last executing test programs: 2m41.942160141s ago: executing program 3 (id=239): ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="13c70b4435779630379a2693a6256d") 2m41.675555617s ago: executing program 3 (id=241): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x1e, 0x4, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f00000003c0)={r1, &(0x7f0000000240)='TIPCv2\x00', 0x200, &(0x7f0000000280)={@align=0x9, {0x4, 0xfffc, 0x9, 0x2f}}, 0x7fff, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)}) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000440)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r5, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000001010000000000000800000071100a000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r6) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x20, r7, 0x607, 0x4, 0xfffffffd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004005}, 0xc000) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r2, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001900010e9acfc200fbdbdb251c010900"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="680000000206050000000000000000000000fffd0e0003006269746d61703a697000000005000400000000000900020073797a310000000020000780050003001f0000000c00018008000140ffffffff0800064000006d2305000500020000000500010006"], 0x68}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r9, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000b00000040000580070001"], 0x54}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x16, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcff1f00000000002000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000181a0000", @ANYRES32=r10, @ANYBLOB="00000000000000005d93000000000000b5030200000000008500000088000000ce0000000000000095"], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m40.902282218s ago: executing program 3 (id=246): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x120008c) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000540)=0x1) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000003c0)="002145000b2c000b0000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000001a0)={'wlan1\x00', @ifru_flags}) ioctl$sock_ifreq(r0, 0x8924, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000001c0)={'wlan1\x00', @ifru_flags=0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}]]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000180000022cbd7000fbdbfd258200800c00ebfe9e0008000008000300", @ANYRES32=0x0, @ANYBLOB="0d000880176b3e96172f8de96b00000008000b0001800000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_80211_inject_frame(&(0x7f0000000500)=@device_b, &(0x7f0000000680)=@ctrl_frame=@bar={{}, {0x6}, @device_b, @device_a, @compressed={{0x0, 0x0, 0x1, 0x0, 0x3}, {0xe, 0x83}}}, 0x14) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) r6 = socket(0x2, 0x80805, 0x0) getsockopt$MRT(r6, 0x0, 0xce, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000001580)={'erspan0\x00', r5, 0x40, 0x7807, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, @empty, @multicast2}}}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket(0x2b, 0x1, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4319030000000000140012800b0001006d616373656300000400028008000500", @ANYRES32, @ANYBLOB="050011000100f90b40d28c79150000"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2m39.915500576s ago: executing program 3 (id=253): r0 = socket(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25cfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x2, 0x7fff, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r11, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000214000e00002f74214b34586d47423cddcb0000008000008276000000000000006e81a357601e3876", 0x2e}], 0x1}, 0x5) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@gettaction={0x2c, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x2c}}, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000001, 0x10, r1, 0xbec16000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYBLOB="706f325ec8f971b96c6c7905a11321008d785ff6937e01688fc2aea600b27c2e6e4e88181eccf5ce63df53b22eee6dfbc90f8bf3dd3914555ef8e980af6af013d85f2bf3bac55c01a4a4610eccd886ec5a500d15ff86f87be7556c41fe5af801e3a5c9fae61f6645dc9700b509d3c58f0f7e760b82b4be9e511a815ab491aaaee0a4126a61d3a46340f6ee3fdcd181492c805cbddf3f2bb5e28963ec0b74e9c611a5c38fd393895ee226f3c137d0ae492bd08140f78c1f7f9f450127d8a5365914a3c41361f5fcaedaea9523b0375dcf88b46710ad26b52a387140f1ba5911bd", @ANYRES8=r0, @ANYRES8=r0], 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x0) 2m38.835734532s ago: executing program 3 (id=259): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f00000005c0)=@ethtool_pauseparam={0x13, 0xffff3835, 0x80000000, 0x2}}) socket$tipc(0x1e, 0x5, 0x0) 2m38.789963519s ago: executing program 3 (id=263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fff9, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008084) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000fe00000000000000fd000000850000002f000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00ec000000000000b705000700000000000009000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10001, 0x1, 0x3, 0x8, 0xffffffc0}, 0x4, 0x1, 0x8, 0x0, 0x3, 0x0, 0x16, 0x13, 0x3, 0xca, {0x0, 0x8, 0x3, 0x5, 0x84, 0x8}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x10, 0x1}, {0xe, 0x9}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44851}, 0x20040054) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000004900)={0x44, r7, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x44}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, r3, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x3}, @NFTA_SYNPROXY_FLAGS={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 2m30.162670482s ago: executing program 0 (id=325): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/194, 0xc2}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f00000002c0)=""/214, 0xd6}], 0x3, 0x0, 0x0, 0x4}, 0x10000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x4004000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b28, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x1c, r1, 0x303, 0x0, 0x10001, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20044080}, 0x20040890) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$rds(0x15, 0x5, 0x0) (async) sendmsg$rds(r3, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/194, 0xc2}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f00000002c0)=""/214, 0xd6}], 0x3, 0x0, 0x0, 0x4}, 0x10000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x4004000) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b28, &(0x7f0000000000)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x1c, r1, 0x303, 0x0, 0x10001, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20044080}, 0x20040890) (async) 2m30.080572328s ago: executing program 0 (id=326): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2b0000001a01010a2cbd7000000000001c000200"], 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x3e0, 0x2e8, 0x2e8, 0x3e0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x260, 0x288, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'wg1\x00', {}, '\x00', {0xff}, 0xc, 0x17}}, @common=@inet=@hashlimit2={{0x150}, {'batadv0\x00', {0x5, 0x3, 0x24, 0x9, 0xd353, 0x10001, 0x0, 0x40, 0x40}, {0x5a2f}}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xa, 0x6, 0x3}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0x0, 0xffffff00], [0x0, 0xffffffff], 'wlan0\x00', 'netdevsim0\x00', {}, {0xff}, 0x2c, 0x0, 0x1, 0x7b}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@dst={{0x48}, {0xa, 0x0, 0x1, [0xff, 0x6, 0xff, 0x4608, 0x3, 0xe, 0x2, 0x8000, 0x4, 0x400, 0x800, 0x0, 0x8, 0x7, 0x0, 0x50], 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0x0, 0x8, 0x400, 'snmp\x00', 'syz1\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) bind$packet(r2, &(0x7f0000000200)={0x11, 0x1, 0x1, 0x1, 0xfe, 0x6, @random="ee520800"}, 0x14) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101000000"], 0x57) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f00000001c0)) syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x0) write(r2, &(0x7f0000000000)="01", 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)=ANY=[@ANYBLOB="20010000410007012cbd7000fddbdf25037c00000400c28008010180040110801400080000000000000000000000000000000001ec000f"], 0x120}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0], 0xb4}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) socket(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'veth1_to_team\x00', 0x400}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=@deltaction={0xd0, 0x31, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 2m29.088022659s ago: executing program 0 (id=334): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a90000000060a0304000000688c3475000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c000280240003007339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c2008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) 2m28.87972339s ago: executing program 0 (id=335): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) (async) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000440)=""/101, &(0x7f00000004c0)=0x65) (async) getpeername$packet(r3, 0x0, &(0x7f00000015c0)) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x15, &(0x7f0000000dc0)=ANY=[@ANYBLOB="18000000090000000000000099020000185800000a000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000850000003900000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850005000c000000b700000000000000183700000408000000000000000000373d2189b73714d800b057b3d6ab9ef764fd168b028548ee934caab361c7db92de87915fe212f7ebf0620a8dc49cc1566d55b11f776edc11bf94de86deb64295b0fbc82ed14db6285054cd86d8c0ee5c7c3e1891ed8e8f91bd3ec7b34dfa1f96896d4241215abc14ade8ac8d2463cbac214d3d0fc9adaa60897d271118645bff27a41363cb9804a6ce413334d3d827d886f4763ff394c8866d6e89350577f1083c962fb65a56260c6102b50a96ba7b410013e75d366de90573f6e6a9d1413a6f83026774c39b3ea7d9b3c8fa2bc086860f4b30d2c0d76dade5d9802b0934d013b15accb3317dd38e91ddde82ec408b1ecdbbd3f45b93b3febf21bf6f67a5aab40f8091af98b0a45896e1c6296fbfbe5c8ecb07c01739f3856d17069de855a99f5f938587a2dde3b91cc9d5797145289d1e61d85131beaf1acbb9e3642c84fc6304c65fa671d579d6f1794b7c5d4607b02d68e9ef39aebd265f8e5a578d6863193c0145cba98e25ce88fadccf826415eae48f46387e070e65996902a3d426c25c2668dc8056def725e4a5635e0acde7255a94aab503918d65d6623432707a990625d29cc61b126563c8f1c92550ca452c89d964dc2d5c72e119be2c70fe03171d36340a672fbd8eb55bf2af6d5cddbd3af077efc3200f066b82038188c673976df7b54c6fef02bab9dafca31072476bcdfe0e8f21996e7aeb030828f088be32fdbac5a7755e23cdc98c080b816b9e8af50cd5cef4"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) (async) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f0000000240)=""/186, 0xba, 0x0, &(0x7f0000000300)=""/140, 0x8c}}, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010700000200fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0380000008960100140012800c0001006d6163766c616e000400020008000500", @ANYRES32=r13, @ANYBLOB="08001f00c4000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) (async) socket$unix(0x1, 0x5, 0x0) (async) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r14, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r15, 0x0, 0x12, 0x2f, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r16 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r16, 0x107, 0x8, &(0x7f00000000c0), 0x8) (async) recvmsg$kcm(r16, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffef}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYRESOCT=r7], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, r10}, 0x94) 2m27.985570971s ago: executing program 0 (id=342): unshare(0x2040400) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@fallback, 0xffffffffffffffff, 0xc}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000001c0)={{r1, &(0x7f0000000000)='batadv\x00', 0x80, &(0x7f0000000040)={@_ha_fsid={[0xe1e, 0x4]}, {0x2, 0x7, 0x4, 0x6}}, 0x1000, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0xffff}, {[0x5, 0x3f8, 0x8]}, 0x0, 0x5d, &(0x7f0000000140)=""/93}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv6_newaddr={0x40, 0x14, 0x200, 0x70bd27, 0x25dfdbfb, {0xa, 0x8, 0x40, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @private1}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x3, 0x1000, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x48800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x8901, &(0x7f0000000100)) sendmsg$inet(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000f00)="92", 0x1}], 0x1}, 0x4815) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000040)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x2004e8a0}, 0x18) 2m27.902796879s ago: executing program 0 (id=343): r0 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x20, &(0x7f0000001680)=""/4096, &(0x7f0000002680)=0x1000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000013000500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003"], 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x400) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x4, 0x6, 0x0, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r5, 0xfffffffffffffddf, &(0x7f0000000140)}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) write$nbd(r0, &(0x7f0000000340)={0x67446698, 0x0, 0x1, 0x2, 0x4, "8bb596bef6afcfa5ff5c713c0b342f411a487708d711b4fa7249f32489c8c3dbf7eb66e8d85936bd492831051fdb10130061c813f2a482215f470404ca16f9a9d64929b5b30a14afd2a34be454991e1f4632361bfa81ae04a0c32286fffe0109fba7ade2bb675035baf8817e821e43a340342c032caadffc90d0065c6ec1a21ce251db518b155bb83e3e3c178fa5654e678fbd5e693450e80de9096b114aeb3e7c82d5dcecedceda7f588948d4ee0e438fc9b66e13232056a02c315791c15f52ee81043c792d0921e91ee86b6b07898c3f421ff4b07e10c8c645244b6f9090cdc54671deac839de2059fc795b84269f1ae"}, 0x101) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x18, r6, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000b00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xa0124600}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000b40)={0x3f8, 0xa, 0xa, 0x8f8207e91649817a, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_DESC={0x39c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_CONCAT={0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf5f9}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x649}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb6a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xae7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8e95}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbbe}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_CONCAT={0x118, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x354}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6d27}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x318a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa66}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xddbd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa70}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6c45}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}]}, @NFTA_SET_DESC_CONCAT={0x44, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x99ee}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_CONCAT={0xec, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x45}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3fb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffa37}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1b}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffc0000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81eabba}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}]}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x94}, 0x200488c0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r6, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x12}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x200008c4}, 0x40804) r8 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x64, &(0x7f0000000000), 0x10) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00120002000a0006005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x208080, 0x4) 2m23.713703846s ago: executing program 32 (id=263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fff9, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008084) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000fe00000000000000fd000000850000002f000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00ec000000000000b705000700000000000009000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10001, 0x1, 0x3, 0x8, 0xffffffc0}, 0x4, 0x1, 0x8, 0x0, 0x3, 0x0, 0x16, 0x13, 0x3, 0xca, {0x0, 0x8, 0x3, 0x5, 0x84, 0x8}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x10, 0x1}, {0xe, 0x9}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44851}, 0x20040054) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000004900)={0x44, r7, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x44}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, r3, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x3}, @NFTA_SYNPROXY_FLAGS={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 2m12.773181821s ago: executing program 33 (id=343): r0 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x20, &(0x7f0000001680)=""/4096, &(0x7f0000002680)=0x1000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000013000500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003"], 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x400) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x4, 0x6, 0x0, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r5, 0xfffffffffffffddf, &(0x7f0000000140)}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) write$nbd(r0, &(0x7f0000000340)={0x67446698, 0x0, 0x1, 0x2, 0x4, "8bb596bef6afcfa5ff5c713c0b342f411a487708d711b4fa7249f32489c8c3dbf7eb66e8d85936bd492831051fdb10130061c813f2a482215f470404ca16f9a9d64929b5b30a14afd2a34be454991e1f4632361bfa81ae04a0c32286fffe0109fba7ade2bb675035baf8817e821e43a340342c032caadffc90d0065c6ec1a21ce251db518b155bb83e3e3c178fa5654e678fbd5e693450e80de9096b114aeb3e7c82d5dcecedceda7f588948d4ee0e438fc9b66e13232056a02c315791c15f52ee81043c792d0921e91ee86b6b07898c3f421ff4b07e10c8c645244b6f9090cdc54671deac839de2059fc795b84269f1ae"}, 0x101) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x18, r6, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000b00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xa0124600}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000b40)={0x3f8, 0xa, 0xa, 0x8f8207e91649817a, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_DESC={0x39c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_CONCAT={0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf5f9}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x649}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb6a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xae7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8e95}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbbe}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_CONCAT={0x118, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x354}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6d27}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x318a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa66}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xddbd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa70}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6c45}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}]}, @NFTA_SET_DESC_CONCAT={0x44, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x99ee}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_CONCAT={0xec, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x45}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3fb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffa37}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1b}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffc0000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81eabba}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}]}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x94}, 0x200488c0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r6, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x12}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x200008c4}, 0x40804) r8 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x64, &(0x7f0000000000), 0x10) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00120002000a0006005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x208080, 0x4) 1m0.672415906s ago: executing program 2 (id=961): r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x24040050) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0x6, 'wg0\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt(r1, 0x0, 0x483, &(0x7f0000000300)="060000007f00000100150000000000006d6800"/44, 0x2c) setsockopt(r1, 0x0, 0x488, &(0x7f0000000500)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) setsockopt(r1, 0x0, 0x484, &(0x7f0000000600)="060000007f00000100150000000000006d6800"/33, 0x21) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(r2, 0x0, 0x0, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, 0x0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x10000, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet_opts(r6, 0x0, 0xd, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000600)={0x2004}) r7 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) 1m0.399697508s ago: executing program 2 (id=966): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040600000100000001000000000000001800000002000004080000171300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000240)={r1, &(0x7f0000000100)='*\\@)*!-\\\x00', 0x500, &(0x7f0000000140)={@align, {0xc8, 0x0, 0x401, 0x6}}, 0xaba, &(0x7f0000000180), &(0x7f00000001c0)=0x24}) 1m0.335298096s ago: executing program 2 (id=967): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x3, &(0x7f0000000000)=0xb8, 0x4) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000020007116b6197b5090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001400)=@raw={'raw\x00', 0x3c1, 0x3, 0x1398, 0x0, 0xc8, 0x8, 0x11b8, 0x5803, 0x12c8, 0x2e8, 0x2e8, 0x12c8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11b8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfd8f80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x3, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x13f8) sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, 0x0}}], 0x1, 0x40015) listen(r0, 0x0) (async) accept4(0xffffffffffffffff, &(0x7f0000000800)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x0, 0x800) 1m0.165494989s ago: executing program 2 (id=968): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x6, 0xfd}, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x2) write$rfkill(r0, &(0x7f0000000340)={0x5, 0x1, 0x3, 0x0, 0xff}, 0x8) write$rfkill(r0, &(0x7f0000000280)={0x3, 0x4, 0x1, 0x0, 0x1}, 0x8) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x6, 0x7fff, @vifc_lcl_addr=@empty, @multicast1}, 0x10) 59.540575372s ago: executing program 2 (id=975): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x290002, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f00000000c0)=0x6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) 59.32064395s ago: executing program 2 (id=978): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0], 0x48) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6000000000102b00fc020000000000000000000000000000fe8000000f00000000000000000000aa67000000000000002110000000089078"], 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, &(0x7f00000000c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x71, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="f5ff00d695b2ebc7faa2807300000010000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="18120000", @ANYRES32=r6, @ANYBLOB="0000112b000000000000000008000000bfa400000000000007040000fa0000009500000000004abefa71a1d44e99b281d5ea7974860000d17846e73fa424a7a52560c5187113f953e7625eb065d5006115b1e62ac69f5225134dc20fbf9e"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="1800000027000100fdff0700001000000400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r7, r6}, 0xc) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYRES64=r2, @ANYRES32=r9, @ANYRES16=r3], &(0x7f0000000140)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000180)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r10, 0x86dd, 0xe, 0x0, &(0x7f00000001c0)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010429bd70000101000000000000", @ANYRES32=r12, @ANYBLOB="03860000006000000400140008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r13], 0x34}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 43.409733407s ago: executing program 34 (id=978): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0], 0x48) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6000000000102b00fc020000000000000000000000000000fe8000000f00000000000000000000aa67000000000000002110000000089078"], 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, &(0x7f00000000c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x71, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="f5ff00d695b2ebc7faa2807300000010000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="18120000", @ANYRES32=r6, @ANYBLOB="0000112b000000000000000008000000bfa400000000000007040000fa0000009500000000004abefa71a1d44e99b281d5ea7974860000d17846e73fa424a7a52560c5187113f953e7625eb065d5006115b1e62ac69f5225134dc20fbf9e"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="1800000027000100fdff0700001000000400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r7, r6}, 