last executing test programs: 12.529404209s ago: executing program 0 (id=2985): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c9000000140031"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) syz_emit_ethernet(0xfdef, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 12.255085746s ago: executing program 0 (id=2989): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x1c, 0x3b, 0x107, 0x0, 0x25dfdbfc, {0x3, 0x7c}, [@typed={0x4, 0x157, 0x0, 0x0, @str}, @nested={0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc090}, 0xc010) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6026843500140601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="193f000000000000b6cea950c66598be25ac86ea013e9161221dcc3a018c92573c85b5666e203c15fb3c7daf4b21a2fddbd4c375431a5b121e04281f"], 0x0) syz_emit_ethernet(0xc9, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c20000000180c200000086dd6001012000933afffe8000000000000000000000000000bbff02000000000000000000000000000185009078000000001f0c21675d8675eeec3981bce38c7cc154ce2d908c5541e1100b64c7beea982e18a3a9c1fd2cdbed4dd73e81f3d89a6910951221f6797bc2eb6646c6910b126669bc80425ba051de16b3b5b58e47b0920ea929a493f072c8e52a7258503db9722205cabb3758c93dba030000005fbba74b4fb30faf62d3ef134ac56db007572d30acae140d00b9a55fe4d2"], 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r1) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, 0x0, 0x0) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x2c, r2, 0x208, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 11.141699802s ago: executing program 0 (id=2994): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040)=0x100000001, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f800800014000e7ffff07000340"], 0x88}}, 0x0) close(r2) r4 = socket(0x28, 0x5, 0x0) setsockopt$inet6_int(r4, 0x29, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x8084) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x8084) 10.845747669s ago: executing program 0 (id=2997): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0x0, &(0x7f00000007c0)) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x5) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "68ce0115ab719fd7", "e4e20df42320a60ce754aa499601b029", "a65dd7bf", "4556b2d36eb95b08"}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)="c1e220a182cfa0a844285975", 0xc}, 0x1, 0x0, 0x0, 0x40000}, 0x4006040) recvmmsg(r2, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0xe88e164623c97862, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r3}, &(0x7f00000009c0), &(0x7f0000000a00)=r4}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x2, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) r5 = socket(0xb, 0x4, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x44) 10.625494633s ago: executing program 0 (id=2998): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0xffffffff, 0x1}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000280)="f4000900062b2c25fe80000000000000dc8b850f2323fcb11ee3548466cc0000", 0x20}, {&(0x7f0000000040)="1f000000d59bb000", 0x8}], 0x2}, 0x8080) 9.899646714s ago: executing program 0 (id=3002): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000008000000000000004000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 4.240099321s ago: executing program 4 (id=3045): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000061107ffcffffffff9400000000000000"], &(0x7f00000005c0)='GPL\x00', 0x5}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='.\b\x00'/12, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001540)={'syztnl2\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x7, 0x7, 0x2, 0x80000001, {{0x12, 0x4, 0x0, 0x8, 0x48, 0x67, 0x0, 0xd, 0x6, 0x0, @loopback, @private=0xa010102, {[@timestamp_addr={0x44, 0x34, 0xa5, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@loopback, 0x6}, {@rand_addr=0x64010100, 0x3}, {@multicast1, 0x6}, {@private=0xa010102, 0x8}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x4}]}]}}}}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @sched_cls=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001680)={r1, &(0x7f0000001580)="70d671c5034478c369bbc49e62b16a3965db31bd18399f54686940a6a1d2508b3821d5b51451c8e8ed0c2bfcd2c9b889d3ba8d8173bf6e386b1ecfb89ee1b2490168804aedb824ad48cfc969b3dd8f7e1be5292148039f0a672834007d12e51659a4cf54a44427851907ae507382b77cf2c5b830a20b364f0328217abe2c82cdd62b9015cceaece23a8a6fd005feed47020287144060c784f152f6e45d5c0dcfba4c42ee2f5eec76d05069f4a35a2fbad4bb558c7c97fd6eb75daf20595b32db3c14edd739429228728a36d0c7e4b11ac0e9366e6850761fed4c56e317389cfeac81abf2e02c5816cd"}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x270, 0x190, 0x0, 0x190, 0x0, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0x20, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r5, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r7, r4, 0x3e, r4}, 0x5) 4.012307631s ago: executing program 4 (id=3049): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x20000014) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0xc040}, 0x8000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x9, 0x2, 0x1fc, 0x1, 0x9, 0x1}, 0xffffff9a) socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r6, 0x8b32, &(0x7f0000000040)) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24) 2.953885985s ago: executing program 4 (id=3054): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000080)={{0x7d, 0x4}, 0x100, './file0\x00'}) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08010000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d300000", @ANYRES32=0x0, @ANYBLOB="cc001680c80001800c000500ff0f00000008000014000a0004000000000000000400000000000000100006"], 0x108}}, 0x24040800) 2.909991844s ago: executing program 3 (id=3055): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) write$ppp(r0, &(0x7f0000000200)="d07fae23d7374318f407ba574e0e6f3cfbd566211060b6206b94371dccaa73c95c8d8164d62673a0b32e211f446e16d99afba7a90440878cf7ef948acad626b4ec12c7a825ef1bd44c9932a23fb33ec5cba0d729740262c8fa546a0d2361b3ff3ba6d663234f7dd62c67e90306c3a6d139149f831925e4858bcc3d1348b69db4f25c2aef8662eaed52db11d78324c9e3795b3a424f8b8cae8c715db794f36caa8f5a1392f3c7c65a9f2e7f31f66acb7334ebc94cd7ccd29183cb929e0d04c13111ba70a58f302fe10a", 0xc9) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x5) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) r2 = socket(0x2, 0x2, 0x0) close(0x3) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r2, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) (async) recvmsg(r2, &(0x7f0000000080)={0x0, 0xfe, 0x0}, 0x12160) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r1, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) recvfrom$inet(r2, &(0x7f00000005c0)=""/4096, 0x1000, 0x120, &(0x7f00000015c0)={0x2, 0x4e21, @local}, 0x10) (async) getsockopt(r1, 0x22b, 0x5, &(0x7f00000000c0)=""/247, &(0x7f00000001c0)=0xf7) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x40047452, 0x0) 2.48549655s ago: executing program 2 (id=3057): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x430881, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x1000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@mpls_delroute={0x24, 0x19, 0x200, 0x70bd2d, 0x25dfdbfb, {0x1c, 0x20, 0x20, 0x0, 0xfc, 0x4, 0xc8, 0x0, 0x200}, [@RTA_TTL_PROPAGATE={0xffffffffffffffb5, 0x1a, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async, rerun: 64) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000100001000001220b9b7e4461e5000000000000000358e10a34000000060a010400000000080000000a0000040900010073887a31000000002900020073797a32000000000800ebbf0000000414000000ca1ab6f51ea800000100000a00000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) (async, rerun: 64) syz_emit_ethernet(0x60, &(0x7f0000000600)=ANY=[@ANYBLOB="e3310c005bfdaaaaaaaaaa0086dd60cb653e002a3afffe800000000000000000000000000000fe8000000000cbad00876f5cd71f000000000000aa890090780000000020010000000000000000000000000000fc0100000000000000000000000000000400a3087f7073c0c6ba71f285b96eb90c62bf023053b53d193a13d984fcc5f2466b8a2df1737884b493465dbd5b411ba4fccbd2c628c6482127398b67668cc468af4ed1dcc53feaddde87846fad4c562d6a7051f399b347e470cc6e647101b189fe763734e92738355ae0e758caa8eb3c2031b1764ea26a36fccad493f6cd67b992554e3e815c68c785b815fd393605281476e1d408e8ae9f2a95b572da0a3bf6be655ba3a79ffb82ad0a62dc4e385f435dacf23c8eeaefd240beac63d365097d7155e2d2d3acd1caff2a3cf8125ef0e983f0d157f12885382e6a159e5c92ed31a0"], 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmmsg(r4, &(0x7f0000006380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="10000c"], 0x10}}], 0x1, 0x20000040) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000200)={0x3, 0x1, 0x207, 0x0, 0x0, 0x1, 0x7, 0x8000}, 0x20) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018006000600800a000008001400", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x90656}}, 0x20}, 0x1, 0x0, 0x0, 0x690}, 0x40) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket(0x1, 0x803, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081000400000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) 2.435591354s ago: executing program 4 (id=3058): r0 = socket$unix(0x1, 0x5, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}, &(0x7f00000002c0)=0x1c) r2 = accept4$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e24, 0x100, @remote, 0x200}, 0x1c) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffffb, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$AUDIT_ADD_RULE(r4, &(0x7f0000000b80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000700)={0x424, 0x3f3, 0x54427b16c7bb1ff3, 0x70bd27, 0x25dfdbfc, {0x10, 0x1, 0x12, [0x1, 0x1ca, 0x1, 0x3, 0x800, 0xdff1, 0x6, 0xf8, 0x4, 0x0, 0x6, 0xcf, 0x1000, 0x8, 0x1714, 0x3, 0x5, 0x9, 0xff, 0x6, 0x6, 0x6, 0xb, 0x5e, 0xca, 0x0, 0x9, 0x19e, 0xb, 0x401, 0x2, 0x2, 0xffffffff, 0x1, 0x9, 0x6000, 0x4, 0x8, 0x0, 0x200, 0x10c2000, 0xa, 0x4, 0x7, 0x1, 0x7, 0x4, 0x9, 0x80000001, 0x4, 0x7, 0x7, 0x9, 0x2, 0x101, 0x1, 0x3, 0x6, 0x200, 0x5, 0x3, 0xf, 0x6, 0x8], [0x1, 0xe, 0x8, 0x7, 0x4, 0x6b567b4b, 0x0, 0x200, 0x8d, 0x7, 0x7, 0x2, 0x2, 0x4a, 0x5, 0xdb7c, 0x6, 0xf, 0x63d, 0x6, 0xffffffff, 0x7, 0x8, 0x4, 0xfff, 0x5, 0x4, 0x40000, 0xb, 0xfa5, 0x6, 0x4, 0x8001, 0x10, 0x3, 0x0, 0x1, 0x8, 0x4, 0x3, 0x6, 0x8, 0x8, 0x978, 0x0, 0x8, 0x2, 0x7, 0x3ff, 0x6, 0x5, 0x9, 0x1ff, 0x9, 0x0, 0x8, 0x101, 0x2, 0x8, 0x7f, 0x8, 0x3, 0x4, 0x8], [0x80000001, 0x4ab0, 0x5, 0x6, 0x3, 0x9, 0xe, 0x6, 0x6, 0x6, 0x1, 0x3, 0xa5, 0x35, 0x80000000, 0x40, 0x4, 0x6a, 0x4b7, 0x4, 0x82e, 0x6, 0x8, 0x2, 0x2, 0x0, 0x51, 0x1c00, 0x5, 0x6, 0x4, 0x100, 0x5, 0x40, 0x7, 0x800, 0x4, 0x1, 0x7fff, 0x2, 0x3, 0xa9db, 0x4, 0x8, 0xe2, 0x5b, 0x4, 0x1, 0x9, 0xf, 0x3ff, 0x40, 0xffffffff, 0x4, 0x0, 0xc51, 0x6, 0x704f, 0x5, 0x6e, 0x800, 0x1, 0x1, 0x40], [0x3, 0xdb10, 0x3, 0x6, 0x3, 0x200, 0x3ff, 0x7, 0x957, 0xffff372f, 0xa, 0x6ff, 0x8001, 0x17, 0x7f, 0xc, 0xff, 0x2, 0x6, 0x5, 0x2, 0x100, 0x10001, 0x7, 0x6, 0x7, 0x5, 0x40, 0x201a, 0x0, 0x5, 0x8, 0x10000, 0x3, 0x9, 0x1, 0x5a75, 0x1, 0x695, 0x6, 0x3, 0x10001, 0x52, 0xfffffff8, 0x2, 0x40, 0x0, 0xe6, 0x0, 0x10001, 0x3c11, 0x6b, 0x5, 0x1ff, 0xe1, 0xb, 0x9, 0x7, 0x4, 0x9, 0x7, 0x4, 0x4, 0xc], 0x1, ['\x00']}}, 0x424}}, 0x814) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB="2200000204200000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="2e0010008188e6b62aa73772cc9f1ba1f8483f0000005e140602000000000e000a000f000000028000001294486e34f24d93cf83f4148d62a09813f3962be51bafe28a959b30c74528a80640a9dc80369e4222fd853b97779b74dd65c6f9a3e37fcc4a54b9dfa328b88e36ab05beaba0133d0000", 0x74}], 0x1}, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="b2", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES8=r0], 0x18, 0x10}}], 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r6, 0x8905, &(0x7f0000000080)) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x62) accept(r0, 0x0, 0x0) 2.200061404s ago: executing program 3 (id=3059): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000000500010001"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="1c0000000104010100000000000000000a0000000500010002"], 0x1c}, 0x1, 0x0, 0x0, 0x200c8016}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x401, 0x0, 0x0, {0x92258420943190a, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x40091}, 0x40) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x16, 0x71, 0x11, 0xaa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r3 = socket$inet6(0xa, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x24, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420002e61afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x1c, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) accept(r0, &(0x7f0000000300)=@tipc, &(0x7f0000000380)=0x80) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r5, 0x107, 0xc, 0x0, &(0x7f0000000040)) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r3, 0x50) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6, 0x1}]}, 0x10) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) listen(r6, 0x50) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r7, 0x1, 0x70bd2d, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}]}, 0x3c}}, 0x0) close(0x3) 2.021168345s ago: executing program 2 (id=3060): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001780)=0x0) sendmmsg(r1, &(0x7f0000003f80)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @remote, 'team0\x00'}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000380)='g', 0x1}, {&(0x7f00000003c0)="f99520bd4ee511f075b5755c3c9935a8ebbfaf41a4d6b98dd4045b64c350ccb355b141973a16cd9c8f37534311fa32c1741925d360ad8eab634329138dc90b693af69aef8fb32497f370bd6513804e272c8af3a5b8486b92f1031b9f328d6725a30435f50bbc54b4a5ce41080720058ee4e22a23fd48c7c9076d17486b5d58425f7998ecd481c317c39331b5f056a671d5ed36be272c43197109578c88bdbd4b0cbddd2922c1949815de0a82e37eca10c4f285131e55b3b536008e5a7a31dd46111e3f8ee99aaea66229526c50417a5daf9ae046c9dafb5bda572eca693ff512bdecb51b8eafde8466c82ebd29872d0c44a97f46", 0xf4}, {&(0x7f00000004c0)="dd2a3ff451782626e690275f74ffca1bacc38121c2b2a536e866e7073fe6c18430fd1db9b748bbc4ff0cf75440153655f5677bccca2f10a3b19b7f377e5d0c45203c2e39da59daf998fa787d31aee20e17661e41f848412be65227e5934bfe3336a6a033c539effa45fd1dd647d3018a7c73bcc63a6e93acd15c9267121d011ec8682ebb58b71d0628d234660ef9cbd49ebb4bbc4e197702be0ae48053c9dc67fa94efefedb95b7486cfbae3341774d4e2433a37d94a6edd6554dd732d7ae5c85c0ee76eadb144e12e0047166cbd015cce3e43412867e896faf41c957fb75bceb20549c1f21226da2b46863f5d9ab1a5841c5c0b0b56eaaff89fbd1518d1a49bbccc5fbe7edadfe76968574a8545d2d64c187fff2796a636b459d57f837cdece69b51d8b19a6b0791548f8a3b4803440ca07b75766e000803b8188dd80f7af81a60e16f1af560f13d6f1ef916d3d3fa437e307196490b55fc6461bf0d0f0c023912f3d20a96f9936257b72e533785cefa9eb1bfd705e6e97e504ad5f7b1e8d8e5e81cf218a8b3a4701839e29a228ea9eae00bc71cd52e9df7b42f807c7bc887638e2e45f491824e03cb5a4d30f07ed735a6b5254036d0883a110c35f9b7d8207c6e65fda6967b194806a8ad27ee9cf996e2a50ef76ceb6d2c6112a6a14b585ca633c568cac86bf2af5738d086a017a72914536ffb249b998af187d44668addcb178e73e993c81335bcb67ce737d9653cb19ad6e1a2fca5efab5ced6b68dbf8870d4ca7d9795973ec47d29964691d2a843093088adc5b200e28af283e6d8f7b901b213582c0a5d6123e2737a36c30d633e86f3dd31b37841b57807136c1dcab1ccf77d758928bb69cf0eda590f09a0c6ce6135000d24ea5819c0d83b1ccf5fd8cecc6a5d2462b236da3dd58ed74b17383f6d94d9a509b2febe281ba1c87ae6d0adadd3996cba74b82daf3bf2ab6a9caa0dd5623dca78b430b32649a381e0d3b2419fb9e188df2684e81bfe70a339d07ff7a82ad9a49fc1383f013d29df0800897029ce6a9a793d5dfa5fa773964df8a2485aff8a4a523887d35daf4e1d146687407803523b90dbd3f6869fcb15cdb5ec00f51c54d3301a6788a9929aa611da2c24b98098493e7ded4eff3725a296937c7c6508dcf4061f06ee16368191bc4ebdc8a7a54fa9c02354b55aeee85d91e34ffad782c40d8ab55ceb2fc3d4f7410cc9200482ebbadfa1fed84afcaf67b94b2f7354e76feee39c16af6c56c280cce697622039e69a782c8bbc995b137310036c893a41e0cb346ac5eef2cbad9e523331a910ccbfdf15fae05ddd2132759c653a5ede2f69e26810611c8f5e48f1b76cd5ccf1b77cc4c40c16987a54aceb17bfce41034f80f76fc8a4d522e1e6229c02c66804aa33725834415068e3d74c5da1fb798be0eb3fc917350219d013ef5ed56c2066a0e42bcca04c533daae03e8bfbac3df5ad43891c2915e4f2bc9982edee225a66e2c2eb4e59527e3156ca89431b610ec9b887f534ab9a4e51a5d860fae349b031ddd3a55008ce5e26e6cd31a96377c22c07a0743559be464d2f35410b6ea4b8d2161c009ebe012852fe37529da4c7d2cd729d0b852e9ca49711a32d1731cc044dc28f0586225093d8f2ad54637539a092b8e7bc5c791f06af1d41ec6ad9152eac926dfb28a59eb8626cf2609bb571c8acfdfe634757b06854e08d40305e3231cc43a8929dd1df6ff6e86d52a27e2b36f1f1b491af2c25e770b5716c4ae07e9aab5073e3b996a2e2aab1c92149d442240cee4f4d2556f2696c1aac42333e4f994d154d95b47134d44e0c7b7e8c08d33192946b6cd00d63729ce12cd1123e3d4be7e72622bf910121d3736fc3536de5ca75308752bc869863ab5b25c289cc9b8add345301328295f9e5c53c26599d2b94afbc1835dde7ec2c0d6503d1a830a3efd57e433150194034e60834f2f6e76f99d526e95c2b0646babaed94592cc9c9816355bbdb79627d9bebbcb439c083ae211d1ab695148d0066da6a845993213de145e252a7efa13e69f5877ad3dfbac3eca170afe8a07590be7c3764437d54e5764b88b8de15462ffb550448368b6fc187192c329c2eb4813bc6b9792a4939e05b70d89c2cce2ad8bf328428917fb779b8ec9c2bb85e7f85a5ae58501b548b8d62e0ccbd553815a4df8aae9048b77d8d1dc8b707b5b6159dc432970e32db51c5d4f90f693f78e6a5edc749cc3480e07f409b78de95fb54763413b9a60bd619c5ea74b8b2ef96fde70147829773647546177bb8641c186784bfca09b49afbc5bd823593d7e4d62a3b19c6eda39fdd447ea99d19075f5a65fe42e18f8b22e11941d67ca81237a58d7478017566d7649dd89349eb4af07713b0cf31b42dbf2d0a43e00ee0c016ade2eb275d979c2dbd0af369e8e65698019df78b893ad876427473a602cd714ea6b19de3aca38a01e84537a2e8e8944e0cb1fab71cf8216f7847741f49a821c8be8f586a3e641dec9f82ea73045894e8a5dd3177cc7460936a94d6265b4a87445ded27e802a0c8fbd0c6442a50ef3004acf87e09b017eec096f9af49616149a597858584ac9fe9b0a10688b7d6bd91185b9ede169338b607250f8b2a911f5c982c9e3710e5dceaefd0283dd2c8b3f5d8369967531be3c4cab1b41e832cc95e288d5d4bd2cc45783093df074026a100a7f2499cd7fae3beb5ce0a905690b34bb6e06b97d1b65152de80d6e3b70703fadece4de12fc32747f0a3f018a5c79cfc7d731d0d96946dea874c48aef39c2716adfe8a0ee89c5179346e60fac8d82c27a6a141d2ed83ce3ddf6db21e58dcec19ac44ed7c58c1410ca6cbb1c69b08a4b41db07a4dd673c131f1f32678813a004d4645cee622c4b2cdb10ddd64206567007499e437370f4748405e2e8187970b3327c9eeaba42f76f43650b64c9fb319bd454adce3c31e084e7a306870c875a40d785a18c14c4e25ca22ea8162099072da5f43245e00aacbda35ce9ec867c6ccc7bb17b233e57945f84f7b5d8b2e9f86093dfdeb68e1f1ac3c8c483ed1d73a248f043e2b117e79ca78539269a3f04f8fd0799e98375411c7184fa64d5b2bcf7f49370b569fab8b6c5d38f856c1587fb9e391cca54f28a26aaabc75ea17946e3ba904e507ccd7905908d64d09dae487740bfcc829a3c5d63fe14688dd1a97d1df8b821c9f94b47d1ee12ef8af889af0ef23cf29c9657dde381861349445008653953b3161497f8aa1805efc37067761fa16eb3930f643ba60e08acbf1374d16cbff0212916fc071d7bd9ac4c1d484451849d9e957d25857a978ec7b886935885757b9f73593f0cb3f77c6c1b477ca60a76ccbf7a282ffb06c0259a5d5047662256b803c84ac2a850b6f34ca94b513a24e0125984faa46863231d905cf77ec1dcf8ab6266be52909d07cc375e788334873ca1699c3bfce1e537b296a1b118aade0983c186cbeca9cc7de4d4f2177ec3b2c0775c542778588665c2d5136298a1c75922a2b23f86b1c77355c60946d345dcc54266220da892d18899ca54449f185981bfe4654f1aeb994e5bf511933ab4b1d966beda4615b15cffd71f5ec669f9efbbde21d0ae928a51628cc615d4a0c9d72d118584ef7dded6528cca79b3aa2ae88981575482982a523a54eebc6ba1f794e729053e57ee39eafb72b4cd31aa1606eb49ec755b0a3995450349e322361da4c650834450c07c1fd316aed4a35a1dabdedb28aedc547a27e1d00370a0579dd62aa056473bbab61cd5bbd634c1c5c2ee575cb1443e3c9bd7a78829f525f3af5db04c5831a3ef321585abd2be6a00dd755fc243f6b100df3d88665badc24b20d884fdb50667d599676fd9cdc17893eb902d71f280927f0cb80b5c78aec64b90015a380059415ea1748f37d9b327b9768dcd0925173af4453a57c1c06593499816611ba967db90365d1d49c0cac45031a944491c27d4ffcb762f8e5c8b744d649828d8a975c339b935fd2aea678f1b8483687b61025169826e64b75c6728fc216aa75503f191dffb2967a3e2c065e9bfef4c08f3fe8a9ebf28fdeafcac56e1b90943dde582cd38edbb1b594d8d342a9b57f77a6697db496b9424c2da1f3c1a79bf19916e381218fb892f8e9016e572c35dc64bc96c4343d832f58107f37c0616468bf6f22e69c3b633656f41af887e7824d950bfb171afa32a91f1c61a3b110a54411e3d6b25ac069f6323c3acf4286e769087c500c80f264f5abb831913b3b8cba387f5ec25fbe32fd59bb86f2c872889adbd9fbfabd1fca841c69552375c41b32f36a561141cda7dedee63727e3e27a29922a27453855db341f23cd8498803f220a19e449f2d86303905a1be241515bebaca8be8fc75002c8bc333313bd4f749c6ce9e6eaae43a0b082f0ba1074155a32a8bbb530b7c784a855cb476fa199a98560ae23a143bfbbfff1c48c2154fd074e864ae9415578a5047e26f212efd02c8687cfe5514ba20bd21ee3c8dc96602034070e5f0d03d6b35de1e4afbb8dd06aa87cc89215b7d2dd3a4aa4e399d930d018f786b4d39a358fc37ae5363e6a6223e745c941072edce764040c66a7458bce82f6acc1ac0a0d4e8706693630392fe9916e6ce01ba7f2cfb0a30f044ded5a1102754cb3429c0d38ab8ff91de62dbe4d9d505ee42afdee681541485005215d1a176732c5661f35962e3489b26bd9e16ab9f4f29094aedeccd8d0fb3b46c34183163132231c3abe5918cb1b3680ab5176ff7ba23cd479de98f6364775aebb262c452ece6d863f01f92cdc9949fea9f57b6bed4f297e442d99694452679c62cc2dfe27231b73adfb22b4d5ca8bc107ae8f84d91da71cdce8d877a3149fe3cb2816a44ca7e50be972984757d566489ebd1a958446276d0cc66d2d8c0dfafe477cc52b37acb13c01ba52abea056a41a569d50df75fa3985265e7455843c878e81fe19b8daf47059dd82f3391a600284ee17d67a9ea2df32bb290476007d79d5c7efc5e4e053124493b1227c12236d4bf51c2d061a8335f7dff438f9f9ae195cdaffbe2995b75ff1520878731b2ec0115c6913bfb3de52036793bc85a7f4904e2c15a633654ff218703c47891028c76824ffbbb85900472da6dbbb2d4521dfef323ec42d9679cf9e43462b56f8b7afb62d6692fbf84dfbf43d6d0c80313b13de1241f1d86049461c42f61b88d01e6f01c91ee38180b6d1e4c010ec30ef1bccd22538a2c3d879d6e6cefb184bad6285d334fb4739e2382934f9a332b3811f5da5de8efb3514976ef34916eb2e8d36d9c97f0f235d96b5df4fbbdaa54707636cf4ebcb85b58d0910911077a556c5a66b85904a6796b730092b7a9ba4e176a8296887f15847608f721c9ef10723c0fb3556dc7276916e01af8f726756cccb4bc10058f6aca57267bcd850db2be74c5d94c07e19741abea6294dc0c948b83985a319ce45997d8bce9ff3d7500323190bf8224dc52c8d01670a71456c46777955079c09352710848d2908003194babe2384bad40b14ca1bd828ad85c59a3fdbf909c487cedc05284faeef4ea051541c57f9b1f4bde141026a9333090f832a3c848aa41afb81f7a3b27a7cc9529d9ee4572582e9952f5ce7a5c174d05e5e7dc2084d3736f94e3320bb9c1a548c70fb482109fdfd954ccf27ab7cb0cddfaa315506fd068c5ff1958e4defbe02e62801efc473e6dce418168fffd7df1e97f1d7a0c3e21d06fb8f311507efa054fe102237da31143a314a9ca9d75f3e8271cac80270e0ac232e25f15c82c1ca349d25f7236f66189d", 0x1000}, {&(0x7f00000014c0)="a0abede336c531af24d4eb16be98d24e0e2f0007d0b30363183c0a9231a4bf3720", 0x21}, {&(0x7f0000001500)="1ddcc603a093e1bf1113aa0ce114ac9e2367e8589be6a0fcb9373b4194b98509fc392a8d68d87f5fba9235aa817aca7bb5fd38b56e9c0a652e9b8d90e47a5316820b26f949aca625c79bf04791f483046f5098935203edafa3d5b3", 0x5b}, {&(0x7f0000001580)="df20588580e2bfc34757c1aec2c5d6b64404bafcb4573471be7a9ec8f447811bb0da87600ca2365bff1b3fef6ead196ec8bea7e8687a4fc507c72470e0724c5f32b0cfee17171cbc96991f7fa7f19066e6a6da36e29f3a259717194e35726a3f3ce94386b29241958010a335665e3418caa9556ea057ffdc3a5fbc478bbba73cd27ca5d9e42d5a8f6451e3235e642bb13cfd5bdc1cf6558f597c61252e897f175a7aa27494790c42a5928389eb20c693879f4c24ff87ffd5eabd3188a5180d90a31e057a33b3a45de7f9f365dcada95192d5e5272077ebfd98fe792eadf350aac88a45feb6723b12b5d8aa", 0xeb}], 0x6, &(0x7f0000001700)=[{0x58, 0x102, 0x5, "cff4eaf328f2af9c66c870b6c811e959a0f6e4cbe6386821f3df51ec3f3f05447e1c63d578de9eff64cac9553c8f503d3646497acd1c96300aff7ad9b529f92f0d"}], 0x58}}, {{&(0x7f00000017c0)=@nfc_llcp={0x27, r3, 0xffffffffffffffff, 0x2, 0x1, 0xb, "b4a5a7885dcd106782552d06599075b481fbb34a927da6ef058e0ab0c9988800a0f55efce2c6bfaedd1a0996fbd463cddbd4f1ce764135fc39ee6403905a95", 0x3e}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001840)="906eb8ae79b396cc543e57dfc3ce2595f726d2091016ed01f8df820eec5679029bce5ad8bb2b7157230a7585a2c9877d589734c99a16d7454cd61457964b7dbc2250b1", 0x43}, {&(0x7f00000018c0)="62cfae46a4e67d6aff38845fde8b072d88ced2e600e10795ff09065b3a8a2f590f63f88956592d1f0d7af2ed2aef187c7aa81785a338ae9880f958697b1ac8020baa2b5ba365e1d60b", 0x49}, {&(0x7f0000001940)="468c0aa0d2ffd6a054d48fca69c1659ab0112266be66a9ec890df776815f6f03e73581834e4cbfb69a002df114b246dc5696b3b991e8176603fb9504ae0370dee0e0f08156b856b266d16c149d1ffdd36f7080f17aefbb66c30736a020297a3c47cac27be4f790876795c0ddeeca554aa96b9177eceee2514fc6aeac62c082cd57fc352b45d761d44ffa152a2d59aec2cf2778b06eecde323f3e557812203e6d4b00b2a058cce6885c59a8002eb32e94958fa5b70d2cd4a552757dc4d5fcd47ccb540cd3c26e1254d8286f698ac6cc0bfe2bb006b588a4bca33269adae0c9aaa7a4004630db3c0e082", 0xe9}], 0x3, &(0x7f0000001a80)=[{0x78, 0x114, 0x6, "a6b0841c675c8cd0a321f3c0197f7546bce1344e2dfaf06a350514ad1238e0d640a5943fc7b7bd185ecb6321c7ea78a7c049e36ed9deaeea8063e23822c1c254903ed2fdd5a6cfb3b2aaa620ebef49e2264dac4c76632145337bdd5bb9a6ab50e764a63ff3"}, {0x68, 0x18, 0x3ff, "384b364f775339cf0796e49c6d851b3002aea5451d9476401e602d300290c7db5dcdb0b626f822f452f5ea1bb9370a775a582718a6cde9c1f8feec32921cb73942afcd8d74499a5dc99255e2ef92b6bfef2adc5974c765"}, {0xb0, 0x116, 0x9b42, "17ad6a339cf695fe82ec9e150f429d08ad6726cb9088e3b049dbf482366c76ba31be366525124688254e004e5e26ee7e403cba081a68e418ae2155b932097c4e248c61c8b1b82c3374c914901cdb9b07b3bc41869cd5c7c1c3749856927ad64e703116a3118de758a1d8ab52fbb59c69dada34778196569f281c2dc56f22f69a753dcab28e228215b92f7a08e7fc8ba581f03c38350a5c5fea4f7cafc7a259"}, {0x58, 0x10d, 0xfffffff8, "d78cbace859c360ad3cf3587f84fb36171c6b667362e34fa793cb465dc33726ea8bc4e4f076f7dab88c6bf09873ab60b79e7db49a2086133adc82f9e0d5c0d58ff03052ab28504d1"}, {0x40, 0x10c, 0x9, "80a2c9475619b547b377c8958b33c389606f4d7a01ebfc6548c723efac44bcc58dbfb08ae7e0a66520089b"}], 0x228}}, {{&(0x7f0000001cc0)=@isdn={0x22, 0x0, 0x4, 0x7, 0x8}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001d40)="1b53e68f2f85df3de1ed2beca9c605ccea61786589371b43f2ff7fc83f40239123ac706073ef4a83d35b6eeed95af6878a0f50", 0x33}, {&(0x7f0000001d80)="1c5b9e24269bbb6a34aa020f8a5e51dedd2226434910eddeee983d57567218df8812ec4abf44281a20dc62e626857c00edc774bdb5b29d77b21a00ba894ac10b5eab1a7ef72b10ae7b91d92d75dcd1a5db56ac015e0891b2a5b1185581a7c5b3178722", 0x63}], 0x2}}, {{&(0x7f0000001e40)=@generic={0xb, "8e3c0555b0b68270e01dd285bc3377cdc2524c64904a3a54a105bfd4d898d727ddc9c774df0fd0c6bf5ebd97371575e379595c6790903a1796469df53ef15063805bf9249f14eda6657d73a8d9a452529bb7bb28f9d6c2c24b0eddff83ade4ef15d3b076a90e6d4d89fb80d5ec599559e8a34c795730b16aa5e398ccab01"}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001ec0)="9d95d781de2b3f8ad33bf0fcd2facdaf50f12545d0b1b84945b6d971a9a480ed2574f9e158b3ea3fc99279bac3f6d148980342f75a3dbccab81e24d00cbb87b65e4f6004b5288f1f27ac2151c7ae8be8560b45184e018b32d02d5b4ff2b74cf2294a26c64be46bb461ec5d67fb7a7ec82e2377b4a84026561f3436e8352c4051e1f633ff02997b48931a86d316bb788c82057859db6a208426b83c2fa7ca579a24f14b19bff0d80f93a30e20d076902b393b957707f4f35937d3ec7a5217ecc80424dfdf418613f125bcfdfad89e3766730b7b5e90aec6b1207008425faea8", 