last executing test programs: 12.251217572s ago: executing program 3 (id=3258): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000200000000fbdbdf257f000001000000000000000000000000fe8000000000000000000000000000aa01000000000000000a0060803b", @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x2}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x48804) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) socket$kcm(0x2, 0xa, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x3c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004011}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r4, 0x0, 0x4000000) bind$packet(0xffffffffffffffff, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xfdef) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000400000000000000000000000a0030"], 0xb8}}, 0x4000) 11.970800054s ago: executing program 3 (id=3261): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r3 = socket$inet(0x2b, 0x801, 0x0) (rerun: 64) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x480, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000dcdbdf251a00000008000300", @ANYRES32=r9], 0x20}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000080) (async, rerun: 32) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r6, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x24004011) (async, rerun: 32) close(r1) (async) socket$unix(0x1, 0x2, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r10 = socket(0x1e, 0x80000, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r13, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 11.382949255s ago: executing program 3 (id=3265): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x3c, r0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0xfffffffffffffcec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0x168, 0x1a0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x13, 0xb62, 0x6}}) 11.243843002s ago: executing program 3 (id=3266): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000006800010400000000000000000a000000000000000800010001000000040004"], 0x24}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000006800010400000000000000000a000000000000000800010001000000040004"], 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000068000100020000000600000000000000000000000c00020001"], 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000068000100020000000600000000000000000000000c00020001"], 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_getnexthop={0x18, 0x6a, 0x7d9504e1c39794d, 0x70bd2a, 0x25dfdbfb}, 0x18}}, 0x24044000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000007c0)='T', 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x84}, 0x0) recvmsg$unix(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/230, 0xe6}], 0x1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r6) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x38, r7, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x38}}, 0x0) 11.010662552s ago: executing program 3 (id=3268): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000d9e7833a00000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e0000000000000002000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x10000, @private2}, {0xa, 0x0, 0x0, @dev, 0x20000}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x30}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="6115a400000000006113540000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916360000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) close(0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x1f, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa0000000}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx_val={0x18, 0x14bb49656dbcae00, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x3a}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x4008054) r12 = socket(0x1e, 0x4, 0x0) write$nci(r8, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r9, @ANYRES16=r12], 0x14) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0xef, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x3, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0x0, @in6=@local, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="08001efbb07d5a6e", 0x8}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000000140)="7ae01362112d2342388fcb4f1ade534ac1b1fada79b92c3d62de0323283849366fe987c0771c54cce8df72f6380c5fde707c4ee86d2b00", 0x37}], 0x3, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}, 0x20000810) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a2000002fc900000a03000000000000000000070000000900010073797a3000000000680000010000000400000000000000000700000008000a400000000008000c40000007ff0900010073797ea31e12795ec26dffe27a300000000008000f400000000628001280240001800b0001006e756d67656e0000140002800800024000000007080001400000000f08000340000001101400000010000100"], 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x20040084) 10.446274679s ago: executing program 3 (id=3271): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000024c0), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000007140100", @ANYRES32=r5], 0x30}}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_DELSETELEM={0x3698, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4a8, 0x3, 0x0, 0x1, [{0x4a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xff}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @reject={{0xb}, @void}}, @NFTA_SET_ELEM_USERDATA={0x51, 0x6, 0x1, 0x0, "06790c1e5c9f113af83b64578b5369ec70513b7e65ea5e29da4fd7a3c27bd7d960e574fb992036073186de955d3837ae1d2d3213669c2637ad371cb43df664a2ee2064b9a776e2f7124bceebd8"}, @NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xa}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x2e4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xea, 0x1, "7477156ec4d1f628f4e026f3136eb2e819a9725b2f832c8f4d531b40d9e84db57e5173c1ea80e93f20d0691b6de837399838d8fce3f68b2317f23736924f2d6e28afb5025b386ff934f2f675dc0fd6ba58b937ee4f028b5af7991afe620b45522dd56c0d38f5d1941856b00433646c99ddb315d832d7adc3969266e283a255d9b36102c4a28b7d373d7ce576f2d0faf046eed18356089d54f888733df860a9e4cb4c8f6896a9cb2e9751dd1da8e9d2309717f4b136b077c4a05dbd45015afc9cc970f270dd80a0813bb6068665ad7ac2c276f314f66bda3fcd88fba6da01d2774c7f543a5ee0"}, @NFTA_DATA_VALUE={0xd2, 0x1, "acef44d11d02a52b9ae7917a2ef2559ae02f0c369bbf2ca3b92e9e87598fb119c3106d778d6c985a3263b58eacb8522f31b3ef73174d3dfcb948387dd3d96e49b28c4afa82cf8aea09812701f4151c8fd01fab7103dc9731e3bcc895f4dd9e092d35d5f57b2e55460b70192127b84ed95169b25dbed3425cbb18058f7d9de864906d7e3e81088bffe56e8f8412dde66ebd14d750eaaabb2c7102d3fc02cc21d367379e5e98b450093eafa9d9d64fb6ddb257278643afdb41d49186033e56b14e8ccf046c60a325ef4d0aa5644ece"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x59, 0x1, "f79ba27009086b63450492e334ac3166bbcc3174d34202c77f1cfd3913d73d26f48c3710f7bcd2c30ee1c11dd0e92202238b9c6795aeb8f7553c359f904026acecfa931c496d909d1a1702990d024dac61480351cc"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_DATA={0xf8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf2, 0x1, "3a02b32295a6c60e4db6ac41aea8ddcbcdc493ed8811803f7b9e2a435fec7e9c58541359d2223242cdb05ee41f9fbebaffd28d740f215ce27ea7f8e98c2c5a70c7a9180ed2f8c29b95f2b56c0e7877c4dc95a0e9cd24e041078b5b38917b198c7aafc76d4bbf137eddec1fd1c751a420b08633b43b57a1f80d45075d662373cc4610fcd87d38b343fdf751af871ef89e41fabaa51664327ffc7f59b1ded2b0bda8d840bd9fa8c153963c2660d9fe9e797c0bd2e4d0092ef962fe5ef5733b4bc23ebce25397d20254db5cb183dabcf920f14070fd670aa9b605ebcf7ecd9045c5547ddd1437776819442de8ba1764"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x10000}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x318c, 0x3, 0x0, 0x1, [{0x410, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2aa2}, @NFTA_SET_ELEM_USERDATA={0x6e, 0x6, 0x1, 0x0, "be1e24702143843a61b18e1be8b7cae156de8793e9cf15164c5acdee3f689a3a842c7380d3e3d9228db57a1a04d0f645dcbf38496da8d008044774f9eeb221c2ca0fedbdc9e2c317bdbd3e7e3c6bdd89c909434d40c2f76d75e8db126d711314194bef6261023d762b10"}, @NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @tunnel={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x118, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xab, 0x1, "76692945bda6f5723fde2d97e0df0cf3b31c8b0da8cf089193e32e478cbfd93d3012c551230eb9a4faec6702b259c935e69f45073339dc8f4e3f18b708b19d7bb44be479bf6014aa5260d40c4a950c6094f2abec449a131faaa2c5df6504fced7054d25523c6d9184ed431fb90ff9a12c9808e38fcb05090ab2e08d16c53e13caf0928b996bcb6efafda811bb8cb6c38603967308df176a0f00f9472fdcd3511c0e54e6ccde9b7"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x25, 0x1, "902591b686312d6caecfa568c925e58b95a19c49a2b976d73af2381de96a385b69"}]}, @NFTA_SET_ELEM_KEY={0x144, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x40, 0x1, "6f04ad592eb6311768a373f0b43aaedc8acdc3a10948b5d8e615bb878bd5af435ab5d0aad1fc1f5cdec7b9fdce26fd7ad1870cd5a97f99e897edea30"}, @NFTA_DATA_VALUE={0x49, 0x1, "e6f6c96b91a4213efe0570607d5b270eadf2e355ee7bafc7eb25cc2498b55dad1e0eec957ef9cef2a26c24082b3b854340b8f32f1c10016a4d2d428d97657710bbb6d57e73"}, @NFTA_DATA_VALUE={0xb2, 0x1, "a19a824eac93341fcd5a11db753b07f3d0b00e344d9bc987d2baae903a10e05091ccb69aa8ff381e1af2f350520763ace6179378f7b7bf2824991467b4f9aa4339cd756112ab5cf7e517e1c312488cc45e7d92725936e63019304b2167f57752a1f9e0201c6d5553f43032c232e1376b4f69f3e2b1ffcfc0455b004d4d80f3fa9336777de47eeb1c33f829c9fa211fb46aa280facd49b1ba57b4a2d86a0973c77772824655fcdb6d75d2bef4e30b"}]}, @NFTA_SET_ELEM_KEY={0xdc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9e, 0x1, "3b82b6452ab844d36db036cb8aa49cbeded1834fd6dee47d533178b31c55c2ece7815fdd0f78e4a662c9c823ff411da53a78e535f554c5ed3e11dacb4b74f2d0bf6a4f192156dedf094bb15b897a17e929c6e2a512029fbb022f74fa99d7cf32ec05b3a054a10befbe206306a2be9061ea0983c235a1dfeba4953629e1fce96faa9e21592473b78d23c69da0b14d7bdf1449eee9cfb275af722d"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0x3d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x1dc, 0xb, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xb33}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x401}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7a7}]}}}, {0x138, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x128, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x114, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x6, 0x1, "1840"}, @NFTA_DATA_VALUE={0x6c, 0x1, "0f98e7a0f4f38cb856573a49d31c18acab91985152e6a98e4a04e0aa82621c162a3d22ed7c2dbdad9bcd9fc621c6a3a51cce81158f540e5ab8fb252e59a90b262ad877e1d42b0580ac086f8766014ff39bd7585686ccef61e54fa7f27e531031c0da41fd6306a87f"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x19, 0x1, "813486ac3c82a659a22696628f48e461b0802bf045"}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x12}]}}}, {0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x13}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0xdc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd6, 0x1, "6e70f5b5438a61a99139563fa6ba7319cd95f2ad3302d1ce6a68d42b6ba92ed21baec09219b6fd4e89ab4ffd24f7279507d15e253a2c2ea5545b094a6bc84cf19e6320e0fa74cc9dd33525f99bb2291ea92e62b0befe88b44d1aec54149aefe14c07579734fa12e21a608ddae6e59cae1659086466bbc7580e6146067cab4049ae784e3836ded3876bf3dd7d9c8b8a2a5f2ccf451d069db4b0fd5b8cbbeb9b21c55b8c8eefa40e59cf99f2fcbe5df20df14506847461b6929d3473f81cf234fb4c3e6c739ce81c446579b6657ec59bd598bd"}]}, @NFTA_SET_ELEM_USERDATA={0xfa, 0x6, 0x1, 0x0, "4dcb338016282de3d627de77653eb1e5ec070d9e017037a7c7df21b4f4b7b0f7b5e89618df605d42c70a0efde17ef3b52c3d48b4b817fe3fb92434e40cae50807dc9a7f0468a438e7ad2c8f2940e0df1f9ecbfbd272a09798e3ee557f895d179d69cd9fcc10c510a2ea9b394a6a34ea422c31fd3bd8ec50630a1664af1e367e6d3ddb08d2551aec32deb5d00cb58238fe027253db8d59d4b5fe1a4d28d824e5c207f03fd619e71db6f9758953e922f6fa120cec4554683d934213c593b36e0c76382e74a0608f976488cf9bf31c79934b69967ba14cef3bc31b82237b20ce7f355d3de26939e81882bcd04dc29ffc3bbdc7da2b5273d"}]}, {0x298, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0x184, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb8, 0x1, "874c841ecc5a9534af4195b942fe6a43ca1b77b50a8a2555e1f7677b48e4116c2da31484b8c1b871c16bcaa090a80e6fccde49fd9da46a47d52c487b37c57d9110d994e4c2e4c3fce05ed74157585bc9500857ea73babd7b7b30c7aff2f2b5b149667fb8d99fe0b1d26ffa87ada1ac7c22cf586f1adbb03ef49b83968d43b3430890924bf78447220da147f67d2217ffe1c5ffb9c8689f838e390efa40eb7868b6025d2f2d7ddd80735348150bcfbfc3ac079d3d"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x10, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0xf4, 0x6, 0x1, 0x0, "8734ac904fd866bb0613670effee432cde565099ce666a32e4374ea442f2fd2cc57758a6d4c89fd649383d0866a679b48ef24ed776917d7af8cb216af4f1f7f5e7b527c24e56560f2d45d61721c9f255bb32e3503fedff5e57c1d0fbed7c5720b44baff3f64703592a1ac6e1272be7a3d3d10b9efdacfcd5f4e333895fb7c5085a1528bfe69c074eddefe393f176727f9c8865a56ddfa76035e11d97b150aadbb2326cf76b40f1fab6fbe2fc02087a5f86a96a9564ebd9890196ca4d91472aea926083918b7177e71d10070a0e72c2ae9337d021b0f08d0b5655ed2b53ab86b60a932972f29ef6772fa3df01a934d504"}]}, {0x22e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x80, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x5e}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x26}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xfe}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x15}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x2254, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xea, 0x1, "0ad034cfabf215ba22388893053f59f04f63e8bfa2579d7e0fbc4979ae8309189472a30993bf2f9daa9ac2c1ce26e8ba7f9c46744ab5bb7d4b9fcd8387b112b97f04b55836b2b9fe6e85cff8c377594a69691390a30df6b6b5d5a6754026f057aad3a78263a10e205ee7ca1ea2006b6ca75324ac71337bc1c03d04490b7608887696e473e1baf5c083e7b294d7971b8c84436b133558b0e55b34cf2d2a168fc4e3f64a66cff78a80c91b8d92568ca73f59cfc210ab54b66a7e8bce6b9b74ed61b8cf702117d8722f949feeb418aeba7500aadb4ee6349567e0ab5a51a5e0dbddcc64fee9e671"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x40, 0x1, "22d261c452a4bfb6db33838eb1a4845abd7fd9ab72af3d9f06dfd6f19fc39cea0ba1d8604be15c96681d9539ffe06c49f33942a099b89b82676f5542"}, @NFTA_DATA_VALUE={0x56, 0x1, "f54ab6b8162a41e59a62289b769c5e501cab6b8134aee8ae63373fb7ed77c25983ae8fde607fa727594ca7811a7f76523e3a4ce320cd518d8bf03f33b34bead29154c18ae2f16622a23620af79aeda486aa8"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x82, 0x1, "408a5c440085f4831e6ffcaec3b9e02abaa1fde02184890ecdc68d2632e46832895c85f963bb6649897386f59c1e3d35231521a1bf52b6240c3a631f7467b13e659af39cd14f808cac1488b70fc09942ce335abde1f559e52ef3d41527835b332b5c8086b6c5a1ffe431ca93c8bb02f561b9622d68bf0322e700f87cbc93"}, @NFTA_DATA_VALUE={0x1004, 0x1, "3428ec24055c555ac6dded1d01bcfec540cdbcff76928dd74009a46783bbec56578d0c1bb9b8e232e232cda79afae116b3ce3850cf0a0f18effe1f988f329bb8e8cfec3862c4309584fe6351f584945222e8729c7002691680d66af7fa7a15ee304cbfb0cf96406698e4be28536621dd2ebc7892786bbe24ef83195fd0341f094517cf714e6ec1bb4716c89bdc27557be700f1612a7293a920f735a2ebf8a646eb978d118564ab0008ecda28b5700f19d0fbd7f3cdcddf9a2bf5ce239157e54eccd6e27a070384caef6bf13107802786f25df6c0e57cd69963647604c15a01c65856e3ba9efd63f52cfff58ac8ca4b359f658016ff8f0c197afc5069d50d13b3d3489be0ef4bfee1622d6b937d36ce7e2c2e225291bf9fdfa13c1a10f06281506aff839732fa203f7cc56362e65d675f06952d13fa8fa982f67f1cd949725a2df81065a06d64440ff85c4812d2d2d23571845254a8b807ce8c9415b3a3ebce4a0b3813b4810a6491b2f672c9471626816f65faa85e32cd7f1e855b8081d614b0bb8e3b20bad1b865a609038fb10e6f6bec65e521feda5e01eefa61b26d6e7b1705c9f15884cda8b45999a610ea55a140f3e1e71f9b92c5dc0531d1ba7a9ada5339190ad99e621955bdd30f2e9c255cd52de67a7d9540e7f9846ae931bc64c5270ce6e11530e22b9a52438e31a5be3a234be265b0812c2395da94317ee74dc4aff105ae0a8a8584a937b832737ff6aed306896ca71a536b7248146cd02d71d29fceadbace661a77afa03a7fe8434b206346c4e5b28b070f47c2d7f88ebf67e31e24a8941144c422713df8757d92aca0c3ecfc334ca165e000a31b62ddcae222065e5da857b0fd13cdac79b21670a1b10f17c73889460fe2a59b575ef685336d7e0f7b80b3604165b0b1eb2df67b62edc87ff3de0a2bcaeaa864c5a293c24dc6583bd99e48e52f6fe2ff514c573702c09e007765615aede4298ac390a08bff43d18cb391b6b5dcf85dc1c45924219c770910b2ac82455c8708d9d632df62bc2ea2edfd58c8eb57fb2e104d06c65811dfac27fe480b88c38c4b9288e5792a4b0526bbd8f3ea142c2c2c82b4bde7eff76795aac8f97cd76920af9e06dcc4cb64457aa9e90474aa9f1d5bde3945745154f8c5fdc56da04b3db3da13173f4043451179b9297f84afeefd3b47b862c0590b9c8383a5bf94a050dd9d6e8e624a8aa660740c87dc22989f46432d0fafe01398604f3580b03a1750ddb40ac689a378f2f21c0f9b5f6a83674e5e6afeb94553ec9273133c8f7b420ac35c2fcec57769d690e6d8e4944c6f6fdae204acd87465948237dc8d2e4600edfdfc771404ef43054dcbd6132ce76cbf7f9620fd8dd8b7b181b337875cefe8835b16e31c44dafb354c33974bd26654fec12d11dc66e4eed1281b08d31e57a34a58e92972ff7434d428e4761956ccd83078e5e43898cfcfcb8cf907a2f88f7cda09325d546f3782ca4ba0aeb4a297def0bfdd83ad3479e9283a7361236699b59199a1c6c86a02d8177c05acdfdb9d8276d8061da248e5ff7e695c5b1eda00b0d384d7d07837490e1dba8d8832af491925f91556a102e141397967fd792ff77504128e579ae0dc52e5382ffcef4f17558eff7eef89afcdee995539e0f54dea7292af1135628d79ac370ab71ba84dd33f657c0054a44b57230a997ce20b3135b14f6f7dfe6789a257879be09585e4df4414baaa752a2a7591f41565930f9c73f64e641aed7ef4120b2430902fb73bbc314e330d021112bf3de9fdcc277556fd303ea625f3b46f2831b52a63f4a61b0486122d573b75ca3777f573285cdb7bb1b9bd5a02a975d823cf139c18ad9959ad6b7538caf6b77890d4f9d35b525a37e7f365f998b4b58d963517cb2770b9ec51f1b1c0a9eecd8fc313b8c4a403f4ea63610ec16a8e021b723104a425354f08ef2dddff068b8d60264075b2655681ae87b33ad5971b3266cd4586b4235002edd9979360f1c89d0e32314aab36f46a8f9a55096913952ec9f312ff120e625f79fdd96fcef6ca9823e78449ba8e5cdb3cee231d03eb8fb7efd6fd847ea504bf2dcad5f8939d8dad479c3bb7d6d06146bffc3021c9c571ffcda36783102401f37a20da45acce19a7c347ff9e9844ccbe327dc7f4aa63dbc7887c95cdd0d5b0bbc1c56d0a20abd2cb28d5bdb4ed06f023ed1cf1840fa46c40650d3cc4c14a3c89c3e77038537a00364d90d550c6d3a009894231c78b1ce73b9274c5202c6aa625c08be6b5930a741a9a7b685e32d3fa8f11909c499bea1cee41c4973c9d3abd59c0c394d9f4a5a327d2eb3dbdfeacc82ddf85ca360f5d5afbc5e2f08b15611af8188c77731759454fab4ff67ff91546b69ca36b303426ba329fe749ad4f5715cf0812102d1087b5dd13c9717c5c6e2c3d602ad15d469e6f01e231053fd743c00c2456141d32598c9198301077eb7c1e34b7a3cee887ea386d8a9a8274e6d3c0b15d158b2f9fb84e21ccbb3cbcbcf1194fddecb38957e231a621707f0a56b4ec199172e344f5ff08271fac862f4ab3e1e2f17315dc881f135b6e805c5995828bd5023130ac2e85cf96b5f702512a5559d9fcba35d45341f8f44959b405e0f58bdbc6ba9064d48d2dfafad05ec3ed54e0fc23f1c98ddb86bee442cb3092c1277a169397a2c9a1d660e626b8ba0a65fa16380a7a80eedc9d1b7c4aa2fedad6ab4621db4bfa02000615d38b99dcc4e768bb51e00cf2700bcc0fd2e6e167c1a76acf33088d542bda23f34af5b29f0e52534b00326921d1979f8ad05044cd16a191bd352c8e08d163d22ccf2822a7b8a42dc46e93d890e9b44e8cf25fdeb7c49a3c7e0c0d4e362ed94f87469fbce42dabdb3d504bb21ef44235e71814dfbb4fca1f51934cb65b817f217b548ea5b93998b28f2808b590e72f84b6f7fd1d3104d44f730eacc66ba87a15cc5af8aa37332af7c84bd13253f971a0849d3a1c7a13762b48d3f9d600e2a36ce9bb3b48f74c49adb3be598daf3bc8b055b676909e2e999d0fa2c190fcea38ad52e7ba00801d99b24b6832851bb26e0d16c5f3627d7c55a183da1f7bb3d468dcd4680c1ff2c4ae76b4cf630c12851fe841a74751ba082e8d8e7cdcc6c1867b80e6a94d4f3f9a95a2f9e0c3a4d6ef15f612350e8def3c490fad0cc4c64315773ac65dbb8e02ccc369bf9cbaf7c4182ebdcdf1b219aebd19be25ddfb0b4ba842fa9d3742555eb1dae1f31aaf797f6b559381272ee96a3484c1aa45625cdf2e7cf713fbe1865b18bdf75db2be1e14a220ef235d8693e5917c59bfb47e1cd2c340bb154f280e941c80f3832ab27aaef392b28357f57a1f1e06eaa826615c62f2b2bfc1515976d93704907b25bfad5f57c5d5120a2bba524d0035c745303dd1a43ad0d77462fcc0e9e17a800115d66d85094b09c067165915a025884d9962314a373da3ccbcf6b4a8d1ae7a7f945550061660d01dc1c025d3b939527a8af471e7134ce23c78a514a75c0f8ab16da6539d0d3a6529757de201c210b88c78666e78c575dc38edc99854366047b88645b51fb392b611ffba68d877098a9be7b4fac51e4391588b8edd9525d41005eaee7c577452cc8418a917051ba914fba803a4598f48de77dacdf7bc88d0c2ddaf842e77cd06c86340af9cfcaa7a2c8a40c6ef77744cbf4c802d4b89be41c8528d0f068711ccae752edfd22f59feff9179e9a988421af92213daa8cafa433bf4d87f51a52899d8d53114c5a4575623c8dc1b2edf79402aa1b0e5f4eb008f5ecffac1240129f1c8d5919300953855892cc8817ee89bd5a6016b9f4a830c69705980ec5ca3eabbdadde837092bd4198174559438f372ff1c0c66b90d6e816df8ab08392f3997680358cd16d4ae456cb14b416a908c4a5f221f29f59b7bb30d78ea129318dc85dc3bd09b6b45edf5ba3a673339191dfc87fac230f17e174f2bd9eea7fa3919ad60ebd8aa45970c23b450ecccac75f7d75afb19d45844ada7148ad8a07ff2ba4fa17dec04c90a41cb35dc86a4f29aa5b2946384f1427b5f656917e68104df1d35413e71652eea6448e41fc35dd8b74981af04f0ca8c91ac104c19af0af854fe1cc342270b7d0f2c8ca5899d50b8aecd9c3b94b95c8d2d829bb408e2e6f1bd4ece9d9db03496767144bf44ddeccc8465bd3f41f1e326b08088bc7f3ba77774119a1e2d9b7c8abe506db58fd1b6e2df0e63ab0d3354c26f0ebb4f3f4121b5ebfdc8850a48c7b8060da448b229e8dade6a096fdd65558dffb628c56ec722afef99d754208a36820b3ba03b5a124d44de4f1929a8f8c65013169b7039cebc83402f7ecca5bc8356c53851a1a663e218e14d66909c637ebfedf41bad65be921f4982323d837097b65906be5fa1023e0ef7b8302cda6bb69c1d41a113ed63cb59124d3868a5623e5a1af269f004fe9b7bcafd61c69ac9ff43c4103958e909b2d9302b9b4d331d9ae292ac562548c1b3af51e447fa3b1cf5033a97fd4e8338227f307cd4659ed468f889d7fdc83e48a9d568329a8de91dde801f34b30c11d1ecf25395326bb46fd1b655097f884ef92550ffb62c944040762455b994a8a96851088707a83b813e481a66c664df171c5d5095653df326bb2dbba3079d0217acea0cdb075cd2446ff95523380bb1f23648a1978a6f7e558b2a800518a41195dafea9e7c80bf4079130d07ce7301de48f62f577b22f9ad80b7590c446a5494caf9d115279b669e96a7a536d3261ccf9a72922ab93e1545cad6633320c13374ab39657eb7c956cfd76d7fb8a13fbdb7a219de5770ed5332bd654bd716a1e42deacf8d494785e4d9f450f974fe8c48a45b5b628d1088696670875de9039c1e1fde840a669a186c4e73fe6ff4405cddad4272abc25e21038ea9017e358ef4114afbf4d88f29e73d8ff4f4cc9e46819d2d06faaa33bd545365c7efb62636655993858f27a4f1c7a6fbc4cbe8551e15e1d46fa2100d624423cf5ddcb759d027b6cc1fd0d1a9e6402dba35b51a42de7c6e2e004796e7298469dc32895aad6acf58bed9aadbdb232a89c1ad215e9d073cd34e34cbddeb84b7418285b53a0de37366f5f06454ef2403839e39fc37c9e698f577235897c7c5ce993cf3ef8790995f8cf931b5618bc83e702df922f716fd2486d4997f874a604a53d65c3c7ea12268434aa37a5dd15f5da7aefaf2c1af5c20bc5a6c0c5da22fb08fbb01e04fc8b6b952a49d8d5ffaa03450a07ffbecfe44e9962e33cf7385e9acd60309ddc0341e619bb3ea0813d0a5d4bb59b28ea32d6c1e046134a3b178654650ea2ff9211da1ec102dc8248dacfd7227954f7618d0eba8b9e5beb07445e9616b58bb150f91d4e2fe1556979517dab89e1115dd6554d9acbbab56ad2754c39f2ecf882db71d9e0f4d8b3ccf6cd04a404fb0c94dfebb35635438512ebad74dfc6e9dd90f66aa2651c769d355544e66087f6577076ba6743164e8bbc56dbb430335ef5115b67833c6ca6045c416584d82e2e03c9931bb21547eb05dcbceea32b023d8d0913358a14e4de484741e03db2f9accf959443d2424468c40d2c1c8f4590b3856540f1619b0b587444d21754d865f1652a72712fec388fd272fb81938c58a2b76d32f0dbf785e4167993e2b4f306cad7079967173cc294dcdb86f94bdf91778cefe65c9cf503bef20b1fd08fe4a10553b196e2f99fa906b892aa1ae3566d8981c9d5f1c7cf9b89879c9171e5e45bfef571b195feea29040980269e338de3737128412f458eae7a7902f2c514c012f13b454cc0d9f2b2c4"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}, {0x42c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x3e0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbf, 0x1, "9bf5e72d8a897b288ca17e91f2f39562c5f94a9493d482dd1a21e7608a9e7a0dee63ec2d446d31ae687047bf472991dad200bf512151a99c9b5fe1f0445fdca3824fd89e655df7fb315669e49ef5e20a9046ffe42af55388c3dd29c322e58dc053d326494cd6bf840a169fb605f67df59b4e2112c0579770dfeb77659c57f3b4ca32c430c7add92bcf8584e074ed720f93e99fc7a8b3a2f6b4cd9492b859c379757af3d2f76070b0e259975841ff50bf86bdf6cac51cba4ee77e99"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x7f, 0x1, "7ad4e900a99467f18e11fac3d61984036654898000ed414559bb47d359373bf9b6f8e8ef5e27a8d9aced748ff95056da437afa2fae3e34099103c0cfb699687bd62c37c0914566c75e7c894b93ff90c710e80b48ce9615ba596aa615f1e5f68751b2c21d6b45d82acd05b14c22c1db9d1fd66745da83a496067f36"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x59, 0x1, "2eb2916ecfca8d53c77075c87b3c8309f7ac01454b638b3daa843078ef727d4d73fea3554e218f2326edccb442ad5167db3e4164e26bf448326021868f3cc51f318cdac9fb3753e481b125ac851077b87922f8b344"}, @NFTA_DATA_VALUE={0x99, 0x1, "25ba69ecb0141fa7fe2eaa2539f244af7fad20e408976892ca03b87335dbd2526dc24557e8406e389f60ba00186a8c95bf25bc409763915471ef9ad2e2331b59d097bb83f2709830fe73b6882287c522bf4077fed4b45cdb5a49b2077236b0ace1d49196482ddcc11712c373cce9f47cf61ba7460cbfb05938958186401b63bc27a0927c39df4da7e66d65cb4b97a440b823a09769"}, @NFTA_DATA_VALUE={0xc2, 0x1, "b8ede0c0dca4657bd7861fa73cbb71f6bfa599370be7892fd540a64f033b0a6b296e440bcf526bfd8c5ca85c09f9407db9f421497a13827fb97d319df4f6de11ffb9e648d25a75958178b1271401e9ed8194fe37579f7b2b8ae732f2e4723adb22ca491e0819614f423ce941d0d1df144300e5806c08344d528c77bdd249f5e378b9ccab9d72f8239ad8db8fc8037be5120a8e1dd2a32d49024eb3058af3ed4738991edd9b1d05f95766b24214b59a458f2e6398813992cbab1b3f58eaa7"}, @NFTA_DATA_VALUE={0x98, 0x1, "cf870b7993c4f902f78095287d34dd66f8145c4f668048d6702808a0d56e8fbf0d01f982fcd08cbf9e9a7eee3dce14759bf820578a65283e744fc0195240db90f49692661b919919394e65f2c278bd975a451f3ca70e47b0eca282d07249f12c369cae9918e08975e518f563d5d08435f1c5d9bdaf4e7913a1e2230d836b40440a56b0a15521c20c20988de49135f610a05fce10"}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}, @NFT_MSG_NEWCHAIN={0xa4, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_USERDATA={0x48, 