0xc) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYRES64=r2, @ANYRES32=r9, @ANYRES16=r3], &(0x7f0000000140)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000180)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r10, 0x86dd, 0xe, 0x0, &(0x7f00000001c0)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010429bd70000101000000000000", @ANYRES32=r12, @ANYBLOB="03860000006000000400140008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r13], 0x34}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 13.921119863s ago: executing program 6 (id=1305): r0 = socket$netlink(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r2 = socket(0x8, 0x4, 0x3) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) r3 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="18460000ffffffff00000000000000009500000000003fd605a002000101000018110000ae88ec057343ad6e45474ce26aa9f2295dfc6a2fdfd61f8c6371093e9dec117ae7dc9f443d", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xe, 0x6, 0x2}, 0x10, 0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000380)=[{0x5, 0x4, 0x7, 0xc}, {0x5, 0x5, 0x5, 0xa}, {0x1, 0x5, 0x3, 0x1}, {0x0, 0x2, 0x4, 0x9}, {0x2, 0x4, 0x2, 0x5}], 0x10, 0x3ff}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000240)=0x8, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r4, &(0x7f0000000300)="3bf1298858e7fb5b0e", 0x9, 0x4010, 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x102, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newlink={0x30, 0x10, 0x801, 0x70bd2a, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2082e, 0x8}, [@IFLA_NET_NS_FD={0x8, 0x1c, r1}, @IFLA_GROUP={0x8, 0x1b, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048050}, 0x20040090) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000040)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) preadv(r7, &(0x7f0000000500)=[{&(0x7f0000000200)=""/41, 0x29}], 0x1, 0xfff, 0x7) sendmsg$rds(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x40080}, 0x0) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r8) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="144c5729", @ANYRES16=r10, @ANYBLOB="04002dbd7000fcdbdf256a00000008000300", @ANYRES32=r9, @ANYBLOB="0c009900000000003d0000000500d2000a0000000a00060008021100000100000a000600ffffffffffff00000500d2000a0000000500d200090000000a000600ffffffffffff0000"], 0x64}, 0x1, 0x0, 0x0, 0x10048800}, 0x4000040) 10.677203666s ago: executing program 6 (id=1316): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x1000, @local, 0x8}, 0x1c) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x7, 0x8, 0x1, 0x80, 0xe, 0x4, 0xc7a, 0x7}, &(0x7f00000001c0)=0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r3, &(0x7f0000000000), 0x0}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000100), &(0x7f0000000040)}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r0, r4}, 0xc) 10.30772236s ago: executing program 6 (id=1320): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f00000004c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x4010, r1, 0xab6f3000) sendmsg$NFT_BATCH(r1, &(0x7f0000007040)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000007000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWFLOWTABLE={0x1d4, 0x16, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8000}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x198, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7e}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'bridge0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x48, 0x12, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x4}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_DATA={0x34, 0x4, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x3ff}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xf}]}}, @NFT_MSG_NEWSET={0x520, 0x9, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}, @NFTA_SET_DESC={0x24, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8e}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x498, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_CONCAT={0x3c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x72}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}]}, @NFTA_SET_DESC_CONCAT={0x9c, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x76}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffc00}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_DESC_CONCAT={0x19c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x53}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4e3d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x60000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1c00}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb7e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xef8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_CONCAT={0x118, 0x2, 0x0, 0x1, [{0x4}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe6e9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1119}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_CONCAT={0xe8, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8ae}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x280}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x63}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}]}, @NFT_MSG_DELRULE={0x70, 0x8, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x6454, 0xc, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x600, 0x3, 0x0, 0x1, [{0x11c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x10c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x869abf9e34d6f2e2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x7a, 0x1, "f717bdbfd6a4acdd4a8e9151b9db8610211c22bbb9e21a019d2024887193b9e1878b501a75a4b7823e8db2f9c1d2c5dd732c9332fc144e4626d14707535410f1704bc8d6d50d9e34bfd9570b3196b9de14c906ba0cc5fe857f410f9b85b28a1aae21ab4b75511064f06351131fce035535362489ed81"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}]}, {0x4a0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x104, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb7, 0x1, "ecf5392d6ae801b8e0a58946b9c0317af492af00d83319b4addd88d9faae802456616b702300076715b82ab830e4f7f4e09d46b5b949984032f1772174fbe09b25401129f6488272252d40839282d1d3ddb2c2274a6b38f8a7d6ceca299403a1872366b9aacee335db5cc15d8971a7e27aeece14f3b536779b697313f63d7d5a20c7d72083e5303f2c6f0766cef792d46d84e4e042598ee32cf1bc4a95783ab26dd9c14358e75cb2afc315e1a63c2b9944b368"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0xbd, 0x6, 0x1, 0x0, "6aaca72115befe4f0bf3678044a56011935d5d6ee9c187f5d2c1af1a3140310b3874f55544a138ea147a0bd48a4ecfcf7798c62157e96bb2986bb18e6235d486a9711e421299de25417d036796e3c69eb24f8887e454aeb72369c5b6839f03da4d032c0e0809a2fee0a8bd98050a2c7ddf3f488e6db47c4d87eb61c70c1dca44ea6c7e666efddaad843e7b836cb4b74a0281538652b8f64853c65d20d85b6453def17a9f6f2668104878e14dc64876184e58361819d236b090"}, @NFTA_SET_ELEM_KEY={0x1e4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x8d, 0x1, "321140fa2082cb10d8f65f4ae589181c4839beef28d7da0cae520d55c48efd00a6d530170c0796c2cc1f51ebb6747ef6235c330fe54b73b1da5e3f265d64187aafbf0d7414d04b9fe4cb4cb9592040ca96b29ddb78cb1ef458522404aebd500ed9c2f0bf68253ba4e0a752fbf30e51e396210bc65312851b83d8ffcb1c378940c4fa37fedc2af73178"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xde, 0x1, "573dbc5c6b97ed023f50f6826da705b7d059bbecba10f9a3b617a7a0ee52cef8395c1e92f4c974f9cad5f977e536cce5492ff3b50d267b295cb39717fc36da710ce4ef4e6cdcd1f8271a4df52ef70e1a681424b87b23240426d03505857fae2d4e4a390e22c83f981f4e4cb7a3cd0547dadedc8949672d42cb774bb523cd8a8f98bd7e7eb2b8a2a3cce5cacc0c4f9f956402735061bb6db643647ba6984c8edd7262b26bea41b139690397b751b1edc5493470edb9b305d22db30fb90bbe6bb7b315881da82586b701c4c306474cc1bbc2a7ab243aea20cfb24f"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_KEY={0xf4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x98, 0x1, "ce10b30abd2ab1bafef1592549921f710643fff6946367b33941dd2759a7e23b9db3c66b466cdd5e05f4960010d9bce6b8007d9c460cd7a28fc860712d0774ae818741d05d5bbc60bda289ff7bcf47f3365d56ca9539cd65f9f33ab925ee39b6e520fa06deed83c4ed7e7cf30b10cf1d0dfdc536749895ce56fd318fafaeccb3f6ab27e309b8e49a69685645c772210b476b15f5"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, {0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @queue={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x9}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xb}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x3}]}}}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5538, 0x3, 0x0, 0x1, [{0x1314, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1104, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xfc, 0x1, "2b8e2409c476207603ad81449afc14fe96c5c224d31fa870e1c428a795b070eecf978b7690edcbc0edc039b1a0fb797b34bc4dab8703a5d0c950442023766f1ba63b8064680f133883e2f3680aee6075fe1e8b944340c402ee299a431bcdb74b36b021c22ca586c73c640b7726daa4dc92029dd059cc98e605f60cd1b60496a48b04371c46104622bed71c785f3150de2e2d79688137f6be19f0dc809c468a748067341ecbf42e738d736c21c9c411df2577494a8eff829b71080cf2af6e63951a2e0ef1abad32df76e656ad91b688e1300b9d4a26b174184613a6084bd24e5801696197f72d9041ec3f25b2a42bf77556abb5c031f807a6"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x74, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0xb, 0x1, 'nfacct\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_SET_ELEM_KEY_END={0x198, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x80000000}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xdd, 0x1, "dd115ad272218e830c6e916148ff4b946b40690e21baf2ca2ed4b2a1469c30e7c4f2231c83366b72d99fdbf20bb3cc7b64de8ba3ccd19201b91b85b632a52952cacd27cc0e73b61f81fbc7c10d6a11b4d7fdc6020e5c2886a76929002dcb928b3f9b60bbbc8ba6ab67b83996492e97c129565ac1ec3141340571ce44e0746dbc33e386c0217d9fd7af8fd4f16d27177652f2901003b91b44cc692ce61e95fe7d7dbf5238fd0ee4cdc33ac1d2789128bdea04d13c869cfa0c404b04fae28474ba980802966dcf5ee670e02d9ebed5f40c9e6d7a6a578858e014"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}, {0x1f8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffffffffff00}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_KEY={0x1c4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xe7, 0x1, "f7dda7e3407b304a9edfbc16b62cb7f9b76c6b7fb7ba746b7db058fc0a3775475fd8f64b876bbe8800a436a9a7dfddc6674753ff43f85e6139744fea8aaf1e583eec2d264253d96ea6c7027038d79eef49e4ae574b29fbbdd8ebc4fe9ebb6d605c77ff106994ef20be9e14f762c02141caf08e0fbc1ef5564af93374681fb638fbdf9547ef4a9d3daf1121beb25ac871840e1ff18b28c36dec1704051b03a824cc701c98c74150741859687b28712a7394e5370cd68615e13a2f5bfb9f7bdfd07ba32135ca5e458db985dcf80196c717d7bbc0a72cad2012f358d49934e52c50be1e7d"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}, {0x13cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x11f8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc9, 0x1, "dbabb4aa35b809a5688d9b8737a63f82d08d33f45f4b30147ce78277ffd3049f192e1c9975cf69ddc1cfa2dece4166130ebf7fbbbcc5b95784ae9a34eeb362ff161381500be19bab03136a464e9b6158d2cc220d0bbe34a0a2aa7446e5aa94f3fb69c5aa99635fe1182417cda87a612ca64e207c1f158fd5dac21dcad0b881389d36c0970889f757a4f99bc8205249acd657547eb69b33ab7f2ea4b50f21058d5cf03dd59c0503b2c719cdcbbbc74d2968d8fa6563935071dd4ffb9fc54d2f38eb2c07d96c"}, @NFTA_DATA_VALUE={0x6f, 0x1, "c58576b3d7a85b94bf7950d4af5312567e8db9c9a095e667f631a4f5d0f11098b4f3b8f4312bc85bf862af7452ff834a5929a86bac5d990059f6b06f58724508e6eed11f33197cbcd868f7313903cc693c799294692ae67492659b5b6f6991f53de1942fe67c4255860e0c"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_DATA={0x78, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x37, 0x1, "d4232b23f87cf117d12d9f5cc49ae809b8afa883700b6fa2add642f9be38d3541a525c640fdf7b9f61176e125933795d028e38"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x8c, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}, {0x38, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY={0xc8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xb2, 0x1, "8bc896180b60e81d1008954aec3fc3860c6dc9ef5a7cc57a41bb7f841ee315eacf751afd4bdc9bc94aacb3cd9459ec68765222d3a7a3f80536c2d5f66e84f3a74866d9ccbaef7dfac0765b732083633770455fd9a6b2d36ee7e3c7fa9e438fdc35b5c05130a8b8c4411d04e802b777c80f9f11a33f1f9fc829c8a67d825f488b55fb7491c7e1ed2c9e524d6f10d421377f9fe1ae03036d08433cf89cf800c4495f814463db346c205ee42b0c1866"}]}]}, {0x1860, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x11ac, 0xb, 0x0, 0x1, [{0x10f0, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x10e0, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0xba, 0x3, "899e7a077fb0fdf57ef664879f4ddfff686a42c047a3d095b4a0761cf88e34619f2c7663211ecb033104523b0f81c1ceef6bec8d229ec7581ead50d2ad7a606f88b97edf539f0670eca8eb3e8b6de9ed159d3d8111e1e477cd8cf24ec06f40f1fae75356f69a5669a7e0094d068b1c1a2a886e11c324c2479a580d4ee98efcac87873bafead140bd131981522fc6d599c0002161874609a7cebf123b4f4524e71975b3f84def43c0af0a498298a73cf42b36f3cb35f4"}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x1004, 0x3, "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"}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", ""]}}}, {0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xc4}, @NFTA_BYTEORDER_OP={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x44, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x4}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x39}, @NFTA_REJECT_ICMP_CODE={0x5}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x2}]}}}, {0x2c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}]}}}]}, @NFTA_SET_ELEM_KEY={0x9c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x114, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xca, 0x1, "24f2e1778e8705d74350fc67546aaab45b8597f540750fbfd12027ffc338288cc869611ffd9112bc11b23dd73820305a99bd4a973a3e2a8ed4e87dee98c500c6dc641fe5443825833d0caeba4021b97a5764eb6b4ccb767fdaa11be59d57b146e4ec2436d21b610367968002a16f2523e91792d830ea1e48635f98e66dd82cda7e3862461baba4eac281a1785e1bbd019ed89399b50efb64674e666dda5793ca5533e1ca77996eede5de60635f1edf691a67ab78bbd619868ce47599850c9c4f39895b27765a"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x184, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x12c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x11c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_XOR={0xb4, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0xae, 0x1, "077939d50a3e1c3645907da7ea03f1a4e43b7e1c885ecf5194c0d859a62ae2bf7d6faa81f9b7e33b80ac68ec96d74fa70e253cfed248acaa9e08206d8a420fb98aca98f220a4a4e5d1a9c669f9939724bddb938290dc976575b478cfb78abb64f5d33882945462f65e048b2f5415afcc6686aaeaa936dca30d766f2b74dfa5c9bf7f940add6ddd91666f3a49d31f04ae47e295deb625338ac3ae1d3fb51b10cdbabd857ce8f94dbb0241"}]}, @NFTA_BITWISE_MASK={0x64, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}}}, {0x28, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0xf5, 0x6, 0x1, 0x0, "95e707d280f2794b24296b97c5191778861d32577425a9bb0a96db7d9ddb835b3e5ad8a45f5db36e36e4af9a47c2a6fbbaaa7a5704a2d1af98b83c4806e8bd10a6c6ee1f1b699f8f6ba36cdd4e468120bf6d8a0db1795c731e0692802fb3fef6abff2506fb754363de682cfced518979534cbea545c38dc931d534058e11ccdcd729b21ae637f852aa6650adf0ebc545dada8c6c762055506da94f7ce9e5453feb926fdb6cb504ab40055a75da1ba28654b016bba1dd4bfba84a380fd1ccc9da8624e1407c3314d6559545370580b6835658ef471461613b25f485d187ef65e618858dd25ebe1dc332683ddb51fa9e1214"}, @NFTA_SET_ELEM_DATA={0xec, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x20}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x13c, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}]}}}, {0x5c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x58}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x7f}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x6e}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x9}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xf5}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x74, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x63218aaa}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xcf}, @NFTA_LAST_MSECS={0xc}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffa}, @NFTA_LAST_MSECS={0xc}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffd}]}}}]}]}, {0x114, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xd8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2e, 0x1, "f382eb9a7635fc368a457c4c05110142e6a2450f68dfaf132e83313ba11f6c57feb4211a77c9cd3fb974"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x55, 0x1, "dca294c8ad72a536678daf24d7e68ab2dde9f0199f2c7c8d51cbaa2a5f201ba4c5c1d1d72e288c8fb7c438a317314fffd2861ce39a94781b0c75038307802e2b6a5b6f195a2d1af912d5dcb90176cce625"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_USERDATA={0x37, 0x6, 0x1, 0x0, "fd8de069bfc09a7d6f1d3889af2a63bda67f38c82a31c61c8495895ff3576ad3b89786f5c03352435e668f7d964af7c2d02f05"}]}, {0x12e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x9c, 0x6, 0x1, 0x0, "bec07fadd9e5542120f11b497f5cd6289abc391531484d5050263b9ba1ddbb96de334a976423787fca87b6f443bff63259627121cef6857f9e89d0918bbc477f7aca29bc60794de7938cbae3e16b4bdaeb2e3bd1613fd743cdc1b9158e3649b46093f7ae6210701947d3c442c9c3a99fb76ad6e1d207ab064a2925f1e08a6be2b87ba57e4850aa8bc4d1f35cce4c7b15c9c62f21ad341421"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x218, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xb4, 0x1, "546bfd40292a2e971ce8d845c0bef1e285ea0ce9208b532a1485d84a5a9271de4f266f87694cb9685c72b982303b1d2145f6944e9b23ad0b50ff5a862ac9ff6abff89cdeda36f86594a04be6930a005453e911ab016a071a36740aba8558b52d478bd81f1aafbe512009730b2fd866ccf8c9d3f6e468b66c4f8584d16e26fffd2db5bfc1088e16fb6a65fdecf07a4a3bafa668832211dc28c5aef2b0419febcbb1b66b4828b7780208ae0483b02125bf"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xd8, 0x1, "d915fdb4dd6036eade7df88cf7ee62d2af4d37d71847dad47c196228f6958fd63295b303b5b6028b397d41689a3e287269d23fa0a7a118fc54169b7389fbfeb7f7f94f2ee77860ddcd1bde33665a2fa86e2d1784fb64b58f7cd8ff5ba20add89a5c44e2093e18101564518b888da7058cf9027ac94de02ca899f490bbf0e9a7d88d41b0e31617e69d0e54c45b7c8c2693fc9cb8d6987c442fe7fd56d9c240a4395961943981699a98b3063442e7dd898f423f783e08749c07c588c1ebbeb6e3d3c37df266e0bebd822a53168467a490e47684495"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x1008, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8f0, 0x3, 0x0, 0x1, [{0x464, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xb6, 0x6, 0x1, 0x0, "8990e8601b052c495ddf380ffdfd03323e5ab4017eefa835d5776fe8a0760cef0d7e7e6c4c7baab65d6d5e511b6164155cea15752afeb3a5c40aa8117eb8c90ed5ffd5cae10e6a8394d6ebb691cddfcf4207725ed1985a2483a2058906f534fb859ad5cb4dfc5e9c637e75e1c513e8702f0f860e6319fab87ae1306a2be1a51a1f3a4745be9628c2b84ea242c6143acb7b7916521feb423f82ccc01a3a9d849da7daa096f5a3e9ba80317a054ad31e3329ac"}, @NFTA_SET_ELEM_KEY_END={0x308, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x55, 0x1, "0c43e804c07af1fbe623c89d8d57013e63f164e792e5f3b433f56390ccf89ef5daff290af1170e30d4b4cd3e1119aa137dbec86258b9cc656605cca5966add95e55bb99780a6b931c76689efbf76e536de"}, @NFTA_DATA_VALUE={0x87, 0x1, "e80e99b02cce6c63f99ebd54e1ecfa6d7a382e007c5918803a567c16177845df7c64500e8e560277e6fbe7db6d01a710ec3636487dbb82e2c4986f06856bd75277a6c6fbd6e6d44e4437b929b4794e9c5e378226c1b492118ba5160f792ecb01cf3b80848ef3c1e3f812965028c31523aabf5534a9ff0f2076901f993e0a627f0203c9"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x20, 0x1, "b3a59a18ff666e72738c58bedd83e9841fd3bd4273b1e7f53617611a"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x66, 0x1, "9af4683bd7c1cc281f44b3865334b62de6b8a9515fb671cff689098174458d1b693c49803b87fb2f45502e42492df7b53d1fff3820e953e84ec319c9870fd8624cdf6255cde5d876d2fcd78a7646e77285f2819be077e4fb9b8283373f349e19dee3"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFTA_DATA_VALUE={0xb5, 0x1, "26483863e1cd3af4f8371447b5409deac5078881d598613fd0af27ea27e7e2a5ba306c101ae725421712f7c53af4fa89eb4189ed2149e5d579dc2e9796ff232e0c00ca8e9721cee7d11705c77276681478c22eb657f521c82ed5148b7de287ab0ec585422744c1b69071901db20da098e5f222b32c52388c12e354591e9762fcd623cf77989332c1ff3abe1edd76d488ee9b94833d5244a716a3285432e27f5f33cae777c460fd8a5d056148b9aed04a16"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8000000000000001}, @NFTA_SET_ELEM_KEY_END={0x2c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x25, 0x1, "50b81e0638998dad0e284d4eaecde4e0b3d0a97e23f45dae07667af94a62e23da4"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x101}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x100000000}, @NFTA_SET_ELEM_KEY_END={0x48, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x42, 0x1, "c95a8c3e62c4e8ba38034046212fa97a186fec20d36605dbd777720aece1d5b037a06f25adba73e5c7f4ee766fe3e9ddc8898f43a4b893f687c506cb319d"}]}]}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}, {0x460, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x34, 0x6, 0x1, 0x0, "5e5519c75440b77e6d588406d56f637c8d541c7cb7e1d3f801918e5ecabe06fdafa4db7627a492f0362610b233cccadf"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x38}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @flow_offload={{0x11}, @void}}, @NFTA_SET_ELEM_EXPR={0x50, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, @NFTA_SET_ELEM_KEY={0x1a0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x6c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8feb1987354ea07e}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x92eea671aea7766f}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xd7, 0x1, "1e24a015f1d395b770279405c5ad7af4f892710ab4f3108590af4d1418aeb7b984865e4050eb3c5a9df6354b4df210a25bbea6e6f72b0dcbe0cc61c2dc30396ef7df267bb71b752f6c0cd78e18e62ee2f807f1e0ffffd548c77a28c703a522ea5744f3cb31a639d52f0251ebebf8b00a0ac7aa55953fc6e6ab43e0c60e4c8f29e11b4d7cbf3978e473b9427f38856adb977e86c52c1ee930054658f97a94c33a44d6b53f09ab9063a7b584ad63fded8bd91ea031a3e0a4be27a3f375ba2edba51b03a485404b924f819d2229d9f7f5d55dcf3e"}]}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @synproxy={{0xd}, @void}}, @NFTA_SET_ELEM_DATA={0x200, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x9f, 0x1, "127b185ea7436f267cf0e24b86859fa2cca0ecade183f62eb927d56fef95ed89cc83ea587420c62631abf15989b0dfa3767875c08135031bc712e1ed8d2c5b5bff26dc6d3a6d209885416f7933d44548ca5c3c5ae07ec0855ca8496b5239210c35baf0dc6a28b2308555c677ff1c01f6ce8e13c65942996075a007b7486dc49c5a89863a2d5ed8d7031a31feb57140b666f23d9226a73dcd53ac27"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x7e, 0x1, "d19342e75e56356f2688208a92a9dbbf03be3ae19687c01b9944905c6305d95c69545c4512df42fa405e6257b19bcb0b5f81924a2058d8b24b35e7ddf53b92b4f27acf2a885cd2dc5de848f894184ec50b6f746a55b06dc77ae10c701cf8891cb8533dbf0d6fca6ffc4575c42b311dfa5944be04026a3cdf5a25"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x20, 0x1, "b9a25e59438318334483b39f7296670f8ccfcb4ce2286aa4e23e4586"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x4c, 0x0, 0xa, 0x102, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @fwd={{0x8}, @void}}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x401}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x95a}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6cf4}, 0x1, 0x0, 0x0, 0x1}, 0x8080) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x26000050}, 0x40000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000000)={r0, r2}) 10.067893832s ago: executing program 6 (id=1322): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x24}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000c0000000400000001000004010000000a0000000300000000000000000000000000000105000000200000020000000000000003000000000200000002000000000000000061002e2e61610061005f"], 0x0, 0x64, 0x0, 0x1}, 0x28) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) setsockopt$inet6_buf(r3, 0x29, 0xcd, &(0x7f0000000000)="c4e9ac6073ba46e2b47c2b6915b9d1f241f789a5d9c53f88f8f291d1df5dae2e9d76874466fa6a7cc0ccaf5255f81e4a", 0x30) 9.777557441s ago: executing program 6 (id=1326): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x20, 0x12, 0xa01, 0xfffffffe, 0x0, {0xe}, [@nested={0xc, 0x8e, 0x0, 0x1, [@typed={0x8, 0xa8, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2010000}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x12, 0x0, 0x6, 0x9, 0xfffffffe}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x32752275d7d1e3ca, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdbd67c12945"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0c0001800800010003000100200001"], 0x44}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x12, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x45, '\x00', r6, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb23}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x58}}, 0x8000) sendmmsg$inet6(r8, &(0x7f0000001a80)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0xf657}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r8, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) 9.172693736s ago: executing program 6 (id=1329): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x34, 0x2, 0x6, 0x301, 0x0, 0x0, {0x4, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xd}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$inet6(r1, 0x0, 0x922bac8572bdcd0f) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x88d0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000027000100000000ddfcdbdf250c0000001c00018017000200636c69214bcc51b1"], 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)={0x20, 0x1, 0x3, 0x5, 0x0, 0x0, {0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x1ff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x4004840) 6.119721032s ago: executing program 5 (id=1373): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x1, 0x1, 0x1}, 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x1, 