last executing test programs: 1m27.084587367s ago: executing program 4 (id=5224): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000faffffff00000000", @ANYRES32=0x1, @ANYBLOB="feffffff0000001f0000147b0000000000000000156b1d29013bdd28d8006da91f0c0a5ceaa2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010000000400"/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pI4 \x00'}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0x1}, 0x4) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002340)={0xffffffffffffffff, 0x20, &(0x7f0000002300)={&(0x7f0000000a80)=""/253, 0xfd, 0x0, &(0x7f0000001300)=""/4096, 0x1000}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x12, 0x20, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}, @ldst={0x0, 0x2, 0x4, 0x9, 0x9ddeb482f20fb29f, 0xffffffffffffffc0, 0x4}, @generic={0xaf, 0x9, 0xc, 0x9, 0x6de5ba8f}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x900}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0xa}]}}}]}, 0x3c}}, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfff7ffff, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x22, 0x32e6, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast2}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @rand_addr=0x64010101}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @remote}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x881}, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x1b, 0x5, 0x410, 0xa8, 0x150, 0xffffffff, 0xa8, 0x0, 0x378, 0x378, 0xffffffff, 0x378, 0x378, 0x5, &(0x7f00000001c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x37}, @multicast2, 0xffffff00, 0xff000000, 'vlan1\x00', 'ip6tnl0\x00', {0xff}, {}, 0x67, 0x2, 0x40}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x4, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id=0x65, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xc, @remote, @multicast2, @gre_key=0x7fff, @icmp_id=0x65}}}}, {{@ip={@rand_addr=0x64010101, @broadcast, 0xffffff00, 0xff000000, 'veth0\x00', 'team_slave_0\x00', {0xff}, {}, 0x73, 0x1, 0x5a}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x4c6, 'syz1\x00', {0x64be}}}}, {{@ip={@local, @loopback, 0xff000000, 0x0, 'veth0_to_bond\x00', 'veth0_to_team\x00', {}, {0xff}, 0x1d, 0x0, 0x56}, 0x0, 0x138, 0x170, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@local, [0x0, 0xffffffff, 0x0, 0xffffffff], @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xffff00, 0xff000000, 0xffffffff], @ipv4=@multicast1, [0xffffffff, 0xff, 0xff000000, 0xff000000], @ipv4=@multicast1, [0xffffff00, 0xa46c2e263311cc1c, 0xff], 0x1, 0x0, 0x8, 0x4e22, 0x4e24, 0x4e20, 0x4e20, 0x8, 0x310}, 0x1, 0x190, 0x4e22, 0x4e22, 0x4e20, 0x4e22}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x8, @empty, @multicast1, @port=0x4e21, @gre_key=0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) (async, rerun: 32) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000100)=r4, 0x4) (rerun: 32) 1m26.478828299s ago: executing program 4 (id=5229): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000280)=0x4, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0xcb42, @dev={0xfe, 0x80, '\x00', 0x14}, 0xbf}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000008300600140012800b0001006c6f7770616e000004000280"], 0x34}}, 0x4080040) r3 = socket$packet(0x11, 0x2, 0x300) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180006ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001700)={r5, 0x0, 0x74, 0x81, &(0x7f0000000080)="a1c31c682584c285935f2f302cdb331a2a7dc265d2da5e042e916917e5984485c5cdba1dc6a049d05f715f24c2e4c3f0e9db8d1da6e7872b9e3e678165e22a0d52c92f4696cb67c71d399c070535e04fcfa1c5ccd10768558cece4dc5da336a0da5d3d994d0ce8b8943cdd5d721e2ac86993df72", &(0x7f0000000100)=""/129, 0x1000, 0x0, 0x83, 0x1000, &(0x7f00000001c0)="5afbdff74a7f5c010bb907a9f6b5e538cb826b85e3e3e8f5336097d46307eb3579f29d0a45722d2886ffd09f6ff0542cd221922b835d4dbd6bbdca866d153fc7ac4bc55e6b40fefefb5e8e9a0ddb9705be16bda5ff0c5c5c0c7040ca1f643775e2dbf1c3171f9ff376fdf8df942e68e2e6dc35740bf3481cd7fe8947fa53a547c41e89", &(0x7f0000000700)="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", 0x0, 0x0, 0x6}, 0x50) 1m26.025711882s ago: executing program 4 (id=5232): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x0, 0x0, 0x0, 0x4000002, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x7, 0x0, 0x8, 0x0, 0x8, 0xff}}, {0x4}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x5c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b5000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008900000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85}, 0x94) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f00000002c0)={r0, &(0x7f0000000000)='\x00', 0x135800, &(0x7f0000000200)={@_ha_fsid={[0x5, 0x40]}, {0x6, 0x7fff, 0x8, 0x8d}}, 0x6, &(0x7f0000000240), &(0x7f0000000280)=0x44e9}) sendmsg$NFT_BATCH(r5, &(0x7f0000000ec0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_DELRULE={0x24c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_USERDATA={0xb7, 0x7, 0x1, 0x0, "b7da4ad791b7dad7bc726dcc20d22b985ef8e85102320dab34aad04a83998723efb6d47feceba1afdbc365a4ecfa0d949b625c948efc580f88b9796f77002de170f6270a4818b3849f1b299d347f47bbda5fa9803662e49c685deacf9aabde929f01e433ec57bfd726e42bd20d368c1dff3bbd85f95f9aebf6579928004dd8b8d2335d89467927a63d90ad92dc582553d90f4587db3b7ffa214d1a4c4d062cde92d8c45fbe947fd7d548e02952e71856c7552b"}, @NFTA_RULE_EXPRESSIONS={0xcc, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x60, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x29}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x49}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}, {0x4c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x3}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xe}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x4c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6001}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x4305}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_USERDATA={0x3d, 0x7, 0x1, 