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000032c0)={&(0x7f0000000880)={0x2a40, 0xd, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x29f8, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}, {0x664, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_KEY={0x428, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbd, 0x1, "5f12ab73a867c0b6574f4912f092271422cda482589937759e7af24ea08bf97d12fc362d13149bc38c002401dc235fb90ddc408e3263263c9f8adfedd882b508726c8db453b343f700008ad3f4de05a59cbc061c202c24724cf25d7cc0490f1f1f9cf961cac42e09ff4f754cd8c5fbc1733be84a6039e43937896ab38dc4ac132c34dbc00bbf4efba409357ac5c6f6d381e07b830b382ebce7c537b0b8490d5f498577c896149ef081110ce3f572d3d137336cff47e4091b3b"}, @NFTA_DATA_VALUE={0xc2, 0x1, "a386746f3e37f654d1f5301ae15d38ce4508f47f31710525ea14079110a96dac279c6a9c9b55b9ec27db0f0736ee07a3155dea4ad76568baed7d1c9f66ae4704b3d67c08e392953291be633f956dc7f9c4175a661b5a6cc6d725a10023d78da7a850e56f4e0ef67e895b23ca5abd01b79e7a6171e20d0cc54e8d48a48c240e6ed583fcd0b84ea85f0b69ba03cd1adb6c1c143f5019d01b56c412c131d6b9fddde3a07636f7f4bd745abb69cc4ec418e3e2ec7b168aa1b989845f896a8fc3"}, @NFTA_DATA_VALUE={0xeb, 0x1, "38004adb33b1f79536cd1ca479c9a0181ae19c47bf00442525c491c4a5844f6f603a10ac9628cc376bb2a11b29b3e4e8d888df6f73d810672d32764ce61d2fb5e9668c24b0f70ccb8ee951cd0bb6f56929362366a80c7d798a57c126eea25e9fdc6cae1853298289ec8b953b883c3f2e9b2e0502cd532b7177bbfa60f53ce1d83692c875a794041ef186ecea3810865a0ce7c4c3be5c690f82f7f2572bffeb75945cf7f4690ab268c0ca961153c6091a153e57463451c52491d21d24226c5b39aae27d55ae330477d2be98d31c89d47a7bbf0bcd823203b7a7fe9094cb2ebfb2f88190d1ae135b"}, @NFTA_DATA_VALUE={0x103, 0x1, "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"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x30, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x1d4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xd4, 0x1, "d4b0f9f5f5f59116c52355989c29370459b172a9b7d44942c1644f6bff35d15fcb4405535b30db9392b4c86b8ffbe8348b13bf0ed6fccf47293d820d81156453907d65f4eb685d8fdef0cef8092ef1b55ad3fc00df12cab229e05e1bd026138a7f148eee1ac2afcba68c83d16006d625e83cc2cc82748f44f0fbe5d12523d9a2e8793b07383d4f10990ef485efc57abca47904aa68f16b87077654a362cd0a7b3fbaba19144881a6a58d8756aea829488d8e021df0867f6f16f595ed41f5b591719c863c7eceeb70c6a091d81c8b9380"}, @NFTA_DATA_VALUE={0xac, 0x1, "53efc48883f7a06a702501b1ee6dbe3cbfe69cee0badf5b2ae9f6b55d7335b1dbb44d7929418440609604b3aee0ac8f99e37a176a7def485a1db658d9f704163b0574f2543d4b583c3b9e763220e6cc902c0006f22b1106e05fbdded895e4e6ec951c515c17f9d2e0e85a05ede9279fc179294d2d513c58e2656f01c63d88d10d754e48a1663d31593381d512210808bc1db3b8bc47faed8ab223f0d4b2df790304127b6e3d4d617"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1000}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fffffffffffffff}]}, {0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x30, 0x6, 0x1, 0x0, "96144f85d5852ffb11c2708afb209f2bbc56b40fe8f055d40c43e27ef53aea84b49cc4c5f4c46e4cec7868e2"}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x13a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_KEY={0x3c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_KEY={0x148, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xff, 0x1, "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"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_KEY_END={0x1210, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xb9, 0x1, "89a3fbbda6a06cf027327d396d3b93dc6fee43b3a8d83417db4856611a98cdaf569d713eff9e168bc2bfaa666903aa5d2c22a7a4a78c6ee60a209db2dfd39518e393299cbdb253bae11153ea67b1960e07edd858be142c0dd7883882747092171f0444ade6e1360444c538e0292db5359a50964295d3bcb0a3bc9a507b664952b2cbe3d8182b618a15e8a43359dc0113afc3f84862c06f08c91b4da21d3a2b976ff258e6895d02cc4dafcc364e0e82a0a6bf3d1850"}, @NFTA_DATA_VALUE={0x1004, 0x1, "21135448ca4f71ecea15916ec69e30d4b390eae11f5060dc2237760f8d5df75ae77c1cca00c78c866272b7399ca50de079d1d88fe6132d6eaa9eda0977f5709894bd4cf0b1b4b4c8262e34c3d207134e38ecc4d603d7fc72ba096ff0ddf3991b29b360295412f4831f751e2b70e475ad19297ffd4b7ac4f65808a711b8d625c680529b2f3f564b35e1f241ac315342f23c9fde79643d88fe8e57bb3f9a5be9b5df401a1c06db4dafddb8fd4278fd011b5d9f5161059249b4431e271f00a37225f055a90cecb77cdf167bfcbfcd5f3543559a41057aeeb77546a6fd8743e2ef8de5406cc350c14b2c586587a7a26c404cdbb53e1f4457683b755799dd59b94161920aa52812c12a2ede7e6bedd158eb8689c320af1274a1324a6c65be39a9358dbefce440326c0d0e53e41848c7385cb9508a2caeffd0bedad9a43740e0f6f8c95def489b4af4ec64bf6fa12a17145c13801d8c3e52edbbe783a14499b376b629765cd69b8e72979d51fff6961fe06f081b66c126ed280f083f5127b1e0833e20e931d670782d1947e377f0a2a76ba014903279582052fd42f33d7fe71922b80bf31cb39303073946a52fc3ab66cdd923221bd4f68cf51f0157b5ed151dc0536335f66c00b7a30487b3e234b2e2bf4ed88ef4ff07390e5f2186a2e9e2caedfde823292f59e90e185333f9f9b7685436daf496d67acb3e99a4eb6d92947f2ba4c2c04c48553f489c1621568d9d221ff1228bbfbfdbc263586cc3b13a1b918df23b01f00d7361de57794b76ceefd4214e69e79bfef7eff664567013542012e285fed68ab5c31df229a56437a6038e90c32e176c72e8410a3205b485c3986942497e27d465578ec3daa5fd150f0a37e34a6aba603ef6ecee4fb9d4c70e83f4163b57843731c1ee79ae717af68bc356ee64b8f2c2c0bc84a59cc4e6bd816797170335d2dc222b0dd51b2371280051ef2c71f0f7b7f2b66bff79f44f1420a19f00e803d78344290980793e7676e15df9936e6d8cb5f3b87b7b995c905bf4ec880886cf2b29233e5e84444013c74f1a360cdf398701a29397720ca7abee3894135209151a0eb3dd5619ee765ce8b00b928047026212ad4ee888fddf3449758e419444e27734ccab923f426fe7c071077bc6d147d542f6876119549e1f48fe11d2c3af33a9535e4eb83b22bdbcf8bbf78d522f61b415aafa1b862d9ffcfd1400bdcff25539bd9584aa6c381183207295f054c8d341478478cb2ff6251262d348b46d7109679ea07162fafda29eed10d6bb50cf8ce2b0e53192ac548816b1376cba4eb7c2a73a5d0bb1700a5b3488e7987cf42b83525e1b7418c8bc9ec4b5c1b4c7a656e74dce538029029dcbf345ab3f810e09036a98a931511888b88f9e27c1e038b3579e63256be695c37cd481fd9c57291d1601a58244915bc6377e93af683dee17d3563b95a69ad0b8b1d66e9a9f61ec762c30ef043fd2751a462c49fdcecbe5e37cf8ce1365f1ec10b1c269fb574e906dd3d6773c05baf261c911d1a33bf578aef471059cdf957a6d879819ff6766089da3c980ce298c52e00d2b4f8c3a233215f0adfd6be943b79d4ff58a9b371faff17d15f89858e802d9fcc2bd3b0323e290c9c44ebae55723a9419be151a76a02d758a465959067c7506eb6f30e22b9414fa61797740323bc51b8bfbcb5c5fd7e7dcf2f19239f15e475bee1f82050dac5725258b8b6aa38f36ebab3d4bff998121110488bc4406f79bb729302c99f55bd668d3b9b5a97ab008a03af1a617eaf45f0a51a5f20a911825aaa3955e995b45b5eeff324d0901aac7f37607ee49f95aedf0f8b48f100a614c407c5f60f39a04af04daf75190dbf4bb391bc0da6f76139537031ec878ee18a48a10db755845fd45f99fdfab59a8afe33759161ebd947d4b236f614983351a1211875d0ad13ba701eb8b17c5d24427ac93cf6dc5a1ebb6a3477025a4b54724197d2986b19dccc639169b2e2a42b982a71c1bc34c5b7caf42a660cbad61cffabc1c88a9af3236a1a3580ac02b44ecc8a850c6671ea9b74e8a204bcc1928f8a505b4eb6d4bc7394efd4b68cc49ecd0b4ef5f9de538d11a5a399b49adc3081d92e18811c871d73670a1b78afe9fc273a6c1b5a60a3d884f02549483e20cced440088a0b4e7861ccc670798e0786bd11a1bde8e3221ee6689dfdfb14e0f99e958d64b44ed2233ab46eb952cdddfc91b0343e0b84d71359148a94e5ae659a76a264804432fe4cf872f1591f1d357576e24a5071c220b53adae7ceb603e7f3f47f65136b10841c928c85ea809718cba33040952f8870f700f00309d4fa8b6bb309a5dc0f586f4aa25049ee62c4515c03d4082f2593b94c2676c393668e0eee85e1ef9f383925f6fba3078e99b6ba89a6b976c3259e28a01592c08bdff017a2c40a0ac98b15bf2ac0dcd89d84f0128abd54627a050d8510bdc22866ce9af241c86d0e44ab7b71a57b0f3356c5d0355c288a4826fb4626e2f88753e62c0de457964ef8bdad24d6ec591c640cc60e0b324f0a995b9485d6aac839a4a3636b1031781b590dac0865372c92bfc31376904b9d1dcc791ff18ad1bccbe57fcddb8a21f3894bfb673ba16108b4eae3789f640f0536bb04bb45d91627fcd20bbab51f30169f17e4f41720ca007090c6cde850e0f59f476889730ece05fd7a76d3351638d6048c91118ee9748115af07e4dc5c1c47b7b4dee7d032deb0b5f570f1818cda4a2c8892400119119223bccd233629689725d516e85e47d39b78fe3aee0af04dceb0cb884a82a909dbbca4bc06f7b5f9f6ebb6ae98e8db61167770201dbaa4d7c1d16ddfa39bbf22ed740b3f01ecc5350b5b142a606eb7cd121a51e9b7817d972c134664bf94e55929aa2abbf0fc3929346ee74984044380a3a7a684489227242af4105e46f1c1add41736e01c2fb50d123cfab89b9131464176cc5b1cb149a8692fff449ad86362083d6dad0acc6b5ca5aa5b0191616929b01b098f675aac32d3453f451009be4ad2ee6d5b89b24bcc51b85cf0d826261722ae7e8bdbaee1ef7683040ba76b96398274b6dd34b131b7e90a428815e89242890baa84a64a66c2beac380901e61d3b51b21f049e370703bc847cfa6470b653fc79f272d11b3a2de80c3940376c6aea6011637ec1f6c6a37e1f55fb00bb79b9f9dec679b6825378f39cc7c5f6f8237db16065e2f47f06b8abda0093735cd7e599a11771cd00db4b26eaea5c538665b36029a8eba0721b145092d67bf2d834fafbea260aac089efd334f28625f433f045d8c453b845b1cd4889d7e156bdc028f600c8df58b0e718d7a208196240d36bc4584dd922b520d6222a156fa9ab1bb6be96c1399aaff14019b9e57f826685dc2461417df8d728cfb3d7ca0c3cae6b476848791d0b6a9f3b3d7bab5f9094d6d52a9e26181f26bfa7f0d430c13fd323d530567f474b8cee3254134f5b9b3c759ab0773ff23240a497bf979b0f34eeafc352823bdc9c9ad771da2c4697111953ac6c48d30b05b21fc3fbd2f64c2b3363a70d7ea8846b3e82facb7faa06779fa200acf98d6ab46029e9b30b87bbfa639d6e433b6e16774814940d5247c40a49c7e6a19567e4ab7f67962710bf1c2aaab69f12c6e5486e6a0bfe9d52c1b20fe9bd210b7a0a62cf261f295e8f9edc15b3aa4557bddac52e63922eea5f67d11a12afee0036b3b8fd240437cd88e4ae204ebda58c6977e952398f939856916069f701ad50614280485d418587082e7dc0c69f8f179eca86061a496b7ef4dcaf7b58c94889dbb67ae007ba705f0c263519a3a83bec9763d8e434c1453aefc9796ec6094458063050f31241b98cf9c46971b2cf109b61103667dd04d2cc138bed0fd0d35cf23957f477c0579d8c5ffc5319747ac5d6533091c6f3d0172c2b12b1c2e497fcce58eb7cd07e59018a6fa72c6501c4cb9067a2d8ce5acd55d4778c17d95b375389642cb7f9e7b8505c5422ed0b15ae06ae41bc94f55e214517eaa4c293f0585da028fdd168dbd543df92b172bdc6855dbef7e1a5caf45daf622b0cfe4c98ea865b5e1c090c1ece1deb8a699f06e891088911aecf890ad9b6a67b2daae786aaf4a726f832f073ebd49cc6bd508eed47b16cf2c1ec40d24d15b97a8f5372f4b7e567dcf182cbb8e892f555d5336c3c80c04951ba0e2ac81f921367268975ec0f6d933a70858d050ae4704f5f72258a7cc8da1940cbffe5535b72727947d0f68ef371ddde090d90acb7a99720c89c7a183ba46b57635e17fc941838bf8ce7f049a563fd6c50b8859bc0eb5cec5285e6b9c7524ea03608beb0ad15daca4368da9b7443d059d41973f28dec6f86c006881e89d5c440c852d058937da3eb33075fc21b4e814dc24614221c180d37cff6f79766db49ac680febd5a0c28a99291260c631574c619605f4de11bbe9e60662e9062dc1c974935221b3db6f334f73e8cdcf329df0f5594ef0a100c7669857559d26bcba8c6f669dfc7189265e78cd3a4c0e522b7655901260fbaca45856a4071c390ea242a220e65ee6d2f15c27f0451b2a80f6fc09b8332e00ec1af81646d833929cd70b24c3bf1c98a33a01b0c8692638cd291c998929406ada64a0f0390e6f86a5923c63e42457fc2bab86469b2165c3a1175be5376b19885ba13f6dd930902b363cc6d5518479cad5b0b5d65b198f2a11ce839e94484a773da7d9433cf537ea36d55306c0b21d45bea0785c9591d9e510c32db9b889aa6ee5f379f705a78124996f7e1313b5172c4e472bbff9b48df366bfc6c57ce668ed60106ab6fe2ad62c5798f92530f1d249b2884701bf61993c8f92ed816d7a0b72103091215b8996d47d735a84eab87036b8ea6b292c48adfac6e5b75ed842723f511cd7d03693bfaacd490d1b208570105ed7b056a23cf1a2946cbf4caf3fb47bd25d5afb2dd9d623b492a4cc93c20ce5a66848a2fdcd822739c2cf3d1436aaf03469f8513fb5b1d7a5bfea09da5c76562454f3f4622dc554ed8284bf2f9d0ce9f18181b9b2d8a1250cf2d26a0fff8aab9bc3c7c9e3c53ffdbf70ad4c63568f5d3a251027fbe69557042a0f4f9d799ca6eab020211433832b5c14b35c13515ed4ef55c040f80fa9158a7b1b9117cf863f861db306def5f0268897dbcecb9850d818ab347d44e06d5546b45ffdce3b9716023adaae1fd9c54a6f27f1ce3ea3e36036220e08084880231254d3b6d43ed39eefb31cc428ba4bb122ffc01ccbffda8c4ec6213b1f23e014d51092206dc3171202dbb500e2975af10119aba321146382cc48bdb6b98b421f645ee1539ed0f290eb05accde3fba809c1a488fe1b84630cac0c01a0f79af33fe2c63236da10a8331793e1c58c8cc403031c147a1c3b5723fa7caa98fb7e67d4f73024a4a58d83dedb4ea872ffcd02221c09fc8a9e3e0077c693d90ea11757dbd5ca95700b7fef32983cd5d891211f628121c49878dee4760a8ba05a2f83b929be987798806a4e8a80759b5c615ed24a2de56152fc3158e1e0c68b8c376e2126634f6c2c5244632689cd819096d30a7f23ca52f44619b3d5bedc7e17a357c3fc1fc32eb2805ce9a100ae7ea399e22d90e7400d8b407eacb89269aa216caadfe520a112d4d2e22c29d479851befac1746d39cd60f07d6b077226c92b42bb9c3b189fb3edb94f45e160a134a7d1852c8d2b151e04ecda94203c17c2607567acf267d1b2973b68bba1cf718352de9a595ba2499240a794d50fa4fee6318594c36914d103734ff8d4cb6faabd34dd5ed21fb41b67cd3e45a09"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xce, 0x1, "fd800388f4d8a7ab4257a6358c543f0b022f4e340383df3dff50715287ddf3a5a88f6f52776ce097109bd083e2a29e4b99f47c762c2b0eaa3219f06ee2bf9e85dffe924b27832010d3204104df31d8f7c1ef77b342f7b80c02d2255bc6bd33d6456f89175cd0677cfc70dd6d23ba44d409f7cafb5d025dfb339aa44a9eedb3b2fd1ab28df00333d97bca7d7f77549438181c52c59876da268408b48da04732b7dd414fc1a22bf2253e38f473901809e219545551c9ba6bcab6ba91cd905f52d505ef46afb33d38aaf8b3"}]}]}, {0x380, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x2f8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xea, 0x1, "47da4c122f8475967b82efc8cfd7d0e7fd34b96b308eb3742e1c3726a0e83a8aeeaf52ffa3877fb63186a95341ab2c80a64f72143bda2172859e958fac306fcb91ce5258c929263a2d16055041b8886ca0ac526ab14e931e50d5868d249e6d55ce56b3a79efa62d1a7f8398333b7e929c322d049441256998e9e06dd25274d27e0bdfe74ab903015be0951ed23f6072e4bd968195543b6bcb534f2295d1b341048333959da9b62ffadf9a1874c9338120ad79fbaec836735430268108d07a0c5c1687e0882be68ba1bff7265c733e9d3484da6791a2b49357bdfa1eabed73a70d7c3e7daac72"}, @NFTA_DATA_VALUE={0x1e, 0x1, "5ccf85b0757dcfcdaee9e90e98d3078987ba7cdb54300a493975"}, @NFTA_DATA_VALUE={0xe8, 0x1, "930c186be6d427030cdb58c26b69a3eb098654a3cb573e0fa766d88ac0040deedb61becbd798d4f9dfb2bd569255c53bf2e6b4d6275cbf96b0cc683701c7975ab1185b0ebf80035b23c7a92ac221eeadfc83102ea22d019275b37de152545965cb24eedfa85633a74d4689d1241e651a1b4352b9aca5c56f94dd06d210baca148758413e96c37d9cfa8b8ec360e58c71fef71649322a0a411117322e6ff82cab3660ed596c0ef16d2f1f0beb160ac908034803157f2d92e48ef67b3231a104c60bc1a24510605532ba7fd91a470c03a53f42fd6652c0a13bb133479cfa13567c1143dfef"}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x36, 0x1, "e0995d25acb2eabe84cd6b0d635b9931202928acfd8a7af94d06aedc8efa55d72eccfdbb58ce71a7c548c4f9081eb90049b6"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x18}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_USERDATA={0x5e, 0x6, 0x1, 0x0, "865149a4b5bcaf1fb68f6792f1b2e4508efdc0ec71c6385076d6f6e58f09d0377f2aee59e982030fd400c3eb94972399f9269c4670483fbbd9f77e68effdd1ed3db4974553272337d2e5b4f38861ca5284202879ad1151c3c082"}]}, {0x570, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x40, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3a, 0x1, "7528ee121b87f88061b8ca6b44785f08bf5bc3fe6b4bfab9c53c6d3400819c68322f7deea6ec7fc5aefecf4091d0ca962daf55ff8f95"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xa83}, @NFTA_SET_ELEM_DATA={0x288, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xef, 0x1, "56c8b56acdb1ed50540800fb8ea005e3530f443f0e6f4a88dec91232523ab506e5f7170a6f0e8588d65d5b517537835d12e2c603d6f16315d1496aaa4112a61e6bfdbf0bb3fdb79fc49a4c07822f977f4680abce8b51aff57cb00af71db390a27349fdeb0eb0965ff6fd987314849ebf3614a50205c0df9f6c945b88682b8e2d3fe3a74f78d8492f23458f7ddd1c391597cb5ba991f5a1408c645e09ad42dfb2c861967431b3e8f4cd1bb97e77e0709ae03e490e7759be30c2829210db984aee9cc28904c7cdd42f5d4d413f7e161d48fd58f8e0bd22c90a3a8dc2c82c61c6082e5c5011654c1ef74b057a"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xc, 0x1, "058d8f43339a557c"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x8c, 0x1, "8347a2ba8988aa9cb15c45e61bc54f15f8cf69bb34834d9371eb6a1468b6a32bc305f806418b698564f15abb5d5f05e334b93a7a66bc3d7ae856947bc150c6ac0d6cd45d943a12e86064c59836c3e896bbdd08a4abc667d94c231bcb6a5fc61e78de033d903972bc00fe87505d35342448d9bccc7070f4acbaccc0bf30e77f6b8d8ba8b1b429aa8a"}]}, @NFTA_SET_ELEM_KEY_END={0x290, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x8d, 0x1, "56b3ada2d6e13ad9ec526ee5d16f3387517d3e13749c14cb0af8b1cec4199a275430a6ef7afef70c440d5aa5d32e1bf85ec53dc16d9beba7a6b4b2aaf1ae6e45e5bdcf3a5770441b0976e47ea9aee0c0fe686b8d66c57380a7b77b7de3d5628a3ea877b429bee1a0281ddfcf0be618b6e97f59abbebf65f4735a884d46d86e98e45ecc94fb090af72f"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xf1, 0x1, "346a01ab3aa72f9e5642a0185010ec9c7b2c8029c2bedca1b82acd5390a290c12ef71cff5a4f182d70dab8507ded9230b7de5785dd89cdcebcc253fe86f42abcef75f941cd82ef2d76f3783df5d27b42763214b4da06e58eb74ce9d0a576470c5697de5c4f5a26e92eac80bcea9abf4eaab3ef86fe8a98d93aca3583c34683702514edb4c644a897b012ae4785412aa97ecd77bcf518fc2a1967e8076ef91daaf90ed623065c95ad17b06a2a4c85482031a59023b0fa45e5d8df339f39f7e0c6a17f5a16c906240c77abbc502aea292296cfd0b61b1c5fc3d440abd53f1043ad20ff36dcce3efd7d626a29d0dc"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x23, 0x1, "eb154db8510a085b804f9c5a6c8f905f2d06a341e9ba08dca692730b6e4ca1"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x290, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x228, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x79, 0x1, "b2eac9842860dd36a57160a793cb6e47340dc0bbb592525c688c8b815b6d3ea045b434c5cb4084d3a81663a5d6b72ec7b6b15ab1145f08a112a18506ee49acba26e3a0dc411eee8bfb34b7ae8fea46297973639390bfa2edba4ce498637787c0ef4f15498a0af83bc2a1f9ff7bb3a1745d4e731597"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x51, 0x1, "472f8050b798582127d525a7c07fb91c2d7f294b089fb9ec5e32910aec6965fb4bf16d1e9cc71c3e4cf0a8bf4612b5ad93ed9f9944bb2e669d9996971ffaeb88543f7c9b3b8a9e61efecc95460"}, @NFTA_DATA_VALUE={0xe0, 0x1, "5527cbabda142ef41cfcb175615d632a12ba69b7e418b9e05bfcfa51695366a501a4edcdb62bd93bb55d3acd30f0e5a76dda16108050d0c604ebbc0ef05f2b1072cb5f26ce271fef3dddd7dee5c11afe222b352c97753069a140437a87a0076a5f3ee4370dbafa4657760b6b740d5f4aa41001b23dad9bb2d7512b8d7093fa6619cdc774f10074ed66e2db010abb503f57f9f4f40af5324d34747d4fa420465923eb64afe883d0f2208b5c69692eb14511d2be4ff6fd830a3e322879d2e6266193759fa5bc02afb12a2f94379e6f6dd764681eb5dd42777f2a3f7bec"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7f}, @NFTA_SET_ELEM_KEY_END={0x44, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xa, 0x1, "469f50a3948c"}]}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, [""]}}}]}, {0x400, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x18, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x270, 0xb, 0x0, 0x1, [{0x1d0, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c0, 0x2, 0x0, 0x1, [@NFTA_BITWISE_MASK={0x1bc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd0, 0x1, "becaa99ef8688da53e11cdd6224cd8ff9488a064c1bcd03417e662ec5bdb88edc1310b8bd5b0c191912997311d4fd111a9570fba55b7bf17fec53240736bd698bae409f50bfa4d33dee8925f285c1caaee161ab5226f6d7780846f9192659ddc6e57581ed182eb5d24799b79469c32560c44a9bf9c04374469f3b6b50db2268af5e58ab145635686875596dd3d8c163356e8927b1a34236df53b2afd8abebc2dc039d8036f90539d08b96a70b20b0c4b70f479433f7497006a5296c0f409c0b87f916cb6aef7c7dadcc01c5c"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x97, 0x1, "1a15d10b34f0f0144cf194fc8ecba398d13fd336a14454d07df7b66459c04a2e1036b26ff15508b380fa2c2801dbe11428802d7678514629268fb86814333d23c705c50ff3f39efcc166f1c6cce05203a515f0f147f5fa8453b9b0ced84911fed7f7b3fb22f5dc534bd1d414a756348e530d3f26d6481ebb28e80cf9bfc3cbf3f7e9662d3a618f580678e6634069d8987a5e5c"}]}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_OP={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x40, 0x7, 0x0, 0x1, @objref={{0xb}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xfa3a4fec6af14fdc}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_KEY_END={0x74, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x19, 0x1, "4b8d193f809a411fb7760cf20105b910fed2e07bc5"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x2c, 0x1, "080f42e649ad466e3b9f1298eb7f35d3b552dc8def334c831468d07e1ec71aa0f8ffc859ec0321d8"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xac, 0xb, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, {0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x9f}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_BYTEORDER_OP={0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}]}]}]}, 0x2a40}, 0x1, 0x0, 0x0, 0x4004058}, 0x804)
bind$x25(r4, &(0x7f0000000700), 0x12)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x1, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000200)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x1, 0x1}}, 0x44)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @loopback, @local}, &(0x7f0000000180)=0xc)

