last executing test programs: 9.822078357s ago: executing program 2 (id=6100): socket$pppoe(0x18, 0x1, 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', 0x0}) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="000827bd7000dcdbdf2514000052af0e9efea51bfc0008001600ffff0000e9ae37db3dca113e3d758acdf5ad1fa38f86afed91e75ec50663bf0a4ec5ac", @ANYRES16=r2, @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x48821}, 0x20048011) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="000827bd7000dcdbdf2514000052af0e9efea51bfc0008001600ffff0000e9ae37db3dca113e3d758acdf5ad1fa38f86afed91e75ec50663bf0a4ec5ac", @ANYRES16=r2, @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x48821}, 0x20048011) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010327bd7000ffdbdf2502000000000081001e000000080006"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001cc0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56d41, 0x2000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xfff1}, {0x1, 0xd}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x6, 0x92e, 0x8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) (async) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001cc0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56d41, 0x2000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xfff1}, {0x1, 0xd}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x6, 0x92e, 0x8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, 0x0, &(0x7f0000000600)) (async) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, 0x0, &(0x7f0000000600)) r7 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) (async) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendto(0xffffffffffffffff, &(0x7f00000000c0)='\x00', 0x0, 0x0, 0x0, 0x0) (async) sendto(0xffffffffffffffff, &(0x7f00000000c0)='\x00', 0x0, 0x0, 0x0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x40}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x40}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 8.826650769s ago: executing program 2 (id=6109): bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x1, 0x0, @loopback, 0xfffffffd}, 0x18) setsockopt(0xffffffffffffffff, 0xfff, 0x3, &(0x7f00000004c0)="b07279b026311ab148b2f316c1869106066ca4f360fc22155ae02f3b24a818eaa3bbd43c37210e35c8177b2ff5a7e8b854c89d24c7180467a29cc2d2dd645c45a749f583621bc34e9f5272caed9e8bf8b19743d8f8b3146a449cd02794e462d514d22bbaf0377edbeb056741ffc0b0c6413ff2ba30c25e65d996737067782a37f01299f3f5", 0x85) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x3a, 0x40, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xa, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x50) close(0x3) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x7c, 0x2c, 0xca7, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x4, 0x4}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffe0}}, @TCA_U32_SEL={0x44, 0x5, {0x44, 0xf, 0x3, 0x2, 0x7ae, 0x9, 0x8000, 0x65, [{0x7ffd, 0x20003fe, 0x80000000, 0x6}, {0x0, 0xe1, 0x8ad9, 0xfffffffd}, {0x3ff, 0xa, 0x76800, 0xd}]}}]}}]}, 0x7c}}, 0x20040054) r7 = socket$key(0xf, 0x3, 0x2) sendmmsg(r7, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r7, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0xffffffff, 0x25dfdbfe}, 0x10}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r7, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00'], 0x1c}, 0x1, 0x0, 0x0, 0x80000}, 0x84) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) 7.110401799s ago: executing program 2 (id=6111): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) (async) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40000000, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b702000008000000bfa300000000000007030000ffffffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000000000095000000000000006623848adf1dc9a764ab51a064caff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b81ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6b6981978d51514b00dcc4a2748b376358c33c9753beab62bdf27dc04e4cb4bc598affd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b770009524edd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd88345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1757b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c35af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d9900000011000003971b32fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d677d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc37e5aa23bff8cce0600000000000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68f536a03353a55a8a8e176e5d48887d31c8e0f77f2c1e68ec7c01bd5a2028a8fc107007f5f4c67600a6ade3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d9029f071fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2020ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a017ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f6c3652c423ce6ecc1be5d4e8133fc32f68ea86a2df1e7df98a0ae216c405d0ae9eed114ff2d6fe27dfdff1cf9194849c4cc0da9533e5983863e526a7dc0d8728f3b573ca4427bdb44df9341e9b8420e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9467b51d92e0993af4beaf1f3d47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c27c318475802e2c62681bd1a331422a6e47bbd40857d52c4894944fae5c5000000000000000000000000e0c47613e950b6aefeae054fc723f62ac7d13941de11b018f1f48ac50335df91c771729f81929128135b2803562c1171ee00a3f4a31281aa363e087d53d86dd85e3ff979a7e72d16fdd7e1a0f07a1c8e6085d280d760f74975ceb3a5be6cfb4da8e0aeb769b8b75f4aad803ed77d34872eed2711aa40a3b38099dc2752e8ec9b520faf39e416752aa0830206736570f5d41a4df848c9052551cf8dcb1be000000000eb2577188e8e96bd825d462350905d3eb916b397d2a46a64081e85661d7a5a2716cc87cb1976d15d9b6418e94f165911803e43830432226c660f4da67bb7c8ceb3755c07197d8b80b8d16b12c2ec63bebe107aa2350a7ae564bf69a6c52a2da1496016dd66a1c1b112"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xfffb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.191174446s ago: executing program 2 (id=6123): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x7, 0x6, 0x400, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x50) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000080)={0x2, 0x2, 0x5, 0x0, 0x7f, 0x2}) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000000c0)={@remote, 0x0}, &(0x7f0000000100)=0x14) r2 = getpid() r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={0xffffffffffffffff, r1, 0x25, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x2, 0x7, 0x0, 0x3], &(0x7f00000001c0)=[0x3, 0x3, 0x5, 0x5, 0x5, 0x3, 0x5], 0x8000, 0x4, 0x1, r2}}, 0x40) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x4010, r0}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={r4, r0}, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r4, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc8, &(0x7f00000003c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xf, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r5) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000640)=0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000680)=r6) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000001ac0)={{r4, &(0x7f00000006c0)='\\*.\x9c{\xab%F*%}\x00', 0x200000, &(0x7f0000000700)={@_ha_fsid={[0x1, 0x6]}, {0x5, 0x3ff, 0xffffffff, 0x5}}, 0x8000, &(0x7f0000000740)={@_ha_fsid}, &(0x7f0000000780)=0xd93}, 0x3, &(0x7f0000001a40)=[{0x3, 0x5, &(0x7f00000007c0)='+,$,^\x00', &(0x7f0000000800)="d9044ce1096fdcaa25b108981f57ab795cce143f6dd3248e34c2cbf67be185f62aa61cc82a38fd1b680f938ff508009f386ed8870533c2192d5271627eaa53c96b83c90614a0db468c8033dfd86c20100aa55d68f9172d468777b24a39542a9ba3e11bb81cc0f2bbcbbab6ef2c22da913fdfd7d61c5559704db6355726ddda5fa7662073c56f15ced2ea52a4ecbce8b0ab4ef380a3e9c61d7dd76eae75c8ec7cd0c1e94fdc0ab4b6fb3ba70fdbb5992793857a5eddd7", 0xb6, 0x20}, {0x2, 0x800, &(0x7f00000008c0)='\x00', &(0x7f0000000900)="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", 0x1000, 0x2}, {0x1, 0x1, &(0x7f0000001900)='IPVS\x00', &(0x7f0000001940)="d970e00b07066425470cb323c6b0820c1ffc883652650661b15da71c7d78674554b2c5e34ef4b587b6daf58496d43d75186d1932898e3c8a2a5ca22ad3758b1594907320f8a39f2becab2ecce7160c5542a88ac2c33a45972f2552c20f187733d0618487d211e5ea51efe39b5904689b48cd8587e85a085b6dde932b39ddd58502322d455d7bff23c9be4f63b261f8e2826d850448241ef41801c89bfca122a78246723870dd183a68657d9d5eb2928fefa3c56899661e437797f8e4ca7e56fe985653cac934cd634903b499c1368269e16a4712e83f", 0xd6, 0x8}]}) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000001b40)="1d4a96b1513c724293f17b3ac112512371aa0f7e6dc45fa7db3bb5f2136db552d56cad12a9e4f68863da28f6f5e0f1d1819cb2edfd3e43334907cc77dc42011412a97a499c2cb2e92f328313f5ddd1485d3ed6f50341ad8dc89c6a1df903338fc148b3128b8eea05346c0a30b83cbb779acaf2b1427d1d58ec053ec2b6209b8a01953749", 0x84) r8 = socket$vsock_stream(0x28, 0x1, 0x0) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001c40)=@o_path={&(0x7f0000001c00)='./file0\x00', 0x0, 0x0, r8}, 0x18) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000001c80)={'veth0_to_hsr\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001cc0)) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r10, 0x941c, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f0000001d00)=0xf69, 0x4) connect$phonet_pipe(r7, &(0x7f0000001d40)={0x23, 0x9, 0x9, 0x81}, 0x10) ioctl$XFS_IOC_AG_GEOMETRY(0xffffffffffffffff, 0xc080583d, &(0x7f0000001d80)={0x0, 0x4000000, 0x5d2, 0x4, 0x2, 0x7, 0x9, 0xd}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r9, 0x40047211, &(0x7f0000001e00)=0x2) ioctl$XFS_IOC_FSGETXATTRA(r10, 0x801c582d, &(0x7f0000001e40)) ioctl$INCFS_IOC_FILL_BLOCKS(r8, 0x80106720, &(0x7f0000002580)={0x8, &(0x7f0000002480)=[{0xba4, 0x94, &(0x7f0000001e80)="d8a5f1e0b7bd72d1e9776ce05d891e59a51395e87bd5f9b7a7a36564a0290573392cbb8789cb89af866fc7159d453a119ffbdae64d104e1e3010e07baf150b89d556ef695478276450687ff7bcc7b9a95e3cc044d2a4eaf6a3add3cfeb73e3cce01555f162232171ae777178b5583d56ea35acfc1836f744b9efb492fcdbd010f6c668533025c0b4973d8fe65c448e9a2fb5a8c6", 0x1}, {0x4, 0x76, &(0x7f0000001f40)="fc013c43fa05243bc9601aff39a36a2eb47e638055faf1dc27bd96f8fc781240a268ab8d6ad9099faece7900bd45100c440f6f43897ccb7a22f60955562d0a0b3d24e15221234d7f1644b04f34558223cda68e3eced4aa4fc792386ce32f62e520761801d8a9667957bc2c71994a2a7b5e8ec96756c8", 0x1, 0x1}, {0x7ff, 0xda, &(0x7f0000001fc0)="ec6c31170647754e3e6501d367b6616f9ff998b03a17e2e85918bc421490ccbed87ce5cc0f0ebc6517381d6704b64e559dec02ed7ff665d5d68b3683e66714fc9ad90eae2a03686b17ea29aba33087666d9a354d90f3dc1ebdd9fd42b17f6e59a94508b073b1e7f301aff206399e0a32582ccd8f17b5c6e3132cb85d57589cd5d923fa9593459090f4d75b38a6243d5786d0f79d8d01143efedcd9b13684b79d091c9dc924231dffbddf79c33a6f8ce2d2b8038ad33063d9ed19bc48213b3cbc5bd6f51257904bbd864338fbc88243ebe4fe19db3112e0c28e4e", 0x0, 0x1}, {0x0, 0xc1, &(0x7f00000020c0)="3b0e8dfa1a840d37e61fd8e378cf87e7b44bdc29ff20291e53649b7d7b98f0630484ac9973044df75e1b529335cf7237869da4698f7a8c594ef3acd08cd32ee8c512da1261e7b4ae45cef58f39ed2ebb36fa752147240afabe5161303b8d0b79613a021322633023f2a1b6b35b2a9f4e7b0ae06f5e30efb7040aea4c61e28f4fd4585a133a4907d75c5628196a8a068a2914f3873975f18627e5d0a254fb0570a4c497de62745be68256fb7da9549bafcf3c2835f47736c13b1713d1f5ef746b30"}, {0x8, 0x1b, &(0x7f00000021c0)="c82ffd922503e50b9ff76c92fed257b8bb3b957c8f9eadc2ba8780", 0x1}, {0x1, 0x5c, &(0x7f0000002200)="736be71fbea8de59d9970175d16ed4a2e5aed1a07009878eb75f941a7cf58e1c6cf59b0209aa5432802c2a345b7845ee9e9ee56f794835fccdc88671c505aa91610a7ac1ff19d5114dbfdc717ac40cada93639a840823e4cabab122f", 0xbbe1eed469992478}, {0x8, 0xf5, &(0x7f0000002280)="1f939ba02c59ba34683667f7e69252085b97b16e89f4741d6abd9a3f4814bb1b87411848d0c14cfedc2ea068ccba256922f6af1f0f7abe2ccfb9e0a4762b02727e9e4bc8115d69b60a69f7a04ab273c1e2cae072d1ab029ead31bb09490489b928d196f39a385ac55064491db038b76b1ec10eeb3544f43ed88203054796be1547ebe6f9375755c4ea9ba830dcb6d029c1202fa29915bf26a033242d4fade2a61929137beb51bee8e12b08f13c5c71027df796be544a310e127190a45973945abe1b388133393eb057a9b1f6d8ffbdacc2cbeab07894730d71e28ac96e9223660eae8b15c0a1241b87a4a1650961f6f40082ede29a", 0x2}, {0x0, 0xc8, &(0x7f0000002380)="d635cc59996b7c922bc50ca98f108adc87aaeddcf421dcec7e4b95139b673b7c92d9d20a17667ba6cc8651d6a4f5ee050af81afd74169eec4c499788980919728da44415e258da4cc6952412eed213875f5dc94d7f37132a73e8ea18889afd8484bca7e0b31d760b4cf1b526986b425e5e5ec9df0c2d1a3a1df88a38720dde08faa9bff00c4cf57394329d1d06b1f89493697b3ce2f46a77e2d61d4fea4e93fe22b4d7569639f734ca4b1e667de9ac5985a9dfbf8c59d35606b95da326d7799fcb3c83af616d326e"}]}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f00000025c0)=0x80e, 0x4) 6.045061333s ago: executing program 2 (id=6125): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f1ea3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b2213fdc2881e1a6ec9d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232f0485a2ca9f37fc9c3d2688efcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdcdeb2af1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f925f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308c"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x2, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x4000) r1 = socket$igmp(0x2, 0x3, 0x2) unshare(0x2c020400) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r2}, 0x50) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x2c, r7, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x4000000) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x88, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}]}, 0x88}}, 0x20000000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2033}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 5.596519112s ago: executing program 3 (id=6128): socket$kcm(0x2, 0x3, 0x106) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32], 0x40}}, 0x0) syz_open_procfs$namespace(0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x100, 0xffffffff, 0x6361, 0x7, 0xfffffffd, 0x40000004}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x9, 0x8}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0xfffffffffffffff4, 0x0, 0x2, 0x60, 0x7}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x8}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0x4}}}}]}, 0x40}}, 0x4010004) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e20, @private=0xa010102}, {0x2, 0x4e1f, @local}, 0x115, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000180)='erspan0\x00', 0x101, 0x4000007fff, 0x6}) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r8, 0x0, 0xb7, 0x1000, &(0x7f00000006c0)="068d926a9d264f947d4ca4f3be3bdbe58c14af40102413e00098b891f795b97157c44d89204d7cf4ba4a620454fe120b19d1693c4c2b0c1956c5ac48b20e9451120bf4ee27f635f5fb70b1641b761be8d071dc20270ce598b3e03ad41e8e1a88257ac8bb296a7e1b7c696dcc09fca4ebdb62bc8f13e327c43905e60f4c513f2d131c545d3ee7cc59f3e82b72fe578b5f83d7bac682f02f6738e0b06d392b55e7a4717d6fcc0e514076de8e862b063d0e160cf6c163cea6", &(0x7f0000000940)=""/4096, 0x6, 0x0, 0x1000, 0xaf, &(0x7f00000022c0)="0e98949d266e7fc910c07dba308d4eec579904fad2350c2587b58a1a8e14ff55b04855c6fc95f161b761c195fec073e3c139850b3c09aec6f715003cb8443af3af3a872ef433459ab8a787cdaab4dce51633b28b9323e1f38c6411e621667e15c0e9d591c5eee7c0d8f9b17f5c956fc4aa032b9f1ff377b4beefa70865e6b20745cad21b0cdb97e0aca639e57436645f200a8f13380549edb3e675e079eecf3a56905c36c156ebfe32daf52b6108176f20d9e6a7f9acdab3504f54283e2c6be7ae943a97d59edb6d98e73cf773e7da0d4e03e36b6b66932bc91cd6ba23c5c1f2e47d56a167d9ed34139ae287b39dc296b23c44fafa228f94132ecb3d59fd78daa3a5f9730df8a910e320bc52bb1501610cc26383cd9b47ecafd8ffa7015824611e7e48acd9862bf7be233875a475df0ef96cac9dceaa8736575dabd9d63029a1e8eb46d659d21f2fdfd765d84b6b4776387b0aee244f51c8017359f9d6d9aaf0116bcea413d9f49ca37203bef25f20ca459b892960ba3655f79547ab636413d742693f7c357981d80dea1c20021de47a5de950bffdb033dd2aed2ea9e92b3df2f18aa8b562cc829592a6a5b1bc5e7ae3ea96a18049a15784b7c4d18ae5d25fdbbca9fa3323ed66241555a3533b4a453d50eae166a3eef4a119e1994b8bc4f9e6013d2adaa1606103dd2d384cd50b9533cf05a46287ff8ccd6ee8b870a23cc23d5f6d65ae78169ff802e038c8e244d9da9633b8dc9bd131aff6f26c0d92e8281eb56a004b50278f2f1822d7563360dbfb1be50038dc40be0ca72c5c64ca8c19518c6939baee0e2066c4de88b116e4463598a94f157de33c6483e00a17bdd582560fcd19305ca41962887f2d898624c502891666a1da1ffe7b522d8c91d3f2b5d0139b6286be521ceeb7b92a466cd648d510c8747b86e34079ed0d26d4643c1193b5e41745f2434beb84b2bad85dc6105325a4163bd844c00ffaa38cc7173a733acdbf28666e3062307e69432d2054960adee74819279ba22414bc5d0939ee518b072306ee413bcfa14853c60d81f02419f1905062dfea4e14ea520db23aa446ecc42b3b66b973febfa863141979b9abe21645155e5b52caef48560876f44d2b876fd0cb8d7b773fca9633eae0f46df6762299d56cb1e452584ceedcfa1cf552c07972866711c975d2a689b310018d23cb8dd06334dc7da333948f1ce1ae8fbee9db911d5c0e27f420853f33c52cbe378e197351e6cca491c93a87262ee1aa86e480d2c340280516bd9f8ba23106b200ae3dbf3830304688734b62920076957830c1579ece4ea6121f5153e5723facb34a0fbfd23c94440b4c5fddab91b208b622bef4492914cde16381fe627f273705b9d657e98821a5865ac5c514a692332cd9731e647d93a873af0f30dc60271e68af7458e2039e7418fa8e77fdb039bfe316a49946b22f627fe0ba8f03c910b488308265ac840810f7b68379eef9ecd994688c1078384cc177df44ebaa44c03a8b7c7151366e7c701959ab307f75a4ee53f7b34c7376cc13e72f86853ab106b22822c51ed40e679e97e3bb5efa554cc4ca8239f37fdb4b7c75a514cd58fe268869551d936eb82e40d6eb12f24dc6ae55ddecf919bea20e5bd3aaeb12de598ebda6a2c9800a9f81e711bde9fcef6dbd20038d187679263f51ac4c52d314a9e5bccb10da106d1cb28b0b96005b6aa248c202c21728f02fe1aea694cb8c6732b5770a403925962348134933910e8f3571dc08185539dda8da3d943d13ef0b817dda093ca1e89aeb60d32261bd3505419c39b11d938c9dd547ea609dac494f5b77491209babbd41ff6f0717a8447571a0484ee56f0aacb1ab46a40751fc7a70e4e82e37350d42aa0d4efe68b9ca2f5e33312c5939f783f78aa4b1161ac723e0166c908458804af53601b27d182933774564c9eec4d00848e81655e3f47cf78730ff8a7e0c74f52da2e156cbdfc1d434c4c520fd926e821e92f6d0a6d1efcd34233a4ccff86ce85708660b32098c70cfa4ee17d1f1450e81c69f6b9b7479c0cf0fae0ec915d7bab56a4e28541dc6eb5c338a3a6a6a2f76c7b43a7ab91d5342197617f501b35680fbcd37377e11bf2ba49dd3b5c8b12fc65bf295fd0e9bf344096e8728b45d78e6a0eee63b1dfa0a6f08216f60aca9440b7e89173f373b5a2a845ee5083c1dd66c832195237bf7b57da02632e6cd1fe04e4e9ecd853f378e7c67e51093ec5aed933edc03bc4063b346e39417a5c5691b552be48489ef5bc79021d029cc13aeb827cdeedc3459fd8aa2377c04adfacdeceb7dfb5e0fce261855d4729df7d2152f9858c9e791be1b935c9654ca36033f140879f9ca6f5b1a9a6610486d7ce812a5d579d5948c6b59d9e727731869c804cf94552836d9039a6d27912ad7703423de95e4fbb00d9741641f259b5c4632685dc57f6d21a88990e346cdb4ba2f9c43911b09abb1a92be8323facfec3e6c4a35f40a1d17a71d62f3fa4c490683dd250c1d9ce6a63a1db9e5aea1fdb7ecffa3bc51b4a95f9baf03b3b450d53ee107e4da025c6a739d0af3cf1f45f007f1129beacd96aae0c0e6034ce28990796e6ea5f695272dfd360ce402081c385b5a2293fe8b820e2a5478d8f647b5ec144bb7fd3f2ba1b3916ba95b2bc2bb9f56b4b955c68957c3c84d60f2e928059ac0d2539a67b3edaecf275b802ab9a062cc18366dcc1e143af7dfee3ba9614317e82f16b1081ce15c8e823292539f8a95164c6b6df96ad502e96baa7327dc9fd94139cc2584fb4da56eab3f12cddd47d05f4b645143c277dfb5193f21448fb401515ca52b75d8b7860b3ed884b65281b82e5b7b1fac5afbe008c687b1bb56662d73b83ef218bb65917ecbc8b62afff59a2b83a3f275f43905dc60f26456f29f9cdea37e5d1e67a7598ce5dd8c7169778879e587a9dc477d9f111f2edf28f1b7a66f580d4804f989691d58a102f5062c67ccd6f981a25c54508cce1fcb18429f05abe69ffa21689a7071db34187fe6c9cce21e154c3df614322785df5ffed307a9efd97597bb8fbb7015ff0ddb49c42a69c82da3529e4c9dda86231bd368f138f26b0adde447ff0bd475bbe52a6f179a85924486a7665bda29a42d78ee0b55bc8c31d78656ef7548c2c52f0b831d4a535f2420e6abf33bdb02866a8ea1982b2570b0dc6db64ac84f1558d1fbf9560df401a4b190976cfd78532c01ef812b18570890fcdda67c04f85529cf7c254f2ece97b410388aec5e0ee9fe0e056e88a412a2122fc5e0dbd444f506b6d409a6494b546041c9033a765d7a73147fecc0dd45c32a72a9c1ba8de239baa3ddb10322c0a3e5dca2423d0f16a1103bba95fc415032eaaafb069e3e43fa8baa870579ba4056f1ab8a5c4bd612fa0c21dee8cdcfbc08ade903f04e996088cf3179af7e43c40f9a02755f6451399c31fc0359bed354a4d737d29ae7c5799a1192081ddc8429934c8e9ddb70c90e3529ee94db712503afd04a41c5d3070e6c954e89a4b0c7f41240eb2c4de0473811102521f4ab23e5143277ba4e5ee1e9aa2ae1ebb85b398df188e64a39d45e0346f5470da45a9a25dc30bb6398b34d5906d65e934321b6ae6d54fb6ad7115206e2c0d342a401ee070fd08035bd8639047c943e21d34bd07571ee768009a352b3f90e46d719995a4a9cb1066d3fdcf1fc69b84b99363e4196731ea692551cb56deb0042559808694f345c24cebbfea2a0946cd8f1e595f1dc7bb58d9c71fad8441f5a7e0edef718561efa6f08a9c3f22f9edfe9ad5051455835ed3593e037cc3971a7fd11a1a036ea3367a84b7958eebb57f4d3fef860ea3a217ad1b874f63c160668305d21607c8ad57aec88be440a3a80105d0613c23af1e6cee6977ebce73a36f174ad8778b871e4ecb682e8dc9cb84e111e016bb9d68cad41d5ca589afbbc6fcd45b553a9932bf9fb66cb9239df337802da717cbcf520b820b763c9f38d77fd344f4c9f98dd43df45db525a4c5914cb11cb5660ef554e2b30b62b29f8613c8ae722e0bafe7040254d5b2ccbd2f2680bcb093f2e268d5bef4e419dd93c5445286aa8cdc54e9649266ffb4d0f5a150a96ba7c67a4c6d701044495aeba190c8b9fa372467a8aa794eeab7b6e77453ecd4ad62f87b427436db760c473431f216ca2b35ed56e2d960983a896f74e6d1a06f31585af15c360d9d0100aea88886f90cc93af68fb3ab11d25cb76d757b33a37a1b0f036d6dba0d27b800448d395560446a2ef46d4e37e429ed0d1d6e6181c6f0a686a232ccb3cc70ce66115e73a1639e94a1478c03f0e7a64e51470b11e1496cd01d66391d8d326788799413b5b47155c6696b6e2a1c0a4f102627c36d102fa0c4cbdf3fd668df083ca722832a1856b25f133c00283d46980a3eb048a0be20c666cd2db3bf38c62c90c9794012ad5385d53d8ae99c94b6a8caab1da5126955a1c86feebee7bfd049e21dad25e6161f7cb6afd206993cee7d2847a5235f41e8920ddc545924aff1882652b8512c9f938dc90ae49200f71df1ebecd034f351b8b25ee4c9414b0c40a272a3bec1404db0506356a1db87e139536f4dec6e92a2804fda48595fdec162cd3b367e8d230f7599220bfce2eef32bfcdea89ad0cc5c4f4e3304f3f971a3bb42fd464b20eb2518e1608790bc362b5702fb431da6ed6f66e2dbc490dd9ab7a2ff5359d8967ee351afefe5ef7c30e62a8a1641058864596c825ba6daa781d92a672d79ae0381d0c38eb81fa446cb6d771dc3a4d5b05cf59d47c44f39e79d81082aa566e449f86c752daac212584cf1f865e2fd729cee05d4e3a38c4556a8fe9038b430e7acedf9d938e6bd39d84ccbedc497a74341fb8762c0996c15d0fbfe2fa1788b0a44b9630a87043be7f44038b2566de92f75704310503e5cfdd6fae6b612d605ca73fa37a44f6cdbb11e3abfaea7923774a46290f72bf829d0fe48f8018dacca399dff5b6c8a76febff1fa58105d84f22de2d10fd4130c2a874f6715ce91f925ecdcd2e3267a74206be6d2e23be5dc6cbb22028b945a49cb88ecf243c8580399eba63de66c201dd2544478ac89ffa6b0df53ca125d7cbef3535d263e1dd29a5ade3eddc49dd6a1500428df760317744ae80f8558d16a056a4260fa87de4583d5034961c08431f91bcb3de87537467bfc72062b31c9553b00fb3fd57f6980ef771128516f6bab5d1eea7f62a33db06edc0444cd0d9aadf4b5fd10412bc42a6bca2a6d6a5249c1e3c56c3e1e328629e028d3baf2ea39615421efa73d0655531fe7293212c3c8f58dc9369a6bb19f70cde3aadcdd5fe96cbf4b9a98ce0af980c54f6d6aca720daddbca207a2b376529d541fd88dfd7fd6a66cb57e4a1fbd036a04d434a72649d9d1df0bc88368507aa8ed96ad02e9b95755f4d61b6e31384be898b2e0b7fb2ec07a0fb9700de3b9727a5fff88e48ce26366867222315eb79c536153df2533fbb7f78bbe63240422aec8b353b9a9b2d12d0eba54985cc9ab9006dbf6bc334ae4a41f1a626888c519ad988a18bf0a8c8a35ff699e955e58b649a905482e0e97ce1b94b2a7d2c1600097fc1e50f7571cde1b74227b67c589d1a6b2a1cdf8625809c42bd990cb87db84987cf318a8762f7aa0e011dacf9cf165d3b90c462cc177807d433668a3c99257c484092840747e7b77c71d31fef890bfa43b1a59088c6b688d029f913d764bbcf9128088168e22d42a709e1ab2c684ae8ddb4df86a6fbea6f01a64ecf981d54524e1fcfb2b38d92b4dbfa1bc7a77efc97edb0495d550", &(0x7f0000000780)="251005bac6681cb26f60e3f909c66ded43181e9eff8dfb933e1ef8df7e9b548ad3528692c7b2638feb754081f022752b799fffb4d480ee4241268020e8dc19796f1479c2c77f880856d28e16e5ec8f8840d7a9318dc54b99e737447b9d714e8c1325ade61f27f8b0b5b7fa84cf336e990ac9e87a35a23d293ca9023ed4a1fa49317565095e26bb49ea6021c64eef6faa1bd000a07405c0dcd6cc28aec47e7399329cc4b856f065cd92802ca9e0de0d", 0x0, 0x0, 0x10}, 0x50) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x78, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x3c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001100010000000000000000000000000a70000000060a0b160000000000000000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000d00020073797a3200000000140000001100010000000000000000000000000a"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r11, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}]}, &(0x7f0000000440)=0x10) 5.441213604s ago: executing program 2 (id=6129): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000004c0)="cb7903c47f081f0bd67b67238217", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, r1}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000780), r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000500)="05804ab38284c7d5a5b66406d704", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r6, 0x29, 0x44, &(0x7f00000007c0)={'IDLETIMER\x00'}, &(0x7f0000000800)=0x1e) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbbaaaaaaaaaa3088a84d008100660086dd6eb3d5f001952fff"], 0x1d7) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x4, 0xa, 0x80, 0x140}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r7}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x23, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000440), &(0x7f0000000540), 0x8, 0x6e, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r11, &(0x7f0000000480)={0x2, 0x4, @multicast1}, 0x10) connect$pppl2tp(r10, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r11, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r10, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) sendfile(r8, r9, 0x0, 0x0) 4.264755907s ago: executing program 3 (id=6136): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) socket(0x8, 0x3, 0x3) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) syz_emit_ethernet(0x3e, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) unshare(0x400) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r5, r6, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x7, 0x0, 0xffffffffffffff1b, 0x10007b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x2, 0x0, 0x107fffffff}, 0x0, 0x0) 2.051257906s ago: executing program 3 (id=6150): ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f00000003c0)=0xa, 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000200)=0x2, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x540, 0x4) sendmmsg$inet(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000000000000000ed"], 0x10}}], 0x1, 0x0) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40002100) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000006000000020000002c0084802800018008000100666962001c0002800800024000000001080001400000000008000340000000110900010073797a3000000000090002"], 0x80}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FS_IOC_RESVSP(r1, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x2, 0xffffffffffffffff, 0x9, 0x0, 0xfdfd}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb08004500452c00000000002f9078ac1e0001e00000010000655800189078040000000000000086ddffff0000ff00"], 0xfdef) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001e80)=@bridge_delneigh={0x30, 0x1c, 0xf01, 0x2001, 0x0, {0x2, 0x0, 0x0, r5, 0x8, 0xa0, 0x7}, [@NDA_DST_IPV6={0x14, 0x1, @empty}]}, 0x30}}, 0x440c0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.552749749s ago: executing