0x0, "63ea4959c470941abb016dd8854ee42942d3cba475b2ea113892f3d53ade22ecc47ea0fb237d963e523406c7571131110bc3afc9bb95094566"}]}, @NFT_MSG_NEWSETELEM={0x36c, 0xc, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x32c, 0x3, 0x0, 0x1, [{0x328, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xa8, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x64, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, [""]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @meta={{0x9}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x224, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xe, 0x1, "e90b08711b5e8bc17ce8"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xfb, 0x1, "ebef390df5598854df29b67ea4bd7da96e9093671045f877984c4dd987814000dd35dfce1bd4fdef91fb06f2f29e803b1174eb7ae5a3daf2724e98e8c8b53eb9b52f6aa27b5a269829eba577bbdb38e49f2823189d6e20f468837559c2be5daaffc5a66003bbdc4c0fe2940475ae10333e1e23eadf24ea2b5edfdd2cbd9f65495c470c5bd024c0cdfeef973380c9a939d26ca388e3cb4e68828b57c5bccbb137f87fe50df84a1aab44f540ed1ed3da902390f23c776ec49e073f79646e67bbeae231661459985e90ec92993f411714664d9a2bd06285ec50313c6d256216ea2150bc02cc7e49694dd94cf10bfb6e35d064317d0753fd65"}, @NFTA_DATA_VALUE={0x5, 0x1, "e3"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_USERDATA={0x5c, 0xd, 0x1, 0x0, "4c5327a0797acdd92a9408c93c26f848a541cd97fd0758db8f2c3125c43e8eaae7378844a5c1fb347c96ff7238757782d0967688041b84e68191c8bb3c610eb6e859db7fad8087aceb6ef392f451b2d1b0bcdcebab1b9a60"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x70c}, 0x1, 0x0, 0x0, 0x1}, 0xc0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0017"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x0, 0x0, 0x0, 0x4000002, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x7, 0x0, 0x8, 0x0, 0x8, 0xff}}, {0x4}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x5c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b5000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008900000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85}, 0x94) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f00000002c0)={r0, &(0x7f0000000000)='\x00', 0x135800, &(0x7f0000000200)={@_ha_fsid={[0x5, 0x40]}, {0x6, 0x7fff, 0x8, 0x8d}}, 0x6, &(0x7f0000000240), &(0x7f0000000280)=0x44e9}) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000ec0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_DELRULE={0x24c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_USERDATA={0xb7, 0x7, 0x1, 0x0, "b7da4ad791b7dad7bc726dcc20d22b985ef8e85102320dab34aad04a83998723efb6d47feceba1afdbc365a4ecfa0d949b625c948efc580f88b9796f77002de170f6270a4818b3849f1b299d347f47bbda5fa9803662e49c685deacf9aabde929f01e433ec57bfd726e42bd20d368c1dff3bbd85f95f9aebf6579928004dd8b8d2335d89467927a63d90ad92dc582553d90f4587db3b7ffa214d1a4c4d062cde92d8c45fbe947fd7d548e02952e71856c7552b"}, @NFTA_RULE_EXPRESSIONS={0xcc, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x60, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x29}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x49}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}, {0x4c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x3}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xe}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x4c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6001}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x4305}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_USERDATA={0x3d, 0x7, 0x1, 0x0, "63ea4959c470941abb016dd8854ee42942d3cba475b2ea113892f3d53ade22ecc47ea0fb237d963e523406c7571131110bc3afc9bb95094566"}]}, @NFT_MSG_NEWSETELEM={0x36c, 0xc, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x32c, 0x3, 0x0, 0x1, [{0x328, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xa8, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x64, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, [""]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @meta={{0x9}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x224, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xe, 0x1, "e90b08711b5e8bc17ce8"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xfb, 0x1, "ebef390df5598854df29b67ea4bd7da96e9093671045f877984c4dd987814000dd35dfce1bd4fdef91fb06f2f29e803b1174eb7ae5a3daf2724e98e8c8b53eb9b52f6aa27b5a269829eba577bbdb38e49f2823189d6e20f468837559c2be5daaffc5a66003bbdc4c0fe2940475ae10333e1e23eadf24ea2b5edfdd2cbd9f65495c470c5bd024c0cdfeef973380c9a939d26ca388e3cb4e68828b57c5bccbb137f87fe50df84a1aab44f540ed1ed3da902390f23c776ec49e073f79646e67bbeae231661459985e90ec92993f411714664d9a2bd06285ec50313c6d256216ea2150bc02cc7e49694dd94cf10bfb6e35d064317d0753fd65"}, @NFTA_DATA_VALUE={0x5, 0x1, "e3"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_USERDATA={0x5c, 0xd, 0x1, 0x0, "4c5327a0797acdd92a9408c93c26f848a541cd97fd0758db8f2c3125c43e8eaae7378844a5c1fb347c96ff7238757782d0967688041b84e68191c8bb3c610eb6e859db7fad8087aceb6ef392f451b2d1b0bcdcebab1b9a60"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x70c}, 0x1, 0x0, 0x0, 0x1}, 0xc0) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0017"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) 1m25.989766252s ago: executing program 3 (id=5233): syz_emit_ethernet(0x1f, &(0x7f0000000840)={@link_local, @link_local, @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, "e3", "f71f97", 0x0, "231034b79aa983fb78"}}}}}, 0x0) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006400)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000203302801c3317800400150004008b80080086800400b28006330180242019"], 0x3344}}, 0x0) 1m25.881272893s ago: executing program 1 (id=5234): syz_emit_ethernet(0x23a, &(0x7f0000000600)={@local, @local, @val={@val={0x88a8, 0x2, 0x1, 0x1}, {0x8100, 0x1, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1fc, 0x2c, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @broadcast}, {[@fragment={0x5c, 0x0, 0x13, 0x0, 0x0, 0x8, 0x68}, @srh={0x0, 0x12, 0x4, 0x9, 0x56, 0x50, 0x3, [@mcast1, @loopback, @rand_addr=' \x01\x00', @local, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @hopopts={0x0, 0x5, '\x00', [@ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x25}}, @pad1]}, @routing={0x0, 