3.404888017s ago: executing program 2 (id=2239):
socketpair(0x11, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xfc, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5ac9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x300}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_NODE={0xbc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "6338a1170a22da90c3822aab88aafbc50793b36b9d29132df1b08129f3e0e21de96d76"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "0b1982ecc56a5bdbd6b351e97d4438363d88d5b1"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x22}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x488d5}, 0x4000000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x18041, 0x0)
ioctl$TUNGETVNETLE(r3, 0x800454dd, &(0x7f0000000280))
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)="9999eb29bcd819810a2446ca80f317b35605e262a0026e6f87d5d541cc6655522bd85dfc965f7bcfebbb3cf1a7ab6f860abf58b509fd463759ef2c0bef0deedaf43187c11e906eff9b063d019f16e1e21819e9126a605c79889e9550bc84c2be091b4e8a5aac4f19b191b1032cd4028d6e8cb8488e92fcd012ba6b67a4584e8758ff1b48850c43121865264cd53e4f96c7b9566b7198844fd692175ffe6e09462b3793686fdb584ad7b4f36920c0fe4ae3d30e751eda5d20f94a6136ac15177534b1fa5b24756c7277e7036197f6e5fa561d5e7cf45a592efc3b44870e6b6407658e1ac4cec98570ac08d1a770", 0xed}, {&(0x7f0000000400)="bc4e7f6a15c10f26660c20eb58c43c50d6033f2b5c39e1e1bb195ba5f2f0ba6052d7b0b1a8b1a8adedf8412933a1641caeb39d4ad371c0a0e82c9463cc1f233ab22bbcccd78607f28ce758956a2dc977bf160d0f4578ca50f6f9fb118ad5dcf2b94cb79ed32add675e54fe5fe82827835518fca4da54e39cd51559d16a04f6", 0x7f}], 0x2, &(0x7f00000004c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x30}, 0x20000080) (async)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000540)={'ip6gretap0\x00', {0x2, 0x4e23, @local}}) (async)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000580), &(0x7f00000005c0)=0x4) (async)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, r4, 0x400, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x4040080)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000740)={<r5=>0x0, 0x14, "b22148a20dafb8c25cb378d261a26517bd1dd1b5"}, &(0x7f0000000780)=0x1c)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000007c0)={r5, 0xd8, "99c6ced92dc00376df097756c0fe6319c7c9af65b9e3f349c3768ca4757477edabe78ca41e7f5200db7d88377a9ca749c46a71aa572538bf572224739eefb10d99e5d680768ccecf076bdb5f87ce56a5d00dc68de12da20108f77cd321b15f2222d15e7d0bb5be57ab374b9dc3902c42cb40b3d7ed34222e625574608b51fc71af895bcb95bcfaf499a9ff20f55430af5db04a4ecdcbc8793f86997d42a1627b0c41228241017ae66b457302f29f532dadbcf28f9bd55d762831a8e14783b47e22d14435882f963500fe202c3ff4ff9e74bb1afd7bceeb8f"}, &(0x7f00000008c0)=0xe0) (async, rerun: 64)
ioctl$sock_proto_private(r1, 0x89e5, &(0x7f0000000900)="d4609798ee67100fd6beb6e75e877a403b0d71d734296e65841f425bb0e4d40c9d3ccabc66feffd2efc485853fc7b60cb7811c3845fa83e30a0babd4aeaa154e3c561e251f9a98dfcece5221b61c8a3126824e0e67e9ad97060e24455cfa0a4de0407575b8ff26cd2e15e0b99746c781e96ecd4621f5c707c29f6c037ff3c1433371f4db3c8a81265dddf3dde5") (async, rerun: 64)
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000e00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x380208}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000a00)={0x3b0, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffeff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff7b}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9d}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x607d}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x32f7fd8b}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9ae}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbb8a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x906}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x96e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x596}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6d9}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1800}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x100, @remote, 0xfffffff8}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x21, @mcast2, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x6, @loopback, 0xfffffffd}}}}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x52}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x555}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x140000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x3b0}, 0x1, 0x0, 0x0, 0x20000810}, 0x20000040) (async, rerun: 64)
openat$tun(0xffffffffffffff9c, &(0x7f0000000e40), 0x8080, 0x0) (rerun: 64)
sendmsg$NFT_BATCH(r0, &(0x7f0000001440)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001400)={&(0x7f0000000ec0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWFLOWTABLE={0x1a0, 0x16, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_HOOK={0x180, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'macvlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x1a4, 0x5, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_CHAIN_USERDATA={0xcb, 0xc, "5614b36513ae6ed8b8d0948b8acdb6c6acc2a485133671202d5affce83987f3898fc6aaf19827957fdc3b00f5000623a3139642f104bf553e96d85ff75f8923ddea78de8e77838a17ddff2f0f7530b3ca880ead1de085ccdbacc3cd6875526460cf88da33638a0cdacbdcfbcdcee18e237c353bd3e74f427bf216a2f78498dc4f0bf06519bd241d59e0e9bdf3097592147517c8c135c0d7f80eaf479b72d35f4416a28794dd957cd58fb86494af92584bda2771e893b549bed14daf689b33f6ccbe7a340245641"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x7c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffbf0}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_batadv\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'geneve0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWRULE={0x100, 0x6, 0xa, 0x401, 0x0, 0x0, {0xd, 0x0, 0xa}, [@NFTA_RULE_USERDATA={0xec, 0x7, 0x1, 0x0, "4c91094d3bdd7a4b8669d3091122f99b9159de1970cd50aac89dc51232d67f1d364fbd08b06c15864756ecdc1e9c03c82df747c490c0ffdabcae85f60946b7857a85e2105052ad008926fa18e897682177e370584b6c635d70392384fb198389bc769593d2eb45517bcd259c1103d29e38583b9bb2de400baabc5e3d3d83c1bc7c6ff6d6c07cf26e4e44511484ac1de8f3aae5ff72c089ebff9e7bd5462d608d43cb8618165ffc68ce5d2770d66d3b27244522ba36025913a7115f219747b7421112234bd5631d66cd44dba652935796dbadc95b2540a1dd6a37cf7403a027d4300e988e30996830"}]}, @NFT_MSG_DELCHAIN={0x58, 0x5, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4a0ba568}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x24}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}], {0x14}}, 0x50c}, 0x1, 0x0, 0x0, 0x40881}, 0x48c4)
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000014c0), r0)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x4c, r6, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x19}}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x88}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x4c}}, 0x4000) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000001840)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x7000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001640)={0x18c, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1599024fb81b9b01}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) (async)
ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000001880)) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), r1)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x74, r7, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x76}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xa}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}]}, 0x74}, 0x1, 0x0, 0x0, 0x11}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$packet_int(r1, 0x107, 0x10, &(0x7f0000001a40)=0x6, 0x4) (async, rerun: 64)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000001ac0), 0xffffffffffffffff) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001b00)=<r10=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001b40)=<r11=>0x0)
sendmsg$NFC_CMD_GET_DEVICE(r8, &(0x7f0000001c00)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x24, r9, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000}, 0x1)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x14, r2, 0x10, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xd57646138c2ddd6d}, 0x4000000)

3.398582243s ago: executing program 1 (id=2241):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
getpid()
getpid()
r1 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(0x0, 0x0, 0x300000f, 0x110, r1, 0x80000000)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0)
getpid()
accept(r0, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000001c0)=""/135, 0x87}, {&(0x7f0000001680)=""/227, 0xe3}, {&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f0000002840)=""/4098, 0x1002}], 0x4}, 0x7}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x8ff}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000005740)=""/4103, 0x1007}, {&(0x7f0000004740)=""/4096, 0x1000}, {&(0x7f0000000400)=""/85, 0x55}, {&(0x7f0000002740)=""/84, 0x54}, {&(0x7f0000001500)=""/168, 0xa8}], 0x5}, 0x8ffffe}], 0x7, 0x0, 0x0)

3.398036847s ago: executing program 2 (id=2242):
socket$netlink(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008080}, 0x4008050)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4020000000000256111730000000000850000001d0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200fbdbdf253900000008000300", @ANYRES32=r2, @ANYBLOB="2c005a8028000380240008"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x80040)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x800000, 0x11, r4, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x4031, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x400000002, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.kill\x00', 0x26e1, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r6}, &(0x7f0000000540), &(0x7f0000000740)=r5}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r7}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES8=r3, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

3.39307447s ago: executing program 3 (id=2243):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000150041000000ebe803bee7ea2d"], 0x225c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000094)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004041}, 0x4085)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="6d9311000000f8dbdf25010000000c00030003"], 0x28}, 0x1, 0x0, 0x0, 0x48891}, 0x880)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r4)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in6=@mcast2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in6=@loopback, 0x4d2, 0x3c}, @in=@local, {0x0, 0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=<r8=>0x0)
r9 = socket$inet6(0xa, 0x3, 0x4)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x43, 0x0, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10)
sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r11, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
sendmsg$NFC_CMD_SE_IO(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r11, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_APDU={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4050}, 0x80)
sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000440)={0x0, 0x26, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8800)

3.35658099s ago: executing program 1 (id=2245):
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}})
write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000010000000000000000ffffffa1000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b8002944291189"], 0xfdef)

3.182312445s ago: executing program 0 (id=2247):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2728], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)={0x1f}}, 0x48)

3.095247343s ago: executing program 2 (id=2249):
r0 = socket(0x1e, 0x4, 0x0)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f00000002c0)={0x1, 'veth1_virt_wifi\x00', {}, 0x1000})
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r0, &(0x7f0000008280)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000004240)=[{&(0x7f0000000440)=""/198, 0xc6}, {&(0x7f0000000540)=""/86, 0x56}, {&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000004100)=""/161, 0xa1}, {&(0x7f00000041c0)=""/128, 0x80}], 0x5, &(0x7f00000042c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f0000005800)=[{&(0x7f0000004300)=""/116, 0x74}, {&(0x7f0000004380)=""/4096, 0x1000}, {&(0x7f0000005380)=""/78, 0x4e}, {&(0x7f0000005400)=""/96, 0x60}, {&(0x7f0000005480)=""/255, 0xff}, {&(0x7f0000005580)=""/72, 0x48}, {&(0x7f0000005600)=""/224, 0xe0}, {&(0x7f0000005700)=""/225, 0xe1}], 0x8, &(0x7f0000005880)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000005940), 0x6e, &(0x7f0000005c40)=[{&(0x7f00000059c0)=""/132, 0x84}, {&(0x7f0000005a80)=""/6, 0x6}, {&(0x7f0000005ac0)=""/129, 0x81}, {&(0x7f0000005b80)=""/168, 0xa8}], 0x4, &(0x7f0000005c80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000005d00), 0x6e, &(0x7f0000008180)=[{&(0x7f0000005d80)=""/73, 0x49}, {&(0x7f0000005e00)=""/4096, 0x1000}, {&(0x7f0000006e00)=""/194, 0xc2}, {&(0x7f0000006f00)=""/76, 0x4c}, {&(0x7f0000006f80)=""/4096, 0x1000}, {&(0x7f0000007f80)=""/168, 0xa8}, {&(0x7f0000008040)=""/10, 0xa}, {&(0x7f0000008080)=""/173, 0xad}, {&(0x7f0000008140)=""/40, 0x28}], 0x9, &(0x7f0000008240)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}], 0x4, 0x0, &(0x7f0000008380)={0x77359400})
pselect6(0x40, &(0x7f0000000000)={0x7, 0x5, 0x100000001, 0x5, 0xfffffffffffffffe, 0x0, 0x1, 0x5}, &(0x7f0000000040)={0xffffffffffffff88, 0x7, 0x4, 0x8, 0xdb38, 0x1, 0xcb, 0x40}, &(0x7f0000000080)={0x9, 0x7, 0x1, 0x508d54e0, 0x6, 0x0, 0x101, 0x7}, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x5]}, 0x8})
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000900000000000000008500000053000000b7080000000000007b8af8ff00000000b7080000fdffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6cab2ea5}, 0x94)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f00"], 0x40}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x51, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a807c8c6394f903", 0x11}], 0x1}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="40d174b28bf781c274386d178550", 0x0, 0x1200801, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmmsg$unix(r0, &(0x7f0000002340)=[{{&(0x7f0000000380)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/13, 0xd}, {&(0x7f0000000600)=""/192, 0xc0}], 0x2, &(0x7f0000000700)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000740)=@abs, 0x6e, &(0x7f0000002200)=[{&(0x7f00000007c0)=""/148, 0x94}, {&(0x7f0000000880)=""/128, 0x80}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/101, 0x65}, {&(0x7f0000002180)=""/117, 0xfffffffffffffe94}], 0x5, &(0x7f0000002280)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}], 0x2, 0x400122a0, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)

3.094480814s ago: executing program 1 (id=2250):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000007d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0f00000004000000080000000b"], 0x48)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x80}}, 0x20040080)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r3, r4, 0x7, 0x0, @val=@tcx={@void, @value=r3}}, 0x1c)
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r2}, 0x18)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80020001000001}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48890}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', <r8=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f", @ANYRES32=r8, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000001f80), r9)
sendmsg$DEVLINK_CMD_RATE_SET(r9, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000001fc0)={0x3c, r10, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004010}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r8, {0x5, 0xf}, {0xfff3}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
socket(0x10, 0x3, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_crypto(r11, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)=@alg={0x128, 0x10, 0x8, 0x70bd28, 0x25dfdbfc, {{'seqiv(gcm_base(fpu(pcbc(aes)),vmac64(compress_null-generic)))\x00'}, '\x00', '\x00', 0x0, 0x2000}, [{0x8, 0x1, 0x4}, {0x8, 0x1, 0xb733}, {0x8, 0x1, 0x4ba1}, {0x8, 0x1, 0x9250}, {0x8, 0x1, 0x10000}, {0x8, 0x1, 0xffffffff}, {0x8, 0x1, 0xfffffffc}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x6}]}, 0x128}, 0x1, 0x0, 0x0, 0x40}, 0x40010)

3.094111159s ago: executing program 0 (id=2251):
unshare(0x4020600)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c00018025000100"], 0xf0}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000007000000800000850000007500000095000000000000000000000000f81ced3e9d8af9b73898efd94fc91ef16635196aa84b4485b3bbf0fc1303074d3c8186362b432a83908c25650325cd66e7bdf7e6c254a8a8415d0345e1d6f157400e70aa933117b210768f1d7cafe5a9eeed7485980452fa80a52f0504e008acda94d84024c6720ac010022b3e9453e59376426e55c3de160f53927165c3215afecc47555bbddec2cbb0b848b056203462ff1a2196b3e893ae6d32"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
getsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x2, 0x1}, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="120000000800000004000000b47c000014"], 0x50)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="740000000a0601020000000000000000030000000900020073797a310000000005000100070000004c0007"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000010)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="e86364e0a3991ae0faffb982", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x33)

2.979682713s ago: executing program 0 (id=2253):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, 0x2c)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket(0x10, 0x803, 0x0)
connect$pptp(r2, 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r2, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa1400"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20008824}, 0x4800)
getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0x6001, 0x4, 0x3f0, 0x220, 0x110, 0x220, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @rand_addr=0x64010101, 0x0, 0x7ffffffe}}}, {{@arp={@loopback, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'team_slave_0\x00', {}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@broadcast, @multicast2, @private, 0xf}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff})
bind$unix(r7, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)
close(0x3)
r8 = socket$unix(0x1, 0x2, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r10, @ANYBLOB="0c009900ff070000710000001400040073797a6b00000000000001000000000008000500070000000a", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x91}, 0x24004884)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
r11 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r12=>0x0})
r13 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0xfffffffffffffcf9, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
r14 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r14, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@loopback, 0x4e23, 0x0, 0x4e1d, 0x0, 0x2}, {0xfffffffffffffffd, 0x1, 0x1, 0x0, 0x3, 0xb, 0xfffffffffffffffb}, {0x9, 0xffffffffe, 0x4053e5, 0x20}, 0x7, 0x80001, 0x1, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d4, 0x32}, 0xa, @in=@loopback, 0x3502, 0x1, 0x0, 0x0, 0x616a45e7, 0x8}}, 0xe8)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e23, 0x1, 0xfffffffe}}, 0x44)
setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000200)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x1, 0x1}}, 0x44)

2.068327332s ago: executing program 2 (id=2257):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00000018000000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180200410020782500000000002020207b1bf8ff00000000bfa100000000000007010000f8ffffffb70200000800ff80b50af9ff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94)

2.05312046s ago: executing program 2 (id=2258):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8}, 0x50) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000840)=r3, 0x4)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xb72}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94)

2.022099154s ago: executing program 2 (id=2259):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
unshare(0x10000000)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0xbb171, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(r4)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x11, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x6c, 0x28, 0x1, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x800, 0x3, 0x8, 0x4, 0x9, 0xa902, 0x800, 0x400, 0xfffffffc, 0x8, 0x1c, 0x1c, 0xd, 0x2, 0x9, 0xffff}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4009c}, 0x40000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r7)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x2, 0xfffff000}, {0x6, 0x0, 0x0, 0x6}]}, 0x10)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000a4fa4cb92262e07256eadfbadf8c74f114df877549a150e8afe78b845970f1f221067559b01be897da7edaa37983d3d79c108b6a8814f3476756b690d6b6aa741f10e9cb29105cf526bf15d74d1b3653d30200000000000000028eb69919a1e07513fea9b6c1e0ed", @ANYRES16=r8, @ANYBLOB="31072bbd700000000000380000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000"], 0x3c}, 0x1, 0x2}, 0x20000014)

1.835559926s ago: executing program 4 (id=2260):
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}})
write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000000000fde1000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b8002944291189"], 0xfdef)