0xc, "2a2c8bcdfa38085e59062fd4bb5ab438a7ee8176d0e309b93ffa257f32bd39195f62e1308d3551d170ea6d4532b4a449fbfe583ce805493bda06fe50350e903bcfed7473"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}}, @NFT_MSG_NEWSET={0x97c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", "", "", "", ""]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_USERDATA={0x74, 0xd, 0x1, 0x0, "99ee5e7237ff297bda342ecc627f12f1336b3eede679f2d575a1c23d9e2b1edd98ef042d7cc24f1f8c6ada9b27bf0009624c0c75d8535eeb7070b99b125a7cd66db6162f1c1801f189f50cf47d0d304cfdca5d70fa33b70ba142c85dbaf48f48e04a13ec76d8d301045d02ebad787464"}, @NFTA_SET_EXPRESSIONS={0x8d0, 0x12, 0x0, 0x1, [{0x894, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x884, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x360, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd7, 0x1, "c57f35096ca7d8fe5fbf8953e800bb53629bd16ed6855caea15434d1e5f408ab7ea1415f227ed57d3d36ceab5b31d09f3b642c1b4a6f1cd43fc532972f7d2c6ad84bb866cf397deae2bc1fcd116fba289a2f35aa05178e9412d9a5d9552cce7319be8f095118d44282b4de567927792c0c59e08dde1deb09fc2ac79ceeb6f4cff437bba9e7d0eb103131ba1639d508d41c5a9fb74156da1d3055f1d983189fd5c4a135fe86d9c1e6fb860a7989ce6e2560607a826277c31c0d24745e87733dd191354734bfd6b4cfcaaaa1869976b041bea49b"}, @NFTA_DATA_VALUE={0x28, 0x1, "ba970f902e9cd0046804095a13d8562cb9df7aada0fdb80e8f7f9c1a3ab2f46d91de797c"}, @NFTA_DATA_VALUE={0xf2, 0x1, "1ca6b67101dee62a7799cf09e11d612b2ec6a84a587a1ffa70aa02535ff8b1311682532c4c31cc81c09edf2d1109d8a87133ddd88ab6e4244f212c14da597a5e529b7d2d55ee9f2713c7bdb27d3b483626ab02ed2234ddba770af9750463753633fb3a261fd0e2c7194cd82e3bd712e8f9827fee8ac7579fe61e788d6fc968974eb03061e0afd4bbaa4a6a507073e56bfc0579284107c1cedb10481df72e366b21b36f4d2228f071cf42046fe5a7379708b38cb4667da1138e70e6687f14c108fbbfd15b0d5b342d115df392a407052b524612589610cc42946a600f9fa031db9b6e904eb0d2f11c17228162080f"}, @NFTA_DATA_VALUE={0x8c, 0x1, "7a196a570b988b38edbc3c0b41eb39c71dce09b99d7a8661ebb1baae417b9127e1bb7af984f36f3cc0f84d7e4430b8313f646f9d08a1f6ff1dbd69ac65ce8ef56f158f86754fe6c07825f54f814434e2358da1929dc38545307d3196f59520aa43f6ba419eaa939077fc7052a2cd84004de2bd31a378c64dd79f35e40cb957e9c77405b3ac0e5584"}, @NFTA_DATA_VALUE={0x7b, 0x1, "57fd2cc09503fa18ef18c9d4f684e2becd04a0a6e26bea2776d429bc2c4b3a3683630bfe268edf4bcb70b72764e17038420460fbcdc9c7fc117888a43741e92087cf371b5bf88db5ea1275d9f44ee618aadb573723d11cc851c287dbc2ae1222312389c8cbe27b6972352cf940e81df148ae7e06c4ca9f"}, @NFTA_DATA_VALUE={0x48, 0x1, "f1d657bd16840023e3e0da07b1984d36be6eb8af56d44143674110b757f321f9ee6e182f61f18c5d0093faa3b1fb64939294b7ac5b55f9fc7f2e373dc70486c1720678a6"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_RANGE_FROM_DATA={0x1a0, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xaf, 0x1, "0722892a2031db6db474aed8289f184a17dd7b6cdd2ddba5cb264589d14b6660e6a41b93f5c6528c3b678d85858aa5e74fe1b411e4e525272cc9714332482060eb23f340cef633a8d9f31072f253f73c23a598e9b89e99d8c0cfd42d5d97dcab5f61d542c3e7169f2a4d509b8d30c3690e11968eba421706435adcde7043ff167a8b8b2bf2cd1b8619c2366c46bfb48b4b722a4a96a7f3c3866a646364619c8d3e6bd66e77940da49ea7ff"}, @NFTA_DATA_VALUE={0xf, 0x1, "24942614b254c74387c559"}, @NFTA_DATA_VALUE={0xc0, 0x1, "b2096f55c434a35c5ff94c4b348070c672becef16bf30a43512c3f2e0124065d2e461613a1b09946d6f6d5406e370120fd8c8000a2bf4e3a5b0a13e67da38314f75980089695fe4ddd44b4acc9ced3e8de0323a4254aaa746cfb576ccfd17c5641ea0ae5ced1a5e9e3ae353619f45555b9aa1a6b16394cb38d83d406cfdaca846e56a381a8ab6c5d46a2da28de410a2e19ad816ca1c63851ef81c494207c3d7087551a5b166026986e09116a51349526d6dbf56ff56c24d72a690d97"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x240, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x94, 0x1, "1e1c274c369f2a6c2b31423fef1ea1683fdab860baa83c4a281b6bf4d5da8b1d16f62a3721a85e6e66a4fa8e3da1495add29363c91155d1f49d28463f211b6436307c0ef1ae7ac972b4e8520217061daaa70e78891c9819f2df958563ac1c1194eedf26ed63322c5f82fc5743b04b79fc9fca5d9008deb247c2dd2503e6a381d0c99a96fa5213cafbfd8777eaeb34e81"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x68, 0x1, "93583adf5cda553be62a1720dddf3859b8dd6482f501e1866b223f5477ca37d8b0bacba148fb30d4b15cb0f4b27ff6fd1b4cb711b7dc87d08f50611b83b2edf00e5aff64ca85ce856bb470b6b0bd19dc873f29ef734fb38d076bef602180f94067e12a8b"}, @NFTA_DATA_VALUE={0xc6, 0x1, "d96663937b3dc8d1fa3235a7ac9ab697d1fda853c5b3a697e6a2f61136d82d977ee15ceab9d9ce4525e4940ce1478d99a1f2b1ea5eb5a9f2db871e5ae10b071f30678c0ea34fe2ab35d4c4281d313640dec347c1b3e9ab61c59086f5bcaa4cebba2268a336bfa183432c6faaa90c4dd2192f8e102ada5b1866510be9b65270a045e58f73b1dfd603feaf560dcf9e3325ce1993e046dbfb74cce208481d58b33b175ebae6a7ce42977cde04a784caa7e18184f0ae5b8f9ba3e84a50c7a6cb6a195876"}, @NFTA_DATA_VALUE={0x5e, 0x1, "d437b78147e4613531b7c38d497b6c71ef38b96349e516322b89f9c5bd1b09bcdc6c0590be1f74ed7905d62cfb8a64dd598505d4754cfc117d59b15516201642d79980bc029197d6cf710e7efab610f464af8d3cc6b9c889fa24"}]}, @NFTA_RANGE_FROM_DATA={0x30, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_RANGE_FROM_DATA={0x100, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xed, 0x1, "1a0e6fdd1fdd803c51ad9cece6e26e931890ce47304edf248c874cd4df48dfe7764fd8e3ae3d4e2a1d946ef177418b88f17dbbc13700f7735f8a007eb727c5ee50b8c0da9e3235358dfb56360fc68a6e3a23b3156c437d9b337ecda42aa3a86f6ca86ddb2ddfd90d20675d61503b0f3b94262e44970a400e23b81b59629f944b6e7a899064c746e3a257c4394048c824435ddf295174439b39475bcca54a8c0d56e40e86b367c95f4f86e75ae06f3c66f423e82ec6dae2e41f95b190b4ee48ca82f0057b1602c7051c8c150c560a2aa47ed7ec657d3ae578f94a650dd92dc64600bdef71624f730f92"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}}}]}]}, @NFT_MSG_NEWSETELEM={0x1950, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1910, 0x3, 0x0, 0x1, [{0x1f0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x1d8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdd, 0x1, "f1fcbcd7fe7cd3473746462b190a1dafd1f080f5ca07d70e1a9b09f0643188ba8d886eadde4fc0648bd89428ebeb741ded7b6026de2a05ad6ce8f122a0e1cb257387cb11fe04409e21574f13b0172db3c4fac7b2d4604475c021af199ca0dd95f2e91fff8d0f3980e887f200bf7fd6fa238936b49e4395076e3a17517e8a088582c6a6cb1c2cb879d53fa9f8156660d7dc58092167550da6e627b6e05a36fa6341bb9aa2b2a1e90605fd1c39923c44a267426888ed06dcb30897e589babbd05ccba9cd602684dd5af137950f9b0bd9896eb757605e28dcabaa"}, @NFTA_DATA_VALUE={0xf3, 0x1, "7fd13655cec6cc41079a76ad0d093c897ec4a5e12098a5ef8b88073c497358709ee2f18f9a3ca5268ac09614133257b20722d1e43226d6608285857163bf87fb95f15c79727285c90e0e120e687a65af3fe15377be659f2a5e96c10e2224422184e377ea9b49913f71f0e98425a06d85f6c91cf638ba6be06e7dfa65707a0d787deed4355bd902a5db80002fd2d1b7fa403486348e7917a09e482e6a955784b91643ebad7a127d6de67cb1d65198d956adcf0fd4fcb02bb36ce19e9ff97ffdc1404618befe455083d480c80bd5760bc7ae5189861d92b71dff08cc0338c6a7499aad91e6e65fd96b5aeeed0fdfd320"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x184, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPRESSIONS={0x74, 0xb, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x54, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_SET_ELEM_DATA={0xd8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x14, 0x1, "acb0863b0dcb935e8ac643f530e1a775"}, @NFTA_DATA_VALUE={0x8d, 0x1, "142ccc380587fbccc3b89ca26c23e345842af4e1da94063f8e69dba64b6f2f5e0cfad68fca7f535e5c8f5afec77a1e58d5ac658adfe840d10f7f2522728fe5a68c19a71bc748db5d0debd095428455b081786a20d00a27d6e52b7cb39833e9a366047be03f749543f7d886255accd76c02a570800ec8f0d04841cbb6d3298132145ab59a2be49f52e7"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x13f0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xac, 0xb, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}]}}}, {0x50, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_SET_ELEM_KEY={0x1178, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "1dc3a83a913a2ec4e79e310bff7c39fb07729f01d604f9ef2a1c00594e5f4dddda5fbb8e839e8a96e11a339f20e20c8351f0a09568d58f9ce8b5dc2df9e9423663d2cb5076ec544cee300133d6f8e1031c08695913f37656d0169bb164b0cce18e9118d03ab7ed326afeb9f7a27550a457db46d0ea423eb8fd21dbea9157e2973d2b2f4e4eda1f8868f1f8140bf5a81dc51ad1980d2570cc55a6c3dcd035ba070cd1f85d7872e0dd3da8f9e25d8a4810f0e9174589695c016f2c70aacc60e0893c678abd117c162dff028206a21b6e5d8a09d7d651aacc7b28ec732e3b899b8c9bbcff6be585292f057c3b2e1f610fccc058a18e2619ef66053cbe5915fca86f85ac41956c8830b1970cc43bde03164c981b8b2258e90fdb29717d194cd18cb82029e52fe67c90129646e44935ac6d38ae6fa140e33420030002ea3dc6f6c738000489d47e0c3c9317c9f550c23de01bbd882d9728e2eef9bc6f3ec923a74122ced2db93db4508d00b6a417f51b798515a2fec23e8422d40f2c7d170937a7073bbd001dbe0e8a4a6582ae66a5f1b1fc84d0d95782507f4eb9d7729963b33dbaf93f3c97680f061f6f914c59661c2a1b4bba524d39dda0b94e6d6bbe6685c05e1b2416f36c2c8c47ae6f84733fd5fd5c442973070e8e557540f5e4951304548cce6b4a83246ba4f627f8e33b8543e3cfbfc2f923f38e48855fd71fd6f20af86573d743ef95f8372f1fde09a4ac36cd40f2f0e229cd99997685fd97d2e5a2be1709d33606a5c7588350b637d250c6218a7fef49de145e9b5d5493d6b799549d0236d19b275ab1f447ce8c611a857cc9fcd2d2641b3f736cdb98dd2549a0b807bfede65c2bed156a7d598ed7a3e465da348956ed3b297d43433ed0cc490df9e9472b016bd70c273d80f5a2566f1529ffdc2635b6669b170858c5c3558e053a252829b185e0b647953e31b9faa008e1c36f7b8fc4cdc6af646320d94c62a462ea42f45d3765f8a8b0c76929fce5d5cb8005cbcf81259780181c29cc1e2d98bdff613f071e57f4b086dbf4508735546d9620de7b74cb657b787a409436a04ed0e4648ccf48d0bb219c2c6fdf6535af969c0764155bac763bc85e11e6d8a67aba4f61176bacb3418efc6966ae1e01f4ac8896c7a7409b21529f0b0227e91b9aea8eeb464fe6082676f19bb51846b8bdba516907c0fa8d88f9b854ab9a61f26a4ff3c24796ebbad3c28e764c5520e329e22cd131a6a881ba7e131d1471606c60fd315c4717a9dba2f27e6cb7ad256f93c4dd743e15257a0a5e277d91145622de81ad8fec7ec30e575ee049c5551861a1d34bd100ac8b086ed537310525968cea8cf3f04c9938f272273c6529c4f1417e1df7fff5e32f65ea1b8cbff3e631062d7cc2cbb2dbdd3f3421da8d9ed832b42f5aaa8442185ea0b8640f30a376e9eaf882288f500b12ecca6b9ae80b8cfd9cbc68ec201eef1c72be5beada89db9ddbbb6ff4a72b8b08b7c9027366bda66a088c6816938a9a62bb4197043d6f5b433116492956f2022a6506d648b703f5536e5f8eaa3ebe4f73e9967f0c5162c4ef48c3b61fd5305ba08075b018d822a53f1e392790f6c339c0b9446d390463e4280685e7f926a477ad4e49130173c34c43b1329287a13b80e5ce3a3e4fd3008e54ceb430d70455c93c703c0ea5e5f9f22edbafa87e7052408a0281b43a7916fa9eb919b98329c75cd8682dd95280bfdcd98af2b4b18d4729d4626fc57a6b45e60e0f3b676512f151ca3b8d279c72624a5556202d58f901794278563c7a9040e45637fe5482c435d7f904f84da230ea9e16f2dcbbf1940f24d8d99c2edebbc157ff920f96abe07d4645152b6f23540486b163974b75b066bca0a047e11ead32dbd402b68bc9459a98f2676bd862f88de690a7aeac79f7c276cd9fe07f40894b4a95924f43e3370df7102f0b229b7c20c7fa9eef5fbd83ea9bf816bc4e1e3acefb5bb9d87888b8526ffd024830d6afb281e62ca31e7ec0cdf512dea0d81e139bbc67ee9bc17dddf121991c453bda04eb574712791599dec54046c569e45341706be4892b937ac6174dfb6dd5003a76ce47ddc89b368ac4d06fee92e630e6770210494a8824010894f1057754ee3222187b45a1d408eb933816dbd489b4952d86b87d33d7ddad3567c47799d736763ff55946080b4a358370b0d067ea2f7eb766812b017fd0bc4e3d48275b00c893f880c2996dbff796a1c3acbc3f20b82f174a358ceee06a07288c43fbd4c2126ebd85659ff35d51000b6de949aacb6b09166f67c18939c73bda02d553980b7b675c1648e7520b3b63f2262a79ce8af60d2547bea3b5fed3f6e90ef343c1293fb4dbd12903e811ef1c0342c52b3ea94c6e460b05b30c75dc6570c2f85a19a4f99f2208ff1ac76d45f02c1d650b2f8b418d3cc9da900ac898fada2a75c0cc8582cc75f6bf7a1db0cc8a4dffd7f73fdb1e14ae5af64e63b0946d2f4c7dbe27a5e7b4b9b355c17bdd1fd54c898acf3fb5a4b132b07d3a09d2ab1d316c749707d33faa8f1fa5942cdc565e0f75e1d6f95e01af9d3a94126fb19e740ce04918fe313cb02e84401c1dc6315df36801ba97107b33e9ee9ec1c4d5251a97f39dd84956cd2a81619f9bbd0c495308a1cebc42113cb2afa1db9d9e57d02545d366ee31f87dabf3b4865aae452b5b4afedbbeffb6da3728a415dae6e8b71be1487b3fa53dae4a01ac09223af164846d95bf938ba247dce7b7a52bca63eb34a6ac452c87070c34ec2c9bbd51b8efd427e790984a98e582ea6c9e916a0b408d0e233d94065216bdbe04c4697f6a862cd566229c8d0a93bd8b71426942963974ecbdecea3f70b1cdd7204122f1722f652b145f4c6f0fc3fb50662b346d4d5aedc66e1297047b8fa9ac8a078fb32f7c89e271a33a00ec26712aeb043ecfb0571c654d715fbbf988787dd5186cada63c63446ccedbff3f27a3b24ecd8a9441d739f2f47d790f85429d4c55243095ddb0c842aecf62620debeaa139eec3638ab97ebadd29689378877cb808f7d3a8d88d6395f6b3cec85167250274df87da7ef16988932626bfb85ad2b7eb3d739aee8f58ef8e04aa505d5cc5844728e812a5089d10a1919465ae00f5524d47a8891b73f6929ff5eff7e21022a453fe24e718e4b9d70d3b3893c5f031a92343e09c957f42a338ad0c1efc5f4c057ca88a5843516f3bd8b9e3b5bcbf7f8eb4853a8b31b24cc7b1d92b837beef7c8ece34d98cdd79028137e68f1689ee5f44f80f2a1b34d870b3b79321255f8cc63771a02485c1a46b458426fbf83b8ac77ea6521ef8c4a951c4d34b12aca1e26d374237c1d42036bafc22af671e6e3d16718104957a42713c37db3bd2ea446755db98f3e1340eae224b745c73591a87b0a56de0bafb9d8b8f4acb412b6952824b74c1b5795474c8a43ef1fb1f0051195b95280fd4e0bcce4d19a4dcd372aec34b146bd0248cff9175c7d665e011d77de2723e2d5f45bf8013eef6de3a59250b0973deae5f06940b9d9f98e27d8759e03d72abe9c6a02743fb8b2bc2aef7dfd28e5bf0e3ad953a1509b1e685239cd4660e80e9ee38bccd7bf04eb7c3585fd99972733e04f9e666658f90cee50329fb0cb24649a34f678920f77c8abc901d6eb795292e0fafde2304baa38cf8f943903a6d137d0896cce78ffbcd6e4df7a5331442dca53b7c828f1274309277421dc87e557149724ee4ca72e8fff0e99f645d23447925c8d86a291ed81d604b828be4de2ff5539425d8fcadd63d7e146b36c12d3561e959dbbf6d64df665fc601c4f1d9609cfa8c8fdc1aa80f712cb1ee117b8d3e486dd254f1535bfe94f034d4289c83889e58752d009884bc62bdfc85bfd08291805f74660adcab2ee5858015c3d1f08b98f1183be8dccd6b08dc846894faaa088a6a2891b5b7c0cc2eed97be34a40b5141332992958ac90de9fc8c8af9682cab810f6a1888459f860968fd1e396e2fbe46edc796b125cf8f8eeece64252b2552f1299715deb32791cb2f14f8ef218849c96738d807d34d3745734de7be375191379b238dcce3da4c866baaa8c39c2cff8a2f4dee97a75c8d91c34aaf000d440c23a622fe2b5ecdf41fe680ff2952bd683d884fe30c4399d18fb18270e117ab16a0967819e77d68f35b647a0ca7c088abdcb308519f68bf28b3b27272a2a65e11a2d3bc60af12d4a4322194cf5d4f92febf4c034c96639093d9d0c31f198ff15e219139a93caebbcf30bf3156a0478128fe60197003966cf6f927b0ea68451c654c4e6a6cb0b0810b5c03fb85b9ae553f309a3f094d8404d9700ac10a6cf8ef1fbc1258b591270090e44edd9e62764b9ee9af6fb0d809598d7de7a257434578a39cf54dcd2abcc26f27716c55bd056998fddbef383d22afb2bd8ede0bd7c2b0e33aad15cd131cdcfe1eca97eabb2546d27b26d3df5b48d329044ac409825c0e9f3e8e293454fd37ec5c76c773aa0dbf8b56c7f68a884c56497fdb769e6de0e7e6974c382d0611fe3c5e88aac5011c85be94a92d450076783561a85b1f3fbb026551172f8ae1b2ddf0ba2af58f3a21fcd05a1521a02b22fbd4951cc0f82c81940b2387256e76b43cadf425524e04f8bee6b2b5b711a6ea85f84e442a6718cd7de211573cd9de6775d355bf2975db42a6b860d8dd478758c0f3380df20d0146ec9dac02ee315ca98299c9a5dfe9a6f0808d783140584e16e3624ee0d39c6fe508cbfd5e157a8c84373f13fdfd652934d01094b53035aaf828cb4bacd9014f670df403266ca5effdeedd9f544c12b0e213f117633fab58dc2ac5fbaa559052e8d0c8e1e63e5b24facfdd910168fe78b21b558d0524da5a248cc6db2adbec9fd060b0b4edddd43eafdd227994d366bff62ab14ecf253f00544943b0ac6f69fd52adbc5ab737f928dac3ffa10c511ebb6cbb8d949f06c6323d406eb404d9f69d7f2e20767d134dfef8171aba151bea4aeaead194726a32b10f86cc5f76963466b00e5f7c2bce9e8e0edde05cc850d128a179599519a9dc429e8f2985c832cc1c3a53488b1c398d5a5cfdf314ccdc505d9344aceab04f8494ec3d5c698dc5f878984ea21fb1db7c0609e51321803773e3f00e072c17cf1910f97a3166c4e865ab459a1d5eff21e0e62c0484cf473192afa5a63e8e422fba29f4d65fe8615fb90ba002d0046f19d1d2586d0e14d849b8079d86ba77509616657e884cc53359ac43f155b74adad34f971d94b337477f99f208695d8ca4261af6ed619ab0579fab286fda645e649d385cdd53670e48962b8e442428e22d969241fc04c7496616d37bc90bf91cbed35bc369299ce57b7884035c0b84e76c079c9a554296f630b489ca32d0811ecca07143af4ce4540a3c9750eb6fa209a970ce1407433f88b7e7908d2b06ca71c5a48a8e1f8e4a537a586ded180aad5eadbc64b05530930fd5c409d2f19e68330f1ec639d09a3181bbdccaf1377f0158d6c381668b0134574ce74f4161d2205f69f0ad8186ccd0f19039c3a851fefaf63c46a939a71f3c91c15532d89c4353417c748c63ac8da005c74a06a98b2e7a0244c768e7b6babcefe775b89e106984188dca239b9dbd9b4ac39982e11402e96c7b0f7d47bfe8e05f1049cf0000fc6c84f8491617e5cb01effd6a508e3c61f1c89e0ff51586a24e1264d9e9145f0c060f2189bb8c11da95c9b2648e85961f98ff40982e7f503004c6c0671755640dbf71c541464c7777bb2aca96737ff5e41f51430ca1c68cf2fd91c3733aeafea8c95a40a399a9d707e54b"}, @NFTA_DATA_VALUE={0xbc, 0x1, "9b69778cd6c8cf8d424f2d70f5ed1c38802a72fabb5dc770eaa92abf0ff3bcc233da9e41cfd5bf9cfaa817f0437a0096fc2c26745290446c5dfda81d0ff0baba68390845324b11af5198245c55fefb9a89162fcaa005379a34086e12b2c61d482d0391010879a108f72dcac0c39ef82e4d2cddc1cd71cdc9dc3c265b59a9ac17969be7a6da1c15ce245f322944c77b3161e88e5bf6aa4b43b72791a3f975a73e8aafb3b2720aee44b3624eb675f0900c6660e26fe24d8395"}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_KEY={0x1b8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x95, 0x1, "adaef71dfeaf02247d1b04fb454b22e193e391ef216807661f1003618b1636ac80ac5ff670436903b0f032e88ca04115f16a52a070f6323325df07d85fb812e52d785a0c875b8831b0d1338025e38f240c1cd611711f35b4781f993ed7b3fde049369f6160b9cfcdec8836f3f392eea3bab55ba3df1daa303ce57e66a689d46a318df141661f74d4c9db6ba16698601a7f"}, @NFTA_DATA_VALUE={0x7e, 0x1, "a1a34d0fb2921a26ad9841ef6cc5d1feca4633665774e4067e45bfe039103b7ee411eef4cc30508b5767cf3dcc38fd90448b2f8a99dde6fe11082bb9b7278fbd143b71f359306d37ec6bf5bb2361e47dabfaf5bd680987ba19b9fce5e95b1b0fdb8da76dbaeee3ad494079fb2433eb1bf51b8f8b0298a7d9f943"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @quota={{0xa}, @void}}]}, {0x1a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x17c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x7c, 0x1, "c69e909fcd3ad188531d30e04798db2b05704f9e67136050e37cf95532c0c3a3229bc4efbae6e303f16e5ddca013e5121a11bb9414076f765b5bfd7629875debe1c57297e2075dbc70d3ef1f592420684305cd8ab243c7a9ed6c1153b691274b934f2f25830ca12197af39357f8746aee15dcece1bcfa8d1"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x54, 0x1, "d98fe9d91cf0e18ac958bd83aab721d3ec6eac6afad9fc49fa613264bc580dd9846ea8dd2abf9b0f2c9a12253d9069b4b521ad2782df76dddd96c9ab664442860051ea89972f19aba47fd3d325ec28ff"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5acc}, 0x1, 0x0, 0x0, 0x4000040}, 0xc000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6000000010000100"/20, @ANYRES32=r3, @ANYBLOB="200000002ea4aabe400012800e0001006970366772657461700000002c00028014000606008000000000e5ffffff00000000001914000700ff05"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x10040080) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fedbdf251e00000008000400ffffffff08000100", @ANYBLOB="1c"], 0x34}, 0x1, 0x0, 0x0, 0xcacbc4add21c9368}, 0x4040000) 5.059564634s ago: executing program 0 (id=3315): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x18, 0x40, 0x107, 0x70bd0b, 0x0, {0xff, 0x7c}, [@nested={0x4, 0x145}]}, 0x5d}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffff00000000000088a8450081001800000d02000000030300004856bed38f57b853730f156eaef60a413bb340a7df07091268ee1e2241226911e5b7419831dbaa49ad8037e6cd9d3bc3b1485927ccbaeada0d6ff0c0d91edb88e1909f02"], 0x0) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000103000000000000000000000a0000010600024080f30000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000c89a) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@remote, @multicast, @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x8100, 0x2, 0x1, 0x2}}, {@llc={0x4, {@snap={0x0, 0xab, "fbc5", "7236fd", 0x15, "a05943d1f8278c67556876d96aa326b4deb4288e8cf638327b8c20fe1788c3b53589ac3cd46f6e826643405df81cac4c7741d01c016ca66f3e57ceca10b6cd7e5e2d25366590c0edfcc5561eb245891ff63057c24bc5aa0f3106bf7e101075eae63fc6eebbe36f377da9522c5340c8330ad04cd7f3ea000eef88e6d051b2d514937830d8741b4456f480c88da123f00c3e48191d3c8b1464c25633732228f8"}}}}}, &(0x7f00000003c0)={0x0, 0x3, [0x1f5, 0x440, 0xcf8, 0xac7]}) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}, 0x4}}, 0x10) bind$tipc(r5, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r4, 0x0, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='c 75:', @ANYRESHEX], 0x10) 4.865777567s ago: executing program 0 (id=3317): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000400000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.703727996s ago: executing program 0 (id=3319): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001e00000000000000000000007a02500003ffffff95"], &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001e00000000000000000000007a02500003ffffff95"], &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) connect$unix(r1, 0x0, 0x0) (async) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x400000000000331, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x400000000000331, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffdde, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000001080002"], 0xa4}}, 0x0) 3.920589963s ago: executing program 2 (id=3325): connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(0x0) vmsplice(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="a8087a49", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fedbdf250800000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x14}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f00000001c0), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000480)={0x1d, r6}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="00001001", @ANYRES8=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="08000500040000000500530000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000280)={r9, r9, 0x9, 0x0, 0x0, 0x9, 0x8b, 0x6, 0x5508, 0xa35, 0x1, 0x1, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}) 3.486765593s ago: executing program 0 (id=3326): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket$rds(0x15, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) sendfile(r3, r4, &(0x7f0000000000), 0xd029) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x23, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x52fcaf8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@generic={0xa, 0x3, 0x7, 0x3, 0x2}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r6 = socket$rds(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x800) setsockopt$TIPC_SRC_DROPPABLE(r8, 0x10f, 0x80, 0x0, 0x0) r9 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r5) sendmsg$GTP_CMD_ECHOREQ(r8, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r9, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_FAMILY={0x5, 0xd, 0x6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_FAMILY={0x5, 0xd, 0x27}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_FAMILY={0x5, 0xd, 0x23}, @GTPA_MS_ADDR6={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000050}, 0x1) sendmsg$rds(r6, &(0x7f0000000f40)={&(0x7f0000000080)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socketpair(0x1a, 0x2, 0xffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @broadcast}], 0x10) r11 = accept$inet(r10, 0x0, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r11, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000040900010073797a300000000034000000030a01010000000000000000050000000900010073797a300000000009000300730900000000000000000a40000000042c000000050a05000000000000000000050000060c00024000000000000000010900010073797a300000000014000000110001"], 0xa8}}, 0x0) 3.339520452s ago: executing program 2 (id=3328): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) close(r1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, &(0x7f0000000100)) socket$inet_icmp(0x2, 0x2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r3, 0x0, 0xffffffff004) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000160001002dbd7000fedbdf250a1040fd", @ANYRES32, @ANYBLOB="140002"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r3) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) unshare(0x20000400) unshare(0x20020000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'lo\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x108003, 0x10, 0x4, 0x9, 0xa4, 0xbfb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x2, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0x10, 0x6, 0x100, 0x6, 0x1bf6, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x0, 0x0, 0x11000, 0x8, 0x3ff, 0x79b, 0x91, 0x1, 0x7f, 0x7, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0xa9, 0x81, 0x2, 0x180400, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x4, 0x2, 0x300000, 0x9, 0x0, 0x7, 0x804009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0xfffffffa, 0x7, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x80000000, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x9, 0x10100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x41, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x10000008, 0x8, 0x5, 0x1fc, 0x1ff, 0x3]}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)=@getchain={0x2c, 0x66, 0x100, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffe0}, {0xfff3, 0x6}, {0xc, 0x1}}, [{0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8001) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r6) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r7, 0x10c, 0xf, &(0x7f0000000200), &(0x7f0000000480)=0x4) syz_emit_ethernet(0x87a2f, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 2.94017663s ago: executing program 4 (id=3329): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x4, 0xba) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x11, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0xd8, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @private=0xa010100, {[@generic={0xc63d3f4df91ef3bd, 0xf, "235c1a31eca6cc935d0fe664ed"}, @noop, @lsrr={0x83, 0x3, 0x36}, @ssrr={0x89, 