0xc, 0x2, 0x89, 0x0, [@empty, @private1, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, @local]}, @dstopts={0x2e}, @fragment={0x55, 0x0, 0x1, 0x1, 0x0, 0x4, 0x64}, @dstopts={0x46, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x7}]}, @routing={0xc, 0x10, 0x1, 0x2, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @loopback, @private1, @empty, @mcast2, @mcast1, @private1]}], {{0x2100, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x24}, 0x94) 1m25.817889125s ago: executing program 0 (id=5235): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000007640)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="8f", 0x1}], 0x1}}], 0x1, 0xc854) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYRESDEC, @ANYBLOB="0149b7f3347d69cddbe1e688718aad6ef91eac22b7567904c0377053d7a88012e601bde3e6735439a815f5b009cece4a3188614ef72f185d5de8a75c7ad6e58eafcff869290b000e21092ed2b4a8cfedfa5310a979d8e7812625746d060ea0", @ANYRESOCT, @ANYBLOB="bf1ccf3d2c739cb60b124936a40c42c15edf47b378f4a3d1aefbd06a7203cf8ca3032c", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x14004001) sendmmsg(r0, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)="dc", 0x1}], 0x1, &(0x7f00000005c0)=ANY=[], 0x170}}], 0x1, 0x4044040) 1m25.768798782s ago: executing program 2 (id=5236): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r4, 0x701, 0x0, 0x2ddfdbfe, {0x41}}, 0x14}}, 0x24000040) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macsec0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) (async) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r4, 0x701, 0x0, 0x2ddfdbfe, {0x41}}, 0x14}}, 0x24000040) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) (async) 1m25.697556653s ago: executing program 3 (id=5237): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x7, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x3c, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) (async, rerun: 32) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x150, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}, {[], 0x74c8aad696aabd1d}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.current\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) (async) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r8, r7, 0x0, 0xb) (async) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000011000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001300", @ANYRES32, @ANYBLOB="0d4d8ecb56a5c9c2f6650cfdf3fb29d6de1c6bda59f518f932c8e6525560da94d8d5c2f9479f70de4ee2eb266b6961dabd50248a153bb71347b6db2bdcd620c17a38897749541d6e8b9620720dab76223b67d4e8af9d82624f41ffab1d0447aed9e351bcebb7259e56e0f054f3f5b20573d8c429f4643718ba6365e795b8d5abdeb30fdf9e2f1f70fa8e8d9635b365fb9ba4fc1292d8fb9ebb64819746b298bf4c8958f178bf35eb7cc3756a2ea3", @ANYRES32], 0x28}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) (async) unshare(0x10060000) r11 = socket(0x1, 0x80801, 0x1) setsockopt$inet6_tcp_int(r11, 0x11e, 0x1, 0x0, 0x0) (async, rerun: 64) close(r10) (async, rerun: 64) r12 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) (async) setsockopt$inet6_int(r10, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r12, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3b}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000290000003700008c6b53130600000000"], 0x18}, 0x3400c8d4) bind$inet(r9, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (rerun: 32) 1m25.696796825s ago: executing program 1 (id=5238): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012"], 0x0, 0x5a}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002020"], 0x0, 0x4e, 0x0, 0x1}, 0x28) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) (async, rerun: 32) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x10000}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000022000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000000000828af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000030000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0x8, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e0cea2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x3, 0x0) (async) sendmmsg(r2, &(0x7f0000000040), 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x4) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000007180)={@ifindex, 0xffffffffffffffff, 0x2e, 0x1000}, 0x20) (async) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async, rerun: 32) close(0x3) (rerun: 32) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (async, rerun: 64) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 64) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async) sendmmsg$inet(r5, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)="391adf0e4ffc9d2b4e6681c97cb814e1d683fd7065b082e42549b6aac265d8f06fc74d6d2b95f827098a17bbab52d616469f034f5d955822d906343ab344782016e80fd7adb151", 0x47}, {&(0x7f00000005c0)="eb8a7649f11eee0c8a70", 0xa}, {&(0x7f0000000780)="2fd4cf47433cc832f7b9287f69f290312b728f0301db30fe42e0111c154e4f1cc54bdb7ebc984a090c727b33abe6f725c536d2399324bd7638461683b158b64c52908231fcb154449b4b006264288e06b92515a685f214", 0x57}, {&(0x7f0000000880)="fa8f73530bdc6839cbd7de2c3cfdf1eda862656f65d5d0c4c2844e668b", 0x1d}], 0x4}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000b80)="5f13081d2750e4f83f8aaab231f88648f9c9e87e18e46ab9208a4d73c12e76e97444d96d1ebcc0b0aa6b49eb770956bde3", 0x31}], 0x1}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000d00)="736ecdd03b3937767fb82186dbda22c1200098cb486edd05ac88cf8c55717a30a2aa0dab40047756fbceec218470121af7f9934da3905f7fc4caad11bbf2db81c6462513a516da69f191e95538089f0d7717c9c1820c346dc35dacbeb6702094dadf302e9187e767f69c671c1b2f517308f512744852fd75edff69df", 0x7c}], 0x1}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001000)="a3e52c39765c8c792d36b1ac778d0c400244d38bd28936afd3dec9954548e60db10ba3bad3eb30dfa68747b776550895f5aff818eb4b6f74182be274e6cb67184e321d6f7e59b2cc3ace646baf9b6cd5c9cedf032a09f7ca1029b7fd0fd92332290a385a8c84f2f438d1c5ca31a21d086dce6913142053acfbdacf70c28d2c44e5d81d92f5e5c9fa53b531ffb1284da81d074eadb09b76a7fff33f9b34cfaffff031d2d75a163f69b708d627e08ff5570e943304faa60966bc9d9b70f5c8138d0d2aa04d47f9f49741bf6bcdd4c68eebf6b5", 