1.716019507s ago: executing program 4 (id=2261):
r0 = socket$kcm(0x2b, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) (async, rerun: 64)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) (async, rerun: 64)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0}, &(0x7f0000000100)=0x14)
sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400d000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x130, 0x13, 0x200, 0x70bd28, 0x25dfdbff, {0x15, 0x40, 0x8, 0x8, {0x4e21, 0x4e24, [0xfffffffd, 0x1, 0xfffffffa, 0x5], [0x81, 0x0, 0xe7b3, 0x80000001], r2, [0x72d25805]}, 0xcff, 0x3}, [@INET_DIAG_REQ_BYTECODE={0xc4, 0x1, "29c20fdaed2843c41e90634723c083cd70a6d01bc9dd6124cd4709c3259ccbac171a3fb3041eb27d53c0662e14db1370358e6692a2a7e561db1742b12480a1ec919d9a47f4694a1dbcc755cf22070d6a03c1169a2cc4eab09722f78cc7290179d33f792803eff8bc2c213e816c66c8fa5d538f974a4781a9e6da3699aa99083a5ac61280c9de22746d2869ea5dde2a34f746cecd4d46472f15b741498cf78cae275835744036fa26017e205a714b7be485d9642c93136ed4726acb58d8bdfb2b"}, @INET_DIAG_REQ_BYTECODE={0xf, 0x1, "7d033e27b41abe119e7275"}, @INET_DIAG_REQ_BYTECODE={0x10, 0x1, "75125566c07af2698cf5e244"}]}, 0x130}, 0x1, 0x0, 0x0, 0x20005}, 0x850) (async)
close(r0)

1.668794211s ago: executing program 4 (id=2262):
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x17, &(0x7f0000000340)=ANY=[@ANYBLOB="180000008b00feffffff00000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf0900000000000055090100000000809500000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffff00008500000006000000bf91000000000000b7020000200000008500000084200000b70000000005000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0xfec, &(0x7f0000000780)=""/4076, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94)

1.600425663s ago: executing program 4 (id=2263):
unshare(0x4020600)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c00018025000100"], 0xf0}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000007000000800000850000007500000095000000000000000000000000f81ced3e9d8af9b73898efd94fc91ef16635196aa84b4485b3bbf0fc1303074d3c8186362b432a83908c25650325cd66e7bdf7e6c254a8a8415d0345e1d6f157400e70aa933117b210768f1d7cafe5a9eeed7485980452fa80a52f0504e008acda94d84024c6720ac010022b3e9453e59376426e55c3de160f53927165c3215afecc47555bbddec2cbb0b848b056203462ff1a2196b3e893ae6d32"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x2, 0x1}, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="120000000800000004000000b47c000014"], 0x50)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="740000000a0601020000000000000000030000000900020073797a310000000005000100070000004c0007"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000010)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="e86364e0a3991ae0faffb982", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x33)

1.568838396s ago: executing program 4 (id=2264):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002a40), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_SE_IO(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80008000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r2)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x9fe, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x7, 0x4, 0x100, 0x4, 0x24}, 0x50)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
r5 = accept$inet(r4, &(0x7f0000000100)={0x2, 0x0, @loopback}, &(0x7f0000000200)=0x10)
setsockopt$IP_VS_SO_SET_EDIT(r5, 0x0, 0x483, &(0x7f0000000240)={0x2f, @local, 0x4e24, 0x2, 'rr\x00', 0x9, 0x6, 0x2b}, 0x2c)
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x3}, 0x10)
sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000640)=ANY=[@ANYBLOB="180000001600210925bd70000000fdff0a124c"], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x25}, 0x44)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000000)={0xe0000000})
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000280)={0x4, 0x1}, 0x4)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, 0x2}, 0x1)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x20, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x24040000)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x4c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x12, 0x5, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044080}, 0x1c890)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x1, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r2)
sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r9, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r8], 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x9, 0x0, &(0x7f0000000800)="000000000000000002", 0x0}, 0x50)

241.05214ms ago: executing program 3 (id=2265):
r0 = socket(0xa, 0x3, 0xff)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)=@newqdisc={0x3b4, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x384, 0x2, [@TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3b4}}, 0x4)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'rose0\x00', 0x200})
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000002100), &(0x7f0000000000)=0x30)
pipe(&(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r7, 0x0, 0x0, 0x2000c044, 0x0, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x1, &(0x7f0000000140), 0x4)
vmsplice(r6, &(0x7f0000000000)=[{&(0x7f00000001c0)='\b', 0x1}], 0x1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
vmsplice(r5, &(0x7f00000007c0)=[{&(0x7f0000000340)="b7", 0x1}], 0x1, 0xa)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000130a01020000000000000000000000050900020073797af4ef00c6ce"], 0x20}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x40)
sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000040)={0xa, 0x2, 0x200, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x18}, 0x922bac8556bdad8e)

239.485064ms ago: executing program 4 (id=2266):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = gettid()
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.current\x00', 0x275a, 0x0)
r3 = socket$inet(0x2, 0x3, 0xa)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d000400000000000e000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x8000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_type(r4, 0x0, 0x2, 0x0)
r5 = openat$cgroup_pressure(r4, &(0x7f0000000400)='cpu.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r5, &(0x7f0000000440)={'full', 0x20, 0x2, 0x20, 0x100}, 0x2f)
r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000c40), 0x12)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x3)
setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28)
recvmmsg(r7, 0x0, 0x0, 0x0, 0x0)
setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4)
r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r9 = socket(0x10, 0x3, 0x0)
write(r9, &(0x7f00000002c0)="2000000012005f0214f9f4070000fbe60a0000000000c5c61f33ad512e9cfc31", 0x20)
recvmmsg(r9, &(0x7f00000021c0), 0x5b, 0x40, 0x0)
sendfile(r8, r2, 0x0, 0xb)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009100)=[{{&(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000640)="ac807dbe28209c11165914c6bdff1d6144823ed0084a83d13cdb3280f017b5cfcd78122f683f20592e06a785d0ca8ffbd2123d252753486ba263789c0378cc4c9122ab052b4d04895d4b4ede8c2476380b889049608ceddf157a4b3922a05cd8f5ced5387b937b5768364218285c29f067cc5fa6791213ae574f95c2cab77b9e6556f53639ccc4f6431f6e558f4e54f1b197b627b6ee1ba7cfe418105877809099ca58e371d0ae529feac85f06ac0a8f18d52009ade3fb04c432fbba2960d05fca74f9eab2de67", 0xc7}, {&(0x7f0000000740)="5ce37e5683f4672ef61957e705627a6979ce8fb9a9060c57069ac1ecb7d36cc0db785cc773a0a64d665be67e85fc89954e3148f5fd140fdf1fbd0a2bbef98a86da7a823f91913ab35af18b299d9d175a786f3a14f6786a1dc6d201e6bb22639445c03a6e854b7bbcd905b5bd25a9068837", 0x71}, {&(0x7f00000007c0)="365897e82e6c3a7db7495deb9933fea24989fda907e5487c299c0e24e2b1d9779ea625beaf3a78a592992003c717e868af28898c479cb5c025002caf22e6561073594e9cc54ece0bced4149ee0f1b7e1e0ce24", 0x53}], 0x3, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [r9]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}], 0x38, 0x40000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRESOCT=r3], 0x50, 0x800}}], 0x2, 0x40005)

237.625599ms ago: executing program 1 (id=2267):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89fb, &(0x7f0000000040)={'bond0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x93b08501d7bb1e97, 0x4, &(0x7f0000000600)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x99, &(0x7f00000001c0)=""/153, 0x40f00, 0x0, '\x00', r1, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xffffffff, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0xffffffff, 0xd, 0x5, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f00000003c0)=[{0x2, 0x5, 0x7, 0x5}, {0x2, 0x4, 0x3, 0x9}, {0x1, 0x3, 0x7, 0xc}, {0x1, 0x3, 0x10, 0x6}], 0x10, 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000640)=ANY=[], 0x0, 0xffff, 0x0, 0x0, 0x0, 0x43, '\x00', r1, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x3c, 0x0, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9200}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x4, 0x2, 0x1, 0x0, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x94}, 0x54004)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c020000000000000000"], 0x0, 0x34}, 0x28)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, 0x0, 0x20004040)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r10, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
connect$inet6(r10, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="580100001000050001000000000000000a0101000000000000000000000000000000000000000000000000000000000000000a00808000"/64, @ANYRES32=0x0, @ANYRES32=0x80, @ANYBLOB="00000000000000000000000000000001000012343300000000000000000000000000000000000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000a000000800000000000000048000100686d6163287368613129000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000170001000000000000000000000000000000000000002000000000000000"], 0x158}}, 0x0)
sendmsg$nl_xfrm(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80, 0xffffffffffff4bb2, 0x8}, {0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}]}]}, 0xfc}}, 0x0)
sendmmsg$inet6(r10, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000801)
accept4(r9, 0x0, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x408, 0x0, 0x188, 0xffffffff, 0x2a0, 0x0, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, {0x6}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x15, @empty, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key=0x85, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x17, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))

235.867114ms ago: executing program 0 (id=2268):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00000018000000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180200500020782500000000002020207b1bf8ff00000000bfa100000000000007010000f8ffffffb70200000800ff80b50af9ff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94)

1.154719ms ago: executing program 0 (id=2269):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x9c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x70, 0x3, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x2c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x401}]}}}]}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x100}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

0s ago: executing program 0 (id=2270):
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000500180100002020692500000000002020206b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000001ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94)

kernel console output (not intermixed with test programs):