0x1b, 0x38, [@loopback, @multicast1, @multicast1, @multicast1, @loopback, @private=0xa010101]}]}}, {{0x0, 0x0, r3, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) (async) write$tun(r4, &(0x7f0000000040)=ANY=[], 0xfdef) (async) syz_emit_ethernet(0x108e, &(0x7f0000000440)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @local, @val={@void, {0x8100, 0x1, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x2c, 0x107c, 0x68, 0x0, 0x9, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@timestamp_prespec={0x44, 0x1c, 0xc8, 0x3, 0x4, [{@private=0xa010100, 0x400}, {@remote, 0x6}, {@multicast1, 0x1}]}]}}, {{0x4e22, 0x4e21, r2, r3, 0x0, 0x0, 0x13, 0x2, 0x3ff, 0x0, 0x7fff, {[@mptcp=@mp_fclose={0x1e, 0xc, 0x9, 0x0, 0x1}, @md5sig={0x13, 0x12, "37ee8ddf5caf3a30d5b1565a84debb7d"}, @fastopen={0x22, 0xb, "e849cc7497951aabb1"}, @sack={0x5, 0xe, [0x40, 0x10, 0x1]}]}}, {"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"}}}}}}, &(0x7f00000000c0)={0x1, 0x2, [0x4b5, 0xab4, 0xf56, 0x237]}) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x39, 0x0, @void}, 0x10) (async) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @local}, 0xc) 2.51905088s ago: executing program 2 (id=3330): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000001f00850000001400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.271833883s ago: executing program 0 (id=3332): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/112, 0x70}], 0x1}, 0x2ca998c3}], 0x1, 0x40000021, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000002100)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 2.227861409s ago: executing program 1 (id=3333): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000680)=@newsa={0x148, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}, @offload={0xc, 0x1c, {r2, 0x3}}]}, 0x148}, 0x1, 0x0, 0x0, 0x880}, 0x4042050) 2.226838142s ago: executing program 2 (id=3334): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x25) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, r3, 0x25, 0x0, @val=@netfilter={0x3, 0x1, 0x0, 0x1}}, 0x20) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x24, 0x2, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}}, @echo_reply={0x0, 0x0, 0x0, 0x68, 0xbb95}}}}}, 0x0) 2.154235153s ago: executing program 2 (id=3335): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r0) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a80)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x24040000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xa}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000400001c0012800b00010062726964676500000c00028008000800810040100a000100aaaaeaaaaa000000f26209cd82ff5405ba8aa95856e830f4618a18d3383bd3d28d5e13f6d3904e784a39027bf684a0454439f15ea9ef2a260730ad52aa0e228c07437a807c947cb5f35951db95ddff3433c4c61721d1a804dfd996a89f213746a5ec4a72f4853c1a8ee332e7ab86c013bfdf35b946e36e29a4bd3e9cac96dd039f5bc4a5966832511e7b98e31d2ab2ae36f78bd8b16749462bc38c2b43ec972d6d339286121b74cb"], 0x48}}, 0x0) 2.149879663s ago: executing program 1 (id=3336): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000032cdb30b18002507b9409b14ffff000b0202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648dec9d5fe30c89b6ec0cff3959547f509058", 0x4d, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r5, 0x8b32, &(0x7f0000000040)) r6 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r0) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="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", @ANYBLOB="00042cbd7000fddbdf2500e2000008000700ef100040"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x200448c0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x76, &(0x7f0000000300), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xcf, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="10010000", @ANYRES16=r3, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="f400028061000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004"], 0x110}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r1) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4008094}, 0xc010) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socket(0x1d, 0x80000, 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r9, &(0x7f0000000200), 0x806000) 1.770579392s ago: executing program 2 (id=3337): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x68040000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002007634e2070000000000000000000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="1feb010018230000000000001800bb471207930d2e4a0000000000000000000200000000010000000000001202000500002e003a3010abbe74b974ecc8bd61908d5d55ea5e8d0edac50520f47ac4678f86"], 0x0, 0x33, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x4, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000e106ad174f0000611885000000000095c7ef2d0f1e8ba91f2de9943b11dce9852aebf3aee5abf9e1ef7e50dbfcf18569bef64b7f849165527becda0a000000000000004cf45d6f61642b17512e93c04c0ffb6029c45f987c1f6c3e713eba847a638e3ae18116446b2b1f7c840067b11bd3fc20f93512d7e11252c584855e4b1491b085a17fefcbde9206fb7a2474ded4b9b1d0f9dabd26b98ebd0c807598a0b317d2e8d7cc84870e805a7b48960264a29cf88544e130b77ca96d06a1f8547faa4968e131718cb5584132fd64594ede76da5e07bfe8527d2f843ce0d512e01927cd182de456f673"], &(0x7f0000000140)='GPL\x00', 0x11, 0x0, 0x0, 0x40f00, 0x6e4bfc21d0e82dbb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], &(0x7f0000000f40)=""/4089, 0x3f, 0xff9, 0x8}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xb, 0xe, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af, r2}, 0x38) r3 = socket$can_bcm(0x1d, 0x2, 0x2) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0xfffffffb}, 0x50) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r6, 0xc0385868, &(0x7f0000000580)={r0, &(0x7f00000003c0)='{\'!\x00', 0x7050c0, &(0x7f0000000400)={@_ha_fsid={[0xff, 0x7]}, {0x7fff, 0x9, 0x4, 0x8}}, 0x3ff, &(0x7f0000000440), &(0x7f0000000540)=0x81}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x2b, 0x80801, 0x1) listen(r8, 0x9) recvmmsg(r8, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10020, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fddbdf251e00000008000300", @ANYRES32=r9, @ANYBLOB="63d45094f51abffd339023cf768347d38b63163c850e696209ddebc678c1b5482dfd3777a977c19a993b3ef6c4f8dd659e5b5f15c44143204d1e9617"], 0x1c}, 0x1, 0x0, 0x0, 0x4000891}, 0x20000084) sendmsg$can_bcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[@ANYBLOB="040000000200000000003b0200000000", @ANYRES64=r4, @ANYRES64=r5/1000+10000, @ANYRES8=r4, @ANYRES64=0x0, @ANYBLOB="020000000100000000000d7c1d6a00e0310100005f10ffc03aef1447b070836d9a36fa6d743aa6d78551720f4cd10e902128efc8549496f5473aa9f36752e408c141c3d69541fe263414a04180e209e4"], 0x80}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008804) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2, r2}, 0x38) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) 1.639147993s ago: executing program 4 (id=3338): setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x1d8) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 1.400471553s ago: executing program 4 (id=3339): sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x5f7d6a2b1cdc6eb0}, 0x4008804) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="80000000100001042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="99800300000000004c0012800b00010062726964676500003c00028005002d00010000000a0014000180c2000000000008001a00040000000c002100090000000000000008001a0003a0e0000000000000000000140003006e"], 0x80}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x5) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) unshare(0x80) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/time_for_children\x00') unshare(0x20000000) 1.299872405s ago: executing program 1 (id=3340): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x5, 0x1ff001, 0x8000, 0x7b, 0x1}, 0x50) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) (async) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) (async, rerun: 64) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (rerun: 64) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3, 0x0, r1}, 0x10) (async) bind$xdp(r1, &(0x7f0000000040)={0x2c, 0x9, r3, 0x2e, r1}, 0x10) (async, rerun: 64) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000080), 0x0}, 0x20) (rerun: 64) 1.295601104s ago: executing program 0 (id=3341): r0 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x48) syz_emit_ethernet(0x22, &(0x7f0000000700)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@can={0xc, {{0x0, 0x1, 0x0, 0x1}, 0x8, 0x6, 0x0, 0x0, "e94c909867fc2a8d"}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="d9efa141877e87d7325230bc28", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) syz_emit_ethernet(0xdf, &(0x7f00000003c0)={@random="e33110495bfd", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0xa9, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, [{0x4, 0x10, "9595f429ae08a565c9a41d413a70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce3"}]}}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0x32, &(0x7f0000000a00)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast1}, {0x4000, 0x17c1, 0x3, 0x0, @gue={{0x2, 0x1, 0x2, 0x5, 0x100}}}}}}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff5, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0xffe0}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r6, 0xc}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}, {&(0x7f0000000800)="258d6ac381562407cea4d3e5092130c7e922ab9a89bcd856d7f9459fdd10974c51c97e41b980bccc094742796e60ec164f9a91f87da52f71393b2c6d408bdbd8973f8aa5fcad81a8aadebd14adb648485a39ca8a3aac7c3e5537c7d992deaa05b9f2b4642ec73aea7a143bed8469bc2e04d59776e2931b7fe131a2c3cbdc7442415511507cdeec64d381cbf50c08a888c0aedd71e26ba6679daaa11c6ef2956e1212e26638b4587a53d43768a2b4af6af7d23f39537113e06f36c779cd07098435e405d0d140e0c533bd337bfbef60bdba19ca423a6b5056bd53c74a3fc8df316e6822ee9c6ca6dcee234184bfcfa77c63e92aa6", 0xf4}, {&(0x7f00000009c0)="b1435c7b947125b263d85ac30cb7ffc7855292ba72d726851d9fb18d574c4aa8f894cd3602a01f09ba677fa14acb586e07ab13b1a014c9160756617d178a5dbfa122490cc0851b6ca0d5f91e82648608568b1043da588a3c75fd27ebceb994e892e07da952d99bbbcdb5a33c63aa05d3abba5970a9aae7448e356ebfc0bd7944ea9aa53d274367cf71ca1a4f72530e9a11629da0ff33b4d667dff62d", 0x9c}, {&(0x7f0000000ac0)="2bd4c5812005a616b58a605767f6c99ac4038e8661a4ad1fef7ff53a605c0111af3f354bf44a1f38659151648684b12a85fc9859f6aa0eaeb459db0e24616333a4aa01dff64593257b06606b14fed386bd9123ed5a907e565a716479a7409252d80ab3631cea08c6f9b1337a17037dd32aac54e9127f49c321b183592fc9720d9da8eca7c4dc8177b1f9d83e8e68e81f38eead6e4405c11e92aabd8e634bdd88baab2b0c9c15c5047d8fc82c6cdeb8f2f4cf2196602b3e5f256b6a57f5f90a71090b", 0xc2}], 0x5}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x40, 0x1410, 0x20, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000040}, 0xc000) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) unshare(0x22020600) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={0x0, @rc={0x1f, @any, 0x8}, @isdn={0x22, 0x1, 0x5, 0x9}, @can={0x1d, r2}, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x5d, 0x6}) 864.99109ms ago: executing program 4 (id=3342): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000) unshare(0x6020400) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r1, 0x101, 0xc, &(0x7f0000000080)=0x10000, 0x4) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_tcp(0x2, 0x1, 0x0) splice(r4, 0x0, r3, &(0x7f0000000280)=0xfaa, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'syzkaller0\x00', @remote}) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x10) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @random="a082c3015da1"}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20100}, 0x44010) 716.055061ms ago: executing program 1 (id=3343): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x30000000}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x80) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xe4, r2, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0xc4, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xb4, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8001}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x20040019) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r1) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) splice(r3, &(0x7f00000003c0)=0xbc6, 0xffffffffffffffff, &(0x7f0000000400)=0x200, 0x5, 0xafca607922476d36) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r1) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, r4, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x4}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000045}, 0xc080) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0), 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xb4, 0x0, 0x9, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xfff}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x11) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001480)={0xffffffffffffffff, 0xe0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3f, &(0x7f0000001280)=[{}], 0x8, 0x10, &(0x7f00000012c0), &(0x7f0000001300), 0x8, 0xf2, 0x8, 0x8, &(0x7f0000001340)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001580)={'erspan0\x00', &(0x7f00000014c0)={'ip_vti0\x00', 0x0, 0x40, 0x8, 0x7, 0x200, {{0x26, 0x4, 0x3, 0x9, 0x98, 0x64, 0x0, 0x2, 0x4, 0x0, @loopback, @broadcast, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x1f, 0xa7, [@loopback, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @remote, @remote]}, @timestamp_addr={0x44, 0x14, 0x7b, 0x1, 0xd, [{@multicast1, 0x6}, {@empty, 0x8}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x44, 0x82, 0x1, 0x8, [{@loopback, 0xf}, {@private=0xa010102, 0x3f8}, {@local, 0xba}, {@rand_addr=0x64010101, 0xd}, {@loopback}, {@local, 0x200}, {@multicast1, 0x8}, {@loopback, 0x6}]}]}}}}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001780)=[{{&(0x7f0000000780)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000c40)=[{&(0x7f00000007c0)="ce0aaf391b06194222238922b87a30885684d13957f814fcda6b8338b7e5abca3bc431ee822cefa108107b6832afcd03354d17a90f4683dfef8bb01ec853917460b014a0e6755cad952e5dd0106e765f959e3d1b7c6cbc6b8047d4013671faafea84bc469f3caa2411af16c9d9ec08e911967b37f5b2dad976455d7a6cae74a96866e722a2e4f34d7f9f77ba730a0268604a61ef2549aad04d65c50d725828c77d7874ec1d0853", 0xa7}, {&(0x7f0000000880)="ba7836bb7688bdaa9d6bd657a6308439e81b07607f1493ba2a50647467a1b54fdcfa13576cf79d9caf35712f8711178a026911da76afe3b93d6cd00c5fe74079bd8005ac904b43c68f5d6a7e0366eddb21655e99a70c0c556383d7be39d0f608ebbf70c5e14011da5a57286d49728d5b09c5bcc9d9578cec88b654f2246cedf83d24", 0x82}, {&(0x7f0000000940)="0ab548ca80d5be6470eb888ad4f416b77d83c5a9beb3ed8d7ef44d26b28066d41bcbc361f03c4bff921631242d0c62b998266691a66df0f5acbe8b98765908946046b3624d28e88ceaaa4bad62c9496c43de3ff8483e06ce7060b23fbacd46924b01b92c5c8cffe0283133ca948c1d8bd8", 0x71}, {&(0x7f00000009c0)="b98e4dd51825c56db61ec357b0a000bcb3aa3b3a6b2988d10605f9132541920a0ac2cd90c08243c89e03b3f9f71835ebf4cf460e36", 0x35}, {&(0x7f0000000a00)="ca42a1fa6eefc686850f66d9f430eb44cbcb2ffbe19f36914313e027499d44172071e22fdd60150705273c14d9d99f65616b0ca9a43714c4019d4cbcab65f7ba854e07cbca233e81b11020d470ecda097630f3f50b83d1260da8960e89e46b5322ab5bea7ef88a261fd395c967db989834dc3431c85d78b619592fd9346588d7d0d1de0ea3257afd7c", 0x89}, {&(0x7f0000000ac0)="21b5a054dda83dea101cf8a0e89f81edd01742c34f5b05d2cf2578a1e57a188994fa25b4e012974ca291f6e8088ec1e6befc11d1080e5ebaf3fc155a12d2e8ac76568f04da03027d2177b05ab2254bb95660fac6a428197341345c465cf0555f4c1b3f52abf20ee225bcbcca00bd9ca60705dfbe354c775d625dff588dd9c2948ed67687fdd445095ab951b6acce", 0x8e}, {&(0x7f0000000b80)="5af6f8b724f4f6795a1422ae4c661b69cc57bd4ddbe76bed87fd81dd5dcd6d9812c1bb6cc1ea20", 0x27}, {&(0x7f0000000bc0)="65287604ee71fa41f1cedcbafe6867d374f3e19831ebfaee441b50a6a2d8c4c13df719077e4f03a2ec59ce3ba62d4588e7909dd6fbb642fcfdf6cd84413e1dc0fb8dd892ffcf3d51484796b31e207d7fd225e93fc81c7dbf6510a6819477fca4ae", 0x61}], 0x8, &(0x7f0000000cc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x28, 0x0, 0x7, {[@end, @generic={0x7, 0xe, "88741d85faa8f6ca14d0673a"}, @generic={0x7, 0x9, "c3516fe37a85b7"}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0x5}, @end, @end, @generic={0x44, 0xb, "adbc79b9f597aa6f44"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x90}}, {{&(0x7f0000000d80)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000dc0)="1c895ce48db9ebc5c1a00b131a601d7b99ee0a45faa3d15becc7ac177b7ba5977a16c7cde987d244f29e5ec347ef0dac80910843abed8defdcdb60be20bbe139714956346f843bed3d840b346fd728ee2fed588359bb8c62d63eba104b4c88", 0x5f}, {&(0x7f0000000e40)="0550d741511b941bc35d3cfe1906434c8e0fcdb2afd556a75e690276287852e2c298da943d64c6f7d6964e617e415efe31e246beafb5f7873595049b8c184823b2578cea4dd2461c771387fe4b08113e0fcb0c6c45", 0x55}, {&(0x7f0000000ec0)="b9d7dd279272481e540ecbcf50a563e3f4952f7d869f00b4d9fcecedf43063fc58644e27cdb69b28f2f54990eb0fbaa447cc257f8c9f32967d2587cd11392f4ca9b4b24102e3b84dbd93caec4a0a198a4da8ea35d3bf74779c2fcd3a304155c67b0e159781952bf3a03090b3fa3155b26cd430eebcdaf3c072b82249d3ee84444951d12915c9694a91c6e052f492ce9b10ad367d1e3f38c9d72ff703121163c481e0797832e13fe699263c8fe2e758cff6de0541c6", 0xb5}, {&(0x7f0000000f80)="0451b7f3ab1e7351699f44a7eba004c42aecdc3b4bc1971114205323b287dab80a389dc80638a6b8c6b3504dcae514d2f212", 0x32}, {&(0x7f0000000fc0)="aaa43ca3863ca67451d9861acc5f0a3a51753276464f2d2c9090f9ceada1082388600bac865b1e66b03344ab2da1cb9e8df6ab2a8a494d9d031fd2dac33bb50971f0c90dfee6e29fc95b4a1dcdb9386bb46422d05c993406a48f2a0e21030f422ebf29f59f7ec7116a1d6ee9b3af0ac6572ddddbbd8b64bb8a1c7a0dfb0148fdd8bd11d7b8ccb03b099e82bc434b872bdb2ac6d31991aaa8b1729d30b73462526bb726603eb123eb79", 0xa9}, {&(0x7f0000001080)="9752ee5aaed868278b8cf9dc3ac995ae65e9e2c9d4b16fd79c4197f4cbd0492b94ca0eebceae04e77159aad840f81effeed88a379dbcd114b08e51546b320c07d6d96a2a279cf7d034db355c24d131ec79bd", 0x52}], 0x6, &(0x7f00000015c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @dev={0xac, 0x14, 0x14, 0x17}}}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@generic={0x19, 0x6, "eb6b01f8"}, @rr={0x7, 0xb, 0xd0, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x43}]}, @timestamp_addr={0x44, 0x24, 0xd2, 0x1, 0x2, [{@loopback, 0x10001}, {@broadcast, 0x60000}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x10}, {@broadcast, 0x8001}]}, @generic={0x82, 0xb, "84469c82b760db137f"}, @timestamp_addr={0x44, 0x2c, 0x39, 0x1, 0x6, [{@broadcast, 0x6}, {@loopback, 0x7fff}, {@loopback, 0x115}, {@broadcast, 0x8}, {@remote, 0x6}]}, @lsrr={0x83, 0xf, 0x43, [@dev={0xac, 0x14, 0x14, 0x19}, @multicast2, @local]}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xeb09}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast1, @empty}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0xa9, 0x0, 0x0, [0x3]}, @timestamp_prespec={0x44, 0x1c, 0xa5, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@broadcast, 0x5}, {@broadcast, 0x4}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3ff}}], 0x1a0}}], 0x2, 0x80) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x20, r2, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x40810}, 0x4040000) close(r3) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000001c00)={{r3, &(0x7f0000001900)='\x00', 0x800, &(0x7f0000001940)={@align=0xffff, {0x8000, 0x6bb3, 0x9, 0x2}}, 0x6d, &(0x7f0000001980)={@_ha_fsid}, &(0x7f00000019c0)=0x8000}, 0x2, &(0x7f0000001bc0)=[{0x1, 0x9, &(0x7f0000001a00)='nl80211\x00', &(0x7f0000001a40)="ffb9114eafac82", 0x7, 0x8}, {0x2, 0x5, &(0x7f0000001a80)='}-\x00', &(0x7f0000001ac0)="c386044194bb3c1e16111a7131c7677b91eea3b81ae027a6fa5dabdcba1a06e04717e4d3dea08174e19b8f495596f5f2295bf7ff2456fc75b648729812acecfa57f390f6082b1486a560f5aba44e318ca50cd874d467342b31fa3b24abbd93d9d657a9c5ae0990c9d706fac22eaf8837ca55c4949450e30e72ead2086ff62f8089d936ace795407e4b93f47f78f7c29fc74486f66a3c22a526a80b03a04647c7694eb94bc0cae9d56170a9c8796e4ce6e867f8f4af6ec67cb87a90193055a5337a96c7", 0xc3, 0x38}]}) sendmsg$IPVS_CMD_FLUSH(r8, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x88, r0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x29f}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xe}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xaf4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80c}]}, 0x88}, 0x1, 0x0, 0x0, 0x4800}, 0x2000004) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000001f40)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e40)={0x90, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x3e}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x800) socket$inet_udp(0x2, 0x2, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002240)={0x18, 0x21, &(0x7f0000001f80)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @generic={0x1, 0xc, 0x4, 0xfffe, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3}, @generic={0x0, 0x2, 0xf, 0x4c}], &(0x7f00000020c0)='GPL\x00', 0x34, 0x46, &(0x7f0000002100)=""/70, 0x41100, 0x60, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002180)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000021c0)=[r8, r8, r8, r8, r8, r8, r8, r8], &(0x7f0000002200)=[{0x1, 0x2, 0x1, 0x7}, {0x1, 0x3, 0x0, 0x7}, {0x2, 0x2, 0x8, 0x6}], 0x10, 0x3}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000025c0)={r9, 0xe0, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002300)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000002340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xac, &(0x7f00000023c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000002400), &(0x7f0000002440), 0x8, 0x2b, 0x8, 0x8, &(0x7f0000002480)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002800)={0x16, 0x4, &(0x7f0000002600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x605, 0x0, 0x0, 0x0, 0x5}, [@generic={0x3, 0x9, 0xe, 0x7fff, 0x4}]}, &(0x7f0000002640)='syzkaller\x00', 0x2, 0x62, &(0x7f0000002680)=""/98, 0x41000, 0x44, '\x00', r7, @fallback=0x32, r8, 0x8, &(0x7f0000002700)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000002740)={0x1, 0x9, 0x5, 0x4}, 0x10, r6, r9, 0x4, &(0x7f0000002780)=[r8, r8, r8], &(0x7f00000027c0)=[{0x0, 0x2, 0x9, 0x4}, {0x2, 0x2, 0x2, 0x5}, {0x4, 0x5, 0x3, 0x3}, {0x3, 0x1, 0x3, 0x2}], 0x10, 0xfffffffa}, 0x94) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003980)={&(0x7f00000028c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x3, [@const={0xd, 0x0, 0x0, 0xa, 0x3}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x2, 0x9}, @fwd={0x7}, @enum={0x8, 0x2, 0x0, 0x6, 0x4, [{0x8, 0x9}, {0x7, 0x1}]}, @func={0x8, 0x0, 0x0, 0xc, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x768b4d5}}]}, {0x0, [0x0]}}, &(0x7f0000002980)=""/4096, 0x83, 0x1000, 0x0, 0x6}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000039c0)=@base={0x8, 0x6, 0x2, 0x4, 0x20, r8, 0x1, '\x00', r5, r10, 0x3, 0x1, 0x4}, 0x50) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003a40), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000003ac0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003b40)={&(0x7f0000003b00)={0x28, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4801) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000003c80)={&(0x7f0000003bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003c40)={&(0x7f0000003c00)={0x40, r4, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0x200}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xc0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) 359.695334ms ago: executing program 4 (id=3344): syz_emit_ethernet(0xba, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x24, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local, {[@timestamp_addr={0x44, 0xc, 0xfe, 0x1, 0xb, [{@remote, 0x2}]}, @timestamp={0x44, 0x18, 0xfa, 0x0, 0x0, [0xffff8000, 0x7, 0x0, 0x2, 0x800]}, @rr={0x7, 0x27, 0xd3, [@broadcast, @multicast2, @rand_addr=0x64010100, @remote, @multicast1, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x19}, @rand_addr=0x64010101]}, @cipso={0x86, 0x14, 0x1, [{0x6, 0xe, "577b69c9a0939c7f50bd7979"}]}, @end, @timestamp_prespec={0x44, 0x1c, 0xe, 0x3, 0xd, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@empty, 0x6}, {@remote, 0x4}]}]}}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @broadcast, @multicast2}}}}}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000600)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYRES64, @ANYRESOCT, @ANYBLOB="f31e2572f83747207bb4ce3cdd006d4545bab0dfe99b7343ba07b99fe2c528e870472449d9debe6821e13642cde6844d31fc916b327da8ab4832c9ee4dc57da3ecaa27a457215ca3a509bc96d5e3c0ad"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004014) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) r2 = socket(0x10, 0x803, 0x2) r3 = epoll_create1(0x0) r4 = socket(0x1, 0x80802, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r5, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(r5) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000200)) shutdown(r4, 0x0) close(r2) close(0x3) r6 = socket$l2tp(0x2, 0x2, 0x73) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x82, &(0x7f00000004c0)={0x0, 0x8000}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000440)={0x0, 0x9}, &(0x7f0000000480)=0x8) bind$bt_hci(r7, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r7, 