program 1 (id=6151): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xd}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xd807}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x24054}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007ca20efff5a115001c00ff11142603600e12080005007a010401a80016002000034004000000035c0461c9c67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b3d7a37077646f948017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a56e2b0137bdfc65025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xd8}], 0x1}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000240)={{r1, &(0x7f00000000c0)='\xed\'\x00', 0x10000, &(0x7f0000000100)={@align=0x9, {0xfbff, 0x1, 0x2ad, 0x6}}, 0x4, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x1ff}, {[0x4, 0x8, 0x2447485a, 0x9]}, 0x60, 0x7d, &(0x7f00000001c0)=""/125}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="030328bd7000000000000a00000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x7, 0x400, 0x1, 0x0, 0x2, 0xe5}}, {0x4}}]}]}, 0x54}}, 0x20000000) r8 = socket$packet(0x11, 0x3, 0x300) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x94, 0x9, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}]}, @IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x8e3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xa, 0x1a, '\xbb\xbb\xbb\xbb\xbb\xbb'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x40845}, 0x81) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000001680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x26f8, 0x9, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_EXPRESSIONS={0x26cc, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x4c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_FLAGS={0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x1e}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x25f0, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x25e0, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x219c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8d, 0x1, "b0d4745f360d597edf16a61c790a3ee75661edbda8fed186fdb81e3e9ce234a4e4460f84166217159eed8fadaece6efec3d74ba05c5874091c96bd3357af615acb957705d43dc5fb6da591a06c9e31bfe59d02336fff9ff330d654982315de1e3b8856c955c8b556545fedc07e1e71db4b5f4282ae852ef95d85bbbf43d401b4e929b78416caf5c7a5"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x36, 0x1, "8086064886b77696de6bc0e408cc04e1ecf04a1fb17e26029e708a940a0c2b6a276bd89878e801682d1b6afc47f1efe09a6f"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_RANGE_FROM_DATA={0x328, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xfb, 0x1, "80b3e1d2701815cd9dcc61ac8c7523bf435b7ee692229d9d782eb1391aa22944a7fe73db15d5ef11d2394bbe84a2c694a8dfa45aa4ee4035c12f0c6dc5ef1e069ec0fdfa9bf22946f578e5d24a7aca39826eb9166a239dbd7ebfe64e6565263dbed729437157e43605d8f7dfaca423af02d9aa6966e42d506e42b2d91d83db8d7bf032949b4e85133c738f77e6858d455f4de30e037031b34109b6c8d90044f3c7a418f8f818ff083e0ab5dca86eab0af895bb24430d89765bbd4e0ff45dc3a9fb0b698921dabda8aea81ae7a3ba2cb535cef0afef2a8f229b36be4ff4afe7cca4f76afe4c65ac4c6bc68fd65ea65194914b3100b8b5f3"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xfb, 0x1, "afb48e8ecbdb495e603e7545b866deca250d55cc86bc6d65fbf9bb08691c5a16722486a9aee4ad84a6c427d6ddcc2409a1fbb0f0a0bb1ba0d9a9d2c9771298ad791031cd2798d0c7c3a41fd22965071cced33174c3c3786b651fb3b6ff09b34554b0c9acf1600550849cf79e9d31f824987b33513bad4af2979777e70ffaee63963c40f4c0d9d44fb3bc5835a3945a1dfae698e5c75494e9f51d2b951f2a1469fde154c960b2ec811e69a85f9cf27f1179dae45265478e1fcbdaa384d5c136180a5c58c8ac1ac5e5e177ae89496e0ffea23a76c6604161165b0c8c817fff32981480d06f1f0d6715ad4c9816fe77de438391af4af63e42"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_RANGE_FROM_DATA={0x110, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x89, 0x1, "ea1915ad8fe65f3b8fdf0712ed6cd447f5d068487f5aac51145ae6a1e39456a3e6f4bbb25793f029941f4105d111ab8a6fb0036c19375338980e8c1c0f341410a3a25af775ec6fd20d832126e3647522e79e0ac0177a72c2e0890224024de9332221e35ee1d9158969cfffd1300a69d2e39df64ed406b9d11b284812f263327d6e78057c94"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x25, 0x1, "26eb1f12226cf7b76a5f963f08067c0210a48f981d672208e01931720cb405f732"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x8}]}}}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWTABLE={0x15c, 0x0, 0xa, 0xb00, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x24, 0x6, "4784e3b50725486f6e51886a066ccf8bda2c0e3b9a2951e6b8dff10eab38e499"}, @NFTA_TABLE_USERDATA={0x13, 0x6, "585f6ee4dfdc07d7b49d03c1d6c715"}, @NFTA_TABLE_USERDATA={0x3a, 0x6, "753e941791a88c7cea13ba20e602372f1e2a4899692a6b04ef5fd0ddc57d621df2e89c204b5903840725a74f07ab9386395b567f2344"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x99, 0x6, "2cc575931ebab4369c0cf4980ae6c74f42ca94a7d1a143bb0bc39770accda91947f1c020f9872df1c3f60bdfeaa5337b55b648ead49f0a9f756c31888f10527e61fe7c33ef49f336e81b5ef190669a3a4c09f2b42026e7034c15c7b4758cccc4b5290e61452999caea99b57a7b9ccfe33502a3afc0764727fa2bb78ea0ddeb273dad7c12b8417cd4a991e9d144aec2cb19fcb1a3c4"}]}, @NFT_MSG_NEWSETELEM={0x1a60, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1a2c, 0x3, 0x0, 0x1, [{0x1548, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10ac, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x4d, 0x1, "85d7f187692dd7f6975f78f72bb06ce79a0b3c6a052b3c22d63e7d26260a179acd467568c694ddd874d56532da32b66a4ad58e340ed5e300309675c069bf2477714db2429fa88e67b1"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "5c8f32d427db7c15152d9fa160664f857e7a40f37631dc4186a9ec51379d70f23655d3199f9889f359deb24c122eaae042f6052a3b138a3d8a760f2284462e4e0876af91843e737086766d0e0d4d1450986b9ec6edc39ec6172433895d214c801e7274b8162b3091dbc98204348766d61d20f5f53b11d4527f2231f535bbc4cbea7abcb9f6d8972d59b2956a8b0def891523f9150556d08d273980f00e8e212e6fa3f2b91e4b589b8ac40b66014a9477a9a8e78cd501c104428a14da2dc77da33fc41a96529ffb9c3be2f1b984f43065c24656719d514e9b0f159b896bfb0ec0895956fa52971e40101643d07e41c084f1640bda420d98cdf7294836754806911438306262bc28aba36fa04e99a2a336b142578217f27023e7b7715aac24fdbf324c24593b68f2fd3a0dd7dd152ea850dddb894f6e56e174c7f9e952c27e6033705248848c398fbe2dd369450b9fa420df6f11eadd8d302790ac5e705b2315c8c62437627c16d2000c40bdfe74f6d6c7fbbb4157ee19cee0515111a9fe5f3ff476fa0b1c33e98ee60ac19e069fc6a59610983d87d2f28a3af1024bfe5ebdbc7458e29906e6786df1160802bed3bf9b3370f524937143e7740421eaeb734c9a6de8bb2ef13bdf1276e4af55c93129261d33ea7f58042e13f551b35f53712971ff73eb3877fbb92029ad1b444da3c2b614b081a1da3e3d5cd994b2df30efb75651dbd5ad91b2339401fbce1fdf96ee3f3242801fcb6d9e272dd7df91778c16c9c941c8dc24c98c5a37b7c58fe5301257d7f2e9b66e2fca9c00d31e0e07738aee120f0152fa9c2098801c56609ac3e22fb745c9883f37a3be44aa45d0fff4aa4600af114439c659a34555304dbed7aaa994430618ae93585758a9f892f59be4e90d1ccfd4e1f0780c28bf049e23d8a94081eb7c254730be26185c19e4234cce15ad0cbf29c1c6456210b15f10594c720e54dff6a886c9843f84154a925fe02040baa5e4ae3bbea1d5c23e86261f73da23b78edeb169030f31929916a58a85f5f51098efa376309b5c6da8e61dea6160b286236c013ecdcc4648632e0b53dcc5f125b8a33bc02597d8e79da019e17a842f00fac26183937338d68c0fa84da713917ff75c16726a693b6210c899166bbc7c8b10983a7a7517276a4d524efae13ed3e03148e408054e0bad1716ef8c49330fe0761adc940735ee8fa9658dd6e3ca7343f0752beafc604f62b44a936aa297e1f84206945b2b367c8bfcc68bf9e3d56adbe0675f54178656926580d5a7234434c6e8a61e4237d1ecd422a85660a238ddb0d33300b180c07c53ebc65ff0c2f1eef41c1da9074ff66df3bc0fd06b7c613bd4791758259c9c854bc5d3480656b6e73c76e73c9c548d8226144f30247fb2cf99b29afbe45291f63c53371d44512a8c05a9d5767568bad64d6ff3e57ba81dd50a69bc72e7b63abd5d5165ecdf1378f9611adc36ac040d0bdd09888c8d2d15f117bb28b49c63a5ea1d86e1d9da77cd30c56976b51ba17e5e8c15701c0a40dcbcf077480f35339641d48591a0f2bd97538362d32223466227a060f646df449f85eab524ab8fc89c36e95ec94523c422fcb5c40f409989238d274245c120806b6022c11f2b5de7866d34508cacbb0c3aad5cc596d68f1eb38729b173884932125643c83ba0ba63cf51092a83431a42d1f0227a5c7338553f042799bcc6549a09f29e0661576f60f33cc32409cea71626f57fda92c6ec7df4f42f4357c8e4eb3fc4040b4ac82c1561b6412ab27309cec034ba16d8e12ba279aa5256375b6a1366d898c4d2973dbbcbcb87ad804d31eeb672b50112433c6cf5bfd2a8e3c5cdff53339f46c818f54ed9d049642fa8ff6750cd80f66c92b7ac943883342b6b5fd06cddc8b40cece6b6fdeb0673335b7d6bf263df5d7987dd017adea40391e57cb7afbc0b269d9348ba1f4ac5407ad7c163739f80ad17a73e030073c3f80716ec3656a1f312db81ab02c4869ef0db5c2ddcfdf770bbfb99a0750ff1bb879e878efadf1adea5aa9fdcdd29619e40a000d17c42f3cd5ea5d0a8f0515ffb6eb85926e4b615e097a5467098a4a1b9712c2669eb7b0235a59abc82a6dd7e398aaf03b17c8002d6e73ae6dd72d4865ab018ffec282005acaa298dfffe0135d8ea81131542ab7107ed178962eb1fcd9519b6281d5b025af5b66edae63329be87977debca932a8aeccc5937dfd8f24185a6f0ea1b83e790a98682656c83d000e599955327b237ea801af150e549a2d08bbb5170bd895c72869e2b8255a18c4b5afa58af039b40fdcc9cd0603d18bfd72f09ef70f8f5b010d6e85d499856c6fc534dcc0705d7558b5ba862b40be4ed1efaa4d2e18db9671b0b6ac7f6232960519c0e0ce69c0999ed6fb9cb31cc37b6e3774d279144254d627db1c7cde53f05cac19587804470022da9f10a349844263abdc4b3db1e48e06bdaf0d83ed09426cbe3fe334da7d44c9ec454d0f7a4091411cec5366b0fec29ddc76cbdc90591f9fd37ce386132ff7e63cee84ae4f0cf4f0b5f5c2d9b55e733cdeb63614fdea1f0466751df0ac2274ea060560dde3ad96fece391652402f089a9647e9245b5d4cd2184dd6ed5d65b47eb9bf44eaf7acd39112b980c9e21e8e6f10058fb1df35ff3f427c316bc842362f5375935683e206c14f8da478a9eb90df5fededf0ccd33d7927f13cfbc704c284f579f0053987227106182f6cc6f56a5d581c73b1a609f1c7052251031b2fa9730d01757adad201467c4cf6989518f6d784be840a83346155ae60832a448f3e159891a4510880589ca0a3b6c48e4b81082dbc099493799b8e933c4da9f1275ead47eb5728341941ac5bbbf5b6029a4ccbd59bfed716db3facf986d4cc465ef070882710b9aa72ff2983dd8ce09de75f24cc273b8f2d4422e4a7917b6537f0bfd136591aad1e88343a9b8947848f53d298346fb1290841858a876929517a183f25f909f6570b8895a27d19ddd5bfdf661f495c5814ead7c0212fcacab22e1cd59eedf17e25d08132d890eddeb3317867e57aca5331c9b67dff3ab75c6121dc844fac25815bfe5bf755d3870feeb4057dcd1d6da056dd668720caaf6d61d7ea64125ef731820630270a82ba396cdbb0f6c1ecefb9aac4e396b6f621c7f6d24928d39141b487ec0f21e4464d6792b99f904b841e664de674e02dc18d742722039436c2b3d74a42e24b7b28e06a668597990f53f45ac95ada2e5b6d3c8a6f86ac3923b7625f1baa82397711cc0fe91eab35184b94a3ff1d9acf9b32dc458137ae0a29c3dcca85137fb7deb0e2cf3d49c6077d7043dd07a660e4f26a8ebe11f1d42dbedd717f3b79a9929266eadfda403cb60b9cc4e686b01b28792f509fe105a7c5a2fdde0a9721dfd88626e2948010a149a44524067c1fff95994dbede7ae5b6627deaeba846ef60b53c284109ac802a771a978559eca93b2e1f93aa645d446884278c62489803a107a9ea5b695f8056598427eeb900c7f57f7976c415f1af01d04a3770464d8cdba4d6349aaa71d2632888c18f42716b298849e583493ea77c2495b58423afc508e5f635f0ea3b2c8c50fc5346657d5444a9509d89e375862f0a9610d96f259b5c109aa863d51f887d73bdd23b7ce2401be7d7d7a4f644784cb0cda9fff5ac7f6637604ee9a0d3ccb8b637e5cd716dfeaf0e5b1b0e9cc05498735f58d76c1110f80d30be6044c0ac4e9ff35adc589606a9568c294ba7263940ad3e32bd8e8109bf44ac46ac312dd854dc81ca395d27eb54b48017a247cc80c072800d6fd124f4442a312285336ddeb84e96dd9c14b08864eb4ca5519283c4cf4060148dec55654edd9b296170243caa87dd83d477336fd3d22764b51d977c55f53775960499920ace00575587577a06f75b049ab20ff3fadaef9d910bcc4e56a2c4ae42eb30dd627f6bc0e561fd44154931f355daf1065c39b095a352c215909ebfe394d86bbd7b4f3c0ad6e6bf267cf0e785ca743419321306bc705aa758a141150f96c368f161f03e254f37afe4089844ec104ddc215f9408edb310c2e760ff78ebbd17b4404a2a273b75651257fda7d743a3a0b6eb3f537a7d38dfcb7cd5625765b9e7f318301068582934b5c16e58f8d2d6ac9c2bc94a77889c2d78cbe28e906e94be60a793237562e6df9182983de2c3da677785e94694bfe0972541fc772c184cd78e5a2b075227753be2b07acaed24fb14ac708db7fcfbb95275dbf24d75ab8e7ba903385a0919f9352e38b60a4a6b8c12148937a40bcf35d06d0ddc74d236bcd1a160b9370330974d9be6b5713a59f82f946bfb7213063542b665d84cc5943bfdde921df6140c0f02d3287f14b69eac95a0612ce4c60020d895c106c72867dc08010fce1847a156e23d1a712a129442182e9289abd5b16e8def1c089e5dc90fb012e50745c9f9d7ee4d4f485d52bf413a6bf8f99ab7b12eeafb416293b8a0b2d93c130bd9fbde52585838e0934482e29c281f0017f81d4e7dbd02823c02e8c8831c0253398961297ffa21721a646ddff2bd1fa5ee3e840fb72439f5e786ca3ffb787f932a0504f4b14363e1ffd20860e2de27a0a7309dde9b75236da90daab38c1e5bb53a0ea93ce72adaa88417bf08b6570dc7b861ab61c5b5eeab4607aa3ca11668b368c690f2a3af255c73527e5b6d6a164bf5dc54c32b025b372595c8365d94d349969b7486597f50eda5c0aa1b7f5da274456ac929967f291da68a5c933637ab2f3d3c2b877852acb861dbc319dc0c0beaada5e8bd232093cd45d8658f72e59111e56ccb235bc1f4654a91b3a3f0c66f1eb7eb7d4c9a03ddedf830e797bce7e74825a59ea7de1178324a198324e6f27e2612966c3909b1098a05a2db564b9d8a0f3e3d3754ee61c5aac7282326a4a47ba66c273c81ec675b10faf6118594430739dd29b3e9221f21d1cd3b3a6ae6d6b7c30da73dd4b02e28d639558be063fb0e48190f59d2945cd38c568bd4575fa7e7962cb2aad6a5a31d5948e2ac7d695dea214d2b587b03484e2c9e19e201b4370faf4818a72817e5abac788baf45d9b7851d9e2d5190b5eb7d26245a80dce2ce228b368254d70c2561ae63514f15c472960c7d6f540e47df35235812167ea7cf6f4f3afc71fbf4763f219a988894cb4cb532edde4d264909e605079fc08513eed10324fb920dd9b19a413aeedda18292d46522c3ea702fb272e2a486ed8d381e14cc1e35c6673daf283f6aa1f58b35f6b0867db3fd5e662432339ca9e4f384ee1735e4ff9bc5340a7a63f89027e34989bbc160560f2acf3bafa863aa474bf18d3ca1f19e48aee47371b59a7dee13a6f9e291cedc09963cf91ebc2acc382818730b1630264dd78f96df1f9f4f546763620b212f9ddc2ac0c72527cdb6b2af2a8903d86fc13b0faf3d4e35b35849dd8a23ca29a45d1d586b8bd79b7e70fc822401683c4e3bfbed05e9492623cf0e1ceb3e735c99efbf3bf1d6dde5c6125a057cc24a5e7e18c119c4268a7b3af24eb7851072c805cbef15ab29c2a27418f3f60ed198bb1f42a1683894410b9acfd61e29e728779e9971fb7d3aaf4001d50a4d0f351729cffbfd80ef58c0197d012a13b4d34d420839bd3ec9ea678a1b3dcbc19731d15e2c5661107ef9e1781bf22967d915f00ca2a012e787386fb4f5ac3428a9a89873aceda2992e9d2997e94b320433d8d56247903626c05ca5cbdf1da2d506152ff5283b1503474673146f061283c5a2823953777b3c494531a637b265f91bef0867486c1fc8822be8102def3c4"}]}, @NFTA_SET_ELEM_DATA={0x14, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x190, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xce, 0x1, "92179aaa3c34dc6cb8e1dcb47975dc25b918fde2ec6d87a1248a4f3981df773d5e89c107dc4a8d8cbc69b9da925897b27798a1fbe43f99761ecd86728ef3cbf36b3a93a366fa5af82c7b078bd5786def421d44bca653b3dd42ed3b47f5ab29ed09086a9995f016a2a96c3b5b3da786ec695507cdd393279d3884879a7798f9e2728f904eef66f89bfcff3f43deb5f871c1436fdcd8b11ba4c673f6358c4d64301a0480680defa7e16b8ce64280e055f92d2e244bc2a9582df15c03d72d45de9409cdbde34643887e75f9"}]}, @NFTA_SET_ELEM_EXPR={0x50, 0x7, 0x0, 0x1, @limit={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xc5}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8}]}}}, @NFTA_SET_ELEM_KEY={0x84, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffff8}, @NFTA_SET_ELEM_KEY_END={0x208, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x90, 0x1, "f30c754ff7b78b8274c505da3d1a2f42464dd09d203ec0f5841770321f51410cbb8f4440faeb00d909f5659db8bf3f4e3d34f2d8b22b51886fbe58164a7c2c64c8dd64ac1fd5abc0fa830f50e1e818505ad1194beb9ce94818d76412eafd0af0334c41e7d49a9a220ecd54844ab1791c2c99379e4476557edffe4e535156b08d0d6b55586d6fd96ce1bab2ee"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x4a, 0x1, "06d7401e972a914f27cc666d1cfb5388fe551411c62243153dd65e682f4b4323c370bebe8846f768ba7abad29394c29476b9796ca1a6014ffde1ae835117a3415393f5968037"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x28, 0x1, "32920e493e72c9803874ffeda1837b622cfc3c79c39a1f2859aca5507f5ae3a4583c3447"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x59, 0x1, "0d442ce85b236d7054afddd7e3696a30cc4da913d4feebf7ffe32d21dc9f5cd148b4f8fc643115e4e50eb73fd23bd883c06c743d27955ca5aabe4f2395ba3f37e2ef32612dbee0dcac76d5a49619e8e254bffe06fd"}]}]}, {0x4c8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x330, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x19, 0x1, "d57e208cb317efcc3fb4258da7e860d7784de4ee50"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xc0, 0x1, "af3e4b0b979b3b46c9993512b3e02e4900c928073c14d49e48b109b37722f2e571d6fcd1a374b0a794f7eed744198411bc1a9c8136d4c9192f76c92b6769bcc61dd25ac7f5bb1dbe4217ad238fa914bfeb4bd401cfb282a363ee401c2e912c2459bc114acfca0a25b733365a9ff50754646125cde251daf549a6d844b726b643c2f6dd4902c578149a3e8535418811bacb4c3105e3447d02fba29443450fa702359a93b3732535aadb6457f127562f49bd8992a4c3cbe23e31b804d7"}, @NFTA_DATA_VALUE={0x3d, 0x1, "a05d4554caf0944043d23c7e02d4004381464b1bc1ae7904f896ed1d70ad4219d8dc18c99c274117b3b86b0c3a4a1b5c94671cf2eea1ced245"}, @NFTA_DATA_VALUE={0xfe, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x6b, 0x1, "3f4bfbba1c5c8ee1b3965f890fa9af262b072a6909c590d38557d86a2ec9adfcae135c5cbe18392fcf21d9384608542eb45412aff43302df5e6bdf9651cefb913ad0205bc93e2744008d4c8e9c93452c422e39310f78263590163b21e04b95b79c9aaccb461d89"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_DATA={0x17c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7d, 0x1, "2f2932f5dae818ca125c325d97cbff21cbc15e6a11d673e31ecf833d67500a7e4d8ce0747cc5b27eb846f5e1eda653707a9bbe8b4f629a36dd9ecbc3d5d09e3af9b5f9f0aa48adab71fd4523082fe2b29e9b68e3304b2510090544eed7790d02332524960d55ba0ec0dafd8948e46a73374f169ad8cd334d13"}, @NFTA_DATA_VALUE={0xe3, 0x1, "a8400fe74c2221f6689b07117eaf6aac4d7585ca7409d77dedc6889f76ef1687ef75255a407a4782da44448153708b49bb2fa1e3d4d0b2a4b546e8d41ff651e9ea821a7dc5f8ae1271635b1667985bb843b7b5fb003ba8dc296c9e894310116c93fb2c8d8435600e2c6c96c5379b8d03ceabe95a980c7e9c192b098a526dc146408dad1065881fe6d9b8456981d851c07ab50f952ad6035617e65e1304cf3c5a316bb648cc124efebbc2ef8b388ef48f51b8ce67ca17da1db11b5c3d888e934362069c1319e527b71cf80ca41f6f87090b4f304dcb5a51cb60c90fa9c54e28"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_KEY={0x18, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x8, 0x1, "43f42e5c"}]}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x200}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x9c, 0x8, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x80, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xd0c0}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x8001}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_TYPE={0x8}}], {0x14}}, 0x4394}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="12043600d3fc03fc01004788031c09100628", 0x12, 0x811, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r4, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c800}, 0x20004886) 1.463928094s ago: executing program 0 (id=6153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xfffffffd}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)={0x114, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67c59d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58d567754734be31d750351dc002eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a37cae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) 1.322319866s ago: executing program 1 (id=6154): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r4}, &(0x7f0000000180), &(0x7f0000000800)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000340)=r5, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e9"], 0x1c}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x11, 0x1, {0x6, 0x7, 0x0, 0x9, 0x0, 0x8, 0xff}}, {0x4d}}, {{0x1c, 0x1, {0x3, 0x0, 0x80, 0x0, 0x2, 0x0, 0x200, 0x2}}, {0x8, 0x2, [0x2, 0xfffc]}}]}]}, 0x78}}, 0x0) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x17}, @void, @eth={@broadcast, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x14, 0x65, 0x0, 0x8, 0x84, 0x0, @remote, @loopback}}}}}}, 0x26) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ad670026311e4daa558000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) close(0x3) 1.127649209s ago: executing program 0 (id=6156): r0 = socket$inet6(0xa, 0x1, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) r3 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, &(0x7f0000000000)=0x100) unshare(0x22020400) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x368, 0x8, 0x7f02ae, 0x368, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r1}}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0xfc}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) 1.011755836s ago: executing program 3 (id=6157): r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xb4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffff9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) unshare(0x2010800) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r2) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xb4, r4, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc80}, 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000600)={'veth0_vlan\x00', &(0x7f00000005c0)=@ethtool_stats={0x1d, 0x1, [0x29b68764]}}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000640)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x3}}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000680)="6c699d4c54d1abdb6b4cdf988c9dd1940fe3dabdc3284c36ae5af3999091fc558f3d32951bcde32c8326d77c4f915086eee4294569166ac9cc9b82bb1b0c7e08e9174998d8c9339ddda0a23d2ac24a78385198abbee1d5ab83549be2fd96b56356a8dbf18464375b17ab37a58bbf805dabaaa5200542778c98fa7b41bf551c9fa198a6843896293c66233883cfe6f215a1bcf6d71e06ae29948f565119ce38f9fb50c1c54d3b23131f345df5ea2f3c7f94481a0bde62decae5c474766870c230d1a595f56b20caa672be8e7a4da8697f3df0853689661cd7fba10e06a30c50eb5fc9", 0xe2}, {&(0x7f0000000780)="f53e659dccb240f0100b0f5f9ec6651e220cccc9b23bbab294d0a7a97c9202f418bf182026feb881069e37f0cf07536e2f75d7131d8a1b0e6168ae2d5a4adb1e6fa81d82a2f04ff166939cbdcf20d9e4c088407abbed93be33185bae686cf7dfa1954ce8a62cd99e110d704923747f6e28dc93c4979d26563b79f41fb948cae9faa1a143703636d8683940aa354e9f31fc4fd1cdf0579b48f08fd76661c86ecafcb76fc682cdc9cb", 0xa8}, {&(0x7f0000000840)="6ca706a5e66c82967fd8bcf37fc72e9ba74f53c8ae45dfb7a5ab9b70ffa755ad37ebae6a19aea3c9268931af8fa667cf3a7f541e614951809415aa146131b1be9c9a9e2b2c10c21fb792998ca04b1a31582f6bf396e49769", 0x58}, {&(0x7f00000008c0)="cb", 0x1}, {&(0x7f0000000900)="e6ee174214a4d3807dc0f0c046a45fb8c2db506147c7650ddc89b187b031a719b24bc1", 0x23}, {&(0x7f0000000940)="d8216082a4f1cf26493e30b65eb8faa7ea9de555b49f8b5585c766da6666a6ee74eef7bca804169b662ae0db72e68f2dfb8f514b8f1aa826faec9e5f49f4763a39a0f6c728502be91cf379dae770c950190448e0a4302ac327d089d8f9770bf336314ffc360ac7c8d5bdc87edcca6a6d1428d2f8a56da72c98767ebb90a7318435c5840a483ee8d64a80c570b63fdf6e190a60372216e6b6ca4067ed3ffb12aa84f0620c418e9907b50aab5613dd32cf500aba75", 0xb4}, {&(0x7f0000000a00)="6f10041379e09f5a60d8d6e97b1056696a7ed05356431ed7c2564d2942ef1569729361bbee4f078af9450e2cf8e7291a9af5181e36afdc904fc7e6a0b21de5ab76e0de4c0af55c3faaa530f3a1fe27f021f4d7ea58e0b6a8317e7f931f101f3e778fc87c213b944260c4c1998664bb4297a571272feb200f9c2dda8cc36fe9f427a7768a7ea2d804b239c759038749cd3df7a1961af24be88ffa51c01cc6e0d1328753e449e13adef8c6f118656abf3e8b2bd6fde323d4957a9b53b3f2", 0xbd}, {&(0x7f0000000ac0)="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", 0xfb}], 0x8, &(0x7f0000000c40)="14c45392b06449c9c30a6992105cf6032162583b4ded7e2ee3aaba46a032a88e5f25c6e2546fdb9ec1c0731049d67a630bf8ee5d95b159ae85c80c928d7328ff0b94f3b997599740fc1b3e9a2169dc0a3f3cbf097491ac0f202357f11b7d17742510247da3fb1d73d29f1d9c52e5ab31b06d620a47f33a3c561f4fa424ee18e59a6071081b480654c13ac03b0af4662d5edecc9cfa63e718ea4748ad066b5aa13d8556f129f96bb975955fe5a1d45fb57d06f22509b7a4cfce39061ddf253b220f53eb4daf70b3172971352426399aa3ca6e7ad9c30f1b02508cc9bd5db861302c6e322c7347371f95449ab2b74f317b586f4b4102", 0xf5, 0x20048054}, 0x20004001) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000dc0), r2) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x30, r5, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_virt_wifi\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040090}, 0x20005051) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f00000015c0)={{r2, &(0x7f0000000ec0)='/(!\x00', 0x2, &(0x7f0000000f00)={@_ha_fsid={[0x81, 0x8]}, {0x9, 0x8, 0x242, 0x7fffffffffffffff}}, 0x400, &(0x7f0000000f40), &(0x7f0000000f80)}, 0x6, &(0x7f0000001500)=[{0x2, 0x2, &(0x7f0000000fc0)='@[[\x00', &(0x7f0000001000)="a8916a5ebb0262ba9d2b22bfc6fadaf0b8281b7569338144d69f5703996674036a34d3dc9fbbda00aa474696b9349c493b839b7f72da36d3400a3229bd9ada65eda032c31ed65ef7e92200b4b45449ba84dd16e5983aa5be66054b5615a851ce013cf800f1fded472bdec91a55e684f137242a7f4f8311113a90d6fb2820422906f55c182c27901569154c59b93f694364b9fc6aa142ec14801af1bdde4ddbaeb150335992c4f94219fb84b62ac0914f07a1a7815deb58ab09eea949122aaf37199ef9849e704789e273b910bd84de19752e2a2fe1fd1c5eeef9cd25225ba3f6c963b84bc238c3a331c5ba9d3d5f4649a4a63d79", 0xf4}, {0x3, 0x1ff, &(0x7f0000001100)='veth1_virt_wifi\x00', &(0x7f0000001140)="42e3c25cd9fc4845628cd08a07760c331ab8dfc18f502b766bc9a92abe46fb9ba5569197c2ed07744d7d9d74a058fa153a5fa56e24200aa5d436edd50540f837d40a", 0x42, 0x38}, {0x2, 0x1, &(0x7f00000011c0)='*!