=collect_data cause=failed(directio) comm="syz.4.1173" name="cgroup.controllers" dev="tmpfs" ino=1204 res=0 errno=0
[  188.995157][T10534] netlink: 'syz.4.1175': attribute type 1 has an invalid length.
[  189.377701][T10549] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1181'.
[  189.377727][T10549] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1181'.
[  189.554273][ T5627] block nbd1: Receive control failed (result -32)
[  189.643518][T10562] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  189.643887][T10562] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  189.795170][T10569] ip_tables: iptables: counters copy to user failed while replacing table
[  190.298823][T10596] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1196'.
[  190.577945][T10612] macvlan0: entered promiscuous mode
[  190.979296][T10629] ip_tables: iptables: counters copy to user failed while replacing table
[  191.667039][T10645] netlink: 'syz.1.1209': attribute type 10 has an invalid length.
[  191.682693][ T8923] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  191.690925][T10658] macsec1: entered allmulticast mode
[  191.691374][T10658] 8021q: adding VLAN 0 to HW filter on device macsec1
[  191.721213][T10666] netlink: 'syz.1.1209': attribute type 10 has an invalid length.
[  191.769670][T10645] team0: Port device bond0 added
[  191.769817][ T8923] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  191.975749][T10673] ip_tables: iptables: counters copy to user failed while replacing table
[  192.360821][T10697] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  192.477801][T10707] FAULT_INJECTION: forcing a failure.
[  192.477801][T10707] name failslab, interval 1, probability 0, space 0, times 0
[  192.477835][T10707] CPU: 0 UID: 0 PID: 10707 Comm: syz.4.1230 Not tainted syzkaller #0 PREEMPT(full) 
[  192.477877][T10707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  192.477899][T10707] Call Trace:
[  192.477907][T10707]  <TASK>
[  192.477916][T10707]  dump_stack_lvl+0xe8/0x150
[  192.477947][T10707]  should_fail_ex+0x410/0x560
[  192.477976][T10707]  should_failslab+0xa8/0x100
[  192.477999][T10707]  ? dst_alloc+0x105/0x170
[  192.478016][T10707]  kmem_cache_alloc_noprof+0xa1/0x600
[  192.478045][T10707]  ? lock_acquire+0x115/0x350
[  192.478065][T10707]  ? dst_alloc+0x105/0x170
[  192.478089][T10707]  dst_alloc+0x105/0x170
[  192.478104][T10707]  ? ip_check_mc_rcu+0x407/0x7c0
[  192.478134][T10707]  ip_route_output_key_hash_rcu+0x14ac/0x2720
[  192.478165][T10707]  ? ip_route_output_key_hash+0xd8/0x2a0
[  192.478187][T10707]  ip_route_output_key_hash+0x18d/0x2a0
[  192.478206][T10707]  ? arch_stack_walk+0xfb/0x150
[  192.478229][T10707]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  192.478254][T10707]  ? lock_acquire+0x115/0x350
[  192.478292][T10707]  ip_route_output_flow+0x2a/0x150
[  192.478318][T10707]  ? security_sk_classify_flow+0x6d/0x150
[  192.478351][T10707]  raw_sendmsg+0x110d/0x1a20
[  192.478387][T10707]  ? __pfx_raw_sendmsg+0x10/0x10
[  192.478424][T10707]  ? up_write+0x19d/0x4a0
[  192.478457][T10707]  ? __mutex_trylock_common+0x15f/0x270
[  192.478484][T10707]  ? aa_sock_msg_perm+0xfc/0x210
[  192.478506][T10707]  ? sock_rps_record_flow+0x19/0x350
[  192.478529][T10707]  ? inet_sendmsg+0x298/0x320
[  192.478545][T10707]  ? apparmor_socket_sendmsg+0x98/0x360
[  192.478569][T10707]  ? __pfx_inet_sendmsg+0x10/0x10
[  192.478591][T10707]  sock_sendmsg_nosec+0x10f/0x190
[  192.478615][T10707]  sock_sendmsg+0x1ca/0x2d0
[  192.478640][T10707]  ? __pfx_sock_sendmsg+0x10/0x10
[  192.478677][T10707]  ? __asan_memset+0x22/0x50
[  192.478695][T10707]  ? iov_iter_bvec+0xb8/0x180
[  192.478721][T10707]  splice_to_socket+0xb5e/0x12a0
[  192.478773][T10707]  ? __pfx_splice_to_socket+0x10/0x10
[  192.478845][T10707]  ? bpf_lsm_file_permission+0x9/0x20
[  192.478870][T10707]  ? security_file_permission+0x75/0x260
[  192.478891][T10707]  ? rw_verify_area+0x203/0x4c0
[  192.478918][T10707]  ? __pfx_splice_to_socket+0x10/0x10
[  192.478946][T10707]  do_splice+0xf14/0x1970
[  192.478982][T10707]  ? lock_acquire+0x115/0x350
[  192.479019][T10707]  ? __pfx_do_splice+0x10/0x10
[  192.479057][T10707]  __se_sys_splice+0x353/0x490
[  192.479091][T10707]  ? __pfx___se_sys_splice+0x10/0x10
[  192.479125][T10707]  ? __x64_sys_splice+0x21/0xf0
[  192.479156][T10707]  do_syscall_64+0x166/0x520
[  192.479180][T10707]  ? trace_irq_disable+0x3b/0x140
[  192.479198][T10707]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.479217][T10707]  ? clear_bhb_loop+0x70/0xc0
[  192.479240][T10707]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.479258][T10707] RIP: 0033:0x7fdbf939e159
[  192.479276][T10707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  192.479298][T10707] RSP: 002b:00007fdbfa22d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113
[  192.479318][T10707] RAX: ffffffffffffffda RBX: 00007fdbf9625fa0 RCX: 00007fdbf939e159
[  192.479332][T10707] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003
[  192.479343][T10707] RBP: 00007fdbfa22d090 R08: 0000000000008000 R09: 0000000000000000
[  192.479355][T10707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  192.479366][T10707] R13: 00007fdbf9626038 R14: 00007fdbf9625fa0 R15: 00007ffc45fba3d8
[  192.479399][T10707]  </TASK>
[  192.877919][T10713] __nla_validate_parse: 7 callbacks suppressed
[  192.877938][T10713] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1232'.
[  192.912632][T10720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1235'.
[  193.209447][T10740] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  193.240007][T10742] netlink: 'syz.3.1243': attribute type 4 has an invalid length.
[  193.494117][T10756] syzkaller0: entered promiscuous mode
[  193.494150][T10756] syzkaller0: entered allmulticast mode
[  193.698760][T10763] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1252'.
[  193.771155][T10763] veth0_to_team: entered promiscuous mode
[  193.874149][T10722] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  194.015531][T10786] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1252'.
[  194.124212][T10791] netlink: 'syz.0.1260': attribute type 3 has an invalid length.
[  194.227048][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  194.330407][T10802] ip_tables: iptables: counters copy to user failed while replacing table
[  194.547251][ T8198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.547273][ T8198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.756834][T10824] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1267'.
[  194.862020][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  195.217187][T10850] ip_tables: iptables: counters copy to user failed while replacing table
[  195.325096][T10854] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1281'.
[  195.450567][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1281'.
[  195.484317][T10862] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  195.485760][T10862] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1284'.
[  195.554607][T10864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1285'.
[  195.596579][T10864] bond3: option lacp_active: invalid value (5)
[  195.602932][T10864] bond3 (unregistering): Released all slaves
[  195.629193][T10869] team0: entered promiscuous mode
[  195.629221][T10869] netdevsim netdevsim1 netdevsim1: entered promiscuous mode
[  195.630331][T10869] bond0: entered promiscuous mode
[  195.630536][T10869] team0: entered allmulticast mode
[  195.630554][T10869] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[  195.630629][T10869] bond0: entered allmulticast mode
[  195.631244][T10869] team0: Cannot enslave team device to itself
[  195.647361][T10869] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1286'.
[  196.301912][ T5627] Bluetooth: hci3: command 0x0406 tx timeout
[  196.311943][ T5627] Bluetooth: hci2: command 0x0406 tx timeout
[  196.311969][ T5620] Bluetooth: hci1: command 0x0406 tx timeout
[  197.477074][T10948] netlink: 'syz.2.1312': attribute type 26 has an invalid length.
[  197.478867][T10948] netlink: 'syz.2.1312': attribute type 26 has an invalid length.
[  197.670376][T10955] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993
[  197.883476][T10967] __nla_validate_parse: 8 callbacks suppressed
[  197.883496][T10967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1316'.
[  197.889838][T10967] tipc: Enabled bearer <ib:gre0>, priority 0
[  198.027372][T10971] ip_tables: iptables: counters copy to user failed while replacing table
[  198.598855][T11003] ip_tables: iptables: counters copy to user failed while replacing table
[  199.001916][ T8914] tipc: Node number set to 7405569
[  199.336020][T11038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1331'.
[  199.682558][T11060] ip_tables: iptables: counters copy to user failed while replacing table
[  199.689849][T11060] FAULT_INJECTION: forcing a failure.
[  199.689849][T11060] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  199.689878][T11060] CPU: 0 UID: 0 PID: 11060 Comm: syz.0.1337 Not tainted syzkaller #0 PREEMPT(full) 
[  199.689898][T11060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  199.689910][T11060] Call Trace:
[  199.689917][T11060]  <TASK>
[  199.689925][T11060]  dump_stack_lvl+0xe8/0x150
[  199.689957][T11060]  should_fail_ex+0x410/0x560
[  199.689985][T11060]  _copy_from_iter+0x1d3/0x1660
[  199.690006][T11060]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  199.690033][T11060]  ? __pfx_policy_nodemask+0x10/0x10
[  199.690056][T11060]  ? lock_acquire+0x115/0x350
[  199.690076][T11060]  ? __pfx__copy_from_iter+0x10/0x10
[  199.690101][T11060]  ? alloc_pages_mpol+0x256/0x390
[  199.690133][T11060]  copy_page_from_iter+0x219/0x2d0
[  199.690159][T11060]  tun_get_user+0x1c16/0x44d0
[  199.690183][T11060]  ? tun_get_user+0x70a/0x44d0
[  199.690220][T11060]  ? aa_file_perm+0x4ed/0x15f0
[  199.690250][T11060]  ? __pfx_tun_get_user+0x10/0x10
[  199.690271][T11060]  ? __lock_acquire+0x747/0x2de0
[  199.690302][T11060]  ? ref_tracker_alloc+0x341/0x4b0
[  199.690322][T11060]  ? lock_acquire+0x115/0x350
[  199.690339][T11060]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  199.690364][T11060]  ? lock_acquire+0x115/0x350
[  199.690382][T11060]  ? tun_get+0x1c/0x2f0
[  199.690407][T11060]  ? tun_get+0x1c/0x2f0
[  199.690426][T11060]  ? tun_get+0x1c/0x2f0
[  199.690450][T11060]  tun_chr_write_iter+0x113/0x200
[  199.690472][T11060]  vfs_write+0x612/0xba0
[  199.690511][T11060]  ? __pfx_vfs_write+0x10/0x10
[  199.690548][T11060]  ? __fget_files+0x2a/0x420
[  199.690582][T11060]  ksys_write+0x150/0x270
[  199.690609][T11060]  ? __pfx_ksys_write+0x10/0x10
[  199.690646][T11060]  do_syscall_64+0x166/0x520
[  199.690669][T11060]  ? trace_irq_disable+0x3b/0x140
[  199.690687][T11060]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.690705][T11060]  ? clear_bhb_loop+0x70/0xc0
[  199.690729][T11060]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.690746][T11060] RIP: 0033:0x7f550a35e98e
[  199.690763][T11060] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  199.690779][T11060] RSP: 002b:00007f550b345fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  199.690798][T11060] RAX: ffffffffffffffda RBX: 00007f550b3466c0 RCX: 00007f550a35e98e
[  199.690812][T11060] RDX: 0000000000000036 RSI: 00002000000002c0 RDI: 00000000000000c8
[  199.690824][T11060] RBP: 00007f550b346090 R08: 0000000000000000 R09: 0000000000000000
[  199.690836][T11060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  199.690847][T11060] R13: 00007f550a626038 R14: 00007f550a625fa0 R15: 00007ffd665d2348
[  199.690878][T11060]  </TASK>
[  199.767056][T11064] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[  200.092847][T11080] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  200.556639][T11100] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1345'.
[  200.557271][T11100] netlink: 'syz.1.1345': attribute type 16 has an invalid length.
[  200.557288][T11100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1345'.
[  200.650180][T11104] netdevsim0 speed is unknown, defaulting to 1000
[  200.862368][T11126] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1351'.
[  201.552266][T11138] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1353'.
[  201.669963][T11142] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1354'.
[  201.708754][T11142] netlink: 'syz.2.1354': attribute type 1 has an invalid length.
[  201.708776][T11142] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1354'.
[  202.004918][T11149] openvswitch: netlink: Unknown nsh attribute 0
[  202.218533][T11157] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1360'.
[  202.238163][T11157] netlink: 'syz.1.1360': attribute type 16 has an invalid length.
[  202.238183][T11157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1360'.
[  202.560249][T11178] FAULT_INJECTION: forcing a failure.
[  202.560249][T11178] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  202.560280][T11178] CPU: 0 UID: 0 PID: 11178 Comm: syz.0.1364 Not tainted syzkaller #0 PREEMPT(full) 
[  202.560299][T11178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  202.560309][T11178] Call Trace:
[  202.560317][T11178]  <TASK>
[  202.560324][T11178]  dump_stack_lvl+0xe8/0x150
[  202.560355][T11178]  should_fail_ex+0x410/0x560
[  202.560382][T11178]  _copy_from_iter+0x1d3/0x1660
[  202.560405][T11178]  ? __alloc_skb+0x27a/0x7a0
[  202.560429][T11178]  ? __alloc_skb+0x27a/0x7a0
[  202.560452][T11178]  ? __alloc_skb+0x27a/0x7a0
[  202.560473][T11178]  ? __pfx__copy_from_iter+0x10/0x10
[  202.560493][T11178]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[  202.560521][T11178]  ? __alloc_skb+0x27a/0x7a0
[  202.560540][T11178]  ? __alloc_skb+0x27a/0x7a0
[  202.560565][T11178]  ? netlink_sendmsg+0x650/0xb40
[  202.560583][T11178]  ? skb_put+0x112/0x210
[  202.560608][T11178]  netlink_sendmsg+0x6c0/0xb40
[  202.560636][T11178]  ? __pfx_netlink_sendmsg+0x10/0x10
[  202.560663][T11178]  ? apparmor_socket_sendmsg+0x98/0x360
[  202.560687][T11178]  ? __pfx_netlink_sendmsg+0x10/0x10
[  202.560704][T11178]  sock_sendmsg_nosec+0x14e/0x190
[  202.560730][T11178]  ____sys_sendmsg+0x54e/0x850
[  202.560761][T11178]  ? __pfx_____sys_sendmsg+0x10/0x10
[  202.560795][T11178]  ? import_iovec+0x73/0xa0
[  202.560822][T11178]  ___sys_sendmsg+0x2a5/0x360
[  202.560846][T11178]  ? __lock_acquire+0x747/0x2de0
[  202.560870][T11178]  ? __pfx____sys_sendmsg+0x10/0x10
[  202.560932][T11178]  ? __fget_files+0x2a/0x420
[  202.560957][T11178]  ? __fget_files+0x3a2/0x420
[  202.560993][T11178]  __x64_sys_sendmsg+0x1b1/0x290
[  202.561020][T11178]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  202.561070][T11178]  do_syscall_64+0x166/0x520
[  202.561092][T11178]  ? trace_irq_disable+0x3b/0x140
[  202.561111][T11178]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.561129][T11178]  ? clear_bhb_loop+0x70/0xc0
[  202.561152][T11178]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.561170][T11178] RIP: 0033:0x7f550a39e159
[  202.561188][T11178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  202.561204][T11178] RSP: 002b:00007f550b325028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  202.561224][T11178] RAX: ffffffffffffffda RBX: 00007f550a626090 RCX: 00007f550a39e159
[  202.561238][T11178] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 000000000000000c
[  202.561250][T11178] RBP: 00007f550b325090 R08: 0000000000000000 R09: 0000000000000000
[  202.561262][T11178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  202.561272][T11178] R13: 00007f550a626128 R14: 00007f550a626090 R15: 00007ffd665d2348
[  202.561313][T11178]  </TASK>
[  203.022666][T11193] __nla_validate_parse: 1 callbacks suppressed
[  203.022687][T11193] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1373'.
[  203.024152][T11193] netlink: 'syz.3.1373': attribute type 16 has an invalid length.
[  203.024169][T11193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1373'.
[  203.112503][T11197] netlink: 'syz.1.1375': attribute type 4 has an invalid length.
[  203.112939][T11198] netlink: 'syz.1.1375': attribute type 4 has an invalid length.
[  203.230760][T11208] x_tables: duplicate underflow at hook 2
[  203.399209][T11222] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1383'.
[  203.475039][T11229] ip_tables: iptables: counters copy to user failed while replacing table
[  203.510643][T11230] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1385'.
[  203.556763][T11234] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1386'.
[  203.557287][T11234] netlink: 'syz.3.1386': attribute type 16 has an invalid length.
[  203.557304][T11234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1386'.
[  203.648969][T11224] netlink: Invalid conntrack helper
[  203.648998][T11224] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  203.975803][T11257] netdevsim0 speed is unknown, defaulting to 1000
[  204.497223][T11273] 8021q: adding VLAN 0 to HW filter on device team0
[  204.532429][T11273] 8021q: adding VLAN 0 to HW filter on device batadv0
[  204.607246][T11284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1398'.
[  204.669396][T11289] netlink: 'syz.1.1398': attribute type 16 has an invalid length.
[  204.669417][T11289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1398'.
[  204.694302][T11273] batman_adv: batadv0: Interface activated: batadv_slave_1
[  204.698412][T11273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  204.698432][T11273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  204.716857][T11273] veth1_vlan: left promiscuous mode
[  204.723285][T11273] veth0_vlan: left promiscuous mode
[  204.728894][T11273] veth0_vlan: entered promiscuous mode
[  204.734771][T11273] veth1_vlan: entered promiscuous mode
[  204.760570][T11273] veth0_macvtap: left promiscuous mode
[  204.761320][T11273] veth0_macvtap: entered promiscuous mode
[  204.790627][T11273] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  204.791656][T11273] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  204.809133][T11273] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  204.821680][T11273] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  204.842864][T11273] batman_adv: batadv0: Interface activated: ip6gretap1
[  204.854388][T11273] 8021q: adding VLAN 0 to HW filter on device bond1
[  204.899734][ T8923] s`z1: Port: 1 Link ACTIVE
[  204.907362][ T1013] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.907497][ T1013] bridge0: port 1(bridge_slave_0) entered forwarding state
[  204.916322][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.916434][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state
[  204.999724][ T8200] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  205.062276][ T8201] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  205.062308][ T8201] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.062390][ T8201] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  205.062412][ T8201] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  205.062451][ T8201] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  205.062473][ T8201] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  205.062502][ T8201] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  205.062524][ T8201] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  205.355183][T11307] syzkaller1: entered promiscuous mode
[  205.355205][T11307] syzkaller1: entered allmulticast mode
[  205.478325][T11322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1404'.
[  205.584273][T11319] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1406'.
[  205.831486][T11342] ��: renamed from lo (while UP)
[  206.292442][ T8201] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  206.292486][ T8201] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  206.292518][ T8201] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  206.292549][ T8201] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  207.147361][T11387] ip_tables: iptables: counters copy to user failed while replacing table
[  207.218896][T11391] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  207.292106][ T8922] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  207.372800][ T8922] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  207.379521][T11398] syzkaller1: entered promiscuous mode
[  207.379543][T11398] syzkaller1: entered allmulticast mode
[  207.629143][T11412] netlink: 'syz.2.1431': attribute type 2 has an invalid length.
[  207.737735][T11424] mac80211_hwsim hwsim5 wlan1: Master is either lo or non-ether device
[  207.965919][ T8201] IPVS: starting estimator thread 0...
[  208.052013][T11437] IPVS: using max 52 ests per chain, 124800 per kthread
[  208.646334][T11475] __nla_validate_parse: 8 callbacks suppressed
[  208.646353][T11475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1446'.
[  208.646366][T11475] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1446'.
[  209.422018][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  209.460927][T11529] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.474642][T11529] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.478068][T11535] netlink: 'syz.4.1466': attribute type 2 has an invalid length.
[  209.478088][T11535] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1466'.
[  209.638361][T11533] IPVS: sh: FWM 3 0x00000003 - no destination available
[  209.749084][T11547] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1471'.
[  209.838562][T11557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1474'.
[  209.838589][T11557] block nbd2: Unsupported socket: should be TCP or UNIX.
[  209.938456][T11562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1474'.
[  210.940756][T11551] batman_adv: batadv0: Interface deactivated: gretap1
[  211.052763][ T8201] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  211.053499][ T8201] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  211.053634][ T8201] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  211.054258][ T8200] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  211.186865][T11587] syzkaller1: entered promiscuous mode
[  211.186888][T11587] syzkaller1: entered allmulticast mode
[  211.259368][T11594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1480'.
[  211.278717][T11595] ip_tables: iptables: counters copy to user failed while replacing table
[  211.365068][T11599] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1478'.
[  211.418588][T11594] 8021q: adding VLAN 0 to HW filter on device bond4
[  211.428498][T11594] bond3: (slave bond4): Enslaving as an active interface with an up link
[  211.477518][T11599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1478'.
[  211.510760][T11603] bond3: (slave gretap2): Enslaving as an active interface with an up link
[  211.677478][T11624] FAULT_INJECTION: forcing a failure.
[  211.677478][T11624] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  211.677510][T11624] CPU: 1 UID: 0 PID: 11624 Comm: syz.4.1486 Not tainted syzkaller #0 PREEMPT(full) 
[  211.677530][T11624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  211.677541][T11624] Call Trace:
[  211.677548][T11624]  <TASK>
[  211.677556][T11624]  dump_stack_lvl+0xe8/0x150
[  211.677587][T11624]  should_fail_ex+0x410/0x560
[  211.677614][T11624]  prepare_alloc_pages+0x223/0x600
[  211.677641][T11624]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  211.677667][T11624]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  211.677692][T11624]  ? __pfx_policy_nodemask+0x10/0x10
[  211.677728][T11624]  alloc_pages_mpol+0x21e/0x390
[  211.677758][T11624]  alloc_pages_noprof+0xb1/0x2b0
[  211.677783][T11624]  get_free_pages_noprof+0xf/0x80
[  211.677804][T11624]  __kasan_populate_vmalloc+0x38/0x1c0
[  211.677828][T11624]  ? do_raw_spin_unlock+0xf5/0x200
[  211.677866][T11624]  alloc_vmap_area+0xd1a/0x1420
[  211.677908][T11624]  ? __pfx_alloc_vmap_area+0x10/0x10
[  211.677930][T11624]  ? __kmalloc_cache_node_noprof+0x3d1/0x620
[  211.677951][T11624]  ? __kmalloc_cache_node_noprof+0x1f7/0x620
[  211.677970][T11624]  ? __get_vm_area_node+0x155/0x2f0
[  211.678006][T11624]  __get_vm_area_node+0x200/0x2f0
[  211.678043][T11624]  __vmalloc_node_range_noprof+0x343/0x1540
[  211.678071][T11624]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  211.678093][T11624]  ? __lock_acquire+0x747/0x2de0
[  211.678138][T11624]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  211.678174][T11624]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  211.678194][T11624]  __vmalloc_noprof+0xd2/0x120
[  211.678220][T11624]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  211.678244][T11624]  bpf_prog_alloc_no_stats+0x47/0x560
[  211.678264][T11624]  ? bpf_prog_alloc+0x2a/0x1a0
[  211.678286][T11624]  bpf_prog_alloc+0x3c/0x1a0
[  211.678310][T11624]  bpf_prog_load+0x7f8/0x1c20
[  211.678341][T11624]  ? __pfx_bpf_prog_load+0x10/0x10
[  211.678387][T11624]  __sys_bpf+0xd0d/0xd90
[  211.678415][T11624]  ? __pfx___sys_bpf+0x10/0x10
[  211.678446][T11624]  ? __fget_files+0x2a/0x420
[  211.678486][T11624]  ? ksys_write+0x242/0x270
[  211.678515][T11624]  ? __pfx_ksys_write+0x10/0x10
[  211.678545][T11624]  __x64_sys_bpf+0xba/0xd0
[  211.678568][T11624]  do_syscall_64+0x166/0x520
[  211.678590][T11624]  ? trace_irq_disable+0x3b/0x140
[  211.678608][T11624]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.678627][T11624]  ? clear_bhb_loop+0x70/0xc0
[  211.678650][T11624]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.678668][T11624] RIP: 0033:0x7fdbf939e159
[  211.678685][T11624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  211.678701][T11624] RSP: 002b:00007fdbfa22d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  211.678720][T11624] RAX: ffffffffffffffda RBX: 00007fdbf9625fa0 RCX: 00007fdbf939e159
[  211.678734][T11624] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005
[  211.678745][T11624] RBP: 00007fdbfa22d090 R08: 0000000000000000 R09: 0000000000000000
[  211.678757][T11624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  211.678768][T11624] R13: 00007fdbf9626038 R14: 00007fdbf9625fa0 R15: 00007ffc45fba3d8
[  211.678799][T11624]  </TASK>
[  211.678925][T11624] warn_alloc: 2 callbacks suppressed