0x800448d5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@map_fd={0x18, 0x3}]}, 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000d, 0x110, r8, 0xf0cb000) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 358.91468ms ago: executing program 1 (id=3345): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000680)=@newsa={0x154, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x56, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x50, 0x60, "210466d38547aa140db9"}}, @offload={0xc, 0x1c, {r2, 0x3}}]}, 0x154}, 0x1, 0x0, 0x0, 0x880}, 0x4042050) 205.85486ms ago: executing program 1 (id=3346): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket(0x2b, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x1000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x8000000, 0x2, 0x0, 0x18, 0x4, 0x96}, 0x20) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x1ff}], 0x18, 0x40}, 0x40008d0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x5c, 0x0, 0x0, 0x0, 0xfffffd6c}, 0x1}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/26, 0x21}, {&(0x7f00000006c0)=""/138, 0x8a}, {&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000900)=""/104, 0x68}, {&(0x7f0000000800)=""/9, 0x9}, {&(0x7f0000000480)=""/4, 0x4}, {&(0x7f0000000980)=""/189, 0xc4}], 0x7}}], 0x2, 0x41, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="090300000000000000002e"], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'hsr0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x8000, 0x20, 0x7, 0x80, {{0x2d, 0x4, 0x1, 0x2, 0xb4, 0x67, 0x0, 0x9c, 0x29, 0x0, @broadcast, @multicast1, {[@rr={0x7, 0x17, 0x39, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1a}]}, @cipso={0x86, 0x36, 0x2, [{0x1, 0x7, "c28ec00e08"}, {0x7, 0xa, "e778ebd4b7be01e2"}, {0x5, 0x5, "f29643"}, {0x2, 0x5, "e522f8"}, {0x6, 0x9, "244881e552206a"}, {0x6, 0xc, "a3688b03cbe3a3fa9bc4"}]}, @timestamp_prespec={0x44, 0xc, 0x3d, 0x3, 0x1, [{@empty}]}, @cipso={0x86, 0x45, 0x1, [{0x7, 0x6, "6bacf760"}, {0x7, 0x7, "5190eb36d6"}, {0x1, 0xd, "ed83d8db69a25d71136514"}, {0x1876c328c0f4f497, 0x8, "2b536ed04a91"}, {0x2, 0x3, "ea"}, {0x5, 0xb, "79fea123a0a0d55c3f"}, {0x1, 0xf, "ae9e90017ad68898f3468b2fea"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x2f, 0xc, 0x5, 0x8, 0x20, @mcast2, @local, 0x7, 0x700, 0x9, 0x5}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000740)={'syztnl2\x00', &(0x7f00000008c0)={'tunl0\x00', 0x0, 0x80, 0x80, 0x9, 0x1, {{0x27, 0x4, 0x1, 0x15, 0x9c, 0x66, 0x0, 0x6, 0x2f, 0x0, @rand_addr=0x64010102, @broadcast, {[@rr={0x7, 0xb, 0x19, [@loopback, @dev={0xac, 0x14, 0x14, 0x41}]}, @end, @timestamp={0x44, 0x10, 0x3e, 0x0, 0x0, [0x9, 0x7, 0x10000]}, @ssrr={0x89, 0x1b, 0x59, [@multicast1, @dev={0xac, 0x14, 0x14, 0x30}, @remote, @loopback, @local, @private=0xa010100]}, @timestamp_addr={0x44, 0x44, 0x57, 0x1, 0x7, [{@broadcast, 0x9}, {@private=0xa010100, 0x40}, {@multicast1, 0x7}, {@multicast1, 0x81}, {@private=0xa010100}, {@private=0xa010101, 0xfffffffd}, {@multicast2, 0x7}, {@local, 0x2}]}, @noop, @generic={0x85, 0xa, "b31a8287b1ab38f9"}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000a40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000a80)={0x84, r7, 0x820, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfcad2df3c5a4bcf1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4008092}, 0x4) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x24, r10, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000881}, 0x4000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=3347): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000200000000fbdbdf257f000001000000000000000000000000fe8000000000000000000000000000aa01000000000000000a0060803b", @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x2}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x48804) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) socket$kcm(0x2, 0xa, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x3c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004011}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r4, 0x0, 0x4000000) bind$packet(0xffffffffffffffff, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xfdef) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000030000000000000000000000000000a0030"], 0xb8}}, 0x4000) kernel console output (not intermixed with test programs): T12978] netlink: 'syz.4.1862': attribute type 1 has an invalid length. [ 325.777692][T12969] vlan2: entered promiscuous mode [ 326.051938][T12995] netlink: 'syz.1.1871': attribute type 1 has an invalid length. [ 326.088823][T12995] netlink: 'syz.1.1871': attribute type 33 has an invalid length. [ 326.091205][T12989] syzkaller1: entered promiscuous mode [ 326.103775][T12989] syzkaller1: entered allmulticast mode [ 326.111420][T12995] `: renamed from team0 [ 326.126203][T12996] syzkaller0: entered promiscuous mode [ 326.137272][T12996] syzkaller0: entered allmulticast mode [ 326.412171][T13012] __nla_validate_parse: 8 callbacks suppressed [ 326.412194][T13012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1874'. [ 326.743836][T13039] netlink: 'syz.0.1878': attribute type 4 has an invalid length. [ 326.752199][T13039] netlink: 14898 bytes leftover after parsing attributes in process `syz.0.1878'. [ 327.055647][T13052] bond7: entered promiscuous mode [ 327.073515][T13052] bond7: entered allmulticast mode [ 327.083442][T13052] 8021q: adding VLAN 0 to HW filter on device bond7 [ 327.114336][T13057] macvlan3: entered promiscuous mode [ 327.119899][T13057] macvlan3: entered allmulticast mode [ 327.127863][T13057] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 327.362179][T13069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1890'. [ 327.414371][T13073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1892'. [ 327.449792][T13073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1892'. [ 327.459452][T13073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1892'. [ 327.472408][T13073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1892'. [ 327.482314][T13073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1892'. [ 328.046987][T13108] tunl0: Caught tx_queue_len zero misconfig [ 328.053669][T13108] sch_fq: defrate 4294967293 ignored. [ 328.061985][T13108] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 328.225994][T13116] syzkaller1: entered promiscuous mode [ 328.232183][T13116] syzkaller1: entered allmulticast mode [ 328.386582][T13117] lo speed is unknown, defaulting to 1000 [ 328.653854][T13130] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1911'. [ 329.381111][T13167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1921'. [ 330.698403][T13202] lo speed is unknown, defaulting to 1000 [ 331.568401][T13222] siw: device registration error -23 [ 331.893767][T13239] __nla_validate_parse: 1 callbacks suppressed [ 331.893787][T13239] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1941'. [ 331.949282][T13244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1943'. [ 332.532435][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 332.829283][ T139] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.859331][ T139] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.893114][ T139] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.908258][ T139] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.014875][T13283] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1955'. [ 333.054073][T13283] syzkaller0: entered promiscuous mode [ 333.080658][T13283] syzkaller0: entered allmulticast mode [ 333.146977][T13291] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1955'. [ 333.686586][T13308] macvtap0: entered promiscuous mode [ 333.697500][T13308] validate_nla: 1 callbacks suppressed [ 333.697522][T13308] netlink: 'syz.1.1961': attribute type 13 has an invalid length. [ 334.635043][T13325] macvtap0: left promiscuous mode [ 334.642728][T13325] bond2: left promiscuous mode [ 334.648099][T13325] vlan2: left promiscuous mode [ 334.653287][T13325] geneve1: left promiscuous mode [ 334.658493][T13325] vlan2: left allmulticast mode [ 334.663853][T13325] geneve1: left allmulticast mode [ 334.669292][T13325] bond3: left promiscuous mode [ 334.674660][T13325] ip6tnl3: left promiscuous mode [ 334.680703][T13325] ip6tnl3: left allmulticast mode [ 336.296642][T13298] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 336.502927][T13337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1972'. [ 336.674525][T13345] geneve3: entered promiscuous mode [ 336.691336][T13345] geneve3: entered allmulticast mode [ 337.077931][T13373] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1984'. [ 337.103196][T13373] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1984'. [ 337.115321][T13373] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1984'. [ 337.172669][T13373] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1984'. [ 337.344977][T13393] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1992'. [ 337.355148][T13393] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1992'. [ 337.364922][T13393] netlink: 'syz.4.1992': attribute type 5 has an invalid length. [ 337.373299][T13393] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1992'. [ 337.532244][T13403] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1995'. [ 337.666392][T13410] geneve3: left promiscuous mode [ 337.671674][T13410] geneve3: left allmulticast mode [ 337.695624][T13410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1995'. [ 337.709870][T13410] hsr_slave_0: left promiscuous mode [ 337.716963][T13410] hsr_slave_1: left promiscuous mode [ 337.833945][T13419] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.857027][T13420] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1998'. [ 337.965251][T13422] bond6: option downdelay: invalid value (18446744073709551615) [ 337.998970][T13422] bond6: option downdelay: allowed values 0 - 2147483647 [ 338.010427][T13422] bond6 (unregistering): Released all slaves [ 338.257292][T13430] netlink: 'syz.3.2002': attribute type 1 has an invalid length. [ 338.322324][T13430] 8021q: adding VLAN 0 to HW filter on device bond6 [ 338.454069][T13435] bond6: (slave veth7): Enslaving as an active interface with a down link [ 338.559481][T13438] lo speed is unknown, defaulting to 1000 [ 338.901280][T13455] tipc: Invalid UDP bearer configuration [ 338.901343][T13455] tipc: Enabling of bearer rejected, failed to enable media [ 338.916681][T13453] 8021q: VLANs not supported on caif0 [ 339.214311][T13468] delete_channel: no stack [ 339.642527][T13498] netlink: 'syz.3.2024': attribute type 7 has an invalid length. [ 339.662774][T13498] netlink: 'syz.3.2024': attribute type 8 has an invalid length. [ 339.914150][T13515] vcan0: Master is either lo or non-ether device [ 340.131798][T13523] lo speed is unknown, defaulting to 1000 [ 340.881606][T13572] netlink: 'syz.2.2044': attribute type 5 has an invalid length. [ 341.100675][T13575] lo speed is unknown, defaulting to 1000 [ 341.492288][T13599] lo speed is unknown, defaulting to 1000 [ 342.003087][T13615] batadv0: entered promiscuous mode [ 342.020052][T13615] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 342.181329][T13630] __nla_validate_parse: 18 callbacks suppressed [ 342.181353][T13630] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2055'. [ 342.252669][T13639] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2059'. [ 342.381179][T13626] lo speed is unknown, defaulting to 1000 [ 342.773075][T13655] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2063'. [ 343.026978][T13631] bond0: (slave netdevsim0): Releasing backup interface [ 343.124055][T13668] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2068'. [ 343.502487][T13684] bond3: Removing last ns target with arp_interval on [ 343.581402][T13687] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2076'. [ 343.661042][T13690] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2075'. [ 343.703582][T13693] netlink: 304 bytes leftover after parsing attributes in process `syz.0.2077'. [ 344.002182][T13709] sctp: [Deprecated]: syz.3.2083 (pid 13709) Use of int in maxseg socket option. [ 344.002182][T13709] Use struct sctp_assoc_value instead [ 344.128192][T13719] syzkaller0: entered promiscuous mode [ 344.134503][T13719] syzkaller0: entered allmulticast mode [ 344.305363][T13728] netlink: 'syz.2.2086': attribute type 22 has an invalid length. [ 344.323975][T13728] netlink: 'syz.2.2086': attribute type 1 has an invalid length. [ 344.342691][T13728] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2086'. [ 344.453457][T13736] netlink: 'syz.2.2089': attribute type 1 has an invalid length. [ 344.463723][T13736] netlink: 'syz.2.2089': attribute type 1 has an invalid length. [ 344.472499][T13736] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2089'. [ 344.482360][T13732] syzkaller0: entered promiscuous mode [ 344.488363][T13732] syzkaller0: entered allmulticast mode [ 344.497096][T13736] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2089'. [ 344.584332][T13740] netlink: 'syz.2.2090': attribute type 1 has an invalid length. [ 345.045659][T13759] lo speed is unknown, defaulting to 1000 [ 345.690605][T13786] ip6tnl3: entered allmulticast mode [ 345.736506][T13791] : entered promiscuous mode [ 345.944101][T13808] IPVS: set_ctl: invalid protocol: 135 100.1.1.0:20003 [ 345.951742][T13809] IPVS: set_ctl: invalid protocol: 135 100.1.1.0:20003 [ 345.957156][T13800] lo speed is unknown, defaulting to 1000 [ 345.976245][T13805] syzkaller1: entered promiscuous mode [ 346.009852][T13805] syzkaller1: entered allmulticast mode [ 346.254270][T13826] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 346.595277][T13845] netlink: 'syz.3.2117': attribute type 1 has an invalid length. [ 346.609358][T13845] netlink: 'syz.3.2117': attribute type 4 has an invalid length. [ 346.681929][T13848] nbd: must specify at least one socket [ 346.703854][T13851] nbd: must specify at least one socket [ 347.004940][T13865] FAULT_INJECTION: forcing a failure. [ 347.004940][T13865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.048768][T13865] CPU: 0 UID: 0 PID: 13865 Comm: syz.4.2126 Not tainted syzkaller #0 PREEMPT(full) [ 347.048797][T13865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 347.048810][T13865] Call Trace: [ 347.048818][T13865] [ 347.048827][T13865] dump_stack_lvl+0xe8/0x150 [ 347.048862][T13865] should_fail_ex+0x412/0x560 [ 347.048894][T13865] _copy_to_user+0x31/0xb0 [ 347.048925][T13865] simple_read_from_buffer+0xe1/0x170 [ 347.048958][T13865] proc_fail_nth_read+0x1bb/0x230 [ 347.048990][T13865] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 347.049021][T13865] ? rw_verify_area+0x2a6/0x4d0 [ 347.049042][T13865] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 347.049070][T13865] vfs_read+0x20c/0xa70 [ 347.049096][T13865] ? ping_bind+0x282/0x1330 [ 347.049125][T13865] ? __pfx_vfs_read+0x10/0x10 [ 347.049148][T13865] ? bpf_lsm_socket_bind+0x9/0x20 [ 347.049174][T13865] ? __sys_bind+0x306/0x410 [ 347.049204][T13865] ? __pfx___sys_bind+0x10/0x10 [ 347.049238][T13865] ksys_read+0x150/0x270 [ 347.049263][T13865] ? __pfx_ksys_read+0x10/0x10 [ 347.049295][T13865] do_syscall_64+0x14d/0xf80 [ 347.049322][T13865] ? trace_irq_disable+0x3b/0x150 [ 347.049348][T13865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.049367][T13865] ? clear_bhb_loop+0x40/0x90 [ 347.049389][T13865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.049409][T13865] RIP: 0033:0x7f539635cfce [ 347.049427][T13865] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 347.049444][T13865] RSP: 002b:00007f5397307fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 347.049465][T13865] RAX: ffffffffffffffda RBX: 00007f53973086c0 RCX: 00007f539635cfce [ 347.049480][T13865] RDX: 000000000000000f RSI: 00007f53973080a0 RDI: 0000000000000004 [ 347.049493][T13865] RBP: 00007f5397308090 R08: 0000000000000000 R09: 0000000000000000 [ 347.049505][T13865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.049516][T13865] R13: 00007f5396616038 R14: 00007f5396615fa0 R15: 00007fffd7e86198 [ 347.049549][T13865] [ 347.443113][T13880] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 378.692635][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 390.394313][T13916] __nla_validate_parse: 6 callbacks suppressed [ 390.394337][T13916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2135'. [ 390.598571][T13925] lo speed is unknown, defaulting to 1000 [ 391.026289][T13947] lo speed is unknown, defaulting to 1000 [ 391.047617][T13938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2138'. [ 391.076387][T13938] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2138'. [ 391.546642][T13973] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2147'. [ 391.683232][T13981] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2151'. [ 391.919831][T13994] netlink: 'syz.1.2155': attribute type 2 has an invalid length. [ 392.271914][T14009] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2159'. [ 392.564248][T14014] netlink: 280 bytes leftover after parsing attributes in process `syz.2.2161'. [ 392.584732][T14014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2161'. [ 392.742363][T14016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2162'. [ 393.055613][T14029] netlink: 'syz.0.2165': attribute type 1 has an invalid length. [ 393.080454][T14029] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2165'. [ 393.121068][T14026] lo speed is unknown, defaulting to 1000 [ 393.423491][T14038] bridge11: entered promiscuous mode [ 393.439185][T14038] bridge11: entered allmulticast mode [ 393.721987][T14056] sctp: [Deprecated]: syz.0.2171 (pid 14056) Use of struct sctp_assoc_value in delayed_ack socket option. [ 393.721987][T14056] Use struct sctp_sack_info instead [ 394.263839][T14081] netlink: 'syz.1.2180': attribute type 28 has an invalid length. [ 394.861217][T14107] netlink: 'syz.4.2189': attribute type 1 has an invalid length. [ 395.365922][T14138] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 395.386659][T14138] bond7 (unregistering): Released all slaves [ 395.583282][T14134] lo speed is unknown, defaulting to 1000 [ 395.665716][T14148] __nla_validate_parse: 6 callbacks suppressed [ 395.665747][T14148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2201'. [ 396.150218][T14158] bond0: (slave rose0): Releasing backup interface [ 396.296006][T14170] syzkaller0: entered promiscuous mode [ 396.302119][T14170] syzkaller0: entered allmulticast mode [ 396.581497][T14174] lo speed is unknown, defaulting to 1000 [ 396.632165][T14186] syzkaller1: entered promiscuous mode [ 396.637739][T14186] syzkaller1: entered allmulticast mode [ 396.654516][T14186] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 396.665755][T14186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2213'. [ 396.708272][T14186] team0: Port device team_slave_0 removed [ 397.056754][T14198] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2214'. [ 397.114014][T14201] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2216'. [ 397.244903][T14205] netlink: 488 bytes leftover after parsing attributes in process `syz.1.2219'. [ 397.254967][T14205] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.2219'. [ 397.510349][T14221] IPv6: addrconf: prefix option has invalid lifetime [ 398.613329][T14242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2228'. [ 398.740251][T14247] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 398.748084][T14247] IPv6: NLM_F_CREATE should be set when creating new route [ 398.755418][T14247] IPv6: NLM_F_CREATE should be set when creating new route [ 398.762716][T14247] IPv6: NLM_F_CREATE should be set when creating new route [ 398.804897][T14247] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 398.883967][T14255] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2232'. [ 398.913312][T14255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2232'. [ 398.950751][T14256] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2232'. [ 399.125118][T14266] bond7: entered promiscuous mode [ 399.142154][T14266] macvlan5: entered promiscuous mode [ 399.147511][T14266] macvlan5: entered allmulticast mode [ 399.156185][T14266] bond7: (slave macvlan5): Opening slave failed [ 399.731209][T14303] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 399.743419][T14304] dvmrp1: tun_chr_ioctl cmd 2147767506 [ 399.958461][T14313] netlink: 'syz.0.2250': attribute type 1 has an invalid length. [ 400.456591][T14347] netlink: 'syz.4.2261': attribute type 3 has an invalid length. [ 400.515883][T14355] veth0: entered promiscuous mode [ 401.041880][T14377] netlink: 'syz.2.2267': attribute type 11 has an invalid length. [ 401.072056][T14377] __nla_validate_parse: 2 callbacks suppressed [ 401.072077][T14377] netlink: 199788 bytes leftover after parsing attributes in process `syz.2.2267'. [ 401.131688][T14354] veth0: left promiscuous mode [ 401.651828][T14405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2277'. [ 401.661769][T14405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2277'. [ 401.921009][T14418] lo speed is unknown, defaulting to 1000 [ 402.221788][T14435] smc: net device wlan0 applied user defined pnetid SYZ0 [ 402.570132][T14425] ip6tnl0: Caught tx_queue_len zero misconfig [ 402.860929][T14438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2287'. [ 402.934169][T14443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2287'. [ 403.020708][T14438] ip6gretap0: entered promiscuous mode [ 403.035793][T14438] macvtap2: entered promiscuous mode [ 403.059298][T14438] macvtap2: entered allmulticast mode [ 403.088195][T14438] ip6gretap0: entered allmulticast mode [ 403.157930][T14443] ip6gretap0: left allmulticast mode [ 403.171193][T14443] ip6gretap0: left promiscuous mode [ 403.186557][T14443] macvtap2: left promiscuous mode [ 403.194235][T14443] macvtap2: left allmulticast mode [ 403.548569][T14467] xt_hashlimit: size too large, truncated to 1048576 [ 403.697999][T14478] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 403.941065][T14479] syzkaller1: entered promiscuous mode [ 403.946896][T14479] syzkaller1: entered allmulticast mode [ 404.119225][T14492] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2302'. [ 404.466370][T14513] x_tables: duplicate underflow at hook 3 [ 404.943276][T14545] FAULT_INJECTION: forcing a failure. [ 404.943276][T14545] name failslab, interval 1, probability 0, space 0, times 0 [ 404.962899][T14545] CPU: 1 UID: 0 PID: 14545 Comm: syz.3.2317 Not tainted syzkaller #0 PREEMPT(full) [ 404.962929][T14545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 404.962941][T14545] Call Trace: [ 404.962949][T14545] [ 404.962958][T14545] dump_stack_lvl+0xe8/0x150 [ 404.962992][T14545] should_fail_ex+0x412/0x560 [ 404.963026][T14545] should_failslab+0xa8/0x100 [ 404.963054][T14545] __kmalloc_cache_noprof+0x88/0x660 [ 404.963078][T14545] ? nfnetlink_rcv+0xfe1/0x27b0 [ 404.963110][T14545] nfnetlink_rcv+0xfe1/0x27b0 [ 404.963175][T14545] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 404.963219][T14545] ? ref_tracker_free+0x693/0x840 [ 404.963279][T14545] ? __netlink_deliver_tap+0x807/0x850 [ 404.963307][T14545] ? netlink_deliver_tap+0x2e/0x1b0 [ 404.963354][T14545] netlink_unicast+0x80f/0x9b0 [ 404.963390][T14545] ? __pfx_netlink_unicast+0x10/0x10 [ 404.963418][T14545] ? netlink_sendmsg+0x650/0xb40 [ 404.963444][T14545] ? skb_put+0x11b/0x210 [ 404.963479][T14545] netlink_sendmsg+0x813/0xb40 [ 404.963518][T14545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.963550][T14545] ? aa_sock_msg_perm+0xf1/0x1b0 [ 404.963577][T14545] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 404.963604][T14545] ____sys_sendmsg+0x972/0x9f0 [ 404.963636][T14545] ? __pfx_____sys_sendmsg+0x10/0x10 [ 404.963668][T14545] ? import_iovec+0x73/0xa0 [ 404.963714][T14545] ___sys_sendmsg+0x2a5/0x360 [ 404.963742][T14545] ? __pfx____sys_sendmsg+0x10/0x10 [ 404.963804][T14545] ? __fget_files+0x2a/0x420 [ 404.963841][T14545] ? __fget_files+0x3a0/0x420 [ 404.963882][T14545] __x64_sys_sendmsg+0x1bd/0x2a0 [ 404.963907][T14545] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 404.963939][T14545] ? __pfx_ksys_write+0x10/0x10 [ 404.963976][T14545] do_syscall_64+0x14d/0xf80 [ 404.964004][T14545] ? trace_irq_disable+0x3b/0x150 [ 404.964033][T14545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.964054][T14545] ? clear_bhb_loop+0x40/0x90 [ 404.964079][T14545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.964100][T14545] RIP: 0033:0x7f007619c799 [ 404.964120][T14545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.964138][T14545] RSP: 002b:00007f00743f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.964161][T14545] RAX: ffffffffffffffda RBX: 00007f0076415fa0 RCX: 00007f007619c799 [ 404.964175][T14545] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000004 [ 404.964188][T14545] RBP: 00007f00743f6090 R08: 0000000000000000 R09: 0000000000000000 [ 404.964201][T14545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.964213][T14545] R13: 00007f0076416038 R14: 00007f0076415fa0 R15: 00007ffc88e6b108 [ 404.964249][T14545] [ 405.009712][T14547] tipc: Enabling of bearer rejected, failed