0xdf}, {&(0x7f0000001fc0)="ff01744850e0dff20e1d289b59b011a129b03694e014351da0d15eee74d60f03b7a0fee4a6cf9431f4c8a3bc", 0x2c}], 0x2, &(0x7f0000002040)=[{0x98, 0x10b, 0xffff49a4, "d74526fb0a13537264d5c3ffb2a35a3ad1b5680f157306d1cef91858f7a4e3fc3542ca47c4459e342f41563f13ffba077f9e908395d9d4ff809b9c6bd59b0af9d72f663ba0d910dce62f9077aa91dc738ee4b45b704ef4f613b3cb3b8922bec8d81c02654de6977cc83714befb2277ff96091054dc657fa1cd101a739a8a792e3f207c2a74"}, {0x58, 0x112, 0x3, "4ec635a0c6aa991d4dec6448e9767c77ef33cbed3b2820497500fc860301757eda14089ad4d999ddf542ee755a8914a38d17298eeb3ead804c6d54e7d605b2fb0da1046653a37a07"}, {0xa0, 0x0, 0x1, "2072f06f9552774c4b92844ab84adb679f3dcf3744829c0e85815849ffb6eba9b050c9fcafdcbbf8d68bae944f91117fae07e94719f152f612bab3158653d0e4df23b59810f4dbbe288f71419bf05d5365f334eda8dd6ae031c12359d8de589c571f6eafd463a73a71986f66a24a5bebfc7437ed58225692bfa13a1b2b7e01e887c60c0e5b8dbe898c6e8e325a6a56cb"}, {0x98, 0x119, 0xda9, "d9d64ff60dc67c6c84a74eef62e1222673cf3a8539cb2b000ef4d62937b75228b47298edfcecab154e7f3a4acb4364f544a613ab80967c4e7769a936e5bc3042c75fd048089d6d54e1710fc9c18c1601a126928f836a555e31a704a9838fa15d4d20ffec1d26447c8a9ac7c79899ab8b1d9d0a26977ae463ee8a4b38c6e59b37804f00"}], 0x228}}, {{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000002280)="a7590c8059f6816629f7250ee178c361fd2c0119eb5d3d5f4c3d7eaf7c3197f9d044042fe34f6e3765720e8f5a4a782429f85ef9ed", 0x35}, {&(0x7f00000022c0)="00610b06f2199477719cd5f964e020e37abbc0ee51d7c2f495df966b2f464f2821a011f87f4b40cb872b56bf54dd766650b75096db80142d5cb7a1e5653216579f999563d8a3413ee091f22c1b1f358a5874df79a29f506b0543eb5b377c2d204bffa1c1d9a43cdcf42367a1e2482e9b4357", 0x72}, {&(0x7f0000002340)="3aa00b61330585556522bd1dc21610cd7d13cb3fa0bdf5e1dea8415d68e19ce402edf6ae81293c5c168f30e1470fb9f7477a08ff8ec9445e51eaab13569fb2c8bf62ca76fe10b10f16237b5068f862c09a2ed8ef87d23cc75b191194579b1b581833407896ce66096e9a0e7d", 0x6c}, {&(0x7f00000023c0)="4d8ef90fce5114d81e9d584b0051a4d153", 0x11}, {&(0x7f0000002400)="b2490e392ad5b33dc885e5feffef9df071758be244a5aa91d99f9eda3d379b3086f71e2d4363960b8d2b0c8aeb01b47ded6b6b44007fd860a7cfa8fb3f983c92c199e60ad4da31474a2fda062feb74f0eb85461327012374ab058dc9508080ac1e11521685f4fe8d27b0934e297703f7a676db5bc1dac7880b4874d8ae32c6926eb4c5a1bd0dc73083cb1d5956c8c85e94eea193b8b0d0798938d673b3d62d63672ca8de6f64b87e905475a718508795449ee30a5f828a5f6a6680", 0xbb}, {&(0x7f00000024c0)="556edf29c6809786065c4400528c5edd0de104c0ca5316045ac98efce88ede0e129782266c8f6d0a2278e2dd603889adf9a44f41575b7d0a10c0a10cd6ef67acc0a01478d5a3797cea794bed6fca16cf81d3837ae1a8e5b6f25048ee1d5fe362dd273ca93b717d7b26fa92211f1d30886d438992777723c4c9c002b239ed02af62b1a9ee8456a13ddf249e257f242dd6910dd7c6c9c959431296ba59bf3451a8109ee8497e3472dc7323d5b60c7fe2e4f8f248f30bb7f6a6d77948e79ee526eb6b98d73de10ba11002e9281d40f324eefd4dbec573197f337317e7d461f8da6af5251636d307c6ce0870121f9bae16f5140ef55959c3fea4ee10f370ce184669bc8cd830f91b878ca2d65f0b28597e21d44a9246cba8c9c62249b39148bfc7fee96f140a4620b938c2788ca50cb50bf2da5138401b4d6e164b80e1c379443a76a3a826797eb4710d3bf107b0c5ce36e1b5c02fdebd33f46327fecfeb9f378a7899f7d1932bf0be083243b84050ddfa123bccae0ee603cc978dbb522d3c783564c9e5d958f880e6bdd3471388c4877cfbbf3102bdc7a3f3fa89e07542f7d21b66924356e5fff39e0c81da1c9f57be23ef988113742cc3da1d6e4dc3739149b67e157eea66214f1a8db264a455718ae6da6859034381e18a7971aab9d0187f8b6081bfe6a4cf48f4b07bbe47c2da91e44e5ae0aa5d49fa08e942b3769fe9ec2f97a13320476fdeb7fc3115c186bff78f4a616303b38bbaf64e14ad1ed3e4d68b45b443ff57e888b691f7a514d1eb9f878f5c7e5db69efed08ab24cb16218c08c3955417ee01e8bb12694dcd4566b9295c10ce8460a84dd36fc6ca658888aabc68c4f94eaf55e55bafac06cff2277fd14985a9eb89ce741f519d2c13fa1ce2eec0caabef21b9e540def106f98b265c5252f09182731b3768bf77e7453ea772b333c9cd4a9d760401fde74d4cde40d0da19c3915be388de4aa905dc9c83afe3b210116d42b4ee5aa3f0018006ee290c1d223c19f1061de4414e44db417de437439488b12488799231f6a9e0fcf38f545561c6e5985b06e288b0747351706f72c39f5ec432a2991bcd77c0c1769821fccd0278aea272cfe66858f767afd5f6be5e2fbe239a0e5bf2ccbf9373dca5ec608c588937308737167bc2aa8df7a76cac6097cb573b431bd64cdd8fac56b4c112fb6a1484b9bd7a31c2fa037874ca26eb1fc514ee51840250b6ad8d3cbb280e109cc9ad7e2dbb59e281bdd4474fe48e13efbfe076fa8ffbca17ab7915e664c57da20c75ee2fe0d680c6a586ff13212f7a03cc9d82f92a5e52583c6e9862419b9ae0ce9fdcbb2670b55a346dd43bf6d1c97863b940aa8e9294beddcd316091917f94d5dcdc5e31151b241ccbc6a2daa5ac6259b099af709e1c502e72b613ddb65bf6ff8798ecf0f2a8d1ea94a1452c70b10abe860c43e84a30c350ce164d46fc51b1bd17700b757ec6cda45cacf8bfaccd64ae6a67451487b19f437f31ad06eea52bf4b55e57c22c74aa63ca3f00ee3de526947477a18d8bb661838e8f0a15407ae14645d5fd0fd2cc64e0f8c7165543940c657d568920bb65b1961b5f80e0c99fefc5db55199a3fb1c5a7e86f19f96576c4e80ded63ac43e54b912835845eae768ce587c652546fe8d2b2c0442c07e0ce4147609ddc21d991a32fe3543479da58c6148b11e3916831b22f06c410eafc47f3a5c7de7c111bcc65064b3dc66376a302fe0d94ca78f2a1e64bf9d13b7d8470405f81bc0e181655ea1513c541d93707ff52eb430ccab7f6dbc815b7f4cb50699fc0ccc2366304f496b927e18f95fd4adace4fd1efdcc694e9d92d5aa9ed3abe61c32a6a24e9d012c6df24638b21cbc9ef90b85b7d5308d8ffe41ec0af813e2249a4b5d9d6d1546e7b4454c73290329356ed7a0cc2a8601476d606d00f6998041a401a7878862ba04425b27f6f384200a685042fc9591713bea8fdcb2587af17cfade97563758d0c61591bc5150659f1cf5e2f3e64aab2bfb7e62f2fdcf0fb0f1e583cb3096e2aacb6626f26f8fd2aec2855dc1a4b4663ac8ba698682e5b64fa1deb02eca5f5f22edf4f5bc1ec2f0b9901a123e599d6039d8a394d8b2254775662e374f814c6430a5d6f61d045f0fb368cc64da1ace4a8dd0b710426f671433ac49cd5e46d5b1d10234a508809805631282f9d87f8b7186f39048d63e8515f65ae840efa5082618572a70a8dfc3b6cdf943eaf78ab4a04f43f9295d73e30ce2e23a03a67dc1b7f590772aa329e65ed2521c14d92dac98a26491fe599e3a3413d41dcf9cde51cd9236544ec44270bbb49c131b025fde75ce944a0c2ab2f1bf5a6af00fc4944510ab6573ddaaac2142ccb1c74fc41379fea27703b981ca352eb809643d5c0cbf0511443367529351d7bec55542e29b2ec3a8f9daf29757c4c813741a5bc654af6bc1542a7061958e7fb54bff9401c76e5a7c7c6c7be75bb5195c0811f9e8781ddbb4f2eb26ed1d9c0cb043bfab9c74c74af25cd1da38de826cf3c8ded5419d376764c0ceec548a0d0ca195f5faec985d59cdf3f2a0e717305c859e6f00e099904838d65744253c75f045263bc28d973532447d17c88460b70abad3f15faad90c1afff094357e7a07548cd811ef3372284124b212d3a9efdeecf7cf5fe9383f5dfce20ef60f1652fd0fe1bfb91bee99aabb1c2fc92af862161ba2d1ceb9bd50fde0a13b869045ddcfad5e547675c69ac5d3a0a9a75fe8a3c0046667fc24ed3129bfe556bd4f2daacd5e6426e0040a8692c04d7fa4a168482cd21862c7fdca6bfee9c7eb5402e98adbe5d37bc55d585be621a7abe40723b9107ffbaf2a96ea391f3f21920d28cd37c1553652ea05e0322349d73355dd23bd2d4dfd95c78adc335772155882c34ac8b1312f7925a079f603722f1f2a556e3a405dad804523c54cf88046c2e9aebfa907e9eca0b0ad597df9c920dc6b30f64a84eb57745d8a43d9fb66d81b7334cce3706a738737cc7978239aeab601d7a4e58e3a00d5a66f360923f94359571a5341f542ff7ac83768c3b1e3f07257cd4e9c67f46aca00a9c1f6bfc31346a07209bc18e414e6bbc64472f14c239b64e30429e9b29099581cf38751ba6317d44b89ce019356837cd55299c9cb24765516ee67dfe03382f67de25b5425f6a1ce68e4d804e16e2b7ec95da9e1cc7d11f77fb5da4a364fc38a8af19d6b92861a898eb344fcdc30c2ffeea96337c2b7244b8ff20266795e9a8f46119f38358e0b9ba7717594ec1253d8aa260af6006bf04b191b0e90c4a549d5ebf52962c5c65a8f8bebfdb9f5a9ac1447ea33a674fcb23ed00a75c364f2fe9999257759aebc0c03584e9257342f161ffaff0b23edc2a9f6ac134f4f6432525c7969b0df875ab9a35561b1f130cff6d093089363f1ed36f93e31849d7be06e7aa9d1f80be9ba48b77c09c48cad1aa58c8d41f62904402a0f24d3c0c6d3b70545659f508cf03db8d0e25e0b7d768aa1888c8e1bc8766d75ea7d3a67bbf962b66db414b096abda1b866c69eb77c0a0ed9de5168d177055c0cbc6cbfbf3a6b23de53b1a5a89830804a23c5c8487a98bc6395124b6710b3c2e7a7232744963442de7ec20d2231d197474783abf61caa03f9f99cda35f85b532ad03f09e48ac4fda50a21524f4beebc0f234a4f7f364406aa72d47dc4a0971aa61b245fb7cb5a5d342ff800a72c8060ada0b08cbcafab6dc0379cc49c130e211e927157bdf55caf6a1fb2e567e3946446d4074c4807edd58f3d66f6d230fa6840e1290a20e9fb0151996df0014a9b3d7e5b9e8396e8a1b911bd427cbc22cc62578adc78eafe322782fd0663c5d0120b35fdc08432b3a5aeed1bedec2ea76a73f8f74c8ed457d4c3111be95b2150ccfc4903dbf30aaba732bedd578c694861e31e8d509d1e0e18aa0975edcd6502ab7f533d582e3df078c6d032aae0ba6ac1e6ce8a66546361743e3e22cd97571d422107903413407a0e6c0023986e99e47946e8b62e019a0944c97bc81f521c95627839b92dbf47fb7d8cda3ae4bf7f171cfe33fa70eef2d4327caf599cbb36ed124fb3815f742d8ad77a4c1ec62b8cc29ed529acc0e6e45299546231519057f4f3c7db95b9daa67f2a8a2a0c8062556ea29925e894e058926c8b244e8ffd233e9693510fa0f4998b74cc55c04c98674105bf1a8f02fac9d6088b52b414c80797f38c97ec6401ec3def942732edb8a2a1fab165f722b57a75d8cb6673b6fbe4945304a95f126b91d15731dc41952f8a30343c903c2c25cab8a29eed4bece84b04eced5aef299957ffb87172ed85505db9054c61a069549b7960dd2d3a27a3afce464ee4f46b1e3bcc1b9cb6f7148a1ecdf4a0c8db46bfc2d6956547517ea1c9579621bdbf44e58da4081ea7cd20f0c921e16f349668dce9b31f4be09be08d57af97572209b2c9699b909611c194f3cbeaaff9f6d6b8940a51cdb5f91e1bf85d5e59e61cbd58c6f39e56834dff0b9788b3482e980a9f9e656b7ccf945b6edfae342aa1bc702804269c9916fe08bc449dba493cbe856f58cfe3e8a8fc4dd0e3c4e7b1b36fdb0bbfaa6543d8c2ff78b0db15b9022f0944220738ed59b3ea1855ac371641956d437acd685b57f8cd7a992cdf0c93f5c25933459ce2a8db3a41a66a257da2983ecfb30e7c61c45c2fb8991b07674468375804879a174b7e79514b207fb44b3a3224ac0831185df91b26465b1a423f4631733f76008f3cb8905235daebca3da4a4de416b7a1944329eddd7ea3b3aa4af0e4c62e3965e1194958a96037491349c8cc496dd6289ff8e8b7c9af8298665d1886e163aedc9cec8ef58fc110e1ba78a3af9f90e08cdcdd9917cb5ecc6a5429c4abee2c03867c24b6d41282ceb2b71d7b5b9d789d2f8470a791aede6cb326e9c3d6f2ae8691948608ab3e331a009fcce0df99cd3a76e34c7b2695db663bcdb5030b1f00233b9a61a248fc0b5dedd84a7e8d3eaa121c30766345c6dc44ed03c2a2a5d9c0d29e38fa688ca9dc7c3725da396b6e2ceca59387917c2b8f77fe498219b2989891707c47860f7c0310e93ff20dc394432773e3e7e6c31f3fd2b311a426ce7af11e10c8ed1a0170adaae1eeb8e589d1510dd426b8e4dcfec760f285a79c0da98fa0e0906902f8718dcc7189583c897a4529c17c0ff19e5e84f18b102e505e160104e3fa729a62f2c693e787b6a3ca699e2468a70b5dd6977ba05bee482c0fabcdfa36e052f5833460d72f85301e1203c96c8570f8f7c5e1a4a0e5a60183092a38aa92ed8d2eb06628d8e2254685ef6d8b678ff3b09f58e7fddd199f0d3769203ee915d6742e3bac6bc1049d988b8f7a58e68c7079515bc0883fdfd659f377739561df16762d5040aa1fee08cbc522e7428a630d18852cd585810f020e312ef76d6a773457649fb9790a92354633d5ad3eedcffdab3e121d2e5fa10c30874fe408d1fd0e22896b1de3b036cc67785e7b5077d48f55c5c4933d9e74204bdd79be2a1f3761d95dff42a01f3b1c0893983e9156bc2553648b89220440b80ccebdd2f3e79d7864a40651657f353fb3519a1f9a138ac28b25fec8a36ab7dbebced7c2caa71833311181344637443539951125636e8e7a0a3fd301d71481797615e4413d2f4e9eb951a02619eeb42e6ececd760060498ad545f85fe9c13f3f3ecd66521b67037c81a62e1af8df979243bcd6fa00cbc6f3708bfa9979d5162e624479bc7edf62b1264e64dd8f3af7fd52b491f011c5e54fbd07db2fac5d45d8cba1b7d16ed41ee915c4c4", 0x1000}], 0x6, &(0x7f0000003540)=[{0xc0, 0x10d, 0xfffffffe, "7ef97b1fb5d848385252d6d07a87309ff33b1d7a1b38eb8abdc6f9f72502737167504861d0b4f96f0d511f4deeafcef7e16fa00f75c34f5ab64ca6abcfb2bef356888eb99f69bd35bb2c30d002d204ac62e18f990b4333c5d06200fa66cb855f27c345241991da6682cb8c3eaadb77dd8c95ac72855970c174a028cf9ecdd0180d0f499538bdecd2473fa0c543fff87c02b061ce499edab6ff8f2a6affab5d9058af2518a4fee37fcde5ce7be45bbc"}, {0x18, 0x113, 0x400, "77840e0fda"}, {0x78, 0x107, 0x8, "a3f437ac18e8f3c05b71a85b464c75484329034f5ba9ec30087d74e1f9805bdfca9aa4b2737d6e6e03088e838b5dbb0e4338fec7ce896eacc13d0a252e134c0e09e646bac2f3eb2a643c245371d3c8ccabbc5dea0182fab4c35d5af291df02315b5ad63b79a1c2a7"}, {0xc8, 0x113, 0xfffffffd, "fcc85424b7f4211f78d28088aeba1022040a23920f02984cd4b0f00b686a1e9fff7d43be7f0fee3a1873ba15b46bd2f774ed0eca44a7f65ae5f852c4fd1c04123a313da120d34ae7a6a44e3b33cb480700a62d1750b069d054c67f6a85d0f78268525c088bd3650f01aba873d183110878100196aa15a54ee4b2341aec7fe105a7e7e12400db29abac33c4bbca00ac8fb740215c8c84e2ff890875d177cb1283b1b658bcf59770f321d15c31b6857277a2"}], 0x218}}, {{&(0x7f0000003780)=@sco, 0x80, &(0x7f0000003d40)=[{&(0x7f0000003800)="4ed2e02be42f88b975cd58c547cec158c40d2aaa3c7a4975b888a4a1d59d68ebea470ed4ac3a2b4eed84a43a5252b5b54d844a8a1f0f1150e6d844fe5557454670f243204026f9807cf25358ac29a52176636368c79a128c1884a77a42fb5bc04a84e09f5ee6b4891c0e2fb871950c0243e239e5a5cf9e717edbfa2b2626a331800eab90d56be6545f12a678aa545405a3e34b0bb3e13213ac4230480e36005b9be1de9bfbc6f3fcb6a50a4fd28e8a82ac9b55d2c98715b43e9725dfa942c77b0b73cbe9dc8dd737", 0xc8}, {&(0x7f0000003900)="2e36284a3500a62a2abd7c857377d07361821b6ea864e39a9f7960d04e31a522bd9feb5c4fb5713d0e117b2eb9091dc4e00ecdd7d1eb5b21851ed432625c6f2beef615221dad1d4dc486a054c1f134c1290e3db2ca8fc984aeb94c54a1b36242f86fb55cbb538e3b4681c5221f0e49f54c96989f2bfd91ad4eda7bb8fd80ef56b8e04ed8a0253a8ce7d3b4a367ef80fae2dc3886602fba9b613096248039dac2b2a0710fa8ce536a275a20d99fb4814a530be269d5cfee9f97d0a65199264239541eb705a563dc6982cb4e0ca9fb", 0xce}, {&(0x7f0000003a00)="522a13e7fb388cfc077c3557caa1644fc0e0b6880a55f2019f05e9860cb83e5623837f96ea16b9f4d246cad3334e8560f71dfddc307746c35eca9ca27c6dd229142e7a0e331caa3d65efb926944a1b5a07276aaadc2f2ba1a0208ee79ee10ff211666bc6d48669c07763d83645dc83d3e2b9764aa26e6c2afd2ed5c90c711479d2a8493c0a2dfe526c6d8278c1cc5e6cd542026d9590761466fa6db02e37454282772b2d321fa1bff7381edf14a5b9e96e67f5d0e1830325f0e3280210cae6885c30172672056571175c6d1935474642b09d914b6e5a64d8db790bdc08de7b974f095cf9efdd281761856ec72458bc9ca6c197b7591979", 0xf7}, {&(0x7f0000003b00)="f738716a418eac63fd7597a7fda9a8c4cf899b4fb22620f74b8a4a5ea0539719094ddb721ca74b1ba1010deaf550e7538e05943b70afec3085c27824fc5fc470b849af2d79ab869a4f7eebdc071c2e441efbb522e57d7e69341df17e275e1f97026669c49229910782058bbbca2667941d448da831e2819ce81762295932478d1816cd6bbb2c16a93582be6e5849b8d4669ba5dba04aa11dde4ae33558bccff1e1f949352de08844ea66512f30f07536489e5650f4e52ddfc6e09f6f2db33b26f127fdd986c8b64638e02b030822f9234685723cb8dc9d7e4dc544c0caeb126c1d", 0xe1}, {&(0x7f0000003c00)="70547f62672015f2081e25301bbe3f4bd7eb4dabc4b0882b23aadd84a47d101aa5523545ec95480768533a5edf7727c82221dd850323b0248ed15d4c2bbe0a96328e5ea7587b44e6bfd1e9bb9942289d24bc195ac36f5578124f71c1f24287df8e7b91550554b117bbcd06150ade8be88297628c40b35b545fd26a3bee1a552f1a38a891502f557e7a2fdb54eecd07cd14530a47908d5b7ebc6a2c501b29fccbff55650032d32e1b1e2b7911604b6552cbb24a148666f90532b6135476e2087805b4791b2b11678e73beab89177544648f3508f2eec7967cd1d010031de6806642064b99a59b670930a517135c370380ac68812d91db", 0xf6}, {&(0x7f0000003d00)="0550cfec52f687b58b85e7bb57f34312365994e4de2bac63469681cffdb18b076f1892e149f5848d596279d9f7", 0x2d}], 0x6, &(0x7f0000003dc0)=[{0xe0, 0x6, 0x982, "184c2c59376261f0420d507e51f4ac76281595a62dcb66600650d8e22cf0f2c6d5a9bf9b4bf497a220a33573c67554b34c7d8f74d4e088169b437b343d290c5f6e2bd562affd4e7c48cd762ffa6002d85a59fe079739c48a6a08553a2ff31b9a8ef6d11148e4a2ca402375606fab499e7750cfa3bdbb56af646d7beb86eac3aaf72a7be29c315a1079defe524d99937143012160fb32502b05eef5831dae391d8f8fed9256aeef813ad78e213d8af87a8261a338652e48ab8eb148c3a233b008c5c03b77322f2a29a2beadc312b7"}], 0xe0}}, {{&(0x7f0000003ec0)=@in6={0xa, 0x4e24, 0xc, @mcast1, 0x7f}, 0x80, &(0x7f0000003f40)}}], 0x7, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1e4, r0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x101}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xfff5}, {0x8, 0xb, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x232}, {0x8, 0xb, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x16, 0xfff9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3ff}, {0x8, 0xb, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffff3}, {0x6, 0x16, 0x4}, {0x5}, {0x6, 0x11, 0x7fff}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0xff}, {0x8, 0xb, 0x9eb}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x44}, 0x4000050) 1.844475987s ago: executing program 1 (id=3061): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000faffffff18110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x8009) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xffff800016adffff}, 0x20) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f00000000000000f000f195"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) close(r1) bpf$BPF_PROG_TEST_RUN(0xf, &(0x7f0000000300)={r3, 0x300, 0x0, 0xffffffffffffff26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETLINKNAME(r4, 0x89e0, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{r5}, &(0x7f0000000400), &(0x7f0000000640)='%pS \x00'}, 0x20) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) preadv(r7, &(0x7f00000030c0)=[{&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/189, 0xbd}, {&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/198, 0xc6}, {&(0x7f0000002fc0)=""/210, 0xd2}], 0x5, 0x1, 0x400) socket$inet_smc(0x2b, 0x1, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000858000/0x2000)=nil, 0x2000, 0x2000004, 0x12, r9, 0xc08ba000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x90) r10 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$IP_VS_SO_GET_TIMEOUT(r10, 0x0, 0x486, 0x0, 0x0) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r11, 0x0, 0xcf, &(0x7f0000000200), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="f08cf4b80000000079105d00fa00000005000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 1.793940691s ago: executing program 2 (id=3062): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket(0x10, 0x80002, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4000, r1}, 0x18) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=0x1, 0x5, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000200)=[0x0], &(0x7f0000000380)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(r4, 0x0) write(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000002e40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002e00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x128, 0x5, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_USERDATA={0xcf, 0xc, "3b3655df1509c86def171d6fa7629c308aa3932b41ede5294df63ec07aeff5069f9004987a100b935f45a066d963f65a7e2e13451d0fe1a9b3b72178e385d4a5222b4141187308722eec0179538efd060fc60c4081723e273c7f746dbb170977eb2b61f15bd2efdecf8a2c92543b4be7ef104888848ec481c24c7df2748cfa7de5b7ad93b240a628e514b3dfc6a7f35be4ad65539846819fc902ce9cc6c1c80921487a825665e46cf3da8542704d0d70562d1068768f724d5b12eee360d8c1871a6833be3255c02a6a0143"}, @NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4cec0864}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x72670d5}, @NFTA_HOOK_DEV={0x14, 0x3, 'dvmrp1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_team\x00'}]}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_DELSETELEM={0x2694, 0xe, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2628, 0x3, 0x0, 0x1, [{0x120c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x11c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd9, 0x1, "592ac6f274fb3ad6af5c63420432fe9504175ca02d303b5e9aafad7384dad06f83a9314abc40f548368d4016bc7d55117fce679da1d3156872c0b5f06a82f76893ebc09bd3b37f1cfd388693f1b62b35529d4373d5796d53e28db891d447ad1e5d08123af5733220d88736fa9fc76cb4369a90922d4737a92f46ab1378a5ed42a4de7b8500ac9fb6a3377e8926095c68abc7fc85ef28b2f5912f2a4f8e1025f10f63169ff9721162873dc9f67c304a6c0f1a297e1eed1c71be651402d3d9d6d624362f5e3c67c7bcff6c81f64d3f87e03e8e059898"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_DATA={0x10c8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc0, 0x1, "3e006f02bef6a99f7cd57664ae1496dab0e7f16fdfefb37f9d62acc735a4daeeec16561d1d4880719e8532831d01f2e1a60e7add513a21ab5886f8f1a307e4607fb01b0f53a7325c29f57440929bcfefb1e574164642b4046de89dce7b2ef61b87a47263ac4cccb6b93853b200902985037c85617cf385cad1ea30072c3144b8476833f7bf96bfca3419c47682c5c3611cad9fc041f12b0838e671c377ac001595fe8937d0888315f0d168d29c862954c4188cd1c0f75abaeb81d8fe"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x18, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}, {0x294, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8b8}, @NFTA_SET_ELEM_KEY_END={0x248, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x43, 0x1, "788a16dd5ca06ab496cfc70a10ff4e343405f1913ba32fbd8cf13da2a2900615c985904a4245e3660fc3e0a6224cba81317e2991e8453547c3268cf68280f1"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x82, 0x1, "1ac9daa02c592f12fad0aca3869f4bc710fd07d1f574297ba930aded8ba0b894b156a0980dd2bd125ab20bf4f4f84d4d2069099d57e266b32de785d088eeb5dbff27f5a493b2e14f2c960980ecbf6706cf194d80f62d289f4512607ac486fb23dccd9547f742446a1c7b2bd139289ede7de309d81868a9bf90b80c1b71f3"}, @NFTA_DATA_VALUE={0x8, 0x1, "46d5bb16"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x5e, 0x1, "048bb15981b4f15d83f1632c65c110f04fbdf4c46bc6945237d2dd58207f71c2cb989728af6643085ff7703b91d7ad41ddeb02453437face87fb4c440ac7d419189d8604ff1423981f581049672e824a31c0d3dbb5fd399c446b"}, @NFTA_DATA_VALUE={0x16, 0x1, "56f21a43b7301e9867579f04722d430bd745"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0xec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xd0, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x9}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x38, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x14}]}}}, {0x54, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}]}, @NFTA_SET_ELEM_USERDATA={0x16, 0x6, 0x1, 0x0, "bf802f9d7275c2a96c3d0abbadfccd35a975"}]}, {0x4e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x10, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x414, 0x7, 0x0, 0x1, @range={{0xa}, @val={0x404, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x1cc, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000000}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xac, 0x1, "0023e1851a40766bd4082bd81c850f339429c6109d469c30c093b109c65bd80bc55267b95900e51ea843de24e6da1cbb869f7928477eb2306d746cd3c0f721b9821513ca3a5efab1ae91002fda13aea3a503a3b03c9685043d8c1e24b42ea710ef03dd6e3a2654de3c4550a54c3dd982e27468ee7a7873765a48675c7a9a6223fbccf4e1e4c7c868fd6c7b4f3c05d32e923fe984319ff1a32ee48878090b8063d2774add87052d8e"}, @NFTA_DATA_VALUE={0x8c, 0x1, "9d7fc266b557dca10575731a9cc38cbd293aaeaee0adc59e42de9539a98196fd73a6bab8a7de3b47900cec5023e3660a14a4739c52d1e365f97b180b21be32df7665074336ee45f1b40fd60673c57aeba5881efef45f9d6e214038607af58f741b73daee805ccba0cd94c48faac2ce1cc1712e3db5eda48e97dffa9e95d31fc89cbc45ee8b3d7327"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_RANGE_TO_DATA={0x224, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x27, 0x1, "e8d21cb3d3d141d50b93febe3a6d5ad344c1c32c10c2cba15a922009596b2715c3bf77"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xc7, 0x1, "1c4dcd0039a92f88b96e505d09d58880093e0cebe9a3a60a48dcb00dc2b0e165619d42b3560cd891417bd6301f39c93370cd6689791c101a1885d83b3b14fa7c8e64228e2fb01e1cbf94d9e975e1281832421a20d28a9892618f2da3a771ce74d228a353e245dead7081fd400a3cd2364a02da3e10c58aaf4f0bfbc59936b7efaaee5d13bfa39b0ce500768700a404a2db5de97496c339ddf40d9af804051b27a174dfd2cab68fed5f49247c002d888ebdda488bf05650099fbcc5cfd8b3f603045575"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x4d, 0x1, "ffdb52a668668405c90615d192f289794963cd1892ef5bdf062381645b62be2a6d615556df92849d74ec8fcfb5c240428984fcea4dceb84d9ede264930c617e69d8c4ddfdeac90b3d2"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffa}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @match={{0xa}, @void}}, @NFTA_SET_ELEM_USERDATA={0x61, 0x6, 0x1, 0x0, "04b56b48ead90234f9377fbbfcad32c25af10ed3b16a06a53b7de5afc2511bee2c65c55fb6b1963bfcb2c8e89940c2c640d71e4cb27eb56edfcf24ea4837b3ef61c05df16c3138df084bcf9ccc64bb378b3b2f2bcc50f4d8ccbca169e5"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @connlimit={{0xe}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @bitwise={{0xc}, @void}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @numgen={{0xb}, @void}}]}, {0x4ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPRESSIONS={0xb0, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x38, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x8819}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}]}}}]}, @NFTA_SET_ELEM_KEY={0x2d8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xe0, 0x1, "272f3ac48ddeb77ee9578b97d9c0333b04c815beb8a17ca6735f8615be544a5cb1b6039c772e362fa592c610676e6dc487df5f04c174c44a9a79b0ab35e36d5bd44f4e734382019f4c871ca010808410bb05930ee263deaf8310c9957d6499bb0640b2e5930368b6237729218184b0e9da252cffba817913f7190399ffdf1dd8c42d9396d83671af33ed5a56dac104feee1f12ef06562940b2d4c6546cada209268cfafade45eb30afaa13de532c004b09185e5eabd377fd4906f3bfc799cd6262c34ef576ec5cdc64baa1a073ad9a007be3e2d08e3cb76903c01171"}, @NFTA_DATA_VALUE={0x1d, 0x1, "b3b4baca5a8a38ecf9f03e8093326a6491615ef154c87289cc"}, @NFTA_DATA_VALUE={0xd1, 0x1, "fbea4397cc98a80b6691481391e3082511083df98715373ae505bd5a33b1410fb5331c63f41e625536b0a204eaba0fbb676799d774e1fe173ed388d7a8458b11395d1472a143e934e3b1639b96a3cb4c408186534bced13c19ecd8d89bbcb33c885588e7af207f1869dd25744da460ec95cbf11f7b6a4dda76f82c960e1cd10bde840251b7a57011372010c8833224275d1e6f2f12fef202cee90948f8f38f499a355d3bc67e5a0323d0c692c5f5b84eabcaa78402e5c6e6e49cc8d97ac6e3ee85d7f68af012436204df89acda"}, @NFTA_DATA_VALUE={0xa9, 0x1, "88799096647884f3c90956066562dd66d4e50ed2abf0049637379597a1d35ed2e146602b6ff454c723e08b7c5ec05955bc159c40bb1d292ef15c057bf9499006ef85afe988b1e73ee97d9a9e8f959e551f004b0346e341fc14998ed0d77123786b9420f2990e97be82c2eed3cb1e226fa54947b16aadf7f7d3609b88b79258de2074e41edb77853e923873cafa87050e650bcab729c7b1c5980bd7c17c51460d2a635594de"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x53}, @NFTA_SET_ELEM_KEY_END={0xfc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}, {0xdc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x63, 0x6, 0x1, 0x0, "76af6eaa0248c6abca8e41838733ce66bd7e8909b70253c14eb3295e08e08fe4dc0e7f55e6b90036249b247ded97012b47f5fc23adbf02ee6566f7479546804537ea6690c7e1988f6c49f22d9bcf8c6d91c5f3b0d8153a947f363c9c2c685b"}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x40}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", ""]}}}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @log={{0x8}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1000}]}, {0x3a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xc4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x88, 