0xd2}, {&(0x7f0000001100)="75619ba9b63af95745741a7167ca1c6679d83b202eefa6dc7a5eec0dfe04ea78263ad3d4272a1d707f17976212eb03d419e2adc073b16437f374d3cd3b6f7718fcf2aeed196dde83e668def7840db0d319c7ccf58bde50fe137d1de465875c8bd2aa2cd9c100dfe6c353b02ff314dbed4b08", 0x72}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (async) sendto$inet(r5, &(0x7f00000001c0)="175d1423437898d9953ed230c0cd0b7983e1dc5947a0146524f93397bd4e00b590fa761ecd4b99347e822a64f95b92bb023699453bed0200000000000000fe5a7c9e5eec8a3330221709db4ae68ed701d78d65a6cd083ee1fbb8a6eb30a006223b1dc3be838632cf20c0b446dde5977d67ceb5456b2102db", 0xb7, 0x10008095, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) (async) r7 = socket$kcm(0x2, 0xa, 0x2) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000100)) 1m25.625497238s ago: executing program 4 (id=5239): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f00000012c0)=""/4109, 0x100d) sendmmsg$alg(r1, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f1ad71c5e1e2ffd65015711202c22a16e97f0b88f833c486c5fbe2f289a0d0f74a06da438dab866494a247e9e4e4f06f21c7c3f5c4dc83ecf01cf0f3edeb9a676c8fb387ad8e1ef53ac7dfd6baf1ecf42036e181292251526714cf6d8fb4bce389c96bc0e24d3abc248a5b98fa279d377b558a6a1486d3a79e1164c19f1c333019380a90df8ef6b", 0x88}, {&(0x7f0000000180)="b01220ee4b5a0b12c273972ea3edd768dbad1c3febf48a9926f16268a3edc6f2ff97ba688eaaaf7ee0f2264fb2ee0f67e6121291692267d8b34d076518f221f60e554115e2810116af423f9f1534f78900edd661bc516f8d574e309f4913645794855756a586a7ccc83d81ea4d2578711903a191dd576ce98d41453c09625efe7dff4b6222712a7309e131c3841dec7fdfdea97eaa9652e221e15ad8cb5793f185774b0f49782a59e05617354be85a35db7bcfe79be4356ede43b918981ce2318a65cfe8b262", 0xc6}, {&(0x7f0000000280)="faab1d43a65d20ccf90a2bc53c6384d81e049741816045278e7e25ee0c020808bb08ab9992f5ffd89cd1df31c662ff364cbace61fcb7e067b266f3fed7c325d75bd964ef413b57037d7b69e34cdda89b0328e064119c9e8c7beb616f163ccf71e6f0ce625cddf3ac464cae067dc59d", 0x6f}, {&(0x7f0000002300)="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", 0xe50}], 0x4, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000850}], 0x1, 0x4000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="58000000020603000000000000000000050000070c00078008000600000000d10900020073797a32000000000500040000000000050005000a000000050001000600000013000300686173683a6e65742c696661636500"], 0x58}}, 0x80) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x3d, 0x4, 0x8, 0xffeffffc}]}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x28, r3, 0x1, 0x80000, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}}, 0x40000) 1m25.61805635s ago: executing program 0 (id=5240): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000500)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$sock_ifreq(r0, 0x8913, &(0x7f00000000c0)={'wg1\x00', @ifru_data=0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="6a0ac4ff000000000000000000baea4afa9cf6bf9fc22e00"/34], &(0x7f0000000480)='GPL\x00', 0x3}, 0x94) 1m25.49358536s ago: executing program 1 (id=5241): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'wg0\x00', {0x2, 0x4e22, @local}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'erspan0\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x7, 0x8000, 0x7, 0xc7, {{0x1d, 0x4, 0x1, 0x5, 0x74, 0x64, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @dev={0xac, 0x14, 0x14, 0x15}, {[@noop, @timestamp_prespec={0x44, 0x44, 0x79, 0x3, 0x5, [{@broadcast, 0x2}, {@remote, 0x80000001}, {@multicast2, 0x3}, {@local, 0xfb1}, {@multicast1, 0x8}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @lsrr={0x83, 0xb, 0xc6, [@loopback, @dev={0xac, 0x14, 0x14, 0x2c}]}, @generic={0x89, 0x10, "e6b50283ef2ab5fca3f4b7e499ff"}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe09, 0x0, 0x40f00, 0x42, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffe, 0x0, @mcast1}}}, 0x88) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) (async) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000feffff7f00000000feffffff"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000001f80)=r4, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) (async) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x4}, 0x20) (async) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) (async) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000180), 0x10) (async) sendmsg$can_bcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0500000000bbd10d0bc11fc00000000040000000aef028c89c34dcb05408427474e1cb5e689c593e7a16dd0af4f5be2f038bc9faf7"], 0x80}}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r11, @ANYBLOB="010025bd7000fcdbdf253f00000008000300", @ANYRES32=r12, @ANYBLOB="04005e801c005e8008000700c5f133694bbd07cb55000000080003006e8f000030005e800800020003000000080002491acf00000c0001"], 0x8c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r9, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r11, 0x4d8a19a4d36bbc69, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x5a}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000001080)=ANY=[@ANYBLOB="01000000000000000a00000300000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110) 1m25.295725527s ago: executing program 1 (id=5242): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000001c0)=0x7, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmsg$alg(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="438dc77642449e6e17553493f7aeb57e36375ae9e2b947bee5", 0x19}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/20, 0x14}, {&(0x7f00000002c0)=""/231, 0xe7}], 0x2}, 0xe}], 0x2, 0x2021, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@delqdisc={0x2c, 0x25, 0xb30, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x3, 0x9}, {0x5, 0xffe0}, {0xa, 0xf}}, [@TCA_RATE={0x6, 0x5, {0xd5, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x3}, @TCA_TBF_PARMS={0x28, 0x1, {{0x16, 0x0, 0x2, 0x3ff, 0x8, 0x2}, {0x7, 0x2, 0x5ec, 0x1, 0xad, 0x200}, 0x8, 0x8000, 