0x1, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000200000092070000ff00000008080000", @ANYRES32=0x1, @ANYBLOB="07080000000000000000000000000000003fae0047d572e5205f6755e46d4adb62a7599e398e999c47b4761f4a16f92b91f6b9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000005000000050000000a00"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)="1a47686c1adbc53a4a95334d00002000000000009b2171b3fa24e3ff21472d3490c65f10c70b231acfd74d91edbd365baf1b7eddf0", &(0x7f0000000200)="4917d3fdef1c0de3684d806345cad9248d03f447a41a501c16bddc4474c4af72830e5d7d98c3477ca84e20be0400844dccfdfeadf3304cf927c7c589dd7345baa82597570329f20c4e5721464dc982acdcf234a588758c82e5152b7e4e81e87a75e4e563f17c22bde008e229227b666dde5a93d717f4213321f9f5573ecc5e75c919688b33ef19a59e906fea6e1d3e749187dbb3b82138d82498349ba5bceb2721", 0xcff5, r0}, 0x38) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x809000, 0x1000, 0x0, 0x3}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1}, &(0x7f0000000140), &(0x7f00000002c0)=r1}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000003c0)=r1, 0x4) 5.923610773s ago: executing program 5 (id=1377): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, r3, 0x19, 0x0, @val=@uprobe_multi={0x0, &(0x7f00000001c0), 0x0, 0x9f1e}}, 0x40) 5.817308097s ago: executing program 7 (id=1378): mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x810, 0xffffffffffffffff, 0x2000) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) (async) readv(r1, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x730) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) (async) read(r0, 0x0, 0xff40) (async) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) write$ppp(r0, &(0x7f0000000040)="8fe8", 0x2) 5.751186266s ago: executing program 4 (id=1379): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)='%pB \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000040)=@raw=[@map_idx={0x18, 0x4}, @exit, @alu={0x4, 0x0, 0x5, 0x6, 0xa, 0xc, 0x4}], &(0x7f0000000300)='GPL\x00', 0x8, 0xf3, &(0x7f0000000340)=""/243, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[r0, r0], 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x40004}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x0, 0x9}, @generic={0x66, 0x0, 0x0, 0x0, 0xf1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x1001}, @exit, @printk={@x, {0x3, 0x3, 0x6}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0xa}, 0x94) 5.747278018s ago: executing program 5 (id=1380): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x4}, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=0xffffffffffffffff], 0x0, 0x3c}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, &(0x7f00000000c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x71, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)={0x20, 0x1405, 0x621, 0x70bd26, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}}, 0x0) recvmmsg(r5, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x140, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x8f}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x86dd, 0x26, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r9, 0x3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000100e1ff0000000000000000850000008a00000095", @ANYRES32=r2], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(r8, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x40) getsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000100)=0x4, &(0x7f0000000180)=0x4) 5.53926414s ago: executing program 4 (id=1381): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r0 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000480)="6797f04cdb6f2b8ff1c912acb0da67dc3bf442976fc916f5fe40c3a4bb8423c058dd95ffbb65d4a51d4b99564d9d6466da7ab0bd17e9281956c6ba7e10b7932de5be24106e3afc007cdf7620e0c61175af571e506a21f16330", 0x59}], 0x1}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb}, 0xffffffffffffff74) sendto$inet6(r1, &(0x7f00000002c0)="800043bb905d6a752dc7db3c4ef5adfa9ba1db", 0x13, 0x20000094, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000002000000dc2bbd7000fedbdf25020000000000000517000000080018004e244e24"], 0x24}, 0x1, 0x0, 0x0, 0x20004054}, 0x44004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)=ANY=[], 0x108}, 0x1, 0x0, 0x0, 0x49}, 0x8060) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet(r0, &(0x7f0000000580)={0x2, 0x4e23, @remote}, 0x10) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x1, 0x200, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)=@gettaction={0x60, 0x32, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x80000000}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa86dd6002adf700383a00fc000000800000000000000000000001ff02000065410000050000000000000102039078000000000000000000ffffac1414aa1e520b4c6e1ee12e000200"/96], 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000600)={@private0, 0x1000000, 0x0, 0x0, 0x6, 0x2, 0x9}, &(0x7f0000000640)=0x20) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000390400000000fbdbdf2500000000", @ANYRES32=r7, @ANYBLOB="11980400419804001c001280da0c01007866726d000000000c0002800800020004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb010018000000000000009b0000009b0000000c000000050000000500000f0200000002000000ff0f00000700000004000000030000000a000000040000001c0e00000100000004000000000000b49d2a6e5affb918b91af3d794b90000800000250000000000002000000100b9b6100005000000030000000f00000000000001000000005f001a000b00000000000009030000000f0000000200000f010000000100000093d50000ef0f000003000000020000001000000039000030612e5f5f612e005f2e00"], &(0x7f0000000540)=""/51, 0xc0, 0x33, 0x7f, 0x6, 0x10000, @value=r6}, 0x28) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r7, 0x20017}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)="82", 0x1}], 0x1}, 0x4) 5.538661486s ago: executing program 1 (id=1382): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1e, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe000000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x8, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x37000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x94) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffe, 0xd, @mcast1, 0x1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000001080)=ANY=[@ANYBLOB="01000000000000000a00000300000000ff01000000000000000000000000000100"/71], 0x110) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r8, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b00000000007c0f60e4319cc543ba12ff350a4d7cc08dc1c3db2577320b907f1285eb47"], 0x28}}, 0x0) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES16=r3, @ANYBLOB="0000000000000000b703000008000000850000000c000000b70000000000000095", @ANYRES32=r9, @ANYRES32=r0, @ANYRES32=r11], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r11}, &(0x7f0000000080), &(0x7f00000000c0)=r12}, 0x20) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r9, 0x1, 0xfffffffc, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x11) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 5.359639609s ago: executing program 7 (id=1383): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000800000000000000070000fc69117e000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet6_int(r1, 0x29, 0x2, 0x0, &(0x7f00000000c0)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20129, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x58}, 0x4000010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@enum64={0x6, 0x2, 0x0, 0x13, 0x0, 0x8, [{0x6, 0x8, 0x2b6}, {0x6, 0x7, 0x4c}]}]}, {0x0, [0x0, 0x30, 0x30, 0x0, 0x2e, 0x61]}}, 0x0, 0x44, 0x0, 0x4}, 0x28) write(r2, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) syz_emit_ethernet(0xf3, &(0x7f00000005c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @link_local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@llc={0x4, {@llc={0xfe, 0xfe, "4717", "cf5d8b826e0f8b3cca906552a92ee8519880f3aaa8d18493910235c59d3f0ce6d15671bfdd0f1c488c63ef5a755ba889f2e8878fbbff2be8f04b987aae762be981415a9bfff223cae0a93ff00c7af0c038aefb619d9c6cef6f6a05610c548ad48ad0cb333be3609c6ff57bf5a681ef7d6ec84b89cadc79a4bd8739f1f627a579630be2aacb8e1cf73ebc66db57ae594e6075b38cc690e8a4586150e58985eb5722afc5664be8b5b49586d61f2c14aded003a4ba31be6d5ba5be10e603bcf6d0af3508631f5fb39d3447f73c338d388980940150b20e6a8efecaafdbb1f"}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="31032bbd7000000000000900000008000300", @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0x26040001}, 0x0) 5.345321151s ago: executing program 4 (id=1384): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000000)=0x1000020, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1c, 0x8, &(0x7f0000000080)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xb}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f00000000c0)='GPL\x00', 0x3, 0x1000, &(0x7f0000000700)=""/4096, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000001700)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000001740)=[r0, r0, r0], &(0x7f0000001780)=[{0x1, 0x2, 0xf, 0x7}], 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x16, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcff1f00000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000181a0000", @ANYRES32=r0, @ANYBLOB="00000000000900005d9300000000bbe7d5fc060000b503eaffffff0000850000000c000000ce00fdff"], &(0x7f0000000140)='GPL\x00', 0x80a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.57584281s ago: executing program 5 (id=1385): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, r0, 0x0, 0x1, 0x1}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x0, '\x00', 0x0, r0}, 0x50) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000180)={0x18, 0x2, {0x3, @dev={0xac, 0x14, 0x14, 0x27}}}, 0x1e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r2}, @ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) 4.57539544s ago: executing program 1 (id=1386): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x98}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000340)={0x0, 0x0, 0x1, 0x6}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="05840000008000002c0012800b00010062726964676500001c000280080032000100000008000100140000400800050001"], 0x4c}, 0x1, 0x0, 0x0, 0x400c800}, 0x40) 4.568887206s ago: executing program 4 (id=1387): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000480)="4fa90806", 0x4, 0xd0, &(0x7f0000000080)={0x11, 0x8100, r2, 0x1, 0x81, 0x6, @local}, 0x14) (async, rerun: 64) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (rerun: 64) r3 = accept4(r0, 0x0, 0x0, 0x80800) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) bpf$MAP_CREATE(0x2000000000000020, 0x0, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000f82020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0xffffff32, &(0x7f0000000040)={&(0x7f0000001140)={0x178, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14c, 0x3, 0x0, 0x1, [{0x148, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x134, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7b, 0x1, "2c9a32b7bdfd3cc86dc8fd0b187ddc4b21fd81ca0bc1f4e07a0f0b7a68c685817e557d1e71a20a1f27474e36cfad22b264a28445adece658b1da0d8b2377cb8b8668b03bd8305aa5fc49b3a9047aec79d94a9de0b8972dad15759b27597c96c30ce27007551aa87383adb4ad2969c1d51bdc17032cc054"}, @NFTA_DATA_VALUE={0xb2, 0x1, "d9ff4d9206e1aedf6cdbd370dc8d1d58af764a9b0e232177dea53320d45c8590380add4a4454fa3a0785c0be7c636969bcf1fc5b6c23fed303eb412eb548bbe7020bdc68833483fabad5bd5ea0f9433a87bf8eb77a02011d6991b3dfa763eea8e83178128ad58af84537793eaac9349058ed88154d8a74a8844f34697ef6ddbba4bcfc620a33b926c555049dc8deb5e9e1a56eb5dde6ae701163342f06a6c1c06555e86889c4f58b281a791f8fb0"}]}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "007e561c92830000"}]}]}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xc508d153}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) (async, rerun: 32) r7 = socket(0x2, 0x80805, 0x0) (rerun: 32) getsockopt$bt_hci(r7, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 4.364916354s ago: executing program 7 (id=1388): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff028}, {0x6, 0x0, 0x4}]}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000180), &(0x7f0000000200)=0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x11, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}}, 0x20040084) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x11, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x2c, 0x28, 0x1, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xc9c8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4009c}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001940)={'tunl0\x00', &(0x7f0000001880)={'sit0\x00', 0x0, 0x10, 0x80, 0xffffff81, 0x3ff, {{0x1b, 0x4, 0x2, 0x7, 0x6c, 0x66, 0x0, 0x6, 0x29, 0x0, @remote, @multicast2, {[@end, @timestamp={0x44, 0x4, 0xbd, 0x0, 0x5}, @timestamp_prespec={0x44, 0xc, 0xac, 0x3, 0x9, [{@multicast1, 0xd}]}, @timestamp={0x44, 0x20, 0x61, 0x0, 0x7, [0x5, 0x3ff, 0x7fff, 0x1, 0x8000, 0x0, 0x5]}, @ssrr={0x89, 0x23, 0x87, [@multicast1, @multicast1, @rand_addr=0x64010102, @remote, @dev={0xac, 0x14, 0x14, 0xd}, @empty, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010101]}, @noop]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001f00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001980)={0x508, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x493}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2406d6b8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffbb}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2f4a1d61}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r5}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x508}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) socket$rds(0x15, 0x5, 0x0) (async) r6 = socket$rds(0x15, 0x5, 0x0) r7 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xffffffffffffffff, 0xa8, 0x3, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x2}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a00000002100010000000000feffffff00000000000000000000000000000000fe80000000000000000000000000001dfffc0000000100000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fe800000000000000000000000000011e0000002000000000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000bb3c000021c0ea463fe7703df4"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a00000002100010000000000feffffff00000000000000000000000000000000fe80000000000000000000000000001dfffc0000000100000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fe800000000000000000000000000011e0000002000000000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000bb3c000021c0ea463fe7703df4"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_proto_private(r9, 0x89e0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f00000000c0)={@pppoe={0x18, 0x0, {0x4, @local, 'veth0_macvtap\x00'}}, {&(0x7f0000000040)=""/38, 0x26}, &(0x7f0000000080)}, 0xa0) (async) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f00000000c0)={@pppoe={0x18, 0x0, {0x4, @local, 'veth0_macvtap\x00'}}, {&(0x7f0000000040)=""/38, 0x26}, &(0x7f0000000080)}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10}, 0x10}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r11}, &(0x7f00000003c0), &(0x7f0000000200)='%+9llu \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r11, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000200)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r12, 0xffffffffffffffff}, 0x4) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r13, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r14}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r14}, 0xc) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) getpeername(r10, &(0x7f0000000240)=@alg, &(0x7f00000002c0)=0x80) 4.162914909s ago: executing program 5 (id=1389): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async, rerun: 32) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x800000, 0x11, r0, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x64, 0x4, 0x2e8, 0x100000c, 0x208, 0x0, 0x2d8, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x0, 0x1000000000000}}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x40, 0x2, 0x7, 0x8, 0x9, 0x3, 0x8, 0x8]}}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x25}, 0xffffff00, 0xff, 'syz_tun\x00', 'bridge0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x4, 0x6, [0x1c, 0x2c, 0xb, 0x3c, 0x2e, 0x20, 0x24, 0x29, 0x36, 0xd, 0x1a, 0x2, 0x1f, 0xd, 0x80f, 0x21], 0x0, 0x4, 0x4}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0xff, 0xc72aaf435dc5921a, 0xffffffff], 0x4e23, 0x4e23, 0x4e23, 0x4e20, 0x3, 0x3, 0x2, 0x3, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f0000003c40), 0x4) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x20010, 0xffffffffffffffff, 0x23f6000) 4.019302909s ago: executing program 1 (id=1390): syz_80211_inject_frame(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_FLOW={0x8, 0x1f, 0x6}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x2c}}, 0x20000050) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000020000010000000900010073797a30000000002c000000030a05000000000000000000010000000900030073797a31000000000900010073797a300000000084000000060a010400000000000000000100000008000b40000000000900010073797a30000000005c00048040000180080001006e6174003400028008000540eb0000090800014000000001080002"], 0xf8}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xfd, &(0x7f0000000400)={&(0x7f0000000440)={0x30, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @nested={0x18, 0x9, 0x0, 0x1, [@typed={0x14, 0xae, 0x0, 0x0, @ipv6=@local}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x42804}, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_FLOW={0x8, 0x1f, 0x6}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x2c}}, 0x20000050) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000020000010000000900010073797a30000000002c000000030a05000000000000000000010000000900030073797a31000000000900010073797a300000000084000000060a010400000000000000000100000008000b40000000000900010073797a30000000005c00048040000180080001006e6174003400028008000540eb0000090800014000000001080002"], 0xf8}, 0x1, 0x0, 0x0, 0x814}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xfd, &(0x7f0000000400)={&(0x7f0000000440)={0x30, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @nested={0x18, 0x9, 0x0, 0x1, [@typed={0x14, 0xae, 0x0, 0x0, @ipv6=@local}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x42804}, 0x10) (async) 3.60645083s ago: executing program 7 (id=1391): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r1, 0x4, 0x8}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="700c9bc2d50a503b4e00003b94b592ab50a3bd8e153da549fdeea9615c9a513ca4e8bf99a39b77cbae8254dabf58f55301000270d3f64e8ced5c57140d1b0900000000f8f2ea00000100000000000000c86bcb8a7dd068419182df67cabbb0d909c15a5f75441796c609c4cdd90348f2e60938a063c613bd5f4978690e5b97cd4eb18cd72be345a30b7ea23fa9fc846d775e8f86b64f31a16410bf49182498a080019e0f8c6e2cb4c87d02c7733cb6305805166c5e3159016759fd4be270c74772f28e5e71b585c68b2468c348ea1a50c9b623eaf3bd56d21317f45189b7ce2465e78eed6e9f662da5cc6cf9", @ANYRES32=0x0, @ANYBLOB="03000000000000004800128009000100766c616e0000000038000280060001000200000004000380280003800c00010006000000090000000c000100250a00000c0000000c00010006000000ffff000008000500", @ANYRES32=r3, @ANYRES16=r2], 0x70}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r3, 0x25, 0x0, @val=@netfilter={0x1, 0x1, 0x1000000}}, 0x20) 3.441065258s ago: executing program 5 (id=1392): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) syz_emit_ethernet(0x3e, &(0x7f0000000480)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x8, 0x2c, 0xff, @empty, @mcast2, {[@hopopts={0x3b}]}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r3, &(0x7f0000008340)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2100, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x18) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000000f1401002bbd7000fedbdf250a706f696200000008000100ff0700000000000000000000186a9f34971d6af4e4ecba65eb8849ba35f7431e487767884424efdbdf931fb1e8a74cf1ca58e5aa68ad6a8ba79cb9a807e5f37cd1eeafc0073df348278b8ef8c56c24ee89284db0a1b64c007cf460567c2747c530e65a3a"], 0x2c}}, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@broadcast, @remote, @val={@void, {0x8100, 0x6, 0x1}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @initdev={0xfe, 0x88, '\x00', 0xf9, 0x0}, @link_local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}}}}}, &(0x7f00000001c0)={0x1, 0x4, [0x446, 0x420, 0xae7, 0xc87]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$packet(0x11, 0x2, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r9, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000002f00135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r6, 0x8b1b, &(0x7f0000000000)={'wlan1\x00'}) setsockopt$inet_buf(r2, 0x0, 0x29, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.363394858s ago: executing program 4 (id=1393): socket(0x10, 0x803, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) (async) shutdown(0xffffffffffffffff, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000880)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0xf, @private0={0xfc, 0x0, '\x00', 0x1}, 0x405}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000280)="b7", 0x1}], 0x1}}], 0x1, 0x20004801) shutdown(r1, 0x1) (async) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0xe0c, @empty, 0x1ff}}, 0xffff, 0xffc0}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'team_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r3, 0x25, 0x0, @void}, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001500)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x3, 0x1, 0x2}}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a310000000020000000000a03000000000000000000050000070900010073797a31000000001400000011000100"], 0xf8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a310000000020000000000a03000000000000000000050000070900010073797a31000000001400000011000100"], 0xf8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c000180060001"], 0x12c}, 0x1, 0x0, 0x0, 0x4008805}, 0x8000) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=r6, 0x2) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r8, &(0x7f0000006c80)=[{{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000001880)="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", 0x7c6}, {&(0x7f0000002880)="1d2a14209b2ce5a4558a11f5ddf93ac8ccea31cb7464525f4cc9722a5ffcbc246fbd62e115d95434cc7e02ba844312", 0x2f}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}], 0x2, 0x44000) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r7, 0x4) syz_emit_ethernet(0x1b, &(0x7f0000000300)={@local, @random="a538ae464632", @void, {@x25={0x805, {0x1, 0x8, 0xf7, "4fc54a7d45b7ef6ae296"}}}}, 0x0) (async) syz_emit_ethernet(0x1b, &(0x7f0000000300)={@local, @random="a538ae464632", @void, {@x25={0x805, {0x1, 0x8, 0xf7, "4fc54a7d45b7ef6ae296"}}}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) (async) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) 3.362754661s ago: executing program 7 (id=1394): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x4000004) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010027bd7000fcdbdf25080000000c00018008000300020000001c0002801800038014000180040003000c0002006465766c696e6b00"], 0x3c}, 0x1, 0x0, 0x0, 0x4040084}, 0x4040000) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r8, &(0x7f0000002080), 0xe) listen(r8, 0x30) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r10) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r13 = socket$nl_audit(0x10, 0x3, 0x9) socket(0x25, 0x800, 0x800) (async) ioctl$sock_SIOCETHTOOL(r13, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_coalesce={0x1, 0xf0, 0x67598305, 0x9, 0x6, 0x0, 0x2, 0x80000001, 0x5, 0xfff, 0x5, 0x1, 0x2000, 0x5, 0x9, 0xa8, 0x5, 0x0, 0xff, 0x452, 0x1000, 0xb, 0x5}}) (async, rerun: 32) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r12, {0x0, 0xfff3}, {0xffff, 0xb}, {0x4, 0xd}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x8, 0x9, 0x5}}}}]}, 0x44}}, 0x4894) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r7) 3.015076273s ago: executing program 1 (id=1395): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f0000000280)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x603ca0114ad58eb3) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x76c4c6c54d3d69c, {{0x1, 0x3}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000880}, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x3, 0x6, "bb7a4e", 0x4d, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {0x4e22, 0x4e22, 0x4d, 0x0, @opaque="64ebe114f6ff9df4140f23e2ade56a28ace6c0b8bec259e8e5f080d1c010f41f47c8d635763c513854126120383901cb1a9402e67ce9cafd6b9ed54721cd27bd55e1025c02"}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0xfc}}]}, 0x30}}, 0x20000000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff028}, {0x6, 0x0, 0x4}]}, 0x10) 2.736655069s ago: executing program 1 (id=1396): r0 = socket(0x2, 0x80805, 0x0) setsockopt(r0, 0x84, 0x7d, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r5) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010065bd6700ffdbdf250800000008000300", @ANYRES32=r7], 0x40}, 0x1, 0x0, 0x0, 0x24880}, 0x800) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa4, r3, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xc}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1bc, r1, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x401}, {0x6, 0x11, 0xbf75}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8112}, {0x6, 0x11, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xd4}, {0x6, 0x11, 0x80}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xf0e2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6a3a}, {0x6, 0x11, 0x5}}]}, 0x1bc}}, 0x1) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f00000006c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 