@]},^\x00', &(0x7f0000001200)="457a0261598bb6da3feae21c1a81ff956f3bda127291ebeea422467808a740a89d5c6b3173499f740396ff76ed297a598e82a7cded9833cb8582fa6b752c51c52b847983ec217158ee4ce77693348f4dc39046b7294a5d5986e94d9197798653b497f3e6be1ddb3f28240697f9f2b9ea8548f31627c1524a", 0x78, 0x8}, {0x3, 0xfff, &(0x7f0000001280)='batadv\x00', &(0x7f00000012c0)="188e77b3d4ab45c1071dc2ab4af7a61332ffca9b63b38c389e5e6703c9f7e29c4fa29fbe71921615ddbd519167d9a577", 0x30, 0x12}, {0x1, 0x2, &(0x7f0000001300)='(\x00', &(0x7f0000001340)="31f3dc283abdab8d6d60be2d79cce9620115e70eec740aefe289f42afd5eb20ca7553a8bc34c625d52ad4c8c8b11f057c247680be78579efc149f712bf53237b6d7d9b8c5b3568af450d3b302bc65492c2793b277d9e9f867e6be6279ee92f8773155b86632017f488f3240341849986bef26b66293e0d56", 0x78, 0x8}, {0x3, 0xfffffff6, &(0x7f00000013c0)='#\x00', &(0x7f0000001400)="aaa9c3a116681dad3f3f775d44838dde02029b34a6fe0563e4d3060e2df9f538cbef15193e3bd7c7f207c1a47fde524afe84f83720f5390737c1c6ff5a7cdaa5174749ba3f2ff5a6b8db58e792a6aecc8897e5c713418b4970c5e0cc360cde41759c539f9d48a970fcb7f4a63f465b0add5d66b89e95a0f6b68c1ecf73e43f0223181e6a1d80086669a90490069c736a78211a29a454cc7e33b56b95c607dccbee50d53119ddf91f40b4c1d909af65f81a417e45462ae714e1539de6f641f981ae76d3606699aa227cb4ac25e536fe1a15624d77cf5606bbe26e69e9f26768", 0xdf, 0x1a}]}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x4c, r3, 0x410, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfb5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x20044081) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x10048a0}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x48, 0x140c, 0x200, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4000084) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x20, 0x140c, 0x400, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x4004001) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a00), r6) sendmsg$NL80211_CMD_GET_SURVEY(r6, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x28, r7, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffc, 0x80}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80000}, 0x4100) socket$netlink(0x10, 0x3, 0x1e) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r8, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80100014}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001c00)={'geneve1\x00'}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000001c40), &(0x7f0000001c80)=0xc) accept$inet6(0xffffffffffffffff, &(0x7f0000001cc0)={0xa, 0x0, 0x0, @local}, &(0x7f0000001d00)=0x1c) r9 = accept4$nfc_llcp(r6, 0x0, &(0x7f0000001d40), 0x80800) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r9, 0x8983, &(0x7f0000001d80)) syz_emit_ethernet(0x29, &(0x7f0000001dc0)={@random="5fa918949726", @random="64f2c4a5e3bc", @val={@val={0x88a8, 0x0, 0x1, 0x1}, {0x8100, 0x4, 0x0, 0x3}}, {@x25={0x805, {0x3, 0x8, 0xf1, "1f031541c01d90e75c3d117604d8105e"}}}}, &(0x7f0000001e00)={0x1, 0x2, [0x9f2, 0x672, 0x701, 0x4e2]}) 901.393424ms ago: executing program 0 (id=6158): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000140)={0x24, {{0x29, 0x0, 0x2000000, @private2, 0x1000000}}}, 0x88) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) accept$alg(r0, 0x0, 0x0) socket(0x6, 0x5, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="37ec000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$inet(0x2, 0xb, 0xbf) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x30, 0x0, 0x0, 0xfffff018}, {0x6}]}, 0x10) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, 0x0) socket(0x40000000015, 0x5, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r8 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt(r5, 0x0, 0x19, 0x0, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0x17, &(0x7f0000000340)=0x5, 0x4) r10 = socket(0x11, 0x2, 0x10001) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0xae9, 0x8}, {0xfffffff6, 0x2}]}}) 901.055395ms ago: executing program 4 (id=6159): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@private}}, &(0x7f0000000100)=0xe8) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sec_ctx={0xc, 0x8, {0x8}}]}, 0x144}}, 0x4810) 732.883313ms ago: executing program 4 (id=6160): syz_emit_ethernet(0x3e8, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@getqdisc={0x2c, 0x26, 0x400, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xfff1, 0xf}, {0xa, 0xc6a24cc9b558c0e5}, {0xf, 0xa}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004050}, 0x4010) syz_extract_tcp_res(&(0x7f0000000000), 0x7, 0xf4) 689.35826ms ago: executing program 1 (id=6161): r0 = socket(0x27, 0x800, 0xa000) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) (async) recvmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x1000000}}], 0x14, 0x0, 0x0) 513.500149ms ago: executing program 1 (id=6162): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) (async) 510.374425ms ago: executing program 0 (id=6163): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x98, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_bpf={0x80, 0x20, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0xc, 0x4, [{0x5, 0x80, 0xc, 0x7}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x33, 0x6, "78bf3b4b0b3561a90922bb8dde35129b749d6bc4ea66e84118ac39d55987f19b39902bea498bd8048baf16e9ceb470"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 466.920326ms ago: executing program 3 (id=6164): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)) socket(0x2b, 0x80801, 0x1) socket(0xa, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_int(r4, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n'], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000040000100fcff0700040000000100000004004880300001802c00108014000c80100090800c00588008007300", @ANYRES32=0x0, @ANYBLOB="14000c00000093b0b9a0fab1946d000000000000080002"], 0x50}, 0x1, 0x0, 0x0, 0x4000805}, 0x2004c094) 425.795355ms ago: executing program 4 (id=6165): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map=r3, r2, 0x5}, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40000) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0xb0b}, 0x14}}, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000040)=0xb4d5f59234a458bb, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2877, 0x0, 0x0, 0x0, 0x4}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3ff}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0xe9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0xffffffffffffffff, 0x1], &(0x7f0000000240)=[{0x5, 0x4, 0x2, 0x5}], 0x10, 0x7}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f0000000080)='syz1\x00', 0x1ff) 365.185563ms ago: executing program 1 (id=6166): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x53, 0x1000004, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2={0xff, 0x5}, 0x10, 0x8, 0xb4, 0xcfe}}) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000040)={0x2, 0x2080, @multicast2}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000001c0)="05541e7af6776ebd0c17ead992b62f805feb06e91c51b27f15b1948863e56936dd963d024004f9cbbdc840de78918a3ec9976b37b656dd75740eafeb9dbb1cbb64212b6a425f07c05b3323071c80", 0x4e}, {&(0x7f0000000100)="c81a8fb6e0d9b7bd8070b27d742af3611504bf3de0bc65043bb2758833c86d8da3d334ff8424fc84044ad806a21a83", 0x2f}, {&(0x7f0000000240)="0a5029a920fa9de8cb0610661841cc8bc2c8eb976b87f84eb0a4b3f4dacd01196f2446edc46393de265f6948ed0a871e49a22323b4b51c8f1a6c094c9cc394aa6599a8b7978e979cbaf0bd3e8367b83f125476298f0e503d1379799ddc5a014926953d9f49f6cc83098fef9a3ea456aeaeaffef276e38a59eac1122f0f7d3cd60a9f90cfdf", 0x85}, {&(0x7f0000000300)}, {&(0x7f0000000340)="8127d099cc54eb2ba6d32ff195a32f58b615fd816dd25c1e9570af5e346be0e55faadb78ae49bc05611d67dd4e3c39bb4ff8d3195924498a71d55691c92e2879a340ff8dd292b7ca43c1254b0ff2cadda5eddd2ac8f353c249", 0x59}, {&(0x7f00000003c0)="010bde81d8ed715d933b479b657f65fdebaf5de37f54974f97dd40d1014c02", 0x1f}, {&(0x7f0000000540)="a28eb2bf1e06ac7cd167e12e3377c71604f81449d8a7442a1784ecc433b9eeca26193c02761780c6d85a17f217dad305152d8ac856ebaa2919eddded483a5b6a4c13ba64da9367a0652f03cf68076e", 0x4f}, {&(0x7f00000005c0)="2f4f28f4edc49f16d3d9b13de44b287160a1b192d53a744799dd12cff0f2887c80f28d77ea77c5750164fc1f85830c05cff2d5f85b8a12f053cf7d4d12ff649e198c128f6895d74fab0d4bc2b5c38e547cebb7a72eb2bfdf0c2e7b967036bdf368a8bbe7ef27f03f00dcb689", 0x6c}, {&(0x7f0000000640)="7a0d1184e6d9f766f0f6a56cf009f7518ec7a8941e08c80925884fd91024a2a8fa5e04d9e313e44405425e6ceda864f148b8b683ae5fd33f41672247a6dc6440e82148eb03864d341e46765ab2add10abe4a16e04a70eedbd8273c61567ee49778914412f237fb0af03caa45a46c6b3f500c9e177ad6bea795bf1b2dca4f5c38de9b176b2a1fa9ad3eea62f19313620c6696020d", 0x94}, {&(0x7f0000000700)="ca0e50fe6c51d374d19f84701bb4b6b5b036815ad100ee89fe1c4c2da2cb02fa80620cfd71f0f54f5bd1698a7aabc18d9ae929b6818c39f18d58a192877f5ef432c987e2671a0702bda321814452a1bc0c01dfba5d89d62e3c2b30d6ed01cdc4f05e2803faff9fff2557320dff69959e26e2b6e3671074216cc48a8a4e5af1798836cf8e14705dd650d2b698426073f3f3b0f9b7416eb353fb5f0f5b8646b67003d976f1bca059884a50f3932e31f81cd8a15ece0096e315", 0xb8}], 0xa, &(0x7f0000000400)=[@ip_ttl={{0x14, 0x0, 0x2, 0xb}}], 0x18}, 0x4008000) vmsplice(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000500)="acf9229acdadd32e4dc507da38cda3e114e145884c4f75ae252b49a7de87606b68219e081a3998965b3ad92cfafa679daff2c2f1533fe74119005571cfdc", 0x3e}, {0x0}], 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a00000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000007400038070000080080003400000000264000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010200001800e000100636f6e6e6c696d69740000000c0002800800014000"], 0x124}}, 0x0) 330.555697ms ago: executing program 0 (id=6167): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) 283.737607ms ago: executing program 4 (id=6168): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a0f8ff4100000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x96, &(0x7f0000000080)=""/150}, 0x94) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) socket$phonet_pipe(0x23, 0x5, 0x2) 245.699943ms ago: executing program 1 (id=6169): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xfffffffffffffd6e, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x8000, 0x20, 0x2, 0x50d8, {{0x15, 0x4, 0x3, 0xa, 0x54, 0x66, 0x0, 0x45, 0x4, 0x0, @local, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0xb9, 0x1, 0xc, [{@multicast2, 0x800}, {@multicast1, 0x1}, {@loopback, 0xce17}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0xd5, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0x7b, 0x3, 0x3, [{@local, 0x5}]}]}}}}}) r4 = socket(0x2a, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close(r9) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r15, {0x0, 0x3}, {0xfff1, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xffffa165}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010040}, 0x4000) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r16, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfffe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x44884) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x30, 0x2c, 0xd27, 0x2070bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r16, {0x6, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)={0x9c, r2, 0x10, 0x1070bd27, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4008004}, 0x85) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="7c5331fc9356b5b1000600008100", 0x0, 0xd5b2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 125.720478ms ago: executing program 0 (id=6170): ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000000)={'bond_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x12, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit, @jmp={0x5, 0x1, 0x4, 0x0, 0xa, 0x0, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x3, 0x20, &(0x7f0000000380)=""/32, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0xd, 0x8, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000440)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000480)=[{0x2, 0x5, 0x5, 0x5}, {0x0, 0x2, 0xd, 0x7}, {0x2, 0x4, 0x4, 0x8}, {0x3, 0x2, 0x8, 0x1}, {0x0, 0x1, 0x8, 0x9}], 0x10, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x28, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x284, 0x86, &(0x7f00000000c0)=""/134, 0x40f00, 0x68, '\x00', r0, @fallback=0x17, r2, 0x8, &(0x7f0000000200)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0xd, 0x8, 0x2}, 0x10, 0x0, r3, 0x6, 0x0, &(0x7f00000005c0)=[{0x2, 0x5, 0xe, 0x2}, {0x5, 0x4, 0xf, 0x6}, {0x2, 0x3, 0x9, 0x1}, {0x2, 0x5, 0x0, 0x4}, {0x0, 0x3, 0x1}, {0x10000, 0x1, 0x2, 0x3}], 0x10, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1}, &(0x7f0000000700), &(0x7f0000000740)=r3}, 0x20) r4 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r1, &(0x7f0000000c80)={&(0x7f00000007c0), 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000840)=""/70, 0x46}, {&(0x7f00000008c0)=""/252, 0xfc}, {&(0x7f00000009c0)=""/76, 0x4c}, {&(0x7f0000000a40)=""/21, 0x15}, {&(0x7f0000000a80)=""/21, 0x15}], 0x5, &(0x7f0000000b40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x130}, 0x3) ioctl$TUNSETNOCSUM(r7, 0x400454c8, 0x1) sendmsg$GTP_CMD_ECHOREQ(r11, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x88, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_LINK={0x8, 0x1, r0}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}]}, 0x88}, 0x1, 0x0, 0x0, 0x200408c0}, 0x804) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000e40), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f0000000e80)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000ec0)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000f00)={r14, 0x7d, "b95210c027bfa36335e774fb41aab2edcb4386aabd39cce0e2937a2c4d6021329eee0f14805bb85f241c23e71aeb93247f5528a7693f758fb374b3ee01e7f2658b25a6ebc9f851e0ca5377fbc7989880944a1dc7224bfa682ac3fdaf3352b8f2392269d64d614f5209a77ee8a03f114dae08e0ba0943ef8251c50b2fe0"}, &(0x7f0000000fc0)=0x85) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0xa1903306a4b9c653}, 0xc, &(0x7f0000001480)={&(0x7f0000001040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8808}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}]}]}, @NFT_MSG_NEWSET={0x114, 0x9, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1d2e}]}}}, @NFTA_SET_USERDATA={0x18, 0xd, 0x1, 0x0, "2b6b9a734ea7e04d6d5d863b98f6a3cee46d19d7"}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_EXPRESSIONS={0x78, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x5}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x2c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xaf}]}}}]}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8000}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x28, 0x8, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x118, 0x14, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_OBJ_USERDATA={0xf8, 0x8, "53713826a46f84b20d77866de11acb6d2b12c23fc12282ef1b532e1fb90579bd2a86a63c1723e65e166e44b0bc1e9962a0477a7b63dbd8aac34d48856b5e4a7f3a3bfa6cc83a70912ce42007cbfe7c963ef84d0e87eb9374ffb92233eba0723443a406a7869d3de04c084a34e464677338f2f99203475701a955073b5ea9e48fcd3e419c80fb439af8d0a6fbc45997301c655786594edc8f0c097b2fb8c7a06b51091e77c4ed747b1a8f19878444d5394b58fb4e5c6a77537f7c1403fceb1cdded9a7d8fad26af81bfc27e0032f06aee396f22d5cd73e1924d76bc67d4d0c97355202a5c257468e2cc98e69c2a9d1250999741d8"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0xf4, 0x18, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x90, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x949}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x50, 0x16, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x41c}, 0x1, 0x0, 0x0, 0x24004014}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r12, 0x84, 0xe, &(0x7f0000001500)={0x0, 0x8, 0x8dd, 0x9c65, 0x101, 0x7, 0x4, 0x5, {r13, @in={{0x2, 0x4e21, @multicast1}}, 0x0, 0x0, 0x53, 0x9, 0x9}}, &(0x7f00000015c0)=0xb0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r9, 0x84, 0x6d, &(0x7f0000001600)={r15, 0xfb, "f3f2091770c47444295a0b1e5077ae65f35610fbadfc189daf5a71c73fe90293334844b402ae1b04c771a51a1224507aa213548a2f4232da3d19579073951e29a71c50469456b82a541eb714aae1d75ac52b646bf19f9420845db1f68d7363d9601ce88e36c726a1cdab1b9faacf8b2f35649dc6e38f5f5d9593e25ae332dae4939fa4d6edac7ba7dba407909f68845a5e7e9ed665b56510ca8dfa9c99aa5ba4120c3e8f31bd3addc17812327a2d09435d383e0d5814b5c1e96050857efa18428d28fd2592cd49c6198f50581f3f324f4107c00d3dda00f42df3a5ffe8a524271659135bd9aaa602d895d432b7f8589273bd410b35a23befb6d2a3"}, &(0x7f0000001740)=0x103) r16 = socket$kcm(0x29, 0x5, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, &(0x7f0000001980)={{r4, &(0x7f0000001780)='syz1\x00', 0x1e0880, &(0x7f00000017c0)={@align=0x100, {0x5, 0x5, 0x7e, 0x2}}, 0x0, &(0x7f0000001800), &(0x7f0000001840)=0x2}, {[0xff, 0x8, 0x5, 0x69a]}, 0x2, 0xdb, &(0x7f0000001880)=""/219}) r18 = syz_genetlink_get_family_id$batadv(&(0x7f0000001a40), r10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r17, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x28, r18, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001c40)={@fallback=r9, 0x15, 0x1, 0x7ff, &(0x7f0000001b40)=[0x0], 0x1, 0x0, &(0x7f0000001b80)=[0x0, 0x0, 0x0], &(0x7f0000001bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r19 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPVS_CMD_SET_DEST(r19, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40045}, 0x40000) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000001d80)=0x7f, 0x4) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000001dc0)) connect$rose(r2, &(0x7f0000001e40)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) r20 = accept4$rose(r11, &(0x7f0000001e80)=@full={0xb, @dev, @null, 0x0, [@netrom, @rose, @null, @remote, @default, @bcast]}, &(0x7f0000001ec0)=0x40, 0x1800) ioctl$sock_rose_SIOCDELRT(r20, 0x890c, &(0x7f0000001f00)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, @null, @bpq0, 0x5, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_inet_SIOCSIFPFLAGS(r16, 0x8934, &(0x7f0000001f80)={'netdevsim0\x00', 0x1d}) 110.306058ms ago: executing program 4 (id=6171): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0xa) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xdc, 0x464, 0x100, 0x70bd2a, 0x25dfdbfc, "42526186ab571274f4b66723e7a951c43eae89173102816a9c3773e48aad696a2602970f6b37a219006b1a9057ada4199b51c06067c057dd148621e7d0d82e07f362a0bd965a3e13e589ec8d7790caf0953fa8adc9a2b8e94c62b6703fb158dd4f4707eb31a1dde5060cd3e6e903bf353c214d0d21d40d1e1c71412d4521c434785d6a81f715b098526538d386d9460d14539a41c05a5a2b57982f5d2a81172edc8258666401643f8fd7d7cbe7602a276416443bd88f3e54704119013cc309a1e15eb8b94f7675ba55ce6bac", [""]}, 0xdc}, 0x1, 0x0, 0x0, 0x80}, 0x88) (async) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000240)={'pim6reg\x00'}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000280)={r2, 0x5, 0x6, 0x2}) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r4}, 0x8) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000300)) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) (async) sendto$inet(r5, &(0x7f0000000340)="7173fd7e97c8d8b32e8a441e2affff8cd7380805deadfa4827eeca508cfe6805b016b1fa831a780b15f290b0fe07e1120221bf3cd4d998099e83e78cb49234ab8f52c58543134eacf4f074a2d1738e08ed1c1ae0268c2cc2e3dc960d7616370b89d22dca40fc87d801baeaa9f42c8673a1ca4498cc1d1dd8dede0f7120a9a80e8d1f0014b5dac2fff69feb383bea441df52acf4b33c14def8d6d301937dd8aaf46e7ee04c2e43a3d8951a46cb7edda8a9ea1662dbd3de4934ee68ba384a3ce42ff3d24067885db91fc2800908be04e92324b3f4852b78802a446e19746e7c125162890902658c7a6f3cb192d", 0xec, 0x4000, &(0x7f0000000440)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$XFS_IOC_READLINK_BY_HANDLE(r1, 0xc038586c, &(0x7f0000000580)={r0, &(0x7f0000000480)='.]^\x00', 0x48000, &(0x7f00000004c0)={@_ha_fsid={[0x5, 0x50a]}, {0x400, 0x1641, 0x5, 0x3}}, 0x4, &(0x7f0000000500)={@_ha_fsid}, &(0x7f0000000540)=0x7}) (async) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x41404405}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x68, 0xe, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) (async) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x6c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1476}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r6 = socket(0x2b, 0x800, 0x8) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e20, 0x2, @remote, 0x1}}, 0x8, 0x66da, 0x8000, 0xfffffffe, 0x36, 0xb, 0xeb}, &(0x7f0000000900)=0x9c) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000940)=r7, 0x4) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000980)) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) (async) socket$tipc(0x1e, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xb8, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xe}}]}, @IPSET_ATTR_ADT={0x94, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3ff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xa}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xfff7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x7f}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000800}, 0x42) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000000b40)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "18be8cc7425175"}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000001b40)={{r8, 0x7ff, 0x8, 0x3ff, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x3, 0xb, 0x0, 0x1e62, 0xc, 0x7fffffffffffffff}}) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000002b40)={0x6, 0x200, 0x8, 0x4, 0x0, 0x800}) (async) ioctl$sock_netrom_SIOCDELRT(r5, 0x890c, &(0x7f0000002b80)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0xffffffff, 'syz0\x00', @null, 0x7f, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) (async) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, &(0x7f0000002c00)={'icmp6\x00'}, &(0x7f0000002c40)=0x1e) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002cc0), r1) sendmsg$TIPC_NL_NODE_GET(r6, &(0x7f0000002e80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002d00)={0x124, r9, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xaa3}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0xe4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x67}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x51c8dac7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}]}, 0x124}, 0x1, 0x0, 0x0, 0xc040}, 0x40400c1) 79.454426ms ago: executing program 3 (id=6172): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='%&(\x00', 0x8601, &(0x7f0000000040)={@_ha_fsid={[0x400, 0xe0fe]}, {0x4, 0xc8e, 0x8d, 0x5}}, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x1}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x6, &(0x7f0000000180)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2}], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x9, 0x3, 0x1}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000280)=[{0x1, 0x1, 0x7, 0x3}, {0x4, 0x3, 0xc, 0x7}, {0x2, 0x2, 0x6, 0x8}], 0x10, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)=r1}, 0x20) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r4, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44800) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000540)={'HL\x00'}, &(0x7f0000000580)=0x1e) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000006c0)={r0, &(0x7f00000005c0)='IPVS\x00', 0x102, &(0x7f0000000600)={@align=0x7, {0x6, 0x5, 0x7, 0x400}}, 0xc11, &(0x7f0000000640)={@_ha_fsid}, &(0x7f0000000680)=0x3}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r5, 0x8008f512, &(0x7f0000000700)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000780)=@deltaction={0x21c, 0x31, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xaad6}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0x10, 0x208, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd805}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x43}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x2040000}, 0x4020840) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000a40)={'veth0_macvtap\x00', 0x0}) shutdown(r0, 0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000a80)=0xffffffffffffffff) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000b00)=0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)=@getpolicy={0x7c, 0x15, 0x20, 0x70bd2a, 0x25dfdbfd, {{@in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e21, 0x8001, 0x4e24, 0x4439, 0x2, 0xa0, 0xa0, 0x5e, r6, r7}}, [@offload={0xc, 0x1c, {r6, 0x2}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xa}, @replay_val={0x10, 0xa, {0x70bd29, 0x70bd25, 0xfffffffb}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x64804) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c40)='./cgroup/syz1\x00', 0x200002, 0x0) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000002040)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002000)={&(0x7f0000000cc0)={0x1334, 0x13, 0x200, 0x70bd29, 0x25dfdbfd, {0x3b, 0xc0, 0x7, 0x6, {0x4e23, 0x4e20, [0x401, 0x7, 0x7, 0x211], [0x4, 0x8, 0x10, 0x8], r6, [0x200, 0x81]}, 0x3, 0x5c44}, [@INET_DIAG_REQ_BYTECODE={0x2c, 0x1, "6686ba2c07fa26b9b79bccb7c6c994bbcaa0ced08022fd93ef2363c930b87f7456decf95aa65d9a1"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xfe, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xcf, 0x1, "7f6480db7520f33fc88e52e9cfb44a18a5df8a2f0c7484b748a7167ade278f408e501a5e0d78b002d35d56671eee8e3c229a55abeab68b8ac2308df6523fcadcd68b975eeb1833ecebec1a90af4d0ac837665eec5ccec8266a1fba8a4a0b973c22e88171500e8c91c7bc9746df9a130d6ce98de119239adb34e65d795ef343714cf42bdd98890358c6f7f03fbfa43583c6184fc68fa64330fa9bdc386417bba7397f53a5a0b28360458be96675bdd8ad65ab94219a0ea0df1bbc338b31e92fd098ee5b0feca61c7926d6f8"}, @INET_DIAG_REQ_BYTECODE={0xe6, 0x1, "0f67153d3e771c86e8b1245812ffba3b53d3a0acb84a6bd69bfe9609a1891b076436e33b5676f0c14f0d060c64c3c9723c5ae17d99c41c0084ad2a6864cba2fe6aaa6b2f8bbddefcfe3a10db3bb279e96fee194edfadc94a7b129cb7680d5c485b32b336ab0c0a5e72413d81c7323fc19e646ac5aa01db58741df184441d022b4239df334568cf5b1cb421f00147806095f4bdc47b219f3cc2527cc502df869f6ceeff3e4644120eeee6b442815b3523462b181750a15d1a768eab2877a63a3155c02852dabf9d4cb1c584d0c9054683cf5be40d2aafd8a8a607356a6f1d59c402b8"}]}, 0x1334}, 0x1, 0x0, 0x0, 0x40040}, 0x24000088) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000002080), 0x3) bind$can_j1939(r5, &(0x7f00000020c0)={0x1d, r6, 0x1, {0x1, 0x1, 0x2}}, 0x18) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000002100)={0x40, 0x1, 0xfffffffa, 0x99a4}, 0x10) r9 = openat$cgroup_ro(r8, &(0x7f0000002140)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0x7, &(0x7f0000002180)={0x9, 0x9, 0x6}, 0x10) connect$vsock_stream(r0, &(0x7f00000021c0)={0x28, 0x0, 0x2710, @host}, 0x10) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000002200)={'veth1_to_hsr\x00'}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f00000022c0)={&(0x7f0000002240)=""/109, 0x6d}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000002300)={0x0, 0x61, 0x1}, 0x8) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000002640)={{'\x00', 0x1}, {0xb}, 0x0, 0x0, 0x0, &(0x7f0000002340)='./file0\x00', &(0x7f0000002380)='./file0\x00', &(0x7f00000023c0)="eee3d40295ace177b058ec2ca4753324e64b61d6a0f83a81b1df24fd0505b72f1e9b3db6f2c8f9a8077d0569ade514fffd12982c0a69b119871de3ea42d0ea92c58e3817f3e887070392bbc340cd1b7e9a8c760e67b7e02247f9e48b0ee36f541c7404", 0x63, 0x0, &(0x7f0000002440)={0x2, 0x183, {0x0, 0xc, 0xcb, "6e2d0f025b6d4e5cd65d542554014f3aecccf1c58faaa1cd651c915dcb0e0710164c39bc06813098bee0be87b5035c4e0414e0e0137ce559eff498b1b18bc8086e02a784f9a789b1a2d7ccd5107f1b34e3b7c0d17e32d8aa9af12508f57fbfffa7e7f1aa5523c73d883276195af2d2a0a08034d4758ddc4adff75521884bac3145b24e554cd21296aedccdd0e6272ff722c6eb79908ace441da6336149c681d0fb039d9b084b03b367a5cc9bf265460c3dfa57544edccbee81cb45bd51ff836ae2d12f60f91a838a76daad", 0xab, "757588319efed0b428035bd96450e98558edb16e4b90cec7dd27087eaf76a481902da091eec66a188aa70c16b3a1afea6ca0a34c67e2f876212b5da9f43bd55f2fcfd26ab362f2433a7b497d103ed4bf16d44dd5a13d5cb424568ad97d21b650f7b58d126c4b306fe1d4e5ee7607a57bdb483ca39c195e6088eacb49691e7c4f4716bac1fa6d53834977daa104635ae9f08b6a8ce42a69ed9e6d8cd72b1a35a55b2addada70f76dbb3d1cd"}, 0x5d, "6e9006badd97a1d3ca663ebce01a7b824c978e5e06772cbea0976cbc37689b52ad8c4eb6a1210df269c6dd1e333b25089887de0f8f357b3c8a644692b24527397f5ed89e4802c5efd0a86e463ffc41c3cdf1fd9445f772f30af383a915"}, 0x1ec}) 0s ago: executing program 4 (id=6173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000000c0)="fc", 0x1) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) splice(r1, 0x0, r3, 0x0, 0x1100000000f336, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x20000854) socket$inet6_mptcp(0xa, 0x1, 0x106) kernel console output (not intermixed with test programs): ler0: entered allmulticast mode [ 680.230329][T25482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.240120][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.263008][T25482] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 680.271240][T25482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.281930][T25482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.291701][T25482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.309232][T25482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.318846][T25482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.336861][T25474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.426449][T25463] lo