0xb9f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x9e57194a6724d2b5}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000300)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000280)=0x13) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000000c000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00:'], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000005cbcf78b0095000000000000003af6d8a6b55f90194e08a787be3f73735f66caeaafb5c73a4b146f0c5adeccd24b049ebf5f6a78f80b08d9c61e619a5722022a693da3692ffc9dc1990efe7a3fefc858e4471c20121a960cba8807947f27c8cc7e9425f1f6c027e4233dcf8b3acd7242ec1ec0182c6cba1bc8d9dbe189ed07af6da450475fbd43d814fd230c8d16d15962d417816b3918a9007be981932c2a"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) getpeername$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000300)=0x1c) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000240)) 1m25.213759968s ago: executing program 0 (id=5243): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000500), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f0000000640)={&(0x7f0000000540), 0x0, 0x0, &(0x7f0000000580)=""/179, 0xb3}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1c, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r1}, 0x94) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073119c00000000008510000002000000850000000200000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000001f80)=r3, 0x4) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=""/25, 0x19}, 0x8}], 0x1, 0x120, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a18, 0x800, 0x0, 0x4b6ae4f95a5de35b) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5421, &(0x7f0000000140)=0xbc8) readv(r6, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/68, 0x44}], 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={r8, @in={{0x2, 0x4e23, @local}}, 0xfff, 0x7fff, 0x1, 0x4, 0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x9c) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r7) sendmsg$NL80211_CMD_GET_POWER_SAVE(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r9, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x840) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001980)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1m25.165863186s ago: executing program 2 (id=5244): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x9, &(0x7f0000000000)=[{0x7, 0x1, 0xf, 0x9b81}, {0x57, 0x3b, 0x2, 0x2}, {0xce43, 0x2b, 0x8, 0x8}, {0x4, 0x6, 0x95, 0xfff}, {0x7, 0x0, 0xb2, 0x8000}, {0x1, 0x7, 0xcb, 0x2}, {0x80, 0x2, 0x57, 0x6}, {0xafec, 0x40, 0x2}, {0x8, 0x1, 0xd, 0x8}]}, 0x10) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) (async) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async, rerun: 32) syz_emit_ethernet(0x76, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x8, 0x68, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0x4, 0x2, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xa, 0xf989, "e5984cde5618"}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "79e6f44d530dc1a2bbb526931e89c384"}, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0xb, "f55d357f589a117548"}, @md5sig={0x13, 0x12, "91d4d09dd84700"}]}}}}}}}, 0x0) (rerun: 32) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0x54, r1, 0x1, 0x1000, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1m24.977191258s ago: executing program 0 (id=5245): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) sendmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x10}}, @rights={{0x10}}], 0x20, 0x40}, 0x44814) 1m24.858349595s ago: executing program 0 (id=5246): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b50c}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_LEARNING={0x5, 0x8, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24044800}, 0x4040) socket$nl_audit(0x10, 0x3, 0x9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m21.937052364s ago: executing program 2 (id=5247): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4401000010000100feffffbf00010000fe880000000000000000000000000001ac1414aa000000000000000000000000000107944e230005000000003a0000eb", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x27}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x2, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3503, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000700)=ANY=[], 0x1c}}, 0x0) recvmsg(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)=""/23, 0x17}], 0x1}, 0x142) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x80, r5, 0x4000}, 0x38) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x1, 0x7800, 0x10, 0x475, {{0x6, 0x4, 0x2, 0xf, 0x18, 0x65, 0x0, 0x6, 0x4, 0x0, @empty, @empty, {[@end]}}}}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0xd, 0x10, 0x8, 0x8000, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2, 0xc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r9) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.sectors\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x11, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1c000000, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x1e00, 0x21, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x5, 0xa, 0x2, 0x8000}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0xffffffffffffffff, r7, r8, 0xffffffffffffffff, r9, r10], &(0x7f0000000400)=[{0x2, 0x5, 0x6, 0x6}, {0x3, 0x2, 0x3, 0xb}, {0x5, 0x3, 0x3, 0x5}, {0x3, 0x1, 0x0, 0xa}, {0x0, 0x5, 0x0, 0x8}, {0x5, 0x1, 0x4, 0x4}, {0x4, 0x3, 0xf, 0xc}], 0x10, 0x9}, 0x94) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r11, &(0x7f0000000300)={&(0x7f0000000200)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f00000002c0)={&(0x7f0000000240)="8beb62", 0x3}, 0x1, 0x0, 0x0, 0x4000898}, 0xc000) ioctl$NILFS_IOCTL_SET_SUINFO(r11, 0x40186e8d, &(0x7f0000000a40)={&(0x7f0000000900)=[{0xdef5, 0x0, 0x0, {0xffffffffffffffff, 0x5c}}, {0x2, 0x1, 0x0, {0x1, 0x8}}, {0x2, 0x1, 0x0, {0x4, 0x2, 0x1}}, {0x0, 0x1, 0x0, {0x898c00000000, 0x3}}, {0x9, 0x0, 0x0, {0x100000001, 0xfffff800}}, {0x7, 0x2, 0x0, {0xffffffffffffffc0, 0x1000}}, {0x0, 0x1, 0x0, {0x0, 0x6, 0x2}}, {0x5, 0x2, 0x0, {0x3d8, 0x40, 0x2}}, {0x9, 0x0, 0x0, {0x0, 0x4, 0x2}}, {0x9, 0x2, 0x0, {0xb81, 0xa, 0x2}}], 0xa, 