83.849155ms ago: executing program 4 (id=1397): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f000000ae40)={0x0, 'ip6gre0\x00', {}, 0x6d}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xc, 0xb}, {0x1, 0xffe2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x10001, 0xd, 0x2, 0x6, 0x7, 0x3f5, 0x200, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r9) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 81.953698ms ago: executing program 1 (id=1398): r0 = socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44040}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff), &(0x7f0000000000)) mmap(&(0x7f0000492000/0xf000)=nil, 0xf000, 0x1000002, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000400c) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000008, 0x13, r0, 0x80000000) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x300) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000240)={0x0, 0x78, "4f60f559dfb09a27cad5abb81b9823aab394c9c31b51c37870634644bd7fa5e231be6fb8bfbc43a8f81fac03dc22f75f2c8bade794b55942deabc27be2166c776c9e21f4cbf2acba950101f92899c5049fb785db4193c9c8236ba014a8e07e10900da68d3d009ae820630de7c3c8175d78cdab87a9e956bd"}, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000f00)={0x0, "dc76c04e8d497742198e53723387e0bd"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001780), 0x0, 0x0) 0s ago: executing program 7 (id=1399): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448d4, &(0x7f0000000000)={0x4002, 0x200, '\x00\x00@', 0x0, 0x1}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r2, 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x2, 0x11, 0x6, 0x6, 0x16, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_spirange={0x2, 0x10, 0x4d6, 0x4d3}, @sadb_ident={0x2, 0xf, 0x1, 0x0, 0xf9}, @sadb_ident={0x2, 0xa, 0x8, 0x0, 0x9}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd26, 0x3504}, @sadb_sa={0x2, 0x1, 0x4d6, 0x9, 0x4, 0x33, 0x4, 0x60000001}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_lifetime={0x4, 0x2, 0x9, 0x13e5, 0x6, 0x7}, @sadb_address={0x5, 0x7, 0xff, 0x20, 0x0, @in6={0xa, 0x4e21, 0x800, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x51}}]}, 0xb0}}, 0x40) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003f000500010000000000000001010000000000000f0001006f76732d7302082121000000080002"], 0x30}}, 0x0) kernel console output (not intermixed with test programs): 32 bytes leftover after parsing attributes in process `syz.4.388'. [ 138.772351][ T7491] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 138.791581][ T7491] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 138.792560][ T7491] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 138.819547][ T7491] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 138.825861][ T7491] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 138.850899][ T7491] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 138.851932][ T7491] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 138.882990][ T7491] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 139.052706][ T7604] netlink: 'syz.2.393': attribute type 13 has an invalid length. [ 139.052730][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.393'. [ 139.090240][ T7491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.163813][ T7491] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.196247][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.196313][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.223941][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.224037][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.381970][ T7606] x_tables: duplicate underflow at hook 2 [ 139.695232][ T7611] net_ratelimit: 496 callbacks suppressed [ 139.695254][ T7611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.699514][ T5620] Bluetooth: hci5: command tx timeout [ 139.898759][ T7618] : option downdelay: invalid value (18446744073709547007) [ 139.898787][ T7618] : option downdelay: allowed values 0 - 2147483647 [ 139.900679][ T7618]  (unregistering): Released all slaves [ 140.013259][ T7627] netlink: 'syz.1.399': attribute type 9 has an invalid length. [ 140.136734][ T7627] netlink: 'syz.1.399': attribute type 1 has an invalid length. [ 140.232661][ T7627] bond3: entered promiscuous mode [ 140.232738][ T7627] bond3: entered allmulticast mode [ 140.233297][ T7627] 8021q: adding VLAN 0 to HW filter on device bond3 [ 140.329382][ T7491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.552697][ T7491] veth0_vlan: entered promiscuous mode [ 140.560225][ T7491] veth1_vlan: entered promiscuous mode [ 140.593430][ T7491] veth0_macvtap: entered promiscuous mode [ 140.598251][ T7491] veth1_macvtap: entered promiscuous mode [ 140.612463][ T7491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.616851][ T7491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.655104][ T6406] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.656611][ T34] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.724786][ T60] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.724828][ T60] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.797705][ T6406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.797729][ T6406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.862031][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.862055][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.972162][ T7652] netlink: 'syz.1.402': attribute type 21 has an invalid length. [ 140.972186][ T7652] netlink: 128 bytes leftover after parsing attributes in process `syz.1.402'. [ 140.972261][ T7652] netlink: 'syz.1.402': attribute type 4 has an invalid length. [ 140.972275][ T7652] netlink: 'syz.1.402': attribute type 5 has an invalid length. [ 140.972286][ T7652] netlink: 3 bytes leftover after parsing attributes in process `syz.1.402'. [ 140.977845][ T7652] netlink: 104 bytes leftover after parsing attributes in process `syz.1.402'. [ 141.332302][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.405'. [ 141.332339][ T7668] netlink: 'syz.5.405': attribute type 10 has an invalid length. [ 141.332354][ T7668] netlink: 'syz.5.405': attribute type 5 has an invalid length. [ 141.332366][ T7668] netlink: 4 bytes leftover after parsing attributes in process `syz.5.405'. [ 141.399206][ T7668] geneve2: entered promiscuous mode [ 141.399224][ T7668] geneve2: entered allmulticast mode [ 141.402477][ T7665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.404'. [ 141.560701][ T159] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 46223 - 0 [ 141.582225][ T34] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 46223 - 0 [ 141.605594][ T159] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 46223 - 0 [ 141.616081][ T159] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 46223 - 0 [ 141.774475][ T5620] Bluetooth: hci5: command tx timeout [ 141.851498][ T7683] netlink: 388 bytes leftover after parsing attributes in process `syz.1.409'. [ 141.967026][ T7684] netlink: 24 bytes leftover after parsing attributes in process `syz.1.409'. [ 141.975475][ T7683] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.109907][ T7683] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 142.109935][ T7683] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.225820][ T7683] veth1_vlan: left promiscuous mode [ 142.232861][ T7683] veth0_vlan: left promiscuous mode [ 142.248426][ T7683] veth0_vlan: entered promiscuous mode [ 142.251765][ T7683] veth1_vlan: entered promiscuous mode [ 142.274032][ T7683] veth1_macvtap: left promiscuous mode [ 142.282473][ T7683] veth0_macvtap: left promiscuous mode [ 142.290202][ T7683] veth0_macvtap: entered promiscuous mode [ 142.292505][ T7683] veth1_macvtap: entered promiscuous mode [ 142.321453][ T7683] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 142.333869][ T7683] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 142.343513][ T7683] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 142.353612][ T7683] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 142.368478][ T7683] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.372788][ T7683] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.445981][ T7683] bond3: left promiscuous mode [ 142.460156][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.460312][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.655779][ T7686] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 142.680246][ T7708] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 142.749365][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.750591][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.750631][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.750666][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.906515][ T7720] openvswitch: netlink: EtherType 200 is less than min 600 [ 143.225334][ T6406] IPVS: starting estimator thread 0... [ 143.334271][ T7740] IPVS: using max 26 ests per chain, 62400 per kthread [ 143.630943][ T7750] __nla_validate_parse: 3 callbacks suppressed [ 143.630967][ T7750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.427'. [ 143.630983][ T7750] netlink: 20 bytes leftover after parsing attributes in process `syz.2.427'. [ 143.814571][ T7757] netlink: 24 bytes leftover after parsing attributes in process `syz.4.429'. [ 143.892076][ T7757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.429'. [ 143.892488][ T7760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.429'. [ 143.939168][ T7766] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 144.626234][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 144.628437][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 144.630796][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 144.641988][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 144.642608][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 145.003856][ T7803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.443'. [ 145.091958][ T7816] netlink: 40 bytes leftover after parsing attributes in process `syz.5.440'. [ 145.378567][ T7826] openvswitch: netlink: IP tunnel dst address not specified [ 146.735519][ T53] Bluetooth: hci6: command tx timeout [ 146.791989][ T7876] netlink: 16 bytes leftover after parsing attributes in process `syz.5.456'. [ 146.796728][ T7882] netlink: 12 bytes leftover after parsing attributes in process `syz.5.456'. [ 146.821456][ T7880] syzkaller0: entered promiscuous mode [ 146.821480][ T7880] syzkaller0: entered allmulticast mode [ 146.843856][ T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.843880][ T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.052600][ T7887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.453'. [ 147.103478][ T7887] vlan4: entered promiscuous mode [ 147.103503][ T7887] erspan0: entered promiscuous mode [ 147.488626][ T7787] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.488753][ T7787] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.492117][ T7787] bridge_slave_0: entered allmulticast mode [ 147.502966][ T7787] bridge_slave_0: entered promiscuous mode [ 147.530844][ T7787] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.530984][ T7787] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.531165][ T7787] bridge_slave_1: entered allmulticast mode [ 147.537326][ T7787] bridge_slave_1: entered promiscuous mode [ 147.647182][ T7787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.667888][ T7787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.852837][ T7920] gtp0: entered promiscuous mode [ 147.852861][ T7920] gtp0: entered allmulticast mode [ 147.890083][ T7787] team0: Port device team_slave_0 added [ 147.918258][ T7787] team0: Port device team_slave_1 added [ 148.019968][ T7930] netlink: 'syz.1.468': attribute type 10 has an invalid length. [ 148.066609][ T7930] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 148.085622][ T7930] team0: Port device netdevsim1 added [ 148.132231][ T7787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.132251][ T7787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.132273][ T7787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.184830][ T7787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.184850][ T7787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.184876][ T7787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.321819][ T7938] netlink: 'syz.1.468': attribute type 10 has an invalid length. [ 148.432715][ T7953] netlink: 'syz.1.468': attribute type 10 has an invalid length. [ 148.501307][ T7951] netlink: 'syz.1.468': attribute type 10 has an invalid length. [ 148.552569][ T7938] team0: Port device netdevsim1 removed [ 148.603931][ T7953] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 148.645023][ T7953] team0: Port device netdevsim1 added [ 148.723056][ T7951] team0: Port device netdevsim1 removed [ 148.770744][ T7787] hsr_slave_0: entered promiscuous mode [ 148.772317][ T7787] hsr_slave_1: entered promiscuous mode [ 148.776291][ T7787] debugfs: 'hsr0' already exists in 'hsr' [ 148.776312][ T7787] Cannot create hsr debugfs directory [ 148.815168][ T53] Bluetooth: hci6: command 0x041b tx timeout [ 148.945055][ T7974] __nla_validate_parse: 4 callbacks suppressed [ 148.945077][ T7974] netlink: 8 bytes leftover after parsing attributes in process `syz.5.472'. [ 148.945089][ T7974] netlink: 224 bytes leftover after parsing attributes in process `syz.5.472'. [ 148.945114][ T7974] netlink: 8 bytes leftover after parsing attributes in process `syz.5.472'. [ 149.062357][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.471'. [ 149.062384][ T7978] netlink: 'syz.4.471': attribute type 1 has an invalid length. [ 149.082873][ T7962] syzkaller0: entered promiscuous mode [ 149.082897][ T7962] syzkaller0: entered allmulticast mode [ 149.113636][ T7978] netlink: 48 bytes leftover after parsing attributes in process `syz.4.471'. [ 149.690880][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.478'. [ 150.899359][ T5620] Bluetooth: hci6: command 0x041b tx timeout [ 151.361585][ T8006] netlink: 88 bytes leftover after parsing attributes in process `syz.1.481'. [ 151.657634][ T8020] nbd: must specify a device to reconfigure [ 151.886573][ T8026] netlink: 'syz.1.485': attribute type 1 has an invalid length. [ 151.950118][ T8026] 8021q: adding VLAN 0 to HW filter on device bond4 [ 152.032262][ T8025] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 152.193180][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.486'. [ 152.350682][ T7787] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 152.382293][ T7787] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 152.387525][ T7787] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 152.421032][ T7787] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 152.479613][ T7787] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 152.503997][ T7787] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 152.516953][ T7787] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 152.539372][ T7787] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 152.853560][ T8062] netlink: 128 bytes leftover after parsing attributes in process `syz.4.490'. [ 152.853719][ T7787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.878633][ T7787] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.901682][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.901807][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.952845][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.952972][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.984994][ T5620] Bluetooth: hci6: command 0x041b tx timeout [ 153.231657][ T8070] Bluetooth: hci0: unsupported parameter 5161 [ 153.231681][ T8070] Bluetooth: hci0: unsupported parameter 8192 [ 153.231693][ T8070] Bluetooth: hci0: unsupported parameter 5161 [ 153.231704][ T8070] Bluetooth: hci0: unsupported parameter 8192 [ 153.261124][ T8070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.495'. [ 153.423575][ T8082] netlink: 'syz.5.494': attribute type 1 has an invalid length. [ 153.500313][ T8075] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 153.500548][ T8073] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 153.590572][ T8082] bond1: entered promiscuous mode [ 153.591075][ T8082] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.689898][ T8094] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.690398][ T8094] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 153.690419][ T8094] bond1: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 153.722360][ T8094] bond1: (slave ipip0): making interface the new active one [ 153.722388][ T8094] ipip0: entered promiscuous mode [ 153.739633][ T8094] bond1: (slave ipip0): Enslaving as an active interface with an up link [ 154.103038][ T8110] geneve3: entered promiscuous mode [ 154.333817][ T8129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.337993][ T8129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.800940][ T7787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.843851][ T8143] __nla_validate_parse: 2 callbacks suppressed [ 154.843866][ T8143] netlink: 12 bytes leftover after parsing attributes in process `syz.5.504'. [ 154.881205][ T8142] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 154.953931][ T8142] gre0: entered promiscuous mode [ 154.953956][ T8142] gre0: entered allmulticast mode [ 154.955004][ T8142] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 154.957626][ T8143] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 155.054322][ T5620] Bluetooth: hci6: command 0x041b tx timeout [ 155.194772][ T8154] netlink: 200 bytes leftover after parsing attributes in process `syz.1.508'. [ 155.293779][ T8166] netlink: 56 bytes leftover after parsing attributes in process `syz.1.509'. [ 155.396214][ T8169] netlink: 28 bytes leftover after parsing attributes in process `syz.4.510'. [ 155.598204][ T8180] netlink: 20 bytes leftover after parsing attributes in process `syz.5.511'. [ 155.773541][ T7787] veth0_vlan: entered promiscuous mode [ 155.783176][ T7787] veth1_vlan: entered promiscuous mode [ 155.831894][ T8193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.513'. [ 155.923682][ T5629] block nbd64: NBD_DISCONNECT [ 155.945249][ T8195] syzkaller1: entered promiscuous mode [ 155.945275][ T8195] syzkaller1: entered allmulticast mode [ 155.957592][ T7787] veth0_macvtap: entered promiscuous mode [ 155.989511][ T7787] veth1_macvtap: entered promiscuous mode [ 156.220189][ T5629] udevd[5629]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 156.220451][ T7787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.220656][ T8202] team0: entered promiscuous mode [ 156.220673][ T8202] team_slave_0: entered promiscuous mode [ 156.220886][ T8202] team_slave_1: entered promiscuous mode [ 156.221142][ T8202] dummy0: entered promiscuous mode [ 156.222661][ T8202] team0: entered allmulticast mode [ 156.222678][ T8202] team_slave_0: entered allmulticast mode [ 156.222693][ T8202] team_slave_1: entered allmulticast mode [ 156.222708][ T8202] dummy0: entered allmulticast mode [ 156.223383][ T8202] team0: Cannot enslave team device to itself [ 156.223537][ T8204] team0: Cannot enslave team device to itself [ 156.276523][ T8207] netlink: 'syz.5.516': attribute type 1 has an invalid length. [ 156.286452][ T7787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.396904][ T159] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.397408][ T159] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.397599][ T159] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.397634][ T159] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.553449][ T8212] netlink: 'syz.1.518': attribute type 4 has an invalid length. [ 156.594888][ T8215] netlink: 'syz.5.519': attribute type 8 has an invalid length. [ 156.594914][ T8215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.519'. [ 156.610234][ T8212] openvswitch: netlink: IPv4 tun info is not correct [ 156.719966][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.719999][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.785020][ T8210] tipc: Enabled bearer , priority 0 [ 156.793877][ T8210] bond_slave_1: entered promiscuous mode [ 156.793901][ T8210] bond_slave_1: entered allmulticast mode [ 156.820318][ T8210] tipc: Resetting bearer [ 156.820568][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.820586][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.878477][ T8209] tipc: Disabling bearer [ 157.104441][ T8240] netlink: 80 bytes leftover after parsing attributes in process `syz.6.434'. [ 157.194670][ T8243] netlink: 44 bytes leftover after parsing attributes in process `syz.2.524'. [ 157.194696][ T8243] netlink: 43 bytes leftover after parsing attributes in process `syz.2.524'. [ 157.194709][ T8243] netlink: 'syz.2.524': attribute type 6 has an invalid length. [ 157.328505][ T8250] xt_l2tp: unknown flags: e7 [ 157.468754][ T8255] openvswitch: netlink: Flow key attribute not present in set flow. [ 157.526097][ T8248] netlink: 'syz.6.525': attribute type 2 has an invalid length. [ 157.671769][ T8259] raw_sendmsg: syz.1.528 forgot to set AF_INET. Fix it! [ 157.698172][ T8260] netlink: 'syz.1.528': attribute type 12 has an invalid length. [ 158.628483][ T8304] ip_tables: iptables: counters copy to user failed while replacing table [ 158.721202][ T8304] Dead loop on virtual device bond1 (net 114), fix it urgently! [ 158.851443][ T8304] netlink: 'syz.5.538': attribute type 16 has an invalid length. [ 158.851469][ T8304] netlink: 'syz.5.538': attribute type 17 has an invalid length. [ 159.001026][ T8313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.108970][ T8304] gre0: left promiscuous mode [ 159.108998][ T8304] gre0: left allmulticast mode [ 159.403423][ T8304] geneve2: left promiscuous mode [ 159.403450][ T8304] geneve2: left allmulticast mode [ 159.408392][ T8304] bond1: left promiscuous mode [ 159.408414][ T8304] ipip0: left promiscuous mode [ 159.410398][ T8304] geneve3: left promiscuous mode [ 159.563936][ T5277] veth0_macvtap: left promiscuous mode [ 159.996137][ T8339] __nla_validate_parse: 6 callbacks suppressed [ 159.996160][ T8339] netlink: 100 bytes leftover after parsing attributes in process `syz.6.544'. [ 159.996185][ T8339] netlink: 239 bytes leftover after parsing attributes in process `syz.6.544'. [ 160.078543][ T8339] netlink: zone id is out of range [ 160.078560][ T8339] netlink: zone id is out of range [ 160.078578][ T8339] netlink: zone id is out of range [ 160.078586][ T8339] netlink: zone id is out of range [ 160.078593][ T8339] netlink: zone id is out of range [ 160.078601][ T8339] netlink: zone id is out of range [ 160.078608][ T8339] netlink: zone id is out of range [ 160.078617][ T8339] netlink: zone id is out of range [ 160.440141][ T8358] FAULT_INJECTION: forcing a failure. [ 160.440141][ T8358] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 160.440176][ T8358] CPU: 0 UID: 0 PID: 8358 Comm: syz.6.547 Not tainted syzkaller #0 PREEMPT(full) [ 160.440197][ T8358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 160.440208][ T8358] Call Trace: [ 160.440215][ T8358] [ 160.440224][ T8358] dump_stack_lvl+0xe8/0x150 [ 160.440258][ T8358] should_fail_ex+0x410/0x560 [ 160.440287][ T8358] _copy_to_user+0x31/0xb0 [ 160.440314][ T8358] simple_read_from_buffer+0xe1/0x170 [ 160.440345][ T8358] proc_fail_nth_read+0x1bb/0x230 [ 160.440371][ T8358] ? common_file_perm+0x20e/0x2b0 [ 160.440396][ T8358] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 160.440427][ T8358] ? rw_verify_area+0x24a/0x4c0 [ 160.440455][ T8358] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 160.440483][ T8358] vfs_read+0x213/0xa80 [ 160.440517][ T8358] ? __pfx___mutex_lock+0x10/0x10 [ 160.440543][ T8358] ? __pfx_vfs_read+0x10/0x10 [ 160.440579][ T8358] ? __fget_files+0x2a/0x420 [ 160.440609][ T8358] ? __fget_files+0x3a2/0x420 [ 160.440633][ T8358] ? __fget_files+0x2a/0x420 [ 160.440665][ T8358] ksys_read+0x150/0x270 [ 160.440695][ T8358] ? __pfx_ksys_read+0x10/0x10 [ 160.440720][ T8358] ? __pfx_sock_ioctl+0x10/0x10 [ 160.440761][ T8358] do_syscall_64+0x166/0x520 [ 160.440782][ T8358] ? trace_irq_disable+0x3b/0x140 [ 160.440801][ T8358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.440821][ T8358] ? clear_bhb_loop+0x70/0xc0 [ 160.440847][ T8358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.440867][ T8358] RIP: 0033:0x7f9baff5e98e [ 160.440887][ T8358] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 160.440903][ T8358] RSP: 002b:00007f9bb0e4cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 160.440930][ T8358] RAX: ffffffffffffffda RBX: 00007f9bb0e4d6c0 RCX: 00007f9baff5e98e [ 160.440945][ T8358] RDX: 000000000000000f RSI: 00007f9bb0e4d0a0 RDI: 0000000000000003 [ 160.440957][ T8358] RBP: 00007f9bb0e4d090 R08: 0000000000000000 R09: 0000000000000000 [ 160.440969][ T8358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.440981][ T8358] R13: 00007f9bb0226038 R14: 00007f9bb0225fa0 R15: 00007ffe140c66b8 [ 160.441016][ T8358] [ 161.126714][ T8372] netlink: 84 bytes leftover after parsing attributes in process `syz.2.551'. [ 161.153506][ T8374] netlink: 84 bytes leftover after parsing attributes in process `syz.2.551'. [ 161.170037][ T8374] netlink: 84 bytes leftover after parsing attributes in process `syz.2.551'. [ 161.170638][ T8374] netlink: 84 bytes leftover after parsing attributes in process `syz.2.551'. [ 161.175742][ T8374] netlink: 84 bytes leftover after parsing attributes in process `syz.2.551'. [ 161.207996][ T8374] netlink: 84 bytes leftover after parsing attributes in process `syz.2.551'. [ 161.223965][ T8374] netlink: 84 bytes leftover after parsing attributes in process `syz.2.551'. [ 161.243437][ T8374] netlink: 84 bytes