[  211.678936][T11624] syz.4.1486: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  211.679013][T11624] CPU: 1 UID: 0 PID: 11624 Comm: syz.4.1486 Not tainted syzkaller #0 PREEMPT(full) 
[  211.679033][T11624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  211.679043][T11624] Call Trace:
[  211.679050][T11624]  <TASK>
[  211.679058][T11624]  dump_stack_lvl+0xe8/0x150
[  211.679085][T11624]  warn_alloc+0x24d/0x270
[  211.679106][T11624]  ? lockdep_hardirqs_on+0x7b/0x110
[  211.679130][T11624]  ? __pfx_warn_alloc+0x10/0x10
[  211.679148][T11624]  ? kfree+0x1c5/0x650
[  211.679180][T11624]  ? __get_vm_area_node+0x219/0x2f0
[  211.679214][T11624]  __vmalloc_node_range_noprof+0x36b/0x1540
[  211.679241][T11624]  ? __lock_acquire+0x747/0x2de0
[  211.679285][T11624]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  211.679319][T11624]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  211.679339][T11624]  __vmalloc_noprof+0xd2/0x120
[  211.679364][T11624]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  211.679387][T11624]  bpf_prog_alloc_no_stats+0x47/0x560
[  211.679406][T11624]  ? bpf_prog_alloc+0x2a/0x1a0
[  211.679427][T11624]  bpf_prog_alloc+0x3c/0x1a0
[  211.679449][T11624]  bpf_prog_load+0x7f8/0x1c20
[  211.679480][T11624]  ? __pfx_bpf_prog_load+0x10/0x10
[  211.679525][T11624]  __sys_bpf+0xd0d/0xd90
[  211.679553][T11624]  ? __pfx___sys_bpf+0x10/0x10
[  211.679584][T11624]  ? __fget_files+0x2a/0x420
[  211.679625][T11624]  ? ksys_write+0x242/0x270
[  211.679650][T11624]  ? __pfx_ksys_write+0x10/0x10
[  211.679680][T11624]  __x64_sys_bpf+0xba/0xd0
[  211.679701][T11624]  do_syscall_64+0x166/0x520
[  211.679723][T11624]  ? trace_irq_disable+0x3b/0x140
[  211.679740][T11624]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.679759][T11624]  ? clear_bhb_loop+0x70/0xc0
[  211.679781][T11624]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.679798][T11624] RIP: 0033:0x7fdbf939e159
[  211.679816][T11624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  211.679829][T11624] RSP: 002b:00007fdbfa22d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  211.679847][T11624] RAX: ffffffffffffffda RBX: 00007fdbf9625fa0 RCX: 00007fdbf939e159
[  211.679860][T11624] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005
[  211.679871][T11624] RBP: 00007fdbfa22d090 R08: 0000000000000000 R09: 0000000000000000
[  211.679882][T11624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  211.679892][T11624] R13: 00007fdbf9626038 R14: 00007fdbf9625fa0 R15: 00007ffc45fba3d8
[  211.679923][T11624]  </TASK>
[  211.679934][T11624] Mem-Info:
[  211.679942][T11624] active_anon:5107 inactive_anon:0 isolated_anon:0
[  211.679942][T11624]  active_file:17 inactive_file:43443 isolated_file:0
[  211.679942][T11624]  unevictable:0 dirty:403 writeback:0
[  211.679942][T11624]  slab_reclaimable:11289 slab_unreclaimable:101086
[  211.679942][T11624]  mapped:29698 shmem:539 pagetables:1099
[  211.679942][T11624]  sec_pagetables:0 bounce:0
[  211.679942][T11624]  kernel_misc_reclaimable:0
[  211.679942][T11624]  free:1324984 free_pcp:11479 free_cma:0
[  211.679994][T11624] Node 0 active_anon:20428kB inactive_anon:0kB active_file:68kB inactive_file:173576kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118792kB dirty:1612kB writeback:0kB shmem:2156kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13340kB pagetables:4284kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  211.680039][T11624] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  211.680082][T11624] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  211.680133][T11624] lowmem_reserve[]: 0 2487 2487 2487 2487
[  211.680167][T11624] Node 0 DMA32 free:1348496kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:20428kB inactive_anon:0kB active_file:68kB inactive_file:173576kB unevictable:0kB writepending:1612kB zspages:0kB present:3129332kB managed:2546840kB mlocked:0kB bounce:0kB free_pcp:45912kB local_pcp:20956kB free_cma:0kB
[  211.680219][T11624] lowmem_reserve[]: 0 0 0 0 0
[  211.680250][T11624] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  211.680297][T11624] lowmem_reserve[]: 0 0 0 0 0
[  211.680329][T11624] Node 1 Normal free:3936080kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  211.680380][T11624] lowmem_reserve[]: 0 0 0 0 0
[  211.680436][T11624] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  211.680540][T11624] Node 0 DMA32: 1598*4kB (UM) 991*8kB (UME) 420*16kB (UME) 61*32kB (UME) 125*64kB (UME) 109*128kB (UME) 54*256kB (UM) 21*512kB (UM) 9*1024kB (UM) 6*2048kB (UME) 307*4096kB (UM) = 1348496kB
[  211.680683][T11624] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  211.680768][T11624] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 6*16kB (UM) 3*32kB (UM) 8*64kB (UM) 3*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 960*4096kB (UM) = 3936080kB
[  211.680922][T11624] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  211.680937][T11624] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  211.680952][T11624] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  211.680967][T11624] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  211.680981][T11624] 43995 total pagecache pages
[  211.680995][T11624] 0 pages in swap cache
[  211.681002][T11624] Free swap  = 124996kB
[  211.681009][T11624] Total swap = 124996kB
[  211.681017][T11624] 2097051 pages RAM
[  211.681023][T11624] 0 pages HighMem/MovableOnly
[  211.681030][T11624] 428725 pages reserved
[  211.681037][T11624] 0 pages cma reserved
[  212.603073][T11652] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1491'.
[  212.672823][T11653] netlink: 'syz.2.1490': attribute type 1 has an invalid length.
[  212.929956][T11666] geneve1: entered promiscuous mode
[  213.064662][T11667] 8021q: adding VLAN 0 to HW filter on device bond9
[  213.080915][T11673] bond9: (slave batadv2): Opening slave failed
[  213.684472][T11696] netlink: 'syz.4.1502': attribute type 15 has an invalid length.
[  213.684494][T11696] __nla_validate_parse: 2 callbacks suppressed
[  213.684503][T11696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1502'.
[  213.696555][T11696] netlink: 'syz.4.1502': attribute type 15 has an invalid length.
[  213.696576][T11696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1502'.
[  213.706751][T11700] veth1_to_bond: entered promiscuous mode
[  213.706770][T11700] veth1_to_bond: entered allmulticast mode
[  213.774065][ T8201] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0
[  213.774753][ T8201] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0
[  213.774782][ T8201] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0
[  213.774807][ T8201] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0
[  213.778920][T11702] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1503'.
[  213.828221][T11702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1503'.
[  213.910942][T11705] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1503'.
[  213.910979][T11705] netlink: 'syz.2.1503': attribute type 1 has an invalid length.
[  213.968755][T11704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1504'.
[  214.087762][T11707] netdevsim0 speed is unknown, defaulting to 1000
[  214.577438][T11738] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1514'.
[  214.660121][T11742] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1515'.
[  214.684493][T11742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1515'.
[  215.076229][T11753] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1517'.
[  215.103424][T11753] netlink: 'syz.3.1517': attribute type 1 has an invalid length.
[  215.201011][T11753] bond4: entered promiscuous mode
[  215.211996][T11753] 8021q: adding VLAN 0 to HW filter on device bond4
[  215.268220][T11763] ipvlan2: entered allmulticast mode
[  215.268242][T11763] bond4: entered allmulticast mode
[  215.324132][T11753] ipvlan3: entered allmulticast mode
[  215.468897][T11768] bond4: (slave bridge4): making interface the new active one
[  215.468922][T11768] bridge4: entered promiscuous mode
[  215.469111][T11768] bridge4: entered allmulticast mode
[  215.495135][T11768] bond4: (slave bridge4): Enslaving as an active interface with an up link
[  215.769095][T11793] bridge_slave_0: left allmulticast mode
[  215.769127][T11793] bridge_slave_0: left promiscuous mode
[  215.769364][T11793] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.792911][T11793] bridge_slave_1: left allmulticast mode
[  215.792936][T11793] bridge_slave_1: left promiscuous mode
[  215.793201][T11793] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.853688][T11793] bond0: (slave bond_slave_0): Releasing backup interface
[  215.893255][T11793] bond0: (slave bond_slave_1): Releasing backup interface
[  215.896594][T11793] batman_adv: batadv0: Removing interface: batadv_slave_1
[  215.910807][T11793] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  216.205259][T11827] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  216.205728][T11831] syzkaller0: entered promiscuous mode
[  216.205747][T11831] syzkaller0: entered allmulticast mode
[  216.299265][T11831] tipc: Resetting bearer <eth:syzkaller0>
[  216.327306][T11825] tipc: Resetting bearer <eth:syzkaller0>
[  216.394649][T11825] tipc: Disabling bearer <eth:syzkaller0>
[  216.574436][T11843] FAULT_INJECTION: forcing a failure.
[  216.574436][T11843] name failslab, interval 1, probability 0, space 0, times 0
[  216.574467][T11843] CPU: 0 UID: 0 PID: 11843 Comm: syz.2.1540 Not tainted syzkaller #0 PREEMPT(full) 
[  216.574488][T11843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  216.574498][T11843] Call Trace:
[  216.574506][T11843]  <TASK>
[  216.574514][T11843]  dump_stack_lvl+0xe8/0x150
[  216.574546][T11843]  should_fail_ex+0x410/0x560
[  216.574681][T11843]  should_failslab+0xa8/0x100
[  216.574718][T11843]  __kmalloc_cache_noprof+0xa3/0x600
[  216.574739][T11843]  ? bpf_prog_alloc_no_stats+0xd8/0x560
[  216.574759][T11843]  ? bpf_prog_alloc_no_stats+0xd8/0x560
[  216.574786][T11843]  bpf_prog_alloc_no_stats+0xd8/0x560
[  216.574806][T11843]  ? bpf_prog_alloc+0x2a/0x1a0
[  216.574830][T11843]  bpf_prog_alloc+0x3c/0x1a0
[  216.574854][T11843]  bpf_prog_load+0x7f8/0x1c20
[  216.574889][T11843]  ? __pfx_bpf_prog_load+0x10/0x10
[  216.574937][T11843]  __sys_bpf+0xd0d/0xd90
[  216.574966][T11843]  ? __pfx___sys_bpf+0x10/0x10
[  216.574999][T11843]  ? __fget_files+0x2a/0x420
[  216.575049][T11843]  ? ksys_write+0x242/0x270
[  216.575080][T11843]  ? __pfx_ksys_write+0x10/0x10
[  216.575110][T11843]  __x64_sys_bpf+0xba/0xd0
[  216.575131][T11843]  do_syscall_64+0x166/0x520
[  216.575155][T11843]  ? trace_irq_disable+0x3b/0x140
[  216.575174][T11843]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.575194][T11843]  ? clear_bhb_loop+0x70/0xc0
[  216.575217][T11843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.575235][T11843] RIP: 0033:0x7f9c7c59e159
[  216.575254][T11843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  216.575269][T11843] RSP: 002b:00007f9c7d3ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  216.575289][T11843] RAX: ffffffffffffffda RBX: 00007f9c7c825fa0 RCX: 00007f9c7c59e159
[  216.575303][T11843] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005
[  216.575315][T11843] RBP: 00007f9c7d3ee090 R08: 0000000000000000 R09: 0000000000000000
[  216.575327][T11843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  216.575338][T11843] R13: 00007f9c7c826038 R14: 00007f9c7c825fa0 R15: 00007fff5b0ab7d8
[  216.575370][T11843]  </TASK>
[  217.007353][T11862] FAULT_INJECTION: forcing a failure.
[  217.007353][T11862] name failslab, interval 1, probability 0, space 0, times 0
[  217.007385][T11862] CPU: 0 UID: 0 PID: 11862 Comm: syz.2.1544 Not tainted syzkaller #0 PREEMPT(full) 
[  217.007405][T11862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  217.007414][T11862] Call Trace:
[  217.007422][T11862]  <TASK>
[  217.007429][T11862]  dump_stack_lvl+0xe8/0x150
[  217.007459][T11862]  should_fail_ex+0x410/0x560
[  217.007486][T11862]  should_failslab+0xa8/0x100
[  217.007508][T11862]  ? skb_clone+0x212/0x3a0
[  217.007532][T11862]  kmem_cache_alloc_noprof+0xa1/0x600
[  217.007560][T11862]  ? skb_clone+0x212/0x3a0
[  217.007590][T11862]  skb_clone+0x212/0x3a0
[  217.007617][T11862]  __netlink_deliver_tap+0x355/0x6e0
[  217.007664][T11862]  ? netlink_deliver_tap+0x2e/0x1b0
[  217.007692][T11862]  netlink_deliver_tap+0x19c/0x1b0
[  217.007720][T11862]  netlink_dump+0x95b/0xee0
[  217.007757][T11862]  ? __pfx_netlink_dump+0x10/0x10
[  217.007795][T11862]  ? netlink_recvmsg+0x5bf/0xa50
[  217.007811][T11862]  ? kmem_cache_free+0x182/0x650
[  217.007832][T11862]  netlink_recvmsg+0x683/0xa50
[  217.007859][T11862]  ? __pfx_netlink_recvmsg+0x10/0x10
[  217.007875][T11862]  ? lock_acquire+0x115/0x350
[  217.007898][T11862]  ? __lock_acquire+0x747/0x2de0
[  217.007922][T11862]  ? __pfx_netlink_recvmsg+0x10/0x10
[  217.007939][T11862]  sock_recvmsg_nosec+0x130/0x170
[  217.007961][T11862]  ____sys_recvmsg+0x3e3/0x4a0
[  217.007994][T11862]  ? __pfx_____sys_recvmsg+0x10/0x10
[  217.008034][T11862]  ? import_iovec+0x73/0xa0
[  217.008061][T11862]  ___sys_recvmsg+0x213/0x5a0
[  217.008091][T11862]  ? __pfx____sys_recvmsg+0x10/0x10
[  217.008123][T11862]  ? lock_acquire+0x115/0x350
[  217.008169][T11862]  do_recvmmsg+0x31a/0x7f0
[  217.008203][T11862]  ? __pfx_do_recvmmsg+0x10/0x10
[  217.008240][T11862]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  217.008271][T11862]  ? __fget_files+0x3a2/0x420
[  217.008307][T11862]  __x64_sys_recvmmsg+0x198/0x250
[  217.008337][T11862]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  217.008380][T11862]  do_syscall_64+0x166/0x520
[  217.008402][T11862]  ? trace_irq_disable+0x3b/0x140
[  217.008417][T11862]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.008436][T11862]  ? clear_bhb_loop+0x70/0xc0
[  217.008459][T11862]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.008477][T11862] RIP: 0033:0x7f9c7c59e159
[  217.008494][T11862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  217.008510][T11862] RSP: 002b:00007f9c7d3ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  217.008529][T11862] RAX: ffffffffffffffda RBX: 00007f9c7c825fa0 RCX: 00007f9c7c59e159
[  217.008542][T11862] RDX: 0000000000000004 RSI: 0000200000002c80 RDI: 0000000000000003
[  217.008554][T11862] RBP: 00007f9c7d3ee090 R08: 0000000000000000 R09: 0000000000000000
[  217.008565][T11862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  217.008576][T11862] R13: 00007f9c7c826038 R14: 00007f9c7c825fa0 R15: 00007fff5b0ab7d8
[  217.008608][T11862]  </TASK>
[  217.163723][T11865] netlink: 'syz.3.1547': attribute type 2 has an invalid length.
[  217.370473][T11877] ip_tables: iptables: counters copy to user failed while replacing table
[  217.661708][T11894] udevd[11894]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  217.690144][T11894] udevd[11894]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  218.542102][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  218.701668][T11939] ip_tables: iptables: counters copy to user failed while replacing table
[  219.041930][T11960] __nla_validate_parse: 11 callbacks suppressed
[  219.041950][T11960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1568'.
[  219.095847][T11963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1568'.
[  219.126957][T11965] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1570'.
[  219.479866][T11984] syz_tun: entered allmulticast mode
[  219.705734][T11996] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1579'.
[  219.726639][T11996] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  219.727714][T11996] bond5 (unregistering): Released all slaves
[  220.862338][T11919] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  220.995697][T12003] bond5: entered promiscuous mode
[  220.996081][T12003] 8021q: adding VLAN 0 to HW filter on device bond5
[  221.066807][T12009] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1581'.
[  221.143671][T12008] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1585'.
[  221.148600][T12008] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1585'.
[  221.161315][T12008] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1585'.
[  221.181648][T12008] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1585'.
[  221.203718][T12008] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1585'.
[  221.404187][T12038] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  221.695234][ T4934] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  221.919750][ T8200] tipc: Subscription rejected, illegal request
[  222.040089][T12071] IPVS: set_ctl: invalid protocol: 98 224.0.0.2:20001
[  222.720118][T12097] RDS: rds_bind could not find a transport for 0:0:80::, load rds_tcp or rds_rdma?
[  222.755021][T12097] syzkaller0: left promiscuous mode
[  222.755040][T12097] syzkaller0: left allmulticast mode
[  222.838091][T12100] netlink: 'syz.4.1603': attribute type 3 has an invalid length.
[  222.838319][T12100] netlink: 'syz.4.1603': attribute type 3 has an invalid length.
[  223.036392][T12109] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  223.284560][T12115] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  223.316848][T12115] netdevsim0 speed is unknown, defaulting to 1000
[  223.349943][T12122] netlink: 'syz.3.1611': attribute type 3 has an invalid length.
[  223.351092][T12122] syzkaller0: Caught tx_queue_len zero misconfig
[  223.522616][T12130] netlink: 'syz.0.1614': attribute type 1 has an invalid length.
[  224.192313][T12160] __nla_validate_parse: 36 callbacks suppressed
[  224.192330][T12160] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1622'.
[  224.280110][T12166] ip_tables: iptables: counters copy to user failed while replacing table
[  224.694807][T12189] bridge3: the hash_elasticity option has been deprecated and is always 16
[  224.719205][T12191] netlink: 'syz.0.1630': attribute type 1 has an invalid length.
[  224.755850][T12191] 8021q: adding VLAN 0 to HW filter on device bond4
[  225.186245][T12204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  225.246832][T12205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  225.306801][T12204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  225.322496][T12204] netlink: 'syz.4.1632': attribute type 2 has an invalid length.
[  225.467461][T12213] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1635'.
[  225.958486][T12236] xt_CT: You must specify a L4 protocol and not use inversions on it
[  225.994903][T12233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1641'.
[  226.000536][T12244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1641'.
[  226.148178][T12249] Bluetooth: hci0: unsupported parameter 5135
[  226.148201][T12249] Bluetooth: hci0: unsupported parameter 8192
[  226.148213][T12249] Bluetooth: hci0: unsupported parameter 5135
[  226.149454][T12249] Bluetooth: hci0: unsupported parameter 8192
[  226.182866][T12252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  226.364007][T12259] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1647'.
[  226.862310][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  227.281560][T12237] netdevsim0 speed is unknown, defaulting to 1000
[  227.495920][T12266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1648'.
[  227.543051][T12268] netlink: 'syz.2.1649': attribute type 4 has an invalid length.
[  227.544230][T12269] netlink: 'syz.2.1649': attribute type 4 has an invalid length.
[  227.573325][T12269] erspan0: entered promiscuous mode
[  227.574887][T12269] vlan4: entered promiscuous mode
[  227.901018][T12273] netlink: 'syz.4.1650': attribute type 15 has an invalid length.
[  228.160542][T12280] netlink: 'syz.0.1652': attribute type 4 has an invalid length.
[  228.262830][T12301] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1654'.
[  228.430677][T12311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1657'.
[  228.616848][T12311] 8021q: adding VLAN 0 to HW filter on device bond6
[  228.619470][T12316] netlink: 'syz.4.1657': attribute type 5 has an invalid length.
[  228.654524][T12320] 8021q: adding VLAN 0 to HW filter on device batadv1
[  228.666792][T12320] bond6: (slave batadv1): Enslaving as an active interface with an up link
[  228.695592][T12310] netlink: 844 bytes leftover after parsing attributes in process `syz.3.1656'.
[  228.695619][T12310] netlink: 844 bytes leftover after parsing attributes in process `syz.3.1656'.
[  228.999020][T12342] ip_tables: iptables: counters copy to user failed while replacing table
[  229.110698][T12346] team_slave_0: entered allmulticast mode
[  229.237494][T12353] netlink: 'syz.4.1669': attribute type 1 has an invalid length.
[  229.369993][T12353] 8021q: adding VLAN 0 to HW filter on device bond7
[  229.423561][T12359] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  229.454198][T12362] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  229.457770][T12369] __nla_validate_parse: 5 callbacks suppressed
[  229.457789][T12369] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1672'.
[  232.148809][T12363] bond7: entered promiscuous mode
[  232.148833][T12363] bond7: entered allmulticast mode
[  232.364460][T12353] macvlan3: entered promiscuous mode
[  232.364483][T12353] macvlan3: entered allmulticast mode
[  232.369322][T12353] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  232.389071][T12388] netlink: 'syz.0.1675': attribute type 8 has an invalid length.
[  232.453448][T12385] syzkaller0: entered promiscuous mode
[  232.453472][T12385] syzkaller0: entered allmulticast mode
[  232.571642][T12396] ���l����i�: renamed from lo (while UP)
[  232.627053][T12402] netlink: Unknown nat attribute (0)
[  232.627080][T12402] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.627740][T12402] block nbd4: not configured, cannot reconfigure
[  232.628147][T12402] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1680'.
[  232.628467][T12402] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1680'.
[  232.756345][T12407] netlink: 'syz.0.1683': attribute type 49 has an invalid length.
[  232.894390][T12416] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1686'.
[  233.171210][T12419] IPVS: Scheduler module ip_vs_sip not found
[  233.754130][T12451] ieee802154 phy1 wpan1: encryption failed: -22
[  233.754241][T12448] ieee802154 phy1 wpan1: encryption failed: -22
[  233.945107][T12463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1694'.
[  234.611216][T12489] xt_hashlimit: size too large, truncated to 1048576
[  234.615607][T12493] xt_hashlimit: size too large, truncated to 1048576
[  234.727100][T12498] xt_hashlimit: size too large, truncated to 1048576
[  234.791963][T12497] netlink: 'syz.0.1701': attribute type 18 has an invalid length.
[  234.791987][T12497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1701'.
[  234.792584][T12497] netlink: 'syz.0.1701': attribute type 18 has an invalid length.
[  234.792601][T12497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1701'.
[  234.928378][T12504] FAULT_INJECTION: forcing a failure.
[  234.928378][T12504] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  234.928409][T12504] CPU: 0 UID: 0 PID: 12504 Comm: syz.3.1703 Not tainted syzkaller #0 PREEMPT(full) 
[  234.928429][T12504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  234.928440][T12504] Call Trace:
[  234.928447][T12504]  <TASK>
[  234.928455][T12504]  dump_stack_lvl+0xe8/0x150
[  234.928483][T12504]  should_fail_ex+0x410/0x560
[  234.928509][T12504]  _copy_from_user+0x2d/0xb0
[  234.928533][T12504]  __sys_bpf+0x2e7/0xd90
[  234.928563][T12504]  ? __pfx___sys_bpf+0x10/0x10
[  234.928595][T12504]  ? __fget_files+0x2a/0x420
[  234.928637][T12504]  ? ksys_write+0x242/0x270
[  234.928667][T12504]  ? __pfx_ksys_write+0x10/0x10
[  234.928699][T12504]  __x64_sys_bpf+0xba/0xd0
[  234.928732][T12504]  do_syscall_64+0x166/0x520
[  234.928755][T12504]  ? trace_irq_disable+0x3b/0x140
[  234.928774][T12504]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.928793][T12504]  ? clear_bhb_loop+0x70/0xc0
[  234.928817][T12504]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.928835][T12504] RIP: 0033:0x7fd7c359e159
[  234.928852][T12504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  234.928867][T12504] RSP: 002b:00007fd7c43ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  234.928888][T12504] RAX: ffffffffffffffda RBX: 00007fd7c3825fa0 RCX: 00007fd7c359e159
[  234.928901][T12504] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  234.928914][T12504] RBP: 00007fd7c43ab090 R08: 0000000000000000 R09: 0000000000000000
[  234.928925][T12504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  234.928936][T12504] R13: 00007fd7c3826038 R14: 00007fd7c3825fa0 R15: 00007fff42368798
[  234.928968][T12504]  </TASK>
[  235.182394][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  235.416586][T12511] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  235.418993][T12511] syzkaller0: entered promiscuous mode
[  235.419012][T12511] syzkaller0: entered allmulticast mode
[  235.419345][T12511] tipc: Resetting bearer <eth:syzkaller0>
[  235.446839][T12513] netlink: 'syz.0.1707': attribute type 16 has an invalid length.
[  235.446860][T12513] netlink: 'syz.0.1707': attribute type 3 has an invalid length.
[  235.446872][T12513] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.1707'.
[  235.618066][T12511] syzkaller0: mtu less than device minimum
[  235.714090][T12529] ip_tables: iptables: counters copy to user failed while replacing table
[  235.827882][T12533] netlink: 'syz.3.1712': attribute type 19 has an invalid length.
[  235.827906][T12533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1712'.
[  235.979496][T12531] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  236.061213][T12544] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  236.077002][T12550] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  236.077905][T12544] ip_tables: iptables: counters copy to user failed while replacing table
[  236.189646][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.189740][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.189821][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.189920][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.190000][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.190075][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.190149][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.190285][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.190386][T12556] tap0: linktype set to 805