0x20, 0x7}) 1m21.936649391s ago: executing program 3 (id=5248): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x59) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000faffbfff000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000002000008500000082000000850000000f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040), &(0x7f00000001c0)=0x18) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000000000000000000007000000860f0000000302020607f0b8af07e10014000000000000000000ffff01"], 0xc8}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x0, 0x4a, 0x0, 0x3, 0x32e}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r5, 0x0, 0xffffffffffffff20, 0x200c0045, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f00000000c0), 0x4) unshare(0x2020600) socket(0x1d, 0x80805, 0x7bff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a0904000000000000000002000002600004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc0800014000000000020001800e000100636f6e6e6c696d69740000000c00028008000140000000040900010073797a30000000000900020073797a3200"], 0xb4}}, 0x4080) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000030000200900010073797a310000000014000000020a0104000000000000000007000000540000001f0a030000000000000000000300000008000340000000000900010073797a310000000009000200"], 0xb0}, 0x1, 0x0, 0x0, 0x4040840}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$unix(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m21.880500694s ago: executing program 1 (id=5249): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000380)=0x1c, 0x80800) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x8}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={r2, 0x9, 0x4, 0x3, 0x7fff, 0x9}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000500)={r3, @in6={{0xa, 0x4e20, 0x3d, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x10, 0x5, 0x80f, 0x80, 0x55, 0x8, 0x5}, 0x9c) (async) r4 = socket$netlink(0x10, 0x3, 0x8000000004) r5 = epoll_create1(0x0) writev(r5, &(0x7f00000004c0)=[{&(0x7f0000000080)="147e425041895c8a4de94a56117b16f84d958fd808751f3f3ece476f24cd2348ae156ad344a8d7050bb5275fc98b12e2f5f2"}, {&(0x7f0000000400)="e7b96f68041737f4f8e81bb0e5b228d4da7bebd1cf19c25736fef8276757b0671582892c4454994d1fc431958e3c40cb8a6db2d808f7c4d11ef13bd1f953f6141a87d570b48f2bd9db4c63d83058bc75612e49d5335902fd91e11b16969d0efabd3229d12aa673fa8c83ae27f2b2bcb2c662dc005b329f3d7028025a37848eef72c71220"}], 0x1) (async) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000100)) (async, rerun: 32) close(r4) (async, rerun: 32) r6 = socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 64) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64) sendmsg$netlink(r7, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x4008054) (async, rerun: 64) write$nci(r8, &(0x7f0000000440)=ANY=[@ANYBLOB="71490e"], 0x10f) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) (async) syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x48, 0x0, 0x0, 0xa3, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x9, 0x3}, @mss={0x2, 0x4, 0xfe}, @sack={0x5, 0x12, [0x4800, 0x62, 0x5, 0x9]}]}}}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xeb, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) (rerun: 32) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r12}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000040)=0x9, 0x4) 1m21.867376974s ago: executing program 4 (id=5250): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000007640)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="8f", 0x1}], 0x1}}], 0x1, 0xc854) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYRESDEC, @ANYBLOB="0149b7f3347d69cddbe1e688718aad6ef91eac22b7567904c0377053d7a88012e601bde3e6735439a815f5b009cece4a3188614ef72f185d5de8a75c7ad6e58eafcff869290b000e21092ed2b4a8cfedfa5310a979d8e7812625746d060ea0", @ANYRESOCT, @ANYBLOB="bf1ccf3d2c739cb60b124936a40c42c15edf47b378f4a3d1aefbd06a7203cf8ca3032c", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x14004001) sendmmsg(r0, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)="dc", 0x1}], 0x1, &(0x7f00000005c0)=ANY=[], 0x170}}], 0x1, 0x4044040) 1m21.72749862s ago: executing program 2 (id=5251): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000bc00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[], 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000ff0000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) 1m21.645740935s ago: executing program 1 (id=5252): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRES8, @ANYRES16=r0, @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4040090) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="f1", 0x1}], 0x1}, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r6 = socket$kcm(0x29, 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x6, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendfile(r6, r7, 0x0, 0xffffffff002) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="3f713da207af717f0c5093ff374fab062388a190874c355b0eafe13bf7a448a6201a662ed21e005abcb3c5631ca5988d2b1300b0ce34e71b26da95cf1c197aa39b8ba4d92d44738fa0a1d763966ff31f8cfc10bf7ab052f41834", @ANYRES16=r9, @ANYBLOB="7961fdffffff0004000000000000000099006c910000e02425a0af74e42b92d4c3b9adf5bfc424a4484b7b9ce94379d9edc4229361d1c68a489b6c9b349923dd4979a8cd2d50803d4a17fd197be907317cc24664b3fa328d7c5359c8037e1e9dc55703cd4c0e83cd20bc50285d697570b3828de9c44e6886c73ff36721fc1db017c42ac6b892ac1d"], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x29, 0x5, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) write$cgroup_pressure(r10, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) 1m21.645000489s ago: executing program 0 (id=5253): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010601000000000000000200000a0900010073797a30000000004c000000030a010602000000000000000200000a0900010073797a30000000000900030073797a30000000000b00070066696c7465720000140004800800014000000003080002400000000098000000060a010603000000000000000200000a0900010073797a30000000000900020073797a30000000006c0004802c0001800e000100696d6d6564696174650000001800028008000140000000010c00028008000100313233343c0001800a00010072616e67650000002c000280080001400000000108000240000000000c00038008000100313233340c000480080001003536373814000000110001"], 