speed is unknown, defaulting to 1000 [ 681.710796][T25512] netlink: 'syz.2.5315': attribute type 1 has an invalid length. [ 681.814303][T25512] 8021q: adding VLAN 0 to HW filter on device bond5 [ 681.823083][T25522] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5314'. [ 681.856684][T25524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5319'. [ 681.889267][T25517] bond5: (slave geneve2): making interface the new active one [ 681.898737][T25525] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5317'. [ 681.917990][T25517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.941268][T25517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.956544][T25517] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 681.980549][T13339] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 681.998927][T13339] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 682.102669][T13339] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 682.128103][T13339] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 682.193176][T25540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5324'. [ 682.210479][T25540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5324'. [ 682.230543][T25540] netlink: 124 bytes leftover after parsing attributes in process `syz.2.5324'. [ 682.352027][T25549] tap0: tun_chr_ioctl cmd 35111 [ 683.405808][T25571] bond6: entered promiscuous mode [ 683.494840][T25580] nbd: couldn't find a device at index 0 [ 683.703157][T25592] batadv_slave_1: entered promiscuous mode [ 683.750801][T25592] __nla_validate_parse: 3 callbacks suppressed [ 683.750819][T25592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5340'. [ 683.785966][T25597] pim6reg: entered allmulticast mode [ 683.813321][T25592] batman_adv: batadv0: Removing interface: ipvlan0 [ 683.843690][T25600] netlink: 'syz.4.5339': attribute type 21 has an invalid length. [ 683.856736][T25601] netlink: 'syz.2.5341': attribute type 10 has an invalid length. [ 683.898692][T25600] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5339'. [ 683.915295][T25592] batadv_slave_1 (unregistering): left promiscuous mode [ 683.915910][T25605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5341'. [ 684.011701][T25605] team0: left allmulticast mode [ 684.029997][T25605] team0: left promiscuous mode [ 684.037189][T25605] bridge0: port 1(team0) entered disabled state [ 684.176147][T25609] syzkaller1: entered promiscuous mode [ 684.214474][T25609] syzkaller1: entered allmulticast mode [ 684.365551][T25600] netlink: 'syz.4.5339': attribute type 5 has an invalid length. [ 684.374811][T25600] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5339'. [ 684.378172][T25611] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5344'. [ 684.571508][T25615] lo speed is unknown, defaulting to 1000 [ 684.572504][T25617] netlink: 'syz.1.5346': attribute type 1 has an invalid length. [ 684.580743][T25615] lo speed is unknown, defaulting to 1000 [ 684.703103][T25622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5347'. [ 684.713022][T25617] 8021q: adding VLAN 0 to HW filter on device bond7 [ 684.741707][T25617] xt_l2tp: invalid flags combination: 8 [ 684.781512][T25619] bond7: (slave veth11): Enslaving as an active interface with a down link [ 684.812170][T25624] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5346'. [ 684.877563][T25617] bond7: (slave dummy0): making interface the new active one [ 684.899459][T25617] dummy0: entered promiscuous mode [ 684.927223][T25617] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 684.961377][T25626] vlan0: entered allmulticast mode [ 684.967113][T25626] bridge0: entered allmulticast mode [ 685.041541][T25624] bond7: (slave dummy0): Releasing active interface [ 685.052442][T25624] dummy0 (unregistering): left promiscuous mode [ 685.303863][T25634] netlink: 'syz.1.5350': attribute type 30 has an invalid length. [ 685.801362][T25656] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.5357'. [ 685.991003][T25660] netlink: 'syz.0.5359': attribute type 1 has an invalid length. [ 686.040390][T25663] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5360'. [ 686.070456][T25660] 8021q: adding VLAN 0 to HW filter on device bond7 [ 686.084451][T25663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5360'. [ 686.321503][T16270] net_ratelimit: 12 callbacks suppressed [ 686.321529][T16270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.952780][T25700] netlink: 'syz.0.5373': attribute type 2 has an invalid length. [ 686.964498][T25700] netlink: 'syz.0.5373': attribute type 2 has an invalid length. [ 687.364811][T25716] netlink: 'syz.3.5380': attribute type 10 has an invalid length. [ 687.373461][T25716] mac80211_hwsim hwsim40 wlan1: left allmulticast mode [ 687.381552][T25716] mac80211_hwsim hwsim40 wlan1: left promiscuous mode [ 687.389268][T25716] bridge0: port 1(wlan1) entered disabled state [ 687.400493][T25716] bond0: (slave wlan1): Opening slave failed [ 687.449286][T16270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.500868][T25723] erspan0: left promiscuous mode [ 687.718301][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.060561][ T7820] IPVS: starting estimator thread 0... [ 688.168361][T25737] IPVS: using max 33 ests per chain, 79200 per kthread [ 688.578445][T13339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.883531][T25761] netlink: 'syz.4.5394': attribute type 3 has an invalid length. [ 688.898779][T25761] netlink: 'syz.4.5394': attribute type 1 has an invalid length. [ 688.952939][T25761] __nla_validate_parse: 10 callbacks suppressed [ 688.952964][T25761] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5394'. [ 689.047943][T25762] syzkaller1: entered promiscuous mode [ 689.054089][T25762] syzkaller1: entered allmulticast mode [ 689.228584][T25764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5396'. [ 689.512637][T25781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5400'. [ 689.644403][T25788] netlink: 424 bytes leftover after parsing attributes in process `syz.0.5402'. [ 689.654792][T25788] netlink: 'syz.0.5402': attribute type 1 has an invalid length. [ 689.657646][T25786] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5403'. [ 689.718132][T16259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.771436][T25790] netlink: 'syz.4.5400': attribute type 39 has an invalid length. [ 690.144945][T25809] netlink: 'syz.0.5406': attribute type 9 has an invalid length. [ 690.156135][T25809] netlink: 'syz.0.5406': attribute type 11 has an invalid length. [ 690.172969][T25809] netlink: 'syz.0.5406': attribute type 12 has an invalid length. [ 690.185769][T25809] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.5406'. [ 690.191373][T25810] syzkaller0: entered promiscuous mode [ 690.212220][T25810] syzkaller0: entered allmulticast mode [ 690.220469][T25809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5406'. [ 690.626688][T25828] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5417'. [ 690.638646][T25828] netlink: 658 bytes leftover after parsing attributes in process `syz.4.5417'. [ 690.673883][T25828] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5417'. [ 690.828291][T16270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.458060][T25868] lo: Caught tx_queue_len zero misconfig [ 691.926848][T25892] bond8: entered promiscuous mode [ 691.948256][T25892] 8021q: adding VLAN 0 to HW filter on device bond8 [ 691.960631][T13337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.034832][T25909] pim6reg: left allmulticast mode [ 692.256801][T25921] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 692.625762][T25950] bond4: (slave veth15): Enslaving as an active interface with an up link [ 692.679634][T25947] lo speed is unknown, defaulting to 1000 [ 692.717733][T25947] lo speed is unknown, defaulting to 1000 [ 692.788555][T25958] validate_nla: 4 callbacks suppressed [ 692.788577][T25958] netlink: 'syz.3.5452': attribute type 4 has an invalid length. [ 692.860963][T25965] netlink: 'syz.3.5452': attribute type 4 has an invalid length. [ 693.088378][T16270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.959720][T25994] __nla_validate_parse: 9 callbacks suppressed [ 693.959755][T25994] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5464'. [ 694.199866][T13336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.225566][T26008] xt_hashlimit: size too large, truncated to 1048576 [ 694.322665][T26010] x9: renamed from bridge_slave_0 [ 694.599297][T26019] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 694.646746][T26013] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1514) ! [ 694.673463][T26021] dvmrp0: entered allmulticast mode [ 694.699557][T26019] netlink: 'syz.3.5470': attribute type 13 has an invalid length. [ 694.714402][T26013] lo speed is unknown, defaulting to 1000 [ 694.752921][T26023] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5470'. [ 694.790022][T26024] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5469'. [ 694.865667][T26013] lo speed is unknown, defaulting to 1000 [ 694.926738][T26023] bond0 (unregistering): Released all slaves [ 695.120091][T26026] tipc: Enabled bearer , priority 0 [ 695.142346][T26026] syzkaller0: entered promiscuous mode [ 695.168669][T26026] syzkaller0: entered allmulticast mode [ 695.238645][T26026] tipc: Resetting bearer [ 695.257344][T26025] tipc: Resetting bearer [ 695.277208][T26031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5473'. [ 695.313067][T26025] tipc: Disabling bearer [ 695.330729][T26032] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5473'. [ 695.379469][T13339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.501014][T26040] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5476'. [ 695.607014][T26048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.616333][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.638789][T26048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.907437][T26057] No such timeout policy "syz0" [ 695.942436][T26057] netlink: 'syz.4.5481': attribute type 1 has an invalid length. [ 695.970282][T26048] bond7: option packets_per_slave: invalid value (1048582) [ 695.977650][T26048] bond7: option packets_per_slave: allowed values 0 - 65535 [ 695.999660][T26057] netlink: 'syz.4.5481': attribute type 2 has an invalid length. [ 696.026282][T26048] bond7 (unregistering): Released all slaves [ 696.268554][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.592498][T26077] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5488'. [ 696.608212][T26078] bridge0: entered allmulticast mode [ 696.774591][T26083] netlink: 'syz.3.5489': attribute type 1 has an invalid length. [ 696.936978][T26083] bond0: entered promiscuous mode [ 696.943404][T26083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.952374][T26091] bond4: (slave vlan0): Opening slave failed [ 696.962595][T26093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5491'. [ 696.962615][T26090] netlink: 'syz.2.5491': attribute type 8 has an invalid length. [ 697.212320][T26106] net_ratelimit: 1 callbacks suppressed [ 697.212343][T26106] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 697.271164][T26108] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5498'. [ 697.311928][T26108] IPv6: sit3: Disabled Multicast RS [ 697.320245][T26108] sit3: entered allmulticast mode [ 697.431143][T26118] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5502'. [ 697.638433][T13336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.983982][T26151] netlink: 'syz.0.5508': attribute type 1 has an invalid length. [ 698.112823][T26160] tunl0: Caught tx_queue_len zero misconfig [ 698.310534][T26167] netlink: 'syz.4.5513': attribute type 1 has an invalid length. [ 698.524514][T26172] netlink: 'syz.2.5515': attribute type 7 has an invalid length. [ 698.524514][T26174] netlink: 'syz.2.5515': attribute type 7 has an invalid length. [ 698.524543][T26174] netlink: 'syz.2.5515': attribute type 8 has an invalid length. [ 698.550128][T26172] netlink: 'syz.2.5515': attribute type 8 has an invalid length. [ 698.593103][T26177] xt_hashlimit: size too large, truncated to 1048576 [ 698.609049][T26174] netlink: 'syz.2.5515': attribute type 8 has an invalid length. [ 698.643747][T26174] netlink: 'syz.2.5515': attribute type 4 has an invalid length. [ 698.684386][T26172] netlink: 'syz.2.5515': attribute type 8 has an invalid length. [ 698.723505][T26174] netlink: 'syz.2.5515': attribute type 7 has an invalid length. [ 698.752356][T16270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.984754][T26154] __nla_validate_parse: 8 callbacks suppressed [ 698.984780][T26154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5511'. [ 698.985543][T26197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5520'. [ 699.075429][T26200] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5522'. [ 699.107774][T26200] netlink: 260 bytes leftover after parsing attributes in process `syz.0.5522'. [ 699.142266][T26200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5522'. [ 699.173676][T26200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5522'. [ 699.340369][T26215] openvswitch: netlink: Unknown key attributes 2 [ 699.419389][T26220] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 699.553713][T26222] bond7: (slave veth17): Enslaving as an active interface with a down link [ 699.603181][T26222] bond7: (slave veth19): Enslaving as an active interface with a down link [ 699.623450][T26222] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5529'. [ 699.637252][T26222] 8021q: adding VLAN 0 to HW filter on device bond7 [ 699.756530][T26235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5532'. [ 699.773514][T26238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5534'. [ 699.856722][T26244] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5535'. [ 699.879484][T13337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.105079][T26256] lo speed is unknown, defaulting to 1000 [ 700.120184][T26256] lo speed is unknown, defaulting to 1000 [ 700.859540][T26285] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 700.866986][T26285] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 700.989830][T13355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.140122][T16270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.554524][T26342] lo speed is unknown, defaulting to 1000 [ 702.567330][T26342] lo speed is unknown, defaulting to 1000 [ 703.058024][T26353] lo speed is unknown, defaulting to 1000 [ 703.073429][T26353] lo speed is unknown, defaulting to 1000 [ 703.268235][T13355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.412451][T26368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.645986][T26379] 8021q: VLANs not supported on nlmon0 [ 703.680767][T26378] lo speed is unknown, defaulting to 1000 [ 703.818890][T26378] lo speed is unknown, defaulting to 1000 [ 704.389940][T16270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.488538][T26402] FAULT_INJECTION: forcing a failure. [ 704.488538][T26402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 704.504334][T26397] sit4: entered promiscuous mode [ 704.528915][T26402] CPU: 0 UID: 0 PID: 26402 Comm: syz.2.5576 Not tainted syzkaller #0 PREEMPT(full) [ 704.528947][T26402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 704.528960][T26402] Call Trace: [ 704.528970][T26402] [ 704.528979][T26402] dump_stack_lvl+0xe8/0x150 [ 704.529026][T26402] should_fail_ex+0x412/0x560 [ 704.529058][T26402] _copy_from_user+0x2d/0xb0 [ 704.529091][T26402] ___sys_sendmsg+0x1c6/0x360 [ 704.529119][T26402] ? __pfx____sys_sendmsg+0x10/0x10 [ 704.529177][T26402] ? __fget_files+0x2a/0x420 [ 704.529205][T26402] ? __fget_files+0x3a0/0x420 [ 704.529243][T26402] __x64_sys_sendmsg+0x1bd/0x2a0 [ 704.529269][T26402] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 704.529301][T26402] ? __pfx_ksys_write+0x10/0x10 [ 704.529336][T26402] do_syscall_64+0x14d/0xf80 [ 704.529364][T26402] ? trace_irq_disable+0x3b/0x150 [ 704.529392][T26402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.529414][T26402] ? clear_bhb_loop+0x40/0x90 [ 704.529439][T26402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.529461][T26402] RIP: 0033:0x7f3b3079c799 [ 704.529481][T26402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.529500][T26402] RSP: 002b:00007f3b315ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 704.529524][T26402] RAX: ffffffffffffffda RBX: 00007f3b30a15fa0 RCX: 00007f3b3079c799 [ 704.529539][T26402] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 704.529553][T26402] RBP: 00007f3b315ef090 R08: 0000000000000000 R09: 0000000000000000 [ 704.529567][T26402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.529580][T26402] R13: 00007f3b30a16038 R14: 00007f3b30a15fa0 R15: 00007ffe4a3e0498 [ 704.529614][T26402] [ 704.595650][T26404] ip6gretap2: entered promiscuous mode [ 704.761324][T26404] ip6gretap2: entered allmulticast mode [ 704.840643][T26408] macsec0: entered promiscuous mode [ 704.847119][T26408] macsec0: left promiscuous mode [ 704.987307][T26417] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 705.020010][T26417] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 705.294607][T26432] __nla_validate_parse: 14 callbacks suppressed [ 705.294627][T26432] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5584'. [ 705.390513][T26436] FAULT_INJECTION: forcing a failure. [ 705.390513][T26436] name failslab, interval 1, probability 0, space 0, times 0 [ 705.413323][T26436] CPU: 0 UID: 0 PID: 26436 Comm: syz.0.5587 Not tainted syzkaller #0 PREEMPT(full) [ 705.413355][T26436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 705.413369][T26436] Call Trace: [ 705.413378][T26436] [ 705.413388][T26436] dump_stack_lvl+0xe8/0x150 [ 705.413424][T26436] should_fail_ex+0x412/0x560 [ 705.413457][T26436] should_failslab+0xa8/0x100 [ 705.413486][T26436] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 705.413509][T26436] ? __alloc_skb+0x186/0x7d0 [ 705.413538][T26436] ? __alloc_skb+0x1d0/0x7d0 [ 705.413564][T26436] ? __local_bh_enable_ip+0xd0/0x130 [ 705.413597][T26436] __alloc_skb+0x1d0/0x7d0 [ 705.413634][T26436] netlink_sendmsg+0x5d4/0xb40 [ 705.413674][T26436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 705.413707][T26436] ? aa_sock_msg_perm+0xf1/0x1b0 [ 705.413736][T26436] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 705.413773][T26436] ____sys_sendmsg+0x972/0x9f0 [ 705.413806][T26436] ? __pfx_____sys_sendmsg+0x10/0x10 [ 705.413838][T26436] ? import_iovec+0x73/0xa0 [ 705.413875][T26436] ___sys_sendmsg+0x2a5/0x360 [ 705.413903][T26436] ? __pfx____sys_sendmsg+0x10/0x10 [ 705.413966][T26436] ? __fget_files+0x2a/0x420 [ 705.413995][T26436] ? __fget_files+0x3a0/0x420 [ 705.414035][T26436] __x64_sys_sendmsg+0x1bd/0x2a0 [ 705.414061][T26436] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 705.414094][T26436] ? __pfx_ksys_write+0x10/0x10 [ 705.414130][T26436] do_syscall_64+0x14d/0xf80 [ 705.414159][T26436] ? trace_irq_disable+0x3b/0x150 [ 705.414187][T26436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.414209][T26436] ? clear_bhb_loop+0x40/0x90 [ 705.414236][T26436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.414257][T26436] RIP: 0033:0x7fb4c5d9c799 [ 705.414277][T26436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 705.414296][T26436] RSP: 002b:00007fb4c6bbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 705.414321][T26436] RAX: ffffffffffffffda RBX: 00007fb4c6015fa0 RCX: 00007fb4c5d9c799 [ 705.414336][T26436] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 705.414350][T26436] RBP: 00007fb4c6bbf090 R08: 0000000000000000 R09: 0000000000000000 [ 705.414362][T26436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 705.414375][T26436] R13: 00007fb4c6016038 R14: 00007fb4c6015fa0 R15: 00007ffd6ee8e8c8 [ 705.414410][T26436] [ 705.818637][T13355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.890749][T26443] syzkaller0: entered promiscuous mode [ 705.896880][T26443] syzkaller0: entered allmulticast mode [ 706.950161][T16270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.412730][T26472] validate_nla: 3 callbacks suppressed [ 707.412754][T26472] netlink: 'syz.2.5598': attribute type 39 has an invalid length. [ 708.058253][T13336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.868754][T26463] netlink: 136 bytes leftover after parsing attributes in process `syz.4.5597'. [ 708.945993][T26467] lo speed is unknown, defaulting to 1000 [ 708.969767][T26467] lo speed is unknown, defaulting to 1000 [ 709.210880][T13355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.248928][T26488] lo speed is unknown, defaulting to 1000 [ 709.357686][T26499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5604'. [ 709.432960][T26499] 8021q: adding VLAN 0 to HW filter on device bond9 [ 709.486941][T26499] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5604'. [ 709.573909][T26488] lo speed is unknown, defaulting to 1000 [ 710.061204][T26527] bond10 (unregistering): Released all slaves [ 710.155807][T26530] bond9: option miimon: invalid value (18446744073709551607) [ 710.168068][T26530] bond9: option miimon: allowed values 0 - 2147483647 [ 710.183096][T26530] bond9 (unregistering): Released all slaves [ 710.367461][T13355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.571891][T26539] sit5: entered allmulticast mode [ 711.260741][T26575] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5619'. [ 711.310888][T26578] FAULT_INJECTION: forcing a failure. [ 711.310888][T26578] name failslab, interval 1, probability 0, space 0, times 0 [ 711.332848][T26578] CPU: 0 UID: 0 PID: 26578 Comm: syz.1.5622 Not tainted syzkaller #0 PREEMPT(full) [ 711.332879][T26578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 711.332892][T26578] Call Trace: [ 711.332901][T26578] [ 711.332910][T26578] dump_stack_lvl+0xe8/0x150 [ 711.332945][T26578] should_fail_ex+0x412/0x560 [ 711.332977][T26578] should_failslab+0xa8/0x100 [ 711.333003][T26578] ? skb_clone+0x212/0x3a0 [ 711.333026][T26578] kmem_cache_alloc_noprof+0x87/0x650 [ 711.333047][T26578] ? __netlink_lookup+0xc6/0x8b0 [ 711.333085][T26578] skb_clone+0x212/0x3a0 [ 711.333111][T26578] __netlink_deliver_tap+0x404/0x850 [ 711.333153][T26578] ? netlink_deliver_tap+0x2e/0x1b0 [ 711.333183][T26578] netlink_deliver_tap+0x19c/0x1b0 [ 711.333212][T26578] netlink_unicast+0x7e3/0x9b0 [ 711.333249][T26578] ? __pfx_netlink_unicast+0x10/0x10 [ 711.333278][T26578] ? netlink_sendmsg+0x650/0xb40 [ 711.333303][T26578] ? skb_put+0x11b/0x210 [ 711.333338][T26578] netlink_sendmsg+0x813/0xb40 [ 711.333375][T26578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 711.333407][T26578] ? aa_sock_msg_perm+0xf1/0x1b0 [ 711.333436][T26578] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 711.333462][T26578] ____sys_sendmsg+0x972/0x9f0 [ 711.333510][T26578] ? __pfx_____sys_sendmsg+0x10/0x10 [ 711.333542][T26578] ? import_iovec+0x73/0xa0 [ 711.333578][T26578] ___sys_sendmsg+0x2a5/0x360 [ 711.333604][T26578] ? __pfx____sys_sendmsg+0x10/0x10 [ 711.333667][T26578] ? __fget_files+0x2a/0x420 [ 711.333696][T26578] ? __fget_files+0x3a0/0x420 [ 711.333747][T26578] __x64_sys_sendmsg+0x1bd/0x2a0 [ 711.333772][T26578] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 711.333805][T26578] ? __pfx_ksys_write+0x10/0x10 [ 711.333842][T26578] do_syscall_64+0x14d/0xf80 [ 711.333872][T26578] ? trace_irq_disable+0x3b/0x150 [ 711.333899][T26578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.333921][T26578] ? clear_bhb_loop+0x40/0x90 [ 711.333947][T26578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.333967][T26578] RIP: 0033:0x7f17a979c799 [ 711.333987][T26578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 711.334005][T26578] RSP: 002b:00007f17aa6b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 711.334028][T26578] RAX: ffffffffffffffda RBX: 00007f17a9a15fa0 RCX: 00007f17a979c799 [ 711.334043][T26578] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 711.334057][T26578] RBP: 00007f17aa6b0090 R08: 0000000000000000 R09: 0000000000000000 [ 711.334071][T26578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 711.334084][T26578] R13: 00007f17a9a16038 R14: 00007f17a9a15fa0 R15: 00007ffe14a1a6b8 [ 711.334120][T26578] [ 711.738468][T26586] netlink: 'syz.1.5624': attribute type 1 has an invalid length. [ 711.759631][T16270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.783377][T26588] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.5625'. [ 711.796045][T26588] netlink: ct family unspecified [ 711.950604][T26586] bond9: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 711.971380][T26586] bond9: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 712.004077][T26586] bond9: (slave ip6gre3): making interface the new active one [ 712.065478][T26586] bond9: (slave ip6gre3): Enslaving as an active interface with an up link [ 712.084845][T26599] tipc: Enabling of bearer rejected, already enabled [ 712.096226][T26605] syzkaller0: entered promiscuous mode [ 712.106783][T26603] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5630'. [ 712.125092][T26603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5630'. [ 712.148126][T26605] syzkaller0: entered allmulticast mode [ 712.361401][T26620] FAULT_INJECTION: forcing a failure. [ 712.361401][T26620] name failslab, interval 1, probability 0, space 0, times 0 [ 712.398202][T26620] CPU: 1 UID: 0 PID: 26620 Comm: syz.4.5634 Not tainted syzkaller #0 PREEMPT(full) [ 712.398233][T26620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 712.398245][T26620] Call Trace: [ 712.398254][T26620] [ 712.398263][T26620] dump_stack_lvl+0xe8/0x150 [ 712.398298][T26620] should_fail_ex+0x412/0x560 [ 712.398332][T26620] should_failslab+0xa8/0x100 [ 712.398357][T26620] ? skb_clone+0x212/0x3a0 [ 712.398379][T26620] kmem_cache_alloc_noprof+0x87/0x650 [ 712.398400][T26620] ? apparmor_capable+0x126/0x170 [ 712.398440][T26620] skb_clone+0x212/0x3a0 [ 712.398460][T26620] ? nfnetlink_rcv+0x4b0/0x27b0 [ 712.398490][T26620] nfnetlink_rcv+0x4e2/0x27b0 [ 712.398528][T26620] ? lockdep_hardirqs_on+0x7a/0x110 [ 712.398556][T26620] ? __dev_queue_xmit+0x28b/0x3870 [ 712.398577][T26620] ? __local_bh_enable_ip+0xd0/0x130 [ 712.398604][T26620] ? __dev_queue_xmit+0x1efe/0x3870 [ 712.398624][T26620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.398655][T26620] ? __dev_queue_xmit+0x28b/0x3870 [ 712.398674][T26620] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 712.398709][T26620] ? ref_tracker_free+0x693/0x840 [ 712.398729][T26620] ? __copy_skb_header+0xa3/0x4a0 [ 712.398752][T26620] ? __pfx_ref_tracker_free+0x10/0x10 [ 712.398796][T26620] ? skb_clone+0x246/0x3a0 [ 712.398822][T26620] ? __netlink_deliver_tap+0x807/0x850 [ 712.398851][T26620] ? netlink_deliver_tap+0x2e/0x1b0 [ 712.398910][T26620] netlink_unicast+0x80f/0x9b0 [ 712.398947][T26620] ? __pfx_netlink_unicast+0x10/0x10 [ 712.398975][T26620] ? netlink_sendmsg+0x650/0xb40 [ 712.399002][T26620] ? skb_put+0x11b/0x210 [ 712.399036][T26620] netlink_sendmsg+0x813/0xb40 [ 712.399072][T26620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 712.399103][T26620] ? aa_sock_msg_perm+0xf1/0x1b0 [ 712.399129][T26620] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 712.399155][T26620] ____sys_sendmsg+0x972/0x9f0 [ 712.399188][T26620] ? __pfx_____sys_sendmsg+0x10/0x10 [ 712.399220][T26620] ? import_iovec+0x73/0xa0 [ 712.399257][T26620] ___sys_sendmsg+0x2a5/0x360 [ 712.399285][T26620] ? __pfx____sys_sendmsg+0x10/0x10 [ 712.399348][T26620] ? __fget_files+0x2a/0x420 [ 712.399377][T26620] ? __fget_files+0x3a0/0x420 [ 712.399419][T26620] __x64_sys_sendmsg+0x1bd/0x2a0 [ 712.399444][T26620] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 712.399477][T26620] ? __pfx_ksys_write+0x10/0x10 [ 712.399514][T26620] do_syscall_64+0x14d/0xf80 [ 712.399543][T26620] ? trace_irq_disable+0x3b/0x150 [ 712.399572][T26620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.399594][T26620] ? clear_bhb_loop+0x40/0x90 [ 712.399620][T26620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.399640][T26620] RIP: 0033:0x7fc0ad99c799 [ 712.399662][T26620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.399681][T26620] RSP: 002b:00007fc0ae8e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 712.399704][T26620] RAX: ffffffffffffffda RBX: 00007fc0adc15fa0 RCX: 00007fc0ad99c799 [ 712.399720][T26620] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 712.399733][T26620] RBP: 00007fc0ae8e6090 R08: 0000000000000000 R09: 0000000000000000 [ 712.399746][T26620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.399759][T26620] R13: 00007fc0adc16038 R14: 00007fc0adc15fa0 R15: 00007fff19267618 [ 712.399794][T26620] [ 712.439328][T26625] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5636'. [ 712.524674][T26628] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5637'. [ 712.541555][T26625] netlink: 'syz.0.5636': attribute type 7 has an invalid length. [ 712.824091][T26625] netlink: 'syz.0.5636': attribute type 8 has an invalid length. [ 712.833701][T26625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5636'. [ 712.978858][T13355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.102496][T26655] netlink: 'syz.4.5644': attribute type 8 has an invalid length. [ 713.257643][T26662] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5646'. [ 713.375755][T26664] lo speed is unknown, defaulting to 1000 [ 713.393717][T26671] FAULT_INJECTION: forcing a failure. [ 713.393717][T26671] name failslab, interval 1, probability 0, space 0, times 0 [ 713.410714][T26664] lo speed is unknown, defaulting to 1000 [ 713.451459][T26671] CPU: 1 UID: 0 PID: 26671 Comm: syz.3.5649 Not tainted syzkaller #0 PREEMPT(full) [ 713.451491][T26671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 713.451503][T26671] Call Trace: [ 713.451510][T26671] [ 713.451519][T26671] dump_stack_lvl+0xe8/0x150 [ 713.451636][T26671] should_fail_ex+0x412/0x560 [ 713.451668][T26671] should_failslab+0xa8/0x100 [ 713.451693][T26671] __kmalloc_cache_noprof+0x88/0x660 [ 713.451716][T26671] ? nf_tables_newtable+0x435/0x1910 [ 713.451735][T26671] ? nla_strcmp+0x106/0x140 [ 713.451764][T26671] nf_tables_newtable+0x435/0x1910 [ 713.451802][T26671] nfnetlink_rcv+0x1240/0x27b0 [ 713.451825][T26671] ? is_bpf_text_address+0x26/0x2b0 [ 713.451879][T26671] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 713.451914][T26671] ? __lock_acquire+0x6b5/0x2cf0 [ 713.451985][T26671] ? netlink_deliver_tap+0x2e/0x1b0 [ 713.452036][T26671] netlink_unicast+0x80f/0x9b0 [ 713.452074][T26671] ? __pfx_netlink_unicast+0x10/0x10 [ 713.452114][T26671] ? netlink_sendmsg+0x650/0xb40 [ 713.452142][T26671] ? skb_put+0x11b/0x210 [ 713.452175][T26671] netlink_sendmsg+0x813/0xb40 [ 713.452214][T26671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 713.452248][T26671] ? aa_sock_msg_perm+0xf1/0x1b0 [ 713.452277][T26671] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 713.452306][T26671] ____sys_sendmsg+0x972/0x9f0 [ 713.452345][T26671] ? __pfx_____sys_sendmsg+0x10/0x10 [ 713.452377][T26671] ? import_iovec+0x73/0xa0 [ 713.452413][T26671] ___sys_sendmsg+0x2a5/0x360 [ 713.452443][T26671] ? __pfx____sys_sendmsg+0x10/0x10 [ 713.452509][T26671] ? __fget_files+0x2a/0x420 [ 713.452539][T26671] ? __fget_files+0x3a0/0x420 [ 713.452582][T26671] __x64_sys_sendmsg+0x1bd/0x2a0 [ 713.452609][T26671] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 713.452645][T26671] ? __pfx_ksys_write+0x10/0x10 [ 713.452683][T26671] do_syscall_64+0x14d/0xf80 [ 713.452712][T26671] ? trace_irq_disable+0x3b/0x150 [ 713.452742][T26671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.452764][T26671] ? clear_bhb_loop+0x40/0x90 [ 713.452792][T26671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.452814][T26671] RIP: 0033:0x7f4bfd99c799 [ 713.452836][T26671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.452855][T26671] RSP: 002b:00007f4bfe87f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 713.452880][T26671] RAX: ffffffffffffffda RBX: 00007f4bfdc15fa0 RCX: 00007f4bfd99c799 [ 713.452896][T26671] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 713.452910][T26671] RBP: 00007f4bfe87f090 R08: 0000000000000000 R09: 0000000000000000 [ 713.452924][T26671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.452937][T26671] R13: 00007f4bfdc16038 R14: 00007f4bfdc15fa0 R15: 00007ffd5acad408 [ 713.453094][T26671] [ 713.568285][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.054577][T26686] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5652'. [ 714.318787][T13336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.804152][T26726] netlink: 'syz.2.5665': attribute type 3 has an invalid length. [ 714.814236][T26723] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5664'. [ 714.974185][T26731] netlink: 'syz.0.5666': attribute type 1 has an invalid length. [ 715.062795][T26731] bond8: entered promiscuous mode [ 715.076711][T26731] 8021q: adding VLAN 0 to HW filter on device bond8 [ 715.171812][T26730] syzkaller0: entered promiscuous mode [ 715.177756][T26730] syzkaller0: entered allmulticast mode [ 715.493815][T16259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.538108][T26752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.578318][T26752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.588752][T26752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.651583][T26752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.706494][T26758] dvmrp1: left allmulticast mode [ 715.714000][T26752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.744517][T26752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.798112][T26752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.807686][T26752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.513529][T26781] netlink: 'syz.2.5677': attribute type 1 has an invalid length. [ 716.533288][T26781] __nla_validate_parse: 2 callbacks suppressed [ 716.533311][T26781] netlink: 264 bytes leftover after parsing attributes in process `syz.2.5677'. [ 716.584064][T26786] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5680'. [ 716.654851][T26788] netlink: 'syz.4.5681': attribute type 9 has an invalid length. [ 716.999234][T26809] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5686'. [ 717.020594][T26798] lo speed is unknown, defaulting to 1000 [ 717.029855][T26809] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5686'. [ 717.050276][T26798] lo speed is unknown, defaulting to 1000 [ 717.208143][T26818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5689'. [ 717.431637][T26822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5689'. [ 717.592167][T26827] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 718.104127][T26845] syzkaller1: entered promiscuous mode [ 718.118093][T26845] syzkaller1: entered allmulticast mode [ 718.232139][T26847] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5696'. [ 718.770826][T26863] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 718.784381][T26863] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.806231][T26874] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5703'. [ 718.972849][T26863] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 719.000954][T26863] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.004199][T26880] netlink: 'syz.3.5710': attribute type 8 has an invalid length. [ 719.183459][T26863] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 719.212024][T26863] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.357582][T26901] FAULT_INJECTION: forcing a failure. [ 719.357582][T26901] name failslab, interval 1, probability 0, space 0, times 0 [ 719.359844][T26863] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 719.373309][T26901] CPU: 0 UID: 0 PID: 26901 Comm: syz.2.5715 Not tainted syzkaller #0 PREEMPT(full) [ 719.373340][T26901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 719.373353][T26901] Call Trace: [ 719.373363][T26901] [ 719.373372][T26901] dump_stack_lvl+0xe8/0x150 [ 719.373406][T26901] should_fail_ex+0x412/0x560 [ 719.373437][T26901] should_failslab+0xa8/0x100 [ 719.373463][T26901] __kvmalloc_node_noprof+0x178/0x8a0 [ 719.373485][T26901] ? nla_strcmp+0x106/0x140 [ 719.373510][T26901] ? nf_tables_newset+0x1354/0x2580 [ 719.373534][T26901] ? nft_set_lookup+0x128/0x150 [ 719.373555][T26901] ? nft_rhash_init+0x1f/0x3b0 [ 719.373581][T26901] nf_tables_newset+0x1354/0x2580 [ 719.373615][T26901] ? __pfx_nf_tables_newset+0x10/0x10 [ 719.373667][T26901] ? __nla_parse+0x40/0x60 [ 719.373699][T26901] nfnetlink_rcv+0x1240/0x27b0 [ 719.373758][T26901] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 719.373798][T26901] ? ref_tracker_free+0x693/0x840 [ 719.373853][T26901] ? __netlink_deliver_tap+0x807/0x850 [ 719.373880][T26901] ? netlink_deliver_tap+0x2e/0x1b0 [ 719.373923][T26901] netlink_unicast+0x80f/0x9b0 [ 719.373956][T26901] ? __pfx_netlink_unicast+0x10/0x10 [ 719.373982][T26901] ? netlink_sendmsg+0x650/0xb40 [ 719.374006][T26901] ? skb_put+0x11b/0x210 [ 719.374037][T26901] netlink_sendmsg+0x813/0xb40 [ 719.374073][T26901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 719.374103][T26901] ? aa_sock_msg_perm+0xf1/0x1b0 [ 719.374129][T26901] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 719.374154][T26901] ____sys_sendmsg+0x972/0x9f0 [ 719.374183][T26901] ? __pfx_____sys_sendmsg+0x10/0x10 [ 719.374213][T26901] ? import_iovec+0x73/0xa0 [ 719.374245][T26901] ___sys_sendmsg+0x2a5/0x360 [ 719.374272][T26901] ? __pfx____sys_sendmsg+0x10/0x10 [ 719.374329][T26901] ? __fget_files+0x2a/0x420 [ 719.374355][T26901] ? __fget_files+0x3a0/0x420 [ 719.374393][T26901] __x64_sys_sendmsg+0x1bd/0x2a0 [ 719.374415][T26901] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 719.374446][T26901] ? __pfx_ksys_write+0x10/0x10 [ 719.374481][T26901] do_syscall_64+0x14d/0xf80 [ 719.374507][T26901] ? trace_irq_disable+0x3b/0x150 [ 719.374534][T26901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.374554][T26901] ? clear_bhb_loop+0x40/0x90 [ 719.374577][T26901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.374596][T26901] RIP: 0033:0x7f3b3079c799 [ 719.374615][T26901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 719.374641][T26901] RSP: 002b:00007f3b315ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 719.374663][T26901] RAX: ffffffffffffffda RBX: 00007f3b30a15fa0 RCX: 00007f3b3079c799 [ 719.374677][T26901] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 719.374689][T26901] RBP: 00007f3b315ef090 R08: 0000000000000000 R09: 0000000000000000 [ 719.374701][T26901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 719.374712][T26901] R13: 00007f3b30a16038 R14: 00007f3b30a15fa0 R15: 00007ffe4a3e0498 [ 719.374745][T26901] [ 719.528022][T26907] x_tables: duplicate underflow at hook 1 [ 719.534008][T26863] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.915586][T26922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5721'. [ 719.950484][T26922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5721'. [ 719.992948][T16270] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.019130][T16270] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.167934][T13339] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.176727][T13339] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.202680][T13339] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.218233][T13339] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.338130][T22079] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.365496][T22079] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.455228][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 720.466541][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 720.485407][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 720.498982][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 720.512768][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 720.608116][ T5143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 720.617428][ T5143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 720.628827][ T5143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 720.643970][ T5143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 720.656343][ T5143] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 720.724238][T26949] lo speed is unknown, defaulting to 1000 [ 720.741253][T26949] lo speed is unknown, defaulting to 1000 [ 720.911532][T26972] netlink: 'syz.1.5732': attribute type 1 has an invalid length. [ 721.119374][T26979] IPVS: set_ctl: invalid protocol: 50083 133.43.228.95:32599 [ 721.245169][T22079] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 721.422996][T26993] netlink: 'syz.0.5737': attribute type 1 has an invalid length. [ 721.520363][T22079] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 721.578983][T26993] dvmrp1: entered allmulticast mode [ 721.606795][T26993] dvmrp1: left allmulticast mode [ 721.699119][T22079] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 721.773137][T27005] netlink: 'syz.1.5741': attribute type 4 has an invalid length. [ 721.785206][T27009] dvmrp0: entered allmulticast mode [ 721.832531][T27005] netlink: 'syz.1.5741': attribute type 4 has an invalid length. [ 721.844811][T22079] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.298518][T27021] sctp: [Deprecated]: syz.0.5745 (pid 27021) Use of int in max_burst socket option. [ 722.298518][T27021] Use struct sctp_assoc_value instead [ 722.748254][ T5143] Bluetooth: hci0: command tx timeout [ 723.133849][T22079] bond3 (unregistering): (slave vti1): Releasing backup interface [ 723.142906][T22079] vti1 (unregistering): left promiscuous mode [ 723.168849][T22079] bond7 (unregistering): (slave vti3): Releasing backup interface [ 723.177546][T22079] vti3 (unregistering): left promiscuous mode [ 723.542668][T27047] netlink: 'syz.1.5751': attribute type 1 has an invalid length. [ 723.863422][T22079] bond1 (unregistering): Released all slaves [ 723.880502][T22079] bond2 (unregistering): Released all slaves [ 723.895122][T22079] bond3 (unregistering): Released all slaves [ 723.911281][T22079] bond4 (unregistering): Released all slaves [ 723.932841][T22079] bond5 (unregistering): Released all slaves [ 723.947416][T22079] bond6 (unregistering): Released all slaves [ 723.964754][T22079] bond7 (unregistering): Released all slaves [ 723.982001][T22079] bond8 (unregistering): Released all slaves [ 723.999778][T22079] bond0 (unregistering): Released all slaves [ 724.017339][T22079] bond9 (unregistering): Released all slaves [ 724.038593][T27036] netlink: 'syz.4.5749': attribute type 3 has an invalid length. [ 724.082742][T27047] bond10: entered promiscuous mode [ 724.089508][T27047] bond10: entered allmulticast mode [ 724.095768][T27047] 8021q: adding VLAN 0 to HW filter on device bond10 [ 724.106445][T27050] dvmrp0: left allmulticast mode [ 724.221849][T26949] chnl_net:caif_netlink_parms(): no params data found [ 724.229703][T27055] x_tables: duplicate underflow at hook 1 [ 724.269435][T22079] !: left promiscuous mode [ 724.456540][T27063] __nla_validate_parse: 3 callbacks suppressed [ 724.456565][T27063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5755'. [ 724.476130][T22079] : left promiscuous mode [ 724.599980][T22079] tipc: Left network mode [ 724.752022][T26949] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.770503][T26949] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.783878][T26949] bridge_slave_0: entered allmulticast mode [ 724.803743][T26949] bridge_slave_0: entered promiscuous mode [ 724.827947][ T5143] Bluetooth: hci0: command tx timeout [ 724.929380][T26949] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.944975][T26949] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.951477][T27084] xt_HMARK: spi-set and port-set can't be combined [ 724.956225][T26949] bridge_slave_1: entered allmulticast mode [ 724.979460][T26949] bridge_slave_1: entered promiscuous mode [ 725.128575][T27099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5764'. [ 725.301914][T26949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.359456][T26949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.583498][T27125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5771'. [ 725.605956][T27125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5771'. [ 725.624818][T27125] netlink: 'syz.2.5771': attribute type 12 has an invalid length. [ 725.636554][T27119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5769'. [ 725.692422][T26949] team0: Port device team_slave_0 added [ 725.715643][T27126] lo speed is unknown, defaulting to 1000 [ 725.725620][T26949] team0: Port device team_slave_1 added [ 725.781302][T27126] lo speed is unknown, defaulting to 1000 [ 725.968986][T26949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.977134][T26949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.059883][T26949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.082256][T26949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.095903][T26949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.126544][T26949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 726.219053][T27139] lo speed is unknown, defaulting to 1000 [ 726.433181][T27140] lo speed is unknown, defaulting to 1000 [ 726.450863][T26949] hsr_slave_0: entered promiscuous mode [ 726.487108][T26949] hsr_slave_1: entered promiscuous mode [ 726.676499][T27139] lo speed is unknown, defaulting to 1000 [ 726.920777][ T5143] Bluetooth: hci0: command tx timeout [ 726.988101][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 727.254341][T27140] lo speed is unknown, defaulting to 1000 [ 728.150865][T27191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5780'. [ 728.392122][T27200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5781'. [ 728.787220][T22079] hsr_slave_0: left promiscuous mode [ 728.987959][ T5143] Bluetooth: hci0: command tx timeout [ 729.454418][T27194] syzkaller0: entered promiscuous mode [ 729.460575][T27194] syzkaller0: entered allmulticast mode [ 729.955200][T27233] nbd: must specify a size in bytes for the device [ 729.992924][T26949] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 730.035467][T26949] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 730.128974][T26949] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 730.182099][T26949] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 730.619264][T26949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.696940][T26949] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.727366][T27265] pimreg: entered allmulticast mode [ 730.772170][T22079] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.781351][T22079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.815802][T16259] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.823235][T16259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.233899][T27284] netlink: 744 bytes leftover after parsing attributes in process `syz.4.5794'. [ 731.609043][T27299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5795'. [ 732.296290][T26949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 732.431533][T27324] sctp: [Deprecated]: syz.4.5803 (pid 27324) Use of int in maxseg socket option. [ 732.431533][T27324] Use struct sctp_assoc_value instead [ 732.475257][T26949] veth0_vlan: entered promiscuous mode [ 732.483597][T27324] netlink: 'syz.4.5803': attribute type 10 has an invalid length. [ 732.495181][T27327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5804'. [ 732.557754][T27324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 732.570316][T27324] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 732.609527][T26949] veth1_vlan: entered promiscuous mode [ 732.722409][T26949] veth0_macvtap: entered promiscuous mode [ 732.747574][T26949] veth1_macvtap: entered promiscuous mode [ 732.810052][T26949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.830771][T26949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.854517][T13336] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.903698][T13336] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.943545][T13336] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.955436][T13336] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.982190][T27351] FAULT_INJECTION: forcing a failure. [ 732.982190][T27351] name failslab, interval 1, probability 0, space 0, times 0 [ 733.058280][T27351] CPU: 1 UID: 0 PID: 27351 Comm: syz.4.5812 Not tainted syzkaller #0 PREEMPT(full) [ 733.058312][T27351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 733.058325][T27351] Call Trace: [ 733.058335][T27351] [ 733.058345][T27351] dump_stack_lvl+0xe8/0x150 [ 733.058381][T27351] should_fail_ex+0x412/0x560 [ 733.058415][T27351] should_failslab+0xa8/0x100 [ 733.058474][T27351] __kmalloc_cache_noprof+0x88/0x660 [ 733.058501][T27351] ? nft_limit_init+0x53b/0x750 [ 733.058530][T27351] nft_limit_init+0x53b/0x750 [ 733.058584][T27351] ? __pfx_nft_limit_init+0x10/0x10 [ 733.058605][T27351] ? rcu_is_watching+0x15/0xb0 [ 733.058643][T27351] ? trace_kmalloc+0x2a/0x110 [ 733.058669][T27351] ? __kmalloc_noprof+0x37d/0x760 [ 733.058706][T27351] nft_limit_pkts_init+0x28/0xe0 [ 733.058730][T27351] nft_set_elem_expr_alloc+0x213/0x5f0 [ 733.058762][T27351] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 733.058804][T27351] ? nla_strcmp+0x106/0x140 [ 733.058832][T27351] ? nla_strcmp+0x106/0x140 [ 733.058875][T27351] nf_tables_newsetelem+0x17a1/0x4450 [ 733.058954][T27351] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 733.058994][T27351] ? nla_validate_array+0xfc/0x260 [ 733.059045][T27351] ? __pfx___nla_validate_parse+0x10/0x10 [ 733.059083][T27351] ? __pfx_nf_tables_newset+0x10/0x10 [ 733.059114][T27351] ? nfnl_pernet+0x23/0x240 [ 733.059152][T27351] ? __nla_parse+0x40/0x60 [ 733.059186][T27351] nfnetlink_rcv+0x1240/0x27b0 [ 733.059253][T27351] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 733.059305][T27351] ? ref_tracker_free+0x693/0x840 [ 733.059364][T27351] ? __netlink_deliver_tap+0x807/0x850 [ 733.059391][T27351] ? netlink_deliver_tap+0x2e/0x1b0 [ 733.059434][T27351] netlink_unicast+0x80f/0x9b0 [ 733.059467][T27351] ? __pfx_netlink_unicast+0x10/0x10 [ 733.059490][T27351] ? netlink_sendmsg+0x650/0xb40 [ 733.059512][T27351] ? skb_put+0x11b/0x210 [ 733.059541][T27351] netlink_sendmsg+0x813/0xb40 [ 733.059579][T27351] ? __pfx_netlink_sendmsg+0x10/0x10 [ 733.059611][T27351] ? aa_sock_msg_perm+0xf1/0x1b0 [ 733.059638][T27351] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 733.059664][T27351] ____sys_sendmsg+0x972/0x9f0 [ 733.059694][T27351] ? __pfx_____sys_sendmsg+0x10/0x10 [ 733.059725][T27351] ? import_iovec+0x73/0xa0 [ 733.059762][T27351] ___sys_sendmsg+0x2a5/0x360 [ 733.059790][T27351] ? __pfx____sys_sendmsg+0x10/0x10 [ 733.059852][T27351] ? __fget_files+0x2a/0x420 [ 733.059881][T27351] ? __fget_files+0x3a0/0x420 [ 733.059932][T27351] __x64_sys_sendmsg+0x1bd/0x2a0 [ 733.059957][T27351] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 733.059990][T27351] ? __pfx_ksys_write+0x10/0x10 [ 733.060027][T27351] do_syscall_64+0x14d/0xf80 [ 733.060056][T27351] ? trace_irq_disable+0x3b/0x150 [ 733.060085][T27351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.060107][T27351] ? clear_bhb_loop+0x40/0x90 [ 733.060132][T27351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.060154][T27351] RIP: 0033:0x7fc0ad99c799 [ 733.060174][T27351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.060192][T27351] RSP: 002b:00007fc0ae8e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 733.060215][T27351] RAX: ffffffffffffffda RBX: 00007fc0adc15fa0 RCX: 00007fc0ad99c799 [ 733.060231][T27351] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 733.060244][T27351] RBP: 00007fc0ae8e6090 R08: 0000000000000000 R09: 0000000000000000 [ 733.060257][T27351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 733.060269][T27351] R13: 00007fc0adc16038 R14: 00007fc0adc15fa0 R15: 00007fff19267618 [ 733.060305][T27351] [ 733.133456][T16270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.457207][T16270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.512552][T13336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.541992][T13336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.981405][T27381] FAULT_INJECTION: forcing a failure. [ 733.981405][T27381] name failslab, interval 1, probability 0, space 0, times 0 [ 734.007690][T27381] CPU: 0 UID: 0 PID: 27381 Comm: syz.0.5822 Not tainted syzkaller #0 PREEMPT(full) [ 734.007722][T27381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 734.007736][T27381] Call Trace: [ 734.007747][T27381] [ 734.007758][T27381] dump_stack_lvl+0xe8/0x150 [ 734.007799][T27381] should_fail_ex+0x412/0x560 [ 734.007833][T27381] should_failslab+0xa8/0x100 [ 734.007862][T27381] __kvmalloc_node_noprof+0x178/0x8a0 [ 734.007885][T27381] ? __nf_register_net_hook+0x232/0x930 [ 734.007913][T27381] ? nf_hook_entries_grow+0x288/0x720 [ 734.007951][T27381] nf_hook_entries_grow+0x288/0x720 [ 734.007982][T27381] ? ____sys_sendmsg+0x972/0x9f0 [ 734.008014][T27381] __nf_register_net_hook+0x2c9/0x930 [ 734.008054][T27381] nf_register_net_hook+0xb2/0x190 [ 734.008085][T27381] nf_register_net_hooks+0x44/0x1b0 [ 734.008117][T27381] nf_ct_netns_do_get+0x363/0x5c0 [ 734.008153][T27381] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 734.008198][T27381] nf_ct_netns_get+0x8b/0x320 [ 734.008232][T27381] nft_connlimit_do_init+0x1de/0x2e0 [ 734.008265][T27381] nft_set_elem_expr_alloc+0x213/0x5f0 [ 734.008294][T27381] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 