to enable media [ 405.233435][T14563] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2320'. [ 405.252937][T14547] netlink: 'syz.1.2316': attribute type 3 has an invalid length. [ 405.279131][T14546] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2315'. [ 405.419088][T14567] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2325'. [ 405.446917][T14570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2323'. [ 405.493076][T14569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.517080][T14570] 8021q: adding VLAN 0 to HW filter on device bond7 [ 405.525121][T14569] ÿÿÿÿÿÿ: renamed from wg1 [ 405.588576][T14570] macsec1: entered promiscuous mode [ 405.614102][T14570] bond7: entered promiscuous mode [ 405.637389][T14570] bond7: left promiscuous mode [ 405.670760][T14589] bond0: option arp_validate: invalid value (55553) [ 405.954394][T14609] syzkaller1: entered promiscuous mode [ 405.960204][T14609] syzkaller1: entered allmulticast mode [ 406.031537][T14611] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 406.126955][T14613] syzkaller1: left promiscuous mode [ 406.134131][T14613] syzkaller1: left allmulticast mode [ 406.151543][T14621] __nla_validate_parse: 1 callbacks suppressed [ 406.151564][T14621] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2335'. [ 406.438033][T14636] bridge8: entered promiscuous mode [ 406.443848][T14636] bridge8: entered allmulticast mode [ 406.456282][T14636] team0: Port device bridge8 added [ 406.498235][T14639] IPv6: Can't replace route, no match found [ 406.743063][T14653] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2345'. [ 407.040215][T14663] netlink: 'syz.0.2347': attribute type 16 has an invalid length. [ 407.048099][T14663] netlink: 'syz.0.2347': attribute type 17 has an invalid length. [ 407.103499][T14667] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2351'. [ 407.131089][T14674] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2347'. [ 407.216417][T14663] syz_tun: left promiscuous mode [ 407.233530][T14663] bridge0: left allmulticast mode [ 407.246231][T14663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.262526][T14663] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.281180][T14663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 407.283662][T14683] netlink: 'syz.1.2352': attribute type 1 has an invalid length. [ 407.304155][T10613] lo speed is unknown, defaulting to 1000 [ 407.320480][ T12] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 407.332117][ T12] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 407.348048][T10613] syz2: Port: 1 Link ACTIVE [ 407.364692][ T12] bond0: now running without any active interface! [ 407.422156][T14690] batadv_slave_0: entered promiscuous mode [ 407.428241][T14690] batadv_slave_0: entered allmulticast mode [ 407.622473][T14706] netlink: 'syz.3.2359': attribute type 5 has an invalid length. [ 407.728060][T14708] netlink: 'syz.0.2360': attribute type 10 has an invalid length. [ 407.737812][T14708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2360'. [ 408.214727][T14738] netlink: 'syz.2.2366': attribute type 3 has an invalid length. [ 408.474964][T14754] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2370'. [ 408.563165][T14753] lo speed is unknown, defaulting to 1000 [ 409.117378][T14792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2380'. [ 409.304148][T14804] syzkaller0: entered promiscuous mode [ 409.311815][T14804] syzkaller0: entered allmulticast mode [ 409.394396][T14789] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2381'. [ 409.646228][T14828] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2389'. [ 409.840867][T14837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2390'. [ 410.005695][T14854] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 410.287246][T14867] openvswitch: netlink: IP tunnel dst address not specified [ 410.341844][T14865] lo speed is unknown, defaulting to 1000 [ 410.459848][T14875] veth0_to_bridge: entered promiscuous mode [ 410.542481][T14875] netlink: 'syz.3.2403': attribute type 9 has an invalid length. [ 410.613600][T14877] xt_CT: No such helper "syz0" [ 410.663303][T14874] veth0_to_bridge: left promiscuous mode [ 410.706981][T14865] lo speed is unknown, defaulting to 1000 [ 410.748106][T14868] netlink: 'syz.1.2400': attribute type 9 has an invalid length. [ 411.133183][T14893] gre0 speed is unknown, defaulting to 1000 [ 411.142448][T14893] gre0 speed is unknown, defaulting to 1000 [ 411.152014][T14893] gre0 speed is unknown, defaulting to 1000 [ 411.340887][T14893] infiniband syz1: set down [ 411.345489][ T7558] gre0 speed is unknown, defaulting to 1000 [ 411.352524][T14893] infiniband syz1: added gre0 [ 411.388083][T14893] RDS/IB: syz1: added [ 411.392428][T14893] smc: adding ib device syz1 with port count 1 [ 411.399920][T14893] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 411.407677][ T7558] gre0 speed is unknown, defaulting to 1000 [ 411.415211][T14893] gre0 speed is unknown, defaulting to 1000 [ 411.559600][T14893] gre0 speed is unknown, defaulting to 1000 [ 411.703940][T14893] gre0 speed is unknown, defaulting to 1000 [ 411.848421][T14893] gre0 speed is unknown, defaulting to 1000 [ 411.989189][T14893] gre0 speed is unknown, defaulting to 1000 [ 412.257430][T14903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.270145][T14903] atomic_op ffff88802638a198 conn xmit_atomic 0000000000000000 [ 412.887937][T14845] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 412.897767][T14881] __nla_validate_parse: 4 callbacks suppressed [ 412.897796][T14881] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2404'. [ 413.097568][T14906] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.129042][T14906] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 413.575227][T14939] netlink: 'syz.1.2421': attribute type 29 has an invalid length. [ 413.609710][T14939] netlink: 'syz.1.2421': attribute type 29 has an invalid length. [ 413.622576][T14939] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2421'. [ 413.808332][T14954] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2425'. [ 413.824112][T14954] netlink: 'syz.3.2425': attribute type 1 has an invalid length. [ 414.101462][T14964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2428'. [ 414.159073][T14966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2428'. [ 415.647362][T14962] 8021q: VLANs not supported on ip_vti0 [ 415.892289][T14978] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2430'. [ 415.950628][T14979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2432'. [ 415.972784][T14979] netlink: zone id is out of range [ 415.978056][T14979] netlink: zone id is out of range [ 415.983732][T14979] netlink: zone id is out of range [ 415.989933][T14979] netlink: zone id is out of range [ 415.995321][T14979] netlink: zone id is out of range [ 416.009670][T14979] netlink: zone id is out of range [ 416.014942][T14979] netlink: zone id is out of range [ 416.031853][T14979] netlink: zone id is out of range [ 416.039270][T14983] netlink: 'syz.3.2434': attribute type 4 has an invalid length. [ 416.103902][T14986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2435'. [ 416.159314][T14986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2435'. [ 416.214211][T14987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2435'. [ 416.241619][T14989] vlan2: entered promiscuous mode [ 416.259681][T14989] bridge0: entered promiscuous mode [ 416.392542][T14994] syzkaller0: entered promiscuous mode [ 416.400121][T14994] syzkaller0: entered allmulticast mode [ 417.099893][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805625a000: rx timeout, send abort [ 417.303431][T15047] syzkaller0: entered promiscuous mode [ 417.312525][T15047] syzkaller0: entered allmulticast mode [ 417.600036][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807bea2400: rx timeout, send abort [ 417.609672][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805625a000: abort rx timeout. Force session deactivation [ 417.730347][T15055] netlink: 'syz.2.2455': attribute type 1 has an invalid length. [ 417.752766][T15055] netlink: 'syz.2.2455': attribute type 2 has an invalid length. [ 417.879870][T15082] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 417.900407][T15083] macsec1: entered allmulticast mode [ 417.905779][T15083] veth1: entered allmulticast mode [ 418.104541][T15094] netlink: 'syz.2.2467': attribute type 10 has an invalid length. [ 418.108587][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807bea2400: abort rx timeout. Force session deactivation [ 418.117896][T15094] netlink: 'syz.2.2467': attribute type 10 has an invalid length. [ 418.225279][T15099] __nla_validate_parse: 10 callbacks suppressed [ 418.225298][T15099] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2468'. [ 418.300116][T15080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2463'. [ 418.345196][T15080] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode [ 418.371636][T15080] macvtap0: entered promiscuous mode [ 418.379734][T15080] macvtap0: entered allmulticast mode [ 418.386257][T15080] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 418.447188][T15104] net_ratelimit: 46 callbacks suppressed [ 418.447213][T15104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.786540][T15118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2473'. [ 418.796491][T15119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2473'. [ 418.891862][T15118] bond4: option resend_igmp: invalid value (2878) [ 418.918847][T15118] bond4: option resend_igmp: allowed values 0 - 255 [ 418.928214][T15118] bond4 (unregistering): Released all slaves [ 418.976709][T15130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2476'. [ 418.986600][T15130] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2476'. [ 419.046324][T15135] netlink: 'syz.1.2476': attribute type 1 has an invalid length. [ 419.358774][T15148] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2479'. [ 419.551888][T15153] IPVS: set_ctl: invalid protocol: 39555 229.182.219.106:43509 [ 419.579295][T15161] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2483'. [ 420.051479][T15187] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 420.072026][T15187] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 420.098279][T15187] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 420.120052][T15187] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 420.150532][T15187] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 420.167496][T15187] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 420.186304][T15187] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 420.203220][T15187] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 420.223140][T15187] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 420.507299][T15208] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.641123][T15208] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.763097][T15208] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.857697][T15219] lo speed is unknown, defaulting to 1000 [ 420.883342][T15219] gre0 speed is unknown, defaulting to 1000 [ 420.894552][T15208] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.096508][ T7407] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.115111][ T7407] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.126532][ T7407] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.136741][ T7407] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.961226][T15268] 8021q: adding VLAN 0 to HW filter on device bond8 [ 422.036757][T15271] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 422.186609][T15271] netlink: 'syz.4.2506': attribute type 1 has an invalid length. [ 422.201376][T15271] netlink: 2108 bytes leftover after parsing attributes in process `syz.4.2506'. [ 422.453927][T15282] can: request_module (can-proto-0) failed. [ 422.568019][T15294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2510'. [ 423.074392][T15324] netlink: 'syz.2.2521': attribute type 1 has an invalid length. [ 423.082509][T15325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.093630][T15325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.207163][T15331] netlink: 'syz.4.2524': attribute type 1 has an invalid length. [ 423.302298][T15335] bond9: (slave geneve2): making interface the new active one [ 423.328091][T15335] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 423.337536][ T1133] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 423.348752][ T1133] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 423.359052][ T1133] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 423.367901][ T1133] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 423.398997][T15340] sctp: [Deprecated]: syz.0.2525 (pid 15340) Use of int in maxseg socket option. [ 423.398997][T15340] Use struct sctp_assoc_value instead [ 423.415948][T15339] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2521'. [ 423.432789][T15332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2523'. [ 423.466709][T15342] xt_TCPMSS: Only works on TCP SYN packets [ 423.476206][T15343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2521'. [ 423.560863][T15342] xt_TCPMSS: Only works on TCP SYN packets [ 423.630897][T15350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2527'. [ 423.687449][T15353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2527'. [ 423.723242][T15353] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2527'. [ 423.753080][T15350] netlink: 'syz.0.2527': attribute type 1 has an invalid length. [ 423.846215][T15360] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 423.988467][T15378] syzkaller0: entered promiscuous mode [ 424.001868][T15378] syzkaller0: entered allmulticast mode [ 424.268437][T15390] sock: sock_timestamping_bind_phc: sock not bind to device [ 424.292896][T15393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2538'. [ 424.348915][T15393] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2538'. [ 424.697698][T15401] xt_policy: output policy not valid in PREROUTING and INPUT [ 424.950964][T15412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2545'. [ 425.091778][ T5840] Bluetooth: hci4: link tx timeout [ 425.097462][ T5840] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 425.204969][T15429] bond0: entered promiscuous mode [ 425.210374][T15429] bond_slave_0: entered promiscuous mode [ 425.220440][T15429] bond_slave_1: entered promiscuous mode [ 425.249307][T15429] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 425.279010][T15429] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 425.299708][T15429] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 425.328923][T15429] bond0: left promiscuous mode [ 425.340837][T15429] bond_slave_0: left promiscuous mode [ 425.346491][T15429] bond_slave_1: left promiscuous mode [ 425.557764][T15448] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2553'. [ 425.780126][T15458] net_ratelimit: 58 callbacks suppressed [ 425.780148][T15458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.836576][T15462] lo speed is unknown, defaulting to 1000 [ 425.892801][T15462] gre0 speed is unknown, defaulting to 1000 [ 426.179939][T15515] netlink: 'syz.2.2564': attribute type 1 has an invalid length. [ 427.178303][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 427.460334][T15560] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 428.050992][T15588] lo speed is unknown, defaulting to 1000 [ 428.079954][T15588] gre0 speed is unknown, defaulting to 1000 [ 428.129892][T15590] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 429.188464][T15638] bond8: option mode: unable to set because the bond device has slaves [ 429.307017][T15633] lo speed is unknown, defaulting to 1000 [ 429.319897][T15633] gre0 speed is unknown, defaulting to 1000 [ 429.386146][T15647] __nla_validate_parse: 10 callbacks suppressed [ 429.386171][T15647] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2604'. [ 429.509569][T15649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2605'. [ 429.976717][T15668] netlink: 'syz.0.2611': attribute type 1 has an invalid length. [ 430.109992][T15668] 8021q: adding VLAN 0 to HW filter on device bond4 [ 430.161702][T15673] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2612'. [ 430.172115][T15668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2611'. [ 430.189439][T15668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2611'. [ 430.254284][T15672] bond4: (slave veth11): Enslaving as an active interface with a down link [ 430.361444][T15656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2608'. [ 430.377201][T15674] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2612'. [ 430.801194][T15748] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2616'. [ 431.409411][T15677] workqueue: Failed to create a rescuer kthread for wq "nfc28_nci_rx_wq": -EINTR [ 432.410400][T15846] netlink: 15672 bytes leftover after parsing attributes in process `syz.1.2638'. [ 432.444674][T15847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2639'. [ 432.600704][T15850] ip6gre2: entered promiscuous mode [ 432.606150][T15850] ip6gre2: entered allmulticast mode [ 432.659598][T15496] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 432.677223][T15850] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 432.691146][ T5895] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 432.699535][T15496] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 433.011630][T15867] syzkaller0: entered promiscuous mode [ 433.017204][T15867] syzkaller0: entered allmulticast mode [ 433.039079][ T7558] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 433.343123][T15500] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.371744][T15500] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.400941][T15500] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.428797][T15500] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.569580][ T5895] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 434.240349][T15933] tc_dump_action: action bad kind [ 434.280628][T15939] vlan3: entered promiscuous mode [ 434.285812][T15939] bridge0: entered promiscuous mode [ 434.742000][T15952] __nla_validate_parse: 8 callbacks suppressed [ 434.742025][T15952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2662'. [ 435.316024][T15973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2668'. [ 435.413575][T15976] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2668'. [ 435.454768][T15981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2669'. [ 435.543987][T15984] openvswitch: netlink: Flow actions attr not present in new flow. [ 435.981692][T16010] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2676'. [ 436.030508][T16012] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 436.059032][T16015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2678'. [ 436.072963][T16012] netlink: 'syz.3.2677': attribute type 4 has an invalid length. [ 436.112883][T16018] netlink: 'syz.0.2679': attribute type 61 has an invalid length. [ 436.121262][T16018] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2679'. [ 436.368888][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 439.015069][T16031] netlink: 'syz.3.2682': attribute type 1 has an invalid length. [ 439.158225][T16031] 8021q: adding VLAN 0 to HW filter on device bond8 [ 439.178042][T16043] xfrm0: entered promiscuous mode [ 439.185989][T16043] xfrm0: entered allmulticast mode [ 439.200446][T16043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2686'. [ 439.344445][T16055] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2690'. [ 439.385630][T16056] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2689'. [ 439.781111][T16086] __nla_validate_parse: 3 callbacks suppressed [ 439.781134][T16086] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.2696'. [ 440.108026][T16094] lo speed is unknown, defaulting to 1000 [ 440.118266][T16099] tipc: Failed to remove unknown binding: 66,1,1/0:1644568673/1644568675 [ 440.126857][T16099] tipc: Failed to remove unknown binding: 66,1,1/0:1644568673/1644568675 [ 440.137321][T16094] gre0 speed is unknown, defaulting to 1000 [ 440.142173][T16099] netlink: 'syz.2.2702': attribute type 3 has an invalid length. [ 440.152375][T16099] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2702'. [ 440.376596][T16113] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2705'. [ 440.508258][T16117] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2708'. [ 440.541873][T16117] ip6tnl4: entered allmulticast mode [ 440.615652][T16123] Bluetooth: MGMT ver 1.23 [ 440.787319][T16125] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2711'. [ 441.140709][T16100] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 441.161455][T16100] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2700'. [ 441.663023][T16147] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20002 [ 441.670698][T16147] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2716'. [ 441.681778][T16147] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2716'. [ 442.020611][T16159] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2720'. [ 442.374272][T16180] netlink: 'syz.4.2727': attribute type 3 has an invalid length. [ 442.563103][T16190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2731'. [ 442.688889][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 442.690481][ T5840] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 442.968928][T16220] netlink: 'syz.0.2739': attribute type 1 has an invalid length. [ 442.977166][T16220] netlink: 'syz.0.2739': attribute type 2 has an invalid length. [ 443.353065][T16240] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 443.370247][T16240] bond5: (slave wireguard0): Error -95 calling set_mac_address [ 443.426029][T16247] netlink: 'syz.2.2747': attribute type 3 has an invalid length. [ 443.592316][T16251] nbd: must specify at least one socket [ 443.968824][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 444.800025][T16300] netlink: 'syz.2.2764': attribute type 4 has an invalid length. [ 444.807943][T16300] __nla_validate_parse: 3 callbacks suppressed [ 444.807961][T16300] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2764'. [ 444.826280][T16300] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 444.996596][T16306] netlink: 'syz.1.2766': attribute type 15 has an invalid length. [ 445.004709][T16306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2766'. [ 445.015584][T16306] netlink: 'syz.1.2766': attribute type 15 has an invalid length. [ 445.032308][T16306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2766'. [ 445.708270][T16328] lo speed is unknown, defaulting to 1000 [ 445.768030][T16328] gre0 speed is unknown, defaulting to 1000 [ 446.182135][T16350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.249642][T16350] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2779'. [ 447.011954][T16367] netlink: 'syz.3.2785': attribute type 4 has an invalid length. [ 447.038784][T16368] netlink: 'syz.3.2785': attribute type 4 has an invalid length. [ 447.069907][T16368] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2785'. [ 447.106705][T16367] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2785'. [ 447.843896][T16408] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2797'. [ 447.860100][T16408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2797'. [ 447.904198][T16408] 8021q: adding VLAN 0 to HW filter on device bond5 [ 447.962549][T16408] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 448.150255][T16425] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 448.191271][T16427] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2801'. [ 448.283420][T16430] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 448.410853][T16434] FAULT_INJECTION: forcing a failure. [ 448.410853][T16434] name failslab, interval 1, probability 0, space 0, times 0 [ 448.436925][T16434] CPU: 0 UID: 0 PID: 16434 Comm: syz.0.2806 Not tainted syzkaller #0 PREEMPT(full) [ 448.436956][T16434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 448.436968][T16434] Call Trace: [ 448.436985][T16434] [ 448.436995][T16434] dump_stack_lvl+0xe8/0x150 [ 448.437030][T16434] should_fail_ex+0x412/0x560 [ 448.437062][T16434] should_failslab+0xa8/0x100 [ 448.437090][T16434] __kmalloc_noprof+0xe8/0x760 [ 448.437114][T16434] ? bpf_test_init+0x9f/0x150 [ 448.437139][T16434] ? kstrtouint+0x6e/0xe0 [ 448.437168][T16434] bpf_test_init+0x9f/0x150 [ 448.437199][T16434] bpf_prog_test_run_xdp+0x529/0x1160 [ 448.437243][T16434] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 448.437277][T16434] ? __fget_files+0x2a/0x420 [ 448.437311][T16434] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 448.437340][T16434] bpf_prog_test_run+0x2c7/0x340 [ 448.437364][T16434] __sys_bpf+0x643/0x950 [ 448.437394][T16434] ? __pfx___sys_bpf+0x10/0x10 [ 448.437439][T16434] ? ksys_write+0x242/0x270 [ 448.437462][T16434] ? __pfx_ksys_write+0x10/0x10 [ 448.437490][T16434] __x64_sys_bpf+0x7c/0x90 [ 448.437517][T16434] do_syscall_64+0x14d/0xf80 [ 448.437544][T16434] ? trace_irq_disable+0x3b/0x150 [ 