[  236.190642][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.190689][T12556] tap0: linktype set to 805
[  236.190907][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.190954][T12556] tap0: linktype set to 805
[  236.191200][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.191248][T12556] tap0: linktype set to 805
[  236.194319][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.194372][T12556] tap0: linktype set to 805
[  236.198310][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.198413][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.198490][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.198593][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.198681][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.198759][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.198843][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.198944][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.199048][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.199153][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.199229][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.199331][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.199407][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.199481][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.199557][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.199663][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.199739][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.203357][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.203434][T12556] tap0: linktype set to 805
[  236.203709][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.203755][T12556] tap0: linktype set to 805
[  236.203993][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.204038][T12556] tap0: linktype set to 805
[  236.204239][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.204282][T12556] tap0: linktype set to 805
[  236.204517][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.204561][T12556] tap0: linktype set to 805
[  236.204771][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.207385][T12556] tap0: linktype set to 805
[  236.207677][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.207724][T12556] tap0: linktype set to 805
[  236.207933][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.207977][T12556] tap0: linktype set to 805
[  236.209405][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.209454][T12556] tap0: linktype set to 805
[  236.209678][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.209722][T12556] tap0: linktype set to 805
[  236.210197][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.210277][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.210876][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.210980][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.211111][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.211187][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.211260][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.211359][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.211524][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.211577][T12556] tap0: linktype set to 805
[  236.213467][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.213577][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.213658][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.213741][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.213816][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.213915][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.213986][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.214059][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.215325][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.215387][T12556] tap0: linktype set to 805
[  236.216827][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.216876][T12556] tap0: linktype set to 805
[  236.217089][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.217133][T12556] tap0: linktype set to 805
[  236.218560][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.218649][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.218724][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.218862][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.218937][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.219010][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.219084][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.219157][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.219227][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.219301][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.219386][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.219461][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.219536][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.221393][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.221474][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.221577][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.221660][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.225552][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.225626][T12556] tap0: linktype set to 805
[  236.226648][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.226733][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.226809][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.226881][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.227091][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.227167][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.227238][T12555] tap0: tun_chr_ioctl cmd 1074025673
[  236.227333][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.227390][T12556] tap0: linktype set to 805
[  236.227616][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.227661][T12556] tap0: linktype set to 805
[  236.227870][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.227914][T12556] tap0: linktype set to 805
[  236.228258][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.228304][T12556] tap0: linktype set to 805
[  236.228515][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.228559][T12556] tap0: linktype set to 805
[  236.228799][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.228843][T12556] tap0: linktype set to 805
[  236.229046][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.229090][T12556] tap0: linktype set to 805
[  236.229430][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.229475][T12556] tap0: linktype set to 805
[  236.229687][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.229731][T12556] tap0: linktype set to 805
[  236.229982][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.230027][T12556] tap0: linktype set to 805
[  236.230231][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.230417][T12556] tap0: linktype set to 805
[  236.230673][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.230719][T12556] tap0: linktype set to 805
[  236.230924][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.230967][T12556] tap0: linktype set to 805
[  236.231195][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.231240][T12556] tap0: linktype set to 805
[  236.231537][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.231582][T12556] tap0: linktype set to 805
[  236.233578][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.233643][T12556] tap0: linktype set to 805
[  236.233990][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.234056][T12556] tap0: linktype set to 805
[  236.234297][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.234342][T12556] tap0: linktype set to 805
[  236.234548][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.235208][T12556] tap0: linktype set to 805
[  236.235462][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.235507][T12556] tap0: linktype set to 805
[  236.236382][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.236430][T12556] tap0: linktype set to 805
[  236.236678][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.236723][T12556] tap0: linktype set to 805
[  236.236934][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.236977][T12556] tap0: linktype set to 805
[  236.239243][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.239291][T12556] tap0: linktype set to 805
[  236.240206][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.240256][T12556] tap0: linktype set to 805
[  236.241031][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.241082][T12556] tap0: linktype set to 805
[  236.241992][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.242045][T12556] tap0: linktype set to 805
[  236.242273][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.242316][T12556] tap0: linktype set to 805
[  236.242522][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.242566][T12556] tap0: linktype set to 805
[  236.243778][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.243831][T12556] tap0: linktype set to 805
[  236.244393][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.244443][T12556] tap0: linktype set to 805
[  236.245119][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.245167][T12556] tap0: linktype set to 805
[  236.245677][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.245724][T12556] tap0: linktype set to 805
[  236.245965][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.246009][T12556] tap0: linktype set to 805
[  236.246882][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.246930][T12556] tap0: linktype set to 805
[  236.247834][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.247890][T12556] tap0: linktype set to 805
[  236.248110][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.248154][T12556] tap0: linktype set to 805
[  236.248933][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.248980][T12556] tap0: linktype set to 805
[  236.249193][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.249238][T12556] tap0: linktype set to 805
[  236.250397][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.255030][T12556] tap0: linktype set to 805
[  236.256170][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.256221][T12556] tap0: linktype set to 805
[  236.256556][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.256603][T12556] tap0: linktype set to 805
[  236.256826][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.256870][T12556] tap0: linktype set to 805
[  236.257219][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.257288][T12556] tap0: linktype set to 805
[  236.257580][T12556] tap0: tun_chr_ioctl cmd 1074025677
[  236.257634][T12556] tap0: linktype set to 805
[  237.319234][T12587] netlink: 'syz.0.1727': attribute type 3 has an invalid length.
[  237.319257][T12587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1727'.
[  237.323986][T12588] netlink: 'syz.0.1727': attribute type 3 has an invalid length.
[  237.324008][T12588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1727'.
[  237.400911][T12593] netlink: 'syz.3.1730': attribute type 1 has an invalid length.
[  237.432897][T12593] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1730'.
[  237.435212][T12593] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1730'.
[  237.931008][T12618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1734'.
[  237.931030][T12618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1734'.
[  237.931054][T12618] netlink: 'syz.0.1734': attribute type 18 has an invalid length.
[  238.024571][ T8200] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0
[  238.026545][ T8197] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0
[  238.026583][ T8197] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0
[  238.862790][T12664] netlink: 'syz.0.1746': attribute type 1 has an invalid length.
[  238.897123][T12664] 8021q: adding VLAN 0 to HW filter on device bond5
[  239.110044][T12685] A link change request failed with some changes committed already. Interface ip6gretap1 may have been left with an inconsistent configuration, please check.
[  239.424614][T12709] FAULT_INJECTION: forcing a failure.
[  239.424614][T12709] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  239.424645][T12709] CPU: 1 UID: 0 PID: 12709 Comm: syz.2.1755 Not tainted syzkaller #0 PREEMPT(full) 
[  239.424669][T12709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  239.424680][T12709] Call Trace:
[  239.424687][T12709]  <TASK>
[  239.424695][T12709]  dump_stack_lvl+0xe8/0x150
[  239.424725][T12709]  should_fail_ex+0x410/0x560
[  239.424752][T12709]  _copy_from_user+0x2d/0xb0
[  239.424778][T12709]  bpf_test_init+0xd8/0x150
[  239.424811][T12709]  bpf_prog_test_run_xdp+0x4cc/0x11d0
[  239.424846][T12709]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  239.424871][T12709]  ? __fget_files+0x2a/0x420
[  239.424901][T12709]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  239.424920][T12709]  bpf_prog_test_run+0x2c5/0x340
[  239.424946][T12709]  __sys_bpf+0xa22/0xd90
[  239.424975][T12709]  ? __pfx___sys_bpf+0x10/0x10
[  239.425008][T12709]  ? __fget_files+0x2a/0x420
[  239.425049][T12709]  ? ksys_write+0x242/0x270
[  239.425079][T12709]  ? __pfx_ksys_write+0x10/0x10
[  239.425111][T12709]  __x64_sys_bpf+0xba/0xd0
[  239.425135][T12709]  do_syscall_64+0x166/0x520
[  239.425157][T12709]  ? trace_irq_disable+0x3b/0x140
[  239.425176][T12709]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.425195][T12709]  ? clear_bhb_loop+0x70/0xc0
[  239.425219][T12709]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.425238][T12709] RIP: 0033:0x7f9c7c59e159
[  239.425256][T12709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  239.425271][T12709] RSP: 002b:00007f9c7d3ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  239.425290][T12709] RAX: ffffffffffffffda RBX: 00007f9c7c825fa0 RCX: 00007f9c7c59e159
[  239.425304][T12709] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  239.425317][T12709] RBP: 00007f9c7d3ee090 R08: 0000000000000000 R09: 0000000000000000
[  239.425333][T12709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  239.425345][T12709] R13: 00007f9c7c826038 R14: 00007f9c7c825fa0 R15: 00007fff5b0ab7d8
[  239.425377][T12709]  </TASK>
[  240.193970][T12743] __nla_validate_parse: 5 callbacks suppressed
[  240.193991][T12743] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1765'.
[  240.273002][T12751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1767'.
[  240.277530][T12751] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1767'.
[  241.585855][T12790] netlink: NAT attribute has 4 unknown bytes
[  241.585879][T12790] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  241.591752][T12789] syzkaller0: entered promiscuous mode
[  241.592027][T12789] syzkaller0: entered allmulticast mode
[  241.976800][T12796] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1775'.
[  242.674007][T12713] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  242.823398][T12804] bond2: option mode: unable to set because the bond device is up
[  242.849803][T12804] bond2 (unregistering): Released all slaves
[  242.904084][T12806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1779'.
[  243.527896][T12832] validate_nla: 2 callbacks suppressed
[  243.527911][T12832] netlink: 'syz.1.1786': attribute type 16 has an invalid length.
[  243.527918][T12832] netlink: 344 bytes leftover after parsing attributes in process `syz.1.1786'.
[  245.958656][T12813] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  246.351314][T12867] netlink: 5908 bytes leftover after parsing attributes in process `syz.3.1796'.
[  246.351338][T12867] openvswitch: netlink: Flow key attr not present in new flow.
[  246.479928][T12882] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  246.490583][T12881] netlink: zone id is out of range
[  246.490626][T12881] netlink: zone id is out of range
[  246.490734][T12881] netlink: zone id is out of range
[  246.490770][T12881] netlink: zone id is out of range
[  246.490777][T12881] netlink: zone id is out of range
[  246.490784][T12881] netlink: zone id is out of range
[  246.490791][T12881] netlink: zone id is out of range
[  246.553266][T12881] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1802'.
[  246.687064][T12888] tc_dump_action: action bad kind
[  246.687433][T12887] tc_dump_action: action bad kind
[  246.846783][T12887] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1805'.
[  246.901212][T12900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1807'.
[  247.029127][T12902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1808'.
[  247.065419][T12902] bond2: option broadcast_neighbor: invalid value (3)
[  247.255530][T12902] bond2 (unregistering): Released all slaves
[  247.262340][T12918] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1810'.
[  247.751116][T12939] IPv6: NLM_F_CREATE should be specified when creating new route
[  247.751212][T12939] IPv6: Can't replace route, no match found
[  248.078355][T12952] net_ratelimit: 85 callbacks suppressed
[  248.078375][T12952] ip_tables: iptables: counters copy to user failed while replacing table
[  248.151632][T12954] netlink: 'syz.1.1821': attribute type 16 has an invalid length.
[  248.151654][T12954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1821'.
[  248.280572][T12959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1823'.
[  248.396700][T12959] 8021q: adding VLAN 0 to HW filter on device bond9
[  248.398413][T12959] bond8: (slave bond9): Enslaving as an active interface with an up link
[  248.634417][T12965] netlink: 'syz.3.1826': attribute type 4 has an invalid length.
[  248.635860][T12966] netlink: 'syz.3.1826': attribute type 4 has an invalid length.
[  248.958040][T12993] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1834'.
[  249.108504][T13003] macvlan3: entered promiscuous mode
[  249.108527][T13003] macvlan3: entered allmulticast mode
[  249.726641][T13015] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1838'.
[  252.013691][T13008] geneve3: entered promiscuous mode
[  252.298053][T13019] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1839'.
[  252.457524][T13029] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1842'.
[  252.704989][T13049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1850'.
[  252.856525][T13065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1855'.
[  253.037243][T13077] openvswitch: netlink: Tunnel attr 166 out of range max 16
[  253.170897][T13083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1862'.
[  253.203381][T13085] smc: net device lo applied user defined pnetid SYZ0
[  253.239655][T13089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1862'.
[  253.369025][T13095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1866'.
[  253.396871][T13095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1866'.
[  253.454711][T13097] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1869'.
[  253.461446][T13097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1869'.
[  253.858592][T13129] Cannot find del_set index 2 as target
[  253.985336][T13141] FAULT_INJECTION: forcing a failure.
[  253.985336][T13141] name failslab, interval 1, probability 0, space 0, times 0
[  253.985367][T13141] CPU: 1 UID: 0 PID: 13141 Comm: syz.3.1879 Not tainted syzkaller #0 PREEMPT(full) 
[  253.985388][T13141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  253.985399][T13141] Call Trace:
[  253.985407][T13141]  <TASK>
[  253.985414][T13141]  dump_stack_lvl+0xe8/0x150
[  253.985446][T13141]  should_fail_ex+0x410/0x560
[  253.985471][T13141]  ? __alloc_skb+0x1db/0x7a0
[  253.985493][T13141]  should_failslab+0xa8/0x100
[  253.985516][T13141]  ? __alloc_skb+0x1db/0x7a0
[  253.985542][T13141]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  253.985569][T13141]  ? __alloc_skb+0x18d/0x7a0
[  253.985590][T13141]  ? __alloc_skb+0x1db/0x7a0
[  253.985615][T13141]  __alloc_skb+0x1db/0x7a0
[  253.985639][T13141]  alloc_skb_with_frags+0xc6/0x760
[  253.985668][T13141]  ? __lock_acquire+0x747/0x2de0
[  253.985690][T13141]  sock_alloc_send_pskb+0x878/0x990
[  253.985734][T13141]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  253.985776][T13141]  tun_get_user+0x8fb/0x44d0
[  253.985816][T13141]  ? aa_file_perm+0x4ed/0x15f0
[  253.985840][T13141]  ? __pfx_tun_get_user+0x10/0x10
[  253.985860][T13141]  ? __lock_acquire+0x747/0x2de0
[  253.985881][T13141]  ? kstrtoull+0x137/0x1d0
[  253.985907][T13141]  ? ref_tracker_alloc+0x341/0x4b0
[  253.985927][T13141]  ? lock_acquire+0x115/0x350
[  253.985943][T13141]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  253.985967][T13141]  ? lock_acquire+0x115/0x350
[  253.985985][T13141]  ? tun_get+0x1c/0x2f0
[  253.986009][T13141]  ? tun_get+0x1c/0x2f0
[  253.986024][T13141]  ? tun_get+0x1c/0x2f0
[  253.986047][T13141]  tun_chr_write_iter+0x113/0x200
[  253.986069][T13141]  vfs_write+0x612/0xba0
[  253.986104][T13141]  ? __pfx_vfs_write+0x10/0x10
[  253.986139][T13141]  ? __fget_files+0x2a/0x420
[  253.986170][T13141]  ksys_write+0x150/0x270
[  253.986198][T13141]  ? __pfx_ksys_write+0x10/0x10
[  253.986236][T13141]  do_syscall_64+0x166/0x520
[  253.986257][T13141]  ? trace_irq_disable+0x3b/0x140
[  253.986275][T13141]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.986293][T13141]  ? clear_bhb_loop+0x70/0xc0
[  253.986316][T13141]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.986334][T13141] RIP: 0033:0x7fd7c355e98e
[  253.986351][T13141] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  253.986366][T13141] RSP: 002b:00007fd7c43aafb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  253.986385][T13141] RAX: ffffffffffffffda RBX: 00007fd7c43ab6c0 RCX: 00007fd7c355e98e
[  253.986399][T13141] RDX: 0000000000000d84 RSI: 0000200000003140 RDI: 00000000000000c8
[  253.986409][T13141] RBP: 00007fd7c43ab090 R08: 0000000000000000 R09: 0000000000000000
[  253.986420][T13141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  253.986431][T13141] R13: 00007fd7c3826038 R14: 00007fd7c3825fa0 R15: 00007fff42368798
[  253.986459][T13141]  </TASK>
[  254.419116][T13158] openvswitch: netlink: Flow key attr not present in new flow.
[  254.429057][T13156] gtp3: entered promiscuous mode
[  254.429079][T13156] gtp3: entered allmulticast mode
[  254.554496][T13167] syzkaller0: left promiscuous mode
[  254.554517][T13167] syzkaller0: left allmulticast mode
[  255.028723][T13206] bond2: ARP target 9.0.0.0 is already present
[  255.028748][T13206] bond2: option arp_ip_target: invalid value (9)
[  255.030957][T13206] bond2 (unregistering): Released all slaves
[  255.374823][T13263] syz.3.1891: vmalloc error: size 34359742464, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  255.374922][T13263] CPU: 0 UID: 0 PID: 13263 Comm: syz.3.1891 Not tainted syzkaller #0 PREEMPT(full) 
[  255.374944][T13263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  255.374955][T13263] Call Trace:
[  255.374963][T13263]  <TASK>
[  255.374970][T13263]  dump_stack_lvl+0xe8/0x150
[  255.375002][T13263]  warn_alloc+0x24d/0x270
[  255.375021][T13263]  ? kasan_save_track+0x4f/0x80
[  255.375040][T13263]  ? kasan_save_track+0x3e/0x80
[  255.375060][T13263]  ? __pfx_warn_alloc+0x10/0x10
[  255.375076][T13263]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  255.375101][T13263]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.375140][T13263]  __vmalloc_node_range_noprof+0x127/0x1540
[  255.375192][T13263]  ? rcu_is_watching+0x16/0xb0
[  255.375219][T13263]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  255.375246][T13263]  ? __kmalloc_cache_noprof+0x321/0x600
[  255.375265][T13263]  ? __kmalloc_cache_noprof+0x14d/0x600
[  255.375282][T13263]  ? xskq_create+0x56/0x220
[  255.375308][T13263]  xskq_create+0x148/0x220
[  255.375329][T13263]  ? xsk_init_queue+0x8a/0xe0
[  255.375352][T13263]  xsk_init_queue+0x8a/0xe0
[  255.375375][T13263]  xsk_setsockopt+0x5e0/0x960
[  255.375407][T13263]  ? __pfx_xsk_setsockopt+0x10/0x10
[  255.375431][T13263]  ? __pfx_aa_sk_perm+0x10/0x10
[  255.375456][T13263]  ? aa_sock_opt_perm+0x142/0x1e0
[  255.375483][T13263]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  255.375505][T13263]  ? __pfx_xsk_setsockopt+0x10/0x10
[  255.375524][T13263]  do_sock_setsockopt+0x17c/0x1b0
[  255.375551][T13263]  __x64_sys_setsockopt+0x13d/0x1b0
[  255.375580][T13263]  do_syscall_64+0x166/0x520
[  255.375602][T13263]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.375620][T13263]  ? clear_bhb_loop+0x70/0xc0
[  255.375642][T13263]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.375661][T13263] RIP: 0033:0x7fd7c359e159
[  255.375679][T13263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  255.375695][T13263] RSP: 002b:00007fd7c43ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  255.375715][T13263] RAX: ffffffffffffffda RBX: 00007fd7c3825fa0 RCX: 00007fd7c359e159
[  255.375728][T13263] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000008
[  255.375740][T13263] RBP: 00007fd7c363506b R08: 0000000000000004 R09: 0000000000000000
[  255.375751][T13263] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  255.375762][T13263] R13: 00007fd7c3826038 R14: 00007fd7c3825fa0 R15: 00007fff42368798
[  255.375790][T13263]  </TASK>
[  255.375798][T13263] Mem-Info:
[  255.375806][T13263] active_anon:11080 inactive_anon:0 isolated_anon:0
[  255.375806][T13263]  active_file:17 inactive_file:43527 isolated_file:0
[  255.375806][T13263]  unevictable:0 dirty:449 writeback:0
[  255.375806][T13263]  slab_reclaimable:11032 slab_unreclaimable:103444
[  255.375806][T13263]  mapped:36573 shmem:6240 pagetables:1151
[  255.375806][T13263]  sec_pagetables:0 bounce:0
[  255.375806][T13263]  kernel_misc_reclaimable:0
[  255.375806][T13263]  free:1306347 free_pcp:20911 free_cma:0
[  255.375852][T13263] Node 0 active_anon:44320kB inactive_anon:0kB active_file:68kB inactive_file:173912kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:146292kB dirty:1796kB writeback:0kB shmem:24960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16620kB pagetables:4492kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  255.375898][T13263] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  255.375960][T13263] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  255.376012][T13263] lowmem_reserve[]: 0 2487 2487 2487 2487