0x12c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="7105b88601000101031f"], 0xbb) 1m21.569900246s ago: executing program 3 (id=5254): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYRES16], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000000)={0x0, 0x0}) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) ioctl$XFS_IOC_FSGEOMETRY(r3, 0x8100587e, &(0x7f0000002840)) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb2004001001000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xfe5, &(0x7f0000001840)=""/4069}, 0x94) (rerun: 64) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) (async) syz_emit_ethernet(0x91, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaa3a0b7000d85877810043000800451b007f00660000043c"], 0x0) (async, rerun: 32) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="faffffff", 0x4) (rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000003f0007012bbd700000000000017c00000400fc800c00018008bf0006", @ANYRES32=0x0, @ANYBLOB="0c0002"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8983, &(0x7f0000000a40)={0x6, 'bridge0\x00', {0x2}, 0xdd39}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x28000600) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r7}, 0xc) (async, rerun: 64) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000240)={0x0, 'bridge_slave_1\x00', {0x4}, 0x3ff8}) (async, rerun: 64) sendmmsg$alg(r4, &(0x7f0000002300)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="687ba982c88c9bcdca7c368773140072e476ce7755f919c8bcd1f67a82d084b314145323134943160f3db6e99de55167eef9dee0168f422271e2c98a2d4f2ec6f588e9843cc5adb0fd08c5513fbf6c9573839e2469c0ab169d28be4a86c28bd6a6dfd1fb63d299", 0x67}], 0x1, &(0x7f0000000280)=[@iv={0xb0, 0x117, 0x2, 0x9a, "35cb3cb04d2ade9a4215f5c4f7cd22c2854196a6ac48406746a13d180655bf5a90ecf2611a348b44b0293d6e8d31bb95a931ca9ab70b1d875daa245fc2301890bc65839133d1da73c122c73c01ec06f4483465fd9629362b30ea5b97965fcb8e5a221f2898929008349ae12ae7782367d6da276b88c0e837afb357cbf4a6f25a0ed0c3a68f3bbd6462735587f887b9a0e7a6e874bf3de8907f56"}, @iv={0x90, 0x117, 0x2, 0x75, "5e19456c25c450ef62ca4844e3155690c219740c271f98ba3999474a44f2860e2329339778638b3c8811131559eaa77c6f38ef4271fb31f69d37dc3c78bb3d70b8001fc3e9be6fbe3043e64123011011e0ff745499138036b040b96581efdea041c450e0ef7f102e1f4624c0e13bbbb00c395d3080"}, @iv={0x70, 0x117, 0x2, 0x5c, "7b064c3a8996df33fc9e406ff607a48c4a0fa4a791708e9ed4bc9bbb47524caa965dc1b8671108c9f9adaaf79f186e4b43fe11d40f3084e090a5a105561b658c84f1d1131f1f4d5dedc270ea5a72f8fef44398370e04c10bd539160a"}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x6}, @assoc={0x18, 0x117, 0x4, 0x91e7}], 0x228, 0x48c00}, {0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000004c0)="1b096f72d97b1808100900bd36aae6b8d8a2eb2f2795563b34071ece5d3980cd7d9bce558cb73857c15ded83ae3cebbf07c66ac4e26a3f139205516ed107ff18454dd6a29472a64930b17fbf2a51391941f8cf810eee7e4798531475c77d8a4fae0539d22e3dc0d51bc394d49303946452329067d7f179719aaa1fae976efbc13c91958f5cfb79a8be2aed6f36eb908d1087d451588f7854ef137b0750bbd5eb", 0xa0}, {&(0x7f0000000580)="6dcf0439c7137f6f36ce45f83f46a7d0aaaf96ebcaf32bda6d4106688f6a", 0x1e}, {&(0x7f00000005c0)="08e4171a80af47b180011e403f5b8a3a75260b17cb30ca03fc9a5cd01632824810cc4a139e9f18f5e8229c4577f294dc4da4120e2d922af9bf4ca04c7579846eb27715feb706be46314f5bf9d7463a59ce701177d39f6323dd5e437848e0d78610527cce5f9cdef9f6c8c241b5b44a82ad58acde491b6cbe4754cc277d6b29de196962c6cd33ecf85746c63d00d6cc2ceb17e70462751ea5837b419be38a3db397647e41600c603b955f37c4e8f54f7ec5b54ce3ff4e5b0d381e401c756548ea527e6de8a98aec91a9c96599f919ce0e4a996b32a9deedd62da6aac0d1f6c8f85368a059536468", 0xe7}], 0x3, &(0x7f0000000700)=[@assoc={0x18, 0x117, 0x4, 0x4f6}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x30, 0x800}, {0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000740)="47f704505c5b6f2562e495b759bc7de81813b9c11f3eb9248e694fe4031caa03c5dfd367eb11554844f22dd8ebe95a189643c14897b70e566de04389c7a30dd184a3b4cf98801524d8253d478ca48effd503c127f019b9294e4f3d707e485d907ce6b1eaa99d6479e931", 0x6a}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="08010000000000001701000002000000f300000034873d23ba66de30222e77e8dd8fd28b6cae4cdd57282bc1efd1eac95764f22c19743cdfff3fbd28e7e1466f60a5a8031ff70e6333554f6933193ecfb96449eda0b3487fdbbe74152cb55fb74adc36fe0d0d41edd20a4a23ddc7e3e0292a54919100eefbf9bd9e12db9cc06ff01d80f1e39ce4289d182866c0ebb9a178d6e6d2b038ad67da3093a5209f8b655b94dd1d83c03f2039f3636942c64a17d23fa45fdbe2a224fef4c96be79f752b46b6b7f790d63ea630562a49b29ef023365bab2357b4f34f6f3ccc2b3313f24c45baee94dfa9c3317e65fd0696b4881434773af89b78cf0300000000000000702e9589a61a55b200"], 0x108, 0x41}, {0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000002940)="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", 0x137}, {&(0x7f0000000a00)="920224bd1247856c8eb5a8bd2e04e0b9433a9150232a39b42b7d5efdd40a8495b81b8ac44c7cab195c648a", 0x2b}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="28bd7b20fc0e46a857973f9e793fd2effb61cbcbe0cd45174c3fd5444a4b0e7382d8cdb6118f84437aa3cb7951a80c3c92a4512c81a68dc971c2b13bf7752f02e5eb37d7151025926afc3a17af42", 0x4e}], 0x5, &(0x7f0000002a80)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0xc8, 0x117, 0x2, 0xb2, "6044a4825a683cf53b5d2d71c3b9f9e46bd8fa54a3a69650a91099ad780eebb8aaf653b5add33769635cf445ab68a757c2fff765ada6ac778a6dce30f9796c2eb1669be52f8ed9254e52961c129ddaeb40d0af1b43fbade3bdafbcf20d9ba87bc00db28528e862fb59c4dc15d2e818f421862f54b760fe77d7ab9da3b46282e9d2168199a387dd6fffbf17419a418317ae76a857f201a7286ed256acd3f51c3cfae96a32148ab9d9309a9dfe1c04cf628bd3"}], 0xf8, 0x20000004}, {0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001c00)="980032261ad20ef67e2d50dbe7976036b686b67e945d445da5e158aa68b2e29f3d5726d13774d2a7f2708307ff702a1ff4fd7a47b713e3dfef22974faf44c1a6be282b4858436022dfe814e6", 