448.437572][T16434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.437593][T16434] ? clear_bhb_loop+0x40/0x90 [ 448.437620][T16434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.437640][T16434] RIP: 0033:0x7fcc6679c799 [ 448.437660][T16434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.437678][T16434] RSP: 002b:00007fcc676ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 448.437701][T16434] RAX: ffffffffffffffda RBX: 00007fcc66a15fa0 RCX: 00007fcc6679c799 [ 448.437716][T16434] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 448.437729][T16434] RBP: 00007fcc676ec090 R08: 0000000000000000 R09: 0000000000000000 [ 448.437742][T16434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.437754][T16434] R13: 00007fcc66a16038 R14: 00007fcc66a15fa0 R15: 00007ffd6e3c3fc8 [ 448.437788][T16434] [ 448.666196][T16442] xt_hashlimit: size too large, truncated to 1048576 [ 448.996429][T16461] netlink: 'syz.3.2813': attribute type 33 has an invalid length. [ 449.006870][T16461] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2813'. [ 449.333599][T16461] batadv0: left allmulticast mode [ 449.339543][T16461] batadv0: left promiscuous mode [ 449.355836][T16471] netlink: 'syz.2.2815': attribute type 11 has an invalid length. [ 449.414913][ T7403] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.428785][ T7403] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.437402][ T7403] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.446050][ T7403] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.665456][T16488] FAULT_INJECTION: forcing a failure. [ 449.665456][T16488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.703788][T16488] CPU: 1 UID: 0 PID: 16488 Comm: syz.0.2820 Not tainted syzkaller #0 PREEMPT(full) [ 449.703819][T16488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 449.703832][T16488] Call Trace: [ 449.703841][T16488] [ 449.703849][T16488] dump_stack_lvl+0xe8/0x150 [ 449.703884][T16488] should_fail_ex+0x412/0x560 [ 449.703916][T16488] _copy_from_user+0x2d/0xb0 [ 449.703949][T16488] bpf_test_init+0xd8/0x150 [ 449.703981][T16488] bpf_prog_test_run_xdp+0x529/0x1160 [ 449.704027][T16488] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 449.704060][T16488] ? __fget_files+0x2a/0x420 [ 449.704104][T16488] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 449.704133][T16488] bpf_prog_test_run+0x2c7/0x340 [ 449.704159][T16488] __sys_bpf+0x643/0x950 [ 449.704193][T16488] ? __pfx___sys_bpf+0x10/0x10 [ 449.704242][T16488] ? ksys_write+0x242/0x270 [ 449.704267][T16488] ? __pfx_ksys_write+0x10/0x10 [ 449.704299][T16488] __x64_sys_bpf+0x7c/0x90 [ 449.704335][T16488] do_syscall_64+0x14d/0xf80 [ 449.704364][T16488] ? trace_irq_disable+0x3b/0x150 [ 449.704391][T16488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.704412][T16488] ? clear_bhb_loop+0x40/0x90 [ 449.704437][T16488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.704458][T16488] RIP: 0033:0x7fcc6679c799 [ 449.704478][T16488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.704497][T16488] RSP: 002b:00007fcc676ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 449.704520][T16488] RAX: ffffffffffffffda RBX: 00007fcc66a15fa0 RCX: 00007fcc6679c799 [ 449.704535][T16488] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 449.704549][T16488] RBP: 00007fcc676ec090 R08: 0000000000000000 R09: 0000000000000000 [ 449.704561][T16488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.704573][T16488] R13: 00007fcc66a16038 R14: 00007fcc66a15fa0 R15: 00007ffd6e3c3fc8 [ 449.704604][T16488] [ 450.121446][T16497] syzkaller0: entered promiscuous mode [ 450.127031][T16497] syzkaller0: entered allmulticast mode [ 450.190861][T16504] lo speed is unknown, defaulting to 1000 [ 450.223091][T16499] ipt_ECN: cannot use operation on non-tcp rule [ 450.246054][T16499] __nla_validate_parse: 1 callbacks suppressed [ 450.246073][T16499] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2825'. [ 451.375997][T16524] netlink: 'syz.4.2831': attribute type 1 has an invalid length. [ 451.776149][T16504] gre0 speed is unknown, defaulting to 1000 [ 451.781064][T16519] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2829'. [ 451.899088][T16524] bond10: entered promiscuous mode [ 451.919344][T16524] 8021q: adding VLAN 0 to HW filter on device bond10 [ 452.498754][T16547] FAULT_INJECTION: forcing a failure. [ 452.498754][T16547] name failslab, interval 1, probability 0, space 0, times 0 [ 452.523868][T16547] CPU: 1 UID: 0 PID: 16547 Comm: syz.1.2837 Not tainted syzkaller #0 PREEMPT(full) [ 452.523901][T16547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 452.523912][T16547] Call Trace: [ 452.523920][T16547] [ 452.523928][T16547] dump_stack_lvl+0xe8/0x150 [ 452.523962][T16547] should_fail_ex+0x412/0x560 [ 452.524001][T16547] should_failslab+0xa8/0x100 [ 452.524027][T16547] __kvmalloc_node_noprof+0x178/0x8a0 [ 452.524049][T16547] ? bpf_test_run_xdp_live+0x1f2/0x1cf0 [ 452.524087][T16547] bpf_test_run_xdp_live+0x1f2/0x1cf0 [ 452.524121][T16547] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 452.524161][T16547] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 452.524195][T16547] ? __pfx_autoremove_wake_function+0x10/0x10 [ 452.524220][T16547] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 452.524268][T16547] ? 0xffffffffa02019f8 [ 452.524286][T16547] ? 0xffffffffa0201a48 [ 452.524332][T16547] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 452.524372][T16547] ? _copy_from_user+0x94/0xb0 [ 452.524403][T16547] ? bpf_test_init+0x113/0x150 [ 452.524427][T16547] ? xdp_convert_md_to_buff+0x5b/0x330 [ 452.524457][T16547] bpf_prog_test_run_xdp+0x81c/0x1160 [ 452.524502][T16547] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 452.524535][T16547] ? __fget_files+0x2a/0x420 [ 452.524570][T16547] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 452.524600][T16547] bpf_prog_test_run+0x2c7/0x340 [ 452.524625][T16547] __sys_bpf+0x643/0x950 [ 452.524658][T16547] ? __pfx___sys_bpf+0x10/0x10 [ 452.524716][T16547] ? rcu_is_watching+0x15/0xb0 [ 452.524753][T16547] __x64_sys_bpf+0x7c/0x90 [ 452.524782][T16547] do_syscall_64+0x14d/0xf80 [ 452.524810][T16547] ? trace_irq_disable+0x3b/0x150 [ 452.524838][T16547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.524860][T16547] ? clear_bhb_loop+0x40/0x90 [ 452.524886][T16547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.524906][T16547] RIP: 0033:0x7f8a0259c799 [ 452.524925][T16547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.524944][T16547] RSP: 002b:00007f8a03530028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 452.524967][T16547] RAX: ffffffffffffffda RBX: 00007f8a02815fa0 RCX: 00007f8a0259c799 [ 452.524981][T16547] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 452.525002][T16547] RBP: 00007f8a03530090 R08: 0000000000000000 R09: 0000000000000000 [ 452.525015][T16547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.525026][T16547] R13: 00007f8a02816038 R14: 00007f8a02815fa0 R15: 00007ffe45ebfde8 [ 452.525061][T16547] [ 452.992244][T16552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2839'. [ 453.161929][T16560] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2842'. [ 453.557149][T16576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2847'. [ 453.616680][T16576] hsr_slave_1 (unregistering): left promiscuous mode [ 453.664312][T16583] xt_hashlimit: size too large, truncated to 1048576 [ 453.712079][T16584] netlink: 'syz.1.2849': attribute type 15 has an invalid length. [ 454.028137][T16591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2851'. [ 454.045516][T16597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2853'. [ 454.071551][T16591] ip6tnl5: entered allmulticast mode [ 454.154770][T16595] syzkaller1: entered promiscuous mode [ 454.266546][T16608] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2854'. [ 454.551248][T16616] digital: digital_start_poll: Unknown protocol [ 455.084104][T16646] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 455.159471][T16650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2867'. [ 455.172903][T16650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2867'. [ 455.337858][T16659] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2871'. [ 455.352173][T16660] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2871'. [ 455.364207][T16659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2871'. [ 455.376312][T16659] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2871'. [ 455.385628][T16662] netlink: 'syz.2.2872': attribute type 10 has an invalid length. [ 455.395193][T16659] netlink: 540 bytes leftover after parsing attributes in process `syz.3.2871'. [ 455.419231][T16662] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.440486][T16662] bond0: (slave team0): Enslaving as an active interface with a down link [ 456.009716][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 456.021878][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 456.031530][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 456.044012][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 456.420152][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 456.479276][T16692] lo speed is unknown, defaulting to 1000 [ 456.487719][T16692] gre0 speed is unknown, defaulting to 1000 [ 456.621718][T16705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2883'. [ 456.716326][T16707] netlink: 'syz.0.2885': attribute type 40 has an invalid length. [ 456.728220][ T5824] `: Port device syz_tun removed [ 456.908966][T16712] lo speed is unknown, defaulting to 1000 [ 457.002442][T16712] gre0 speed is unknown, defaulting to 1000 [ 457.298029][T16692] chnl_net:caif_netlink_parms(): no params data found [ 457.470292][T16736] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2892'. [ 457.555671][T16692] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.563336][T16692] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.579029][T16692] bridge_slave_0: entered allmulticast mode [ 457.587468][T16692] bridge_slave_0: entered promiscuous mode [ 457.598105][T16692] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.605871][T16692] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.625831][T16692] bridge_slave_1: entered allmulticast mode [ 457.636312][T16747] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2894'. [ 457.654488][T16692] bridge_slave_1: entered promiscuous mode [ 457.887014][T16755] netlink: 'syz.2.2897': attribute type 1 has an invalid length. [ 457.910717][T16692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.928099][T16755] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 457.951597][T16692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.021038][T16751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2896'. [ 458.238296][T16778] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2902'. [ 458.346487][T16692] team0: Port device team_slave_0 added [ 458.366056][T16753] lo speed is unknown, defaulting to 1000 [ 458.396161][T16753] gre0 speed is unknown, defaulting to 1000 [ 458.467380][T16692] team0: Port device team_slave_1 added [ 458.529581][ T5840] Bluetooth: hci5: command tx timeout [ 458.536750][T16776] lo speed is unknown, defaulting to 1000 [ 458.614122][T16692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.621442][T16692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.648499][T16692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.663808][T16692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.673629][T16692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.700167][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 458.710657][T16692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.857738][T16776] gre0 speed is unknown, defaulting to 1000 [ 458.917661][T16692] hsr_slave_0: entered promiscuous mode [ 458.948075][T16692] hsr_slave_1: entered promiscuous mode [ 460.066604][T16816] netlink: 'syz.4.2911': attribute type 1 has an invalid length. [ 460.520771][T16821] syzkaller0: entered promiscuous mode [ 460.539000][T16821] syzkaller0: entered allmulticast mode [ 460.609423][ T5840] Bluetooth: hci5: command tx timeout [ 460.865487][T16692] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 460.904539][T16692] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 460.928562][T16692] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 460.962934][T16692] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 461.076454][T16847] FAULT_INJECTION: forcing a failure. [ 461.076454][T16847] name failslab, interval 1, probability 0, space 0, times 0 [ 461.113676][T16847] CPU: 0 UID: 0 PID: 16847 Comm: syz.3.2917 Not tainted syzkaller #0 PREEMPT(full) [ 461.113706][T16847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 461.113718][T16847] Call Trace: [ 461.113727][T16847] [ 461.113736][T16847] dump_stack_lvl+0xe8/0x150 [ 461.113770][T16847] should_fail_ex+0x412/0x560 [ 461.113813][T16847] should_failslab+0xa8/0x100 [ 461.113842][T16847] __kvmalloc_node_noprof+0x178/0x8a0 [ 461.113867][T16847] ? page_pool_create_percpu+0x2dd/0xb80 [ 461.113891][T16847] ? page_pool_create_percpu+0xaf/0xb80 [ 461.113919][T16847] page_pool_create_percpu+0x2dd/0xb80 [ 461.113941][T16847] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 461.113970][T16847] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 461.114006][T16847] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 461.114046][T16847] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 461.114078][T16847] ? __pfx_autoremove_wake_function+0x10/0x10 [ 461.114105][T16847] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 461.114156][T16847] ? 0xffffffffa02019ec [ 461.114204][T16847] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 461.114245][T16847] ? _copy_from_user+0x94/0xb0 [ 461.114275][T16847] ? bpf_test_init+0x113/0x150 [ 461.114300][T16847] ? xdp_convert_md_to_buff+0x5b/0x330 [ 461.114330][T16847] bpf_prog_test_run_xdp+0x81c/0x1160 [ 461.114375][T16847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 461.114408][T16847] ? __fget_files+0x2a/0x420 [ 461.114443][T16847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 461.114472][T16847] bpf_prog_test_run+0x2c7/0x340 [ 461.114497][T16847] __sys_bpf+0x643/0x950 [ 461.114530][T16847] ? __pfx___sys_bpf+0x10/0x10 [ 461.114577][T16847] ? ksys_write+0x242/0x270 [ 461.114601][T16847] ? __pfx_ksys_write+0x10/0x10 [ 461.114632][T16847] __x64_sys_bpf+0x7c/0x90 [ 461.114658][T16847] do_syscall_64+0x14d/0xf80 [ 461.114685][T16847] ? trace_irq_disable+0x3b/0x150 [ 461.114711][T16847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.114731][T16847] ? clear_bhb_loop+0x40/0x90 [ 461.114756][T16847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.114775][T16847] RIP: 0033:0x7f007619c799 [ 461.114803][T16847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.114821][T16847] RSP: 002b:00007f00743f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 461.114843][T16847] RAX: ffffffffffffffda RBX: 00007f0076415fa0 RCX: 00007f007619c799 [ 461.114858][T16847] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 461.114870][T16847] RBP: 00007f00743f6090 R08: 0000000000000000 R09: 0000000000000000 [ 461.114882][T16847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 461.114894][T16847] R13: 00007f0076416038 R14: 00007f0076415fa0 R15: 00007ffc88e6b108 [ 461.114924][T16847] [ 461.114932][T16847] page_pool_create_percpu() gave up with errno -12 [ 461.169706][T16692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.425192][T16849] __nla_validate_parse: 3 callbacks suppressed [ 461.425213][T16849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2918'. [ 461.438396][T16692] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.554931][T15500] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.562325][T15500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.577601][T16857] netlink: 732 bytes leftover after parsing attributes in process `syz.0.2921'. [ 461.597288][T15500] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.604743][T15500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.617317][T16857] netlink: 732 bytes leftover after parsing attributes in process `syz.0.2921'. [ 461.732069][T16860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2920'. [ 462.022268][T16876] lo speed is unknown, defaulting to 1000 [ 462.052534][T16871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2925'. [ 462.073447][T16876] gre0 speed is unknown, defaulting to 1000 [ 462.487888][T16692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.679023][T16692] veth0_vlan: entered promiscuous mode [ 462.688990][ T5840] Bluetooth: hci5: command tx timeout [ 462.727476][T16692] veth1_vlan: entered promiscuous mode [ 462.820841][T16692] veth0_macvtap: entered promiscuous mode [ 462.867753][T16692] veth1_macvtap: entered promiscuous mode [ 462.957052][T16692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.042286][T16692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.108962][T15500] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.149124][T15500] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.157981][T15500] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.273587][T15500] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.531626][T16909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2930'. [ 463.551453][T16910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2930'. [ 463.638797][T16910] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2930'. [ 464.342288][T16921] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2931'. [ 464.437756][T16920] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.2931'. [ 464.539186][T15504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.568324][T15504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.727108][T16924] lo speed is unknown, defaulting to 1000 [ 464.747618][T15498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.769094][ T5840] Bluetooth: hci5: command tx timeout [ 464.779041][T15498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.790558][T16924] gre0 speed is unknown, defaulting to 1000 [ 464.904559][T16931] netlink: 'syz.0.2934': attribute type 62 has an invalid length. [ 465.019248][T16925] ip6tnl4: entered allmulticast mode [ 465.029913][T16933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.430847][T16948] netlink: 'syz.0.2939': attribute type 4 has an invalid length. [ 465.496354][T16951] netlink: 'syz.0.2939': attribute type 4 has an invalid length. [ 465.538685][ T5896] lo speed is unknown, defaulting to 1000 [ 465.549183][ T5896] syz2: Port: 1 Link DOWN [ 465.605818][T16953] netlink: 'syz.1.2941': attribute type 3 has an invalid length. [ 466.123787][T16984] openvswitch: netlink: Missing valid actions attribute. [ 466.132074][T16984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.220280][T16990] netlink: 'syz.1.2951': attribute type 10 has an invalid length. [ 466.536011][T17001] __nla_validate_parse: 4 callbacks suppressed [ 466.536035][T17001] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2955'. [ 466.699446][T17012] netlink: 'syz.3.2956': attribute type 10 has an invalid length. [ 466.701984][T17010] netlink: 'syz.3.2956': attribute type 10 has an invalid length. [ 466.729184][T17009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2956'. [ 466.954047][T17023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2961'. [ 466.996385][T17023] netlink: 'syz.0.2961': attribute type 89 has an invalid length. [ 467.274314][T17047] pim6reg1: entered promiscuous mode [ 467.280923][T17047] pim6reg1: entered allmulticast mode [ 467.439628][T17052] openvswitch: netlink: Missing valid actions attribute. [ 467.463464][T17052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.683946][T17061] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2974'. [ 467.906398][T17073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2978'. [ 467.961423][T17081] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2978'. [ 467.996474][T17081] vlan2: entered allmulticast mode [ 467.996587][T17087] netlink: 'syz.3.2976': attribute type 8 has an invalid length. [ 468.004048][T17081] gretap0: entered allmulticast mode [ 468.016652][T17087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2976'. [ 468.160691][T17101] netlink: 'syz.4.2982': attribute type 4 has an invalid length. [ 470.793999][T17068] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 471.020854][T17112] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2987'. [ 471.069982][T17112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2987'. [ 471.131922][T17121] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2990'. [ 471.465772][T17141] syzkaller0: entered promiscuous mode [ 471.485280][T17141] syzkaller0: entered allmulticast mode [ 471.513377][T17148] netlink: 'syz.3.2996': attribute type 2 has an invalid length. [ 471.572594][T17138] 8021q: VLANs not supported on ip_vti0 [ 471.601084][T17143] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2994'. [ 471.608446][T17148] hmac(sha224: entered promiscuous mode [ 471.627195][T17151] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 471.813265][T17158] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2998'. [ 471.899872][T17167] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2998'. [ 471.900180][T17168] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3000'. [ 471.921497][T17169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2999'. [ 471.947348][T17168] ip6gre1: entered promiscuous mode [ 471.978441][T17168] ip6gre1: entered allmulticast mode [ 472.054660][T17175] netlink: 292 bytes leftover after parsing attributes in process `syz.2.3002'. [ 472.097707][T17177] netlink: 292 bytes leftover after parsing attributes in process `syz.4.3003'. [ 472.304715][T17185] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.3006'. [ 472.526100][T17185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.533405][ T7403] bond0: (slave bond_slave_0): interface is now down [ 472.545515][ T7403] bond0: (slave bond_slave_1): interface is now down [ 472.570392][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 472.580747][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 472.592240][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 472.606855][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 472.628998][T15500] bond0: (slave bond_slave_0): interface is now down [ 472.636398][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 472.644951][T15500] bond0: (slave bond_slave_1): interface is now down [ 472.668896][ T7409] bond0: (slave bond_slave_0): interface is now down [ 472.675797][ T7409] bond0: (slave bond_slave_1): interface is now down [ 472.709627][ T7409] bond0: (slave bond_slave_0): interface is now down [ 472.716536][ T7409] bond0: (slave bond_slave_1): interface is now down [ 472.739421][ T7409] bond0: (slave bond_slave_0): interface is now down [ 472.746282][T17185] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 472.757294][ T7409] bond0: (slave bond_slave_1): interface is now down [ 472.800286][ T7403] bond0: (slave bond_slave_0): interface is now down [ 472.820328][ T7403] bond0: (slave bond_slave_1): interface is now down [ 472.848842][T15496] bond0: (slave bond_slave_0): interface is now down [ 472.855922][T15496] bond0: (slave bond_slave_1): interface is now down [ 472.889166][ T7403] bond0: (slave bond_slave_0): interface is now down [ 472.906834][ T7403] bond0: (slave bond_slave_1): interface is now down [ 472.947855][ T7403] bond0: (slave bond_slave_0): interface is now down [ 472.962688][ T7403] bond0: (slave bond_slave_1): interface is now down [ 473.005856][ T7403] bond0: now running without any active interface! [ 473.071959][T17196] lo speed is unknown, defaulting to 1000 [ 473.115501][T17196] gre0 speed is unknown, defaulting to 1000 [ 473.323931][T17215] pim6reg: entered allmulticast mode [ 473.359285][T17222] batadv_slave_0: entered promiscuous mode [ 473.365278][T17222] batadv_slave_0: entered allmulticast mode [ 473.393276][T17222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.725863][T17227] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.843333][T17227] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.926960][T17227] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.952839][T17235] gretap0: entered promiscuous mode [ 473.958359][T17235] macsec1: entered allmulticast mode [ 473.979865][T17235] gretap0: entered allmulticast mode [ 473.987070][T17235] gretap0: left allmulticast mode [ 474.008979][T17235] gretap0: left promiscuous mode [ 474.080643][T17227] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.212626][ T7403] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.257161][T15496] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.284551][T15496] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.325343][T15500] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.334334][T17196] chnl_net:caif_netlink_parms(): no params data found [ 474.489218][T17196] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.496669][T17196] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.504561][T17196] bridge_slave_0: entered allmulticast mode [ 474.514204][T17196] bridge_slave_0: entered promiscuous mode [ 474.526821][T17196] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.536883][T17196] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.544394][T17196] bridge_slave_1: entered allmulticast mode [ 474.554538][T17196] bridge_slave_1: entered promiscuous mode [ 474.604567][T17196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.619873][T17196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.667520][T17252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3025'. [ 474.690216][ T5828] Bluetooth: hci2: command tx timeout [ 474.740742][T17196] team0: Port device team_slave_0 added [ 474.750730][T17256] IPVS: set_ctl: invalid protocol: 118 172.20.20.170:20001 [ 474.763620][T17249] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3024'. [ 474.801058][T17196] team0: Port device team_slave_1 added [ 474.897956][T17263] netlink: 'syz.2.3028': attribute type 2 has an invalid length. [ 474.913832][T17196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.928065][T17196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.974149][T17196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.988777][T17196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.995753][T17196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.025914][T17196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.162772][T17275] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 475.292596][T17269] netlink: 'syz.4.3030': attribute type 13 has an invalid length. [ 475.370883][T17289] netlink: 'syz.2.3036': attribute type 1 has an invalid length. [ 475.499943][ T9750] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 475.510636][T17196] hsr_slave_0: entered promiscuous mode [ 475.517599][T17196] hsr_slave_1: entered promiscuous mode [ 475.529200][ T7403] bond8: (slave ip6gretap1): link status up again after 0 ms [ 475.552797][T17196] debugfs: 'hsr0' already exists in 'hsr' [ 475.558797][T15500] bond8: (slave ip6gretap1): link status up again after 0 ms [ 475.578940][ T7403] bond8: (slave ip6gretap1): link status up again after 0 ms [ 475.588742][T17196] Cannot create hsr debugfs directory [ 475.600715][T15498] bond8: (slave ip6gretap1): link status up again after 0 ms [ 475.624998][T15496] bond8: (slave ip6gretap1): link status up again after 0 ms [ 475.659137][T15496] bond8: (slave ip6gretap1): link status up again after 0 ms [ 475.676092][T17296] syzkaller1: entered promiscuous mode [ 475.682310][T17296] syzkaller1: entered allmulticast mode [ 475.689179][T15498] bond8: (slave ip6gretap1): link status up again after 0 ms [ 475.718983][T15498] bond8: (slave ip6gretap1): link status up again after 0 ms [ 476.104380][T17196] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.209362][ T9749] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 476.239554][T17196] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.362224][T17196] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.454091][T17196] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.769105][ T5828] Bluetooth: hci2: command tx timeout [ 476.844181][T17196] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 476.871480][T17196] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 476.923153][T17196] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 476.959475][T17196] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 477.019685][T17362] tap0: tun_chr_ioctl cmd 1074025692 [ 477.031383][T17359] __nla_validate_parse: 5 callbacks suppressed [ 477.031405][T17359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3051'. [ 477.050317][T17359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3051'. [ 477.267451][T17196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.331291][T17196] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.372062][T15498] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.379340][T15498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.463508][T15498] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.470770][T15498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.779669][T15500] net_ratelimit: 428 callbacks suppressed [ 477.779693][T15500] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 477.940629][T15500] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 478.069343][T15504] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 478.086227][T17424] netlink: 'syz.2.3066': attribute type 2 has an invalid length. [ 478.113071][T17424] netlink: 'syz.2.3066': attribute type 2 has an invalid length. [ 478.178851][T15500] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 478.209784][T17433] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3069'. [ 478.287671][T17196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.339034][T15500] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 478.435829][T17196] veth0_vlan: entered promiscuous mode [ 478.458253][T17196] veth1_vlan: entered promiscuous mode [ 478.550856][T17196] veth0_macvtap: entered promiscuous mode [ 478.595409][T17196] veth1_macvtap: entered promiscuous mode [ 478.702425][T17196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.728774][T15500] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 478.758906][T17467] netlink: 'syz.2.3078': attribute type 1 has an invalid length. [ 478.763372][T17196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.850042][ T5828] Bluetooth: hci2: command tx timeout [ 478.925993][T17467] bond8: entered promiscuous mode [ 478.952993][T17467] 8021q: adding VLAN 0 to HW filter on device bond8 [ 479.630833][T15500] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.640959][T15500] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.707267][T17476] bond8: (slave bridge3): making interface the new active one [ 479.738768][T17476] bridge3: entered promiscuous mode [ 479.745625][T17476] bond8: (slave bridge3): Enslaving as an active interface with an up link [ 479.776173][T15504] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 479.838545][T17495] syzkaller0: entered promiscuous mode [ 479.865019][T17495] syzkaller0: entered allmulticast mode [ 479.936925][T17510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3086'. [ 479.973940][T15500] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.036805][T17510] veth3: entered promiscuous mode [ 480.044021][T15500] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.930794][ T5828] Bluetooth: hci2: command tx timeout [ 481.805721][T17524] netlink: 'syz.1.3089': attribute type 4 has an invalid length. [ 481.829004][T15491] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 481.908946][T15500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.916908][T15500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.989439][T17540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3091'. [ 482.217320][T15504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.225542][T15500] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 482.268848][T15504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.354019][ T7409] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 482.430835][T17558] ipvlan2: entered promiscuous mode [ 482.483214][T17564] netlink: 'syz.4.3099': attribute type 1 has an invalid length. [ 482.534587][T17564] 8021q: adding VLAN 0 to HW filter on device bond11 [ 482.604692][T17572] netlink: 'syz.1.3098': attribute type 1 has an invalid length. [ 482.878750][ T7409] net_ratelimit: 3 callbacks suppressed [ 482.878774][ T7409] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 482.941868][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 482.956283][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 482.970433][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 482.983476][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 482.992110][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 483.149167][T15496] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 483.290010][T17581] lo speed is unknown, defaulting to 1000 [ 483.308955][T15503] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 483.336552][T17581] gre0 speed is unknown, defaulting to 1000 [ 483.376859][T17591] syz.1.3105: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 483.423586][T17591] CPU: 1 UID: 0 PID: 17591 Comm: syz.1.3105 Not tainted syzkaller #0 PREEMPT(full) [ 483.423619][T17591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 483.423632][T17591] Call Trace: [ 483.423641][T17591] [ 483.423650][T17591] dump_stack_lvl+0xe8/0x150 [ 483.423686][T17591] warn_alloc+0x249/0x340 [ 483.423713][T17591] ? stack_trace_save+0xa9/0x100 [ 483.423738][T17591] ? __pfx_warn_alloc+0x10/0x10 [ 483.423770][T17591] ? kasan_save_track+0x4f/0x80 [ 483.423798][T17591] ? kasan_save_track+0x3e/0x80 [ 483.423818][T17591] ? __kasan_kmalloc+0x93/0xb0 [ 483.423841][T17591] ? __kmalloc_cache_noprof+0x31c/0x660 [ 483.423862][T17591] ? xskq_create+0x56/0x170 [ 483.423889][T17591] ? xsk_setsockopt+0x54c/0x990 [ 483.423912][T17591] ? do_sock_setsockopt+0x17c/0x1b0 [ 483.423942][T17591] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 483.423972][T17591] ? do_syscall_64+0x14d/0xf80 [ 483.424006][T17591] __vmalloc_node_range_noprof+0x132/0x1730 [ 483.424066][T17591] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 483.424098][T17591] ? __kasan_kmalloc+0x93/0xb0 [ 483.424129][T17591] vmalloc_user_noprof+0xad/0xe0 [ 483.424151][T17591] ? xskq_create+0xbf/0x170 [ 483.424180][T17591] xskq_create+0xbf/0x170 [ 483.424211][T17591] xsk_init_queue+0x8a/0xe0 [ 483.424241][T17591] xsk_setsockopt+0x54c/0x990 [ 483.424270][T17591] ? __pfx_xsk_setsockopt+0x10/0x10 [ 483.424296][T17591] ? __pfx_aa_sk_perm+0x10/0x10 [ 483.424326][T17591] ? aa_sock_opt_perm+0xff/0x1a0 [ 483.424357][T17591] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 483.424379][T17591] ? __pfx_xsk_setsockopt+0x10/0x10 [ 483.424407][T17591] do_sock_setsockopt+0x17c/0x1b0 [ 483.424444][T17591] __x64_sys_setsockopt+0x13d/0x1b0 [ 483.424481][T17591] do_syscall_64+0x14d/0xf80 [ 483.424510][T17591] ? trace_irq_disable+0x3b/0x150 [ 483.424547][T17591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.424568][T17591] ? clear_bhb_loop+0x40/0x90 [ 483.424594][T17591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.424615][T17591] RIP: 0033:0x7f7afc39c799 [ 483.424635][T17591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.424653][T17591] RSP: 002b:00007f7afd2b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 483.424677][T17591] RAX: ffffffffffffffda RBX: 00007f7afc615fa0 RCX: 00007f7afc39c799 [ 483.424692][T17591] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 483.424705][T17591] RBP: 00007f7afc432c99 R08: 0000000000000004 R09: 0000000000000000 [ 483.424718][T17591] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.424731][T17591] R13: 00007f7afc616038 R14: 00007f7afc615fa0 R15: 00007ffc5a2802b8 [ 483.424765][T17591] [ 483.424865][T17591] Mem-Info: [ 483.444980][ T7409] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 483.526889][T17597] netlink: 34 bytes leftover after parsing attributes in process `syz.1.3105'. [ 483.533001][T17591] active_anon:6029 inactive_anon:0 isolated_anon:0 [ 483.533001][T17591] active_file:3577 inactive_file:40117 isolated_file:0 [ 483.533001][T17591] unevictable:3162 dirty:220 writeback:0 [ 483.533001][T17591] slab_reclaimable:13385 slab_unreclaimable:135624 [ 483.533001][T17591] mapped:31965 shmem:3787 pagetables:1157 [ 483.533001][T17591] sec_pagetables:0 bounce:0 [ 483.533001][T17591] kernel_misc_reclaimable:0 [ 483.533001][T17591] free:1279975 free_pcp:13190 free_cma:0 [ 483.548936][T15503] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 483.551100][T17591] Node 0 active_anon:24116kB inactive_anon:0kB active_file:14308kB inactive_file:160256kB unevictable:11412kB isolated(anon):0kB isolated(file):0kB mapped:128160kB dirty:880kB writeback:0kB shmem:13912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15804kB pagetables:4496kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 483.867469][T17597] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3105'. [ 483.922138][T17591] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 483.969859][T15491] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 484.048117][T17591] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 484.080817][T17591] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 484.086890][T17591] Node 0 DMA32 free:1159084kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25352kB inactive_anon:0kB active_file:14308kB inactive_file:160264kB unevictable:13824kB writepending:892kB zspages:0kB present:3129332kB managed:2552572kB mlocked:12288kB bounce:0kB free_pcp:45580kB local_pcp:17084kB free_cma:0kB [ 484.123948][T15500] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 484.163487][T17591] lowmem_reserve[]: 0 0 0 0 0 [ 484.211418][T17591] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 484.259339][T15503] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 484.309134][T17591] lowmem_reserve[]: 0 0 0 0 0 [ 484.314117][T17591] Node 1 Normal free:3943628kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:4028kB local_pcp:4028kB free_cma:0kB [ 484.419949][ T7409] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 484.427898][T17591] lowmem_reserve[]: 0 0 0 0 0 [ 484.458977][T17591] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 484.508763][T17591] Node 0 DMA32: 4401*4kB (UM) 4097*8kB (UM) 1805*16kB (UM) 372*32kB (UME) 254*64kB (UM) 172*128kB (UM) 124*256kB (UME) 94*512kB (U) 50*1024kB (U) 33*2048kB (UE) 205*4096kB (UM) = 1167772kB [ 484.574724][T17591] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 484.647512][T17591] Node 1 Normal: 1*4kB (M) 1*8kB (M) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 2*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 962*4096kB (M) = 3943628kB [ 484.665164][T17591] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 484.676032][T17591] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 484.679711][ T7409] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 484.686378][T17591] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 484.703733][T17591] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 484.713573][T17591] 45090 total pagecache pages [ 484.718279][T17591] 0 pages in swap cache [ 484.724410][T17591] Free swap = 124996kB [ 484.728912][T17591] Total swap = 124996kB [ 484.733095][T17591] 2097051 pages RAM [ 484.736913][T17591] 0 pages HighMem/MovableOnly [ 484.742292][T17591] 427072 pages reserved [ 484.746510][T17591] 0 pages cma reserved [ 484.918932][T17581] chnl_net:caif_netlink_parms(): no params data found [ 485.089588][ T5840] Bluetooth: hci4: command tx timeout [ 485.147966][T17639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3115'. [ 485.219482][T17581] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.226802][T17581] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.242004][T17581] bridge_slave_0: entered allmulticast mode [ 485.268513][T17581] bridge_slave_0: entered promiscuous mode [ 485.294289][T17639] bond0: Unable to set down delay as MII monitoring is disabled [ 485.308443][T17581] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.335138][T17581] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.355806][T17581] bridge_slave_1: entered allmulticast mode [ 485.390391][T17653] netlink: 'syz.1.3119': attribute type 3 has an invalid length. [ 485.392172][T17581] bridge_slave_1: entered promiscuous mode [ 485.490912][T17655] lo speed is unknown, defaulting to 1000 [ 485.499134][T17655] gre0 speed is unknown, defaulting to 1000 [ 485.808150][T17662] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3122'. [ 485.858256][T17662] netlink: 'syz.1.3122': attribute type 5 has an invalid length. [ 485.875824][T17581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.895929][T17581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.075625][T17672] netlink: 428 bytes leftover after parsing attributes in process `syz.1.3122'. [ 486.092690][T17581] team0: Port device team_slave_0 added [ 486.150528][T17581] team0: Port device team_slave_1 added [ 486.247773][T17674] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3124'. [ 486.262675][T17581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.270029][T17672] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3122'. [ 486.278056][T17676] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3125'. [ 486.281216][T17581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.323679][T17676] netlink: 'syz.0.3125': attribute type 10 has an invalid length. [ 486.340983][T17581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.372462][T17581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.398658][T17581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.447616][T17581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.622674][T17676] team0: Device veth1_macvtap failed to register rx_handler [ 486.873952][T17581] hsr_slave_0: entered promiscuous mode [ 486.941297][T17581] hsr_slave_1: entered promiscuous mode [ 486.969450][T17581] debugfs: 'hsr0' already exists in 'hsr' [ 486.975242][T17581] Cannot create hsr debugfs directory [ 487.169420][ T5840] Bluetooth: hci4: command tx timeout [ 487.352964][T17711] lo speed is unknown, defaulting to 1000 [ 487.373643][T17711] gre0 speed is unknown, defaulting to 1000 [ 487.442103][T17717] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3136'. [ 487.489456][T17717] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3136'. [ 487.622434][T17581] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.811204][T17581] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.947766][T17581] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.988825][ T7409] net_ratelimit: 12 callbacks suppressed [ 487.988847][ T7409] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 488.093308][T17730] lo speed is unknown, defaulting to 1000 [ 488.129487][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 488.131338][T17581] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.196716][T17730] gre0 speed is unknown, defaulting to 1000 [ 488.428814][ T7409] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 488.600824][T17741] syzkaller0: entered promiscuous mode [ 488.609231][T17741] syzkaller0: entered allmulticast mode [ 488.697809][T17581] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 488.711142][T17581] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 488.734020][T17581] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 488.756174][T17581] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 489.248796][ T5840] Bluetooth: hci4: command tx timeout [ 489.513165][T15491] bond8 (unregistering): (slave bridge3): Releasing backup interface [ 489.521973][T15491] bridge3 (unregistering): left promiscuous mode [ 489.554986][T15491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.565266][T15491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.575385][T15491] bond0 (unregistering): (slave team0): Releasing backup interface [ 489.586359][T15491] bond0 (unregistering): Released all slaves [ 489.597875][T15491] bond1 (unregistering): Released all slaves [ 489.615318][T15491] bond2 (unregistering): Released all slaves [ 489.629687][T15491] bond3 (unregistering): Released all slaves [ 489.643604][T15491] bond4 (unregistering): Released all slaves [ 489.661468][T15491] bond5 (unregistering): (slave bond6): Releasing backup interface [ 489.677124][T15491] bond5 (unregistering): Released all slaves [ 489.691334][T15491] bond6 (unregistering): Released all slaves [ 489.706799][T15491] bond7 (unregistering): Released all slaves [ 489.725574][T15491] bond8 (unregistering): Released all slaves [ 489.803015][T17760] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 489.823228][T15500] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 489.891083][T15491] : left promiscuous mode [ 490.024037][T17776] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 490.071238][T15496] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 490.084714][T15491] tipc: Left network mode [ 490.168303][T17581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.216720][T17711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.227531][T17581] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.260044][T15500] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 490.302950][T15504] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.310308][T15504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.351310][T15504] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.358689][T15504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.699974][T15500] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 490.871800][T15504] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 491.118994][ T7403] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 491.154214][T17808] syzkaller1: entered promiscuous mode [ 491.176202][T17808] syzkaller1: entered allmulticast mode [ 491.221173][T17813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3162'. [ 491.336013][T17581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.344172][ T5840] Bluetooth: hci4: command tx timeout [ 491.592063][T17581] veth0_vlan: entered promiscuous mode [ 491.616806][T17826] netlink: 'syz.0.3164': attribute type 21 has an invalid length. [ 491.640443][T17826] IPv6: NLM_F_CREATE should be specified when creating new route [ 491.808292][T17581] veth1_vlan: entered promiscuous mode [ 491.877236][T17829] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3164'. [ 491.933787][T17826] syzkaller0: entered promiscuous mode [ 491.939473][T17826] syzkaller0: entered allmulticast mode [ 492.210267][T15491] hsr_slave_0: left promiscuous mode [ 492.216851][T15491] hsr_slave_1: left promiscuous mode [ 492.225362][T15491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.240882][T15491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.251745][T15491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.312557][T15491] pim6reg (unregistering): left allmulticast mode [ 492.684667][T15491] team0 (unregistering): Port device team_slave_1 removed [ 492.706271][T15491] team0 (unregistering): Port device team_slave_0 removed [ 494.577884][T17581] veth0_macvtap: entered promiscuous mode [ 494.657279][T17581] veth1_macvtap: entered promiscuous mode [ 494.668390][T17888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3181'. [ 494.732887][ T7403] net_ratelimit: 5 callbacks suppressed [ 494.732909][ T7403] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 494.745081][T17890] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3182'. [ 494.766760][T17581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.848299][T17581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.884395][T15500] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.898752][T15500] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.940096][ T7403] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 494.978904][T15500] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.046007][T15503] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.079140][T17897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.149999][T15504] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 495.204888][T17906] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3183'. [ 495.298742][ T7403] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 495.345970][ T7403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.355778][ T7403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.496418][T15491] IPVS: stop unused estimator thread 0... [ 495.514897][T17914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.516957][T15500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.539282][ T7403] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 495.545832][T15500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.690850][T15491] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 495.812521][T15496] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 495.931840][ T7403] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 496.029717][T17933] xt_l2tp: missing protocol rule (udp|l2tpip) [ 496.047724][T17933] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048) [ 496.337241][T17944] lo speed is unknown, defaulting to 1000 [ 496.372929][T17944] gre0 speed is unknown, defaulting to 1000 [ 496.464479][T17950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3202'. [ 496.509412][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 496.521634][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 496.532431][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 496.551120][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 496.564368][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 496.565190][T17953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3202'. [ 496.640725][T17955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3202'. [ 496.654890][T17950] team1: entered promiscuous mode [ 496.660665][T17955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3202'. [ 496.670791][T17950] team1: entered allmulticast mode [ 496.676614][T17950] 8021q: adding VLAN 0 to HW