0x1, "c25e485d0725a4f28e4d335921b7c993521991b23c96fd39cdd76465271a915f19b114a7c5755aa2a5a26caba9156a14d02f7a58e4ffe17e88e8de2b99a5881a24589a28d93e223b5fba614dc34675079985dfed2f53ffb4be6e46abfdbea368467735eca0cacbd8dbada9d9b6b66062fcb34d03612e77772cb5162b90526d08fc977ef8"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x2c8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe8, 0x1, "6156f22f8a7397a8213ec4f69ec46303b7368b91f84aed3ef906d16dfa919737875a10359fff2baefa45d4dc8805a0537d191501d7b4cac0a84765845b87d1e96d88af5dcb44953938624f8684383266630ea85d2b8575d59cb4c91120dc4d46e35e290f3996db71aae2807bb4562ce6d9f99e61f01a9b10d76e46cff4c7972c9480964196a8ebba693043e03ec9e887c51204ae7e796ca05e7c1af1b8378bda3acf3ef605604e2865b9eff5a40437e2de0cece84d259759e7bc5d496d41a92cf7fa3efe774c99dc717c145b3a2225da9f547fac0529fad8bbc93f056f6f6d9fb9ace321"}, @NFTA_DATA_VALUE={0x48, 0x1, "74cf5f65a0b72fe3e81a5ab6b84ded8182f9fba2c0019f6de9574b5c6e0b66d98bcd4249fc9965a78edd951a3b7940b0ab0ee9cb5f338f24c85085a92303798d8608a996"}, @NFTA_DATA_VALUE={0xa1, 0x1, "51764849220f875253f0683b425781745a0aeea4add3d9d14c73e07947bf690b335aeed1926247c6be5b6e6df8f37596a07dc57268f9a93c5ccdff074efd7996c3e38c16e820cda6b33d213ab9efcd2a4fb69a1ef29dfa6fed0f2cdab678f9f61ad1ba8c637f700bcecaec3b0c87714d0b869e1092ecc94e4bdaee556e8de9cfa941f74b623291545acb1fc942f8bd0190129af2fc8c5ecaf517571341"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xa0, 0x1, "69a1623e0dd5250f58efb8de96f455b7a55831828b5899afa52994c28d9f8036bc0b9fd0396fe56493a780e6ac25be8daadca4a6bb35a66edacb141ddb389e5741d039eef37eca0210105659e58b215e25a383856ee08ebcbe793a67a3cdf40586615e331895ef91875cbcfd55ac53919f53cef0a5df19774265572256f6bef99a6366d5c53aaf0bf3efb305f54401314f49b5e59dd2815b3bc45bfe"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0xd0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x9a, 0x6, 0x1, 0x0, "b2f9c2e05aad1c2b227160435c52928c44ec93d808c0614217b5ac9ed9a3bc6f5c8cc0fa722b93407fc6992e0c3cd9de0ef0b2e54a36225d3f8579ba0d57c0b23f03500c5ea8439e54684083139c6e7cdf501ca29a9883f589fc6396eecac41dad3bbd200e4336cffdca222fbe4e0661f570513b526a5919af08ea9e6321f23f3766a0f4b92af0273252142a7ae14fe6bf2d18c6fcf2"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0x198, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0xe4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_DATA={0x54, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_USERDATA={0x37, 0x6, 0x1, 0x0, "1a600d2118087a48c0f0d4213991f4af1b04e5afd812adc82d2c14d7566cfe9c11664fbdb101cd0345c250987af858bf5135b5"}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x1b8, 0x18, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xc0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x98, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4982886}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x29c4}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) unshare(0x26020480) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000046000701fefffffffcdbdf25047c0000080001"], 0x1c}}, 0xc000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r2, r3, 0x2e, 0x0, @val=@iter={&(0x7f0000000240)=@cgroup={0x2, r3, 0x2}, 0x10}}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 1.792273737s ago: executing program 3 (id=3063): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1.510185376s ago: executing program 2 (id=3064): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000002c0), &(0x7f0000000340)=r2}, 0x20) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0xffffffffffffffff}, 0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.418790585s ago: executing program 4 (id=3065): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x304}, "ffedfbff04ffff2b", "8e083700daf38a6d1bc4ce63aaf13308", "6a3a05b9", "127725410400"}, 0x28) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d3, &(0x7f00000001c0)="9f9553") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="4804000010000100000000080000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000020003b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000fdca710000000033000000ac1414aa000000000000000000000000040000000000000000000000000000000000000000000000a517500400000000000000000000000000000000000000090000000000000000ffffffffffffffff00000080560000000000000000000000030000000000000000000000000000001000000009000000020000000000000000000000020001000000000000000000e4000600ff070000000000000000000000000001200100000000000000000000000000004e24100900000003020080a091", @ANYRES32=r7, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000aa000004d46c0000000a0101010000000000000000000000000600000000000000070000000000000001000000000000000b000000000000000400000000000000027c000000000000050000000000000006000000000000000900000000000000060000000000000002000000000000000100000000000000ff07000001000000090000002cbd700002350000020004082d00000000000000e4000600fc000000000000000000000000000001ff0100000000000000000000000000014e2100004e22000e0a0080b032000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="03000000"], 0x448}}, 0x0) sendfile(r1, r5, 0x0, 0xffffffff004) 1.345132733s ago: executing program 1 (id=3066): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000002c0), &(0x7f0000000340)=r1}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000690003050000000000001c5200000006"], 0x18}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.232469545s ago: executing program 2 (id=3067): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000000000000000080000080"], 0x26}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x9, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x805) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000003c0)=""/145, 0x91}, {&(0x7f0000000480)=""/50, 0x32}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f00000005c0)=""/68, 0x44}, {&(0x7f0000000640)=""/57, 0x39}, {&(0x7f0000000780)=""/206, 0xce}], 0x6, &(0x7f0000000900)=""/35, 0x23}, 0x2}, {{&(0x7f0000000940)=@ll, 0x80, &(0x7f00000011c0)=[{&(0x7f00000009c0)=""/129, 0x81}, {&(0x7f0000000a80)=""/175, 0xaf}, {&(0x7f0000000b40)=""/211, 0xd3}, {&(0x7f0000000c40)=""/221, 0xdd}, {&(0x7f0000000d40)=""/171, 0xab}, {&(0x7f0000000e00)=""/171, 0xab}, {&(0x7f0000000ec0)=""/198, 0xc6}, {&(0x7f0000000fc0)=""/12, 0xc}, {&(0x7f0000001000)=""/226, 0xe2}, {&(0x7f0000001100)=""/129, 0x81}], 0xa}, 0x1ff}, {{&(0x7f0000001280)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001300)=""/223, 0xdf}], 0x1, &(0x7f0000001440)=""/253, 0xfd}}, {{&(0x7f0000001540)=@ieee802154, 0x80, &(0x7f0000001940)=[{&(0x7f00000015c0)=""/212, 0xd4}, {&(0x7f00000016c0)=""/128, 0x80}, {&(0x7f0000001740)=""/106, 0x6a}, {&(0x7f00000017c0)=""/177, 0xb1}, {&(0x7f0000001c00)=""/141, 0x8d}], 0x5, &(0x7f00000019c0)=""/213, 0xd5}, 0x2}], 0x4, 0x40000000, &(0x7f0000001bc0)={0x77359400}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)="3c44e4a53a", 0x5}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @multicast1}}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, &(0x7f00000004c0)='N', 0x0}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028005000300000000000800014000000001080002400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) 1.104711018s ago: executing program 1 (id=3068): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x6, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x3ff, 0x0, 0x1, 0x6ab, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r4, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) (rerun: 64) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000540)={{r0, &(0x7f0000000380)='\x00', 0x2a0400, &(0x7f00000003c0)={@align=0x2b0, {0x0, 0x4, 0x8000, 0x9}}, 0x8, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000440)=0x5}, {[0xc4, 0x6, 0xcc, 0x8]}, 0x8, 0x96, &(0x7f0000000480)=""/150}) (async, rerun: 64) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x0, 0x0}, 0x8) (rerun: 64) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_pressure(r9, &(0x7f0000000480)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r10, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) (async, rerun: 64) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=r5], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (rerun: 64) close(r11) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r13, @ANYRES32=r12, @ANYBLOB='&'], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r13}, &(0x7f0000000000), &(0x7f0000000080)=r11}, 0x20) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00'}, 0x18) (async, rerun: 64) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r15, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r16 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r16, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r15, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x8, 0x0, 0x1c, {[@window={0xb, 0x3}, @timestamp={0x5, 0xa, 0x0, 0xa65}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e) r17 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0x0, 0x3, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x1f, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1800000001000000000000000500000018110000", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000010000008500000042000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x30b7e718, 0xe0, &(0x7f0000000240)=""/224, 0x41100, 0xc, '\x00', r6, @fallback=0x9, r7, 0x8, &(0x7f00000005c0)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, r8, r0, 0x0, &(0x7f0000000700)=[r13, r14, r17], 0x0, 0x10, 0x6}, 0x94) ioctl(r0, 0xffffffff, &(0x7f0000000800)="77ec32e44e0d4f5e45757f57ddd0c13b5ebbd8e8b0f609c551f12b61481cb36ec1e4f7d48df1ef7f690790e0507c0e3436fc7fde40c577530d0678473978028e39d9e674adb1594911926199b5efc391958883cc3223747eb9987b709385bf6c0b011c0dc7dcb5e8484d260cafc4772f341c1ec5ff70e7656b27b4db29e7976088d96fb8e4950684a15bfe7696258e45cdea2cd9fb12450986acca29882429b73dd6379f6767fd71e782acc4a4e0c2c499ee01bf2f95196ab095f0e0dbae460de4457db8c171923a5065d7c1a1581d4ce88bef6b8f4edbcf52f3dfc06c") 1.099107845s ago: executing program 3 (id=3069): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x80}, 0x1, 0x0, 0x0, 0x40800}, 0x24040091) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x824, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000300)={0xffffffffffffffff, 0x3, 0x0, 0xfffffffffffffff8}) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r5, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x8800) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r3, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004801}, 0x6004c000) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x50, r6, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x48004) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r7, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x280000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040890}, 0x4000800) socket$kcm(0x29, 0x2, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r4) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000a80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000008c0)={0x170, r8, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x101}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xbff0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xe}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}]}, 0x170}, 0x1, 0x0, 0x0, 0x50}, 0x40) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r4) sendmsg$NL80211_CMD_SET_MAC_ACL(r4, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, r9, 0x202, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0xc0) r10 = accept$unix(r4, &(0x7f0000000c40), &(0x7f0000000cc0)=0x6e) listen(r10, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r11, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x38, r7, 0x10, 0x8, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0x38}}, 0x40) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, 0x1407, 0x800, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) getsockopt$TIPC_NODE_RECVQ_DEPTH(r4, 0x10f, 0x83, &(0x7f0000000f00), &(0x7f0000000f40)=0x4) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000fc0)={@initdev, @remote, 0x0}, &(0x7f0000001000)=0xc) sendmsg$nl_route(r4, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)=@mpls_getnetconf={0x1c, 0x52, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x800) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001100)="36a6594f161fbf9693c5eb497d1df22bb7954fba94ba50d0a907414b30a00c065d691c880d104aae274a437c10b38c2b9c7bdc139810a5d683e4cd5658d74e63ee0c19ec8e317ced80179cdfba64e4e94d5abb082a0f4a41b82b205968cbf807fa6528e7c9c89a00d8c4a739f2477d46f243e7e3638f3dd663ab8643e05cb0fcfde79aaae621a195745514e00454", 0x8e) sendfile(0xffffffffffffffff, r4, &(0x7f00000011c0)=0x5ea, 0x1) socket(0x29, 0x80000, 0xe5b) 753.228184ms ago: executing program 3 (id=3070): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x20000000, 0xb2, 0xa8}, 0x38}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000008002500000088125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) r8 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_udp_int(r8, 0x11, 0x66, 0x0, &(0x7f0000000b80)) 752.654557ms ago: executing program 1 (id=3071): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r0, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7fff}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x82b}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x1000100}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x1000}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x1}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x603e}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc004000}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x9c549d950daccbb1}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x164, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x79}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x75}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0xec, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x51}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffd}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x48000}, 0x800) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), r1) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r3, 0xa2d96ff04bd73ac6, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0xc010) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r4, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x18, 0x400, @l2={'ib', 0x3a, 'geneve1\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x400a804}, 0x800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, r6, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000044}, 0x20042000) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r3, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000bc0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000940)={0x238, r7, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x101}, {0x6}, {0x8, 0x15, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x9c}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x1000}, {0x8, 0x15, 0x10000}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xa}, {0x6}, {0x8, 0x15, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x50e}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x89}, {0x8, 0x15, 0xa7d}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x7f}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x2}}]}, 0x238}, 0x1, 0x0, 0x0, 0x4004801}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000cc0)={'ip6_vti0\x00', &(0x7f0000000c40)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x4, 0x80, 0x0, @loopback, @remote, 0x8000, 0x10, 0xa4, 0x5}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000d00)=0x0, &(0x7f0000000d40)=0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000e00)={'gretap0\x00', &(0x7f0000000d80)={'gre0\x00', 0x0, 0x1, 0x8000, 0x80, 0x7fffffff, {{0xc, 0x4, 0x2, 0x2, 0x30, 0x66, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp_addr={0x44, 0x1c, 0xfe, 0x1, 0xf, [{@private=0xa010100}, {@rand_addr=0x64010100, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7e}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000ec0)={'syztnl2\x00', &(0x7f0000000e40)={'syztnl1\x00', 0x0, 0x4, 0xc8, 0x19, 0x5, 0x50, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x80, 0x8, 0x9}}) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000001000)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0xb0, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0xb0}, 0x1, 0x0, 0x0, 0x44051}, 0x4040040) r12 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r12, 0x400448c8, &(0x7f0000001080)={r1, r1, 0xc6, 0x21, &(0x7f0000001040)="c70c4f3305946c6043913b182760e6d6d9d5e12a8246c8a18b39f03eaf4cdae737", 0x8, 0x81, 0x6, 0x0, 0x1000, 0x2, 0x8, 'syz1\x00'}) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001180), r5) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r13, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x50, r14, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008010}, 0x80) r15 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r15, &(0x7f00000012c0)={0x2, 0x0, @remote}, 0x10) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000001300)={'wlan1\x00'}) r16 = syz_genetlink_get_family_id$batadv(&(0x7f0000001380), r1) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, r16, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x20000840) 472.835538ms ago: executing program 1 (id=3072): r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_int(r0, 0x0, 0x7, &(0x7f00000000c0), &(0x7f0000000000)=0xfffffffffffffc8f) r1 = socket$inet6(0x10, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r3, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r7, 0x800442d3, &(0x7f0000000040)={0xf384d01c, 0xa4c, 0x39, @random="5cca1428591b", 'bond_slave_1\x00'}) write(r1, &(0x7f00000007c0)="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", 0xfc) 254.847728ms ago: executing program 4 (id=3073): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x2007813, 0x40003, 0x6, 0x81, 0x1fd, 0x1, 0x3}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x1, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}}) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r2, &(0x7f00000030c0), 0x4000000, 0x9200000000000000) 182.221723ms ago: executing program 2 (id=3074): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5, 0x0, 0x3f00}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 166.088446ms ago: executing program 3 (id=3075): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000a00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000680)={0x310, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xa, 0x77}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1e0}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x9e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x30}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b0}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x30, 0xfa, "e6645b195d5e0450c1d00ef3abb34141a0f830d42595589f184fa981e41bbf72264095634b71cabd931b8876"}, @NL80211_ATTR_FILS_ERP_RRK={0xac, 0xfc, "6be2a0183d04462083d5b1d036b3740edfa25293124db60bca7889a60ece5584bc5dc5d5f51c230d66eb1a6282f1919ecbcf7db7430888ed72b0b39b864a515b936181fa49eeb18266042bfdabba7455095a5a1a8e89cd6eb976fb14d53bb311bc1625ee16925d8e07450efae31c130b5f748f7db29ade00fbd3bc134ff605cf05cf9786f4d2e044304f7fab229e01f3df548b25a3454877e40bb1c01a9c742b4b02fc055117b390"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xf}, @NL80211_ATTR_FILS_ERP_RRK={0xcb, 0xfc, "fccfc187d8b111600487755e82539b8ec081fd32b2ced7d506ffd7ed809e4e6c1e61b3bf3eb7670d1c10dfd795d2b9d8db6a814216846b0f20b1aefbcd322694faf618bce36bfa2488cb702efa21aabfd360deccb61569a31552005d455de8e654d650f1373ce91fce13cc14d5a034e83c38a0768e7bffa640edf9707240ab9db6f247b67c344a4d6698acc4e4ef9c2350bac350827f21356582eea1ef7f560533b9f0a6760312dcddd0960edfeebc6a1f4128eea0a1b0ead90cf451e0acfda028c4db5720a2b6"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_USERNAME={0x13, 0xf9, "0c6c3153407536bf7f6cfe93a40695"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}, @NL80211_ATTR_FILS_ERP_REALM={0xbb, 0xfa, "95cc7fcb559c66e8c72e0a7f44c7c71729d8e353c0fe485c178fc9ca31e5bf0c50226cab4481d2647752bdd90e1a4dafa0ff251f01ca374ed637acb38b5f8c2f2625fd014903fce41a9b4e57bd75d8b3f1636b58c0846dfa851001e91dd0321c4840f2608147833a3e5fb3ff2fb630414fc9cbbfa61f6f09a4cc1e1ea044392b72d064977142dbe8ebe2b72e732f7a6682510f8b90541f9a0d0628a375dfb0b20a7682780a259a6ef1cfbb13288d17069a2ba6369fdadb"}], @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="3063a95b95f9"}]}, 0x310}, 0x1, 0x0, 0x0, 0x4884}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002"], 0x48}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000a00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000680)={0x310, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xa, 0x77}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1e0}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x9e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x30}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b0}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x30, 0xfa, "e6645b195d5e0450c1d00ef3abb34141a0f830d42595589f184fa981e41bbf72264095634b71cabd931b8876"}, @NL80211_ATTR_FILS_ERP_RRK={0xac, 0xfc, "6be2a0183d04462083d5b1d036b3740edfa25293124db60bca7889a60ece5584bc5dc5d5f51c230d66eb1a6282f1919ecbcf7db7430888ed72b0b39b864a515b936181fa49eeb18266042bfdabba7455095a5a1a8e89cd6eb976fb14d53bb311bc1625ee16925d8e07450efae31c130b5f748f7db29ade00fbd3bc134ff605cf05cf9786f4d2e044304f7fab229e01f3df548b25a3454877e40bb1c01a9c742b4b02fc055117b390"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xf}, @NL80211_ATTR_FILS_ERP_RRK={0xcb, 0xfc, "fccfc187d8b111600487755e82539b8ec081fd32b2ced7d506ffd7ed809e4e6c1e61b3bf3eb7670d1c10dfd795d2b9d8db6a814216846b0f20b1aefbcd322694faf618bce36bfa2488cb702efa21aabfd360deccb61569a31552005d455de8e654d650f1373ce91fce13cc14d5a034e83c38a0768e7bffa640edf9707240ab9db6f247b67c344a4d6698acc4e4ef9c2350bac350827f21356582eea1ef7f560533b9f0a6760312dcddd0960edfeebc6a1f4128eea0a1b0ead90cf451e0acfda028c4db5720a2b6"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_USERNAME={0x13, 0xf9, "0c6c3153407536bf7f6cfe93a40695"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}, @NL80211_ATTR_FILS_ERP_REALM={0xbb, 0xfa, "95cc7fcb559c66e8c72e0a7f44c7c71729d8e353c0fe485c178fc9ca31e5bf0c50226cab4481d2647752bdd90e1a4dafa0ff251f01ca374ed637acb38b5f8c2f2625fd014903fce41a9b4e57bd75d8b3f1636b58c0846dfa851001e91dd0321c4840f2608147833a3e5fb3ff2fb630414fc9cbbfa61f6f09a4cc1e1ea044392b72d064977142dbe8ebe2b72e732f7a6682510f8b90541f9a0d0628a375dfb0b20a7682780a259a6ef1cfbb13288d17069a2ba6369fdadb"}], @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="3063a95b95f9"}]}, 0x310}, 0x1, 0x0, 0x0, 0x4884}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002"], 0x48}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) 0s ago: executing program 1 (id=3076): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@delchain={0x24, 0x65, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000daf3715ede9ef24200007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012800b00010062726964676500000c000280040018"], 0x3c}, 0x1, 0x0, 0x0, 0x34001843}, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="580000000009030000000000000080000700000008000540000000000c00048008000116c14640000000040900010073797a30100000002400020014000180080200000000000c0002800500010084000000000400000000000000351545c894b15450c2876ca610193b26562069871a63f9f967362694a5fd833395f0ec0a1f7e1eca037283d0346e8f3f1d0d41229ab3abb7481c84e8a087569d234332f4cd45"], 0x58}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207f00000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000380)) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f00000003c0)={0x4, 0x9}, 0xc) close(r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d100"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8158ecb0", @ANYRES16=r8, @ANYBLOB="010002000020ffdbdf252500000008000300", @ANYRES32=r10, @ANYBLOB="080026006c0900000a000600080211000001000008003500000000000a00340002020202020200000500080002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) kernel console output (not intermixed with test programs): [T10381] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1295'. [ 238.684028][T10391] netlink: 'syz.4.1295': attribute type 4 has an invalid length. [ 238.723656][T10391] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1295'. [ 238.783986][T10391] .