leftover after parsing attributes in process `syz.2.551'. [ 161.524998][ T8371] syz.2.551 (8371) used greatest stack depth: 17672 bytes left [ 161.616637][ T8396] syzkaller0: entered promiscuous mode [ 161.616665][ T8396] syzkaller0: entered allmulticast mode [ 161.680860][ T8394] tipc: Started in network mode [ 161.680895][ T8394] tipc: Node identity 5a2f74d95f75, cluster identity 4711 [ 161.681076][ T8394] tipc: Enabled bearer , priority 0 [ 161.902737][ T8394] xt_CT: You must specify a L4 protocol and not use inversions on it [ 161.917146][ T8393] tipc: Resetting bearer [ 162.050743][ T8393] tipc: Disabling bearer [ 162.204069][ T8419] bridge1: entered promiscuous mode [ 162.253560][ T8419] netlink: 'syz.6.563': attribute type 46 has an invalid length. [ 162.368833][ T8419] gre1: entered allmulticast mode [ 163.135018][ T5620] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 163.135901][ T5620] Bluetooth: hci0: command 0x0c20 tx timeout [ 163.408985][ T8481] netlink: 'syz.4.576': attribute type 4 has an invalid length. [ 164.171813][ T8508] block nbd0: not configured, cannot reconfigure [ 164.277098][ T8520] netlink: 'syz.6.590': attribute type 1 has an invalid length. [ 164.351374][ T8524] net_ratelimit: 8 callbacks suppressed [ 164.351405][ T8524] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 164.351437][ T8524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.459569][ T8522] gretap1: entered allmulticast mode [ 164.533432][ T8536] syzkaller0: entered promiscuous mode [ 164.533457][ T8536] syzkaller0: entered allmulticast mode [ 164.550768][ T8536] tipc: Enabled bearer , priority 0 [ 164.796306][ T8534] tipc: Resetting bearer [ 165.026465][ T8534] tipc: Disabling bearer [ 165.055195][ T5627] Bluetooth: hci6: command 0x041b tx timeout [ 165.254197][ T8559] __nla_validate_parse: 69 callbacks suppressed [ 165.254221][ T8559] netlink: 24 bytes leftover after parsing attributes in process `syz.5.598'. [ 165.518553][ T8541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.743544][ T8564] tipc: Enabling of bearer rejected, failed to enable media [ 167.777518][ T8578] xfrm0: entered promiscuous mode [ 167.777723][ T8578] xfrm0: entered allmulticast mode [ 167.777740][ T8578] team0: Device xfrm0 is of different type [ 167.951083][ T8589] openvswitch: netlink: Key 4 has unexpected len 4 expected 12 [ 168.039302][ T8595] netlink: 'syz.6.610': attribute type 2 has an invalid length. [ 168.088581][ T8598] ip6tnl2: entered promiscuous mode [ 168.088608][ T8598] ip6tnl2: entered allmulticast mode [ 168.394869][ T34] IPVS: starting estimator thread 0... [ 168.468581][ T8625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.497248][ T8617] sock: sock_set_timeout: `syz.6.613' (pid 8617) tries to set negative timeout [ 168.505407][ T8627] IPVS: using max 26 ests per chain, 62400 per kthread [ 168.589602][ T8625] netlink: 60 bytes leftover after parsing attributes in process `syz.1.615'. [ 168.606707][ T8625] netlink: 60 bytes leftover after parsing attributes in process `syz.1.615'. [ 168.731226][ T49] tipc: Subscription rejected, illegal request [ 168.936371][ T8640] netlink: 'syz.6.620': attribute type 39 has an invalid length. [ 169.021007][ T8649] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input5 [ 169.139529][ T8649] syzkaller1: entered promiscuous mode [ 169.139555][ T8649] syzkaller1: entered allmulticast mode [ 169.156159][ T6659] udevd[6659]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 169.160642][ T8649] netlink: 16 bytes leftover after parsing attributes in process `syz.5.622'. [ 169.251770][ T8655] netlink: 'syz.2.623': attribute type 4 has an invalid length. [ 169.309376][ T8654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.623'. [ 169.309567][ T8654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.623'. [ 169.420030][ T8661] netlink: 4 bytes leftover after parsing attributes in process `syz.5.625'. [ 169.483832][ T8663] syzkaller1: entered promiscuous mode [ 169.483859][ T8663] syzkaller1: entered allmulticast mode [ 169.860088][ T8677] netlink: 'syz.5.631': attribute type 1 has an invalid length. [ 169.915775][ T8677] 8021q: adding VLAN 0 to HW filter on device bond2 [ 170.013554][ T8680] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 170.027195][ T49] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 170.114999][ T8692] netlink: 'syz.5.631': attribute type 1 has an invalid length. [ 170.134396][ T49] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 170.578480][ T8710] netlink: 'syz.6.636': attribute type 1 has an invalid length. [ 170.750049][ T8710] bond1: entered promiscuous mode [ 170.752879][ T8710] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.873891][ T8710] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.878002][ T8710] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 170.878024][ T8710] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 170.940748][ T8710] bond1: (slave wireguard0): making interface the new active one [ 170.940775][ T8710] wireguard0: entered promiscuous mode [ 170.942861][ T8710] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 170.955879][ T8726] netlink: 'syz.1.640': attribute type 10 has an invalid length. [ 170.955901][ T8726] netlink: 40 bytes leftover after parsing attributes in process `syz.1.640'. [ 170.988787][ T8726] dummy0: left allmulticast mode [ 171.058689][ T8726] team0: Port device dummy0 removed [ 171.061567][ T8726] bridge0: port 2(dummy0) entered blocking state [ 171.061692][ T8726] bridge0: port 2(dummy0) entered disabled state [ 171.061834][ T8726] dummy0: entered allmulticast mode [ 171.081192][ T8726] netlink: 16 bytes leftover after parsing attributes in process `syz.1.640'. [ 171.117889][ T8726] netlink: 240 bytes leftover after parsing attributes in process `syz.1.640'. [ 171.553740][ T8758] netlink: 16 bytes leftover after parsing attributes in process `syz.6.647'. [ 171.822199][ T8755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.644'. [ 172.213601][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.650'. [ 172.249038][ T8787] netlink: 'syz.4.653': attribute type 3 has an invalid length. [ 172.249064][ T8787] netlink: 'syz.4.653': attribute type 1 has an invalid length. [ 172.249077][ T8787] netlink: 224 bytes leftover after parsing attributes in process `syz.4.653'. [ 172.270037][ T159] bond2: (slave gretap1): link status up again after 0 ms [ 172.284314][ T1460] bond2: (slave gretap1): link status up again after 0 ms [ 172.305259][ T159] bond2: (slave gretap1): link status up again after 0 ms [ 172.325090][ T159] bond2: (slave gretap1): link status up again after 0 ms [ 172.352425][ T60] bond2: (slave gretap1): link status up again after 0 ms [ 172.364277][ T159] bond2: (slave gretap1): link status up again after 0 ms [ 172.384302][ T60] bond2: (slave gretap1): link status up again after 0 ms [ 172.384332][ T60] bond2: (slave gretap1): failed to get link speed/duplex [ 172.771775][ T8808] netlink: 56 bytes leftover after parsing attributes in process `syz.5.657'. [ 172.910534][ T8788] bond2 (unregistering): Released all slaves [ 173.121824][ T8797] pimreg: entered allmulticast mode [ 173.211926][ T8824] netlink: 'syz.6.659': attribute type 1 has an invalid length. [ 173.296374][ T8824] 8021q: adding VLAN 0 to HW filter on device bond2 [ 173.447307][ T8809] pimreg: left allmulticast mode [ 173.499395][ T8839] netlink: 'syz.4.661': attribute type 2 has an invalid length. [ 173.621693][ T8841] netlink: 'syz.4.661': attribute type 2 has an invalid length. [ 173.766236][ T8839] þ: entered promiscuous mode [ 173.903754][ T8866] netlink: 20 bytes leftover after parsing attributes in process `syz.6.662'. [ 173.954434][ T8871] netlink: 12 bytes leftover after parsing attributes in process `syz.6.662'. [ 173.961155][ T8853] pim6reg: entered allmulticast mode [ 174.312099][ T8886] sctp: [Deprecated]: syz.1.665 (pid 8886) Use of int in max_burst socket option. [ 174.312099][ T8886] Use struct sctp_assoc_value instead [ 174.498039][ T8854] syzkaller0: entered promiscuous mode [ 174.498066][ T8854] syzkaller0: entered allmulticast mode [ 174.661763][ T8898] tipc: Failed to remove unknown binding: 66,1,1/0:478883101/478883103 [ 174.729176][ T8910] tipc: Failed to remove unknown binding: 66,1,1/0:478883101/478883103 [ 174.729206][ T8910] tipc: Failed to remove unknown binding: 66,1,1/0:478883101/478883103 [ 176.874677][ T5949] net_ratelimit: 9 callbacks suppressed [ 176.874700][ T5949] bond2: (slave gretap1): failed to get link speed/duplex [ 176.986625][ T8931] syzkaller1: entered promiscuous mode [ 176.986649][ T8931] syzkaller1: entered allmulticast mode [ 177.011382][ T5949] bond2: (slave gretap1): failed to get link speed/duplex [ 177.053905][ T8938] netlink: 'syz.4.675': attribute type 1 has an invalid length. [ 177.122190][ T8938] bond2: entered promiscuous mode [ 177.122743][ T8938] 8021q: adding VLAN 0 to HW filter on device bond2 [ 177.154225][ T49] bond2: (slave gretap1): failed to get link speed/duplex [ 177.231643][ T8941] __nla_validate_parse: 2 callbacks suppressed [ 177.231666][ T8941] netlink: 4 bytes leftover after parsing attributes in process `syz.6.673'. [ 177.315736][ T8951] netlink: 'syz.2.676': attribute type 1 has an invalid length. [ 177.563122][ T8957] bond0: (slave geneve2): making interface the new active one [ 177.575620][ T8957] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 177.614444][ T34] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 177.614495][ T1478] bond2: (slave gretap1): failed to get link speed/duplex [ 177.614983][ T34] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 177.615025][ T34] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 177.615061][ T34] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 177.890898][ T8974] gtp1: entered promiscuous mode [ 177.890921][ T8974] gtp1: entered allmulticast mode [ 177.909031][ T1478] bond2: (slave gretap1): failed to get link speed/duplex [ 178.016567][ T1478] bond2: (slave gretap1): failed to get link speed/duplex [ 178.042652][ T8978] §: renamed from sit0 (while UP) [ 178.124373][ T6406] bond2: (slave gretap1): failed to get link speed/duplex [ 178.825882][ T34] bond2: (slave gretap1): failed to get link speed/duplex [ 178.941716][ T34] bond2: (slave gretap1): failed to get link speed/duplex [ 179.044601][ T1478] bond2: (slave gretap1): failed to get link speed/duplex [ 179.484874][ T9017] netlink: 'syz.5.691': attribute type 1 has an invalid length. [ 179.484899][ T9017] netlink: 28 bytes leftover after parsing attributes in process `syz.5.691'. [ 179.736539][ T9020] bridge0: entered promiscuous mode [ 179.736612][ T9020] bridge0: entered allmulticast mode [ 179.947104][ T1478] IPVS: starting estimator thread 0... [ 180.044330][ T9033] IPVS: using max 26 ests per chain, 62400 per kthread [ 180.110638][ T9018] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 180.146147][ T9018] bond3 (unregistering): Released all slaves [ 181.050365][ T9068] netlink: 44 bytes leftover after parsing attributes in process `syz.1.700'. [ 182.035678][ T9101] syzkaller1: entered promiscuous mode [ 182.035704][ T9101] syzkaller1: entered allmulticast mode [ 182.059291][ T5949] net_ratelimit: 21 callbacks suppressed [ 182.059312][ T5949] bond2: (slave gretap1): failed to get link speed/duplex [ 182.164416][ T5949] bond2: (slave gretap1): failed to get link speed/duplex [ 182.274526][ T159] bond2: (slave gretap1): failed to get link speed/duplex [ 182.387132][ T34] bond2: (slave gretap1): failed to get link speed/duplex [ 182.478036][ T9128] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.495043][ T49] bond2: (slave gretap1): failed to get link speed/duplex [ 182.632160][ T9134] netlink: 12 bytes leftover after parsing attributes in process `syz.6.717'. [ 182.659152][ T9135] dvmrp0: entered allmulticast mode [ 182.660590][ T9132] dvmrp0: left allmulticast mode [ 182.824230][ T159] bond2: (slave gretap1): failed to get link speed/duplex [ 182.867448][ T9146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.718'. [ 182.952420][ T159] bond2: (slave gretap1): failed to get link speed/duplex [ 183.054574][ T159] bond2: (slave gretap1): failed to get link speed/duplex [ 183.194372][ T49] bond2: (slave gretap1): failed to get link speed/duplex [ 183.561668][ T9153] netlink: 28 bytes leftover after parsing attributes in process `syz.6.719'. [ 183.725342][ T9158] geneve2: entered promiscuous mode [ 183.725368][ T9158] geneve2: entered allmulticast mode [ 183.727320][ T9158] netlink: 3560 bytes leftover after parsing attributes in process `syz.6.720'. [ 183.730538][ T9158] netlink: 3560 bytes leftover after parsing attributes in process `syz.6.720'. [ 183.768589][ T9158] netlink: 3560 bytes leftover after parsing attributes in process `syz.6.720'. [ 183.768751][ T9158] netlink: 3560 bytes leftover after parsing attributes in process `syz.6.720'. [ 183.768908][ T9158] netlink: 3560 bytes leftover after parsing attributes in process `syz.6.720'. [ 183.769042][ T9158] netlink: 3560 bytes leftover after parsing attributes in process `syz.6.720'. [ 183.769171][ T9158] netlink: 3560 bytes leftover after parsing attributes in process `syz.6.720'. [ 183.829243][ T9159] dvmrp0: entered allmulticast mode [ 183.829434][ T9160] dvmrp0: left allmulticast mode [ 185.650053][ T9223] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 185.650094][ T9223] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 185.650132][ T9223] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 185.706652][ T9223] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 185.727395][ T9223] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 187.144770][ T12] net_ratelimit: 34 callbacks suppressed [ 187.144802][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 187.254392][ T60] bond2: (slave gretap1): failed to get link speed/duplex [ 187.375200][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 187.507436][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 187.744308][ T9324] __nla_validate_parse: 64 callbacks suppressed [ 187.744333][ T9324] netlink: 8 bytes leftover after parsing attributes in process `syz.6.751'. [ 187.778537][ T9324] netlink: 'syz.6.751': attribute type 8 has an invalid length. [ 187.795257][ T1478] bond2: (slave gretap1): failed to get link speed/duplex [ 187.909232][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 187.927848][ T9329] netlink: 'syz.4.756': attribute type 1 has an invalid length. [ 187.927873][ T9329] netlink: 9 bytes leftover after parsing attributes in process `syz.4.756'. [ 188.002252][ T9331] netlink: 8 bytes leftover after parsing attributes in process `syz.5.754'. [ 188.014917][ T5949] bond2: (slave gretap1): failed to get link speed/duplex [ 188.260593][ T9347] netlink: 28 bytes leftover after parsing attributes in process `syz.5.759'. [ 188.288020][ T9340] openvswitch: netlink: Missing key (keys=40, expected=100) [ 188.436741][ T9354] netlink: 8 bytes leftover after parsing attributes in process `syz.5.759'. [ 188.444342][ T60] bond2: (slave gretap1): failed to get link speed/duplex [ 188.554898][ T5949] bond2: (slave gretap1): failed to get link speed/duplex [ 189.056571][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.766'. [ 189.076003][ T9378] netlink: 'syz.2.766': attribute type 23 has an invalid length. [ 190.507817][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.780'. [ 191.122182][ T53] Bluetooth: hci6: link tx timeout [ 191.122317][ T53] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.130371][ T5627] Bluetooth: hci6: link tx timeout [ 191.130392][ T5627] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.130415][ T5627] Bluetooth: hci6: link tx timeout [ 191.130425][ T5627] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.130445][ T5627] Bluetooth: hci6: link tx timeout [ 191.130455][ T5627] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.138501][ T5627] Bluetooth: hci6: link tx timeout [ 191.138516][ T5627] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.353042][ T9453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.789'. [ 191.715563][ T9465] tipc: Enabled bearer , priority 0 [ 191.716416][ T9466] syzkaller0: entered promiscuous mode [ 191.716436][ T9466] syzkaller0: entered allmulticast mode [ 191.748014][ T9465] tipc: Resetting bearer [ 191.868260][ T9469] tipc: Resetting bearer [ 191.897933][ T9469] tipc: Disabling bearer [ 192.366171][ T9479] netlink: 132 bytes leftover after parsing attributes in process `syz.1.796'. [ 192.369341][ T12] net_ratelimit: 27 callbacks suppressed [ 192.369356][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 192.474821][ T60] bond2: (slave gretap1): failed to get link speed/duplex [ 192.572036][ T9514] ksmbd: Unknown IPC event: 1, ignore. [ 192.584529][ T49] bond2: (slave gretap1): failed to get link speed/duplex [ 192.717603][ T9474] syzkaller0: entered promiscuous mode [ 192.717631][ T9474] syzkaller0: entered allmulticast mode [ 192.810523][ T9517] syzkaller0: entered promiscuous mode [ 192.810552][ T9517] syzkaller0: entered allmulticast mode [ 192.900943][ T9522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.802'. [ 192.902483][ T9522] netlink: 16 bytes leftover after parsing attributes in process `syz.1.802'. [ 192.911850][ T9522] xt_hl: Unknown TTL match mode: 237 [ 193.134249][ T5627] Bluetooth: hci6: command 0x041b tx timeout [ 194.133066][ T9536] netlink: 'syz.4.805': attribute type 21 has an invalid length. [ 194.498124][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.498164][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.212899][ T9523] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 195.212942][ T9523] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 195.212959][ T9523] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 195.213973][ T9527] netlink: 96 bytes leftover after parsing attributes in process `syz.1.803'. [ 195.440920][ T9542] Dead loop on virtual device bond1 (net 114), fix it urgently! [ 195.458089][ T9542] Dead loop on virtual device bond1 (net 114), fix it urgently! [ 195.458937][ T9542] Dead loop on virtual device bond1 (net 114), fix it urgently! [ 195.460821][ T9543] netlink: 4 bytes leftover after parsing attributes in process `syz.5.807'. [ 195.461735][ T9542] Dead loop on virtual device bond1 (net 114), fix it urgently! [ 195.462453][ T9542] Dead loop on virtual device bond1 (net 114), fix it urgently! [ 195.486876][ T9542] Dead loop on virtual device bond1 (net 114), fix it urgently! [ 195.487533][ T9542] Dead loop on virtual device bond1 (net 114), fix it urgently! [ 195.540772][ T9547] netlink: 'syz.1.806': attribute type 10 has an invalid length. [ 198.140289][ T9536] netlink: 132 bytes leftover after parsing attributes in process `syz.4.805'. [ 198.309458][ T9558] syzkaller0: entered promiscuous mode [ 198.309486][ T9558] syzkaller0: entered allmulticast mode [ 198.313389][ T9565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.809'. [ 198.313423][ T9565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.809'. [ 198.445553][ T9574] netlink: 16 bytes leftover after parsing attributes in process `syz.1.812'. [ 198.457068][ T9570] netlink: 564 bytes leftover after parsing attributes in process `syz.6.811'. [ 198.576935][ T9576] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input6 [ 198.649288][ T9581] netlink: 880 bytes leftover after parsing attributes in process `syz.5.813'. [ 200.425749][ T1478] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.425805][ T1478] net_ratelimit: 1017 callbacks suppressed [ 200.425819][ T1478] bond2: (slave gretap1): failed to get link speed/duplex [ 200.427723][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.427768][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.427805][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.543003][ T1478] bond2: (slave gretap1): failed to get link speed/duplex [ 200.644704][ T60] bond2: (slave gretap1): failed to get link speed/duplex [ 200.668306][ T9585] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 200.683841][ T9592] openvswitch: netlink: Key type 136 is out of range max 32 [ 200.755126][ T49] bond2: (slave gretap1): failed to get link speed/duplex [ 200.864726][ T60] bond2: (slave gretap1): failed to get link speed/duplex [ 200.956528][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.821'. [ 200.981166][ T9601] netlink: 510 bytes leftover after parsing attributes in process `syz.6.820'. [ 200.996452][ T60] bond2: (slave gretap1): failed to get link speed/duplex [ 201.012112][ T9601] netlink: 20 bytes leftover after parsing attributes in process `syz.6.820'. [ 201.012143][ T9601] netlink: 20 bytes leftover after parsing attributes in process `syz.6.820'. [ 201.115113][ T49] bond2: (slave gretap1): failed to get link speed/duplex [ 201.145819][ T9610] netlink: 'syz.2.826': attribute type 9 has an invalid length. [ 201.245231][ T49] bond2: (slave gretap1): failed to get link speed/duplex [ 201.650621][ T9603] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not 'SEG6' [ 201.701378][ T5625] Bluetooth: hci1: command 0x0406 tx timeout [ 201.701427][ T5625] Bluetooth: hci3: command 0x0406 tx timeout [ 201.701471][ T5625] Bluetooth: hci2: command 0x0406 tx timeout [ 201.701511][ T5625] Bluetooth: hci0: command 0x0c20 tx timeout [ 201.827689][ T9640] netlink: 'syz.6.832': attribute type 21 has an invalid length. [ 201.827836][ T9640] netlink: 'syz.6.832': attribute type 4 has an invalid length. [ 202.066179][ T9644] netlink: 'syz.6.833': attribute type 10 has an invalid length. [ 202.195349][ T9644] team0 (unregistering): Port device team_slave_0 removed [ 202.221408][ T9644] team0 (unregistering): Port device team_slave_1 removed [ 202.289034][ T9649] bridge0: port 3(syz_tun) entered disabled state [ 202.303435][ T9649] syz_tun: left allmulticast mode [ 202.303462][ T9649] syz_tun: left promiscuous mode [ 202.303893][ T9649] bridge0: port 3(syz_tun) entered disabled state [ 202.404701][ T9649] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 202.473888][ T9653] netlink: 'syz.6.836': attribute type 1 has an invalid length. [ 202.485221][ T9654] netlink: 'syz.6.836': attribute type 1 has an invalid length. [ 202.514981][ T9653] bond3: entered promiscuous mode [ 202.515448][ T9653] 8021q: adding VLAN 0 to HW filter on device bond3 [ 202.575972][ T9654] bond4: entered promiscuous mode [ 202.576387][ T9654] 8021q: adding VLAN 0 to HW filter on device bond4 [ 202.618040][ T9663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.726410][ T9668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.923857][ T9683] veth0_to_bond: default FDB implementation only supports local addresses [ 203.532885][ T9707] netlink: 'syz.1.850': attribute type 2 has an invalid length. [ 203.902411][ T9725] __nla_validate_parse: 6 callbacks suppressed [ 203.902434][ T9725] netlink: 24 bytes leftover after parsing attributes in process `syz.1.854'. [ 203.922264][ T9727] netlink: 24 bytes leftover after parsing attributes in process `syz.1.854'. [ 203.990634][ T9730] netlink: 'syz.4.858': attribute type 2 has an invalid length. [ 204.039185][ T9730] : entered promiscuous mode [ 204.053179][ T9730] netlink: 44 bytes leftover after parsing attributes in process `syz.4.858'. [ 204.283795][ T9737] tc_dump_action: action bad kind [ 204.368590][ T9746] FAULT_INJECTION: forcing a failure. [ 204.368590][ T9746] name failslab, interval 1, probability 0, space 0, times 1 [ 204.368625][ T9746] CPU: 0 UID: 0 PID: 9746 Comm: syz.4.864 Not tainted syzkaller #0 PREEMPT(full) [ 204.368647][ T9746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 204.368659][ T9746] Call Trace: [ 204.368667][ T9746] [ 204.368676][ T9746] dump_stack_lvl+0xe8/0x150 [ 204.368711][ T9746] should_fail_ex+0x410/0x560 [ 204.368745][ T9746] should_failslab+0xa8/0x100 [ 204.368770][ T9746] ? skb_clone+0x212/0x3a0 [ 204.368797][ T9746] kmem_cache_alloc_noprof+0xa1/0x600 [ 204.368826][ T9746] ? __pfx__copy_from_iter+0x10/0x10 [ 204.368849][ T9746] ? skb_clone+0x212/0x3a0 [ 204.368884][ T9746] skb_clone+0x212/0x3a0 [ 204.368915][ T9746] pfkey_sendmsg+0x4d6/0x11d0 [ 204.368958][ T9746] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 204.369011][ T9746] ? aa_sock_msg_perm+0x144/0x210 [ 204.369042][ T9746] ? apparmor_socket_sendmsg+0x98/0x360 [ 204.369066][ T9746] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 204.369092][ T9746] sock_sendmsg_nosec+0x13a/0x180 [ 204.369116][ T9746] ____sys_sendmsg+0x54e/0x850 [ 204.369149][ T9746] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.369187][ T9746] ? import_iovec+0x73/0xa0 [ 204.369216][ T9746] ___sys_sendmsg+0x2a5/0x360 [ 204.369241][ T9746] ? __lock_acquire+0x747/0x2de0 [ 204.369267][ T9746] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.369336][ T9746] ? __fget_files+0x2a/0x420 [ 204.369362][ T9746] ? __fget_files+0x3a2/0x420 [ 204.369401][ T9746] __x64_sys_sendmsg+0x1b1/0x290 [ 204.369431][ T9746] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 204.369482][ T9746] do_syscall_64+0x166/0x520 [ 204.369506][ T9746] ? trace_irq_disable+0x3b/0x140 [ 204.369536][ T9746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.369557][ T9746] ? clear_bhb_loop+0x70/0xc0 [ 204.369582][ T9746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.369602][ T9746] RIP: 0033:0x7fcfb2b9e159 [ 204.369621][ T9746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.369637][ T9746] RSP: 002b:00007fcfb0df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.369660][ T9746] RAX: ffffffffffffffda RBX: 00007fcfb2e25fa0 RCX: 00007fcfb2b9e159 [ 204.369675][ T9746] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 204.369687][ T9746] RBP: 00007fcfb0df6090 