filter on device team1 [ 496.733410][T17953] team2: entered promiscuous mode [ 496.738771][T17953] team2: entered allmulticast mode [ 496.744559][T17953] 8021q: adding VLAN 0 to HW filter on device team2 [ 496.789961][ T7403] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 496.863732][ T7403] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 496.891868][T17951] lo speed is unknown, defaulting to 1000 [ 496.924152][T17951] gre0 speed is unknown, defaulting to 1000 [ 496.935029][ T7403] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 497.016998][ T7403] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 497.311429][T17961] syzkaller1: entered promiscuous mode [ 497.316981][T17961] syzkaller1: entered allmulticast mode [ 497.667172][ T7403] bond8 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 497.677153][ T7403] bond8 (unregistering): (slave ip6gretap1): Releasing backup interface [ 497.814564][ T7403] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 497.867628][ T7403] team0: Port device gtp0 removed [ 497.876725][ T7403] bond9 (unregistering): (slave geneve2): Releasing active interface [ 498.344036][ T7403] bond1 (unregistering): Released all slaves [ 498.357539][ T7403] bond2 (unregistering): Released all slaves [ 498.374141][ T7403] bond3 (unregistering): Released all slaves [ 498.376855][T17977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3207'. [ 498.393708][ T7403] bond4 (unregistering): Released all slaves [ 498.407683][ T7403] bond5 (unregistering): Released all slaves [ 498.425538][ T7403] bond0 (unregistering): Released all slaves [ 498.441633][ T7403] bond6 (unregistering): (slave veth5): Releasing active interface [ 498.456065][ T7403] bond6 (unregistering): Released all slaves [ 498.475869][ T7403] bond7 (unregistering): Released all slaves [ 498.495620][ T7403] bond8 (unregistering): Released all slaves [ 498.510359][ T7403] bond9 (unregistering): Released all slaves [ 498.523831][ T7403] bond10 (unregistering): Released all slaves [ 498.537634][ T7403] bond11 (unregistering): Released all slaves [ 498.609531][ T5840] Bluetooth: hci1: command tx timeout [ 498.613288][T17967] lo speed is unknown, defaulting to 1000 [ 498.724715][T17967] gre0 speed is unknown, defaulting to 1000 [ 498.724733][ T7403] ÃM¯”ÛÓó: left promiscuous mode [ 498.835025][ T7403] tipc: Disabling bearer [ 498.845289][ T7403] tipc: Left network mode [ 499.029633][T17985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3209'. [ 499.677171][T18016] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3217'. [ 499.840418][T18025] netlink: 'syz.2.3218': attribute type 10 has an invalid length. [ 499.858474][T17951] chnl_net:caif_netlink_parms(): no params data found [ 499.900362][T18019] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3216'. [ 499.987925][T18025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.043714][T18025] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 500.697070][ T5840] Bluetooth: hci1: command tx timeout [ 500.856841][T17951] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.920131][T17951] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.927434][T17951] bridge_slave_0: entered allmulticast mode [ 500.972863][T17951] bridge_slave_0: entered promiscuous mode [ 501.022362][T17951] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.042548][T17951] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.050045][T17951] bridge_slave_1: entered allmulticast mode [ 501.079772][T17951] bridge_slave_1: entered promiscuous mode [ 501.098181][T18036] lo speed is unknown, defaulting to 1000 [ 501.242301][T18036] gre0 speed is unknown, defaulting to 1000 [ 501.578286][ T1293] net_ratelimit: 12 callbacks suppressed [ 501.578311][ T1293] aoe: packet could not be sent on bridge0. consider increasing tx_queue_len [ 502.216437][T17951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.285843][T17951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.516930][T17951] team0: Port device team_slave_0 added [ 502.558499][T17951] team0: Port device team_slave_1 added [ 502.731051][T17951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.738145][T17951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.769884][ T5840] Bluetooth: hci1: command tx timeout [ 502.847656][T18082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3229'. [ 502.876931][T17951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.895359][T18076] tipc: Enabled bearer , priority 0 [ 502.915601][T18084] syzkaller0: entered promiscuous mode [ 502.942898][T18084] syzkaller0: entered allmulticast mode [ 503.241174][T18082] bond1: option broadcast_neighbor: invalid value (30) [ 503.282966][T18082] bond1 (unregistering): Released all slaves [ 503.405562][T17951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.421892][T17951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.460206][T17951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.545815][T18079] tipc: Resetting bearer [ 503.569963][T18089] syzkaller1: entered promiscuous mode [ 503.575506][T18089] syzkaller1: entered allmulticast mode [ 503.605924][T18074] tipc: Resetting bearer [ 503.650988][T18074] tipc: Disabling bearer [ 503.708135][ T7403] IPVS: stop unused estimator thread 0... [ 503.964674][T17951] hsr_slave_0: entered promiscuous mode [ 504.049232][T17951] hsr_slave_1: entered promiscuous mode [ 504.055831][T17951] debugfs: 'hsr0' already exists in 'hsr' [ 504.064577][T18108] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 504.091906][T17951] Cannot create hsr debugfs directory [ 504.119546][T18116] netlink: 'syz.1.3231': attribute type 20 has an invalid length. [ 504.157763][T18116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3231'. [ 504.271469][ T7403] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.277457][T18116] netlink: 'syz.1.3231': attribute type 20 has an invalid length. [ 504.280524][ T7403] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.328740][T18116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3231'. [ 504.385693][ T7403] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.397996][T18126] sctp: [Deprecated]: syz.3.3233 (pid 18126) Use of int in maxseg socket option. [ 504.397996][T18126] Use struct sctp_assoc_value instead [ 504.418990][ T7403] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.848809][ T5840] Bluetooth: hci1: command tx timeout [ 505.124987][T18151] lo speed is unknown, defaulting to 1000 [ 505.133310][T18151] gre0 speed is unknown, defaulting to 1000 [ 506.142778][T17951] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 506.503553][T17951] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 506.914321][T17951] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 506.979565][T17951] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 507.263982][T18209] netlink: 'syz.1.3246': attribute type 1 has an invalid length. [ 507.333131][T17951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.397082][T18218] netlink: 'syz.3.3248': attribute type 3 has an invalid length. [ 507.407965][T17951] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.453439][T15496] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.460708][T15496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.510404][ T7409] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.517701][ T7409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.062468][T18257] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.070910][T18257] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 508.221033][T18243] syzkaller0: entered promiscuous mode [ 508.412128][T17951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.605592][T18279] netlink: 'syz.1.3259': attribute type 1 has an invalid length. [ 508.762995][T18279] 8021q: adding VLAN 0 to HW filter on device bond1 [ 508.817029][T18285] bond1: (slave geneve3): making interface the new active one [ 508.827546][T18285] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 508.936380][T18293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3261'. [ 509.029985][T18300] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3262'. [ 509.401745][T18308] xfrm1: entered allmulticast mode [ 509.461159][T17951] veth0_vlan: entered promiscuous mode [ 509.496194][T17951] veth1_vlan: entered promiscuous mode [ 509.590619][T17951] veth0_macvtap: entered promiscuous mode [ 509.618096][T17951] veth1_macvtap: entered promiscuous mode [ 509.662601][T17951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.705009][T17951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.757502][ T7403] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.772528][ T7403] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.847925][ T7403] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.879855][ T7403] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.025330][T18339] geneve1: entered promiscuous mode [ 510.048170][T18339] macsec1: entered promiscuous mode [ 510.054108][T18339] macsec1: entered allmulticast mode [ 510.060229][T18339] geneve1: entered allmulticast mode [ 510.196898][ T7403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.240258][ T7403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.307546][T15502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.317450][T15502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.367196][T18351] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3271'. [ 510.425383][T18351] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3271'. [ 510.555591][T18358] lo speed is unknown, defaulting to 1000 [ 510.636041][T18358] gre0 speed is unknown, defaulting to 1000 [ 510.839006][T18377] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3278'. [ 511.038457][T18388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3278'. [ 511.231690][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 511.259285][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 511.271083][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 511.279517][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 511.287474][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 511.365244][T18395] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3280'. [ 511.447683][T18393] pim6reg: tun_chr_ioctl cmd 1074812117 [ 511.790126][T18390] lo speed is unknown, defaulting to 1000 [ 511.922165][T18390] gre0 speed is unknown, defaulting to 1000 [ 511.965621][T18408] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3281'. [ 512.234582][T18421] netlink: 'syz.0.3283': attribute type 10 has an invalid length. [ 512.315395][T18421] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 512.371710][T18421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3283'. [ 513.354750][T18465] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3295'. [ 513.424194][T15491] bond4 (unregistering): (slave ip6gretap2): Releasing active interface [ 513.491448][ T5828] Bluetooth: hci3: command tx timeout [ 513.585914][T15491] batman_adv: batadv0: Removing interface: gretap1 [ 513.815759][T15491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 513.828628][T15491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 513.838386][T15491] bond0 (unregistering): Released all slaves [ 513.849623][T15491] bond1 (unregistering): Released all slaves [ 513.864249][T15491] bond2 (unregistering): Released all slaves [ 513.877663][T15491] bond3 (unregistering): Released all slaves [ 513.895039][T15491] bond4 (unregistering): Released all slaves [ 513.911304][T15491] bond5 (unregistering): Released all slaves [ 513.933113][T15491] bond6 (unregistering): (slave veth7): Releasing active interface [ 513.944858][T15491] bond6 (unregistering): Released all slaves [ 513.958128][T15491] bond7 (unregistering): Released all slaves [ 513.976512][T15491] bond8 (unregistering): Released all slaves [ 514.138294][T18485] __nla_validate_parse: 1 callbacks suppressed [ 514.138315][T18485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3299'. [ 514.207246][T15491] hmac(sha224: left promiscuous mode [ 514.300234][T15491] tipc: Disabling bearer [ 514.316523][T15491] tipc: Left network mode [ 514.392795][T18390] chnl_net:caif_netlink_parms(): no params data found [ 514.497675][T15491] IPVS: stopping backup sync thread 12559 ... [ 514.693857][T18508] netlink: 'syz.2.3303': attribute type 1 has an invalid length. [ 514.763800][T18390] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.771578][T18390] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.782327][T18390] bridge_slave_0: entered allmulticast mode [ 514.790602][T18390] bridge_slave_0: entered promiscuous mode [ 514.799844][T18390] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.807349][T18390] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.814734][T18390] bridge_slave_1: entered allmulticast mode [ 514.823074][T18390] bridge_slave_1: entered promiscuous mode [ 515.056009][T18525] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3307'. [ 515.244296][T18537] netlink: 'syz.2.3309': attribute type 1 has an invalid length. [ 515.259373][T18390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.274617][T18537] netlink: 'syz.2.3309': attribute type 2 has an invalid length. [ 515.287540][T18390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.404197][T18549] netlink: 'syz.0.3311': attribute type 1 has an invalid length. [ 515.517580][T18549] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 515.568107][T18390] team0: Port device team_slave_0 added [ 515.583192][ T5828] Bluetooth: hci3: command tx timeout [ 515.682716][T18390] team0: Port device team_slave_1 added [ 515.769174][T18390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.778072][T18390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.819431][T18390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.846877][T18390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.854155][T18390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.882611][T18390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.132380][T18390] hsr_slave_0: entered promiscuous mode [ 516.141542][T18390] hsr_slave_1: entered promiscuous mode [ 516.148321][T18390] debugfs: 'hsr0' already exists in 'hsr' [ 516.154478][T18390] Cannot create hsr debugfs directory [ 516.962307][T18613] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 517.469614][T15491] hsr_slave_0: left promiscuous mode [ 517.492066][T15491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.523781][T18632] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3328'. [ 517.649819][ T5828] Bluetooth: hci3: command tx timeout [ 517.771580][T15491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.054802][T18624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3326'. [ 518.601809][T18656] netlink: 'syz.2.3335': attribute type 8 has an invalid length. [ 518.797177][T18660] netlink: 41 bytes leftover after parsing attributes in process `syz.1.3336'. [ 518.832122][T18660] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3336'. [ 518.969044][T18660] netlink: 41 bytes leftover after parsing attributes in process `syz.1.3336'. [ 519.059683][T18666] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3337'. [ 519.107860][T18664] lo speed is unknown, defaulting to 1000 [ 519.160888][T18664] gre0 speed is unknown, defaulting to 1000 [ 519.430297][T18675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3339'. [ 519.472725][T18675] n: the hash_elasticity option has been deprecated and is always 16 [ 519.535974][T18675] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 519.621558][T18682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3339'. [ 519.729835][ T5828] Bluetooth: hci3: command tx timeout [ 520.169561][T18390] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 520.323453][T18691] syzkaller0: entered promiscuous mode [ 520.339615][T18691] syzkaller0: entered allmulticast mode [ 520.353010][T18390] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 522.048673][ C0] ------------[ cut here ]------------ [ 522.058795][ C0] ODEBUG: free active (active state 0) object: ffff888076a47c90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560 [ 522.071823][ C0] WARNING: lib/debugobjects.c:632 at debug_check_no_obj_freed+0x405/0x550, CPU#0: swapper/0/0 [ 522.082151][ C0] Modules linked in: [ 522.086247][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 522.095309][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 522.105606][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 522.112064][ C0] Code: 89 44 24 20 e8 e7 2c 77 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 bb 27 8c 48 c7 c2 c0 c0 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 522.131995][ C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010246 [ 522.138113][ C0] RAX: ffffffff8a965980 RBX: ffffffff9a4e8a10 RCX: 0000000000000000 [ 522.146141][ C0] RDX: ffffffff8c27c0c0 RSI: ffffffff8c27bb40 RDI: ffffffff901bee60 [ 522.154158][ C0] RBP: ffffffff8bcf3ce0 R08: ffff888076a47c90 R09: ffffffff8bcf5000 [ 522.162350][ C0] R10: dffffc0000000000 R11: ffffffff81b1e6a0 R12: ffff888076a47e00 [ 522.170463][ C0] R13: ffffffff901bee60 R14: ffff888076a47000 R15: ffff888076a47c90 [ 522.178643][ C0] FS: 0000000000000000(0000) GS:ffff888125467000(0000) knlGS:0000000000000000 [ 522.188405][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 522.195093][ C0] CR2: 0000555563af54e8 CR3: 000000005385e000 CR4: 00000000003526f0 [ 522.203285][ C0] Call Trace: [ 522.206653][ C0] [ 522.209538][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 522.215207][ C0] kfree+0x13a/0x630 [ 522.219164][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 522.224311][ C0] rose_timer_expiry+0x4cb/0x600 [ 522.229301][ C0] ? call_timer_fn+0x178/0x640 [ 522.234105][ C0] call_timer_fn+0x192/0x640 [ 522.238741][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 522.244251][ C0] ? call_timer_fn+0xd4/0x640 [ 522.248988][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 522.254217][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 522.259491][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 522.264987][ C0] __run_timer_base+0x652/0x8b0 [ 522.269959][ C0] ? ktime_get+0x45/0x200 [ 522.274313][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 522.279761][ C0] ? sched_clock_cpu+0x74/0x440 [ 522.284650][ C0] run_timer_softirq+0xb7/0x170 [ 522.289578][ C0] handle_softirqs+0x22a/0x870 [ 522.294369][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 522.299194][ C0] __irq_exit_rcu+0x5f/0x150 [ 522.303810][ C0] irq_exit_rcu+0x9/0x30 [ 522.308054][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 522.313750][ C0] [ 522.316713][ C0] [ 522.319674][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 522.325677][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 522.331363][ C0] Code: fe 6e 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 b2 1a 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 522.351015][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000246 [ 522.357091][ C0] RAX: 00000000001ac44b RBX: ffffffff819a8c8d RCX: 0000000080000001 [ 522.365163][ C0] RDX: 0000000000000001 RSI: ffffffff8df209e8 RDI: ffffffff8c27b500 [ 522.373189][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b [ 522.381322][ C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff90112cb0 [ 522.389376][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 522.397385][ C0] ? do_idle+0x1bd/0x500 [ 522.401796][ C0] default_idle+0x9/0x20 [ 522.406358][ C0] default_idle_call+0x72/0xb0 [ 522.411170][ C0] do_idle+0x1bd/0x500 [ 522.415305][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 522.421534][ C0] ? __pfx_do_idle+0x10/0x10 [ 522.426434][ C0] cpu_startup_entry+0x43/0x60 [ 522.431255][ C0] rest_init+0x2de/0x300 [ 522.435524][ C0] start_kernel+0x385/0x3d0 [ 522.440089][ C0] x86_64_start_reservations+0x24/0x30 [ 522.445577][ C0] x86_64_start_kernel+0x143/0x1c0 [ 522.450830][ C0] common_startup_64+0x13e/0x147 [ 522.455799][ C0] [ 522.458883][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 522.466285][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 522.475262][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 522.485444][ C0] Call Trace: [ 522.488749][ C0] [ 522.491688][ C0] vpanic+0x56c/0xa60 [ 522.495674][ C0] ? __pfx__printk+0x10/0x10 [ 522.500263][ C0] ? __pfx_vpanic+0x10/0x10 [ 522.504862][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 522.510238][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 522.515470][ C0] panic+0xc5/0xd0 [ 522.519217][ C0] ? __pfx_panic+0x10/0x10 [ 522.523766][ C0] ? common_startup_64+0x13e/0x147 [ 522.528920][ C0] __warn+0x315/0x4f0 [ 522.532912][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 522.538634][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 522.544359][ C0] __report_bug+0x29a/0x540 [ 522.548864][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 522.554680][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 522.560528][ C0] ? __pfx___report_bug+0x10/0x10 [ 522.565569][ C0] ? run_timer_softirq+0xb7/0x170 [ 522.570699][ C0] ? handle_softirqs+0x22a/0x870 [ 522.575806][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 522.580683][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 522.586521][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 522.592694][ C0] ? pv_native_safe_halt+0xf/0x20 [ 522.597744][ C0] ? default_idle+0x9/0x20 [ 522.602252][ C0] ? default_idle_call+0x72/0xb0 [ 522.607282][ C0] report_bug_entry+0x19a/0x290 [ 522.612242][ C0] ? debug_check_no_obj_freed+0x44a/0x550 [ 522.618051][ C0] ? debug_check_no_obj_freed+0x44f/0x550 [ 522.623985][ C0] handle_bug+0xce/0x200 [ 522.628345][ C0] exc_invalid_op+0x1a/0x50 [ 522.632974][ C0] asm_exc_invalid_op+0x1a/0x20 [ 522.637852][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 522.644302][ C0] Code: 89 44 24 20 e8 e7 2c 77 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 bb 27 8c 48 c7 c2 c0 c0 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 522.663939][ C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010246 [ 522.670122][ C0] RAX: ffffffff8a965980 RBX: ffffffff9a4e8a10 RCX: 0000000000000000 [ 522.678210][ C0] RDX: ffffffff8c27c0c0 RSI: ffffffff8c27bb40 RDI: ffffffff901bee60 [ 522.686271][ C0] RBP: ffffffff8bcf3ce0 R08: ffff888076a47c90 R09: ffffffff8bcf5000 [ 522.694268][ C0] R10: dffffc0000000000 R11: ffffffff81b1e6a0 R12: ffff888076a47e00 [ 522.702329][ C0] R13: ffffffff901bee60 R14: ffff888076a47000 R15: ffff888076a47c90 [ 522.710324][ C0] ? __pfx_timer_debug_hint+0x10/0x10 [ 522.715716][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 522.721378][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 522.727052][ C0] kfree+0x13a/0x630 [ 522.731054][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 522.736204][ C0] rose_timer_expiry+0x4cb/0x600 [ 522.741212][ C0] ? call_timer_fn+0x178/0x640 [ 522.745997][ C0] call_timer_fn+0x192/0x640 [ 522.750672][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 522.756129][ C0] ? call_timer_fn+0xd4/0x640 [ 522.760811][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 522.766100][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 522.771297][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 522.776760][ C0] __run_timer_base+0x652/0x8b0 [ 522.781615][ C0] ? ktime_get+0x45/0x200 [ 522.785963][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 522.791477][ C0] ? sched_clock_cpu+0x74/0x440 [ 522.796337][ C0] run_timer_softirq+0xb7/0x170 [ 522.801184][ C0] handle_softirqs+0x22a/0x870 [ 522.805954][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 522.810746][ C0] __irq_exit_rcu+0x5f/0x150 [ 522.815345][ C0] irq_exit_rcu+0x9/0x30 [ 522.819598][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 522.825238][ C0] [ 522.828169][ C0] [ 522.831114][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 522.837104][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 522.842742][ C0] Code: fe 6e 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 b2 1a 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 522.862437][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000246 [ 522.868609][ C0] RAX: 00000000001ac44b RBX: ffffffff819a8c8d RCX: 0000000080000001 [ 522.876598][ C0] RDX: 0000000000000001 RSI: ffffffff8df209e8 RDI: ffffffff8c27b500 [ 522.884769][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b [ 522.892761][ C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff90112cb0 [ 522.901071][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 522.909141][ C0] ? do_idle+0x1bd/0x500 [ 522.913413][ C0] default_idle+0x9/0x20 [ 522.917663][ C0] default_idle_call+0x72/0xb0 [ 522.922514][ C0] do_idle+0x1bd/0x500 [ 522.926600][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 522.932759][ C0] ? __pfx_do_idle+0x10/0x10 [ 522.937445][ C0] cpu_startup_entry+0x43/0x60 [ 522.942223][ C0] rest_init+0x2de/0x300 [ 522.946468][ C0] start_kernel+0x385/0x3d0 [ 522.950978][ C0] x86_64_start_reservations+0x24/0x30 [ 522.956450][ C0] x86_64_start_kernel+0x143/0x1c0 [ 522.961665][ C0] common_startup_64+0x13e/0x147 [ 522.966646][ C0] [ 522.970149][ C0] Kernel Offset: disabled [ 522.974489][ C0] Rebooting in 86400 seconds..