`: renamed from bond0 [ 238.805414][T10401] syzkaller0: entered promiscuous mode [ 238.832453][T10401] syzkaller0: entered allmulticast mode [ 238.895834][T10406] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1299'. [ 238.977690][ T76] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 239.060758][T10421] ±ÿª¨úrBº“: renamed from lo (while UP) [ 239.072536][T10422] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1302'. [ 239.555464][T10436] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1306'. [ 239.756516][T10438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1307'. [ 241.847785][T10407] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 241.860237][T10435] netlink: 'syz.1.1306': attribute type 11 has an invalid length. [ 241.880874][T10435] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1306'. [ 242.315177][T10452] bond5: option resend_igmp: invalid value (32767) [ 242.325490][T10452] bond5: option resend_igmp: allowed values 0 - 255 [ 242.347378][T10452] bond5 (unregistering): Released all slaves [ 242.414926][T10467] netlink: 'syz.4.1314': attribute type 12 has an invalid length. [ 242.625396][T10473] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1317'. [ 243.215663][T10506] wg1 speed is unknown, defaulting to 1000 [ 243.530151][T10481] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 243.649771][T10523] netlink: 'syz.4.1329': attribute type 1 has an invalid length. [ 243.915403][T10534] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1331'. [ 243.943620][T10530] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 244.208608][T10544] syzkaller0: entered promiscuous mode [ 244.248115][T10544] syzkaller0: entered allmulticast mode [ 244.298417][T10549] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 244.469054][T10559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1338'. [ 244.691991][T10561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1337'. [ 244.830776][T10577] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1340'. [ 244.968001][T10577] veth19: entered promiscuous mode [ 244.994358][T10577] team0: Port device veth19 added [ 245.485156][T10601] veth0: entered promiscuous mode [ 245.526754][T10601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1345'. [ 245.573316][T10601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1345'. [ 245.637446][T10601] netlink: 'syz.2.1345': attribute type 12 has an invalid length. [ 245.674200][T10601] netlink: 'syz.2.1345': attribute type 11 has an invalid length. [ 245.735110][T10598] veth0: left promiscuous mode [ 246.009685][T10621] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1353'. [ 246.195737][T10621] veth21: entered promiscuous mode [ 246.238936][T10621] team0: Port device veth21 added [ 246.566569][T10641] syzkaller0: entered promiscuous mode [ 246.582299][T10641] syzkaller0: entered allmulticast mode [ 246.610557][T10644] syzkaller0: entered promiscuous mode [ 246.626393][T10644] syzkaller0: entered allmulticast mode [ 246.918508][T10657] netlink: 212396 bytes leftover after parsing attributes in process `syz.4.1362'. [ 247.313197][T10673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1367'. [ 247.454787][T10683] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1369'. [ 247.594286][T10673] 8021q: adding VLAN 0 to HW filter on device bond5 [ 247.699641][T10683] veth11: entered promiscuous mode [ 247.908097][T10688] 8021q: adding VLAN 0 to HW filter on device bond6 [ 247.972327][T10688] bond5: (slave bond6): Enslaving as an active interface with an up link [ 248.005026][ T5643] Bluetooth: hci4: link tx timeout [ 248.013724][ T5643] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 248.240086][ T5643] Bluetooth: hci4: command 0x0405 tx timeout [ 248.845862][T10742] veth9: entered promiscuous mode [ 248.886662][T10750] veth0: Caught tx_queue_len zero misconfig [ 248.905600][T10744] syzkaller0: entered promiscuous mode [ 248.929427][T10744] syzkaller0: entered allmulticast mode [ 249.051320][T10754] __nla_validate_parse: 1 callbacks suppressed [ 249.051341][T10754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1389'. [ 249.355496][T10769] x_tables: duplicate underflow at hook 3 [ 249.508855][T10782] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.1397'. [ 249.573991][T10782] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 249.636992][T10782] 0ªX¹¦Dö»: entered allmulticast mode [ 249.784229][T10794] openvswitch: netlink: Key 26 has unexpected len 284 expected 16 [ 249.904960][T10796] syzkaller0: entered promiscuous mode [ 249.913504][T10796] syzkaller0: entered allmulticast mode [ 250.085568][T10804] syzkaller0: entered promiscuous mode [ 250.093171][T10804] syzkaller0: entered allmulticast mode [ 250.320002][ T5643] Bluetooth: hci4: command 0x0405 tx timeout [ 252.275881][T10764] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 252.571095][T10810] netlink: 'syz.1.1406': attribute type 24 has an invalid length. [ 252.624945][T10813] tipc: Cannot configure node identity twice [ 252.655481][T10810] veth1_to_bond: entered allmulticast mode [ 252.665074][T10810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1406'. [ 252.671317][T10820] team0: Cannot enslave team device to itself [ 252.694740][T10810] veth1_to_bond (unregistering): left allmulticast mode [ 252.703638][T10820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1410'. [ 252.769947][T10810] bond0: (slave bond_slave_1): Releasing backup interface [ 252.788340][T10810] bond_slave_1 (unregistering): left allmulticast mode [ 252.825950][T10813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.065797][T10835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1414'. [ 253.090144][T10837] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 253.127532][T10841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1414'. [ 253.166262][T10844] FAULT_INJECTION: forcing a failure. [ 253.166262][T10844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.204423][T10844] CPU: 0 UID: 0 PID: 10844 Comm: syz.2.1416 Not tainted syzkaller #0 PREEMPT(full) [ 253.204456][T10844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 253.204486][T10844] Call Trace: [ 253.204495][T10844] [ 253.204505][T10844] dump_stack_lvl+0xe8/0x150 [ 253.204535][T10844] should_fail_ex+0x412/0x560 [ 253.204565][T10844] _copy_from_user+0x2d/0xb0 [ 253.204593][T10844] ___sys_sendmsg+0x1c6/0x360 [ 253.204613][T10844] ? __lock_acquire+0x6b5/0x2cf0 [ 253.204642][T10844] ? __pfx____sys_sendmsg+0x10/0x10 [ 253.204700][T10844] ? __fget_files+0x2a/0x420 [ 253.204726][T10844] ? __fget_files+0x3a0/0x420 [ 253.204763][T10844] __x64_sys_sendmsg+0x1bd/0x2a0 [ 253.204788][T10844] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 253.204820][T10844] ? __pfx_ksys_write+0x10/0x10 [ 253.204860][T10844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.204883][T10844] do_syscall_64+0x174/0x580 [ 253.204905][T10844] ? trace_irq_disable+0x3b/0x140 [ 253.204937][T10844] ? clear_bhb_loop+0x40/0x90 [ 253.204964][T10844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.204985][T10844] RIP: 0033:0x7fb39a19ce59 [ 253.205005][T10844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.205023][T10844] RSP: 002b:00007fb39b137028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.205045][T10844] RAX: ffffffffffffffda RBX: 00007fb39a415fa0 RCX: 00007fb39a19ce59 [ 253.205061][T10844] RDX: 0000000000028000 RSI: 0000200000006000 RDI: 0000000000000003 [ 253.205075][T10844] RBP: 00007fb39b137090 R08: 0000000000000000 R09: 0000000000000000 [ 253.205088][T10844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.205100][T10844] R13: 00007fb39a416038 R14: 00007fb39a415fa0 R15: 00007ffca2951b28 [ 253.205134][T10844] [ 253.668753][T10852] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1419'. [ 253.703453][T10851] syzkaller0: entered promiscuous mode [ 253.735473][T10851] syzkaller0: entered allmulticast mode [ 253.981124][T10865] syzkaller0: entered promiscuous mode [ 254.028871][T10865] syzkaller0: entered allmulticast mode [ 254.082949][T10872] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1425'. [ 254.545352][T10897] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1431'. [ 254.621068][T10897] veth13: entered promiscuous mode [ 254.636109][T10899] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1432'. [ 254.656251][T10899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1432'. [ 254.668648][T10899] netlink: 63 bytes leftover after parsing attributes in process `syz.3.1432'. [ 254.712607][T10896] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 254.770885][T10901] netlink: 'syz.4.1433': attribute type 1 has an invalid length. [ 254.784368][T10901] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1433'. [ 255.081826][T10913] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1437'. [ 255.264638][T10921] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.502396][T10928] syzkaller0: entered promiscuous mode [ 255.503701][T10929] netlink: 'syz.4.1442': attribute type 1 has an invalid length. [ 255.553287][T10928] syzkaller0: entered allmulticast mode [ 255.570521][T10929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1442'. [ 255.600502][T10932] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1443'. [ 255.751026][T10932] veth13: entered promiscuous mode [ 255.927427][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.987800][T10943] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1446'. [ 256.183498][T10949] netlink: 'syz.0.1448': attribute type 16 has an invalid length. [ 256.240610][T10949] netlink: 'syz.0.1448': attribute type 17 has an invalid length. [ 256.316527][T10956] syz_tun: entered allmulticast mode [ 256.406633][T10949] 0ªX¹¦Dö»: left allmulticast mode [ 256.560933][T10949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.650344][T10949] veth1: left promiscuous mode [ 256.658721][T10949] geneve2: left promiscuous mode [ 256.677452][T10949] geneve2: left allmulticast mode [ 256.689182][T10949] 8021q: adding VLAN 0 to HW filter on device bond2 [ 256.716029][T10949] 8021q: adding VLAN 0 to HW filter on device bond4 [ 256.736577][T10949] veth5: left promiscuous mode [ 256.747766][T10949] bond5: left promiscuous mode [ 256.754325][T10949] bridge2: left promiscuous mode [ 256.771456][T10949] veth7: left promiscuous mode [ 256.780743][T10949] veth9: left promiscuous mode [ 256.805567][T10949] veth13: left promiscuous mode [ 256.822925][T10949] veth15: left promiscuous mode [ 256.839071][T10949] veth19: left promiscuous mode [ 256.852879][T10949] veth21: left promiscuous mode [ 256.958774][T10954] syz_tun: left allmulticast mode [ 257.274843][T10976] xt_hashlimit: size too large, truncated to 1048576 [ 257.654436][T10996] syzkaller0: entered promiscuous mode [ 257.669786][T10996] syzkaller0: entered allmulticast mode [ 257.927682][T11008] netlink: 'syz.2.1461': attribute type 3 has an invalid length. [ 260.140630][T10982] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 260.175419][T11045] __nla_validate_parse: 3 callbacks suppressed [ 260.175442][T11045] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1474'. [ 260.603176][T11076] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.685377][T11078] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1478'. [ 260.725365][T11078] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1478'. [ 260.802609][T11076] bridge_slave_0 (unregistering): left allmulticast mode [ 260.856122][T11076] bridge_slave_0 (unregistering): left promiscuous mode [ 260.905098][T11076] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.286926][T11089] syzkaller0: entered promiscuous mode [ 261.310476][T11089] syzkaller0: entered allmulticast mode [ 261.425761][T11106] sit0: entered promiscuous mode [ 261.463102][T11106] netlink: 'syz.2.1484': attribute type 1 has an invalid length. [ 261.507775][T11106] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1484'. [ 261.556109][T11114] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1486'. [ 261.723264][T11114] veth17: entered promiscuous mode [ 261.747416][T11114] team0: Port device veth17 added [ 261.785644][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1488'. [ 261.840377][T11125] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1489'. [ 262.189577][T11129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1490'. [ 262.417699][T11144] netlink: 'syz.3.1496': attribute type 29 has an invalid length. [ 262.562906][T11144] netlink: 'syz.3.1496': attribute type 29 has an invalid length. [ 262.946770][T11168] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1505'. [ 262.975161][T11171] sctp: [Deprecated]: syz.2.1504 (pid 11171) Use of int in maxseg socket option. [ 262.975161][T11171] Use struct sctp_assoc_value instead [ 263.043609][T11170] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1506'. [ 263.247195][T11180] tun0: tun_chr_ioctl cmd 1074025675 [ 263.287649][T11180] tun0: persist disabled [ 263.746710][T11200] veth0_to_bond: entered allmulticast mode [ 263.978575][T11207] netlink: 'syz.0.1516': attribute type 1 has an invalid length. [ 263.990057][T11208] netlink: 'syz.1.1514': attribute type 11 has an invalid length. [ 264.313959][T11207] bond6: (slave bridge4): Enslaving as a backup interface with an up link [ 264.390712][T11210] macvlan2: entered promiscuous mode [ 264.417939][T11210] macvlan2: entered allmulticast mode [ 264.444001][T11210] bond6: entered promiscuous mode [ 264.461388][T11210] bridge4: entered promiscuous mode [ 264.486432][T11210] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 264.521636][T11210] bond6: left promiscuous mode [ 264.548352][T11210] bridge4: left promiscuous mode [ 264.944109][T11243] IPVS: Error joining to the multicast group [ 265.312740][T11261] netlink: 'syz.0.1530': attribute type 23 has an invalid length. [ 265.445955][T11268] syzkaller0: entered promiscuous mode [ 265.459725][T11268] syzkaller0: entered allmulticast mode [ 265.747559][T11278] netlink: 'syz.1.1535': attribute type 5 has an invalid length. [ 265.797542][T11283] __nla_validate_parse: 1 callbacks suppressed [ 265.797564][T11283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1538'. [ 265.837890][T11283] openvswitch: netlink: Unknown nsh attribute 0 [ 265.855974][T11286] netlink: 'syz.3.1537': attribute type 8 has an invalid length. [ 265.942938][T11284] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1537'. [ 266.011773][T11290] netlink: 'syz.1.1540': attribute type 1 has an invalid length. [ 266.178250][T11297] netlink: 'syz.0.1542': attribute type 10 has an invalid length. [ 266.230302][T11297] ipvlan0: entered allmulticast mode [ 266.238395][T11297] veth0_vlan: entered allmulticast mode [ 266.272472][T11297] team0: Device ipvlan0 failed to register rx_handler [ 266.355179][T11300] bond0: (slave gre0): refused to change device type [ 266.393131][T11307] netlink: 'syz.4.1544': attribute type 1 has an invalid length. [ 266.421839][T11307] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1544'. [ 266.445006][T11309] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1545'. [ 266.476481][T11307] NCSI netlink: No device for ifindex 0 [ 266.897405][T11325] xt_policy: too many policy elements [ 267.422475][T11345] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1556'. [ 267.690899][T11350] veth19: entered allmulticast mode [ 267.725999][T11353] syzkaller0: entered promiscuous mode [ 267.738374][T11353] syzkaller0: entered allmulticast mode [ 267.866783][T11361] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 268.115229][T11370] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.1565'. [ 268.162451][T11370] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 268.418675][T11387] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1569'. [ 268.728775][T11402] syzkaller0: entered promiscuous mode [ 268.764856][T11402] syzkaller0: entered allmulticast mode [ 268.855799][T11404] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.1575'. [ 268.912979][T11408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1576'. [ 269.030215][T11408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1576'. [ 269.406296][T11419] netlink: 'syz.3.1580': attribute type 2 has an invalid length. [ 269.676804][T11441] syzkaller0: entered promiscuous mode [ 269.693729][T11441] syzkaller0: entered allmulticast mode [ 270.137757][T11460] syzkaller0: entered promiscuous mode [ 270.156869][T11460] syzkaller0: entered allmulticast mode [ 270.311373][T11468] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20004 [ 270.343672][T11471] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20004 [ 270.875364][T11507] __nla_validate_parse: 9 callbacks suppressed [ 270.875385][T11507] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1602'. [ 270.990801][T11501] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 271.251226][T11518] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1605'. [ 271.292334][T11518] netlink: 'syz.2.1605': attribute type 7 has an invalid length. [ 271.357794][T11518] netlink: 'syz.2.1605': attribute type 8 has an invalid length. [ 271.378654][T11518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1605'. [ 271.397634][T11518] erspan0: entered promiscuous mode [ 271.451299][T11518] erspan0: left promiscuous mode [ 271.782219][T11528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1612'. [ 271.835515][T11534] tipc: Enabling of bearer rejected, media not registered [ 271.864836][T11528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1612'. [ 271.918991][T11528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1612'. [ 272.074821][T11540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1614'. [ 272.289057][T11540] team0 (unregistering): Port device team_slave_0 removed [ 272.330555][T11540] team0 (unregistering): Port device team_slave_1 removed [ 272.353563][T11540] team0 (unregistering): Port device veth5 removed [ 272.376792][T11540] team0 (unregistering): Port device veth7 removed [ 272.391319][T11540] team0 (unregistering): Port device veth9 removed [ 272.656264][T11531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.866562][T11585] xt_hl: Unknown Hop Limit match mode: 206 [ 272.981005][T11589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1628'. [ 273.334084][T11604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1634'. [ 273.381079][T11608] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 273.469996][T11607] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1632'. [ 273.642672][T11615] syzkaller0: entered promiscuous mode [ 273.653101][T11615] syzkaller0: entered allmulticast mode [ 273.692661][T11615] tipc: Enabling of bearer rejected, failed to enable media [ 274.141456][T11635] openvswitch: netlink: Message has 6 unknown bytes. [ 274.818644][T11667] syzkaller0: entered promiscuous mode [ 274.826527][T11667] syzkaller0: entered allmulticast mode [ 274.839170][T11667] tipc: Enabling of bearer rejected, failed to enable media [ 275.443211][ T5654] Bluetooth: hci2: command 0x0406 tx timeout [ 275.588325][T11691] veth15: entered promiscuous mode [ 275.821144][T10042] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 275.963949][T11717] __nla_validate_parse: 6 callbacks suppressed [ 275.963973][T11717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1668'. [ 276.083244][T11722] syzkaller0: entered promiscuous mode [ 276.093728][T11722] syzkaller0: entered allmulticast mode [ 276.374755][T11730] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1672'. [ 276.387441][T11731] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1672'. [ 276.434586][T11730] syzkaller0: entered promiscuous mode [ 276.441231][T11730] syzkaller0: entered allmulticast mode [ 276.460803][T11733] IPv6: NLM_F_CREATE should be specified when creating new route [ 278.651973][T11702] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 278.927662][T11746] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1675'. [ 278.942669][T11745] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1676'. [ 278.958205][T11746] unsupported nla_type 7424 [ 279.286634][T11762] FAULT_INJECTION: forcing a failure. [ 279.286634][T11762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.354440][T11762] CPU: 1 UID: 0 PID: 11762 Comm: syz.4.1682 Not tainted syzkaller #0 PREEMPT(full) [ 279.354470][T11762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 279.354484][T11762] Call Trace: [ 279.354493][T11762] [ 279.354503][T11762] dump_stack_lvl+0xe8/0x150 [ 279.354534][T11762] should_fail_ex+0x412/0x560 [ 279.354564][T11762] _copy_from_user+0x2d/0xb0 [ 279.354590][T11762] ___sys_sendmsg+0x1c6/0x360 [ 279.354612][T11762] ? __lock_acquire+0x6b5/0x2cf0 [ 279.354639][T11762] ? __pfx____sys_sendmsg+0x10/0x10 [ 279.354699][T11762] ? __fget_files+0x2a/0x420 [ 279.354725][T11762] ? __fget_files+0x3a0/0x420 [ 279.354761][T11762] __x64_sys_sendmsg+0x1bd/0x2a0 [ 279.354807][T11762] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 279.354840][T11762] ? __pfx_ksys_write+0x10/0x10 [ 279.354879][T11762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.354901][T11762] do_syscall_64+0x174/0x580 [ 279.354921][T11762] ? trace_irq_disable+0x3b/0x140 [ 279.354954][T11762] ? clear_bhb_loop+0x40/0x90 [ 279.354981][T11762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.355003][T11762] RIP: 0033:0x7fa53e19ce59 [ 279.355022][T11762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.355041][T11762] RSP: 002b:00007fa53f0a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.355065][T11762] RAX: ffffffffffffffda RBX: 00007fa53e415fa0 RCX: 00007fa53e19ce59 [ 279.355081][T11762] RDX: 0000000000000004 RSI: 0000200000000500 RDI: 0000000000000003 [ 279.355094][T11762] RBP: 00007fa53f0a2090 R08: 0000000000000000 R09: 0000000000000000 [ 279.355107][T11762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.355119][T11762] R13: 00007fa53e416038 R14: 00007fa53e415fa0 R15: 00007ffd8858e218 [ 279.355154][T11762] [ 279.797661][T11772] ipt_rpfilter: unknown options [ 279.901307][T11777] syzkaller0: entered promiscuous mode [ 279.908480][T11777] syzkaller0: entered allmulticast mode [ 279.978224][T11778] netlink: 'syz.1.1688': attribute type 58 has an invalid length. [ 280.000976][T11775] tipc: Enabling of bearer rejected, failed to enable media [ 280.024330][T11778] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1688'. [ 280.313198][ T36] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 280.595244][T11812] FAULT_INJECTION: forcing a failure. [ 280.595244][T11812] name failslab, interval 1, probability 0, space 0, times 0 [ 280.682417][T11812] CPU: 1 UID: 0 PID: 11812 Comm: syz.1.1694 Not tainted syzkaller #0 PREEMPT(full) [ 280.682450][T11812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 280.682464][T11812] Call Trace: [ 280.682474][T11812] [ 280.682484][T11812] dump_stack_lvl+0xe8/0x150 [ 280.682514][T11812] should_fail_ex+0x412/0x560 [ 280.682566][T11812] should_failslab+0xa8/0x100 [ 280.682591][T11812] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 280.682897][T11812] ? __alloc_skb+0x186/0x7d0 [ 280.682930][T11812] ? __alloc_skb+0x1d0/0x7d0 [ 280.682957][T11812] ? __local_bh_enable_ip+0xd0/0x130 [ 280.682983][T11812] __alloc_skb+0x1d0/0x7d0 [ 280.683019][T11812] netlink_sendmsg+0x5d4/0xb40 [ 280.683123][T11812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.683161][T11812] ? aa_sock_msg_perm+0xf1/0x1b0 [ 280.683193][T11812] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 280.683227][T11812] ____sys_sendmsg+0x972/0x9f0 [ 280.683248][T11812] ? __might_fault+0xaf/0x130 [ 280.683283][T11812] ? __pfx_____sys_sendmsg+0x10/0x10 [ 280.683313][T11812] ? import_iovec+0x73/0xa0 [ 280.683343][T11812] ___sys_sendmsg+0x2a5/0x360 [ 280.683364][T11812] ? __lock_acquire+0x6b5/0x2cf0 [ 280.683392][T11812] ? __pfx____sys_sendmsg+0x10/0x10 [ 280.683447][T11812] ? __fget_files+0x2a/0x420 [ 280.683471][T11812] ? __fget_files+0x3a0/0x420 [ 280.683509][T11812] __x64_sys_sendmsg+0x1bd/0x2a0 [ 280.683534][T11812] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 280.683562][T11812] ? __pfx_ksys_write+0x10/0x10 [ 280.683599][T11812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.683623][T11812] do_syscall_64+0x174/0x580 [ 280.683644][T11812] ? trace_irq_disable+0x3b/0x140 [ 280.683677][T11812] ? clear_bhb_loop+0x40/0x90 [ 280.683703][T11812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.683724][T11812] RIP: 0033:0x7f08e139ce59 [ 280.683744][T11812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.683763][T11812] RSP: 002b:00007f08e2269028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.683786][T11812] RAX: ffffffffffffffda RBX: 00007f08e1616090 RCX: 00007f08e139ce59 [ 280.683801][T11812] RDX: 0000000000000004 RSI: 0000200000000500 RDI: 0000000000000003 [ 280.683815][T11812] RBP: 00007f08e2269090 R08: 0000000000000000 R09: 0000000000000000 [ 280.683829][T11812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.683841][T11812] R13: 00007f08e1616128 R14: 00007f08e1616090 R15: 00007ffc05727c28 [ 280.683873][T11812] [ 280.873491][T11815] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 281.074021][T11819] netem: change failed [ 283.064966][T11783] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 283.304987][T11824] ip_vti0: left promiscuous mode [ 283.345223][T11824] veth0_to_bond: left allmulticast mode [ 283.359872][T11829] Bluetooth: MGMT ver 1.23 [ 283.452618][T11824] veth5: left promiscuous mode [ 283.517112][T11824] veth9: left promiscuous mode [ 283.544397][T11824] vlan3: left allmulticast mode [ 283.566278][T11824] bond0: left allmulticast mode [ 283.582213][T11824] bond_slave_0: left allmulticast mode [ 283.607275][T11824] veth11: left promiscuous mode [ 283.647671][T11824] veth13: left promiscuous mode [ 283.664596][T11824] veth17: left promiscuous mode [ 283.691136][T11824] veth19: left allmulticast mode [ 283.712456][T11826] hsr0: entered allmulticast mode [ 283.719933][T11826] hsr_slave_0: entered allmulticast mode [ 283.742962][T11826] hsr_slave_1: entered allmulticast mode [ 283.804111][ T76] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.825425][ T76] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.844110][T11849] tipc: Enabling of bearer rejected, failed to enable media [ 283.868025][ T76] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.921691][ T76] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.039730][T11854] netlink: 'syz.1.1707': attribute type 83 has an invalid length. [ 284.057670][T11847] syzkaller0: entered promiscuous mode [ 284.069918][T11847] syzkaller0: entered allmulticast mode [ 284.457333][T11871] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1714'. [ 284.482403][T11871] netlink: 'syz.4.1714': attribute type 7 has an invalid length. [ 284.498677][T11871] netlink: 'syz.4.1714': attribute type 8 has an invalid length. [ 284.517983][T11871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1714'. [ 284.576534][T11867] pim6reg: entered allmulticast mode [ 284.616410][T11871] erspan0: entered promiscuous mode [ 284.654593][T11871] gretap0: entered promiscuous mode [ 284.679828][T11871] debugfs: 'hsr1' already exists in 'hsr' [ 284.703500][T11871] Cannot create hsr debugfs directory [ 284.848732][T11887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1718'. [ 285.159767][T11901] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1723'. [ 285.196532][T11901] netlink: 'syz.4.1723': attribute type 10 has an invalid length. [ 285.278217][T11901] batman_adv: batadv0: Interface deactivated: dummy0 [ 285.478607][T11918] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1727'. [ 285.492074][T11901] batman_adv: batadv0: Removing interface: dummy0 [ 285.526667][T11921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1726'. [ 285.554637][T11921] sit0: entered