R08: 0000000000000000 R09: 0000000000000000 [ 204.369700][ T9746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.369712][ T9746] R13: 00007fcfb2e26038 R14: 00007fcfb2e25fa0 R15: 00007fff87770bc8 [ 204.369747][ T9746] [ 204.530752][ T9750] syzkaller0: entered promiscuous mode [ 204.530775][ T9750] syzkaller0: entered allmulticast mode [ 204.562696][ T9750] tipc: Enabled bearer , priority 0 [ 204.579536][ T9750] tipc: Resetting bearer [ 204.733815][ T9749] tipc: Resetting bearer [ 205.357239][ T9749] tipc: Disabling bearer [ 205.557731][ T9753] bond3: ARP target 9.0.0.0 is already present [ 205.557758][ T9753] bond3: option arp_ip_target: invalid value (9) [ 205.600357][ T9753] bond3 (unregistering): Released all slaves [ 205.860723][ T9774] netlink: 236 bytes leftover after parsing attributes in process `syz.2.871'. [ 205.882384][ T9758] syzkaller0: entered promiscuous mode [ 205.882411][ T9758] syzkaller0: entered allmulticast mode [ 205.905698][ T49] net_ratelimit: 26 callbacks suppressed [ 205.905716][ T49] bond2: (slave gretap1): failed to get link speed/duplex [ 206.363636][ T12] IPVS: starting estimator thread 0... [ 206.363643][ T9797] netlink: 72 bytes leftover after parsing attributes in process `syz.2.877'. [ 206.447134][ T9798] IPVS: using max 28 ests per chain, 67200 per kthread [ 208.108155][ T9788] netlink: 80 bytes leftover after parsing attributes in process `syz.5.875'. [ 208.108182][ T9788] netlink: 80 bytes leftover after parsing attributes in process `syz.5.875'. [ 208.108512][ T9790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.114263][ T60] bond2: (slave gretap1): failed to get link speed/duplex [ 208.224686][ T1478] bond2: (slave gretap1): failed to get link speed/duplex [ 208.307541][ T9802] syzkaller0: entered promiscuous mode [ 208.307567][ T9802] syzkaller0: entered allmulticast mode [ 208.327378][ T9802] tipc: Started in network mode [ 208.327411][ T9802] tipc: Node identity 32b2f575f01c, cluster identity 4711 [ 208.335769][ T9802] tipc: Enabled bearer , priority 0 [ 208.372169][ T9802] tipc: Resetting bearer [ 208.374509][ T60] bond2: (slave gretap1): failed to get link speed/duplex [ 208.390722][ T9799] tipc: Resetting bearer [ 208.462264][ T9799] tipc: Disabling bearer [ 208.505712][ T34] bond2: (slave gretap1): failed to get link speed/duplex [ 208.550635][ T9807] netlink: 12 bytes leftover after parsing attributes in process `syz.6.881'. [ 208.656370][ T1478] bond2: (slave gretap1): failed to get link speed/duplex [ 208.765236][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 208.832934][ T9820] GUP no longer grows the stack in syz.2.884 (9820): 200000003000-20000000a000 (200000001000) [ 208.832970][ T9820] CPU: 0 UID: 0 PID: 9820 Comm: syz.2.884 Not tainted syzkaller #0 PREEMPT(full) [ 208.832994][ T9820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 208.833006][ T9820] Call Trace: [ 208.833015][ T9820] [ 208.833025][ T9820] dump_stack_lvl+0xe8/0x150 [ 208.833063][ T9820] __get_user_pages+0x23b6/0x2750 [ 208.833098][ T9820] ? lock_acquire+0x115/0x350 [ 208.833139][ T9820] ? __gup_longterm_locked+0xc3b/0x15c0 [ 208.833178][ T9820] __gup_longterm_locked+0xd52/0x15c0 [ 208.833210][ T9820] ? lock_acquire+0x115/0x350 [ 208.833253][ T9820] gup_fast_fallback+0x1d92/0x20e0 [ 208.833323][ T9820] ? __pfx_gup_fast_fallback+0x10/0x10 [ 208.833353][ T9820] ? lock_acquire+0x115/0x350 [ 208.833372][ T9820] ? is_valid_gup_args+0x11f/0x200 [ 208.833403][ T9820] ? get_user_pages_fast+0x4d/0xb0 [ 208.833443][ T9820] __iov_iter_get_pages_alloc+0x378/0xa40 [ 208.833478][ T9820] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 208.833506][ T9820] iov_iter_get_pages2+0x5e/0xa0 [ 208.833536][ T9820] __se_sys_vmsplice+0x7b5/0x1660 [ 208.833591][ T9820] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 208.833624][ T9820] ? __pfx_futex_wait+0x10/0x10 [ 208.833743][ T9820] do_syscall_64+0x166/0x520 [ 208.833768][ T9820] ? trace_irq_disable+0x3b/0x140 [ 208.833789][ T9820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.833811][ T9820] ? clear_bhb_loop+0x70/0xc0 [ 208.833838][ T9820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.833859][ T9820] RIP: 0033:0x7f436419e159 [ 208.833880][ T9820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.833897][ T9820] RSP: 002b:00007f4364fa8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 208.833920][ T9820] RAX: ffffffffffffffda RBX: 00007f4364425fa0 RCX: 00007f436419e159 [ 208.833936][ T9820] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 208.833949][ T9820] RBP: 00007f436423506b R08: 0000000000000000 R09: 0000000000000000 [ 208.833961][ T9820] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 208.833972][ T9820] R13: 00007f4364426038 R14: 00007f4364425fa0 R15: 00007ffffef94998 [ 208.834010][ T9820] [ 208.885369][ T60] bond2: (slave gretap1): failed to get link speed/duplex [ 209.026179][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 209.086157][ T9826] xt_REDIRECT: bad MAP_IPS. [ 209.155153][ T34] bond2: (slave gretap1): failed to get link speed/duplex [ 209.391732][ T9837] netlink: 52 bytes leftover after parsing attributes in process `syz.4.889'. [ 209.714572][ T9858] batadv_slave_0: entered promiscuous mode [ 209.714597][ T9858] batadv_slave_0: entered allmulticast mode [ 209.724667][ T9858] netlink: 56 bytes leftover after parsing attributes in process `syz.1.892'. [ 210.021736][ T9880] netlink: 36 bytes leftover after parsing attributes in process `syz.4.897'. [ 210.051572][ T9867] netlink: 'syz.5.896': attribute type 4 has an invalid length. [ 210.051595][ T9867] netlink: 152 bytes leftover after parsing attributes in process `syz.5.896'. [ 210.344604][ T9886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.898'. [ 210.396381][ T9889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.899'. [ 210.469475][ T9888] netlink: 16 bytes leftover after parsing attributes in process `syz.5.900'. [ 210.473111][ T9888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.900'. [ 210.542105][ T9889] veth3: entered promiscuous mode [ 210.542131][ T9889] veth3: entered allmulticast mode [ 210.556222][ T9889] bridge6: port 1(veth3) entered blocking state [ 210.556459][ T9889] bridge6: port 1(veth3) entered disabled state [ 210.568589][ T9889] bridge6: port 1(veth3) entered blocking state [ 210.568732][ T9889] bridge6: port 1(veth3) entered forwarding state [ 210.831325][ T9890] veth5: entered promiscuous mode [ 210.831349][ T9890] veth5: entered allmulticast mode [ 210.838578][ T9890] bridge6: port 2(veth5) entered blocking state [ 210.838701][ T9890] bridge6: port 2(veth5) entered disabled state [ 210.851089][ T9890] bridge6: port 2(veth5) entered blocking state [ 210.852413][ T9890] bridge6: port 2(veth5) entered forwarding state [ 210.946891][ T9919] atomic_op ffff88805770c1e0 conn xmit_atomic 0000000000000000 [ 210.947064][ T9919] atomic_op ffff88805770d1e0 conn xmit_atomic 0000000000000000 [ 210.947172][ T9919] atomic_op ffff88805770b1e0 conn xmit_atomic 0000000000000000 [ 210.947277][ T9919] atomic_op ffff8880577099e0 conn xmit_atomic 0000000000000000 [ 210.947395][ T9919] atomic_op ffff8880474c09e0 conn xmit_atomic 0000000000000000 [ 210.947495][ T9919] atomic_op ffff8880474c01e0 conn xmit_atomic 0000000000000000 [ 210.947692][ T9919] atomic_op ffff8880474c79e0 conn xmit_atomic 0000000000000000 [ 210.947798][ T9919] atomic_op ffff8880474c49e0 conn xmit_atomic 0000000000000000 [ 210.947899][ T9919] atomic_op ffff8880474c21e0 conn xmit_atomic 0000000000000000 [ 210.948020][ T9919] atomic_op ffff8880474c19e0 conn xmit_atomic 0000000000000000 [ 211.057053][ T9925] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 211.075998][ T1478] net_ratelimit: 12 callbacks suppressed [ 211.076021][ T1478] bond2: (slave gretap1): failed to get link speed/duplex [ 211.185755][ T5949] bond2: (slave gretap1): failed to get link speed/duplex [ 211.226025][ T12] bridge6: port 1(veth3) entered disabled state [ 211.246343][ T12] bridge6: port 2(veth5) entered disabled state [ 211.334239][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 211.379685][ T9932] netlink: 16 bytes leftover after parsing attributes in process `syz.6.909'. [ 211.468214][ T1478] bond2: (slave gretap1): failed to get link speed/duplex [ 211.488171][ T9939] netlink: 24 bytes leftover after parsing attributes in process `syz.5.910'. [ 211.575881][ T152] bond2: (slave gretap1): failed to get link speed/duplex [ 211.719294][ T1478] bond2: (slave gretap1): failed to get link speed/duplex [ 211.986908][ T5949] bond2: (slave gretap1): failed to get link speed/duplex [ 212.096546][ T152] bond2: (slave gretap1): failed to get link speed/duplex [ 212.207898][ T49] bond2: (slave gretap1): failed to get link speed/duplex [ 212.409720][ T1460] IPVS: starting estimator thread 0... [ 212.436049][ T9974] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 212.496119][ T9981] IPVS: using max 27 ests per chain, 64800 per kthread [ 212.743604][ T9996] v: renamed from veth0_vlan (while UP) [ 212.828255][T10011] netlink: 'syz.1.925': attribute type 4 has an invalid length. [ 213.278482][ T9998] syzkaller1: entered promiscuous mode [ 213.278509][ T9998] syzkaller1: entered allmulticast mode [ 213.563705][T10035] batadv_slave_0: entered allmulticast mode [ 213.662723][T10044] block nbd0: not configured, cannot reconfigure [ 213.790135][T10056] netlink: 'syz.4.933': attribute type 74 has an invalid length. [ 213.850839][T10045] bond4 (unregistering): Released all slaves [ 214.289599][T10079] netlink: 'syz.4.938': attribute type 58 has an invalid length. [ 214.368033][T10081] bond4: (slave veth0_to_bond): Releasing backup interface [ 214.382830][T10082] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 214.383822][T10083] xt_connbytes: Forcing CT accounting to be enabled [ 214.399400][T10082] __nla_validate_parse: 39 callbacks suppressed [ 214.399421][T10082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.940'. [ 214.399436][T10082] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 214.442554][T10082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.940'. [ 214.442579][T10082] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 214.454644][T10082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.940'. [ 214.454665][T10082] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 214.487596][T10082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.940'. [ 214.487620][T10082] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 214.490233][T10082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.940'. [ 214.490253][T10082] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 214.492238][T10082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.940'. [ 214.492258][T10082] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 214.612743][T10082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.940'. [ 214.612769][T10082] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 214.633735][T10082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.940'. [ 214.633760][T10082] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 214.644783][T10082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.940'. [ 214.644808][T10082] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 214.696032][T10082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.940'. [ 214.747170][T10096] sctp: [Deprecated]: syz.6.942 (pid 10096) Use of int in max_burst socket option. [ 214.747170][T10096] Use struct sctp_assoc_value instead [ 215.902543][T10139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.074810][T10147] netlink: 'syz.5.958': attribute type 9 has an invalid length. [ 216.143571][T10148] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 216.149473][ T63] net_ratelimit: 22 callbacks suppressed [ 216.149492][ T63] bond2: (slave gretap1): failed to get link speed/duplex [ 216.338331][ T1460] bond2: (slave gretap1): failed to get link speed/duplex [ 216.445606][ T6405] bond2: (slave gretap1): failed to get link speed/duplex [ 216.519246][T10159] macsec1: entered promiscuous mode [ 216.519272][T10159] hsr0: entered promiscuous mode [ 216.593044][T10170] xt_l2tp: v2 tid > 0xffff: 37482740 [ 216.643779][T10168] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 216.704564][ T6405] bond2: (slave gretap1): failed to get link speed/duplex [ 216.816051][ T6405] bond2: (slave gretap1): failed to get link speed/duplex [ 217.037871][T10187] xt_connbytes: Forcing CT accounting to be enabled [ 217.365477][ T9965] bond2: (slave gretap1): failed to get link speed/duplex [ 217.483401][T10209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.488392][T10209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.488843][T10209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.489232][T10209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.676005][T10217] SET target dimension over the limit! [ 217.828153][T10225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.073678][T10234] netlink: 'syz.4.982': attribute type 7 has an invalid length. [ 218.073701][T10234] netlink: 'syz.4.982': attribute type 3 has an invalid length. [ 218.135832][T10234] netlink: 'syz.4.982': attribute type 1 has an invalid length. [ 218.327080][T10239] macsec1: entered promiscuous mode [ 219.508622][T10263] bond5: Removing last ns target with arp_interval on [ 219.515274][T10266] __nla_validate_parse: 64 callbacks suppressed [ 219.515292][T10266] netlink: 32 bytes leftover after parsing attributes in process `syz.5.993'. [ 219.525813][T10266] netlink: 8 bytes leftover after parsing attributes in process `syz.5.993'. [ 219.895946][T10284] netlink: 260 bytes leftover after parsing attributes in process `syz.6.996'. [ 220.816850][T10305] syzkaller1: entered promiscuous mode [ 220.816875][T10305] syzkaller1: entered allmulticast mode [ 220.950479][T10312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1004'. [ 220.950516][T10312] netlink: 'syz.4.1004': attribute type 10 has an invalid length. [ 220.950532][T10312] netlink: 'syz.4.1004': attribute type 5 has an invalid length. [ 220.950544][T10312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1004'. [ 222.126548][T10314] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1005'. [ 222.126588][T10314] netlink: 'syz.1.1005': attribute type 7 has an invalid length. [ 222.126602][T10314] netlink: 'syz.1.1005': attribute type 8 has an invalid length. [ 222.126614][T10314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1005'. [ 222.140883][T10314] erspan0: entered promiscuous mode [ 222.142295][T10314] gretap0: entered promiscuous mode [ 222.143855][T10314] erspan0: left promiscuous mode [ 222.152055][T10314] gretap0: left promiscuous mode [ 222.210267][T10315] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1005'. [ 222.210306][T10315] netlink: 'syz.1.1005': attribute type 7 has an invalid length. [ 222.210320][T10315] netlink: 'syz.1.1005': attribute type 8 has an invalid length. [ 222.210332][T10315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1005'. [ 222.231520][T10312] geneve2: entered promiscuous mode [ 222.231545][T10312] geneve2: entered allmulticast mode [ 222.280914][T10315] erspan0: entered promiscuous mode [ 222.291700][T10315] gretap0: entered promiscuous mode [ 222.299625][T10315] erspan0: left promiscuous mode [ 222.310785][T10315] gretap0: left promiscuous mode [ 222.383383][T10319] tipc: Enabling of bearer rejected, failed to enable media [ 222.385218][ T1460] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 33635 - 0 [ 222.385262][ T1460] net_ratelimit: 55 callbacks suppressed [ 222.385274][ T1460] bond2: (slave gretap1): failed to get link speed/duplex [ 222.386233][ T1460] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 33635 - 0 [ 222.386265][ T1460] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 33635 - 0 [ 222.386294][ T1460] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 33635 - 0 [ 222.493244][ T1460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.493268][ T1460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.524725][ T9975] bond2: (slave gretap1): failed to get link speed/duplex [ 222.556023][ T9975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.556048][ T9975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.559644][T10328] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1010'. [ 222.559758][T10328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.600864][T10328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.643586][T10327] netlink: 'syz.5.1011': attribute type 6 has an invalid length. [ 222.715764][ T1460] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.715821][ T1460] bond2: (slave gretap1): failed to get link speed/duplex [ 222.715889][ T1460] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.715938][ T1460] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.715970][ T1460] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.829265][ T1460] bond2: (slave gretap1): failed to get link speed/duplex [ 222.995185][ T6405] bond2: (slave gretap1): failed to get link speed/duplex [ 223.105281][ T9965] bond2: (slave gretap1): failed to get link speed/duplex [ 223.225613][T10361] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.339278][T10373] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 223.438642][T10377] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 223.505629][T10375] syzkaller0: entered promiscuous mode [ 223.505658][T10375] syzkaller0: entered allmulticast mode [ 225.675225][ T1460] bond2: (slave gretap1): failed to get link speed/duplex [ 225.714947][T10393] bridge2: entered allmulticast mode [ 225.717106][T10396] ip6tnl0: entered promiscuous mode [ 225.884667][ T1460] bond2: (slave gretap1): failed to get link speed/duplex [ 226.151008][T10417] netlink: 'syz.1.1028': attribute type 4 has an invalid length. [ 226.151764][T10417] netlink: 'syz.1.1028': attribute type 4 has an invalid length. [ 226.241043][T10417] netlink: 'syz.1.1028': attribute type 4 has an invalid length. [ 226.243806][T10425] netlink: 'syz.1.1028': attribute type 4 has an invalid length. [ 226.415779][T10429] sctp: [Deprecated]: syz.4.1029 (pid 10429) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.415779][T10429] Use struct sctp_sack_info instead [ 226.419425][T10429] __nla_validate_parse: 5 callbacks suppressed [ 226.419445][T10429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1029'. [ 226.419462][T10429] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1029'. [ 226.419476][T10429] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1029'. [ 227.191414][T10442] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1032'. [ 227.342734][T10447] netlink: 'syz.4.1035': attribute type 12 has an invalid length. [ 227.448848][T10447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1035'. [ 227.465183][T10455] net_ratelimit: 13 callbacks suppressed [ 227.465205][T10455] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 227.707049][ T1460] bond2: (slave gretap1): failed to get link speed/duplex [ 227.826080][ T9961] bond2: (slave gretap1): failed to get link speed/duplex [ 227.935333][ T9961] bond2: (slave gretap1): failed to get link speed/duplex [ 228.048738][ T9965] bond2: (slave gretap1): failed to get link speed/duplex [ 228.154779][ T9965] bond2: (slave gretap1): failed to get link speed/duplex [ 228.271622][ T9965] bond2: (slave gretap1): failed to get link speed/duplex [ 228.376864][ T9975] bond2: (slave gretap1): failed to get link speed/duplex [ 228.511237][T10490] netlink: 'syz.1.1049': attribute type 1 has an invalid length. [ 228.551387][T10490] 8021q: adding VLAN 0 to HW filter on device bond6 [ 228.554632][ T9961] bond2: (slave gretap1): failed to get link speed/duplex [ 228.577790][T10490] bond6: (slave veth0_to_bond): making interface the new active one [ 228.581446][T10490] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 228.700090][T10498] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1049'. [ 229.148809][T10490] bond6: entered promiscuous mode [ 229.148831][T10490] veth0_to_bond: entered promiscuous mode [ 229.149019][T10490] bond6: entered allmulticast mode [ 229.149028][T10490] veth0_to_bond: entered allmulticast mode [ 229.193069][T10506] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1047'. [ 229.193095][T10506] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1047'. [ 229.193112][T10506] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1047'. [ 229.219003][T10498] macvlan2: entered promiscuous mode [ 229.219026][T10498] macvlan2: entered allmulticast mode [ 229.222788][T10498] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 229.237812][T10498] bond6: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 229.307802][ T9975] bond2: (slave gretap1): failed to get link speed/duplex [ 229.444443][T10508] ipvlan2: entered allmulticast mode [ 229.444467][T10508] macvlan1: entered allmulticast mode [ 229.444480][T10508] veth1_vlan: entered allmulticast mode [ 229.452240][T10508] batman_adv: batadv0: Adding interface: ipvlan2 [ 229.452260][T10508] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.452288][T10508] batman_adv: batadv0: Interface activated: ipvlan2 [ 229.657735][T10521] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1055'. [ 229.849738][T10527] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 230.418607][T10552] netlink: 'syz.6.1062': attribute type 4 has an invalid length. [ 230.486892][T10554] x_tables: duplicate entry at hook 1 [ 230.676955][T10562] IPVS: length: 77 != 24 [ 230.707590][T10566] netlink: 'syz.6.1063': attribute type 1 has an invalid length. [ 230.728507][T10568] syzkaller1: entered promiscuous mode [ 230.728525][T10568] syzkaller1: entered allmulticast mode [ 231.111112][T10542] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 231.500171][T10586] __nla_validate_parse: 2 callbacks suppressed [ 231.500198][T10586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1069'. [ 231.537483][T10589] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1073'. [ 231.570415][T10594] netlink: 'syz.5.1073': attribute type 3 has an invalid length. [ 231.570439][T10594] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1073'. [ 233.720479][ T5624] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 233.733359][ T5624] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 233.739605][ T5624] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 233.742623][ T5624] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 233.743845][ T5624] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 234.296049][ T9975] net_ratelimit: 17 callbacks suppressed [ 234.296075][ T9975] bond2: (slave gretap1): failed to get link speed/duplex [ 234.408352][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 234.515150][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 234.554790][T10626] FAULT_INJECTION: forcing a failure. [ 234.554790][T10626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.554826][T10626] CPU: 0 UID: 0 PID: 10626 Comm: syz.6.1081 Not tainted syzkaller #0 PREEMPT(full) [ 234.554847][T10626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 234.554858][T10626] Call Trace: [ 234.554865][T10626] [ 234.554873][T10626] dump_stack_lvl+0xe8/0x150 [ 234.554907][T10626] should_fail_ex+0x410/0x560 [ 234.554934][T10626] _copy_from_user+0x2d/0xb0 [ 234.554959][T10626] copy_bpf_fprog_from_user+0x179/0x2c0 [ 234.554993][T10626] ? __pfx_copy_bpf_fprog_from_user+0x10/0x10 [ 234.555020][T10626] ? sk_setsockopt+0xe6c/0x2f10 [ 234.555054][T10626] sk_setsockopt+0x25fb/0x2f10 [ 234.555081][T10626] ? __pfx_sk_setsockopt+0x10/0x10 [ 234.555104][T10626] ? __lock_acquire+0x747/0x2de0 [ 234.555124][T10626] ? __pfx_aa_unix_opt_perm+0x10/0x10 [ 234.555171][T10626] ? lock_acquire+0x115/0x350 [ 234.555194][T10626] unix_setsockopt+0x15f/0x340 [ 234.555223][T10626] ? __pfx_unix_setsockopt+0x10/0x10 [ 234.555255][T10626] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 234.555278][T10626] ? __pfx_unix_setsockopt+0x10/0x10 [ 234.555307][T10626] do_sock_setsockopt+0x17c/0x1b0 [ 234.555340][T10626] __x64_sys_setsockopt+0x13d/0x1b0 [ 234.555370][T10626] do_syscall_64+0x166/0x520 [ 234.555392][T10626] ? trace_irq_disable+0x3b/0x140 [ 234.555411][T10626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.555430][T10626] ? clear_bhb_loop+0x70/0xc0 [ 234.555454][T10626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.555470][T10626] RIP: 0033:0x7f9baff9e159 [ 234.555488][T10626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.555521][T10626] RSP: 002b:00007f9bb0e4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 234.555542][T10626] RAX: ffffffffffffffda RBX: 00007f9bb0225fa0 RCX: 00007f9baff9e159 [ 234.555556][T10626] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 234.555567][T10626] RBP: 00007f9bb0e4d090 R08: 0000000000000010 R09: 0000000000000000 [ 234.555579][T10626] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 234.555591][T10626] R13: 00007f9bb0226038 R14: 00007f9bb0225fa0 R15: 00007ffe140c66b8 [ 234.555623][T10626] [ 234.572740][T10625] xt_hashlimit: size too large, truncated to 1048576 [ 234.636049][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 234.765453][ T9975] bond2: (slave gretap1): failed to get link speed/duplex [ 234.875935][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 234.987497][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 235.094426][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 235.404755][T10642] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.431901][ T152] nci: nci_ntf_packet: unsupported ntf opcode 0xf0b [ 235.524741][ T152] bond2: (slave gretap1): failed to get link speed/duplex [ 