[  255.376049][T13263] Node 0 DMA32 free:1276500kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:44320kB inactive_anon:0kB active_file:68kB inactive_file:173912kB unevictable:0kB writepending:1796kB zspages:0kB present:3129332kB managed:2546840kB mlocked:0kB bounce:0kB free_pcp:81136kB local_pcp:17760kB free_cma:0kB
[  255.376100][T13263] lowmem_reserve[]: 0 0 0 0 0
[  255.376145][T13263] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  255.376192][T13263] lowmem_reserve[]: 0 0 0 0 0
[  255.376220][T13263] Node 1 Normal free:3933528kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:2508kB local_pcp:2012kB free_cma:0kB
[  255.376272][T13263] lowmem_reserve[]: 0 0 0 0 0
[  255.376300][T13263] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  255.376476][T13263] Node 0 DMA32: 2198*4kB (UE) 653*8kB (UME) 152*16kB (UME) 866*32kB (UM) 604*64kB (UE) 147*128kB (UE) 91*256kB (UME) 59*512kB (UM) 15*1024kB (UM) 10*2048kB (UME) 265*4096kB (UM) = 1276416kB
[  255.376620][T13263] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  255.376708][T13263] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 1*128kB (M) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 959*4096kB (M) = 3933524kB
[  255.376854][T13263] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  255.376870][T13263] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  255.376883][T13263] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  255.376898][T13263] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  255.376912][T13263] 49780 total pagecache pages
[  255.376921][T13263] 0 pages in swap cache
[  255.376932][T13263] Free swap  = 124996kB
[  255.376940][T13263] Total swap = 124996kB
[  255.376949][T13263] 2097051 pages RAM
[  255.376955][T13263] 0 pages HighMem/MovableOnly
[  255.376962][T13263] 428725 pages reserved
[  255.376970][T13263] 0 pages cma reserved
[  255.505791][T13172] workqueue: Failed to create a rescuer kthread for wq "nfc31_nci_tx_wq": -EINTR
[  255.706922][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  256.877183][T13329] ip6gre1: entered promiscuous mode
[  256.877206][T13329] ip6gre1: entered allmulticast mode
[  257.045392][T13333] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  257.471939][T13340] __nla_validate_parse: 12 callbacks suppressed
[  257.471958][T13340] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1908'.
[  257.610467][T13347] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1911'.
[  257.610495][T13347] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  257.659302][T13349] xt_CT: You must specify a L4 protocol and not use inversions on it
[  257.943061][T13352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1913'.
[  258.411565][T13380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1919'.
[  258.414849][T13380] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1919'.
[  258.544762][T13386] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1922'.
[  258.683077][T13378] ip_tables: iptables: counters copy to user failed while replacing table
[  258.741058][T13393] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1924'.
[  258.741349][T13393] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1924'.
[  258.773062][T13393] netlink: 'syz.3.1924': attribute type 83 has an invalid length.
[  259.028979][T13409] ip6t_ah: unknown flags 4
[  259.055311][T13393] bond5: option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  259.081748][T13393] bond5 (unregistering): Released all slaves
[  259.189789][T13415] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  259.518327][T13425] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  259.520008][T13425] syzkaller0: entered promiscuous mode
[  259.520029][T13425] syzkaller0: entered allmulticast mode
[  259.520449][T13425] tipc: Resetting bearer <eth:syzkaller0>
[  259.526315][T13425] syzkaller0: mtu less than device minimum
[  259.684878][T13433] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1936'.
[  259.708052][T13436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1937'.
[  259.909791][T13451] netlink: 'syz.1.1941': attribute type 1 has an invalid length.
[  259.964193][T13452] ip_tables: iptables: counters copy to user failed while replacing table
[  260.061609][T13456] team0: Port device team_slave_0 removed
[  260.272623][T13474] netlink: 'syz.1.1946': attribute type 10 has an invalid length.
[  260.272657][T13474] team0: left promiscuous mode
[  260.272677][T13474] netdevsim netdevsim1 netdevsim1: left promiscuous mode
[  260.272836][T13474] bond0: left promiscuous mode
[  260.272973][T13474] team0: left allmulticast mode
[  260.272988][T13474] netdevsim netdevsim1 netdevsim1: left allmulticast mode
[  260.273004][T13474] bond0: left allmulticast mode
[  260.280154][T13474] 8021q: adding VLAN 0 to HW filter on device team0
[  260.386075][T13471] netlink: Conntrack attr has 1 unknown bytes
[  260.386098][T13471] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  260.732602][T13514] netlink: Unknown nat attribute (0)
[  260.732636][T13514] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  261.380818][T13525] team0: Port device bond0 removed
[  261.381117][T13525] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  261.405568][T13525] team0: Device xfrm0 is of different type
[  261.584664][T13528] bond7: (slave veth0_to_bond): Releasing active interface
[  261.586189][T13528] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  262.653474][T13545] __nla_validate_parse: 4 callbacks suppressed
[  262.653488][T13545] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1960'.
[  263.121086][T13462] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  263.285587][T13550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1962'.
[  263.312296][T13550] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  263.312759][T13550] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  263.343217][T13550] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  263.488942][T13587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1965'.
[  263.489878][T13586] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  263.686960][T13554] syzkaller0: entered promiscuous mode
[  263.686987][T13554] syzkaller0: entered allmulticast mode
[  263.865654][T13660] syzkaller0: left promiscuous mode
[  263.865676][T13660] syzkaller0: left allmulticast mode
[  263.866269][T13660] tipc: Resetting bearer <eth:syzkaller0>
[  263.869561][T13660] sock: sock_timestamping_bind_phc: sock not bind to device
[  264.204100][T13680] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1971'.
[  266.632594][T13682] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  267.005970][T13713] netlink: 'syz.3.1980': attribute type 28 has an invalid length.
[  267.005994][T13713] netlink: 'syz.3.1980': attribute type 3 has an invalid length.
[  267.006005][T13713] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1980'.
[  267.006995][T13714] netlink: 'syz.3.1980': attribute type 28 has an invalid length.
[  267.007010][T13714] netlink: 'syz.3.1980': attribute type 3 has an invalid length.
[  267.007021][T13714] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1980'.
[  267.126032][T13722] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1985'.
[  267.161679][T13724] xt_policy: output policy not valid in PREROUTING and INPUT
[  267.498954][T13567] tipc: Subscription rejected, illegal request
[  267.551686][T13744] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1987'.
[  267.597751][T13743] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1991'.
[  267.601702][T13742] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  267.770735][T13747] IPv6: sit0: Disabled Multicast RS
[  268.020462][T13757] x_tables: duplicate underflow at hook 1
[  268.086142][T13759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1996'.
[  268.155005][T13761] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1997'.
[  268.289885][T13763] netlink: 'syz.3.1998': attribute type 49 has an invalid length.
[  268.481584][T13773] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2001'.
[  268.743643][T13792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2006'.
[  268.825212][T13785] netdevsim0 speed is unknown, defaulting to 1000
[  269.230247][T13818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2012'.
[  269.283313][T13823] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2014'.
[  269.283350][T13823] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2014'.
[  269.284821][T13812] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  269.445814][T13831] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2014'.
[  269.752620][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  269.842942][T13567] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  269.842977][T13567] netdevsim netdevsim0 netdevsim0: unset [0, 1] type 1 family 0 port 4352 - 0
[  269.843000][T13567] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  269.843941][T13567] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  269.844005][T13567] netdevsim netdevsim0 netdevsim2: unset [0, 1] type 1 family 0 port 4352 - 0
[  269.844028][T13567] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  269.844066][T13567] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  269.844088][T13567] netdevsim netdevsim0 netdevsim1: unset [0, 1] type 1 family 0 port 4352 - 0
[  269.844109][T13567] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  269.878514][ T8926] netdevsim0 speed is unknown, defaulting to 1000
[  269.878552][ T8926] sys: Port: 1 Link DOWN
[  270.117416][T13850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2019'.
[  270.267497][T13867] openvswitch: netlink: Message has 8 unknown bytes.
[  270.282349][T13855] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2020'.
[  270.341356][ T5637] block nbd2: Receive control failed (result -32)
[  270.342327][ T4934] block nbd2: Receive control failed (result -32)
[  270.364161][T13860] 8021q: adding VLAN 0 to HW filter on device team0
[  270.368372][T13860] 8021q: adding VLAN 0 to HW filter on device batadv0
[  270.410466][T13870] netlink: 'syz.2.2023': attribute type 4 has an invalid length.
[  270.423963][T13860] veth1_to_bond: left promiscuous mode
[  270.444354][T13860] batman_adv: batadv0: Interface activated: batadv_slave_1
[  270.447997][T13860] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  270.457558][T13860] geneve1: left promiscuous mode
[  270.462936][T13860] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  270.464198][T13860] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  270.465292][T13860] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  270.477806][T13860] 8021q: adding VLAN 0 to HW filter on device bond1
[  270.497209][T13860] 8021q: adding VLAN 0 to HW filter on device bond2
[  270.500902][T13860] 8021q: adding VLAN 0 to HW filter on device bond3
[  270.522116][T13860] 8021q: adding VLAN 0 to HW filter on device bond4
[  270.526877][T13860] 8021q: adding VLAN 0 to HW filter on device bond5
[  270.528566][T13860] geneve3: left promiscuous mode
[  270.529471][T13860] ip6gre1: left promiscuous mode
[  270.592668][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  270.592699][   T13] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0
[  270.592712][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  270.593549][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  270.593565][   T13] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0
[  270.593578][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  270.593671][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  270.593690][   T13] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0
[  270.593703][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  270.738672][T13878] openvswitch: netlink: Tunnel attr 166 out of range max 16
[  271.490414][T13901] bond5: entered promiscuous mode
[  271.490437][T13901] bond5: entered allmulticast mode
[  271.600149][T13904] vlan0: entered promiscuous mode
[  271.600169][T13904] veth0_virt_wifi: entered promiscuous mode
[  271.717919][T13907] netlink: 'syz.1.2035': attribute type 10 has an invalid length.
[  271.736333][T13907] team0 (unregistering): Port device netdevsim1 removed
[  271.771018][T13911] netlink: 'syz.0.2036': attribute type 11 has an invalid length.
[  272.082808][T13936] netlink: 'syz.1.2042': attribute type 10 has an invalid length.
[  272.083253][T13936] netlink: 'syz.1.2042': attribute type 10 has an invalid length.
[  272.086484][T13936] netlink: 'syz.1.2042': attribute type 10 has an invalid length.
[  272.090130][T13936] netlink: 'syz.1.2042': attribute type 10 has an invalid length.
[  272.090592][T13936] netlink: 'syz.1.2042': attribute type 10 has an invalid length.
[  272.091061][T13936] netlink: 'syz.1.2042': attribute type 10 has an invalid length.
[  272.135129][T13936] netlink: 'syz.1.2042': attribute type 10 has an invalid length.
[  272.207537][T13941] bond2: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms
[  272.207565][T13941] bond2: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[  272.207739][T13941] bond2: entered allmulticast mode
[  272.211564][T13945] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  272.211953][T13936] netlink: 'syz.1.2042': attribute type 10 has an invalid length.
[  272.212418][T13936] netlink: 'syz.1.2042': attribute type 10 has an invalid length.
[  272.213809][T13936] netlink: 'syz.1.2042': attribute type 10 has an invalid length.
[  272.320375][T13950] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  272.389323][T13951] 8021q: adding VLAN 0 to HW filter on device bond10
[  272.424632][T13963] bond10: (slave bond0): Enslaving as an active interface with a down link
[  272.426773][T13959] syzkaller0: left promiscuous mode
[  272.426791][T13959] syzkaller0: left allmulticast mode
[  272.427073][T13959] tipc: Resetting bearer <eth:syzkaller0>
[  272.501515][T13951] bond10 (unregistering): (slave bond0): Releasing active interface
[  272.648356][T13951] bond10 (unregistering): Released all slaves
[  272.725925][T13968] syzkaller0: entered promiscuous mode
[  272.725948][T13968] syzkaller0: entered allmulticast mode
[  272.777807][T13963] : entered promiscuous mode
[  273.038872][T13991] ip6gretap0: entered promiscuous mode
[  273.125121][T13987] tipc: Resetting bearer <eth:syzkaller0>
[  273.211258][T13987] tipc: Disabling bearer <eth:syzkaller0>
[  273.341259][T14000] pim6reg: entered allmulticast mode
[  273.434665][T13999] pim6reg: left allmulticast mode
[  273.489915][T14021] ip6gretap0: left promiscuous mode
[  273.909674][T14046] __nla_validate_parse: 45 callbacks suppressed
[  273.909693][T14046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2066'.
[  274.009666][T14046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2066'.
[  274.156389][T14056] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  274.158155][T14056] bond6 (unregistering): Released all slaves
[  274.205527][T14057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2070'.
[  274.319162][T14057] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2070'.
[  274.572359][T14077] IPVS: stopping master sync thread 9195 ...
[  274.697474][T14091] ip_tables: iptables: counters copy to user failed while replacing table
[  274.791287][T14095] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2076'.
[  274.791482][T14095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2076'.
[  274.791499][T14095] A link change request failed with some changes committed already. Interface 
2
6���l����i� may have been left with an inconsistent configuration, please check.
[  274.973723][ T5280] ip6gretap0: entered promiscuous mode
[  275.041429][T14103] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2081'.
[  275.487127][T14128] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2085'.
[  275.575320][T14136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2088'.
[  275.683369][T14136] IPVS: set_ctl: invalid protocol: 8 224.0.0.1:19999
[  278.206596][T14200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2097'.
[  278.754290][T14233] validate_nla: 27 callbacks suppressed
[  278.754326][T14233] netlink: 'syz.2.2105': attribute type 2 has an invalid length.
[  279.318976][T14261] __nla_validate_parse: 4 callbacks suppressed
[  279.318999][T14261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2113'.
[  279.319027][T14261] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2113'.
[  279.341592][T14261] macvlan4: entered allmulticast mode
[  279.341612][T14261] erspan0: entered allmulticast mode
[  279.361663][T14261] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2113'.
[  279.528514][T14268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2114'.
[  279.550686][T14269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2114'.
[  279.718754][T14277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2118'.
[  280.066646][T14301] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7
[  280.136464][T14311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2124'.
[  280.630664][T14338] syzkaller0: entered promiscuous mode
[  280.630687][T14338] syzkaller0: entered allmulticast mode
[  280.655757][T14342] Bluetooth: MGMT ver 1.23
[  280.680066][T14340] batadv2: entered promiscuous mode
[  280.680089][T14340] batadv2: entered allmulticast mode
[  281.153822][ T4934] Bluetooth: hci1: ISO packet too small
[  281.279814][T14369] bond10: option tlb_dynamic_lb: invalid value (128)
[  281.306940][T14369] bond10 (unregistering): Released all slaves
[  281.411700][T14381] netlink: 3560 bytes leftover after parsing attributes in process `syz.4.2134'.
[  281.531245][T14384] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0)
[  281.531285][T14384] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  281.738328][T14391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2135'.
[  282.060181][T14399] erspan0: left allmulticast mode
[  282.060206][T14399] erspan0: left promiscuous mode
[  282.060413][T14399] bridge0: port 1(erspan0) entered disabled state
[  282.088372][T14399] bond3: (slave bond0): Releasing backup interface
[  282.131146][T14399] bond0: (slave bond_slave_0): Releasing backup interface
[  282.131594][T14399] bond_slave_0: left allmulticast mode
[  282.149221][T14399] bond0: (slave bond_slave_1): Releasing backup interface
[  282.150630][T14399] bond_slave_1: left allmulticast mode
[  282.170556][T14399] team0: Port device team_slave_0 removed
[  282.197781][T14399] team0: Port device team_slave_1 removed
[  282.199509][T14399] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  282.199531][T14399] batman_adv: batadv0: Removing interface: batadv_slave_1
[  282.204193][T14399] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  282.301440][T14407] team0: Mode changed to "broadcast"
[  282.309115][T14417] tap0: tun_chr_ioctl cmd 1074025677
[  282.309226][T14417] tap0: linktype set to 804
[  282.317231][T14409] netlink: 'syz.1.2142': attribute type 2 has an invalid length.
[  282.336892][T14402] netlink: 'syz.4.2139': attribute type 2 has an invalid length.
[  282.370363][T14420] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2143'.
[  282.518106][T14409] ovs-s!: entered promiscuous mode
[  282.609107][T14433] netlink: 'syz.0.2146': attribute type 5 has an invalid length.
[  282.882883][T14446] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  283.029365][T13571] nci: nci_rx_work: unknown MT 0x6
[  285.804964][T14446] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  286.084576][T14514] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  286.087095][T14510] netdevsim0 speed is unknown, defaulting to 1000
[  286.286866][T14514] __nla_validate_parse: 5 callbacks suppressed
[  286.286885][T14514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2163'.
[  286.355299][T14523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2164'.
[  286.993742][T14555] netlink: 'syz.4.2172': attribute type 10 has an invalid length.
[  287.517028][T14587] FAULT_INJECTION: forcing a failure.
[  287.517028][T14587] name failslab, interval 1, probability 0, space 0, times 0
[  287.517058][T14587] CPU: 0 UID: 0 PID: 14587 Comm: syz.4.2180 Not tainted syzkaller #0 PREEMPT(full) 
[  287.517079][T14587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  287.517090][T14587] Call Trace:
[  287.517098][T14587]  <TASK>
[  287.517106][T14587]  dump_stack_lvl+0xe8/0x150
[  287.517140][T14587]  should_fail_ex+0x410/0x560
[  287.517168][T14587]  should_failslab+0xa8/0x100
[  287.517194][T14587]  __kmalloc_cache_noprof+0xa3/0x600
[  287.517216][T14587]  ? rcu_is_watching+0x16/0xb0
[  287.517239][T14587]  ? __hw_addr_create+0x62/0x240
[  287.517260][T14587]  ? __hw_addr_create+0x62/0x240
[  287.517291][T14587]  __hw_addr_create+0x62/0x240
[  287.517321][T14587]  __hw_addr_add_ex+0x1ce/0x520
[  287.517353][T14587]  dev_addr_init+0x15a/0x240
[  287.517380][T14587]  ? __pfx_dev_addr_init+0x10/0x10
[  287.517410][T14587]  ? __kvmalloc_node_noprof+0x345/0x820
[  287.517440][T14587]  alloc_netdev_mqs+0x2b4/0x12c0
[  287.517456][T14587]  ? __pfx_snprintf+0x10/0x10
[  287.517474][T14587]  ? __pfx_ip6_tnl_dev_setup+0x10/0x10
[  287.517506][T14587]  rtnl_create_link+0x321/0xd70
[  287.517532][T14587]  rtnl_newlink_create+0x258/0x7b0
[  287.517564][T14587]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  287.517592][T14587]  ? __pfx___mutex_lock+0x10/0x10
[  287.517626][T14587]  ? ns_capable+0x89/0xe0
[  287.517654][T14587]  rtnl_newlink+0x167a/0x1c30
[  287.517699][T14587]  ? __pfx_rtnl_newlink+0x10/0x10
[  287.517721][T14587]  ? __lock_acquire+0x747/0x2de0
[  287.517749][T14587]  ? __lock_acquire+0x747/0x2de0
[  287.517777][T14587]  ? __lock_acquire+0x747/0x2de0
[  287.517818][T14587]  ? lock_acquire+0x115/0x350
[  287.517845][T14587]  ? lock_acquire+0x115/0x350
[  287.517879][T14587]  ? is_bpf_text_address+0x26/0x2b0
[  287.517908][T14587]  ? __lock_acquire+0x747/0x2de0
[  287.517941][T14587]  ? __kernel_text_address+0xd/0x30
[  287.517959][T14587]  ? unwind_get_return_address+0x4d/0x90
[  287.517981][T14587]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  287.517997][T14587]  ? arch_stack_walk+0xfb/0x150
[  287.518047][T14587]  ? __pfx_rtnl_newlink+0x10/0x10
[  287.518068][T14587]  rtnetlink_rcv_msg+0x802/0xc00
[  287.518089][T14587]  ? netlink_sendmsg+0x5d4/0xb40
[  287.518111][T14587]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  287.518131][T14587]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  287.518154][T14587]  ? __lock_acquire+0x747/0x2de0
[  287.518183][T14587]  netlink_rcv_skb+0x226/0x4a0
[  287.518209][T14587]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  287.518232][T14587]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  287.518269][T14587]  ? netlink_deliver_tap+0x2e/0x1b0
[  287.518296][T14587]  ? netlink_deliver_tap+0x2e/0x1b0
[  287.518331][T14587]  netlink_unicast+0x7bd/0x940
[  287.518367][T14587]  netlink_sendmsg+0x813/0xb40
[  287.518394][T14587]  ? __pfx_netlink_sendmsg+0x10/0x10
[  287.518421][T14587]  ? apparmor_socket_sendmsg+0x98/0x360
[  287.518445][T14587]  ? __pfx_netlink_sendmsg+0x10/0x10
[  287.518461][T14587]  sock_sendmsg_nosec+0x14e/0x190
[  287.518485][T14587]  ____sys_sendmsg+0x54e/0x850
[  287.518515][T14587]  ? __pfx_____sys_sendmsg+0x10/0x10
[  287.518548][T14587]  ? import_iovec+0x73/0xa0
[  287.518575][T14587]  ___sys_sendmsg+0x2a5/0x360
[  287.518598][T14587]  ? __lock_acquire+0x747/0x2de0
[  287.518621][T14587]  ? __pfx____sys_sendmsg+0x10/0x10
[  287.518681][T14587]  ? __fget_files+0x2a/0x420
[  287.518704][T14587]  ? __fget_files+0x3a2/0x420
[  287.518739][T14587]  __x64_sys_sendmsg+0x1b1/0x290
[  287.518764][T14587]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  287.518812][T14587]  do_syscall_64+0x166/0x520
[  287.518834][T14587]  ? trace_irq_disable+0x3b/0x140
[  287.518853][T14587]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.518872][T14587]  ? clear_bhb_loop+0x70/0xc0
[  287.518896][T14587]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.518915][T14587] RIP: 0033:0x7fdbf939e159
[  287.518941][T14587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  287.518956][T14587] RSP: 002b:00007fdbfa22d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  287.518976][T14587] RAX: ffffffffffffffda RBX: 00007fdbf9625fa0 RCX: 00007fdbf939e159
[  287.518990][T14587] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  287.519002][T14587] RBP: 00007fdbfa22d090 R08: 0000000000000000 R09: 0000000000000000
[  287.519014][T14587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  287.519025][T14587] R13: 00007fdbf9626038 R14: 00007fdbf9625fa0 R15: 00007ffc45fba3d8
[  287.519059][T14587]  </TASK>
[  288.032768][T14601] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2182'.
[  288.032883][T14601] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2182'.
[  288.384835][ T4934] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  288.595961][T14618] netlink: 'syz.1.2188': attribute type 10 has an invalid length.
[  288.595996][T14618] bridge0: left allmulticast mode
[  288.632129][T14618] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  288.899050][T14623] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  289.046164][T14623] syzkaller0: entered promiscuous mode
[  289.046188][T14623] syzkaller0: entered allmulticast mode
[  289.047982][T14623] tipc: Resetting bearer <eth:syzkaller0>
[  289.049131][T14627] FAULT_INJECTION: forcing a failure.
[  289.049131][T14627] name failslab, interval 1, probability 0, space 0, times 0
[  289.049157][T14627] CPU: 1 UID: 0 PID: 14627 Comm: syz.0.2192 Not tainted syzkaller #0 PREEMPT(full) 
[  289.049177][T14627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  289.049187][T14627] Call Trace:
[  289.049194][T14627]  <TASK>
[  289.049202][T14627]  dump_stack_lvl+0xe8/0x150
[  289.049233][T14627]  should_fail_ex+0x410/0x560
[  289.049260][T14627]  should_failslab+0xa8/0x100
[  289.049286][T14627]  __kvmalloc_node_noprof+0x176/0x820
[  289.049311][T14627]  ? alloc_netdev_mqs+0x910/0x12c0
[  289.049327][T14627]  ? alloc_netdev_mqs+0x910/0x12c0
[  289.049351][T14627]  alloc_netdev_mqs+0x910/0x12c0