promiscuous mode [ 285.620409][T11921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1726'. [ 285.677989][T11924] x_tables: duplicate underflow at hook 2 [ 285.695357][T11915] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1726'. [ 285.742822][T11925] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 286.091231][T11942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1734'. [ 286.128263][T11942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1734'. [ 286.396013][T11955] netlink: 'syz.2.1740': attribute type 1 has an invalid length. [ 286.455367][T11959] netlink: 'syz.3.1741': attribute type 1 has an invalid length. [ 286.539187][T11955] 8021q: adding VLAN 0 to HW filter on device bond4 [ 286.558856][T11956] macvlan4: entered promiscuous mode [ 286.583439][T11956] macvlan4: entered allmulticast mode [ 286.628167][T11956] bond4: entered promiscuous mode [ 286.660550][T11956] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 286.855318][T11956] bond4: left promiscuous mode [ 317.363071][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 346.062401][T12000] netlink: 'syz.3.1751': attribute type 1 has an invalid length. [ 346.112376][T12000] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 346.444772][T12026] __nla_validate_parse: 5 callbacks suppressed [ 346.444796][T12026] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1753'. [ 346.523655][T12026] veth0_to_bond: default FDB implementation only supports local addresses [ 346.578627][T12032] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1759'. [ 346.725505][T12032] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1759'. [ 346.776902][T12032] netlink: 'syz.3.1759': attribute type 28 has an invalid length. [ 346.844792][T12032] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1759'. [ 346.880073][T12032] netlink: 'syz.3.1759': attribute type 28 has an invalid length. [ 346.944341][T12048] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1762'. [ 347.338128][T12062] netlink: 'syz.4.1767': attribute type 1 has an invalid length. [ 347.401636][T12060] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1765'. [ 347.414065][T12059] lo: Caught tx_queue_len zero misconfig [ 347.421095][T12057] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1765'. [ 347.572382][T12062] 8021q: adding VLAN 0 to HW filter on device bond5 [ 347.685735][T12068] bond5: (slave geneve3): making interface the new active one [ 347.733657][T12068] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 347.785417][T12078] team0: Caught tx_queue_len zero misconfig [ 347.805090][ T36] netdevsim netdevsim4 : set [1, 1] type 2 family 0 port 20004 - 0 [ 347.828419][ T36] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 347.844518][ T36] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 347.866425][ T36] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 348.005423][T12094] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1774'. [ 348.145718][T12099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.169704][T12094] syzkaller0: entered promiscuous mode [ 348.183441][T12094] syzkaller0: entered allmulticast mode [ 348.214140][T12094] ip6tnl0: Caught tx_queue_len zero misconfig [ 348.232366][T12103] IPv6: sit4: Disabled Multicast RS [ 348.275211][T12106] IPVS: set_ctl: invalid protocol: 12 172.20.20.14:20000 [ 348.491822][T12109] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1779'. [ 348.593022][T12116] syzkaller0: entered promiscuous mode [ 348.598782][T12116] syzkaller0: entered allmulticast mode [ 348.852005][T12126] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1784'. [ 349.118267][T12133] netlink: 'syz.0.1789': attribute type 21 has an invalid length. [ 349.133120][T12133] IPv6: NLM_F_CREATE should be specified when creating new route [ 349.144787][T12133] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 349.152173][T12133] IPv6: NLM_F_CREATE should be set when creating new route [ 349.159530][T12133] IPv6: NLM_F_CREATE should be set when creating new route [ 349.166908][T12133] IPv6: NLM_F_CREATE should be set when creating new route [ 349.213093][T12133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.836323][T12163] veth1_to_bond: entered allmulticast mode [ 349.920083][T12163] veth1_to_bond (unregistering): left allmulticast mode [ 349.953364][T12177] netlink: 'syz.3.1803': attribute type 1 has an invalid length. [ 349.984094][T12178] netlink: 'syz.3.1803': attribute type 1 has an invalid length. [ 350.036233][T12163] bond0: (slave bond_slave_1): Releasing backup interface [ 351.217615][T12240] netlink: zone id is out of range [ 351.246715][T12240] netlink: zone id is out of range [ 351.270757][T12240] netlink: zone id is out of range [ 351.282173][T12240] netlink: zone id is out of range [ 351.296890][T12240] netlink: zone id is out of range [ 351.311309][T12240] netlink: del zone limit has 4 unknown bytes [ 351.343215][T12243] netlink: 'syz.4.1822': attribute type 32 has an invalid length. [ 351.412532][T12250] sctp: [Deprecated]: syz.1.1824 (pid 12250) Use of int in max_burst socket option. [ 351.412532][T12250] Use struct sctp_assoc_value instead [ 351.535058][T12243] bond6: option coupled_control: invalid value (192) [ 351.548830][T12243] bond6 (unregistering): Released all slaves [ 351.826603][T12260] __nla_validate_parse: 11 callbacks suppressed [ 351.826627][T12260] netlink: 612 bytes leftover after parsing attributes in process `syz.3.1827'. [ 352.134241][T12270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1828'. [ 352.225185][T12273] netlink: 'syz.3.1831': attribute type 1 has an invalid length. [ 352.249534][T12280] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1833'. [ 352.273271][T12273] netlink: 'syz.3.1831': attribute type 1 has an invalid length. [ 352.323819][T12273] netlink: 'syz.3.1831': attribute type 1 has an invalid length. [ 352.377267][T12273] netlink: 'syz.3.1831': attribute type 2 has an invalid length. [ 352.387774][T12273] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1831'. [ 352.630211][T12299] tipc: Failed to remove unknown binding: 66,0,0/0:1427142457/1427142459 [ 352.641794][T12299] tipc: Failed to remove unknown binding: 66,0,0/0:1427142457/1427142458 [ 352.647396][T12297] syzkaller0: entered promiscuous mode [ 352.658972][T12297] syzkaller0: entered allmulticast mode [ 352.662650][T12299] tipc: Failed to remove unknown binding: 66,0,0/0:1427142457/1427142459 [ 352.676297][T12299] tipc: Failed to remove unknown binding: 66,0,0/0:1427142457/1427142458 [ 352.687026][T12299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1838'. [ 352.696689][T12299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1838'. [ 352.707351][T12299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1838'. [ 352.717737][T12299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1838'. [ 352.833934][T12306] veth1: Caught tx_queue_len zero misconfig [ 353.207399][T12319] xt_CT: You must specify a L4 protocol and not use inversions on it [ 353.232433][T12319] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1845'. [ 355.138642][T12273] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 355.321836][T12335] netlink: 'syz.1.1850': attribute type 1 has an invalid length. [ 355.335110][T12336] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1849'. [ 355.350846][T12336] netlink: 'syz.2.1849': attribute type 7 has an invalid length. [ 355.378508][T12336] netlink: 'syz.2.1849': attribute type 8 has an invalid length. [ 355.410298][T12340] netlink: 'syz.4.1852': attribute type 1 has an invalid length. [ 355.470448][T12336] erspan0: entered promiscuous mode [ 355.486137][T12336] erspan0: left promiscuous mode [ 355.505020][T12335] block nbd2: server does not support multiple connections per device. [ 355.526182][T12335] block nbd2: shutting down sockets [ 355.720739][T12352] syzkaller0: entered promiscuous mode [ 355.741390][T12352] syzkaller0: entered allmulticast mode [ 356.215686][T12369] geneve2: entered promiscuous mode [ 356.252824][ T76] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0 [ 356.293373][ T76] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 356.339237][ T76] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 356.374756][ T76] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0 [ 356.535204][T12388] syzkaller0: entered promiscuous mode [ 356.541844][T12388] syzkaller0: entered allmulticast mode [ 356.555797][T12390] syzkaller0: entered promiscuous mode [ 356.588611][T12390] syzkaller0: entered allmulticast mode [ 356.759934][T12411] netlink: 'syz.0.1868': attribute type 7 has an invalid length. [ 356.773702][T12411] netlink: 'syz.0.1868': attribute type 8 has an invalid length. [ 359.328990][T12412] syzkaller0: mtu less than device minimum [ 359.343883][T12411] erspan0: entered promiscuous mode [ 359.351157][T12411] 0ªX¹¦Dö»: entered promiscuous mode [ 359.369676][T12411] debugfs: 'hsr1' already exists in 'hsr' [ 359.381375][T12411] Cannot create hsr debugfs directory [ 359.471990][T12392] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 359.545607][T12417] ieee802154 phy0 wpan0: encryption failed: -90 [ 359.788387][T12434] sctp: [Deprecated]: syz.4.1873 (pid 12434) Use of int in maxseg socket option. [ 359.788387][T12434] Use struct sctp_assoc_value instead [ 360.105499][T12441] __nla_validate_parse: 7 callbacks suppressed [ 360.105520][T12441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1874'. [ 360.132988][T12446] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 360.142423][T12441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.155142][T12447] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1876'. [ 360.308901][T12451] openvswitch: netlink: Flow actions attr not present in new flow. [ 360.484217][T12458] netlink: 396 bytes leftover after parsing attributes in process `syz.4.1880'. [ 360.758637][T12470] netlink: 'syz.3.1884': attribute type 1 has an invalid length. [ 360.838078][T12470] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1884'. [ 360.913584][T12474] tipc: Enabling of bearer rejected, failed to enable media [ 361.454875][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1890'. [ 361.558102][T12496] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1891'. [ 362.147918][T12522] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1896'. [ 362.336251][T12522] veth23: entered promiscuous mode [ 362.384509][T12522] team0: Port device veth23 added [ 362.517295][T12530] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1897'. [ 363.066144][T12556] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1904'. [ 363.286912][T12570] syzkaller0: entered promiscuous mode [ 363.303563][T12570] syzkaller0: entered allmulticast mode [ 363.464404][T12586] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1910'. [ 363.540765][T12572] geneve1: mtu less than device minimum [ 363.606857][T12586] veth11: entered promiscuous mode [ 363.617953][T12586] team0: Port device veth11 added [ 363.682174][T12565] syzkaller0: mtu less than device minimum [ 366.964662][T12600] syzkaller0: entered promiscuous mode [ 366.970469][T12600] syzkaller0: entered allmulticast mode [ 366.980324][T12608] tipc: Enabled bearer , priority 0 [ 366.988291][T12611] nbd: couldn't find a device at index 1048580 [ 367.007310][T12619] tipc: Resetting bearer [ 367.071163][T12591] tipc: Resetting bearer [ 367.181758][T12591] tipc: Disabling bearer [ 367.253742][T12654] nbd: couldn't find a device at index 1048580 [ 367.377582][T12655] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 367.710681][T12682] syzkaller0: entered promiscuous mode [ 367.723229][T12682] syzkaller0: entered allmulticast mode [ 367.805437][T12685] tipc: New replicast peer: 172.20.20.187 [ 367.817877][T12685] tipc: Enabled bearer , priority 10 [ 367.847858][T12693] __nla_validate_parse: 1 callbacks suppressed [ 367.847891][T12693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1929'. [ 367.938011][T12696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1930'. [ 367.965847][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1931'. [ 367.993140][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1931'. [ 368.108697][T12696] : entered promiscuous mode [ 368.139041][T12707] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1932'. [ 368.190816][T12707] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1932'. [ 368.324175][T12716] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1934'. [ 368.359904][T12716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1934'. [ 368.413338][T12715] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1934'. [ 368.504806][T12715] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1934'. [ 369.168084][T12750] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 369.229016][ T10] tipc: Node number set to 2184878382 [ 369.375580][T12762] syzkaller0: entered promiscuous mode [ 369.388766][T12762] syzkaller0: entered allmulticast mode [ 369.710292][T12796] syzkaller0: entered promiscuous mode [ 369.741640][T12796] syzkaller0: entered allmulticast mode [ 370.234941][T12818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.452305][T12838] syzkaller0: entered promiscuous mode [ 370.457949][T12838] syzkaller0: entered allmulticast mode [ 371.762055][T12740] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 372.203418][T12883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.408642][T12899] netlink: 'syz.4.1967': attribute type 5 has an invalid length. [ 372.446682][T12899] netlink: 'syz.4.1967': attribute type 1 has an invalid length. [ 372.490136][T12907] netlink: 'syz.4.1967': attribute type 1 has an invalid length. [ 373.105493][T12928] syzkaller1: entered promiscuous mode [ 373.129429][T12928] syzkaller1: entered allmulticast mode [ 373.284344][T12940] __nla_validate_parse: 7 callbacks suppressed [ 373.284365][T12940] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1975'. [ 373.436988][T12942] syzkaller0: entered promiscuous mode [ 373.468148][T12942] syzkaller0: entered allmulticast mode [ 373.494860][T12944] tipc: New replicast peer: 172.20.20.187 [ 373.509987][T12944] tipc: Enabled bearer , priority 10 [ 373.532845][T12944] netlink: 3916 bytes leftover after parsing attributes in process `syz.4.1977'. [ 374.078548][T12969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1982'. [ 374.121859][T12970] lo speed is unknown, defaulting to 1000 [ 374.143463][T12970] lo speed is unknown, defaulting to 1000 [ 374.172038][T12970] lo speed is unknown, defaulting to 1000 [ 374.191412][T12970] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 374.194049][T12974] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1983'. [ 374.218761][T12970] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 374.291488][T12970] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 374.360085][T12974] veth13: entered promiscuous mode [ 374.360111][T12970] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 374.401115][T12974] team0: Port device veth13 added [ 374.590935][T12970] lo speed is unknown, defaulting to 1000 [ 374.625995][T12970] lo speed is unknown, defaulting to 1000 [ 374.777841][T12970] lo speed is unknown, defaulting to 1000 [ 374.807408][T12970] lo speed is unknown, defaulting to 1000 [ 374.822292][T12970] lo speed is unknown, defaulting to 1000 [ 375.038450][T13000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1993'. [ 375.078713][T13000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1993'. [ 375.093895][T13001] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1992'. [ 375.288279][T13000] 8021q: adding VLAN 0 to HW filter on device bond6 [ 375.340628][T13002] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 375.374980][T13009] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.1995'. [ 375.616245][T13015] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1997'. [ 375.713608][T13015] veth15: entered promiscuous mode [ 375.735079][T13015] team0: Port device veth15 added [ 375.747137][T13022] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.2000'. [ 375.790988][T13022] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 375.994399][T13032] netlink: 'syz.4.2002': attribute type 1 has an invalid length. [ 376.055745][T13034] netlink: 'syz.1.2004': attribute type 7 has an invalid length. [ 376.100869][T13034] netlink: 'syz.1.2004': attribute type 8 has an invalid length. [ 376.148866][T13034] erspan0: entered promiscuous mode [ 376.167955][T13034] gretap0: entered promiscuous mode [ 376.195459][T13034] debugfs: 'hsr1' already exists in 'hsr' [ 376.204984][T13034] Cannot create hsr debugfs directory [ 376.212802][T13034] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 376.232057][T13034] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 376.232644][T13040] netlink: zone id is out of range [ 376.305295][T13040] netlink: zone id is out of range [ 376.341687][T13040] netlink: zone id is out of range [ 376.372160][T13035] netlink: set zone limit has 4 unknown bytes [ 376.458265][T13046] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 376.475035][T13036] sit0: left promiscuous mode [ 376.563277][T13036] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.684037][T13036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.698844][T13036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.978513][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.999484][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 377.023927][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.055867][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 377.134169][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.147343][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 377.197760][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.241257][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 377.340578][T13070] veth13: entered promiscuous mode [ 377.352383][T13070] team0: Port device veth13 added [ 377.563926][T13083] netlink: 'syz.4.2017': attribute type 7 has an invalid length. [ 377.606224][T13083] netlink: 'syz.4.2017': attribute type 8 has an invalid length. [ 377.656934][T13084] netlink: 'syz.3.2016': attribute type 16 has an invalid length. [ 378.274448][T13114] veth15: entered promiscuous mode [ 378.283232][T13114] team0: Port device veth15 added [ 378.288898][T13119] syzkaller0: entered promiscuous mode [ 378.295409][T13119] syzkaller0: entered allmulticast mode [ 378.415889][T13111] tipc: Enabled bearer , priority 0 [ 378.433705][T13122] __nla_validate_parse: 13 callbacks suppressed [ 378.433727][T13122] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2031'. [ 378.465363][T13110] tipc: Resetting bearer [ 378.492696][T13122] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2031'. [ 378.548067][T13110] tipc: Disabling bearer [ 378.803740][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.813485][T13133] netlink: 'syz.3.2036': attribute type 11 has an invalid length. [ 378.866976][T13137] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 378.874545][T13137] IPv6: NLM_F_CREATE should be set when creating new route [ 378.881923][T13137] IPv6: NLM_F_CREATE should be set when creating new route [ 378.931148][T13134] syzkaller0: entered promiscuous mode [ 378.945813][T13134] syzkaller0: entered allmulticast mode [ 378.973954][T13141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2037'. [ 379.002870][T13141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2037'. [ 379.191186][T13148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2039'. [ 379.421365][T13155] openvswitch: netlink: IP tunnel TTL not specified. [ 379.453611][T13152] can: request_module (can-proto-3) failed. [ 379.774129][T13167] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2045'. [ 382.275306][T13183] tipc: Enabling of bearer rejected, failed to enable media [ 382.438573][T13193] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2050'. [ 382.628535][T13198] netlink: 1024 bytes leftover after parsing attributes in process `syz.2.2051'. [ 382.830625][T13220] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2057'. [ 382.896188][T13225] syzkaller1: entered promiscuous mode [ 382.930998][T13225] syzkaller1: entered allmulticast mode [ 383.056962][T13240] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2059'. [ 383.124667][T13234] bond7: option all_slaves_active: invalid value (222) [ 383.162360][T13234] bond7 (unregistering): Released all slaves [ 383.282637][T13256] netlink: 'syz.4.2065': attribute type 1 has an invalid length. [ 383.416564][T13208] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 383.625541][T13261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2067'. [ 383.664446][T13261] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20002 [ 383.698734][T13261] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2067'. [ 383.849000][T13272] IPv6: NLM_F_CREATE should be specified when creating new route [ 383.976706][T13279] netlink: 'syz.0.2073': attribute type 10 has an invalid length. [ 384.010056][T13279] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2073'. [ 384.032834][T13282] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2072'. [ 384.708281][T13309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2081'. [ 384.865088][T13319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.008501][T13328] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2085'. [ 385.282172][T13342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2087'. [ 385.646675][T13356] bond4 (unregistering): Released all slaves [ 386.434020][T13409] netlink: 'syz.4.2103': attribute type 1 has an invalid length. [ 386.525804][T13409] 8021q: adding VLAN 0 to HW filter on device bond7 [ 386.577723][T13413] bond7: (slave veth0_to_bond): making interface the new active one [ 386.606517][T13413] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 389.118938][T13384] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 389.131688][T13428] netlink: 'syz.4.2107': attribute type 10 has an invalid length. [ 389.158406][T13428] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2107'. [ 389.372056][T13450] ipt_ECN: cannot use operation on non-tcp rule [ 389.590905][T13460] x_tables: duplicate underflow at hook 3 [ 389.605555][T13463] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2119'. [ 389.727247][T13464] bond8 (unregistering): Released all slaves [ 390.117002][T13490] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2127'. [ 390.364102][T13495] gre1: entered promiscuous mode [ 390.423143][T13509] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2130'. [ 390.434164][T13509] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2130'. [ 390.453898][T13506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2131'. [ 390.642584][T13514] nbd: must specify a device to reconfigure [ 390.660912][T13518] netlink: 'syz.2.2137': attribute type 29 has an invalid length. [ 390.702898][T13523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2136'. [ 390.705297][T13521] netlink: 'syz.2.2137': attribute type 29 has an invalid length. [ 391.090380][T13551] v: renamed from 00ªX¹¦Dö» [ 391.299941][T13563] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2147'. [ 391.332151][T13563] veth23: entered promiscuous mode [ 391.351479][T13563] team0: Port device veth23 added [ 391.783474][T13573] syzkaller0: entered promiscuous mode [ 391.791854][T13573] syzkaller0: entered allmulticast mode [ 391.811535][T13575] syzkaller0: entered promiscuous mode [ 391.825851][T13575] syzkaller0: entered allmulticast mode [ 394.419243][T13581] tipc: Enabled bearer , priority 0 [ 394.448098][T13596] tipc: Resetting bearer [ 394.563226][T13574] tipc: Disabling bearer [ 394.835626][T13620] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2159'. [ 394.927460][T13622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2162'. [ 394.946361][T13624] netlink: 'syz.0.2163': attribute type 1 has an invalid length. [ 394.988643][T13620] veth25: entered promiscuous mode [ 395.001438][T13620] team0: Port device veth25 added [ 395.011253][T13631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2162'. [ 395.152895][T13626] Cannot find map_set index 135 as target [ 395.374791][T13641] geneve3: entered promiscuous mode [ 395.399420][T13641] geneve3: entered allmulticast mode [ 395.482318][T13647] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 395.707338][T13663] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 395.730578][T13663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.767383][T13665] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2174'. [ 395.808751][T13665] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2174'. [ 395.864739][T13670] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2175'. [ 395.867799][T13671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2176'. [ 395.889155][T13659] syzkaller0: entered promiscuous mode [ 395.895142][T13659] syzkaller0: entered allmulticast mode [ 395.945790][T13670] veth19: entered promiscuous mode [ 395.977840][T13670] team0: Port device veth19 added [ 396.145438][T13679] netlink: 'syz.2.2179': attribute type 1 has an invalid length. [ 396.469202][T13694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2182'. [ 396.536678][T13694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2182'. [ 396.639684][T13704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.689392][T13704] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2186'. [ 396.784923][T13711] can: request_module (can-proto-0) failed. [ 396.985254][T13728] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20001 [ 399.343016][T13688] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 399.533759][T13739] netlink: 'syz.0.2194': attribute type 4 has an invalid length. [ 399.572308][T13739] netlink: 'syz.0.2194': attribute type 4 has an invalid length. [ 399.917427][T13758] __nla_validate_parse: 6 callbacks suppressed [ 399.917450][T13758] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2200'. [ 400.000281][T13752] syzkaller1: entered promiscuous mode [ 400.013562][T13752] syzkaller1: entered allmulticast mode [ 