235.612741][T10642] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.741849][T10642] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.784516][ T5624] Bluetooth: hci7: command tx timeout [ 235.786123][ T9975] bond2: (slave gretap1): failed to get link speed/duplex [ 235.842097][T10642] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.957563][T10607] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.957638][T10607] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.957733][T10607] bridge_slave_0: entered allmulticast mode [ 235.959190][T10607] bridge_slave_0: entered promiscuous mode [ 235.965693][T10607] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.966065][T10607] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.966230][T10607] bridge_slave_1: entered allmulticast mode [ 235.971368][T10607] bridge_slave_1: entered promiscuous mode [ 236.037733][T10607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.043821][T10607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.103804][T10607] team0: Port device team_slave_0 added [ 236.104383][ T9975] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.104622][ T9975] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.104697][ T9975] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.104726][ T9975] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.123048][T10607] team0: Port device team_slave_1 added [ 236.155043][T10647] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 236.313493][T10607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.313513][T10607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.313538][T10607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.329320][T10607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.329337][T10607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.329360][T10607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.474530][T10678] FAULT_INJECTION: forcing a failure. [ 236.474530][T10678] name failslab, interval 1, probability 0, space 0, times 0 [ 236.474565][T10678] CPU: 0 UID: 0 PID: 10678 Comm: syz.1.1093 Not tainted syzkaller #0 PREEMPT(full) [ 236.474588][T10678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.474600][T10678] Call Trace: [ 236.474608][T10678] [ 236.474618][T10678] dump_stack_lvl+0xe8/0x150 [ 236.474653][T10678] should_fail_ex+0x410/0x560 [ 236.474682][T10678] should_failslab+0xa8/0x100 [ 236.474710][T10678] __kmalloc_cache_node_noprof+0xaa/0x620 [ 236.474735][T10678] ? __get_vm_area_node+0x155/0x2f0 [ 236.474760][T10678] ? __get_vm_area_node+0x155/0x2f0 [ 236.474794][T10678] __get_vm_area_node+0x155/0x2f0 [ 236.474828][T10678] __vmalloc_node_range_noprof+0x343/0x1540 [ 236.474859][T10678] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 236.474884][T10678] ? __lock_acquire+0x747/0x2de0 [ 236.474933][T10678] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 236.474962][T10678] ? lock_acquire+0x115/0x350 [ 236.474994][T10678] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 236.475016][T10678] __vmalloc_noprof+0xd2/0x120 [ 236.475044][T10678] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 236.475071][T10678] bpf_prog_alloc_no_stats+0x47/0x560 [ 236.475091][T10678] ? bpf_prog_alloc+0x2a/0x1a0 [ 236.475116][T10678] bpf_prog_alloc+0x3c/0x1a0 [ 236.475142][T10678] __get_filter+0xf2/0x420 [ 236.475169][T10678] sk_attach_filter+0x24/0x140 [ 236.475191][T10678] sk_setsockopt+0x2635/0x2f10 [ 236.475221][T10678] ? __pfx_sk_setsockopt+0x10/0x10 [ 236.475242][T10678] ? __lock_acquire+0x747/0x2de0 [ 236.475263][T10678] ? __pfx_aa_unix_opt_perm+0x10/0x10 [ 236.475324][T10678] ? lock_acquire+0x115/0x350 [ 236.475348][T10678] unix_setsockopt+0x15f/0x340 [ 236.475380][T10678] ? __pfx_unix_setsockopt+0x10/0x10 [ 236.475410][T10678] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 236.475435][T10678] ? __pfx_unix_setsockopt+0x10/0x10 [ 236.475464][T10678] do_sock_setsockopt+0x17c/0x1b0 [ 236.475494][T10678] __x64_sys_setsockopt+0x13d/0x1b0 [ 236.475526][T10678] do_syscall_64+0x166/0x520 [ 236.475551][T10678] ? trace_irq_disable+0x3b/0x140 [ 236.475571][T10678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.475596][T10678] ? clear_bhb_loop+0x70/0xc0 [ 236.475620][T10678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.475641][T10678] RIP: 0033:0x7f3f2979e159 [ 236.475661][T10678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.475678][T10678] RSP: 002b:00007f3f2a69c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 236.475701][T10678] RAX: ffffffffffffffda RBX: 00007f3f29a25fa0 RCX: 00007f3f2979e159 [ 236.475716][T10678] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 236.475729][T10678] RBP: 00007f3f2a69c090 R08: 0000000000000010 R09: 0000000000000000 [ 236.475740][T10678] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 236.475753][T10678] R13: 00007f3f29a26038 R14: 00007f3f29a25fa0 R15: 00007ffd0e6a21a8 [ 236.475787][T10678] [ 236.480609][T10678] syz.1.1093: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 236.480800][T10678] CPU: 0 UID: 0 PID: 10678 Comm: syz.1.1093 Not tainted syzkaller #0 PREEMPT(full) [ 236.480822][T10678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.480834][T10678] Call Trace: [ 236.480843][T10678] [ 236.480852][T10678] dump_stack_lvl+0xe8/0x150 [ 236.480886][T10678] warn_alloc+0x24d/0x270 [ 236.480907][T10678] ? __kasan_kmalloc+0x22/0xb0 [ 236.480934][T10678] ? __pfx_warn_alloc+0x10/0x10 [ 236.480954][T10678] ? __get_vm_area_node+0x155/0x2f0 [ 236.480988][T10678] ? __get_vm_area_node+0x2a9/0x2f0 [ 236.481022][T10678] __vmalloc_node_range_noprof+0x36b/0x1540 [ 236.481053][T10678] ? __lock_acquire+0x747/0x2de0 [ 236.481102][T10678] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 236.481129][T10678] ? lock_acquire+0x115/0x350 [ 236.481161][T10678] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 236.481183][T10678] __vmalloc_noprof+0xd2/0x120 [ 236.481211][T10678] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 236.481237][T10678] bpf_prog_alloc_no_stats+0x47/0x560 [ 236.481258][T10678] ? bpf_prog_alloc+0x2a/0x1a0 [ 236.481283][T10678] bpf_prog_alloc+0x3c/0x1a0 [ 236.481317][T10678] __get_filter+0xf2/0x420 [ 236.481344][T10678] sk_attach_filter+0x24/0x140 [ 236.481368][T10678] sk_setsockopt+0x2635/0x2f10 [ 236.481402][T10678] ? __pfx_sk_setsockopt+0x10/0x10 [ 236.481425][T10678] ? __lock_acquire+0x747/0x2de0 [ 236.481444][T10678] ? __pfx_aa_unix_opt_perm+0x10/0x10 [ 236.481492][T10678] ? lock_acquire+0x115/0x350 [ 236.481517][T10678] unix_setsockopt+0x15f/0x340 [ 236.481548][T10678] ? __pfx_unix_setsockopt+0x10/0x10 [ 236.481577][T10678] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 236.481600][T10678] ? __pfx_unix_setsockopt+0x10/0x10 [ 236.481630][T10678] do_sock_setsockopt+0x17c/0x1b0 [ 236.481661][T10678] __x64_sys_setsockopt+0x13d/0x1b0 [ 236.481690][T10678] do_syscall_64+0x166/0x520 [ 236.481713][T10678] ? trace_irq_disable+0x3b/0x140 [ 236.481732][T10678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.481752][T10678] ? clear_bhb_loop+0x70/0xc0 [ 236.481776][T10678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.481795][T10678] RIP: 0033:0x7f3f2979e159 [ 236.481813][T10678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.481830][T10678] RSP: 002b:00007f3f2a69c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 236.481851][T10678] RAX: ffffffffffffffda RBX: 00007f3f29a25fa0 RCX: 00007f3f2979e159 [ 236.481864][T10678] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 236.481876][T10678] RBP: 00007f3f2a69c090 R08: 0000000000000010 R09: 0000000000000000 [ 236.481888][T10678] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 236.481900][T10678] R13: 00007f3f29a26038 R14: 00007f3f29a25fa0 R15: 00007ffd0e6a21a8 [ 236.481934][T10678] [ 236.491733][T10678] Mem-Info: [ 236.491749][T10678] active_anon:7227 inactive_anon:0 isolated_anon:0 [ 236.491749][T10678] active_file:0 inactive_file:43423 isolated_file:0 [ 236.491749][T10678] unevictable:0 dirty:135 writeback:0 [ 236.491749][T10678] slab_reclaimable:11317 slab_unreclaimable:111344 [ 236.491749][T10678] mapped:44892 shmem:682 pagetables:1408 [ 236.491749][T10678] sec_pagetables:0 bounce:0 [ 236.491749][T10678] kernel_misc_reclaimable:0 [ 236.491749][T10678] free:1272159 free_pcp:10733 free_cma:0 [ 236.491795][T10678] Node 0 active_anon:28908kB inactive_anon:0kB active_file:0kB inactive_file:173488kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:179568kB dirty:536kB writeback:0kB shmem:2728kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15296kB pagetables:5444kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 236.491841][T10678] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 236.491884][T10678] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 236.491934][T10678] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 236.491969][T10678] Node 0 DMA32 free:1132492kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:28908kB inactive_anon:0kB active_file:0kB inactive_file:173488kB unevictable:0kB writepending:536kB zspages:0kB present:3129332kB managed:2546940kB mlocked:0kB bounce:0kB free_pcp:41928kB local_pcp:18584kB free_cma:0kB [ 236.492019][T10678] lowmem_reserve[]: 0 0 0 0 0 [ 236.492051][T10678] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 236.492129][T10678] lowmem_reserve[]: 0 0 0 0 0 [ 236.492162][T10678] Node 1 Normal free:3940784kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:1004kB local_pcp:0kB free_cma:0kB [ 236.492211][T10678] lowmem_reserve[]: 0 0 0 0 0 [ 236.492243][T10678] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 236.492386][T10678] Node 0 DMA32: 2*4kB (UE) 442*8kB (UME) 103*16kB (UME) 336*32kB (UME) 108*64kB (UME) 51*128kB (UM) 59*256kB (UM) 15*512kB (UM) 7*1024kB (UM) 4*2048kB (ME) 260*4096kB (UM) = 1132488kB [ 236.492533][T10678] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 236.492622][T10678] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 1*64kB (M) 2*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 961*4096kB (M) = 3940784kB [ 236.492761][T10678] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 236.492775][T10678] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 236.492789][T10678] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 236.492803][T10678] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 236.492817][T10678] 44101 total pagecache pages [ 236.492824][T10678] 0 pages in swap cache [ 236.492831][T10678] Free swap = 124996kB [ 236.492837][T10678] Total swap = 124996kB [ 236.492845][T10678] 2097051 pages RAM [ 236.492851][T10678] 0 pages HighMem/MovableOnly [ 236.492858][T10678] 428700 pages reserved [ 236.496865][T10678] 0 pages cma reserved [ 236.761932][T10607] hsr_slave_0: entered promiscuous mode [ 236.768445][T10607] hsr_slave_1: entered promiscuous mode [ 236.769187][T10607] debugfs: 'hsr0' already exists in 'hsr' [ 236.769205][T10607] Cannot create hsr debugfs directory [ 236.945688][T10692] netlink: 'syz.4.1098': attribute type 1 has an invalid length. [ 237.006545][T10694] netlink: 'syz.4.1098': attribute type 1 has an invalid length. [ 237.549918][T10706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1101'. [ 237.679592][T10708] netlink: 'syz.5.1101': attribute type 1 has an invalid length. [ 237.679611][T10708] netlink: 200 bytes leftover after parsing attributes in process `syz.5.1101'. [ 237.679620][T10708] netlink: 'syz.5.1101': attribute type 1 has an invalid length. [ 237.679627][T10708] netlink: 29 bytes leftover after parsing attributes in process `syz.5.1101'. [ 237.839086][T10720] netlink: 'syz.5.1105': attribute type 4 has an invalid length. [ 237.842269][T10723] x_tables: duplicate underflow at hook 1 [ 237.864480][ T5624] Bluetooth: hci7: command tx timeout [ 237.880553][T10720] netlink: 'syz.5.1105': attribute type 4 has an invalid length. [ 237.900531][T10725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1103'. [ 237.902253][T10726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1103'. [ 238.281542][T10732] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1107'. [ 238.305137][T10735] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1107'. [ 238.452779][T10743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1109'. [ 238.452807][T10743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1109'. [ 238.454819][T10741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1109'. [ 239.267847][T10759] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 239.269087][T10759] bond3 (unregistering): Released all slaves [ 239.344874][ T63] net_ratelimit: 21 callbacks suppressed [ 239.344900][ T63] bond2: (slave gretap1): failed to get link speed/duplex [ 239.454357][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 239.565568][ T9975] bond2: (slave gretap1): failed to get link speed/duplex [ 239.676921][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 239.796276][ T63] bond2: (slave gretap1): failed to get link speed/duplex [ 239.904291][ T1460] bond2: (slave gretap1): failed to get link speed/duplex [ 239.934709][ T5624] Bluetooth: hci7: command tx timeout [ 240.014902][ T63] bond2: (slave gretap1): failed to get link speed/duplex [ 240.125490][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 240.234682][ T1460] bond2: (slave gretap1): failed to get link speed/duplex [ 240.344351][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 240.622907][T10711] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 240.630799][T10729] netlink: 'syz.6.1106': attribute type 23 has an invalid length. [ 240.674439][T10607] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 240.705552][T10607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 240.706551][T10607] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 240.806330][T10607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 240.813740][T10607] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 240.845770][T10607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 240.853755][T10607] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 240.886454][T10607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 241.064481][T10772] xt_CT: No such helper "netbios-ns" [ 241.067793][T10784] bond0 (unregistering): (slave bridge2): Releasing backup interface [ 241.073621][T10784] bond0 (unregistering): Released all slaves [ 241.381012][T10607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.436338][T10607] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.479836][ T1460] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.479965][ T1460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.509420][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.509544][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.568001][T10799] netlink: 'syz.5.1123': attribute type 15 has an invalid length. [ 241.568024][T10799] netlink: 'syz.5.1123': attribute type 7 has an invalid length. [ 242.016780][ T5624] Bluetooth: hci7: command tx timeout [ 244.609918][T10808] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.611984][T10808] bridge0: port 1(1¾x9ÿ) entered disabled state [ 244.783001][T10808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.783064][T10808] batadv_slave_0: left allmulticast mode [ 244.801720][T10808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.283637][T10812] __nla_validate_parse: 7 callbacks suppressed [ 245.283661][T10812] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1127'. [ 245.295276][ T63] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.295310][ T63] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.295332][ T63] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 46223 - 0 [ 245.295610][ T63] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.295633][ T63] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.295654][ T63] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 46223 - 0 [ 245.295895][ T63] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.295918][ T63] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.295938][ T63] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 46223 - 0 [ 245.296448][ T63] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.296471][ T63] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.296492][ T63] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 46223 - 0 [ 245.700082][T10845] tun0: tun_chr_ioctl cmd 1074025677 [ 245.700198][T10845] tun0: linktype set to 776 [ 245.723510][T10845] netlink: 564 bytes leftover after parsing attributes in process `syz.1.1132'. [ 245.782340][T10849] sctp: [Deprecated]: syz.5.1131 (pid 10849) Use of int in maxseg socket option. [ 245.782340][T10849] Use struct sctp_assoc_value instead [ 245.818713][T10853] sctp: [Deprecated]: syz.4.1133 (pid 10853) Use of int in max_burst socket option. [ 245.818713][T10853] Use struct sctp_assoc_value instead [ 246.347600][T10874] netlink: 'syz.4.1136': attribute type 2 has an invalid length. [ 246.376837][T10874] : entered promiscuous mode [ 246.402208][T10607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.020773][T10901] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1140'. [ 247.169525][T10907] vlan1: entered promiscuous mode [ 247.169551][T10907] macvlan0: entered promiscuous mode [ 247.371668][T10607] veth0_vlan: entered promiscuous mode [ 247.410585][T10607] veth1_vlan: entered promiscuous mode [ 247.579626][T10607] veth0_macvtap: entered promiscuous mode [ 247.630700][T10607] veth1_macvtap: entered promiscuous mode [ 247.691000][T10607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.722457][T10607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.803111][T10909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1142'. [ 247.835410][ T6410] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.840599][ T9975] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.841004][ T9975] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.841083][ T9975] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.905939][T10903] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 248.129805][ T1460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.129829][ T1460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.226523][T10916] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1144'. [ 248.230174][ T9975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.230198][ T9975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.262096][T10916] netlink: 'syz.4.1144': attribute type 11 has an invalid length. [ 248.357627][T10923] xt_l2tp: invalid flags combination: 8 [ 248.360598][T10924] xt_l2tp: invalid flags combination: 8 [ 248.404423][T10925] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1145'. [ 248.427233][T10915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.546613][T10925] ip6tnl0: left promiscuous mode [ 248.572720][T10925] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.573556][T10925] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.682226][T10925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.721186][T10925] veth1_vlan: left allmulticast mode [ 248.753285][T10925] bridge1: left promiscuous mode [ 248.760201][T10925] gre1: left allmulticast mode [ 248.761940][T10925] bond1: left promiscuous mode [ 248.761955][T10925] wireguard0: left promiscuous mode [ 248.783853][T10925] geneve2: left promiscuous mode [ 248.783874][T10925] geneve2: left allmulticast mode [ 248.798565][T10925] bond3: left promiscuous mode [ 248.799428][T10925] bond4: left promiscuous mode [ 248.802346][T10925] bridge2: left allmulticast mode [ 248.803986][T10925] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 248.828080][T10925] ipvlan2: left allmulticast mode [ 248.828098][T10925] macvlan1: left allmulticast mode [ 249.104404][ T63] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.115754][ T63] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.115802][ T63] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.115831][ T63] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.163380][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1148'. [ 249.214625][ T5624] Bluetooth: hci0: command 0x0c20 tx timeout [ 249.273278][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1148'. [ 249.649171][T10966] ip6t_rpfilter: unknown options [ 250.134454][ T9975] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.278151][T10995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1160'. [ 250.509484][T11006] netlink: 'syz.1.1165': attribute type 4 has an invalid length. [ 250.509509][T11006] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1165'. [ 250.635583][T11011] netlink: 'syz.7.1167': attribute type 2 has an invalid length. [ 250.642319][T10997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1160'. [ 250.738182][T11014] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 250.861862][T11017] netlink: 4412 bytes leftover after parsing attributes in process `syz.7.1169'. [ 250.923515][T11020] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1170'. [ 251.882193][T11061] bridge0: port 3(veth0_to_team) entered blocking state [ 251.882312][T11061] bridge0: port 3(veth0_to_team) entered disabled state [ 251.884840][T11061] veth0_to_team: entered allmulticast mode [ 251.893682][T11061] veth0_to_team: entered promiscuous mode [ 252.358562][T11088] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1191'. [ 252.358606][T11088] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1191'. [ 252.361553][T11092] FAULT_INJECTION: forcing a failure. [ 252.361553][T11092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.361595][T11092] CPU: 0 UID: 0 PID: 11092 Comm: syz.6.1189 Not tainted syzkaller #0 PREEMPT(full) [ 252.361618][T11092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.361631][T11092] Call Trace: [ 252.361640][T11092] [ 252.361649][T11092] dump_stack_lvl+0xe8/0x150 [ 252.361685][T11092] should_fail_ex+0x410/0x560 [ 252.361715][T11092] _copy_from_user+0x2d/0xb0 [ 252.361746][T11092] kstrtouint_from_user+0xd6/0x180 [ 252.361772][T11092] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 252.361805][T11092] ? lock_acquire+0x115/0x350 [ 252.361833][T11092] proc_fail_nth_write+0x8e/0x210 [ 252.361854][T11092] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 252.361885][T11092] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 252.361905][T11092] vfs_write+0x296/0xba0 [ 252.361946][T11092] ? __pfx_vfs_write+0x10/0x10 [ 252.361978][T11092] ? __fget_files+0x2a/0x420 [ 252.362012][T11092] ? __fget_files+0x3a2/0x420 [ 252.362038][T11092] ? __fget_files+0x2a/0x420 [ 252.362075][T11092] ksys_write+0x150/0x270 [ 252.362106][T11092] ? __pfx_ksys_write+0x10/0x10 [ 252.362150][T11092] do_syscall_64+0x166/0x520 [ 252.362174][T11092] ? trace_irq_disable+0x3b/0x140 [ 252.362195][T11092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.362216][T11092] ? clear_bhb_loop+0x70/0xc0 [ 252.362243][T11092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.362263][T11092] RIP: 0033:0x7f9baff5e98e [ 252.362284][T11092] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 252.362301][T11092] RSP: 002b:00007f9bb0e4cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 252.362325][T11092] RAX: ffffffffffffffda RBX: 00007f9bb0e4d6c0 RCX: 00007f9baff5e98e [ 252.362339][T11092] RDX: 0000000000000001 RSI: 00007f9bb0e4d0a0 RDI: 0000000000000004 [ 252.362353][T11092] RBP: 00007f9bb0e4d090 R08: 0000000000000000 R09: 0000000000000000 [ 252.362365][T11092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.362378][T11092] R13: 00007f9bb0226038 R14: 00007f9bb0225fa0 R15: 00007ffe140c66b8 [ 252.362413][T11092] [ 252.686345][T11108] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1193'. [ 253.078176][T11125] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1197'. [ 253.101191][T11125] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.101598][T11125] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.472937][T11142] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1204'. [ 253.472963][T11142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1204'. [ 253.708092][T11150] syzkaller0: entered promiscuous mode [ 253.708199][T11150] syzkaller0: entered allmulticast mode [ 254.028686][T11164] netlink: 'syz.5.1212': attribute type 1 has an invalid length. [ 254.087458][T11172] netlink: 'syz.5.1212': attribute type 1 has an invalid length. [ 254.118269][T11168] netlink: 'syz.4.1214': attribute type 9 has an invalid length. [ 254.646862][T11205] syzkaller0: entered promiscuous mode [ 254.646888][T11205] syzkaller0: entered allmulticast mode [ 254.670218][T11203] tipc: Started in network mode [ 254.670237][T11203] tipc: Node identity , cluster identity 4711 [ 254.670250][T11203] tipc: Failed to obtain node identity [ 254.670278][T11203] tipc: Enabling of bearer rejected, failed to enable media [ 254.819143][T11199] netlink: 'syz.4.1223': attribute type 39 has an invalid length. [ 254.936583][T11199] bond0: (slave syz_tun): Releasing backup interface [ 255.127483][T11224] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 255.338154][T11230] net_ratelimit: 5 callbacks suppressed [ 255.338179][T11230] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 255.795607][T11246] netlink: 'syz.6.1234': attribute type 1 has an invalid length. [ 255.889778][T11246] 8021q: adding VLAN 0 to HW filter on device bond5 [ 255.919542][T11252] __nla_validate_parse: 5 callbacks suppressed [ 255.919565][T11252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1235'. [ 255.938253][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.960378][T11244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1233'. [ 255.982999][T11252] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 256.003151][T11248] bond5: (slave veth3): Enslaving as an active interface with a down link [ 