[  289.049369][T14627]  ? __pfx_ip6_tnl_dev_setup+0x10/0x10
[  289.049402][T14627]  rtnl_create_link+0x321/0xd70
[  289.049426][T14627]  rtnl_newlink_create+0x258/0x7b0
[  289.049459][T14627]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  289.049488][T14627]  ? __pfx___mutex_lock+0x10/0x10
[  289.049523][T14627]  ? ns_capable+0x89/0xe0
[  289.049551][T14627]  rtnl_newlink+0x167a/0x1c30
[  289.049590][T14627]  ? __pfx_rtnl_newlink+0x10/0x10
[  289.049610][T14627]  ? __netlink_deliver_tap+0x4f1/0x6e0
[  289.049635][T14627]  ? netlink_deliver_tap+0x19c/0x1b0
[  289.049659][T14627]  ? netlink_unicast+0x781/0x940
[  289.049680][T14627]  ? netlink_sendmsg+0x813/0xb40
[  289.049696][T14627]  ? sock_sendmsg_nosec+0x14e/0x190
[  289.049711][T14627]  ? ____sys_sendmsg+0x54e/0x850
[  289.049731][T14627]  ? ___sys_sendmsg+0x2a5/0x360
[  289.049753][T14627]  ? __x64_sys_sendmsg+0x1b1/0x290
[  289.049774][T14627]  ? do_syscall_64+0x166/0x520
[  289.049795][T14627]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.049857][T14627]  ? kasan_quarantine_put+0xbb/0x1f0
[  289.049877][T14627]  ? lockdep_hardirqs_on+0x7b/0x110
[  289.049903][T14627]  ? nlmon_xmit+0xb0/0x100
[  289.049922][T14627]  ? kmem_cache_free+0x182/0x650
[  289.049952][T14627]  ? __lock_acquire+0x747/0x2de0
[  289.049979][T14627]  ? __dev_queue_xmit+0x29b/0x3820
[  289.050009][T14627]  ? __local_bh_enable_ip+0xd6/0x140
[  289.050033][T14627]  ? lockdep_hardirqs_on+0x7b/0x110
[  289.050085][T14627]  ? __pfx_rtnl_newlink+0x10/0x10
[  289.050107][T14627]  rtnetlink_rcv_msg+0x802/0xc00
[  289.050134][T14627]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  289.050156][T14627]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  289.050183][T14627]  ? __copy_skb_header+0xa3/0x4a0
[  289.050220][T14627]  netlink_rcv_skb+0x226/0x4a0
[  289.050249][T14627]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  289.050274][T14627]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  289.050316][T14627]  ? netlink_deliver_tap+0x2e/0x1b0
[  289.050343][T14627]  ? netlink_deliver_tap+0x2e/0x1b0
[  289.050378][T14627]  netlink_unicast+0x7bd/0x940
[  289.050417][T14627]  netlink_sendmsg+0x813/0xb40
[  289.050446][T14627]  ? __pfx_netlink_sendmsg+0x10/0x10
[  289.050473][T14627]  ? apparmor_socket_sendmsg+0x98/0x360
[  289.050497][T14627]  ? __pfx_netlink_sendmsg+0x10/0x10
[  289.050515][T14627]  sock_sendmsg_nosec+0x14e/0x190
[  289.050538][T14627]  ____sys_sendmsg+0x54e/0x850
[  289.050568][T14627]  ? __pfx_____sys_sendmsg+0x10/0x10
[  289.050603][T14627]  ? import_iovec+0x73/0xa0
[  289.050631][T14627]  ___sys_sendmsg+0x2a5/0x360
[  289.050655][T14627]  ? __lock_acquire+0x747/0x2de0
[  289.050679][T14627]  ? __pfx____sys_sendmsg+0x10/0x10
[  289.050746][T14627]  ? __fget_files+0x2a/0x420
[  289.050770][T14627]  ? __fget_files+0x3a2/0x420
[  289.050806][T14627]  __x64_sys_sendmsg+0x1b1/0x290
[  289.050842][T14627]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  289.050892][T14627]  do_syscall_64+0x166/0x520
[  289.050914][T14627]  ? trace_irq_disable+0x3b/0x140
[  289.050932][T14627]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.050956][T14627]  ? clear_bhb_loop+0x70/0xc0
[  289.050980][T14627]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.050999][T14627] RIP: 0033:0x7f550a39e159
[  289.051017][T14627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  289.051032][T14627] RSP: 002b:00007f550b346028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  289.051050][T14627] RAX: ffffffffffffffda RBX: 00007f550a625fa0 RCX: 00007f550a39e159
[  289.051063][T14627] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  289.051074][T14627] RBP: 00007f550b346090 R08: 0000000000000000 R09: 0000000000000000
[  289.051085][T14627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  289.051096][T14627] R13: 00007f550a626038 R14: 00007f550a625fa0 R15: 00007ffd665d2348
[  289.051127][T14627]  </TASK>
[  289.080385][T14625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2191'.
[  289.117059][T14622] tipc: Resetting bearer <eth:syzkaller0>
[  290.066779][T14644] openvswitch: netlink: Key 4 has unexpected len 4 expected 12
[  290.330450][T14653] block nbd0: reconnected socket
[  290.330471][T14653] nbd: socks must be embedded in a SOCK_ITEM attr
[  290.370485][ T4934] block nbd0: Receive control failed (result -32)
[  291.504634][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  292.225870][T14622] tipc: Disabling bearer <eth:syzkaller0>
[  292.350248][T14689] netlink: 'syz.1.2206': attribute type 1 has an invalid length.
[  292.384496][T14689] 8021q: adding VLAN 0 to HW filter on device bond6
[  292.399839][T14689] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  292.418178][T14689] macvlan2: entered promiscuous mode
[  292.418200][T14689] macvlan2: entered allmulticast mode
[  292.418812][T14689] bond6: entered promiscuous mode
[  292.445101][T14689] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  292.445770][T14689] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  292.451518][T14689] bond6: left promiscuous mode
[  292.897850][T14720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2209'.
[  292.950377][T14720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2209'.
[  293.090207][T14732] netlink: 'syz.1.2213': attribute type 1 has an invalid length.
[  293.228913][T14732] bond7: entered promiscuous mode
[  293.244910][T14732] 8021q: adding VLAN 0 to HW filter on device bond7
[  293.323994][T14740] bond7: (slave bridge6): making interface the new active one
[  293.324019][T14740] bridge6: entered promiscuous mode
[  293.325288][T14740] bond7: (slave bridge6): Enslaving as an active interface with an up link
[  293.469787][T14751] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2216'.
[  293.521742][T14756] FAULT_INJECTION: forcing a failure.
[  293.521742][T14756] name failslab, interval 1, probability 0, space 0, times 0
[  293.521966][T14756] CPU: 0 UID: 0 PID: 14756 Comm: syz.2.2218 Not tainted syzkaller #0 PREEMPT(full) 
[  293.521988][T14756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  293.521998][T14756] Call Trace:
[  293.522004][T14756]  <TASK>
[  293.522012][T14756]  dump_stack_lvl+0xe8/0x150
[  293.522042][T14756]  should_fail_ex+0x410/0x560
[  293.522080][T14756]  should_failslab+0xa8/0x100
[  293.522104][T14756]  __kmalloc_cache_noprof+0xa3/0x600
[  293.522123][T14756]  ? __kmalloc_cache_noprof+0x14d/0x600
[  293.522141][T14756]  ? alloc_netdev_mqs+0xcb5/0x12c0
[  293.522159][T14756]  ? alloc_netdev_mqs+0xcb5/0x12c0
[  293.522184][T14756]  alloc_netdev_mqs+0xcb5/0x12c0
[  293.522211][T14756]  rtnl_create_link+0x321/0xd70
[  293.522237][T14756]  rtnl_newlink_create+0x258/0x7b0
[  293.522267][T14756]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  293.522295][T14756]  ? __pfx___mutex_lock+0x10/0x10
[  293.522328][T14756]  ? ns_capable+0x89/0xe0
[  293.522357][T14756]  rtnl_newlink+0x167a/0x1c30
[  293.522396][T14756]  ? __pfx_rtnl_newlink+0x10/0x10
[  293.522417][T14756]  ? __netlink_deliver_tap+0x4f1/0x6e0
[  293.522442][T14756]  ? netlink_deliver_tap+0x19c/0x1b0
[  293.522467][T14756]  ? netlink_unicast+0x781/0x940
[  293.522494][T14756]  ? netlink_sendmsg+0x813/0xb40
[  293.522510][T14756]  ? sock_sendmsg_nosec+0x14e/0x190
[  293.522526][T14756]  ? ____sys_sendmsg+0x54e/0x850
[  293.522547][T14756]  ? ___sys_sendmsg+0x2a5/0x360
[  293.522568][T14756]  ? __x64_sys_sendmsg+0x1b1/0x290
[  293.522590][T14756]  ? do_syscall_64+0x166/0x520
[  293.522613][T14756]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.522671][T14756]  ? kasan_quarantine_put+0xbb/0x1f0
[  293.522691][T14756]  ? lockdep_hardirqs_on+0x7b/0x110
[  293.522718][T14756]  ? nlmon_xmit+0xb0/0x100
[  293.522736][T14756]  ? kmem_cache_free+0x182/0x650
[  293.522765][T14756]  ? __lock_acquire+0x747/0x2de0
[  293.522794][T14756]  ? __dev_queue_xmit+0x29b/0x3820
[  293.522824][T14756]  ? __local_bh_enable_ip+0xd6/0x140
[  293.522849][T14756]  ? lockdep_hardirqs_on+0x7b/0x110
[  293.522898][T14756]  ? __pfx_rtnl_newlink+0x10/0x10
[  293.522920][T14756]  rtnetlink_rcv_msg+0x802/0xc00
[  293.522948][T14756]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  293.522971][T14756]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  293.522997][T14756]  ? __copy_skb_header+0xa3/0x4a0
[  293.523035][T14756]  netlink_rcv_skb+0x226/0x4a0
[  293.523072][T14756]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  293.523097][T14756]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  293.523140][T14756]  ? netlink_deliver_tap+0x2e/0x1b0
[  293.523168][T14756]  ? netlink_deliver_tap+0x2e/0x1b0
[  293.523203][T14756]  netlink_unicast+0x7bd/0x940
[  293.523241][T14756]  netlink_sendmsg+0x813/0xb40
[  293.523271][T14756]  ? __pfx_netlink_sendmsg+0x10/0x10
[  293.523299][T14756]  ? apparmor_socket_sendmsg+0x98/0x360
[  293.523324][T14756]  ? __pfx_netlink_sendmsg+0x10/0x10
[  293.523342][T14756]  sock_sendmsg_nosec+0x14e/0x190
[  293.523365][T14756]  ____sys_sendmsg+0x54e/0x850
[  293.523397][T14756]  ? __pfx_____sys_sendmsg+0x10/0x10
[  293.523433][T14756]  ? import_iovec+0x73/0xa0
[  293.523462][T14756]  ___sys_sendmsg+0x2a5/0x360
[  293.523486][T14756]  ? __lock_acquire+0x747/0x2de0
[  293.523511][T14756]  ? __pfx____sys_sendmsg+0x10/0x10
[  293.523574][T14756]  ? __fget_files+0x2a/0x420
[  293.523599][T14756]  ? __fget_files+0x3a2/0x420
[  293.523636][T14756]  __x64_sys_sendmsg+0x1b1/0x290
[  293.523665][T14756]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  293.523714][T14756]  do_syscall_64+0x166/0x520
[  293.523737][T14756]  ? trace_irq_disable+0x3b/0x140
[  293.523756][T14756]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.523775][T14756]  ? clear_bhb_loop+0x70/0xc0
[  293.523798][T14756]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.523817][T14756] RIP: 0033:0x7f9c7c59e159
[  293.523836][T14756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  293.523852][T14756] RSP: 002b:00007f9c7d3ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  293.523872][T14756] RAX: ffffffffffffffda RBX: 00007f9c7c825fa0 RCX: 00007f9c7c59e159
[  293.523886][T14756] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  293.523899][T14756] RBP: 00007f9c7d3ee090 R08: 0000000000000000 R09: 0000000000000000
[  293.523911][T14756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  293.523922][T14756] R13: 00007f9c7c826038 R14: 00007f9c7c825fa0 R15: 00007fff5b0ab7d8
[  293.523955][T14756]  </TASK>
[  294.055882][T14770] tipc: Resetting bearer <eth:syzkaller0>
[  294.073225][T14770] 8021q: adding VLAN 0 to HW filter on device bond3
[  294.078906][T14780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2227'.
[  294.086213][T14770] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  294.090742][T14770] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  294.109345][T14770] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check.
[  294.169931][T13584] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  294.616890][T14807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2232'.
[  294.658830][T14808] sctp: [Deprecated]: syz.4.2237 (pid 14808) Use of int in maxseg socket option.
[  294.658830][T14808] Use struct sctp_assoc_value instead
[  294.808930][T14800] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  294.809601][T14800] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  294.816195][T14815] netlink: 'syz.0.2238': attribute type 2 has an invalid length.
[  294.881011][T14815] veth7: entered promiscuous mode
[  298.462121][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  306.862366][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  317.105908][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  324.142161][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  342.702761][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  358.702165][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  378.544073][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  394.325314][T14828] netlink: 'syz.0.2240': attribute type 1 has an invalid length.
[  394.385720][T14828] bond6: entered promiscuous mode
[  394.386135][T14828] 8021q: adding VLAN 0 to HW filter on device bond6
[  394.390078][T14834] netlink: 'syz.3.2243': attribute type 3 has an invalid length.
[  394.390096][T14834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2243'.
[  394.395288][T14837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2246'.
[  394.407613][T14837] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2246'.
[  394.415310][T14828] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2240'.
[  394.700020][T14861] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2250'.
[  394.759828][T14864] netlink: 'syz.0.2253': attribute type 1 has an invalid length.
[  394.759851][T14864] netlink: 'syz.0.2253': attribute type 2 has an invalid length.
[  394.771440][T14854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2250'.
[  394.787779][T14864] netlink: 'syz.0.2253': attribute type 1 has an invalid length.
[  394.787802][T14864] netlink: 'syz.0.2253': attribute type 2 has an invalid length.
[  394.879621][T14868] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2253'.
[  394.940851][T14871] netlink: 'syz.4.2255': attribute type 2 has an invalid length.
[  394.964119][T14871] 
: entered promiscuous mode
[  395.697276][T14885] netdevsim0 speed is unknown, defaulting to 1000
[  397.317937][T14834] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  397.588204][T14907] xt_CT: No such helper "snmp_trap"
[  397.625024][T14919] 
[  397.627415][T14919] ======================================================
[  397.634440][T14919] WARNING: possible circular locking dependency detected
[  397.641488][T14919] syzkaller #0 Not tainted
[  397.645905][T14919] ------------------------------------------------------
[  397.652926][T14919] syz.4.2266/14919 is trying to acquire lock:
[  397.658996][T14919] ffff88801c2f7a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_permission+0x7f/0x430
[  397.669563][T14919] 
[  397.669563][T14919] but task is already holding lock:
[  397.676940][T14919] ffffffff8ebe9970 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900
[  397.687069][T14919] 
[  397.687069][T14919] which lock already depends on the new lock.
[  397.687069][T14919] 
[  397.697483][T14919] 
[  397.697483][T14919] the existing dependency chain (in reverse order) is:
[  397.706502][T14919] 
[  397.706502][T14919] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[  397.714238][T14919]        cpus_read_lock+0x42/0x160
[  397.719371][T14919]        static_key_slow_inc+0x12/0x30
[  397.724844][T14919]        nbd_genl_reconnect_sock_cb+0x69a/0xbb0
[  397.731091][T14919]        nbd_genl_foreach_sock+0x265/0x450
[  397.736909][T14919]        nbd_genl_reconfigure+0xbbb/0x1040
[  397.742716][T14919]        genl_family_rcv_msg_doit+0x233/0x340
[  397.748794][T14919]        genl_rcv_msg+0x614/0x7a0
[  397.753930][T14919]        netlink_rcv_skb+0x226/0x4a0
[  397.759246][T14919]        genl_rcv+0x28/0x40
[  397.763291][T14920] netlink: 'syz.1.2267': attribute type 2 has an invalid length.
[  397.771462][T14919]        netlink_unicast+0x7bd/0x940
[  397.776764][T14919]        netlink_sendmsg+0x813/0xb40
[  397.782060][T14919]        sock_sendmsg_nosec+0x14e/0x190
[  397.787622][T14919]        ____sys_sendmsg+0x54e/0x850
[  397.792920][T14919]        ___sys_sendmsg+0x2a5/0x360
[  397.798132][T14919]        __x64_sys_sendmsg+0x1b1/0x290
[  397.803622][T14919]        do_syscall_64+0x166/0x520
[  397.808738][T14919]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.815161][T14919] 
[  397.815161][T14919] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  397.822824][T14919]        __mutex_lock+0x19d/0x1550
[  397.827959][T14919]        nbd_queue_rq+0x373/0xff0
[  397.832993][T14919]        blk_mq_dispatch_rq_list+0x499/0x1990
[  397.839070][T14919]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  397.845940][T14919]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  397.852453][T14919]        blk_mq_run_work_fn+0x16c/0x300
[  397.858011][T14919]        process_scheduled_works+0xc3d/0x1630
[  397.864089][T14919]        worker_thread+0xa47/0xfb0
[  397.869225][T14919]        kthread+0x38b/0x480
[  397.873831][T14919]        ret_from_fork+0x514/0xb70
[  397.878950][T14919]        ret_from_fork_asm+0x1a/0x30
[  397.884250][T14919] 
[  397.884250][T14919] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  397.891479][T14919]        __mutex_lock+0x19d/0x1550
[  397.896625][T14919]        nbd_queue_rq+0xc1/0xff0
[  397.901582][T14919]        blk_mq_dispatch_rq_list+0x499/0x1990
[  397.907675][T14919]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  397.914547][T14919]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  397.921074][T14919]        blk_mq_run_work_fn+0x16c/0x300
[  397.926638][T14919]        process_scheduled_works+0xc3d/0x1630
[  397.932715][T14919]        worker_thread+0xa47/0xfb0
[  397.937832][T14919]        kthread+0x38b/0x480
[  397.942423][T14919]        ret_from_fork+0x514/0xb70
[  397.947544][T14919]        ret_from_fork_asm+0x1a/0x30
[  397.952842][T14919] 
[  397.952842][T14919] -> #4 (set->srcu){.+.+}-{0:0}:
[  397.959975][T14919]        __synchronize_srcu+0xc9/0x2f0
[  397.965436][T14919]        elevator_switch+0x1e8/0x7b0
[  397.970725][T14919]        elevator_change+0x2fa/0x480
[  397.976015][T14919]        elevator_set_default+0x375/0x440
[  397.981745][T14919]        blk_register_queue+0x3f3/0x4e0
[  397.987301][T14919]        __add_disk+0x6b8/0xdb0
[  397.992168][T14919]        add_disk_fwnode+0x100/0x3a0
[  397.997457][T14919]        nbd_dev_add+0x733/0xb60
[  398.002401][T14919]        nbd_init+0x168/0x1f0
[  398.007099][T14919]        do_one_initcall+0x250/0x870
[  398.012404][T14919]        do_initcall_level+0x10a/0x1a0
[  398.017868][T14919]        do_initcalls+0x59/0xa0
[  398.022728][T14919]        kernel_init_freeable+0x29d/0x3e0
[  398.028451][T14919]        kernel_init+0x22/0x1d0
[  398.033312][T14919]        ret_from_fork+0x514/0xb70
[  398.038416][T14919]        ret_from_fork_asm+0x1a/0x30
[  398.043706][T14919] 
[  398.043706][T14919] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  398.051514][T14919]        __mutex_lock+0x19d/0x1550
[  398.056620][T14919]        elevator_change+0x1af/0x480
[  398.061902][T14919]        elevator_set_none+0xb5/0x140
[  398.067289][T14919]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  398.073632][T14919]        nbd_start_device+0x189/0xb30
[  398.079011][T14919]        nbd_genl_connect+0x167d/0x1cd0
[  398.084574][T14919]        genl_family_rcv_msg_doit+0x233/0x340
[  398.090680][T14919]        genl_rcv_msg+0x614/0x7a0
[  398.095721][T14919]        netlink_rcv_skb+0x226/0x4a0
[  398.101023][T14919]        genl_rcv+0x28/0x40
[  398.105538][T14919]        netlink_unicast+0x7bd/0x940
[  398.110830][T14919]        netlink_sendmsg+0x813/0xb40
[  398.116111][T14919]        sock_sendmsg_nosec+0x14e/0x190
[  398.121653][T14919]        ____sys_sendmsg+0x54e/0x850
[  398.126933][T14919]        ___sys_sendmsg+0x2a5/0x360
[  398.132125][T14919]        __x64_sys_sendmsg+0x1b1/0x290
[  398.137580][T14919]        do_syscall_64+0x166/0x520
[  398.142747][T14919]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.149174][T14919] 
[  398.149174][T14919] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}:
[  398.157793][T14919]        blk_alloc_queue+0x544/0x690
[  398.163086][T14919]        __blk_mq_alloc_disk+0x194/0x390
[  398.168730][T14919]        nbd_dev_add+0x494/0xb60
[  398.173676][T14919]        nbd_init+0x168/0x1f0
[  398.178369][T14919]        do_one_initcall+0x250/0x870
[  398.183673][T14919]        do_initcall_level+0x10a/0x1a0
[  398.189146][T14919]        do_initcalls+0x59/0xa0
[  398.193999][T14919]        kernel_init_freeable+0x29d/0x3e0
[  398.199726][T14919]        kernel_init+0x22/0x1d0
[  398.204582][T14919]        ret_from_fork+0x514/0xb70
[  398.209691][T14919]        ret_from_fork_asm+0x1a/0x30
[  398.214984][T14919] 
[  398.214984][T14919] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  398.222205][T14919]        fs_reclaim_acquire+0x71/0x100
[  398.227681][T14919]        kmem_cache_alloc_noprof+0x5f/0x600
[  398.233591][T14919]        __kernfs_iattrs+0xdd/0x380
[  398.238817][T14919]        kernfs_iop_setattr+0xe6/0x3f0
[  398.244289][T14919]        notify_change+0xbba/0xea0
[  398.249417][T14919]        do_truncate+0x1c2/0x250
[  398.254379][T14919]        path_openat+0x15b5/0x1d60
[  398.259503][T14919]        do_file_open+0x23e/0x4a0
[  398.264541][T14919]        do_sys_openat2+0x115/0x200
[  398.269757][T14919]        __x64_sys_openat+0x138/0x170
[  398.275134][T14919]        do_syscall_64+0x166/0x520
[  398.280263][T14919]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.286670][T14919] 
[  398.286670][T14919] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[  398.295210][T14919]        __lock_acquire+0x164c/0x2de0
[  398.300584][T14919]        lock_acquire+0x115/0x350
[  398.305607][T14919]        down_read+0x4a/0x330
[  398.310289][T14919]        kernfs_iop_permission+0x7f/0x430
[  398.316024][T14919]        inode_permission+0x3de/0x5f0
[  398.321406][T14919]        cgroup_attach_permissions+0x28e/0x9f0
[  398.327563][T14919]        __cgroup_procs_write+0x24b/0x320
[  398.333285][T14919]        cgroup_threads_write+0x24/0x50
[  398.338833][T14919]        cgroup_file_write+0x331/0x8f0
[  398.344290][T14919]        kernfs_fop_write_iter+0x3a4/0x540
[  398.350094][T14919]        vfs_write+0x612/0xba0
[  398.354858][T14919]        ksys_write+0x150/0x270
[  398.359706][T14919]        do_syscall_64+0x166/0x520
[  398.364817][T14919]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.371221][T14919] 
[  398.371221][T14919] other info that might help us debug this:
[  398.371221][T14919] 
[  398.381441][T14919] Chain exists of:
[  398.381441][T14919]   &root->kernfs_iattr_rwsem --> &nsock->tx_lock --> cpu_hotplug_lock
[  398.381441][T14919] 
[  398.395435][T14919]  Possible unsafe locking scenario:
[  398.395435][T14919] 
[  398.402889][T14919]        CPU0                    CPU1
[  398.408250][T14919]        ----                    ----
[  398.413637][T14919]   rlock(cpu_hotplug_lock);
[  398.418237][T14919]                                lock(&nsock->tx_lock);
[  398.425175][T14919]                                lock(cpu_hotplug_lock);
[  398.432198][T14919]   rlock(&root->kernfs_iattr_rwsem);
[  398.437568][T14919] 
[  398.437568][T14919]  *** DEADLOCK ***
[  398.437568][T14919] 
[  398.445700][T14919] locks held by syz.4.2266/14919: 5, last CPU#0:
[  398.452021][T14919]  #0: ffff88803670a0f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  398.461163][T14919]  #1: ffff888077b84460 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  398.470039][T14919]  #2: ffff8880589b2480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540
[  398.479780][T14919]  #3: ffffffff8ed9c820 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x13c/0x230
[  398.489540][T14919]  #4: ffffffff8ebe9970 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900
[  398.500110][T14919] 
[  398.500110][T14919] stack backtrace:
[  398.506006][T14919] CPU: 0 UID: 0 PID: 14919 Comm: syz.4.2266 Not tainted syzkaller #0 PREEMPT(full) 
[  398.515381][T14919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  398.525449][T14919] Call Trace:
[  398.528737][T14919]  <TASK>
[  398.531658][T14919]  dump_stack_lvl+0xe8/0x150
[  398.536250][T14919]  print_circular_bug+0x2e2/0x300
[  398.541277][T14919]  check_noncircular+0x12f/0x150
[  398.546218][T14919]  __lock_acquire+0x164c/0x2de0
[  398.551063][T14919]  ? __lock_acquire+0x747/0x2de0
[  398.555998][T14919]  lock_acquire+0x115/0x350
[  398.560496][T14919]  ? kernfs_iop_permission+0x7f/0x430
[  398.565874][T14919]  ? __pfx_kernfs_iop_permission+0x10/0x10
[  398.571742][T14919]  ? __pfx_kernfs_iop_permission+0x10/0x10
[  398.577563][T14919]  down_read+0x4a/0x330
[  398.581743][T14919]  ? kernfs_iop_permission+0x7f/0x430
[  398.587136][T14919]  ? __pfx_kernfs_iop_permission+0x10/0x10
[  398.592948][T14919]  kernfs_iop_permission+0x7f/0x430
[  398.598171][T14919]  ? __pfx_kernfs_iop_permission+0x10/0x10
[  398.603988][T14919]  inode_permission+0x3de/0x5f0
[  398.608841][T14919]  cgroup_attach_permissions+0x28e/0x9f0
[  398.614468][T14919]  __cgroup_procs_write+0x24b/0x320
[  398.619662][T14919]  cgroup_threads_write+0x24/0x50
[  398.624690][T14919]  ? __pfx_cgroup_threads_write+0x10/0x10
[  398.630411][T14919]  cgroup_file_write+0x331/0x8f0
[  398.635350][T14919]  ? __pfx_cgroup_file_write+0x10/0x10
[  398.640809][T14919]  ? __kmalloc_noprof+0x38c/0x720
[  398.645828][T14919]  ? __pfx_cgroup_file_write+0x10/0x10
[  398.651283][T14919]  kernfs_fop_write_iter+0x3a4/0x540
[  398.656566][T14919]  vfs_write+0x612/0xba0
[  398.660807][T14919]  ? __pfx_vfs_write+0x10/0x10
[  398.665571][T14919]  ? __fget_files+0x2a/0x420
[  398.670162][T14919]  ksys_write+0x150/0x270
[  398.674492][T14919]  ? __pfx_ksys_write+0x10/0x10
[  398.679349][T14919]  do_syscall_64+0x166/0x520
[  398.683934][T14919]  ? trace_irq_disable+0x3b/0x140
[  398.688960][T14919]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.695016][T14919]  ? clear_bhb_loop+0x70/0xc0
[  398.699685][T14919]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.705575][T14919] RIP: 0033:0x7fdbf939e159
[  398.710012][T14919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  398.729614][T14919] RSP: 002b:00007fdbfa1eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  398.738027][T14919] RAX: ffffffffffffffda RBX: 00007fdbf9626180 RCX: 00007fdbf939e159
[  398.745994][T14919] RDX: 0000000000000012 RSI: 0000200000000c40 RDI: 0000000000000008
[  398.753968][T14919] RBP: 00007fdbf943506b R08: 0000000000000000 R09: 0000000000000000
[  398.761933][T14919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  398.769906][T14919] R13: 00007fdbf9626218 R14: 00007fdbf9626180 R15: 00007ffc45fba3d8
[  398.778021][T14919]  </TASK>
[  398.826848][T14935] A link change request failed with some changes committed already. Interface 
2
6���l����i� may have been left with an inconsistent configuration, please check.
[  406.222024][ T4934] Bluetooth: hci4: command 0x0406 tx timeout