400.136921][T13764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.148218][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.183135][T13764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.192156][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.527434][T13775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2205'. [ 400.547163][T13775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2205'. [ 400.586685][T13775] netlink: 'syz.0.2205': attribute type 3 has an invalid length. [ 400.784773][T13795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2210'. [ 400.812891][T13796] batadv1: entered allmulticast mode [ 400.933845][T13802] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2213'. [ 401.237899][T13819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2216'. [ 401.666234][T13843] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2224'. [ 401.687776][T13844] netlink: 'syz.1.2223': attribute type 1 has an invalid length. [ 401.758081][T13812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2215'. [ 401.868212][T13858] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2227'. [ 401.877781][T13858] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2227'. [ 401.957325][T13844] bond7: entered promiscuous mode [ 401.967684][T13844] 8021q: adding VLAN 0 to HW filter on device bond7 [ 402.022070][T13842] syzkaller0: entered promiscuous mode [ 402.029218][T13862] netlink: 'syz.3.2228': attribute type 13 has an invalid length. [ 402.051242][T13842] syzkaller0: entered allmulticast mode [ 402.318512][T13844] 8021q: adding VLAN 0 to HW filter on device bond7 [ 402.333989][T13844] bond7: (slave vti0): The slave device specified does not support setting the MAC address [ 402.346076][T13844] bond7: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 402.370541][T13844] bond7: (slave vti0): making interface the new active one [ 402.387384][T13844] vti0: entered promiscuous mode [ 402.395601][T13844] bond7: (slave vti0): Enslaving as an active interface with an up link [ 402.656576][T13890] netlink: 'syz.4.2234': attribute type 7 has an invalid length. [ 402.853540][T13904] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 403.188405][T13921] netlink: 'syz.4.2243': attribute type 2 has an invalid length. [ 403.222719][T13920] syzkaller0: entered promiscuous mode [ 403.237146][T13921] netlink: 'syz.4.2243': attribute type 2 has an invalid length. [ 403.250334][T13920] syzkaller0: entered allmulticast mode [ 403.311479][T13920] tipc: Enabled bearer , priority 0 [ 403.839123][T13918] tipc: Resetting bearer [ 404.058034][T13918] tipc: Disabling bearer [ 404.723935][T13980] rdma_op ffff88802a55e9f0 conn xmit_rdma 0000000000000000 [ 404.917871][T13984] veth15: entered promiscuous mode [ 405.038706][T13992] __nla_validate_parse: 45 callbacks suppressed [ 405.038729][T13992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2262'. [ 405.096969][T13992] lo: Caught tx_queue_len zero misconfig [ 405.784717][T14028] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2275'. [ 405.887419][T14028] veth17: entered promiscuous mode [ 405.923078][T14028] team0: Port device veth17 added [ 406.130634][T14032] wg1 speed is unknown, defaulting to 1000 [ 406.195391][T14032] lo speed is unknown, defaulting to 1000 [ 406.234482][T14038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.376886][T14048] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2281'. [ 406.909161][T14064] veth1_macvtap: left promiscuous mode [ 406.923879][T14059] netlink: zone id is out of range [ 406.932391][T14059] netlink: zone id is out of range [ 406.937820][T14059] netlink: zone id is out of range [ 406.943954][T14059] netlink: zone id is out of range [ 406.967562][T14059] netlink: zone id is out of range [ 406.976566][T14059] netlink: zone id is out of range [ 406.991085][T14059] netlink: zone id is out of range [ 407.004794][T14059] netlink: del zone limit has 4 unknown bytes [ 407.382449][T14078] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2289'. [ 407.431748][T14078] veth27: entered promiscuous mode [ 407.449150][T14078] team0: Port device veth27 added [ 407.924379][T14095] netlink: 'syz.4.2296': attribute type 1 has an invalid length. [ 407.961545][T14095] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2296'. [ 407.984886][T14101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2297'. [ 408.013914][T14095] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2296'. [ 408.030898][T14100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2298'. [ 408.053588][T14095] netlink: 'syz.4.2296': attribute type 1 has an invalid length. [ 408.056794][T14100] netlink: 'syz.3.2298': attribute type 29 has an invalid length. [ 408.067644][T14105] netlink: 816 bytes leftover after parsing attributes in process `syz.2.2299'. [ 408.090090][T14095] netlink: 'syz.4.2296': attribute type 8 has an invalid length. [ 408.107467][T14100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2298'. [ 408.138474][T14101] 8021q: adding VLAN 0 to HW filter on device bond8 [ 408.255835][T14101] 8021q: adding VLAN 0 to HW filter on device bond9 [ 408.303677][T14101] bond8: (slave bond9): Enslaving as an active interface with an up link [ 408.529646][T14118] veth21: entered promiscuous mode [ 408.563498][T14118] team0: Port device veth21 added [ 408.578763][T14124] openvswitch: netlink: Unknown key attributes 2 [ 408.828403][T14140] syzkaller0: entered promiscuous mode [ 408.837890][T14141] xt_bpf: check failed: parse error [ 408.847554][T14140] syzkaller0: entered allmulticast mode [ 408.935877][T14140] tipc: Enabled bearer , priority 0 [ 408.971108][T14139] tipc: Resetting bearer [ 409.026157][T14139] tipc: Disabling bearer [ 409.342594][T14170] veth23: entered promiscuous mode [ 409.365714][T14170] team0: Port device veth23 added [ 411.732714][T14141] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 412.037664][T14202] syzkaller0: entered promiscuous mode [ 412.050966][T14202] syzkaller0: entered allmulticast mode [ 412.227442][T14202] tipc: Enabled bearer , priority 0 [ 412.236982][T14212] netlink: 'syz.0.2330': attribute type 10 has an invalid length. [ 412.253484][T14213] __nla_validate_parse: 5 callbacks suppressed [ 412.253504][T14213] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2331'. [ 412.267784][T14209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.281045][T14212] team0 (unregistering): Port device team_slave_0 removed [ 412.293686][T14212] team0 (unregistering): Port device team_slave_1 removed [ 412.306542][T14212] team0 (unregistering): Port device veth1 removed [ 412.330380][T14212] team0 (unregistering): Port device veth5 removed [ 412.364651][T14212] team0 (unregistering): Port device veth7 removed [ 412.386066][T14212] team0 (unregistering): Port device veth9 removed [ 412.397116][T14212] team0 (unregistering): Port device veth19 removed [ 412.425026][T14212] team0 (unregistering): Port device veth21 removed [ 412.436444][T14212] team0 (unregistering): Port device veth23 removed [ 412.454400][T14198] tipc: Resetting bearer [ 412.482667][T14198] tipc: Disabling bearer [ 412.551256][T14213] veth19: entered promiscuous mode [ 412.568281][T14213] team0: Port device veth19 added [ 412.660906][T14220] bond8 (unregistering): Released all slaves [ 412.689354][T14231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2335'. [ 413.124003][T14246] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2341'. [ 413.352704][T14256] syzkaller0: entered promiscuous mode [ 413.369759][T14256] syzkaller0: entered allmulticast mode [ 413.411273][T14258] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2346'. [ 413.425048][T14256] tipc: Enabled bearer , priority 0 [ 413.474227][T14258] veth29: entered promiscuous mode [ 413.484813][T14258] team0: Port device veth29 added [ 413.491340][T14255] tipc: Resetting bearer [ 413.516536][T14255] tipc: Disabling bearer [ 413.657266][T14264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2349'. [ 413.686156][T14264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2349'. [ 413.816344][T14275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.253233][T14289] netlink: 'syz.3.2356': attribute type 2 has an invalid length. [ 414.283124][T14289] netlink: 'syz.3.2356': attribute type 2 has an invalid length. [ 414.302027][T14296] xt_bpf: check failed: parse error [ 414.339186][T14289] netlink: 'syz.3.2356': attribute type 5 has an invalid length. [ 414.397021][T14289] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2356'. [ 414.565796][T14304] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2358'. [ 414.684673][T14304] veth15: entered promiscuous mode [ 415.079217][T14319] ieee802154 phy0 wpan0: encryption failed: -90 [ 415.143941][T14325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2364'. [ 415.179958][T14327] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2363'. [ 415.265721][ T76] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.296302][ T76] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.316426][ T76] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.337582][ T76] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.541949][T14340] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 415.893762][T14358] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 416.047207][T14364] veth15: entered promiscuous mode [ 416.184608][T14374] netlink: 'syz.1.2377': attribute type 4 has an invalid length. [ 416.195554][T14373] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 416.224957][T14369] netlink: 'syz.1.2377': attribute type 4 has an invalid length. [ 416.641017][T14392] Set syz1 is full, maxelem 14 reached [ 416.698235][T14399] xt_CT: You must specify a L4 protocol and not use inversions on it [ 416.955092][T14407] netlink: 'syz.0.2385': attribute type 10 has an invalid length. [ 417.046230][T14411] bond10: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 417.120475][T14411] bond10: (slave lo): Enslaving as an active interface with an up link [ 417.135399][T14411] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 417.166296][ T5770] lo speed is unknown, defaulting to 1000 [ 417.173852][ T29] lo speed is unknown, defaulting to 1000 [ 417.182491][ T29] syú2: Port: 1 Link ACTIVE [ 417.420175][T14425] __nla_validate_parse: 11 callbacks suppressed [ 417.420197][T14425] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2392'. [ 417.474774][T14425] veth31: entered promiscuous mode [ 417.515761][T14425] team0: Port device veth31 added [ 417.761603][T14434] sctp: [Deprecated]: syz.1.2395 (pid 14434) Use of int in max_burst socket option deprecated. [ 417.761603][T14434] Use struct sctp_assoc_value instead [ 417.973200][T14445] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2397'. [ 418.094071][T14449] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2398'. [ 418.224451][T14462] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2401'. [ 418.461517][T14467] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 418.536809][T14473] netlink: 'syz.2.2402': attribute type 12 has an invalid length. [ 418.696501][T14477] syzkaller0: entered promiscuous mode [ 418.711301][T14477] syzkaller0: entered allmulticast mode [ 419.116118][T14488] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2406'. [ 419.260945][T14488] veth15: entered promiscuous mode [ 419.611804][T14502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2408'. [ 419.642378][T14502] netlink: 'syz.3.2408': attribute type 1 has an invalid length. [ 419.652474][T14506] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2410'. [ 419.669148][T14502] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2408'. [ 419.680288][T14507] syzkaller0: entered promiscuous mode [ 419.720926][T14507] syzkaller0: entered allmulticast mode [ 419.760661][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.443793][T14519] veth1_vlan (unregistering): left allmulticast mode [ 422.096227][T14577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2436'. [ 422.108091][T14581] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2438'. [ 422.373837][T14590] pim6reg: entered allmulticast mode [ 422.501427][T14592] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2439'. [ 422.523044][T14597] siw: device registration error -23 [ 422.541638][T14602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2443'. [ 422.589441][T14602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2443'. [ 422.773677][T14610] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 422.869108][T14613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2446'. [ 422.976747][T14613] 8021q: adding VLAN 0 to HW filter on device bond4 [ 423.031193][T14623] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2450'. [ 423.082805][T14622] ip6tnl2: entered allmulticast mode [ 423.417963][T14639] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2453'. [ 423.786455][T14649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2457'. [ 424.098652][T14665] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2460'. [ 424.130903][T14665] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2460'. [ 424.159983][T14665] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2460'. [ 424.297645][T14672] netlink: 'syz.4.2463': attribute type 12 has an invalid length. [ 424.347831][T14672] netlink: 'syz.4.2463': attribute type 29 has an invalid length. [ 424.517516][T14681] syzkaller0: entered promiscuous mode [ 424.544690][T14681] syzkaller0: entered allmulticast mode [ 424.988625][T14706] gre2: entered promiscuous mode [ 424.995211][T14706] gre2: entered allmulticast mode [ 425.393158][T14718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.407365][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.443044][T14719] nbd: must specify a device to reconfigure [ 425.485299][T14719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.498518][T14719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.510491][T14719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.529657][T14719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.048156][T14737] syzkaller0: entered promiscuous mode [ 426.065842][T14737] syzkaller0: entered allmulticast mode [ 426.406692][T14750] FAULT_INJECTION: forcing a failure. [ 426.406692][T14750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.435942][T14750] CPU: 1 UID: 0 PID: 14750 Comm: syz.4.2485 Not tainted syzkaller #0 PREEMPT(full) [ 426.435973][T14750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 426.435993][T14750] Call Trace: [ 426.436003][T14750] [ 426.436016][T14750] dump_stack_lvl+0xe8/0x150 [ 426.436209][T14750] should_fail_ex+0x412/0x560 [ 426.436313][T14750] _copy_from_user+0x2d/0xb0 [ 426.436376][T14750] __copy_msghdr+0x3c5/0x5b0 [ 426.436479][T14750] ___sys_sendmsg+0x213/0x360 [ 426.436500][T14750] ? __lock_acquire+0x6b5/0x2cf0 [ 426.436563][T14750] ? __pfx____sys_sendmsg+0x10/0x10 [ 426.436619][T14750] ? __fget_files+0x2a/0x420 [ 426.436691][T14750] ? __fget_files+0x3a0/0x420 [ 426.436729][T14750] __x64_sys_sendmsg+0x1bd/0x2a0 [ 426.436753][T14750] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 426.436786][T14750] ? __pfx_ksys_write+0x10/0x10 [ 426.436831][T14750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.436872][T14750] do_syscall_64+0x174/0x580 [ 426.436960][T14750] ? trace_irq_disable+0x3b/0x140 [ 426.437010][T14750] ? clear_bhb_loop+0x40/0x90 [ 426.437037][T14750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.437060][T14750] RIP: 0033:0x7fa53e19ce59 [ 426.437081][T14750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.437100][T14750] RSP: 002b:00007fa53f0a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.437124][T14750] RAX: ffffffffffffffda RBX: 00007fa53e415fa0 RCX: 00007fa53e19ce59 [ 426.437139][T14750] RDX: 0000000000000004 RSI: 0000200000000680 RDI: 0000000000000004 [ 426.437152][T14750] RBP: 00007fa53f0a2090 R08: 0000000000000000 R09: 0000000000000000 [ 426.437165][T14750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.437177][T14750] R13: 00007fa53e416038 R14: 00007fa53e415fa0 R15: 00007ffd8858e218 [ 426.437209][T14750] [ 426.811629][T14762] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 426.848477][T14745] veth33: entered promiscuous mode [ 426.858330][T14745] team0: Port device veth33 added [ 426.892968][T14766] netlink: 'syz.0.2490': attribute type 21 has an invalid length. [ 426.913125][T14766] netlink: 'syz.0.2490': attribute type 6 has an invalid length. [ 427.169446][T14779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.184511][T14776] netlink: 'syz.2.2494': attribute type 1 has an invalid length. [ 427.335353][T14786] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.503661][T14786] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.587133][T14794] veth0_to_bond: entered allmulticast mode [ 427.603205][T14796] sit0: Caught tx_queue_len zero misconfig [ 427.640195][T14786] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.754085][T14809] __nla_validate_parse: 41 callbacks suppressed [ 427.754107][T14809] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2503'. [ 427.870831][T14809] veth35: entered promiscuous mode [ 427.896312][T14809] team0: Port device veth35 added [ 427.953718][T14786] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.125760][T14831] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2510'. [ 428.194080][T14837] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2510'. [ 428.422871][T14845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.459212][T14845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.478482][T10042] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.491407][T14845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.532011][T14843] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 428.542197][T14845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.572001][T10042] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.590636][T14845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.601300][T14845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.610777][T14853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2513'. [ 428.732462][T14851] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.740013][T14851] bridge0: port 2(bridge_slave_1) entered listening state [ 428.747739][T14851] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.755798][T14851] bridge0: port 1(bridge_slave_0) entered listening state [ 428.777158][T14851] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.854260][T10042] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.924083][T14861] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2517'. [ 428.955625][T10042] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.051023][T14861] veth15: entered promiscuous mode [ 429.186369][T14868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2519'. [ 429.524199][T14876] netlink: 'syz.1.2523': attribute type 1 has an invalid length. [ 429.608878][T14887] netlink: 'syz.0.2525': attribute type 1 has an invalid length. [ 429.658258][T14887] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2525'. [ 429.674726][T14896] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2529'. [ 429.847473][T14901] x_tables: duplicate underflow at hook 1 [ 429.910958][T14887] bond8 (unregistering): Released all slaves [ 430.177719][T14925] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2532'. [ 430.285514][T14925] veth25: entered promiscuous mode [ 430.329084][T14925] team0: Port device veth25 added [ 430.497739][T14929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2535'. [ 430.517068][T14930] syzkaller0: entered promiscuous mode [ 430.530347][T14930] syzkaller0: entered allmulticast mode [ 430.887826][T14958] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 430.895315][T14958] IPv6: NLM_F_CREATE should be set when creating new route [ 430.902798][T14958] IPv6: NLM_F_CREATE should be set when creating new route [ 430.981504][T14964] SET target dimension over the limit! [ 430.990640][T14965] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 431.018689][T14965] net_ratelimit: 246 callbacks suppressed [ 431.018729][T14965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.298957][T14984] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 431.378653][T14981] openvswitch: netlink: Key type 203 is out of range max 32 [ 431.666566][T14993] veth21: entered promiscuous mode [ 431.693060][T14993] team0: Port device veth21 added [ 431.880474][T15003] ipvlan1: Caught tx_queue_len zero misconfig [ 432.068343][T15010] netlink: 'syz.1.2553': attribute type 28 has an invalid length. [ 432.089523][T15010] netlink: 'syz.1.2553': attribute type 3 has an invalid length. [ 432.541447][T15031] veth15: entered promiscuous mode [ 432.613845][T15035] netlink: 'syz.0.2562': attribute type 5 has an invalid length. [ 432.842960][T15047] bond8: option packets_per_slave: invalid value (18446744073709551615) [ 432.852128][T15047] bond8: option packets_per_slave: allowed values 0 - 65535 [ 432.864943][T15047] bond8 (unregistering): Released all slaves [ 432.993480][T15054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.003986][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.852703][T15087] __nla_validate_parse: 7 callbacks suppressed [ 433.852725][T15087] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2575'. [ 433.877389][ T30] audit: type=1804 audit(1780934833.300:6): pid=15085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2576" name="/newroot/510/cgroup.controllers" dev="tmpfs" ino=2616 res=1 errno=0 [ 433.927332][ T30] audit: type=1800 audit(1780934833.300:7): pid=15085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2576" name="cgroup.controllers" dev="tmpfs" ino=2616 res=0 errno=0 [ 433.962085][T15087] veth27: entered promiscuous mode [ 434.008260][T15087] team0: Port device veth27 added [ 434.085172][T15093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2578'. [ 434.100050][ T30] audit: type=1804 audit(1780934833.520:8): pid=15094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2578" name="/newroot/523/cgroup.controllers" dev="tmpfs" ino=2673 res=1 errno=0 [ 434.141786][T15093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2578'. [ 434.200088][ T30] audit: type=1800 audit(1780934833.520:9): pid=15094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2578" name="cgroup.controllers" dev="tmpfs" ino=2673 res=0 errno=0 [ 434.253457][T15093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2578'. [ 434.311653][ T30] audit: type=1800 audit(1780934833.530:10): pid=15094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2578" name="cgroup.controllers" dev="tmpfs" ino=2673 res=0 errno=0 [ 434.336218][T15093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2578'. [ 434.394644][ T30] audit: type=1800 audit(1780934833.560:11): pid=15094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2578" name="cgroup.controllers" dev="tmpfs" ino=2673 res=0 errno=0 [ 434.443679][T15093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2578'. [ 434.473977][T15093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2578'. [ 434.519191][ T30] audit: type=1800 audit(1780934833.560:12): pid=15094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2578" name="cgroup.controllers" dev="tmpfs" ino=2673 res=0 errno=0 [ 434.546152][T15093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2578'. [ 434.585148][T15093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2578'. [ 434.602470][ T30] audit: type=1800 audit(1780934833.620:13): pid=15094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2578" name="cgroup.controllers" dev="tmpfs" ino=2673 res=0 errno=0 [ 434.631356][T15093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2578'. [ 434.659644][ T30] audit: type=1800 audit(1780934833.620:14): pid=15094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2578" name="cgroup.controllers" dev="tmpfs" ino=2673 res=0 errno=0 [ 434.716241][ T30] audit: type=1800 audit(1780934833.660:15): pid=15094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2578" name="cgroup.controllers" dev="tmpfs" ino=2673 res=0 errno=0 [ 435.278098][T15135] netlink: 'syz.4.2588': attribute type 4 has an invalid length. [ 435.702348][T15151] netlink: 'syz.4.2593': attribute type 24 has an invalid length. [ 436.240977][T15173] Cannot find del_set index 2 as target [ 436.304518][T15175] openvswitch: netlink: Flow actions attr not present in new flow. [ 436.370856][T15177] netlink: 'syz.2.2604': attribute type 26 has an invalid length. [ 436.449805][T15177] netlink: 'syz.2.2604': attribute type 26 has an invalid length. [ 436.737080][T15192] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 437.332502][T15220] syzkaller1: entered promiscuous mode [ 437.347466][T15220] syzkaller1: entered allmulticast mode [ 437.484669][T15233] C: left allmulticast mode [ 438.173641][T15269] openvswitch: netlink: Missing key (keys=40, expected=100) [ 438.433097][T15280] netlink: 'syz.4.2635': attribute type 15 has an invalid length. [ 438.473867][ T36] netdevsim netdevsim4 : set [0, 1] type 1 family 0 port 256 - 0 [ 438.485103][T15280] netlink: 'syz.4.2635': attribute type 15 has an invalid length. [ 438.497188][ T36] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 438.531177][T15288] rdma_op ffff88806cd389f0 conn xmit_rdma 0000000000000000 [ 438.542057][ T36] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 438.570804][ T36] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 438.726006][T15293] netlink: 'syz.2.2641': attribute type 1 has an invalid length. [ 439.663308][T15342] netlink: 'syz.4.2653': attribute type 1 has an invalid length. [ 439.875725][T15359] __nla_validate_parse: 72 callbacks suppressed [ 439.875750][T15359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2656'. [ 439.913605][T15342] 8021q: adding VLAN 0 to HW filter on device bond9 [ 439.963593][T15350] vlan2: entered promiscuous mode [ 439.983336][T15350] bond9: entered promiscuous mode [ 440.001891][T15350] vlan2: entered allmulticast mode [ 440.022075][T15350] bond9: entered allmulticast mode [ 440.142440][T15355] bond9: (slave bridge6): making interface the new active one [ 440.188722][T15355] bridge6: entered promiscuous mode [ 