256.022975][T11246] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 256.031199][T11246] bond5: (slave batadv1): making interface the new active one [ 256.032558][T11246] batadv1: entered promiscuous mode [ 256.039005][T11246] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 256.089385][T11254] batman_adv: batadv0: Adding interface: syzkaller0 [ 256.089406][T11254] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.089437][T11254] batman_adv: batadv0: Interface activated: syzkaller0 [ 256.183412][T11254] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 256.251893][T11257] sctp: [Deprecated]: syz.6.1237 (pid 11257) Use of int in maxseg socket option. [ 256.251893][T11257] Use struct sctp_assoc_value instead [ 256.292899][T11254] batman_adv: batadv0: Removing interface: syzkaller0 [ 256.374617][T11257] netlink: 'syz.6.1237': attribute type 7 has an invalid length. [ 256.610756][T11273] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1242'. [ 256.610924][T11273] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1242'. [ 256.611081][T11273] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1242'. [ 256.611251][T11273] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1242'. [ 256.611394][T11273] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1242'. [ 256.611560][T11273] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1242'. [ 256.611711][T11273] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1242'. [ 256.611861][T11273] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1242'. [ 256.929768][T11286] x_tables: duplicate underflow at hook 3 [ 257.150587][T11296] No such timeout policy "s " [ 257.150607][T11296] netlink: Failed to associated timeout policy 's ' [ 257.471618][T11319] netlink: 'syz.6.1251': attribute type 1 has an invalid length. [ 257.471643][T11319] netlink: 'syz.6.1251': attribute type 2 has an invalid length. [ 257.483301][T11319] netlink: 'syz.6.1251': attribute type 1 has an invalid length. [ 257.483322][T11319] netlink: 'syz.6.1251': attribute type 2 has an invalid length. [ 257.932329][T11334] tipc: Started in network mode [ 257.932362][T11334] tipc: Node identity a648f8805174, cluster identity 4711 [ 257.947339][T11334] tipc: Enabled bearer , priority 1 [ 259.386730][T11400] xt_socket: unknown flags 0x8 [ 259.392369][T11332] tipc: Resetting bearer [ 259.420351][T11332] tipc: Disabling bearer [ 259.450196][ T5708] tipc: Node number set to 4147968128 [ 259.522105][T11398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.781884][T11415] x_tables: duplicate underflow at hook 2 [ 259.783317][T11412] syzkaller0: entered promiscuous mode [ 259.783338][T11412] syzkaller0: entered allmulticast mode [ 259.920121][T11420] netlink: 'syz.6.1265': attribute type 10 has an invalid length. [ 260.279212][T11443] netlink: 'syz.7.1268': attribute type 15 has an invalid length. [ 260.307598][T11443] netlink: 'syz.7.1268': attribute type 15 has an invalid length. [ 260.317092][ T9975] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 260.319113][ T12] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 260.319148][ T12] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 260.459698][T11450] netlink: 'syz.5.1269': attribute type 5 has an invalid length. [ 260.548751][T11456] netlink: 'syz.5.1269': attribute type 5 has an invalid length. [ 260.661145][T11466] tc_dump_action: action bad kind [ 260.801764][T11468] tc_dump_action: action bad kind [ 260.932504][T11482] __nla_validate_parse: 75 callbacks suppressed [ 260.932527][T11482] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1273'. [ 261.015180][T11490] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1274'. [ 261.121987][T11478] erspan1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 261.304978][T11496] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1277'. [ 261.526188][T11501] syzkaller0: entered promiscuous mode [ 261.526213][T11501] syzkaller0: entered allmulticast mode [ 261.629033][T11498] syzkaller0: entered promiscuous mode [ 261.629058][T11498] syzkaller0: entered allmulticast mode [ 261.821313][T11522] syzkaller0: entered promiscuous mode [ 261.821339][T11522] syzkaller0: entered allmulticast mode [ 261.922633][T11527] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1285'. [ 261.923311][T11527] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1285'. [ 262.092587][T11541] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1289'. [ 262.198788][T11552] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1290'. [ 262.330088][T11561] netlink: 'syz.5.1294': attribute type 7 has an invalid length. [ 262.330113][T11561] netlink: 'syz.5.1294': attribute type 8 has an invalid length. [ 262.359752][T11562] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1293'. [ 262.359783][T11562] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1293'. [ 262.404848][T11565] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1294'. [ 262.919777][T11585] netlink: 'syz.6.1302': attribute type 5 has an invalid length. [ 262.922098][T11586] IPVS: length: 77 != 24 [ 263.149331][T11590] syzkaller0: entered promiscuous mode [ 263.149359][T11590] syzkaller0: entered allmulticast mode [ 263.914021][T11613] FAULT_INJECTION: forcing a failure. [ 263.914021][T11613] name failslab, interval 1, probability 0, space 0, times 0 [ 263.914229][T11613] CPU: 0 UID: 0 PID: 11613 Comm: syz.7.1308 Not tainted syzkaller #0 PREEMPT(full) [ 263.914254][T11613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 263.914266][T11613] Call Trace: [ 263.914275][T11613] [ 263.914285][T11613] dump_stack_lvl+0xe8/0x150 [ 263.914321][T11613] should_fail_ex+0x410/0x560 [ 263.914347][T11613] should_failslab+0xa8/0x100 [ 263.914373][T11613] __kmalloc_cache_noprof+0xa3/0x600 [ 263.914405][T11613] ? __sk_attach_prog+0x52/0x430 [ 263.914424][T11613] ? __sk_attach_prog+0x52/0x430 [ 263.914441][T11613] ? kmemdup_noprof+0x55/0x70 [ 263.914465][T11613] __sk_attach_prog+0x52/0x430 [ 263.914487][T11613] sk_attach_filter+0x4a/0x140 [ 263.914508][T11613] sk_setsockopt+0x2635/0x2f10 [ 263.914537][T11613] ? __pfx_sk_setsockopt+0x10/0x10 [ 263.914559][T11613] ? __lock_acquire+0x747/0x2de0 [ 263.914580][T11613] ? __pfx_aa_unix_opt_perm+0x10/0x10 [ 263.914626][T11613] ? lock_acquire+0x115/0x350 [ 263.914650][T11613] unix_setsockopt+0x15f/0x340 [ 263.914671][T11613] ? __pfx_unix_setsockopt+0x10/0x10 [ 263.914689][T11613] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 263.914703][T11613] ? __pfx_unix_setsockopt+0x10/0x10 [ 263.914724][T11613] do_sock_setsockopt+0x17c/0x1b0 [ 263.914742][T11613] __x64_sys_setsockopt+0x13d/0x1b0 [ 263.914760][T11613] do_syscall_64+0x166/0x520 [ 263.914773][T11613] ? trace_irq_disable+0x3b/0x140 [ 263.914785][T11613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.914797][T11613] ? clear_bhb_loop+0x70/0xc0 [ 263.914811][T11613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.914822][T11613] RIP: 0033:0x7f5bb4b9e159 [ 263.914836][T11613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.914845][T11613] RSP: 002b:00007f5bb5aaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 263.914860][T11613] RAX: ffffffffffffffda RBX: 00007f5bb4e25fa0 RCX: 00007f5bb4b9e159 [ 263.914869][T11613] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 263.914877][T11613] RBP: 00007f5bb5aaa090 R08: 0000000000000010 R09: 0000000000000000 [ 263.914886][T11613] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000002 [ 263.914896][T11613] R13: 00007f5bb4e26038 R14: 00007f5bb4e25fa0 R15: 00007ffe70259d88 [ 263.914924][T11613] [ 265.847542][T11600] kthread_run failed with err -4 [ 266.017191][T11619] netlink: 'syz.1.1311': attribute type 12 has an invalid length. [ 266.017216][T11619] netlink: 'syz.1.1311': attribute type 29 has an invalid length. [ 266.017229][T11619] __nla_validate_parse: 4 callbacks suppressed [ 266.017241][T11619] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1311'. [ 266.111088][T11627] syzkaller1: entered promiscuous mode [ 266.111116][T11627] syzkaller1: entered allmulticast mode [ 266.328654][T11640] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1317'. [ 266.810842][T11655] syzkaller0: entered promiscuous mode [ 266.810866][T11655] syzkaller0: entered allmulticast mode [ 266.831561][ T9975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.870008][T11655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.184952][ T63] batadv1: left promiscuous mode [ 267.781469][T11687] netlink: 27 bytes leftover after parsing attributes in process `syz.6.1329'. [ 268.198963][T11712] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1336'. [ 268.240359][T11712] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1336'. [ 268.240832][T11713] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1336'. [ 268.262448][ T5624] Bluetooth: hci5: command 0x0406 tx timeout [ 268.393659][T11717] netlink: 'syz.1.1339': attribute type 1 has an invalid length. [ 268.429228][T11724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1339'. [ 268.432924][T11719] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1339'. [ 268.580755][T11718] bond0: (slave geneve2): making interface the new active one [ 268.583227][T11718] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 268.585485][ T6405] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 268.585531][ T6405] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 268.585563][ T6405] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 268.585595][ T6405] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 268.648336][T11724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.949580][T11736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1343'. [ 269.806611][T11772] bridge2: entered promiscuous mode [ 269.913450][T11776] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1358'. [ 270.331061][T11790] netlink: 'syz.1.1364': attribute type 1 has an invalid length. [ 270.379078][T11790] 8021q: adding VLAN 0 to HW filter on device bond7 [ 270.501340][T11807] syzkaller0: entered promiscuous mode [ 270.501367][T11807] syzkaller0: entered allmulticast mode [ 270.532620][T11807] tipc: Started in network mode [ 270.532654][T11807] tipc: Node identity 3e1d153017c7, cluster identity 4711 [ 270.532834][T11807] tipc: Enabled bearer , priority 0 [ 270.638797][T11818] tipc: Resetting bearer [ 270.689995][T11805] tipc: Resetting bearer [ 270.739310][T11805] tipc: Disabling bearer [ 270.773750][T11822] netlink: 'syz.1.1372': attribute type 8 has an invalid length. [ 270.842611][T11827] tun0: tun_chr_ioctl cmd 1074025675 [ 270.842637][T11827] tun0: persist enabled [ 270.842837][T11827] tun0: tun_chr_ioctl cmd 1074025675 [ 270.842852][T11827] tun0: persist enabled [ 271.079641][T11834] bridge5: port 1(veth5) entered blocking state [ 271.079771][T11834] bridge5: port 1(veth5) entered disabled state [ 271.079922][T11834] veth5: entered allmulticast mode [ 271.082660][T11834] veth5: entered promiscuous mode [ 271.169312][T11838] bridge5: port 2(veth7) entered blocking state [ 271.169448][T11838] bridge5: port 2(veth7) entered disabled state [ 271.169661][T11838] veth7: entered allmulticast mode [ 271.173631][T11838] veth7: entered promiscuous mode [ 271.447035][T11855] __nla_validate_parse: 10 callbacks suppressed [ 271.447058][T11855] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1381'. [ 271.620498][T11859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1382'. [ 271.620526][T11859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1382'. [ 271.744217][T11857] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.216933][T11864] batman_adv: batadv0: Adding interface: syzkaller0 [ 272.216954][T11864] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.216986][T11864] batman_adv: batadv0: Interface activated: syzkaller0 [ 272.260382][ T152] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.260415][ T152] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.260436][ T152] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 272.260486][ T152] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.260507][ T152] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.260528][ T152] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 272.260559][ T152] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.260580][ T152] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.260600][ T152] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 272.260631][ T152] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.260652][ T152] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.260673][ T152] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 272.289557][T11860] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 272.415970][T11860] batman_adv: batadv0: Removing interface: syzkaller0 [ 272.589152][T11878] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 4009 [ 272.589378][T11878] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 4009 [ 272.589509][T11878] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 4009 [ 272.589634][T11878] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 4009 [ 272.589761][T11878] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 4009 [ 272.601191][T11878] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 4009 [ 272.601321][T11878] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 4009 [ 272.601508][T11878] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 4009 [ 272.601621][T11878] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 4009 [ 272.601732][T11878] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 4009 [ 273.033429][T11905] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1390'. [ 273.049345][T11905] netlink: 'syz.1.1390': attribute type 9 has an invalid length. [ 273.122113][T11909] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1390'. [ 273.192820][T11911] netlink: 'syz.1.1390': attribute type 9 has an invalid length. [ 273.283244][T11903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.374291][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 273.582906][T11923] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1392'. [ 273.612312][T11925] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1393'. [ 273.612343][T11925] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1393'. [ 273.836327][T11943] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1392'. [ 276.653712][T11941] tipc: Enabling of bearer rejected, failed to enable media [ 277.058453][ T32] INFO: task syz.0.343:7377 blocked for more than 143 seconds. [ 277.058480][ T32] Not tainted syzkaller #0 [ 277.058491][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 277.058501][ T32] task:syz.0.343 state:D stack:25720 pid:7377 tgid:7376 ppid:5613 task_flags:0x400140 flags:0x00080002 [ 277.058565][ T32] Call Trace: [ 277.058573][ T32] [ 277.058588][ T32] __schedule+0x17db/0x58f0 [ 277.058649][ T32] ? __pfx___schedule+0x10/0x10 [ 277.058682][ T32] ? schedule+0x90/0x2b0 [ 277.058719][ T32] schedule+0x164/0x2b0 [ 277.058742][ T32] schedule_preempt_disabled+0x13/0x30 [ 277.058764][ T32] __mutex_lock+0x7c1/0x1550 [ 277.058794][ T32] ? __mutex_lock+0x5d4/0x1550 [ 277.058821][ T32] ? nfsd_nl_unlock_filesystem_doit+0x2af/0x410 [ 277.058851][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 277.058872][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 277.058913][ T32] nfsd_nl_unlock_filesystem_doit+0x2af/0x410 [ 277.058939][ T32] ? __nla_parse+0x40/0x60 [ 277.058963][ T32] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 277.058991][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 277.059015][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 277.059047][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 277.059075][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 277.059109][ T32] ? bpf_lsm_capable+0x9/0x20 [ 277.059126][ T32] ? security_capable+0x7e/0x2c0 [ 277.059155][ T32] genl_rcv_msg+0x614/0x7a0 [ 277.059185][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 277.059205][ T32] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 277.059245][ T32] netlink_rcv_skb+0x226/0x4a0 [ 277.059276][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 277.059300][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 277.059346][ T32] ? down_read+0x2be/0x330 [ 277.059377][ T32] genl_rcv+0x28/0x40 [ 277.059398][ T32] netlink_unicast+0x7bd/0x940 [ 277.059437][ T32] netlink_sendmsg+0x813/0xb40 [ 277.059478][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.059516][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 277.059541][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.059570][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 277.059594][ T32] ____sys_sendmsg+0x54e/0x850 [ 277.059626][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.059664][ T32] ? import_iovec+0x73/0xa0 [ 277.059701][ T32] ___sys_sendmsg+0x2a5/0x360 [ 277.059727][ T32] ? __lock_acquire+0x747/0x2de0 [ 277.059753][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.059800][ T32] ? futex_wait+0x2a2/0x390 [ 277.061702][ T32] ? __fget_files+0x2a/0x420 [ 277.061736][ T32] ? __fget_files+0x3a2/0x420 [ 277.061776][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 277.061805][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 277.061856][ T32] do_syscall_64+0x166/0x520 [ 277.061881][ T32] ? trace_irq_disable+0x3b/0x140 [ 277.061900][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.061922][ T32] ? clear_bhb_loop+0x70/0xc0 [ 277.061948][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.061969][ T32] RIP: 0033:0x7f3ef479e159 [ 277.061988][ T32] RSP: 002b:00007f3ef55d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.062012][ T32] RAX: ffffffffffffffda RBX: 00007f3ef4a25fa0 RCX: 00007f3ef479e159 [ 277.062027][ T32] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000005 [ 277.062041][ T32] RBP: 00007f3ef483506b R08: 0000000000000000 R09: 0000000000000000 [ 277.062054][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.062066][ T32] R13: 00007f3ef4a26038 R14: 00007f3ef4a25fa0 R15: 00007fff00e193f8 [ 277.062101][ T32] [ 277.062154][ T32] [ 277.062154][ T32] Showing all locks held in the system: [ 277.062182][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 277.062197][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 277.062315][ T32] locks held by getty/5372: 2, on CPU#1: [ 277.062329][ T32] #0: ffff88803342d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 277.062382][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 277.062426][ T32] locks held by syz-executor/5615: 1, last CPU#1: [ 277.062438][ T32] #0: ffff8880335f2460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 277.062494][ T32] locks held by syz.3.263/7022: 2, on CPU#0: [ 277.062506][ T32] #0: ffffffff902c3fa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 277.062547][ T32] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 277.062592][ T32] locks held by syz.0.343/7377: 2, on CPU#0: [ 277.062603][ T32] #0: ffffffff902c3fa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 277.062643][ T32] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_filesystem_doit+0x2af/0x410 [ 277.062701][ T32] locks held by syz.2.978/10216: 2, on CPU#0: [ 277.062712][ T32] #0: ffffffff902c3fa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 277.062752][ T32] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 277.062796][ T32] locks held by syz.6.1329/11687: 2, on CPU#0: [ 277.062807][ T32] #0: ffffffff902c3fa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 277.062847][ T32] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 277.062891][ T32] locks held by syz.5.1392/11922: 2, last CPU#0: [ 277.062902][ T32] #0: ffff888057a67540 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 277.062953][ T32] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 277.062995][ T32] locks held by syz.1.1398/11969: 2, last CPU#1: [ 277.063006][ T32] #0: ffff8880349403b8 (&mm->mmap_lock){++++}-{4:4}, at: __gup_longterm_locked+0xfd9/0x15c0 [ 277.063050][ T32] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 277.063091][ T32] locks held by sed/11971: 4, last CPU#0: [ 277.063101][ T32] #0: ffff888075ac2588 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 277.092733][T11973] ovs-s!!: entered promiscuous mode [ 277.126389][ T32] #1: ffff8880b8624408 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 277.126450][ T32] #2: ffff88802949e5b8 (&sig->wait_chldexit){....}-{3:3}, at: __wake_up_common_lock+0x30/0x1f0 [ 277.126501][ T32] #3: ffff88802d5ce858 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x67/0x14d0 [ 277.126547][ T32] locks held by syz.7.1399/11973: 2, last CPU#0: [ 277.126561][ T32] #0: ffff888034941078 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 277.126638][ T32] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 277.126688][ T32] [ 277.126693][ T32] ============================================= [ 277.126693][ T32] [ 277.126701][ T32] NMI backtrace for cpu 0 [ 277.126713][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 277.126733][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 277.126743][ T32] Call Trace: [ 277.126751][ T32] [ 277.126759][ T32] dump_stack_lvl+0xe8/0x150 [ 277.126786][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 277.126814][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 277.126842][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 277.126872][ T32] sys_info+0x135/0x170 [ 277.126895][ T32] watchdog+0xfd7/0x1030 [ 277.126919][ T32] ? watchdog+0x1c7/0x1030 [ 277.126943][ T32] kthread+0x38b/0x480 [ 277.126962][ T32] ? __pfx_watchdog+0x10/0x10 [ 277.126977][ T32] ? __pfx_kthread+0x10/0x10 [ 277.126996][ T32] ret_from_fork+0x514/0xb70 [ 277.127016][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 277.127034][ T32] ? __switch_to+0xc89/0x1420 [ 277.127061][ T32] ? __pfx_kthread+0x10/0x10 [ 277.127080][ T32] ret_from_fork_asm+0x1a/0x30 [ 277.127118][ T32] [ 277.127126][ T32] Sending NMI from CPU 0 to CPUs 1: [ 277.127155][ C1] NMI backtrace for cpu 1 [ 277.127170][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 277.127191][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 277.127201][ C1] RIP: 0010:io_serial_out+0x7c/0xc0 [ 277.127226][ C1] Code: dd 54 fc 44 89 f9 d3 e5 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 1c e5 c4 fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d e9 07 24 76 06 cc 44 89 f9 80 e1 07 38 c1 [ 277.127241][ C1] RSP: 0018:ffffc90000157900 EFLAGS: 00000002 [ 277.127258][ C1] RAX: 0000000000000020 RBX: 0000000000000020 RCX: 0000000000000000 [ 277.127270][ C1] RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000020 [ 277.127282][ C1] RBP: 00000000000003f8 R08: 0000000000000003 R09: 0000000000000004 [ 277.127293][ C1] R10: dffffc0000000000 R11: ffffffff8572f4d0 R12: dffffc0000000000 [ 277.127306][ C1] R13: 0000000000000020 R14: ffffffff9ad3e0c0 R15: 0000000000000000 [ 277.127319][ C1] FS: 0000000000000000(0000) GS:ffff888124dcd000(0000) knlGS:0000000000000000 [ 277.127334][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 277.127347][ C1] CR2: 00007f3f2a67aff8 CR3: 000000007237a000 CR4: 00000000003526f0 [ 277.127365][ C1] Call Trace: [ 277.127372][ C1] [ 277.127381][ C1] __serial8250_console_fifo_write+0x1e6/0x3e0 [ 277.127410][ C1] serial8250_console_write+0xaa1/0x1200 [ 277.127429][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 277.127454][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 277.127472][ C1] ? __schedule+0x17f1/0x58f0 [ 277.127498][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 277.127525][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 277.127546][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 277.127572][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 277.127591][ C1] nbcon_kthread_func+0x679/0x880 [ 277.127613][ C1] ? nbcon_kthread_func+0x163/0x880 [ 277.127630][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 277.127651][ C1] ? __kthread_parkme+0x71/0x1f0 [ 277.127676][ C1] ? __kthread_parkme+0x199/0x1f0 [ 277.127710][ C1] kthread+0x38b/0x480 [ 277.127727][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 277.127744][ C1] ? __pfx_kthread+0x10/0x10 [ 277.127761][ C1] ret_from_fork+0x514/0xb70 [ 277.127779][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 277.127795][ C1] ? __switch_to+0xc89/0x1420 [ 277.127819][ C1] ? __pfx_kthread+0x10/0x10 [ 277.127837][ C1] ret_from_fork_asm+0x1a/0x30 [ 277.127868][ C1] [ 277.141876][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 278.075532][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 278.084743][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 278.094802][ T32] Call Trace: [ 278.098086][ T32] [ 278.101023][ T32] vpanic+0x56d/0xa60 [ 278.105026][ T32] ? __pfx___schedule+0x10/0x10 [ 278.109884][ T32] ? __pfx_vpanic+0x10/0x10 [ 278.114402][ T32] panic+0xc5/0xd0 [ 278.118221][ T32] ? __pfx_panic+0x10/0x10 [ 278.122648][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 278.128139][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 278.133528][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 278.139787][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 278.146053][ T32] watchdog+0x1030/0x1030 [ 278.150395][ T32] ? watchdog+0x1c7/0x1030 [ 278.154831][ T32] kthread+0x38b/0x480 [ 278.158905][ T32] ? __pfx_watchdog+0x10/0x10 [ 278.163577][ T32] ? __pfx_kthread+0x10/0x10 [ 278.168171][ T32] ret_from_fork+0x514/0xb70 [ 278.172785][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 278.177907][ T32] ? __switch_to+0xc89/0x1420 [ 278.182681][ T32] ? __pfx_kthread+0x10/0x10 [ 278.187450][ T32] ret_from_fork_asm+0x1a/0x30 [ 278.192238][ T32] [ 278.195400][ T32] Kernel Offset: disabled [ 278.199736][ T32] Rebooting in 86400 seconds..