734.008338][T27381] ? nla_strcmp+0x106/0x140 [ 734.008364][T27381] ? nla_strcmp+0x106/0x140 [ 734.008406][T27381] nf_tables_newsetelem+0x2471/0x4450 [ 734.008477][T27381] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 734.008518][T27381] ? nla_validate_array+0xfc/0x260 [ 734.008570][T27381] ? __pfx___nla_validate_parse+0x10/0x10 [ 734.008607][T27381] ? __pfx_nf_tables_newset+0x10/0x10 [ 734.008648][T27381] ? nfnl_pernet+0x23/0x240 [ 734.008681][T27381] ? __nla_parse+0x40/0x60 [ 734.008714][T27381] nfnetlink_rcv+0x1240/0x27b0 [ 734.008739][T27381] ? is_bpf_text_address+0x26/0x2b0 [ 734.008800][T27381] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 734.008838][T27381] ? __lock_acquire+0x6b5/0x2cf0 [ 734.008906][T27381] ? netlink_deliver_tap+0x2e/0x1b0 [ 734.008958][T27381] netlink_unicast+0x80f/0x9b0 [ 734.008995][T27381] ? __pfx_netlink_unicast+0x10/0x10 [ 734.009024][T27381] ? netlink_sendmsg+0x650/0xb40 [ 734.009050][T27381] ? skb_put+0x11b/0x210 [ 734.009085][T27381] netlink_sendmsg+0x813/0xb40 [ 734.009126][T27381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 734.009159][T27381] ? aa_sock_msg_perm+0xf1/0x1b0 [ 734.009189][T27381] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 734.009217][T27381] ____sys_sendmsg+0x972/0x9f0 [ 734.009252][T27381] ? __pfx_____sys_sendmsg+0x10/0x10 [ 734.009287][T27381] ? import_iovec+0x73/0xa0 [ 734.009324][T27381] ___sys_sendmsg+0x2a5/0x360 [ 734.009354][T27381] ? __pfx____sys_sendmsg+0x10/0x10 [ 734.009419][T27381] ? __fget_files+0x2a/0x420 [ 734.009449][T27381] ? __fget_files+0x3a0/0x420 [ 734.009491][T27381] __x64_sys_sendmsg+0x1bd/0x2a0 [ 734.009517][T27381] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 734.009550][T27381] ? __pfx_ksys_write+0x10/0x10 [ 734.009588][T27381] do_syscall_64+0x14d/0xf80 [ 734.009620][T27381] ? trace_irq_disable+0x3b/0x150 [ 734.009658][T27381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.009680][T27381] ? clear_bhb_loop+0x40/0x90 [ 734.009707][T27381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.009728][T27381] RIP: 0033:0x7fb4c5d9c799 [ 734.009750][T27381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 734.009768][T27381] RSP: 002b:00007fb4c6bbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 734.009792][T27381] RAX: ffffffffffffffda RBX: 00007fb4c6015fa0 RCX: 00007fb4c5d9c799 [ 734.009807][T27381] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 734.009821][T27381] RBP: 00007fb4c6bbf090 R08: 0000000000000000 R09: 0000000000000000 [ 734.009835][T27381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 734.009848][T27381] R13: 00007fb4c6016038 R14: 00007fb4c6015fa0 R15: 00007ffd6ee8e8c8 [ 734.009886][T27381] [ 734.017120][T27386] batadv_slave_0: entered promiscuous mode [ 734.448878][T27391] batadv_slave_0: left promiscuous mode [ 734.478357][T27390] batadv_slave_0: entered promiscuous mode [ 734.709376][T27380] batadv_slave_0: left promiscuous mode [ 734.831391][T27416] tipc: Failed to remove unknown binding: 66,1,1/0:2990497384/2990497386 [ 734.852741][T27412] netlink: 'syz.2.5830': attribute type 58 has an invalid length. [ 734.859409][T27416] tipc: Failed to remove unknown binding: 66,1,1/0:2990497384/2990497386 [ 734.879173][T27416] tipc: Failed to remove unknown binding: 66,1,1/0:2990497384/2990497386 [ 735.142352][T27429] FAULT_INJECTION: forcing a failure. [ 735.142352][T27429] name failslab, interval 1, probability 0, space 0, times 0 [ 735.165564][T27429] CPU: 0 UID: 0 PID: 27429 Comm: syz.0.5836 Not tainted syzkaller #0 PREEMPT(full) [ 735.165595][T27429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 735.165619][T27429] Call Trace: [ 735.165628][T27429] [ 735.165636][T27429] dump_stack_lvl+0xe8/0x150 [ 735.165671][T27429] should_fail_ex+0x412/0x560 [ 735.165705][T27429] should_failslab+0xa8/0x100 [ 735.165732][T27429] __kvmalloc_node_noprof+0x178/0x8a0 [ 735.165756][T27429] ? __nf_register_net_hook+0x232/0x930 [ 735.165785][T27429] ? nf_hook_entries_grow+0x288/0x720 [ 735.165821][T27429] nf_hook_entries_grow+0x288/0x720 [ 735.165853][T27429] ? ____sys_sendmsg+0x972/0x9f0 [ 735.165885][T27429] __nf_register_net_hook+0x2c9/0x930 [ 735.165928][T27429] nf_register_net_hook+0xb2/0x190 [ 735.165960][T27429] nf_register_net_hooks+0x44/0x1b0 [ 735.165994][T27429] nf_ct_netns_do_get+0x363/0x5c0 [ 735.166031][T27429] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 735.166080][T27429] nf_ct_netns_get+0x8b/0x320 [ 735.166114][T27429] nft_connlimit_do_init+0x1de/0x2e0 [ 735.166149][T27429] nft_set_elem_expr_alloc+0x213/0x5f0 [ 735.166182][T27429] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 735.166227][T27429] ? nla_strcmp+0x106/0x140 [ 735.166253][T27429] ? nla_strcmp+0x106/0x140 [ 735.166295][T27429] nf_tables_newsetelem+0x2471/0x4450 [ 735.166364][T27429] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 735.166405][T27429] ? nla_validate_array+0xfc/0x260 [ 735.166457][T27429] ? __pfx___nla_validate_parse+0x10/0x10 [ 735.166520][T27429] ? __pfx_nf_tables_newset+0x10/0x10 [ 735.166550][T27429] ? nfnl_pernet+0x23/0x240 [ 735.166588][T27429] ? __nla_parse+0x40/0x60 [ 735.166632][T27429] nfnetlink_rcv+0x1240/0x27b0 [ 735.166656][T27429] ? is_bpf_text_address+0x26/0x2b0 [ 735.166717][T27429] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 735.166756][T27429] ? __lock_acquire+0x6b5/0x2cf0 [ 735.166823][T27429] ? netlink_deliver_tap+0x2e/0x1b0 [ 735.166870][T27429] netlink_unicast+0x80f/0x9b0 [ 735.166905][T27429] ? __pfx_netlink_unicast+0x10/0x10 [ 735.166934][T27429] ? netlink_sendmsg+0x650/0xb40 [ 735.166960][T27429] ? skb_put+0x11b/0x210 [ 735.166993][T27429] netlink_sendmsg+0x813/0xb40 [ 735.167032][T27429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 735.167066][T27429] ? aa_sock_msg_perm+0xf1/0x1b0 [ 735.167095][T27429] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 735.167122][T27429] ____sys_sendmsg+0x972/0x9f0 [ 735.167155][T27429] ? __pfx_____sys_sendmsg+0x10/0x10 [ 735.167187][T27429] ? import_iovec+0x73/0xa0 [ 735.167223][T27429] ___sys_sendmsg+0x2a5/0x360 [ 735.167250][T27429] ? __pfx____sys_sendmsg+0x10/0x10 [ 735.167311][T27429] ? __fget_files+0x2a/0x420 [ 735.167339][T27429] ? __fget_files+0x3a0/0x420 [ 735.167380][T27429] __x64_sys_sendmsg+0x1bd/0x2a0 [ 735.167405][T27429] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 735.167449][T27429] ? __pfx_ksys_write+0x10/0x10 [ 735.167486][T27429] do_syscall_64+0x14d/0xf80 [ 735.167511][T27429] ? trace_irq_disable+0x3b/0x150 [ 735.167536][T27429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.167555][T27429] ? clear_bhb_loop+0x40/0x90 [ 735.167579][T27429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.167597][T27429] RIP: 0033:0x7fb4c5d9c799 [ 735.167626][T27429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.167645][T27429] RSP: 002b:00007fb4c6bbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 735.167671][T27429] RAX: ffffffffffffffda RBX: 00007fb4c6015fa0 RCX: 00007fb4c5d9c799 [ 735.167686][T27429] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 735.167699][T27429] RBP: 00007fb4c6bbf090 R08: 0000000000000000 R09: 0000000000000000 [ 735.167710][T27429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 735.167722][T27429] R13: 00007fb4c6016038 R14: 00007fb4c6015fa0 R15: 00007ffd6ee8e8c8 [ 735.167754][T27429] [ 735.591674][T27432] netlink: 116 bytes leftover after parsing attributes in process `syz.4.5838'. [ 735.614063][T27424] lo speed is unknown, defaulting to 1000 [ 735.678143][T27424] lo speed is unknown, defaulting to 1000 [ 735.706300][T27428] lo speed is unknown, defaulting to 1000 [ 735.780900][T27436] lo speed is unknown, defaulting to 1000 [ 735.904062][T27440] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5839'. [ 736.167117][T27458] netlink: 'syz.2.5845': attribute type 1 has an invalid length. [ 736.241637][T27456] xt_hashlimit: size too large, truncated to 1048576 [ 736.408016][T27471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5848'. [ 736.447866][T27428] lo speed is unknown, defaulting to 1000 [ 736.994427][T27491] netlink: 'syz.2.5853': attribute type 1 has an invalid length. [ 737.008233][T27491] netlink: 'syz.2.5853': attribute type 7 has an invalid length. [ 737.016659][T27491] netlink: 'syz.2.5853': attribute type 8 has an invalid length. [ 737.025218][T27491] netlink: 208 bytes leftover after parsing attributes in process `syz.2.5853'. [ 737.069635][T27436] lo speed is unknown, defaulting to 1000 [ 737.470495][T27507] syzkaller0: entered promiscuous mode [ 737.477504][T27507] syzkaller0: entered allmulticast mode [ 737.947450][T27511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5859'. [ 737.958170][T27511] net_ratelimit: 6 callbacks suppressed [ 737.958192][T27511] openvswitch: netlink: Flow actions attr not present in new flow. [ 738.183184][T27518] lo speed is unknown, defaulting to 1000 [ 738.243450][T27518] lo speed is unknown, defaulting to 1000 [ 738.465011][T27537] vlan0: entered allmulticast mode [ 738.471645][T27537] bridge0: port 1(vlan0) entered blocking state [ 738.478741][T27537] bridge0: port 1(vlan0) entered disabled state [ 738.488249][T27537] vlan0: entered promiscuous mode [ 738.696298][T27544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5867'. [ 738.966638][T27553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5867'. [ 738.971045][T27545] syzkaller0: entered promiscuous mode [ 738.983452][T27545] syzkaller0: entered allmulticast mode [ 741.884584][T27544] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5867'. [ 742.083881][T27571] netlink: 'syz.3.5873': attribute type 1 has an invalid length. [ 742.115684][T27571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 742.402311][T27575] lo speed is unknown, defaulting to 1000 [ 742.430341][T27575] lo speed is unknown, defaulting to 1000 [ 742.775287][T27587] bond8: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 742.820658][T27587] bond8 (unregistering): Released all slaves [ 743.324857][T27612] syzkaller0: entered promiscuous mode [ 743.366844][T27612] syzkaller0: entered allmulticast mode [ 743.554788][T27607] pimreg9: entered allmulticast mode [ 743.590180][T27607] netlink: 428 bytes leftover after parsing attributes in process `syz.2.5881'. [ 743.629257][T27607] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5881'. [ 743.878021][T27632] lo speed is unknown, defaulting to 1000 [ 743.900351][T27632] lo speed is unknown, defaulting to 1000 [ 744.700082][T27644] geneve0: entered promiscuous mode [ 744.729628][T27652] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5891'. [ 744.757990][T27644] geneve0: entered allmulticast mode [ 745.094581][T27652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 745.155361][T27652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 745.196717][T27652] tipc: Resetting bearer [ 745.569531][T27686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5898'. [ 745.633434][T27659] bridge0: left allmulticast mode [ 745.696036][T13339] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.717636][T13339] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.857179][T27675] syzkaller0: entered promiscuous mode [ 745.863566][T27696] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5899'. [ 745.875317][T27675] syzkaller0: entered allmulticast mode [ 745.912757][T13339] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.923350][T13339] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.844751][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 746.869229][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 746.878442][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 746.901364][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 746.933281][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 748.927570][T27654] lo speed is unknown, defaulting to 1000 [ 748.955327][T13339] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.964866][T13339] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.988411][T13339] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.997203][T13339] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.044986][T27654] lo speed is unknown, defaulting to 1000 [ 749.071149][ T5143] Bluetooth: hci1: command tx timeout [ 749.349819][T27703] lo speed is unknown, defaulting to 1000 [ 749.590690][T27721] netlink: 468 bytes leftover after parsing attributes in process `syz.2.5905'. [ 749.601723][T27721] netlink: 2044 bytes leftover after parsing attributes in process `syz.2.5905'. [ 749.613163][T27721] netlink: 2119 bytes leftover after parsing attributes in process `syz.2.5905'. [ 749.641868][T27721] netlink: 1392 bytes leftover after parsing attributes in process `syz.2.5905'. [ 749.966990][T27703] lo speed is unknown, defaulting to 1000 [ 750.460413][T27734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5909'. [ 750.558174][T27734] ip6gre3: entered promiscuous mode [ 751.162842][ T5143] Bluetooth: hci1: command tx timeout [ 751.720392][T27703] chnl_net:caif_netlink_parms(): no params data found [ 751.843256][T27749] syzkaller0: entered promiscuous mode [ 751.852937][T27749] syzkaller0: entered allmulticast mode [ 752.000203][T27703] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.008940][T27703] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.017615][T27703] bridge_slave_0: entered allmulticast mode [ 752.027670][T27703] bridge_slave_0: entered promiscuous mode [ 752.038868][T27703] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.046829][T27703] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.054872][T27703] bridge_slave_1: entered allmulticast mode [ 752.064197][T27703] bridge_slave_1: entered promiscuous mode [ 752.141257][T27703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 752.169571][T27703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 752.252943][T27703] team0: Port device team_slave_0 added [ 752.264008][T27758] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5914'. [ 752.309482][T27703] team0: Port device team_slave_1 added [ 752.383158][T27703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.394139][T27703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.429359][T27763] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5917'. [ 752.439677][T27703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.490372][T27703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.497724][T27703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.552780][T27703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.576461][T27767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5918'. [ 752.707579][T27703] hsr_slave_0: entered promiscuous mode [ 752.723300][T27703] hsr_slave_1: entered promiscuous mode [ 752.731587][T27703] debugfs: 'hsr0' already exists in 'hsr' [ 752.738346][T27703] Cannot create hsr debugfs directory [ 752.876222][T27780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5921'. [ 752.892845][T27780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5921'. [ 752.924023][T27780] netlink: 'syz.1.5921': attribute type 14 has an invalid length. [ 752.958109][T27780] netlink: 'syz.1.5921': attribute type 12 has an invalid length. [ 753.228032][ T5143] Bluetooth: hci1: command tx timeout [ 753.651525][T27789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 753.760724][T27789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 753.793950][T27789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 753.889292][T27789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 753.947158][T27789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 754.009584][T27789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 754.060621][T27789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 754.148953][T27789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 754.233058][T27789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 754.265101][T27789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 754.302228][T27799] xt_hashlimit: size too large, truncated to 1048576 [ 754.467634][T27807] netlink: 'syz.4.5929': attribute type 9 has an invalid length. [ 754.689592][T27703] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 754.707180][T27703] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 754.723672][T27703] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 754.743573][T27703] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 754.878362][T27828] syzkaller0: entered promiscuous mode [ 754.887373][T27828] syzkaller0: entered allmulticast mode [ 754.970779][T27703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.006755][T27703] 8021q: adding VLAN 0 to HW filter on device team0 [ 755.039352][T16270] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.047318][T16270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.088327][T13339] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.098328][T13339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 755.172212][T27835] netlink: 'syz.4.5936': attribute type 1 has an invalid length. [ 755.308479][ T5143] Bluetooth: hci1: command tx timeout [ 755.343070][T27844] __nla_validate_parse: 6 callbacks suppressed [ 755.343094][T27844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5939'. [ 755.556624][T27703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 755.804748][T27703] veth0_vlan: entered promiscuous mode [ 755.846278][T27864] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 755.849668][T27703] veth1_vlan: entered promiscuous mode [ 755.855778][T27864] IPv6: NLM_F_CREATE should be set when creating new route [ 755.967412][T27703] veth0_macvtap: entered promiscuous mode [ 755.990123][T27870] syzkaller0: entered promiscuous mode [ 755.996910][T27870] syzkaller0: entered allmulticast mode [ 756.075907][T27875] tipc: Enabling of bearer rejected, failed to enable media [ 756.097185][T27703] veth1_macvtap: entered promiscuous mode [ 756.129191][T27874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5949'. [ 756.156675][T27703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 756.212135][T27703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 756.297556][T13339] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.321605][T13339] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.365884][T13339] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.393930][T13339] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.619301][T16270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.638777][T16270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.752985][T16274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.791250][T16274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.229287][T27919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5960'. [ 757.312858][T27919] hsr_slave_1 (unregistering): left promiscuous mode [ 757.334876][T27922] bond0: (slave bond_slave_1): Releasing backup interface [ 757.346377][T27926] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.5959'. [ 757.520305][T27930] sctp: [Deprecated]: syz.1.5963 (pid 27930) Use of int in max_burst socket option. [ 757.520305][T27930] Use struct sctp_assoc_value instead [ 757.618427][T27931] netlink: 'syz.1.5963': attribute type 61 has an invalid length. [ 757.893411][T27951] netlink: 124 bytes leftover after parsing attributes in process `syz.4.5968'. [ 758.283640][T27971] netlink: 'syz.1.5970': attribute type 4 has an invalid length. [ 758.337140][T27963] bond11: option ad_user_port_key: invalid value (65535) [ 758.337548][T27966] netlink: 165 bytes leftover after parsing attributes in process `syz.1.5970'. [ 758.347537][T27963] bond11: option ad_user_port_key: allowed values 0 - 1023 [ 758.382614][T27963] bond11 (unregistering): Released all slaves [ 758.396063][T27977] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5973'. [ 758.631275][ T5827] lo speed is unknown, defaulting to 1000 [ 758.647361][ T5827] syz0: Port: 1 Link DOWN [ 758.679897][T27987] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5977'. [ 758.690220][ T9] lo speed is unknown, defaulting to 1000 [ 759.235659][T28018] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 759.282988][T28038] net_ratelimit: 12 callbacks suppressed [ 759.283092][T28038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 759.607226][T28054] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 759.753460][T28060] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5992'. [ 760.097623][T28071] FAULT_INJECTION: forcing a failure. [ 760.097623][T28071] name failslab, interval 1, probability 0, space 0, times 0 [ 760.117160][T28071] CPU: 1 UID: 0 PID: 28071 Comm: syz.1.5995 Not tainted syzkaller #0 PREEMPT(full) [ 760.117193][T28071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 760.117206][T28071] Call Trace: [ 760.117215][T28071] [ 760.117225][T28071] dump_stack_lvl+0xe8/0x150 [ 760.117262][T28071] should_fail_ex+0x412/0x560 [ 760.117295][T28071] should_failslab+0xa8/0x100 [ 760.117325][T28071] __kmalloc_cache_noprof+0x88/0x660 [ 760.117348][T28071] ? trace_kmalloc+0x2a/0x110 [ 760.117369][T28071] ? nft_limit_clone+0x1af/0x350 [ 760.117397][T28071] nft_limit_clone+0x1af/0x350 [ 760.117425][T28071] nft_set_elem_expr_setup+0x4c2/0x840 [ 760.117468][T28071] nf_tables_newsetelem+0x2650/0x4450 [ 760.117538][T28071] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 760.117585][T28071] ? nla_validate_array+0xfc/0x260 [ 760.117640][T28071] ? __pfx___nla_validate_parse+0x10/0x10 [ 760.117678][T28071] ? __pfx_nf_tables_newset+0x10/0x10 [ 760.117712][T28071] ? nfnl_pernet+0x23/0x240 [ 760.117750][T28071] ? __nla_parse+0x40/0x60 [ 760.117787][T28071] nfnetlink_rcv+0x1240/0x27b0 [ 760.117932][T28071] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 760.117999][T28071] ? ref_tracker_free+0x693/0x840 [ 760.118301][T28071] ? __netlink_deliver_tap+0x807/0x850 [ 760.118347][T28071] ? netlink_deliver_tap+0x2e/0x1b0 [ 760.118394][T28071] netlink_unicast+0x80f/0x9b0 [ 760.118431][T28071] ? __pfx_netlink_unicast+0x10/0x10 [ 760.118458][T28071] ? netlink_sendmsg+0x650/0xb40 [ 760.118484][T28071] ? skb_put+0x11b/0x210 [ 760.118518][T28071] netlink_sendmsg+0x813/0xb40 [ 760.118556][T28071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 760.118588][T28071] ? aa_sock_msg_perm+0xf1/0x1b0 [ 760.118615][T28071] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 760.118644][T28071] ____sys_sendmsg+0x972/0x9f0 [ 760.118675][T28071] ? __pfx_____sys_sendmsg+0x10/0x10 [ 760.118845][T28071] ? import_iovec+0x73/0xa0 [ 760.118883][T28071] ___sys_sendmsg+0x2a5/0x360 [ 760.118915][T28071] ? __pfx____sys_sendmsg+0x10/0x10 [ 760.118991][T28071] ? __fget_files+0x2a/0x420 [ 760.119021][T28071] ? __fget_files+0x3a0/0x420 [ 760.119064][T28071] __x64_sys_sendmsg+0x1bd/0x2a0 [ 760.119090][T28071] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 760.119124][T28071] ? __pfx_ksys_write+0x10/0x10 [ 760.119162][T28071] do_syscall_64+0x14d/0xf80 [ 760.119191][T28071] ? trace_irq_disable+0x3b/0x150 [ 760.119217][T28071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.119237][T28071] ? clear_bhb_loop+0x40/0x90 [ 760.119262][T28071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.119283][T28071] RIP: 0033:0x7f17a979c799 [ 760.119306][T28071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.119324][T28071] RSP: 002b:00007f17aa6b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 760.119349][T28071] RAX: ffffffffffffffda RBX: 00007f17a9a15fa0 RCX: 00007f17a979c799 [ 760.119365][T28071] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 760.119379][T28071] RBP: 00007f17aa6b0090 R08: 0000000000000000 R09: 0000000000000000 [ 760.119392][T28071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 760.119405][T28071] R13: 00007f17a9a16038 R14: 00007f17a9a15fa0 R15: 00007ffe14a1a6b8 [ 760.119442][T28071] [ 760.677472][T28081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6000'. [ 760.691318][T28081] netlink: 'syz.0.6000': attribute type 10 has an invalid length. [ 760.712508][T28081] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 760.764856][T28088] bond7 (unregistering): Released all slaves [ 760.880150][T28096] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6005'. [ 761.315743][T28118] lo speed is unknown, defaulting to 1000 [ 761.330227][T28118] lo speed is unknown, defaulting to 1000 [ 761.351896][T28124] netlink: 113 bytes leftover after parsing attributes in process `syz.4.6009'. [ 761.484975][T28132] FAULT_INJECTION: forcing a failure. [ 761.484975][T28132] name failslab, interval 1, probability 0, space 0, times 0 [ 761.510562][T28132] CPU: 0 UID: 0 PID: 28132 Comm: syz.0.6012 Not tainted syzkaller #0 PREEMPT(full) [ 761.510593][T28132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 761.510606][T28132] Call Trace: [ 761.510615][T28132] [ 761.510624][T28132] dump_stack_lvl+0xe8/0x150 [ 761.510660][T28132] should_fail_ex+0x412/0x560 [ 761.510695][T28132] should_failslab+0xa8/0x100 [ 761.510723][T28132] __kmalloc_cache_noprof+0x88/0x660 [ 761.510749][T28132] ? nft_connlimit_clone+0x7d/0x1f0 [ 761.510783][T28132] nft_connlimit_clone+0x7d/0x1f0 [ 761.510813][T28132] nft_set_elem_expr_setup+0x4c2/0x840 [ 761.510855][T28132] nf_tables_newsetelem+0x2650/0x4450 [ 761.510926][T28132] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 761.510965][T28132] ? nla_validate_array+0xfc/0x260 [ 761.511020][T28132] ? __pfx___nla_validate_parse+0x10/0x10 [ 761.511058][T28132] ? __pfx_nf_tables_newset+0x10/0x10 [ 761.511089][T28132] ? nfnl_pernet+0x23/0x240 [ 761.511126][T28132] ? __nla_parse+0x40/0x60 [ 761.511161][T28132] nfnetlink_rcv+0x1240/0x27b0 [ 761.511227][T28132] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 761.511272][T28132] ? ref_tracker_free+0x693/0x840 [ 761.511333][T28132] ? __netlink_deliver_tap+0x807/0x850 [ 761.511363][T28132] ? netlink_deliver_tap+0x2e/0x1b0 [ 761.511412][T28132] netlink_unicast+0x80f/0x9b0 [ 761.511449][T28132] ? __pfx_netlink_unicast+0x10/0x10 [ 761.511478][T28132] ? netlink_sendmsg+0x650/0xb40 [ 761.511511][T28132] ? skb_put+0x11b/0x210 [ 761.511554][T28132] netlink_sendmsg+0x813/0xb40 [ 761.511594][T28132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 761.511627][T28132] ? aa_sock_msg_perm+0xf1/0x1b0 [ 761.511655][T28132] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 761.511683][T28132] ____sys_sendmsg+0x972/0x9f0 [ 761.511717][T28132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 761.511749][T28132] ? import_iovec+0x73/0xa0 [ 761.511786][T28132] ___sys_sendmsg+0x2a5/0x360 [ 761.511814][T28132] ? __pfx____sys_sendmsg+0x10/0x10 [ 761.511879][T28132] ? __fget_files+0x2a/0x420 [ 761.511908][T28132] ? __fget_files+0x3a0/0x420 [ 761.511949][T28132] __x64_sys_sendmsg+0x1bd/0x2a0 [ 761.511974][T28132] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 761.512008][T28132] ? __pfx_ksys_write+0x10/0x10 [ 761.512046][T28132] do_syscall_64+0x14d/0xf80 [ 761.512075][T28132] ? trace_irq_disable+0x3b/0x150 [ 761.512104][T28132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.512125][T28132] ? clear_bhb_loop+0x40/0x90 [ 761.512152][T28132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.512174][T28132] RIP: 0033:0x7f293819c799 [ 761.512195][T28132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 761.512212][T28132] RSP: 002b:00007f29390a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 761.512235][T28132] RAX: ffffffffffffffda RBX: 00007f2938415fa0 RCX: 00007f293819c799 [ 761.512251][T28132] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 761.512264][T28132] RBP: 00007f29390a5090 R08: 0000000000000000 R09: 0000000000000000 [ 761.512277][T28132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 761.512289][T28132] R13: 00007f2938416038 R14: 00007f2938415fa0 R15: 00007ffe9f0fbc98 [ 761.512326][T28132] [ 762.099525][T28138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6015'. [ 762.193896][T28144] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 762.262971][T28138] erspan1: entered promiscuous mode [ 762.268690][T28138] erspan1: entered allmulticast mode [ 762.352229][T28139] lo speed is unknown, defaulting to 1000 [ 762.378372][T28139] lo speed is unknown, defaulting to 1000 [ 762.556233][T28157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6021'. [ 762.693773][T28169] SET target dimension over the limit! [ 762.808545][T28160] lo speed is unknown, defaulting to 1000 [ 762.846502][T28160] lo speed is unknown, defaulting to 1000 [ 762.846520][T28167] lo speed is unknown, defaulting to 1000 [ 762.848348][T28162] lo speed is unknown, defaulting to 1000 [ 762.956133][T28175] netlink: 'syz.3.6023': attribute type 10 has an invalid length. [ 762.994255][T28173] FAULT_INJECTION: forcing a failure. [ 762.994255][T28173] name failslab, interval 1, probability 0, space 0, times 0 [ 763.038352][T28173] CPU: 1 UID: 0 PID: 28173 Comm: syz.1.6024 Not tainted syzkaller #0 PREEMPT(full) [ 763.038384][T28173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 763.038397][T28173] Call Trace: [ 763.038406][T28173] [ 763.038415][T28173] dump_stack_lvl+0xe8/0x150 [ 763.038451][T28173] should_fail_ex+0x412/0x560 [ 763.038485][T28173] should_failslab+0xa8/0x100 [ 763.038515][T28173] __kmalloc_noprof+0xe8/0x760 [ 763.038539][T28173] ? nft_set_elem_init+0xa8/0x7e0 [ 763.038572][T28173] nft_set_elem_init+0xa8/0x7e0 [ 763.038608][T28173] nf_tables_newsetelem+0x2377/0x4450 [ 763.038682][T28173] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 763.038721][T28173] ? nla_validate_array+0xfc/0x260 [ 763.038775][T28173] ? __pfx___nla_validate_parse+0x10/0x10 [ 763.038813][T28173] ? __pfx_nf_tables_newset+0x10/0x10 [ 763.038860][T28173] ? nfnl_pernet+0x23/0x240 [ 763.038895][T28173] ? __nla_parse+0x40/0x60 [ 763.038930][T28173] nfnetlink_rcv+0x1240/0x27b0 [ 763.038992][T28173] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 763.039035][T28173] ? ref_tracker_free+0x693/0x840 [ 763.039095][T28173] ? __netlink_deliver_tap+0x807/0x850 [ 763.039125][T28173] ? netlink_deliver_tap+0x2e/0x1b0 [ 763.039173][T28173] netlink_unicast+0x80f/0x9b0 [ 763.039210][T28173] ? __pfx_netlink_unicast+0x10/0x10 [ 763.039238][T28173] ? netlink_sendmsg+0x650/0xb40 [ 763.039264][T28173] ? skb_put+0x11b/0x210 [ 763.039300][T28173] netlink_sendmsg+0x813/0xb40 [ 763.039341][T28173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 763.039374][T28173] ? aa_sock_msg_perm+0xf1/0x1b0 [ 763.039404][T28173] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 763.039432][T28173] ____sys_sendmsg+0x972/0x9f0 [ 763.039464][T28173] ? __pfx_____sys_sendmsg+0x10/0x10 [ 763.039497][T28173] ? import_iovec+0x73/0xa0 [ 763.039533][T28173] ___sys_sendmsg+0x2a5/0x360 [ 763.039562][T28173] ? __pfx____sys_sendmsg+0x10/0x10 [ 763.039625][T28173] ? __fget_files+0x2a/0x420 [ 763.039656][T28173] ? __fget_files+0x3a0/0x420 [ 763.039698][T28173] __x64_sys_sendmsg+0x1bd/0x2a0 [ 763.039723][T28173] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 763.039757][T28173] ? __pfx_ksys_write+0x10/0x10 [ 763.039795][T28173] do_syscall_64+0x14d/0xf80 [ 763.039832][T28173] ? trace_irq_disable+0x3b/0x150 [ 763.039861][T28173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.039882][T28173] ? clear_bhb_loop+0x40/0x90 [ 763.039909][T28173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.039931][T28173] RIP: 0033:0x7f17a979c799 [ 763.039951][T28173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 763.039970][T28173] RSP: 002b:00007f17aa6b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 763.039992][T28173] RAX: ffffffffffffffda RBX: 00007f17a9a15fa0 RCX: 00007f17a979c799 [ 763.040008][T28173] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 763.040021][T28173] RBP: 00007f17aa6b0090 R08: 0000000000000000 R09: 0000000000000000 [ 763.040034][T28173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 763.040046][T28173] R13: 00007f17a9a16038 R14: 00007f17a9a15fa0 R15: 00007ffe14a1a6b8 [ 763.040078][T28173] [ 763.223213][T28181] netlink: 'syz.3.6023': attribute type 1 has an invalid length. [ 763.541481][T28183] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.6025'. [ 763.870951][T28167] lo speed is unknown, defaulting to 1000 [ 764.402386][T28162] lo speed is unknown, defaulting to 1000 [ 764.529542][T28205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6031'. [ 764.596791][T28206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6031'. [ 764.636637][T28206] bridge1: entered promiscuous mode [ 764.643696][T28206] macsec1: entered promiscuous mode [ 764.652525][T28206] macsec1: entered allmulticast mode [ 764.658434][T28206] bridge1: entered allmulticast mode [ 764.667648][T28206] bridge1: port 1(macsec1) entered blocking state [ 764.715254][T28206] bridge1: port 1(macsec1) entered disabled state [ 764.741349][T28206] bridge1: left allmulticast mode [ 764.757296][T28206] bridge1: left promiscuous mode [ 764.960458][T28213] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.6033'. [ 765.112310][T28218] FAULT_INJECTION: forcing a failure. [ 765.112310][T28218] name failslab, interval 1, probability 0, space 0, times 0 [ 765.127012][T28218] CPU: 0 UID: 0 PID: 28218 Comm: syz.1.6035 Not tainted syzkaller #0 PREEMPT(full) [ 765.127067][T28218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 765.127080][T28218] Call Trace: [ 765.127088][T28218] [ 765.127097][T28218] dump_stack_lvl+0xe8/0x150 [ 765.127131][T28218] should_fail_ex+0x412/0x560 [ 765.127163][T28218] should_failslab+0xa8/0x100 [ 765.127190][T28218] __kmalloc_cache_noprof+0x88/0x660 [ 765.127214][T28218] ? nft_connlimit_clone+0x7d/0x1f0 [ 765.127246][T28218] nft_connlimit_clone+0x7d/0x1f0 [ 765.127276][T28218] nft_set_elem_expr_setup+0x4c2/0x840 [ 765.127315][T28218] nf_tables_newsetelem+0x2650/0x4450 [ 765.127383][T28218] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 765.127419][T28218] ? nla_validate_array+0xfc/0x260 [ 765.127471][T28218] ? __pfx___nla_validate_parse+0x10/0x10 [ 765.127508][T28218] ? __pfx_nf_tables_newset+0x10/0x10 [ 765.127538][T28218] ? nfnl_pernet+0x23/0x240 [ 765.127579][T28218] ? __nla_parse+0x40/0x60 [ 765.127611][T28218] nfnetlink_rcv+0x1240/0x27b0 [ 765.127673][T28218] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 765.127716][T28218] ? ref_tracker_free+0x693/0x840 [ 765.127771][T28218] ? __netlink_deliver_tap+0x807/0x850 [ 765.127799][T28218] ? netlink_deliver_tap+0x2e/0x1b0 [ 765.127852][T28218] netlink_unicast+0x80f/0x9b0 [ 765.127889][T28218] ? __pfx_netlink_unicast+0x10/0x10 [ 765.127917][T28218] ? netlink_sendmsg+0x650/0xb40 [ 765.127942][T28218] ? skb_put+0x11b/0x210 [ 765.127976][T28218] netlink_sendmsg+0x813/0xb40 [ 765.128013][T28218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 765.128045][T28218] ? aa_sock_msg_perm+0xf1/0x1b0 [ 765.128072][T28218] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 765.128100][T28218] ____sys_sendmsg+0x972/0x9f0 [ 765.128131][T28218] ? __pfx_____sys_sendmsg+0x10/0x10 [ 765.128163][T28218] ? import_iovec+0x73/0xa0 [ 765.128196][T28218] ___sys_sendmsg+0x2a5/0x360 [ 765.128224][T28218] ? __pfx____sys_sendmsg+0x10/0x10 [ 765.128285][T28218] ? __fget_files+0x2a/0x420 [ 765.128313][T28218] ? __fget_files+0x3a0/0x420 [ 765.128353][T28218] __x64_sys_sendmsg+0x1bd/0x2a0 [ 765.128377][T28218] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 765.128409][T28218] ? __pfx_ksys_write+0x10/0x10 [ 765.128445][T28218] do_syscall_64+0x14d/0xf80 [ 765.128472][T28218] ? trace_irq_disable+0x3b/0x150 [ 765.128499][T28218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.128520][T28218] ? clear_bhb_loop+0x40/0x90 [ 765.128545][T28218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.128565][T28218] RIP: 0033:0x7f17a979c799 [ 765.128585][T28218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.128602][T28218] RSP: 002b:00007f17aa6b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 765.128624][T28218] RAX: ffffffffffffffda RBX: 00007f17a9a15fa0 RCX: 00007f17a979c799 [ 765.128639][T28218] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 765.128652][T28218] RBP: 00007f17aa6b0090 R08: 0000000000000000 R09: 0000000000000000 [ 765.128664][T28218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 765.128677][T28218] R13: 00007f17a9a16038 R14: 00007f17a9a15fa0 R15: 00007ffe14a1a6b8 [ 765.128711][T28218] [ 766.033096][T28231] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6038'. [ 766.101840][T28230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6039'. [ 766.218435][T28236] netlink: 'syz.1.6040': attribute type 10 has an invalid length. [ 766.233964][T28236] netlink: 'syz.1.6040': attribute type 10 has an invalid length. [ 766.274403][T28236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6040'. [ 766.306914][T28238] syzkaller0: entered promiscuous mode [ 766.313319][T28238] syzkaller0: entered allmulticast mode [ 766.577458][T28248] ip6gre1: entered promiscuous mode [ 766.585980][T28248] ip6gre1: entered allmulticast mode [ 766.693956][T28253] netlink: 'syz.4.6043': attribute type 11 has an invalid length. [ 766.726485][T28253] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6043'. [ 766.831265][T28257] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6043'. [ 766.910925][T28257] bond0: ARP target 170.170.170.170 is already present [ 766.971261][T28257] bond0: option arp_ip_target: invalid value (2863311530) [ 767.191638][T28263] FAULT_INJECTION: forcing a failure. [ 767.191638][T28263] name failslab, interval 1, probability 0, space 0, times 0 [ 767.205680][T28263] CPU: 0 UID: 0 PID: 28263 Comm: syz.1.6046 Not tainted syzkaller #0 PREEMPT(full) [ 767.205720][T28263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 767.205733][T28263] Call Trace: [ 767.205743][T28263] [ 767.205753][T28263] dump_stack_lvl+0xe8/0x150 [ 767.205786][T28263] should_fail_ex+0x412/0x560 [ 767.205822][T28263] should_failslab+0xa8/0x100 [ 767.205850][T28263] __kvmalloc_node_noprof+0x178/0x8a0 [ 767.205877][T28263] ? __nf_hook_entries_try_shrink+0x328/0x700 [ 767.205917][T28263] __nf_hook_entries_try_shrink+0x328/0x700 [ 767.205963][T28263] __nf_unregister_net_hook+0x4cc/0x6f0 [ 767.206006][T28263] nf_unregister_net_hooks+0xcb/0x140 [ 767.206042][T28263] nf_ct_netns_put+0x216/0x520 [ 767.206073][T28263] ? __pfx_nft_connlimit_destroy+0x10/0x10 [ 767.206104][T28263] nft_connlimit_destroy+0x5a/0xb0 [ 767.206131][T28263] ? __pfx_nft_connlimit_destroy+0x10/0x10 [ 767.206159][T28263] nft_set_elem_expr_setup+0x5f7/0x840 [ 767.206202][T28263] nf_tables_newsetelem+0x2650/0x4450 [ 767.206277][T28263] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 767.206317][T28263] ? nla_validate_array+0xfc/0x260 [ 767.206375][T28263] ? __pfx___nla_validate_parse+0x10/0x10 [ 767.206433][T28263] ? __pfx_nf_tables_newset+0x10/0x10 [ 767.206467][T28263] ? nfnl_pernet+0x23/0x240 [ 767.206505][T28263] ? __nla_parse+0x40/0x60 [ 767.206541][T28263] nfnetlink_rcv+0x1240/0x27b0 [ 767.206611][T28263] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 767.206666][T28263] ? ref_tracker_free+0x693/0x840 [ 767.206737][T28263] ? __netlink_deliver_tap+0x807/0x850 [ 767.206767][T28263] ? netlink_deliver_tap+0x2e/0x1b0 [ 767.206818][T28263] netlink_unicast+0x80f/0x9b0 [ 767.206857][T28263] ? __pfx_netlink_unicast+0x10/0x10 [ 767.206894][T28263] ? netlink_sendmsg+0x650/0xb40 [ 767.206921][T28263] ? skb_put+0x11b/0x210 [ 767.206957][T28263] netlink_sendmsg+0x813/0xb40 [ 767.206998][T28263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 767.207030][T28263] ? aa_sock_msg_perm+0xf1/0x1b0 [ 767.207059][T28263] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 767.207099][T28263] ____sys_sendmsg+0x972/0x9f0 [ 767.207134][T28263] ? __pfx_____sys_sendmsg+0x10/0x10 [ 767.207168][T28263] ? import_iovec+0x73/0xa0 [ 767.207204][T28263] ___sys_sendmsg+0x2a5/0x360 [ 767.207233][T28263] ? __pfx____sys_sendmsg+0x10/0x10 [ 767.207295][T28263] ? __fget_files+0x2a/0x420 [ 767.207323][T28263] ? __fget_files+0x3a0/0x420 [ 767.207363][T28263] __x64_sys_sendmsg+0x1bd/0x2a0 [ 767.207387][T28263] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 767.207417][T28263] ? __pfx_ksys_write+0x10/0x10 [ 767.207453][T28263] do_syscall_64+0x14d/0xf80 [ 767.207480][T28263] ? trace_irq_disable+0x3b/0x150 [ 767.207507][T28263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.207528][T28263] ? clear_bhb_loop+0x40/0x90 [ 767.207553][T28263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.207583][T28263] RIP: 0033:0x7f17a979c799 [ 767.207603][T28263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.207621][T28263] RSP: 002b:00007f17aa6b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 767.207652][T28263] RAX: ffffffffffffffda RBX: 00007f17a9a15fa0 RCX: 00007f17a979c799 [ 767.207667][T28263] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 767.207680][T28263] RBP: 00007f17aa6b0090 R08: 0000000000000000 R09: 0000000000000000 [ 767.207692][T28263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 767.207704][T28263] R13: 00007f17a9a16038 R14: 00007f17a9a15fa0 R15: 00007ffe14a1a6b8 [ 767.207739][T28263] [ 767.780073][T28277] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6051'. [ 767.813067][T28274] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6051'. [ 767.916041][T28285] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6052'. [ 768.022706][T28291] netlink: 'syz.4.6056': attribute type 1 has an invalid length. [ 768.285313][T28291] bond7: entered promiscuous mode [ 768.292976][T28291] bond7: entered allmulticast mode [ 768.300831][T28291] 8021q: adding VLAN 0 to HW filter on device bond7 [ 768.318451][T28299] macvlan1: entered promiscuous mode [ 768.324871][T28299] macvlan1: entered allmulticast mode [ 768.339392][T28299] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 768.390471][T28306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6061'. [ 768.408392][T28306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6061'. [ 768.745259][T28312] FAULT_INJECTION: forcing a failure. [ 768.745259][T28312] name failslab, interval 1, probability 0, space 0, times 0 [ 768.844037][T28312] CPU: 1 UID: 0 PID: 28312 Comm: syz.0.6063 Not tainted syzkaller #0 PREEMPT(full) [ 768.844069][T28312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 768.844082][T28312] Call Trace: [ 768.844091][T28312] [ 768.844102][T28312] dump_stack_lvl+0xe8/0x150 [ 768.844138][T28312] should_fail_ex+0x412/0x560 [ 768.844174][T28312] should_failslab+0xa8/0x100 [ 768.844204][T28312] __kvmalloc_node_noprof+0x178/0x8a0 [ 768.844231][T28312] ? __nf_hook_entries_try_shrink+0x328/0x700 [ 768.844274][T28312] __nf_hook_entries_try_shrink+0x328/0x700 [ 768.844320][T28312] __nf_unregister_net_hook+0x4cc/0x6f0 [ 768.844363][T28312] nf_unregister_net_hooks+0xcb/0x140 [ 768.844399][T28312] nf_ct_netns_put+0x216/0x520 [ 768.844431][T28312] ? __pfx_nft_connlimit_destroy+0x10/0x10 [ 768.844462][T28312] nft_connlimit_destroy+0x5a/0xb0 [ 768.844489][T28312] ? __pfx_nft_connlimit_destroy+0x10/0x10 [ 768.844518][T28312] nft_set_elem_expr_setup+0x5f7/0x840 [ 768.844563][T28312] nf_tables_newsetelem+0x2650/0x4450 [ 768.844637][T28312] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 768.844678][T28312] ? nla_validate_array+0xfc/0x260 [ 768.844735][T28312] ? __pfx___nla_validate_parse+0x10/0x10 [ 768.844775][T28312] ? __pfx_nf_tables_newset+0x10/0x10 [ 768.844808][T28312] ? nfnl_pernet+0x23/0x240 [ 768.844847][T28312] ? __nla_parse+0x40/0x60 [ 768.844893][T28312] nfnetlink_rcv+0x1240/0x27b0 [ 768.844963][T28312] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 768.845011][T28312] ? ref_tracker_free+0x693/0x840 [ 768.845082][T28312] ? __netlink_deliver_tap+0x807/0x850 [ 768.845111][T28312] ? netlink_deliver_tap+0x2e/0x1b0 [ 768.845162][T28312] netlink_unicast+0x80f/0x9b0 [ 768.845201][T28312] ? __pfx_netlink_unicast+0x10/0x10 [ 768.845231][T28312] ? netlink_sendmsg+0x650/0xb40 [ 768.845258][T28312] ? skb_put+0x11b/0x210 [ 768.845293][T28312] netlink_sendmsg+0x813/0xb40 [ 768.845335][T28312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 768.845370][T28312] ? aa_sock_msg_perm+0xf1/0x1b0 [ 768.845400][T28312] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 768.845514][T28312] ____sys_sendmsg+0x972/0x9f0 [ 768.845556][T28312] ? __pfx_____sys_sendmsg+0x10/0x10 [ 768.845591][T28312] ? import_iovec+0x73/0xa0 [ 768.845628][T28312] ___sys_sendmsg+0x2a5/0x360 [ 768.845654][T28312] ? __pfx____sys_sendmsg+0x10/0x10 [ 768.845721][T28312] ? __fget_files+0x2a/0x420 [ 768.845755][T28312] ? __fget_files+0x3a0/0x420 [ 768.845801][T28312] __x64_sys_sendmsg+0x1bd/0x2a0 [ 768.845829][T28312] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 768.845865][T28312] ? __pfx_ksys_write+0x10/0x10 [ 768.845915][T28312] do_syscall_64+0x14d/0xf80 [ 768.845945][T28312] ? trace_irq_disable+0x3b/0x150 [ 768.845974][T28312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.845996][T28312] ? clear_bhb_loop+0x40/0x90 [ 768.846024][T28312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.846048][T28312] RIP: 0033:0x7f293819c799 [ 768.846070][T28312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.846089][T28312] RSP: 002b:00007f29390a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 768.846112][T28312] RAX: ffffffffffffffda RBX: 00007f2938415fa0 RCX: 00007f293819c799 [ 768.846128][T28312] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 768.846142][T28312] RBP: 00007f29390a5090 R08: 0000000000000000 R09: 0000000000000000 [ 768.846156][T28312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 768.846170][T28312] R13: 00007f2938416038 R14: 00007f2938415fa0 R15: 00007ffe9f0fbc98 [ 768.846208][T28312] [ 769.338627][T28317] netlink: 'syz.1.6064': attribute type 30 has an invalid length. [ 770.256567][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 770.267436][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 770.277614][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 770.287984][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 770.298526][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 770.496962][T28331] lo speed is unknown, defaulting to 1000 [ 770.526261][T28331] lo speed is unknown, defaulting to 1000 [ 770.607161][T28336] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 771.135632][T28349] netlink: 'syz.3.6072': attribute type 10 has an invalid length. [ 771.168674][T28349] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.177088][T28349] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.214564][T28349] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.223291][T28349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 771.231291][T28349] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.239260][T28349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 771.254388][T28352] __nla_validate_parse: 5 callbacks suppressed [ 771.254413][T28352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6072'. [ 771.277400][T28349] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 771.322575][T28352] bridge_slave_1: left allmulticast mode [ 771.328731][T28352] bridge_slave_1: left promiscuous mode [ 771.334864][T28352] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.351129][T28352] bridge_slave_0: left allmulticast mode [ 771.357229][T28352] bridge_slave_0: left promiscuous mode [ 771.363909][T28352] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.383887][T28352] bond0: (slave bridge0): Releasing backup interface [ 771.626938][T28357] rose0: left promiscuous mode [ 771.763840][T28331] chnl_net:caif_netlink_parms(): no params data found [ 772.166743][T28371] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.6076'. [ 772.208421][T28377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6077'. [ 772.267889][T28377] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6077'. [ 772.296351][T28371] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 772.348636][ T5830] Bluetooth: hci3: command tx timeout [ 772.434659][T28331] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.478780][T28331] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.486463][T28331] bridge_slave_0: entered allmulticast mode [ 772.518689][T28331] bridge_slave_0: entered promiscuous mode [ 772.536185][T28331] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.551051][ T29] audit: type=1107 audit(1773819413.040:8): pid=28383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='yư}? ]_xOZH`cenl+v [ 772.551051][ T29] Rg3^CJ߼sM:I$Nk.LѹwPU' [ 772.576291][T28331] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.594615][T28331] bridge_slave_1: entered allmulticast mode [ 772.613047][T28331] bridge_slave_1: entered promiscuous mode [ 772.749150][T28386] ip6gre1: entered promiscuous mode [ 772.754778][T28386] ip6gre1: entered allmulticast mode [ 772.791605][T28396] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6080'. [ 772.796022][T28331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.857323][T28331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.969560][T28331] team0: Port device team_slave_0 added [ 772.990317][T28331] team0: Port device team_slave_1 added [ 773.041135][T28398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6082'. [ 773.061704][T28398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6082'. [ 773.082834][T28398] netlink: 'syz.2.6082': attribute type 13 has an invalid length. [ 773.087398][T28331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 773.108008][T28331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.154077][T28331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 773.168581][T28331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.176512][T28331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.204262][T28331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 773.221463][T28403] veth1_macvtap: left promiscuous mode [ 773.227505][T28403] macsec0: entered promiscuous mode [ 773.257228][T28403] veth1_macvtap: entered promiscuous mode [ 773.279064][T28403] macsec0: left promiscuous mode [ 773.408869][T28331] hsr_slave_0: entered promiscuous mode [ 773.429140][T28331] hsr_slave_1: entered promiscuous mode [ 773.468352][T28331] debugfs: 'hsr0' already exists in 'hsr' [ 773.474599][T28331] Cannot create hsr debugfs directory [ 773.732406][T28422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6086'. [ 773.754325][T28421] dvmrp0: left allmulticast mode [ 773.767239][T28421] pimreg: left allmulticast mode [ 774.018784][T28331] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 774.038040][T28331] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.159657][T28331] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 774.170102][T28331] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.202721][T28436] netlink: 177896 bytes leftover after parsing attributes in process `syz.2.6091'. [ 774.320448][T28433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6092'. [ 774.371535][T28331] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 774.395475][T28331] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.429338][ T5830] Bluetooth: hci3: command tx timeout [ 774.540239][T28331] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 774.561558][T28331] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.015715][T28331] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 775.042822][T28331] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 775.076619][T28331] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 775.131438][T28331] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 775.182337][T28453] syzkaller0: entered promiscuous mode [ 775.190107][T28453] syzkaller0: entered allmulticast mode [ 775.246316][T28450] sctp: [Deprecated]: syz.0.6096 (pid 28450) Use of int in maxseg socket option. [ 775.246316][T28450] Use struct sctp_assoc_value instead [ 775.292494][T28448] tc action pedit offset must be on 32 bit boundaries [ 775.415773][T28331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 775.677529][T28331] 8021q: adding VLAN 0 to HW filter on device team0 [ 775.756358][T16259] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.764425][T16259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 775.789238][T13337] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.797443][T13337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.309499][T28510] netlink: 'syz.0.6107': attribute type 13 has an invalid length. [ 776.518757][ T5830] Bluetooth: hci3: command tx timeout [ 776.721855][T28493] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.730109][T28493] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.198985][T28493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 777.226853][T28493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 777.548031][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 777.666808][T28493] ip6gre1: left promiscuous mode [ 777.679647][T28493] ip6gre1: left allmulticast mode [ 777.830184][T28528] syzkaller0: entered promiscuous mode [ 777.840589][T28528] syzkaller0: entered allmulticast mode [ 777.848646][T13339] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.929497][T13339] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.940194][T13339] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.009123][T28331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 778.038614][T13339] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.172946][T28551] __nla_validate_parse: 4 callbacks suppressed [ 778.172968][T28551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6115'. [ 778.291954][T28331] veth0_vlan: entered promiscuous mode [ 778.310783][T28558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6117'. [ 778.335225][T28554] IPVS: set_ctl: invalid protocol: 50 172.30.0.1:20001 [ 778.349263][T28331] veth1_vlan: entered promiscuous mode [ 778.406786][T28331] veth0_macvtap: entered promiscuous mode [ 778.422593][T28331] veth1_macvtap: entered promiscuous mode [ 778.469013][T28331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 778.503952][T28331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 778.522461][T28567] syzkaller0: entered promiscuous mode [ 778.531953][T28567] syzkaller0: entered allmulticast mode [ 778.547879][T13341] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.563048][T28565] netlink: 'syz.3.6119': attribute type 27 has an invalid length. [ 778.567403][T13341] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.582929][T13341] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.593806][ T5830] Bluetooth: hci3: command tx timeout [ 778.670272][T28575] xt_nfacct: accounting object `syz0' does not exist [ 778.826996][T28565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 778.851879][T28565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 779.009316][T28565] ip6gre1: left promiscuous mode [ 779.014831][T28565] ip6gre1: left allmulticast mode [ 779.091127][T13341] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.101427][T13341] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.175372][T28578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 779.186063][T28578] 8021q: adding VLAN 0 to HW filter on device team0 [ 779.209711][T28578] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 779.227122][T28586] netlink: 'syz.2.6125': attribute type 3 has an invalid length. [ 779.240344][T16270] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.275925][T16270] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.287174][T28586] siw: device registration error -23 [ 779.292041][T16270] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.367253][T28586] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 779.427366][T28595] netlink: 'syz.0.6127': attribute type 1 has an invalid length. [ 779.470641][T28598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6128'. [ 779.475512][T28595] 8021q: adding VLAN 0 to HW filter on device bond1 [ 779.539731][T28595] bond1: (slave veth3): Enslaving as an active interface with a down link [ 779.581228][T22079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.584762][T28595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6127'. [ 779.599735][T22079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.640699][T28598] tipc: Started in network mode [ 779.646976][T28598] tipc: Node identity 8affb5282a8, cluster identity 4711 [ 779.656672][T28598] tipc: Enabled bearer , priority 0 [ 779.670253][T28598] syzkaller0: entered promiscuous mode [ 779.677496][T28598] syzkaller0: entered allmulticast mode [ 779.696027][T28595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6127'. [ 779.713320][T13339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.722182][T13339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.743984][T28598] tipc: Resetting bearer [ 779.774433][T28601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6129'. [ 779.865646][T28598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6128'. [ 779.950956][T28608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6068'. [ 779.973436][T28608] netlink: 'syz.1.6068': attribute type 30 has an invalid length. [ 779.996222][T28608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6068'. [ 780.013535][T28615] netlink: 'syz.4.6130': attribute type 6 has an invalid length. [ 780.030038][T28615] IPv6: NLM_F_CREATE should be specified when creating new route [ 780.040982][T28597] tipc: Resetting bearer [ 780.309758][T28597] tipc: Disabling bearer [ 780.410266][T28626] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 780.483422][T28633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6132'. [ 780.543591][T28626] can: request_module (can-proto-4) failed. [ 781.004771][T28645] lo speed is unknown, defaulting to 1000 [ 781.124808][T28645] lo speed is unknown, defaulting to 1000 [ 781.145791][ T5143] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 781.180808][ T5143] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 781.191622][ T5143] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 781.210098][ T5143] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 781.220926][ T5143] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 781.513776][T28649] lo speed is unknown, defaulting to 1000 [ 781.761373][T28649] lo speed is unknown, defaulting to 1000 [ 782.543325][T28691] bridge_slave_1: left allmulticast mode [ 782.577919][T28691] bridge_slave_1: left promiscuous mode [ 782.584973][T28691] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.604159][T28691] bridge_slave_0: left allmulticast mode [ 782.613935][T28691] bridge_slave_0: left promiscuous mode [ 782.623233][T28691] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.889677][T28649] chnl_net:caif_netlink_parms(): no params data found [ 783.123769][T28649] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.133276][T28649] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.166690][ T5143] block nbd2: Receive control failed (result -1) [ 783.188217][T28649] bridge_slave_0: entered allmulticast mode [ 783.197180][T28649] bridge_slave_0: entered promiscuous mode [ 783.221430][T28705] __nla_validate_parse: 7 callbacks suppressed [ 783.221451][T28705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6149'. [ 783.230892][T28649] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.251813][T28649] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.265072][T28649] bridge_slave_1: entered allmulticast mode [ 783.278305][T28649] bridge_slave_1: entered promiscuous mode [ 783.308839][ T5143] Bluetooth: hci5: command tx timeout [ 783.330383][ T5143] block nbd3: Receive control failed (result -1) [ 783.401242][T28649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.431715][T28649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 783.445807][T28718] netlink: 'syz.1.6151': attribute type 28 has an invalid length. [ 783.465219][T28718] netlink: 'syz.1.6151': attribute type 3 has an invalid length. [ 783.507912][T28718] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6151'. [ 783.554214][T28649] team0: Port device team_slave_0 added [ 783.581307][T28649] team0: Port device team_slave_1 added [ 783.612292][T28721] ip6t_srh: unknown srh invflags 4000 [ 783.719824][T28723] netlink: 'syz.0.6153': attribute type 1 has an invalid length. [ 783.737921][T28723] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6153'. [ 783.755857][T28649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.764418][T28649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.808389][T28730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6154'. [ 783.828810][T28649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.893839][T28649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.930180][T28649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.930533][T28735] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6156'. [ 783.993006][T28649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 784.209972][T28649] hsr_slave_0: entered promiscuous mode [ 784.219627][T28649] hsr_slave_1: entered promiscuous mode [ 784.259931][T28649] debugfs: 'hsr0' already exists in 'hsr' [ 784.287957][T28649] Cannot create hsr debugfs directory [ 784.372373][T28744] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 784.400801][T28757] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6160'. [ 784.703011][T28774] openvswitch: netlink: IPv6 tunnel dst address is zero [ 784.936275][T28649] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 784.989767][T28649] [ 784.992430][T28649] ====================================================== [ 784.999824][T28649] WARNING: possible circular locking dependency detected [ 785.007478][T28649] syzkaller #0 Not tainted [ 785.012079][T28649] ------------------------------------------------------ [ 785.019530][T28649] syz-executor/28649 is trying to acquire lock: [ 785.026076][T28649] ffff88801b6dda20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 785.037693][T28649] [ 785.037693][T28649] but task is already holding lock: [ 785.045337][T28649] ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 785.056339][T28649] [ 785.056339][T28649] which lock already depends on the new lock. [ 785.056339][T28649] [ 785.068073][T28649] [ 785.068073][T28649] the existing dependency chain (in reverse order) is: [ 785.077905][T28649] [ 785.077905][T28649] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 785.087225][T28649] down_write+0x96/0x200 [ 785.092193][T28649] kernfs_add_one+0x41/0x5c0 [ 785.098057][T28649] kernfs_create_dir_ns+0xde/0x130 [ 785.105213][T28649] internal_create_group+0x425/0x1180 [ 785.111616][T28649] cpuhp_invoke_callback+0x445/0x860 [ 785.118502][T28649] cpuhp_issue_call+0x430/0x7a0 [ 785.124961][T28649] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 785.131874][T28649] __cpuhp_setup_state+0x3f/0x60 [ 785.138178][T28649] do_one_initcall+0x250/0x8d0 [ 785.144036][T28649] do_initcall_level+0x104/0x190 [ 785.150066][T28649] do_initcalls+0x59/0xa0 [ 785.155431][T28649] kernel_init_freeable+0x2a6/0x3e0 [ 785.161802][T28649] kernel_init+0x1d/0x1d0 [ 785.167923][T28649] ret_from_fork+0x51e/0xb90 [ 785.173761][T28649] ret_from_fork_asm+0x1a/0x30 [ 785.180939][T28649] [ 785.180939][T28649] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 785.191341][T28649] [ 785.191341][T28649] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 785.199543][T28649] cpus_read_lock+0x42/0x160 [ 785.205595][T28649] static_key_slow_inc+0x12/0x30 [ 785.211185][T28649] udp_tunnel_encap_enable+0xce/0x110 [ 785.217640][T28649] udp_lib_setsockopt+0x5fc/0x6f0 [ 785.224594][T28649] udpv6_setsockopt+0x67/0xb0 [ 785.230269][T28649] do_sock_setsockopt+0x17c/0x1b0 [ 785.236042][T28649] __x64_sys_setsockopt+0x13d/0x1b0 [ 785.242242][T28649] do_syscall_64+0x14d/0xf80 [ 785.247469][T28649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.254062][T28649] [ 785.254062][T28649] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 785.262425][T28649] lock_sock_nested+0x41/0x100 [ 785.268098][T28649] inet_shutdown+0x6a/0x390 [ 785.273366][T28649] nbd_mark_nsock_dead+0x2e9/0x560 [ 785.279647][T28649] recv_work+0x1c7f/0x1d90 [ 785.284694][T28649] process_scheduled_works+0xb02/0x1830 [ 785.291996][T28649] worker_thread+0xa50/0xfc0 [ 785.297293][T28649] kthread+0x388/0x470 [ 785.302251][T28649] ret_from_fork+0x51e/0xb90 [ 785.308979][T28649] ret_from_fork_asm+0x1a/0x30 [ 785.314839][T28649] [ 785.314839][T28649] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 785.323021][T28649] __mutex_lock+0x19f/0x1300 [ 785.328705][T28649] nbd_queue_rq+0x37b/0x1100 [ 785.334209][T28649] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 785.340373][T28649] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 785.347507][T28649] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 785.354144][T28649] blk_mq_run_hw_queue+0x348/0x4f0 [ 785.360574][T28649] blk_mq_dispatch_list+0xd16/0xe10 [ 785.367019][T28649] blk_mq_flush_plug_list+0x48d/0x570 [ 785.373113][T28649] __blk_flush_plug+0x3ed/0x4d0 [ 785.378940][T28649] __submit_bio+0x28d/0x580 [ 785.384144][T28649] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 785.390835][T28649] block_read_full_folio+0x599/0x830 [ 785.397174][T28649] filemap_read_folio+0x137/0x3b0 [ 785.403163][T28649] do_read_cache_folio+0x358/0x590 [ 785.409255][T28649] read_part_sector+0xb6/0x2b0 [ 785.414822][T28649] adfspart_check_ICS+0xa5/0xa40 [ 785.420719][T28649] bdev_disk_changed+0x7ba/0x1550 [ 785.426656][T28649] blkdev_get_whole+0x380/0x510 [ 785.432378][T28649] bdev_open+0x31e/0xd30 [ 785.437423][T28649] blkdev_open+0x470/0x610 [ 785.442813][T28649] do_dentry_open+0x785/0x14e0 [ 785.448577][T28649] vfs_open+0x3b/0x340 [ 785.453458][T28649] path_openat+0x2e08/0x3860 [ 785.458952][T28649] do_file_open+0x23e/0x4a0 [ 785.464363][T28649] do_sys_openat2+0x113/0x200 [ 785.469793][T28649] __x64_sys_openat+0x138/0x170 [ 785.475618][T28649] do_syscall_64+0x14d/0xf80 [ 785.481088][T28649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.487782][T28649] [ 785.487782][T28649] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 785.495190][T28649] __mutex_lock+0x19f/0x1300 [ 785.500662][T28649] nbd_queue_rq+0xc6/0x1100 [ 785.505893][T28649] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 785.512082][T28649] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 785.519694][T28649] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 785.526411][T28649] blk_mq_run_hw_queue+0x348/0x4f0 [ 785.532234][T28649] blk_mq_dispatch_list+0xd16/0xe10 [ 785.538341][T28649] blk_mq_flush_plug_list+0x48d/0x570 [ 785.545734][T28649] __blk_flush_plug+0x3ed/0x4d0 [ 785.551625][T28649] __submit_bio+0x28d/0x580 [ 785.557188][T28649] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 785.563888][T28649] block_read_full_folio+0x599/0x830 [ 785.570360][T28649] filemap_read_folio+0x137/0x3b0 [ 785.576552][T28649] do_read_cache_folio+0x358/0x590 [ 785.582665][T28649] read_part_sector+0xb6/0x2b0 [ 785.588068][T28649] adfspart_check_ICS+0xa5/0xa40 [ 785.594105][T28649] bdev_disk_changed+0x7ba/0x1550 [ 785.599968][T28649] blkdev_get_whole+0x380/0x510 [ 785.605981][T28649] bdev_open+0x31e/0xd30 [ 785.611380][T28649] blkdev_open+0x470/0x610 [ 785.616962][T28649] do_dentry_open+0x785/0x14e0 [ 785.622814][T28649] vfs_open+0x3b/0x340 [ 785.628446][T28649] path_openat+0x2e08/0x3860 [ 785.634201][T28649] do_file_open+0x23e/0x4a0 [ 785.639650][T28649] do_sys_openat2+0x113/0x200 [ 785.644976][T28649] __x64_sys_openat+0x138/0x170 [ 785.650844][T28649] do_syscall_64+0x14d/0xf80 [ 785.656688][T28649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.663916][T28649] [ 785.663916][T28649] -> #4 (set->srcu){.+.+}-{0:0}: [ 785.672380][T28649] __synchronize_srcu+0xca/0x3e0 [ 785.678231][T28649] elevator_switch+0x1e8/0x7a0 [ 785.684427][T28649] elevator_change+0x2cc/0x450 [ 785.690262][T28649] elevator_set_default+0x36c/0x430 [ 785.696602][T28649] blk_register_queue+0x366/0x430 [ 785.702516][T28649] __add_disk+0x677/0xd50 [ 785.707550][T28649] add_disk_fwnode+0xfb/0x480 [ 785.713842][T28649] nbd_dev_add+0x72c/0xb50 [ 785.719252][T28649] nbd_init+0x168/0x1f0 [ 785.724733][T28649] do_one_initcall+0x250/0x8d0 [ 785.730666][T28649] do_initcall_level+0x104/0x190 [ 785.736483][T28649] do_initcalls+0x59/0xa0 [ 785.741553][T28649] kernel_init_freeable+0x2a6/0x3e0 [ 785.748100][T28649] kernel_init+0x1d/0x1d0 [ 785.754552][T28649] ret_from_fork+0x51e/0xb90 [ 785.760848][T28649] ret_from_fork_asm+0x1a/0x30 [ 785.767480][T28649] [ 785.767480][T28649] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 785.775996][T28649] __mutex_lock+0x19f/0x1300 [ 785.781915][T28649] elevator_change+0x1b3/0x450 [ 785.787757][T28649] elevator_set_none+0xb5/0x140 [ 785.793173][T28649] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 785.800146][T28649] nbd_start_device+0x17f/0xb10 [ 785.805812][T28649] nbd_genl_connect+0x165b/0x1cf0 [ 785.811820][T28649] genl_family_rcv_msg_doit+0x22a/0x330 [ 785.818603][T28649] genl_rcv_msg+0x61c/0x7a0 [ 785.823917][T28649] netlink_rcv_skb+0x232/0x4b0 [ 785.829931][T28649] genl_rcv+0x28/0x40 [ 785.835273][T28649] netlink_unicast+0x80f/0x9b0 [ 785.840744][T28649] netlink_sendmsg+0x813/0xb40 [ 785.846228][T28649] ____sys_sendmsg+0x972/0x9f0 [ 785.851820][T28649] ___sys_sendmsg+0x2a5/0x360 [ 785.860092][T28649] __x64_sys_sendmsg+0x1bd/0x2a0 [ 785.866734][T28649] do_syscall_64+0x14d/0xf80 [ 785.872494][T28649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.879389][T28649] [ 785.879389][T28649] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 785.889547][T28649] blk_alloc_queue+0x546/0x680 [ 785.896108][T28649] __blk_mq_alloc_disk+0x197/0x390 [ 785.902363][T28649] nbd_dev_add+0x499/0xb50 [ 785.908038][T28649] nbd_init+0x168/0x1f0 [ 785.913100][T28649] do_one_initcall+0x250/0x8d0 [ 785.918433][T28649] do_initcall_level+0x104/0x190 [ 785.924103][T28649] do_initcalls+0x59/0xa0 [ 785.929916][T28649] kernel_init_freeable+0x2a6/0x3e0 [ 785.936185][T28649] kernel_init+0x1d/0x1d0 [ 785.941838][T28649] ret_from_fork+0x51e/0xb90 [ 785.948043][T28649] ret_from_fork_asm+0x1a/0x30 [ 785.953880][T28649] [ 785.953880][T28649] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 785.962684][T28649] fs_reclaim_acquire+0x71/0x100 [ 785.968542][T28649] kmem_cache_alloc_noprof+0x40/0x650 [ 785.974538][T28649] __kernfs_iattrs+0xdf/0x340 [ 785.980472][T28649] kernfs_iop_setattr+0xea/0x3f0 [ 785.986048][T28649] notify_change+0xc1a/0xf40 [ 785.991651][T28649] do_truncate+0x1c2/0x250 [ 785.996691][T28649] path_openat+0x2f89/0x3860 [ 786.002082][T28649] do_file_open+0x23e/0x4a0 [ 786.007466][T28649] do_sys_openat2+0x113/0x200 [ 786.012759][T28649] __x64_sys_openat+0x138/0x170 [ 786.018417][T28649] do_syscall_64+0x14d/0xf80 [ 786.024189][T28649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.031162][T28649] [ 786.031162][T28649] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 786.040301][T28649] __lock_acquire+0x15a5/0x2cf0 [ 786.045948][T28649] lock_acquire+0xf0/0x2e0 [ 786.051171][T28649] down_write+0x96/0x200 [ 786.056532][T28649] kernfs_unlink_sibling+0x71/0x180 [ 786.062907][T28649] __kernfs_remove+0x3e7/0x660 [ 786.068287][T28649] kernfs_remove_by_name_ns+0xaf/0x130 [ 786.074548][T28649] sysfs_remove_group+0xfc/0x2e0 [ 786.080387][T28649] sysfs_remove_groups+0x54/0xb0 [ 786.086137][T28649] net_rx_queue_update_kobjects+0x68d/0x740 [ 786.092929][T28649] netdev_unregister_kobject+0x113/0x450 [ 786.100697][T28649] unregister_netdevice_many_notify+0x1e0e/0x2370 [ 786.108780][T28649] unregister_netdevice_queue+0x31f/0x360 [ 786.115886][T28649] nsim_destroy+0x1e5/0x680 [ 786.121531][T28649] __nsim_dev_port_del+0x14d/0x1b0 [ 786.127480][T28649] nsim_dev_reload_destroy+0x288/0x490 [ 786.133649][T28649] nsim_drv_remove+0x58/0x170 [ 786.139650][T28649] device_release_driver_internal+0x46f/0x860 [ 786.146861][T28649] bus_remove_device+0x34d/0x440 [ 786.152425][T28649] device_del+0x527/0x8f0 [ 786.157634][T28649] device_unregister+0x21/0xf0 [ 786.163093][T28649] del_device_store+0x2b0/0x370 [ 786.168747][T28649] kernfs_fop_write_iter+0x3af/0x540 [ 786.174827][T28649] vfs_write+0x61d/0xb90 [ 786.180218][T28649] ksys_write+0x150/0x270 [ 786.185590][T28649] do_syscall_64+0x14d/0xf80 [ 786.191334][T28649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.198396][T28649] [ 786.198396][T28649] other info that might help us debug this: [ 786.198396][T28649] [ 786.209325][T28649] Chain exists of: [ 786.209325][T28649] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 786.209325][T28649] [ 786.224368][T28649] Possible unsafe locking scenario: [ 786.224368][T28649] [ 786.232011][T28649] CPU0 CPU1 [ 786.237755][T28649] ---- ---- [ 786.243312][T28649] lock(&root->kernfs_rwsem); [ 786.249136][T28649] lock(cpuhp_state_mutex); [ 786.256947][T28649] lock(&root->kernfs_rwsem); [ 786.264793][T28649] lock(&root->kernfs_iattr_rwsem); [ 786.270538][T28649] [ 786.270538][T28649] *** DEADLOCK *** [ 786.270538][T28649] [ 786.279323][T28649] 8 locks held by syz-executor/28649: [ 786.285578][T28649] #0: ffff88803388c420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x227/0xb90 [ 786.294772][T28649] #1: ffff888058970c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 786.305283][T28649] #2: ffff8880288b5e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 786.315791][T28649] #3: ffffffff8f43b7c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 786.326339][T28649] #4: ffff888027d420e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x860 [ 786.337501][T28649] #5: ffff888032299260 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 786.348156][T28649] #6: ffffffff8fbc6fc8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0xed/0x680 [ 786.357290][T28649] #7: ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 786.369027][T28649] [ 786.369027][T28649] stack backtrace: [ 786.375200][T28649] CPU: 1 UID: 0 PID: 28649 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 786.375223][T28649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 786.375234][T28649] Call Trace: [ 786.375244][T28649] [ 786.375253][T28649] dump_stack_lvl+0xe8/0x150 [ 786.375280][T28649] print_circular_bug+0x2e1/0x300 [ 786.375306][T28649] check_noncircular+0x12e/0x150 [ 786.375332][T28649] __lock_acquire+0x15a5/0x2cf0 [ 786.375354][T28649] ? __lock_acquire+0x6b5/0x2cf0 [ 786.375379][T28649] lock_acquire+0xf0/0x2e0 [ 786.375398][T28649] ? kernfs_unlink_sibling+0x71/0x180 [ 786.375419][T28649] down_write+0x96/0x200 [ 786.375435][T28649] ? kernfs_unlink_sibling+0x71/0x180 [ 786.375450][T28649] ? __pfx_down_write+0x10/0x10 [ 786.375465][T28649] ? kernfs_root+0x1c/0x230 [ 786.375485][T28649] ? kernfs_root+0x1c/0x230 [ 786.375505][T28649] ? kernfs_root+0x1c/0x230 [ 786.375532][T28649] ? kernfs_root+0x1ea/0x230 [ 786.375554][T28649] kernfs_unlink_sibling+0x71/0x180 [ 786.375571][T28649] __kernfs_remove+0x3e7/0x660 [ 786.375587][T28649] kernfs_remove_by_name_ns+0xaf/0x130 [ 786.375604][T28649] sysfs_remove_group+0xfc/0x2e0 [ 786.375627][T28649] sysfs_remove_groups+0x54/0xb0 [ 786.375650][T28649] net_rx_queue_update_kobjects+0x68d/0x740 [ 786.375673][T28649] netdev_unregister_kobject+0x113/0x450 [ 786.375692][T28649] unregister_netdevice_many_notify+0x1e0e/0x2370 [ 786.375717][T28649] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 786.375736][T28649] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 786.375766][T28649] unregister_netdevice_queue+0x31f/0x360 [ 786.375785][T28649] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 786.375807][T28649] nsim_destroy+0x1e5/0x680 [ 786.375832][T28649] __nsim_dev_port_del+0x14d/0x1b0 [ 786.375850][T28649] nsim_dev_reload_destroy+0x288/0x490 [ 786.375869][T28649] nsim_drv_remove+0x58/0x170 [ 786.375884][T28649] ? __pfx_nsim_bus_remove+0x10/0x10 [ 786.375906][T28649] device_release_driver_internal+0x46f/0x860 [ 786.375929][T28649] bus_remove_device+0x34d/0x440 [ 786.375954][T28649] device_del+0x527/0x8f0 [ 786.375968][T28649] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 786.375993][T28649] ? __pfx_device_del+0x10/0x10 [ 786.376011][T28649] device_unregister+0x21/0xf0 [ 786.376027][T28649] del_device_store+0x2b0/0x370 [ 786.376051][T28649] ? __pfx_del_device_store+0x10/0x10 [ 786.376074][T28649] ? sysfs_file_kobj+0x1e4/0x230 [ 786.376092][T28649] ? sysfs_kf_write+0x166/0x260 [ 786.376113][T28649] ? __pfx_sysfs_kf_write+0x10/0x10 [ 786.376131][T28649] kernfs_fop_write_iter+0x3af/0x540 [ 786.376151][T28649] vfs_write+0x61d/0xb90 [ 786.376171][T28649] ? __pfx_vfs_write+0x10/0x10 [ 786.376187][T28649] ? kmem_cache_free+0x187/0x630 [ 786.376204][T28649] ? fd_install+0x94/0x3d0 [ 786.376225][T28649] ? do_sys_openat2+0x14c/0x200 [ 786.376250][T28649] ksys_write+0x150/0x270 [ 786.376268][T28649] ? __pfx_ksys_write+0x10/0x10 [ 786.376287][T28649] do_syscall_64+0x14d/0xf80 [ 786.376310][T28649] ? trace_irq_disable+0x3b/0x150 [ 786.376333][T28649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.376349][T28649] ? clear_bhb_loop+0x40/0x90 [ 786.376366][T28649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.376383][T28649] RIP: 0033:0x7fdbbcf5cfce [ 786.376399][T28649] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 786.376413][T28649] RSP: 002b:00007ffe382361b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 786.376433][T28649] RAX: ffffffffffffffda RBX: 0000555586edd500 RCX: 00007fdbbcf5cfce [ 786.376445][T28649] RDX: 0000000000000001 RSI: 00007ffe38236240 RDI: 0000000000000005 [ 786.376456][T28649] RBP: 00007fdbbd03351c R08: 0000000000000000 R09: 0000000000000000 [ 786.376466][T28649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 786.376476][T28649] R13: 00007ffe38236240 R14: 00007fdbbdd44620 R15: 0000000000000003 [ 786.376493][T28649] [ 786.801826][ T5143] Bluetooth: hci5: command tx timeout [ 786.835315][T28786] tipc: Started in network mode [ 786.843992][T28786] tipc: Node identity ceed153a64d6, cluster identity 4711 [ 786.851607][T28786] tipc: Enabled bearer , priority 0 [ 786.866489][T28789] syzkaller0: entered promiscuous mode [ 786.879533][T28789] syzkaller0: entered allmulticast mode [ 786.887371][T28795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6174'. [ 786.906232][T28649] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 786.928381][T28780] tipc: Resetting bearer [ 786.938853][T28779] tipc: Resetting bearer [ 786.949801][T28779] tipc: Disabling bearer [ 786.962296][T28649] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 786.984521][T28795] lo speed is unknown, defaulting to 1000 [ 786.991790][T28795] lo speed is unknown, defaulting to 1000 [ 787.061787][T28649] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 787.147188][T28649] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 787.157445][T28649] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 787.174141][T28649] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 787.184977][T28649] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 787.242434][T28649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.260184][T28649] 8021q: adding VLAN 0 to HW filter on device team0 [ 787.273162][T13339] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.281160][T13339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 787.294137][T16270] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.302512][T16270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 787.433990][T28649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 787.468983][T28649] veth0_vlan: entered promiscuous mode [ 787.479895][T28649] veth1_vlan: entered promiscuous mode [ 787.502137][T28649] veth0_macvtap: entered promiscuous mode [ 787.510875][T28649] veth1_macvtap: entered promiscuous mode [ 787.524874][T28649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 787.537243][T28649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 787.551282][T13339] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.560789][T13339] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.571979][T13339] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.582978][T13339] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.610718][T28649] ieee80211 phy66: Selected rate control algorithm 'minstrel_ht' [ 787.635957][T13339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.639991][T28649] ieee80211 phy67: Selected rate control algorithm 'minstrel_ht' [ 787.649116][T13339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.676142][T16270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.684952][T16270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.828136][ T5143] Bluetooth: hci5: command tx timeout [ 790.908317][ T5143] Bluetooth: hci5: command tx timeout