440.206444][T15355] bridge6: entered allmulticast mode [ 440.231230][T15355] bond9: (slave bridge6): Enslaving as an active interface with an up link [ 440.261084][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.588148][T15381] pim6reg: entered allmulticast mode [ 441.893978][T15445] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2669'. [ 442.041674][T15451] xt_TPROXY: Can be used only with -p tcp or -p udp [ 442.242374][T15450] xt_policy: too many policy elements [ 442.497849][T15471] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2674'. [ 442.684025][T15471] veth27: entered promiscuous mode [ 443.093800][T15495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2681'. [ 444.147611][T15535] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 444.417098][T15545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.575291][T15547] syzkaller0: entered promiscuous mode [ 444.602346][T15547] syzkaller0: entered allmulticast mode [ 444.620894][T15552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2698'. [ 444.778819][T15562] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2700'. [ 444.804555][T15553] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2696'. [ 445.055275][T15564] Bluetooth: MGMT ver 1.23 [ 445.302332][T15577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2705'. [ 445.380717][T15582] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2706'. [ 445.402032][T15584] netlink: 'syz.0.2708': attribute type 1 has an invalid length. [ 445.858251][T15606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2711'. [ 445.932807][T15603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2713'. [ 446.857416][T15651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2726'. [ 446.872754][T15645] syzkaller0: entered promiscuous mode [ 446.893080][T15651] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 446.909786][T15645] syzkaller0: entered allmulticast mode [ 446.957230][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2725'. [ 447.008254][T15650] netlink: 'syz.0.2725': attribute type 5 has an invalid length. [ 447.030527][T15650] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2725'. [ 447.086678][T15650] geneve3: entered promiscuous mode [ 447.117889][T15650] geneve3: entered allmulticast mode [ 447.151286][ T148] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 447.177780][ T148] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 447.225124][ T148] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 447.253882][ T148] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 447.516174][T15673] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2730'. [ 447.663048][T15684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2735'. [ 447.967721][T15696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2739'. [ 448.269864][T15696] macvtap3: entered promiscuous mode [ 448.276347][T15696] vlan0: entered promiscuous mode [ 448.283923][T15696] macvtap3: entered allmulticast mode [ 448.290983][T15696] vlan0: entered allmulticast mode [ 448.296812][T15696] veth0_vlan: entered allmulticast mode [ 448.437790][T15708] veth29: entered promiscuous mode [ 448.485647][T15708] team0: Port device veth29 added [ 448.829817][T15729] FAULT_INJECTION: forcing a failure. [ 448.829817][T15729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.856677][T15729] CPU: 1 UID: 0 PID: 15729 Comm: syz.1.2749 Not tainted syzkaller #0 PREEMPT(full) [ 448.856707][T15729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 448.856721][T15729] Call Trace: [ 448.856729][T15729] [ 448.856738][T15729] dump_stack_lvl+0xe8/0x150 [ 448.856770][T15729] should_fail_ex+0x412/0x560 [ 448.856799][T15729] _copy_from_user+0x2d/0xb0 [ 448.856828][T15729] ___sys_sendmsg+0x1c6/0x360 [ 448.856849][T15729] ? __lock_acquire+0x6b5/0x2cf0 [ 448.856877][T15729] ? __pfx____sys_sendmsg+0x10/0x10 [ 448.856932][T15729] ? __fget_files+0x2a/0x420 [ 448.856959][T15729] ? __fget_files+0x3a0/0x420 [ 448.856996][T15729] __x64_sys_sendmsg+0x1bd/0x2a0 [ 448.857021][T15729] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 448.857052][T15729] ? rcu_is_watching+0x15/0xb0 [ 448.857131][T15729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.857156][T15729] do_syscall_64+0x174/0x580 [ 448.857178][T15729] ? trace_irq_disable+0x3b/0x140 [ 448.857211][T15729] ? clear_bhb_loop+0x40/0x90 [ 448.857238][T15729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.857260][T15729] RIP: 0033:0x7f08e139ce59 [ 448.857280][T15729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.857300][T15729] RSP: 002b:00007f08e228a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.857323][T15729] RAX: ffffffffffffffda RBX: 00007f08e1615fa0 RCX: 00007f08e139ce59 [ 448.857351][T15729] RDX: 0000000000000030 RSI: 0000200000000140 RDI: 0000000000000005 [ 448.857365][T15729] RBP: 00007f08e228a090 R08: 0000000000000000 R09: 0000000000000000 [ 448.857379][T15729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.857392][T15729] R13: 00007f08e1616038 R14: 00007f08e1615fa0 R15: 00007ffc05727c28 [ 448.857428][T15729] [ 449.637998][T15756] veth27: entered promiscuous mode [ 450.026227][T15773] netlink: 'syz.1.2762': attribute type 4 has an invalid length. [ 450.396478][T15761] netlink: 'syz.2.2758': attribute type 2 has an invalid length. [ 450.421401][T15761] __nla_validate_parse: 5 callbacks suppressed [ 450.421421][T15761] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2758'. [ 450.988870][T15798] netlink: 'syz.2.2768': attribute type 1 has an invalid length. [ 451.167384][T15807] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2771'. [ 451.305441][T15807] veth31: entered promiscuous mode [ 451.338878][T15807] team0: Port device veth31 added [ 453.772494][ T5654] block nbd2: Receive control failed (result -32) [ 454.155563][T15943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2810'. [ 454.180433][T15942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2810'. [ 454.703056][T15964] sock: sock_set_timeout: `syz.3.2818' (pid 15964) tries to set negative timeout [ 454.955649][T15979] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2824'. [ 455.011306][T15979] netlink: 13 bytes leftover after parsing attributes in process `syz.3.2824'. [ 455.040885][T15979] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2824'. [ 455.064552][T15979] netlink: 13 bytes leftover after parsing attributes in process `syz.3.2824'. [ 455.097457][T15979] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2824'. [ 455.524870][T16001] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2833'. [ 455.707283][T16008] gtp0: entered allmulticast mode [ 455.746061][T16008] team0: Device gtp0 is of different type [ 455.898677][T16005] bond8: option mode: invalid value (243) [ 455.907574][T16005] bond8 (unregistering): Released all slaves [ 456.249975][T16035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2840'. [ 456.299126][T16035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2840'. [ 456.312315][T16041] netlink: 'syz.2.2842': attribute type 1 has an invalid length. [ 456.338482][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 456.338504][ T30] audit: type=1804 audit(1780934855.750:74): pid=16038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2844" name="/newroot/565/cgroup.controllers" dev="tmpfs" ino=2902 res=1 errno=0 [ 456.388249][T16042] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2843'. [ 456.467123][T16050] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2843'. [ 456.490589][ T30] audit: type=1800 audit(1780934855.750:75): pid=16038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2844" name="cgroup.controllers" dev="tmpfs" ino=2902 res=0 errno=0 [ 456.554523][T16041] 8021q: adding VLAN 0 to HW filter on device bond6 [ 456.728460][T16042] bond5: option fail_over_mac: invalid value (16) [ 456.750431][T16042] bond5 (unregistering): Released all slaves [ 456.925602][T16048] bond6: (slave veth33): Enslaving as an active interface with a down link [ 456.950463][T16053] veth0_to_bond: left allmulticast mode [ 457.013359][T16053] bond6: (slave veth0_to_bond): making interface the new active one [ 457.037202][T16053] veth0_to_bond: entered promiscuous mode [ 457.047011][T16053] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 457.183490][T16041] bond6: (slave veth35): Enslaving as an active interface with a down link [ 457.196112][T16041] netlink: 'syz.2.2842': attribute type 1 has an invalid length. [ 457.232661][T16041] netlink: 'syz.2.2842': attribute type 2 has an invalid length. [ 457.535053][T16097] netlink: 'syz.3.2853': attribute type 16 has an invalid length. [ 457.544743][T16097] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2853'. [ 457.896094][T16113] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2862'. [ 458.036471][T16118] bond11: invalid ARP target 0.0.0.0 specified for addition [ 458.091427][T16118] bond11: option arp_ip_target: invalid value (0) [ 458.107215][T16118] bond11 (unregistering): Released all slaves [ 458.266705][T16136] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2866'. [ 458.538501][T16139] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 458.565201][T16139] bond5 (unregistering): Released all slaves [ 458.735734][T16153] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 458.804532][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 458.814263][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 458.836701][T16139] veth0: entered promiscuous mode [ 458.890171][T16139] veth0: left promiscuous mode [ 459.874465][ T5643] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 459.891736][ T5643] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 459.900391][ T5643] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 459.917153][ T5643] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 459.930726][ T5643] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 460.295690][T16213] pimreg: entered allmulticast mode [ 460.660796][T16239] netlink: 'syz.0.2889': attribute type 11 has an invalid length. [ 460.695293][T16240] dummy0: entered allmulticast mode [ 460.734485][T16238] netlink: 'syz.0.2889': attribute type 11 has an invalid length. [ 460.944829][T16252] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2893'. [ 460.982694][T16253] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2893'. [ 461.124440][T16197] wg1 speed is unknown, defaulting to 1000 [ 461.150613][T16197] lo speed is unknown, defaulting to 1000 [ 461.377107][T16265] netlink: 'syz.2.2897': attribute type 12 has an invalid length. [ 461.391381][T16265] netlink: 'syz.2.2897': attribute type 29 has an invalid length. [ 461.404627][T16265] netlink: 'syz.2.2897': attribute type 1 has an invalid length. [ 461.424690][T16265] netlink: 'syz.2.2897': attribute type 2 has an invalid length. [ 461.458140][T16271] Cannot find set identified by id 65535 to match [ 461.934990][T16283] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2902'. [ 461.999623][ T5643] Bluetooth: hci5: command tx timeout [ 462.088538][T16287] gtp1: entered promiscuous mode [ 462.095781][T16287] gtp1: entered allmulticast mode [ 462.182529][T16289] : entered promiscuous mode [ 462.223536][T16297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2906'. [ 462.293328][T16297] macsec4: entered promiscuous mode [ 462.304659][T16297] bridge0: entered promiscuous mode [ 462.312098][T16297] macsec4: entered allmulticast mode [ 462.317851][T16297] bridge0: entered allmulticast mode [ 462.331731][T16297] bridge0: port 3(macsec4) entered blocking state [ 462.350220][T16297] bridge0: port 3(macsec4) entered disabled state [ 462.373906][T16297] bridge0: left allmulticast mode [ 462.395631][ T5769] bridge0: left promiscuous mode [ 462.802661][T16197] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.824650][T16197] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.832829][T16197] bridge_slave_0: entered allmulticast mode [ 462.846815][T16197] bridge_slave_0: entered promiscuous mode [ 462.872847][T16197] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.887941][T16197] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.898065][T16197] bridge_slave_1: entered allmulticast mode [ 462.914215][T16197] bridge_slave_1: entered promiscuous mode [ 463.072314][T16197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.079096][T16333] ieee802154 phy0 wpan0: encryption failed: -22 [ 463.104093][T16197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.249639][T16337] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.2918'. [ 463.312404][T16197] team0: Port device team_slave_0 added [ 463.342049][T16197] team0: Port device team_slave_1 added [ 463.399757][T16340] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2920'. [ 463.437077][T16197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.448596][T16197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.489836][T16197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.505983][T16197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.519953][T16197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.565535][T16197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.669080][T16351] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2922'. [ 463.717060][T16351] netlink: 'syz.2.2922': attribute type 3 has an invalid length. [ 463.807485][T16197] hsr_slave_0: entered promiscuous mode [ 463.856609][T16197] hsr_slave_1: entered promiscuous mode [ 463.895651][T16197] debugfs: 'hsr0' already exists in 'hsr' [ 463.922350][T16197] Cannot create hsr debugfs directory [ 464.080207][ T5654] Bluetooth: hci5: command tx timeout [ 464.107272][T16368] SET target dimension over the limit! [ 464.155932][T16371] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2928'. [ 464.660671][T16391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2935'. [ 464.714248][T16394] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 464.740016][T16391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2935'. [ 464.944909][T16197] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 465.266001][T16197] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 465.611841][T16197] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 465.756717][T16197] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 465.954201][T16428] team0: Port device team_slave_0 removed [ 465.975150][T16435] tipc: Enabling of bearer rejected, failed to enable media [ 466.160434][ T5654] Bluetooth: hci5: command 0x040f tx timeout [ 466.224957][T16444] __nla_validate_parse: 65 callbacks suppressed [ 466.224980][T16444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2948'. [ 466.278439][T16443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2949'. [ 466.294597][T16443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2949'. [ 466.306494][T16443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2949'. [ 466.516140][T16197] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 466.533045][T16197] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 466.561895][T16197] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 466.628335][T16197] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 466.695585][T16197] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 466.827282][T16197] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 466.855053][T16197] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 466.889847][T16197] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 466.897973][T16470] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.2955'. [ 467.148154][T16485] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2957'. [ 467.220580][T16485] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2957'. [ 467.293099][T16197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.394832][T16197] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.446681][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.455197][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.524905][T10045] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.532391][T10045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.558769][T16496] syzkaller0: entered promiscuous mode [ 467.580878][T16496] syzkaller0: entered allmulticast mode [ 467.663745][T16508] veth0: entered promiscuous mode [ 467.782881][T16512] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2964'. [ 468.025102][T16495] veth0: left promiscuous mode [ 468.203394][ T76] veth0_to_bond: left promiscuous mode [ 468.240979][ T5643] Bluetooth: hci5: command 0x040f tx timeout [ 468.338410][T16524] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2968'. [ 468.646760][T16535] bond5: option packets_per_slave: invalid value (18446744073709551615) [ 468.681068][T16535] bond5: option packets_per_slave: allowed values 0 - 65535 [ 468.704405][T16535] bond5 (unregistering): Released all slaves [ 468.959759][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.233626][T16561] syzkaller0: entered promiscuous mode [ 469.240134][T16561] syzkaller0: entered allmulticast mode [ 469.486650][T16197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.939082][T16197] veth0_vlan: entered promiscuous mode [ 469.968254][T16197] veth1_vlan: entered promiscuous mode [ 470.076817][T16197] veth0_macvtap: entered promiscuous mode [ 470.136698][T16197] veth1_macvtap: entered promiscuous mode [ 470.151116][T16590] netlink: 'syz.0.2985': attribute type 49 has an invalid length. [ 470.254076][T16197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.310747][T16197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.319536][ T5643] Bluetooth: hci5: command 0x040f tx timeout [ 470.365897][ T148] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.403250][ T148] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.461019][ T148] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.489571][T16604] xt_hashlimit: size too large, truncated to 1048576 [ 470.499502][ T148] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.515152][T16605] FAULT_INJECTION: forcing a failure. [ 470.515152][T16605] name failslab, interval 1, probability 0, space 0, times 0 [ 470.557982][T16605] CPU: 0 UID: 0 PID: 16605 Comm: syz.4.2990 Not tainted syzkaller #0 PREEMPT(full) [ 470.558014][T16605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 470.558027][T16605] Call Trace: [ 470.558035][T16605] [ 470.558045][T16605] dump_stack_lvl+0xe8/0x150 [ 470.558076][T16605] should_fail_ex+0x412/0x560 [ 470.558106][T16605] should_failslab+0xa8/0x100 [ 470.558179][T16605] __kvmalloc_node_noprof+0x178/0x8a0 [ 470.558216][T16605] ? __raw_spin_lock_init+0x45/0x100 [ 470.558246][T16605] ? alloc_netdev_mqs+0xaa6/0x1210 [ 470.558352][T16605] alloc_netdev_mqs+0xaa6/0x1210 [ 470.558384][T16605] l2tp_eth_create+0x1c5/0xbe0 [ 470.558458][T16605] ? lockdep_hardirqs_on+0x7a/0x110 [ 470.558570][T16605] ? __local_bh_enable_ip+0xd0/0x130 [ 470.558610][T16605] ? l2tp_tunnel_get+0x392/0x420 [ 470.558663][T16605] ? __pfx_l2tp_eth_create+0x10/0x10 [ 470.558706][T16605] l2tp_nl_cmd_session_create+0x766/0xc60 [ 470.558741][T16605] ? rcu_is_watching+0x15/0xb0 [ 470.558776][T16605] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 470.558818][T16605] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 470.558884][T16605] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 470.558921][T16605] genl_family_rcv_msg_doit+0x22a/0x330 [ 470.558957][T16605] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 470.558998][T16605] ? bpf_lsm_capable+0x9/0x20 [ 470.559035][T16605] ? security_capable+0x7e/0x2c0 [ 470.559124][T16605] genl_rcv_msg+0x61c/0x7a0 [ 470.559155][T16605] ? __pfx_genl_rcv_msg+0x10/0x10 [ 470.559180][T16605] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 470.559216][T16605] ? __pfx_ref_tracker_free+0x10/0x10 [ 470.559306][T16605] netlink_rcv_skb+0x232/0x4b0 [ 470.559367][T16605] ? __pfx_genl_rcv_msg+0x10/0x10 [ 470.559401][T16605] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 470.559454][T16605] ? down_read+0x270/0x2e0 [ 470.559506][T16605] ? genl_rcv+0xd/0x40 [ 470.559538][T16605] genl_rcv+0x28/0x40 [ 470.559562][T16605] netlink_unicast+0x75c/0x8e0 [ 470.559603][T16605] netlink_sendmsg+0x813/0xb40 [ 470.559647][T16605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 470.559684][T16605] ? aa_sock_msg_perm+0xf1/0x1b0 [ 470.559788][T16605] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 470.559822][T16605] ____sys_sendmsg+0x972/0x9f0 [ 470.559844][T16605] ? __might_fault+0xaf/0x130 [ 470.559886][T16605] ? __pfx_____sys_sendmsg+0x10/0x10 [ 470.559918][T16605] ? import_iovec+0x73/0xa0 [ 470.559977][T16605] ___sys_sendmsg+0x2a5/0x360 [ 470.559998][T16605] ? __lock_acquire+0x6b5/0x2cf0 [ 470.560027][T16605] ? __pfx____sys_sendmsg+0x10/0x10 [ 470.560087][T16605] ? __fget_files+0x2a/0x420 [ 470.560115][T16605] ? __fget_files+0x3a0/0x420 [ 470.560152][T16605] __x64_sys_sendmsg+0x1bd/0x2a0 [ 470.560178][T16605] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 470.560210][T16605] ? __pfx_ksys_write+0x10/0x10 [ 470.560252][T16605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.560283][T16605] do_syscall_64+0x174/0x580 [ 470.560305][T16605] ? trace_irq_disable+0x3b/0x140 [ 470.560338][T16605] ? clear_bhb_loop+0x40/0x90 [ 470.560365][T16605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.560387][T16605] RIP: 0033:0x7fa53e19ce59 [ 470.560408][T16605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.560427][T16605] RSP: 002b:00007fa53f0a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 470.560451][T16605] RAX: ffffffffffffffda RBX: 00007fa53e415fa0 RCX: 00007fa53e19ce59 [ 470.560468][T16605] RDX: 0000000000000030 RSI: 0000200000000140 RDI: 0000000000000005 [ 470.560482][T16605] RBP: 00007fa53f0a2090 R08: 0000000000000000 R09: 0000000000000000 [ 470.560496][T16605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 470.560509][T16605] R13: 00007fa53e416038 R14: 00007fa53e415fa0 R15: 00007ffd8858e218 [ 470.560546][T16605] [ 471.495735][T16621] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2995'. [ 471.583513][T16611] syzkaller0: entered promiscuous mode [ 471.609425][T16611] syzkaller0: entered allmulticast mode [ 471.907356][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.933356][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.090341][T16642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.094934][ T8899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.127830][T16648] FAULT_INJECTION: forcing a failure. [ 472.127830][T16648] name failslab, interval 1, probability 0, space 0, times 0 [ 472.142445][ T8899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.151745][T16648] CPU: 1 UID: 0 PID: 16648 Comm: syz.2.3001 Not tainted syzkaller #0 PREEMPT(full) [ 472.151773][T16648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 472.151786][T16648] Call Trace: [ 472.151795][T16648] [ 472.151809][T16648] dump_stack_lvl+0xe8/0x150 [ 472.151841][T16648] should_fail_ex+0x412/0x560 [ 472.151872][T16648] should_failslab+0xa8/0x100 [ 472.151897][T16648] __kvmalloc_node_noprof+0x178/0x8a0 [ 472.151931][T16648] ? alloc_netdev_mqs+0x8fb/0x1210 [ 472.151968][T16648] alloc_netdev_mqs+0x8fb/0x1210 [ 472.152001][T16648] l2tp_eth_create+0x1c5/0xbe0 [ 472.152023][T16648] ? lockdep_hardirqs_on+0x7a/0x110 [ 472.152046][T16648] ? __local_bh_enable_ip+0xd0/0x130 [ 472.152079][T16648] ? l2tp_tunnel_get+0x392/0x420 [ 472.152106][T16648] ? __pfx_l2tp_eth_create+0x10/0x10 [ 472.152138][T16648] l2tp_nl_cmd_session_create+0x766/0xc60 [ 472.152174][T16648] ? rcu_is_watching+0x15/0xb0 [ 472.152208][T16648] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 472.152250][T16648] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 472.152279][T16648] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 472.152316][T16648] genl_family_rcv_msg_doit+0x22a/0x330 [ 472.152352][T16648] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 472.152393][T16648] ? bpf_lsm_capable+0x9/0x20 [ 472.152414][T16648] ? security_capable+0x7e/0x2c0 [ 472.152453][T16648] genl_rcv_msg+0x61c/0x7a0 [ 472.152486][T16648] ? __pfx_genl_rcv_msg+0x10/0x10 [ 472.152512][T16648] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 472.152549][T16648] ? __pfx_ref_tracker_free+0x10/0x10 [ 472.152588][T16648] netlink_rcv_skb+0x232/0x4b0 [ 472.152622][T16648] ? __pfx_genl_rcv_msg+0x10/0x10 [ 472.152650][T16648] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 472.152701][T16648] ? down_read+0x270/0x2e0 [ 472.152724][T16648] ? genl_rcv+0xd/0x40 [ 472.152749][T16648] genl_rcv+0x28/0x40 [ 472.152773][T16648] netlink_unicast+0x75c/0x8e0 [ 472.152815][T16648] netlink_sendmsg+0x813/0xb40 [ 472.152860][T16648] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.152898][T16648] ? aa_sock_msg_perm+0xf1/0x1b0 [ 472.152933][T16648] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 472.152966][T16648] ____sys_sendmsg+0x972/0x9f0 [ 472.152988][T16648] ? __might_fault+0xaf/0x130 [ 472.153025][T16648] ? __pfx_____sys_sendmsg+0x10/0x10 [ 472.153057][T16648] ? import_iovec+0x73/0xa0 [ 472.153096][T16648] ___sys_sendmsg+0x2a5/0x360 [ 472.153117][T16648] ? __lock_acquire+0x6b5/0x2cf0 [ 472.153146][T16648] ? __pfx____sys_sendmsg+0x10/0x10 [ 472.153207][T16648] ? __fget_files+0x2a/0x420 [ 472.153233][T16648] ? __fget_files+0x3a0/0x420 [ 472.153272][T16648] __x64_sys_sendmsg+0x1bd/0x2a0 [ 472.153297][T16648] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 472.153331][T16648] ? __pfx_ksys_write+0x10/0x10 [ 472.153373][T16648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.153398][T16648] do_syscall_64+0x174/0x580 [ 472.153419][T16648] ? trace_irq_disable+0x3b/0x140 [ 472.153452][T16648] ? clear_bhb_loop+0x40/0x90 [ 472.153480][T16648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.153502][T16648] RIP: 0033:0x7fb39a19ce59 [ 472.153523][T16648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.153541][T16648] RSP: 002b:00007fb39b137028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 472.153566][T16648] RAX: ffffffffffffffda RBX: 00007fb39a415fa0 RCX: 00007fb39a19ce59 [ 472.153581][T16648] RDX: 0000000000000030 RSI: 0000200000000140 RDI: 0000000000000005 [ 472.153595][T16648] RBP: 00007fb39b137090 R08: 0000000000000000 R09: 0000000000000000 [ 472.153608][T16648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 472.153620][T16648] R13: 00007fb39a416038 R14: 00007fb39a415fa0 R15: 00007ffca2951b28 [ 472.153654][T16648] [ 472.784566][T16654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3003'. [ 472.836172][T16656] veth0: entered promiscuous mode [ 472.865278][T16654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3003'. [ 472.892488][T16656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3004'. [ 473.055138][ T5654] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 473.067743][ T5654] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 473.078410][ T5654] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 473.088985][ T5654] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 473.117004][ T5654] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 473.962015][T16698] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3013'. [ 474.044486][T16703] netlink: 'syz.1.3015': attribute type 32 has an invalid length. [ 474.082568][T16703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3015'. [ 474.211639][T16703] bond1: Setting coupled_control to off (0) [ 474.294634][T16707] xt_hashlimit: size too large, truncated to 1048576 [ 474.356756][T10022] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.411037][T10022] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 474.470857][T16724] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3019'. [ 474.755653][T16713] syzkaller0: entered promiscuous mode [ 474.783471][T16713] syzkaller0: entered allmulticast mode [ 474.843828][T16727] x_tables: duplicate underflow at hook 1 [ 474.852786][T16729] x_tables: duplicate underflow at hook 1 [ 475.029203][T10022] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.045810][T16732] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3021'. [ 475.076411][T10022] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 475.198632][T16667] wg1 speed is unknown, defaulting to 1000 [ 475.205561][ T5643] Bluetooth: hci0: command tx timeout [ 475.248313][T10022] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.262541][T16739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.263556][T10022] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 475.356082][T16667] lo speed is unknown, defaulting to 1000 [ 475.372790][T16742] netlink: 'syz.3.3026': attribute type 10 has an invalid length. [ 475.387389][T16744] pimreg3: entered allmulticast mode [ 475.477018][T16742] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.484832][T16748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3026'. [ 475.499087][T16742] .`: (slave team0): Enslaving as an active interface with an up link [ 475.541731][T16748] team0: entered allmulticast mode [ 475.547425][T16748] team_slave_0: entered allmulticast mode [ 475.554488][T16748] veth3: entered allmulticast mode [ 475.562919][T16748] veth7: entered allmulticast mode [ 475.568425][T16748] veth13: entered allmulticast mode [ 475.574991][T16748] veth15: entered allmulticast mode [ 475.580792][T16748] veth17: entered allmulticast mode [ 475.586985][T16748] veth19: entered allmulticast mode [ 475.593217][T16748] veth21: entered allmulticast mode [ 475.603876][T10022] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.632868][T10022] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 475.752999][T16757] netlink: 'syz.4.3030': attribute type 28 has an invalid length. [ 475.769427][T16757] netlink: 'syz.4.3030': attribute type 3 has an invalid length. [ 475.784237][T16757] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3030'. [ 476.425151][T16782] netlink: 'syz.2.3037': attribute type 11 has an invalid length. [ 476.443581][T16782] netlink: 'syz.2.3037': attribute type 11 has an invalid length. [ 476.587930][T16785] syzkaller0: entered promiscuous mode [ 476.607475][T16785] syzkaller0: entered allmulticast mode [ 476.907305][T16801] netlink: 'syz.3.3041': attribute type 24 has an invalid length. [ 476.931348][T10022] bridge_slave_1: left allmulticast mode [ 476.951786][T10022] bridge_slave_1: left promiscuous mode [ 476.967577][T10022] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.018741][T10022] pimreg: left allmulticast mode [ 477.290545][ T5643] Bluetooth: hci0: command tx timeout [ 477.524418][T10022] erspan0 (unregistering): left promiscuous mode [ 477.567606][T10022] v (unregistering): left promiscuous mode [ 477.854291][T10022] bond5 (unregistering): (slave bridge2): Releasing backup interface [ 477.946876][T10022] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 478.013495][T10022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.028843][T10022] bond0 (unregistering): Released all slaves [ 478.044272][T10022] bond1 (unregistering): Released all slaves [ 478.080030][T10022] bond2 (unregistering): Released all slaves [ 478.104969][T10022] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 478.124623][T10022] bond3 (unregistering): Released all slaves [ 478.152350][T10022] bond4 (unregistering): Released all slaves [ 478.175601][T10022] bond5 (unregistering): Released all slaves [ 478.198725][T10022] bond6 (unregistering): Released all slaves [ 478.224350][T10022] bond7 (unregistering): Released all slaves [ 478.251779][T10022] bond8 (unregistering): Released all slaves [ 478.307011][T16803] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 478.413768][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 478.658830][T16838] netlink: 'syz.3.3047': attribute type 5 has an invalid length. [ 478.886035][T16667] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.938076][T16667] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.964804][T16667] bridge_slave_0: entered allmulticast mode [ 478.983538][ T5647] IPVS: starting estimator thread 0... [ 478.998136][T16667] bridge_slave_0: entered promiscuous mode [ 479.040488][T10022] : left promiscuous mode [ 479.072841][T16857] __nla_validate_parse: 3 callbacks suppressed [ 479.073689][T16857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3049'. [ 479.095264][T16854] IPVS: using max 34 ests per chain, 81600 per kthread [ 479.315660][T16667] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.346384][T16667] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.360474][ T5643] Bluetooth: hci0: command tx timeout [ 479.372593][T16667] bridge_slave_1: entered allmulticast mode [ 479.392808][T16667] bridge_slave_1: entered promiscuous mode [ 479.407556][T10022] tipc: Left network mode [ 479.694818][T16667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.801906][T16880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3054'. [ 479.824548][T16667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.291288][T16667] team0: Port device team_slave_0 added [ 480.303527][T16667] team0: Port device team_slave_1 added [ 480.608623][T16667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.627397][T16667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.743040][T16667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.822588][T16667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.882395][T16667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.939018][T16667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.978033][T16914] syzkaller0: entered promiscuous mode [ 480.988038][T16914] syzkaller0: entered allmulticast mode [ 481.324208][T16923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3065'. [ 481.440566][ T5643] Bluetooth: hci0: command tx timeout [ 481.464399][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 481.478886][ T5643] block nbd3: Receive control failed (result -1) [ 481.499945][T16928] netlink: 856 bytes leftover after parsing attributes in process `syz.4.3065'. [ 481.544798][T16667] hsr_slave_0: entered promiscuous mode [ 481.587148][T16667] hsr_slave_1: entered promiscuous mode [ 481.606347][T16667] debugfs: 'hsr0' already exists in 'hsr' [ 481.614097][T16667] Cannot create hsr debugfs directory [ 482.436444][T16954] netlink: 'syz.1.3072': attribute type 12 has an invalid length. [ 482.538665][T16962] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3075'. [ 482.594133][T10022] [ 482.596636][T10022] ====================================================== [ 482.603704][T10022] WARNING: possible circular locking dependency detected [ 482.609716][T16965] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3075'. [ 482.610800][T10022] syzkaller #0 Not tainted [ 482.624335][T10022] ------------------------------------------------------ [ 482.631499][T10022] kworker/u8:10/10022 is trying to acquire lock: [ 482.637947][T10022] ffff88801be85210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 482.649155][T10022] [ 482.649155][T10022] but task is already holding lock: [ 482.656563][T10022] ffff88801be85180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x830 [ 482.666401][T10022] [ 482.666401][T10022] which lock already depends on the new lock. [ 482.666401][T10022] [ 482.677106][T10022] [ 482.677106][T10022] the existing dependency chain (in reverse order) is: [ 482.686260][T10022] [ 482.686260][T10022] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 482.694776][T10022] down_write+0x96/0x200 [ 482.700432][T10022] kernfs_add_one+0x41/0x5c0 [ 482.705605][T10022] kernfs_create_dir_ns+0xde/0x130 [ 482.711710][T10022] internal_create_group+0x425/0x1190 [ 482.717815][T10022] cpuhp_invoke_callback+0x445/0x860 [ 482.723670][T10022] cpuhp_issue_call+0x430/0x7a0 [ 482.729250][T10022] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 482.735881][T10022] __cpuhp_setup_state+0x3f/0x60 [ 482.741453][T10022] do_one_initcall+0x250/0x870 [ 482.746961][T10022] do_initcall_level+0x104/0x190 [ 482.752590][T10022] do_initcalls+0x59/0xa0 [ 482.757644][T10022] kernel_init_freeable+0x2a6/0x3e0 [ 482.763400][T10022] kernel_init+0x1d/0x1d0 [ 482.768330][T10022] ret_from_fork+0x514/0xb70 [ 482.774917][T10022] ret_from_fork_asm+0x1a/0x30 [ 482.780778][T10022] [ 482.780778][T10022] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 482.788844][T10022] [ 482.788844][T10022] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 482.796809][T10022] cpus_read_lock+0x42/0x160 [ 482.801975][T10022] static_key_slow_inc+0x12/0x30 [ 482.807509][T10022] ipv6_flowlabel_opt+0x1b94/0x29c0 [ 482.813343][T10022] do_ipv6_setsockopt+0xd9f/0x3150 [ 482.819139][T10022] ipv6_setsockopt+0x59/0x170 [ 482.824539][T10022] rawv6_setsockopt+0x276/0x5f0 [ 482.830615][T10022] do_sock_setsockopt+0x17c/0x1b0 [ 482.836300][T10022] __x64_sys_setsockopt+0x13d/0x1b0 [ 482.842323][T10022] do_syscall_64+0x174/0x580 [ 482.847472][T10022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.854090][T10022] [ 482.854090][T10022] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 482.862087][T10022] lock_sock_nested+0x41/0x100 [ 482.867493][T10022] inet_shutdown+0x6a/0x390 [ 482.872635][T10022] nbd_mark_nsock_dead+0x2e9/0x560 [ 482.878433][T10022] recv_work+0x1c2e/0x1d40 [ 482.883572][T10022] process_scheduled_works+0xb5d/0x1860 [ 482.889760][T10022] worker_thread+0xa53/0xfc0 [ 482.894940][T10022] kthread+0x389/0x470 [ 482.900139][T10022] ret_from_fork+0x514/0xb70 [ 482.905383][T10022] ret_from_fork_asm+0x1a/0x30 [ 482.911314][T10022] [ 482.911314][T10022] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 482.919782][T10022] __mutex_lock+0x1a3/0x1550 [ 482.925016][T10022] nbd_queue_rq+0x37b/0x1100 [ 482.930780][T10022] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 482.937348][T10022] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 482.944833][T10022] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 482.951993][T10022] blk_mq_run_hw_queue+0x348/0x4f0 [ 482.957796][T10022] blk_mq_dispatch_list+0xd16/0xe10 [ 482.963879][T10022] blk_mq_flush_plug_list+0x48d/0x570 [ 482.969907][T10022] __blk_flush_plug+0x3ed/0x4d0 [ 482.975448][T10022] __submit_bio+0x28d/0x580 [ 482.980532][T10022] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 482.986810][T10022] block_read_full_folio+0x599/0x830 [ 482.992690][T10022] filemap_read_folio+0x137/0x3b0 [ 482.998292][T10022] do_read_cache_folio+0x358/0x590 [ 483.003967][T10022] read_part_sector+0xb6/0x2b0 [ 483.009362][T10022] adfspart_check_ICS+0xb1/0x960 [ 483.015040][T10022] bdev_disk_changed+0x817/0x1770 [ 483.020797][T10022] blkdev_get_whole+0x380/0x510 [ 483.026691][T10022] bdev_open+0x31e/0xd30 [ 483.031493][T10022] blkdev_open+0x470/0x610 [ 483.037052][T10022] do_dentry_open+0x822/0x13a0 [ 483.042596][T10022] vfs_open+0x3b/0x340 [ 483.047232][T10022] path_openat+0x2e08/0x3860 [ 483.052390][T10022] do_file_open+0x23e/0x4a0 [ 483.057910][T10022] do_sys_openat2+0x113/0x200 [ 483.063252][T10022] __x64_sys_openat+0x138/0x170 [ 483.068669][T10022] do_syscall_64+0x174/0x580 [ 483.076434][T10022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.083450][T10022] [ 483.083450][T10022] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 483.091125][T10022] __mutex_lock+0x1a3/0x1550 [ 483.098116][T10022] nbd_queue_rq+0xc6/0x1100 [ 483.104158][T10022] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 483.110807][T10022] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 483.119041][T10022] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 483.125891][T10022] blk_mq_run_hw_queue+0x348/0x4f0 [ 483.132122][T10022] blk_mq_dispatch_list+0xd16/0xe10 [ 483.139367][T10022] blk_mq_flush_plug_list+0x48d/0x570 [ 483.145400][T10022] __blk_flush_plug+0x3ed/0x4d0 [ 483.151327][T10022] __submit_bio+0x28d/0x580 [ 483.156404][T10022] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 483.163211][T10022] block_read_full_folio+0x599/0x830 [ 483.169366][T10022] filemap_read_folio+0x137/0x3b0 [ 483.175457][T10022] do_read_cache_folio+0x358/0x590 [ 483.181327][T10022] read_part_sector+0xb6/0x2b0 [ 483.187089][T10022] adfspart_check_ICS+0xb1/0x960 [ 483.192759][T10022] bdev_disk_changed+0x817/0x1770 [ 483.198428][T10022] blkdev_get_whole+0x380/0x510 [ 483.204321][T10022] bdev_open+0x31e/0xd30 [ 483.209410][T10022] blkdev_open+0x470/0x610 [ 483.214767][T10022] do_dentry_open+0x822/0x13a0 [ 483.220713][T10022] vfs_open+0x3b/0x340 [ 483.225453][T10022] path_openat+0x2e08/0x3860 [ 483.231577][T10022] do_file_open+0x23e/0x4a0 [ 483.237828][T10022] do_sys_openat2+0x113/0x200 [ 483.243165][T10022] __x64_sys_openat+0x138/0x170 [ 483.249116][T10022] do_syscall_64+0x174/0x580 [ 483.254414][T10022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.261673][T10022] [ 483.261673][T10022] -> #4 (set->srcu){.+.+}-{0:0}: [ 483.269038][T10022] __synchronize_srcu+0xca/0x300 [ 483.274738][T10022] elevator_switch+0x1e8/0x7a0 [ 483.282236][T10022] elevator_change+0x2cc/0x450 [ 483.288887][T10022] elevator_set_default+0x36c/0x430 [ 483.294689][T10022] blk_register_queue+0x3e9/0x4e0 [ 483.301325][T10022] __add_disk+0x677/0xd50 [ 483.306211][T10022] add_disk_fwnode+0xfb/0x480 [ 483.311441][T10022] nbd_dev_add+0x72c/0xb50 [ 483.316544][T10022] nbd_init+0x168/0x1f0 [ 483.321390][T10022] do_one_initcall+0x250/0x870 [ 483.327149][T10022] do_initcall_level+0x104/0x190 [ 483.333908][T10022] do_initcalls+0x59/0xa0 [ 483.339514][T10022] kernel_init_freeable+0x2a6/0x3e0 [ 483.346595][T10022] kernel_init+0x1d/0x1d0 [ 483.351872][T10022] ret_from_fork+0x514/0xb70 [ 483.357124][T10022] ret_from_fork_asm+0x1a/0x30 [ 483.362553][T10022] [ 483.362553][T10022] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 483.371293][T10022] __mutex_lock+0x1a3/0x1550 [ 483.376472][T10022] elevator_change+0x1b3/0x450 [ 483.381879][T10022] elevator_set_none+0xb5/0x140 [ 483.388399][T10022] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 483.395269][T10022] nbd_start_device+0x17f/0xb10 [ 483.400779][T10022] nbd_genl_connect+0x165b/0x1cf0 [ 483.409095][T10022] genl_family_rcv_msg_doit+0x22a/0x330 [ 483.416375][T10022] genl_rcv_msg+0x61c/0x7a0 [ 483.421828][T10022] netlink_rcv_skb+0x232/0x4b0 [ 483.427430][T10022] genl_rcv+0x28/0x40 [ 483.431983][T10022] netlink_unicast+0x75c/0x8e0 [ 483.438452][T10022] netlink_sendmsg+0x813/0xb40 [ 483.443801][T10022] ____sys_sendmsg+0x972/0x9f0 [ 483.449323][T10022] ___sys_sendmsg+0x2a5/0x360 [ 483.455289][T10022] __x64_sys_sendmsg+0x1bd/0x2a0 [ 483.461060][T10022] do_syscall_64+0x174/0x580 [ 483.466491][T10022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.473564][T10022] [ 483.473564][T10022] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 483.483520][T10022] blk_alloc_queue+0x546/0x680 [ 483.489195][T10022] __blk_mq_alloc_disk+0x197/0x390 [ 483.495397][T10022] nbd_dev_add+0x499/0xb50 [ 483.501366][T10022] nbd_init+0x168/0x1f0 [ 483.506190][T10022] do_one_initcall+0x250/0x870 [ 483.512571][T10022] do_initcall_level+0x104/0x190 [ 483.518525][T10022] do_initcalls+0x59/0xa0 [ 483.525285][T10022] kernel_init_freeable+0x2a6/0x3e0 [ 483.533321][T10022] kernel_init+0x1d/0x1d0 [ 483.538734][T10022] ret_from_fork+0x514/0xb70 [ 483.544306][T10022] ret_from_fork_asm+0x1a/0x30 [ 483.549801][T10022] [ 483.549801][T10022] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 483.557252][T10022] fs_reclaim_acquire+0x71/0x100 [ 483.563249][T10022] kmem_cache_alloc_noprof+0x40/0x650 [ 483.569925][T10022] __kernfs_iattrs+0xdf/0x320 [ 483.576126][T10022] kernfs_iop_setattr+0xea/0x3f0 [ 483.581921][T10022] notify_change+0xc1a/0xf40 [ 483.587073][T10022] do_truncate+0x1c2/0x250 [ 483.592428][T10022] path_openat+0x2f89/0x3860 [ 483.598724][T10022] do_file_open+0x23e/0x4a0 [ 483.603806][T10022] do_sys_openat2+0x113/0x200 [ 483.610191][T10022] __x64_sys_openat+0x138/0x170 [ 483.616049][T10022] do_syscall_64+0x174/0x580 [ 483.621387][T10022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.628947][T10022] [ 483.628947][T10022] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 483.638294][T10022] __lock_acquire+0x15a5/0x2cf0 [ 483.644665][T10022] lock_acquire+0x106/0x350 [ 483.650012][T10022] down_write+0x96/0x200 [ 483.655371][T10022] kernfs_unlink_sibling+0x71/0x180 [ 483.662106][T10022] kernfs_rename_ns+0x4a6/0x830 [ 483.667865][T10022] sysfs_rename_link_ns+0x16e/0x1b0 [ 483.673719][T10022] device_rename+0x110/0x210 [ 483.679309][T10022] __dev_change_net_namespace+0x15d3/0x20a0 [ 483.686201][T10022] cfg802154_switch_netns+0xbf/0x3d0 [ 483.692569][T10022] cfg802154_pernet_exit+0x75/0xe0 [ 483.698407][T10022] ops_undo_list+0x49f/0x940 [ 483.703920][T10022] cleanup_net+0x56b/0x800 [ 483.709550][T10022] process_scheduled_works+0xb5d/0x1860 [ 483.716028][T10022] worker_thread+0xa53/0xfc0 [ 483.723358][T10022] kthread+0x389/0x470 [ 483.730012][T10022] ret_from_fork+0x514/0xb70 [ 483.736811][T10022] ret_from_fork_asm+0x1a/0x30 [ 483.745097][T10022] [ 483.745097][T10022] other info that might help us debug this: [ 483.745097][T10022] [ 483.759875][T10022] Chain exists of: [ 483.759875][T10022] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 483.759875][T10022] [ 483.783012][T10022] Possible unsafe locking scenario: [ 483.783012][T10022] [ 483.792171][T10022] CPU0 CPU1 [ 483.799562][T10022] ---- ---- [ 483.805483][T10022] lock(&root->kernfs_rwsem); [ 483.812262][T10022] lock(cpuhp_state_mutex); [ 483.821623][T10022] lock(&root->kernfs_rwsem); [ 483.832502][T10022] lock(&root->kernfs_iattr_rwsem); [ 483.839742][T10022] [ 483.839742][T10022] *** DEADLOCK *** [ 483.839742][T10022] [ 483.850980][T10022] 5 locks held by kworker/u8:10/10022: [ 483.858840][T10022] #0: ffff88801be86140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 483.874964][T10022] #1: ffffc90006387c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 483.889799][T10022] #2: ffffffff8fdb9f28 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 483.902969][T10022] #3: ffffffff8fdc8c00 (rtnl_mutex){+.+.}-{4:4}, at: cfg802154_pernet_exit+0x19/0xe0 [ 483.918383][T10022] #4: ffff88801be85180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x830 [ 483.932383][T10022] [ 483.932383][T10022] stack backtrace: [ 483.940490][T10022] CPU: 1 UID: 0 PID: 10022 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 483.940516][T10022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 483.940529][T10022] Workqueue: netns cleanup_net [ 483.940562][T10022] Call Trace: [ 483.940571][T10022] [ 483.940579][T10022] dump_stack_lvl+0xe8/0x150 [ 483.940601][T10022] print_circular_bug+0x2e1/0x300 [ 483.940626][T10022] check_noncircular+0x12e/0x150 [ 483.940651][T10022] __lock_acquire+0x15a5/0x2cf0 [ 483.940673][T10022] ? __lock_acquire+0x6b5/0x2cf0 [ 483.940698][T10022] ? kernfs_unlink_sibling+0x71/0x180 [ 483.940725][T10022] lock_acquire+0x106/0x350 [ 483.940742][T10022] ? kernfs_unlink_sibling+0x71/0x180 [ 483.940774][T10022] down_write+0x96/0x200 [ 483.940794][T10022] ? kernfs_unlink_sibling+0x71/0x180 [ 483.940821][T10022] ? __pfx_down_write+0x10/0x10 [ 483.940840][T10022] ? kernfs_root+0x1c/0x230 [ 483.940861][T10022] ? kernfs_root+0x1c/0x230 [ 483.940882][T10022] ? kernfs_root+0x1c/0x230 [ 483.940903][T10022] ? kernfs_root+0x1ea/0x230 [ 483.940925][T10022] kernfs_unlink_sibling+0x71/0x180 [ 483.940954][T10022] kernfs_rename_ns+0x4a6/0x830 [ 483.940984][T10022] sysfs_rename_link_ns+0x16e/0x1b0 [ 483.941009][T10022] device_rename+0x110/0x210 [ 483.941029][T10022] __dev_change_net_namespace+0x15d3/0x20a0 [ 483.941059][T10022] ? __pfx___dev_change_net_namespace+0x10/0x10 [ 483.941080][T10022] ? irqentry_exit+0x218/0x8b0 [ 483.941098][T10022] ? lockdep_hardirqs_on+0x7a/0x110 [ 483.941118][T10022] ? do_raw_spin_lock+0x12b/0x2f0 [ 483.941167][T10022] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 483.941389][T10022] ? lockdep_hardirqs_on+0x7a/0x110 [ 483.941407][T10022] ? __mutex_lock+0xef8/0x1550 [ 483.941427][T10022] ? __mutex_lock+0x608/0x1550 [ 483.941448][T10022] ? __pfx___mutex_lock+0x10/0x10 [ 483.941468][T10022] ? __pfx_netdev_run_todo+0x10/0x10 [ 483.941489][T10022] cfg802154_switch_netns+0xbf/0x3d0 [ 483.941522][T10022] cfg802154_pernet_exit+0x75/0xe0 [ 483.941546][T10022] ops_undo_list+0x49f/0x940 [ 483.941573][T10022] ? __pfx_ops_undo_list+0x10/0x10 [ 483.941599][T10022] ? idr_destroy+0x218/0x290 [ 483.942485][T10022] ? do_raw_spin_unlock+0xf5/0x210 [ 483.942515][T10022] cleanup_net+0x56b/0x800 [ 483.942544][T10022] ? __pfx_cleanup_net+0x10/0x10 [ 483.942576][T10022] ? process_scheduled_works+0xa70/0x1860 [ 483.942594][T10022] ? process_scheduled_works+0xa70/0x1860 [ 483.942611][T10022] process_scheduled_works+0xb5d/0x1860 [ 483.942643][T10022] ? __pfx_process_scheduled_works+0x10/0x10 [ 483.942663][T10022] ? assign_work+0x3d5/0x5e0 [ 483.942681][T10022] worker_thread+0xa53/0xfc0 [ 483.942710][T10022] kthread+0x389/0x470 [ 483.942733][T10022] ? __pfx_worker_thread+0x10/0x10 [ 483.942749][T10022] ? __pfx_kthread+0x10/0x10 [ 483.942771][T10022] ret_from_fork+0x514/0xb70 [ 483.942791][T10022] ? __pfx_ret_from_fork+0x10/0x10 [ 483.942808][T10022] ? __switch_to+0xc79/0x1410 [ 483.942834][T10022] ? __pfx_kthread+0x10/0x10 [ 483.942856][T10022] ret_from_fork_asm+0x1a/0x30 [ 483.942884][T10022] [ 484.005829][T16970] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3076'. [ 484.087425][T16972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3076'. [ 484.344603][T16972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3076'. [ 484.363940][T10022] hsr_slave_0: left promiscuous mode [ 484.370767][T10022] hsr_slave_1: left promiscuous mode [ 484.377273][T10022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.397565][T10022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.813080][ T5294] 8021q: adding VLAN 0 to HW filter on device eth3 [ 484.885297][ T76] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.914906][ T76] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.957029][ T76] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.974176][ T76] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.162411][T10022] IPVS: stop unused estimator thread 0... [ 485.334688][T16667] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 485.363547][T16667] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 485.381718][T16667] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 485.402360][T16667] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 485.431396][T16667] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 485.445336][T16667] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 485.467310][T16667] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 485.494567][T16667] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 485.606839][T16667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.636870][T16667] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.654015][T10045] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.662778][T10045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.696532][T10045] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.705872][T10045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.135256][T16667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.183446][T16667] veth0_vlan: entered promiscuous mode [ 486.212413][T16667] veth1_vlan: entered promiscuous mode [ 486.247654][T16667] veth0_macvtap: entered promiscuous mode [ 486.263674][T16667] veth1_macvtap: entered promiscuous mode [ 486.286341][T16667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.311707][T16667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.336594][T10022] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.363775][T10022] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.382643][T10022] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.400362][T10022] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.415230][T16667] ieee80211 phy33: Selected rate control algorithm 'minstrel_ht' [ 486.448993][T10022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.460899][T16667] ieee80211 phy34: Selected rate control algorithm 'minstrel_ht' [ 486.482365][T10022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.508841][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.529283][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.879394][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.887177][ C0] bridge0: topology change detected, propagating [ 488.893910][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.901275][ C0] bridge0: topology change detected, propagating