0x4c}, {&(0x7f0000001c80)="7d7a79b2dc9fbec89f40b3131bccb3080b1f91982f0a090110759b333604206dd47ed6df42b4fbfa8fbacb6a0e1ceb470b6a2b58aaacea58a1333736c9b2b904572113fcf44319d4a063049e38988a18b18a40922c67888ebcfde7c72f9e466fbb4ef25dbd0690a6df530f414f5af69f6bd0b16fd726b46c389a6307e82addd19ef5cbec5674f3c75c75ab3278fee15d", 0x90}, {&(0x7f0000001d40)="3cf0017d93f4b73f1cee2016ac623064f2b7ab4835814b2b5ff16df6a4993def66be", 0x22}, {&(0x7f0000001d80)="a801ad62ba243e1ec1d1d1a503c57a750f8e549ec7bdef619e24652ee5289c013fcc57a7338337c9d576244656236a124d1018bf5e347fc8b8dc95f54a8dec5048cb991c4d17854e3768edcb5a37ed1e4f1e9fb5e982d3c3e134b534c87e5b4db56d58ba2e8d8ccf73ce43f01539e51341f946aac987428390e857d048e68a58aa0d06e8b54396c167b79732be5c5f5d9aaf2dd522384d453402475eb3e44ee975f1a516", 0xa4}, {&(0x7f0000001e40)="c65946e55627cb395e418aa68febe85a3bcfe8be1fc7e1f4307f1f2f15cfd34cc5f52a0f4be120526cc6688e21b216056ef2d509f7aeff0b9b70a0cfdfec18162ad7e023dfb710fd8cda9c0ed75c8c9a557f512cc6bd828b157b99976b3536b841b20cbfc73474d49728ec7b512d3376e72bfe6476f730462003d8ff175003b56491a0095165bd3ead26d13654e24b337a35bab9a41cc06c4a578ce71ca0e8a396bf7eb7f0648764b53841e1780ce9f0d1e7389a14e62d46e39c7d6e7b9c81e20a7a68ea34c926c3b9f396c60222e16f2b0ccbf415278a0b8d05b17d4ea939b262788e629f885bca6a47cca45698f9053c8090", 0xf3}, {&(0x7f0000001f40)="02bc823c83c31301b2c9cbc0aeb424fe72aded2a2904c1e35c7affe5ebde146031cd4ad3dcbedd940c562fbaa5c701d3c3db84eb4a893d32bb1a58302082baf8cc79f39ffe9f58d36b1a5d9005d2fd3bc8d4acff753f07777631c8b417735047409fba8ac1643e75a2fc55a471afe9cc4e296a688adae6c52cd62311647b97eee9e00c318cf3647b0b05", 0x8a}], 0x6, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000002080)="781632604760b3dcf952e3", 0xb}, {&(0x7f00000020c0)="65ee2575f8f795aa9aad715064f6ee9583ecd889968c3cd3aee575b26c2b0db7e6a49b9d4b08b2a2b9dd9ed960a25571f11c36388be3812ee096d05d652702864a3ef98659aa45a231124a38929c599d1e71dc8328016b3e0d84ad2c74ab1335e1e9f26d", 0x64}, {&(0x7f0000002140)="a56d5c3e1877210ca0dc38ad96d475aa0076e37ca35abf625b83e3334e6f2ceecd28dbf44e46450e441a878765d78fe71711750fe85d1b8691f1333e81", 0x3d}, {&(0x7f0000002180)="10c8534117572914a3ccd4c29021b14e5fd76486e28ab24a9da48ce8796a3c8b0f996e9b1b809ee04531515027cfddcb3e629076cbc17ea98997a0aaba12f2cb4d21b05db84055a775c0ada57a8079f7eae7ee99baf6866743658df7902c5c38288492930a506f2bcf733c4ab2104e76e7d7606bf4db7a71872dee220e41d83f4993", 0x82}], 0x4, &(0x7f0000002280)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0xfffff6d1}, @op={0x18}], 0x48, 0x4000}], 0x6, 0x8000801) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2a, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x6}, {0x0, 0x0, 0x5, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {0x100000000000001}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@updpolicy={0xb4, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb4}}, 0x0) 1m21.482060836s ago: executing program 2 (id=5255): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=r2, @ANYBLOB="110003de78000000180012800100697036678865000008000280040012000000"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1m21.049035622s ago: executing program 3 (id=5256): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.swap.events\x00', 0x275a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@newtaction={0x68, 0x30, 0x29f, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x8001, 0x8, 0x3, 0x80000001}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x8040) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32, @ANYBLOB="8700000012646be50000000009b53133971ed500"/29, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r4, 0x0, &(0x7f0000001780)=""/4096}, 0x20) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x4, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88fb}]}, 0x1c}}, 0x2000080) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000c80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0541000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f81a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4540c0", 0xda}], 0x1}, 0x894) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)={'c', ' *:* ', 'r\x00'}, 0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={0x0, 0xfffc, 0x4f, 0x9, 0xd23, 0x22698c9a}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000003c0)={r7, 0x79, "c79ac6f4370518aaf0fb294482b874ab04adf13e919815e27342d16ea990956a99a773f20c60a67f2aa2c5b7356d87c866786550ce5fd249e650e76adb4d563c818132fc3c441109d53f146bdeaedc9c1d8d5057fc56e6af968de2311279e648701cd68e4a4750e505b341e32e88f168f6de831a18b4a43204"}, &(0x7f0000000240)=0x81) preadv(r1, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000300)=""/180, 0x120}], 0x2, 0x6, 0x7) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x10, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x66, &(0x7f0000000100)={r11}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000480)={r11, @in6={{0xa, 0x4e20, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}}, 0x6b7, 0x4}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000180)={r11, @in={{0x2, 0x4e23, @broadcast}}, 0x940f, 0xe, 0x0, 0x8001, 0x3b, 0x5, 0x40}, &(0x7f0000000480)=0x9c) 1m20.798262865s ago: executing program 4 (id=5257): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0xfa83eb850bd66ef}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040)=0x6de, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept4$llc(r1, 0x0, 0x0, 0x80800) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x6, 0xa}, {0x1, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) close(0x3) 1m20.775816046s ago: executing program 2 (id=5258): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011ec0)=@base={0x5, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe94}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000040)={'full', 0x20, 0xfd6, 0x20, 0xfffffffffffffff9}, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m20.444960402s ago: executing program 3 (id=5259): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x3, 0x4) ioctl$sock_ifreq(r2, 0x8971, &(0x7f00000000c0)={'team_slave_0\x00', @ifru_addrs=@ax25={0x3, @null, 0x7}}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x2c, 0x2c, 0xd35, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r6, {0x6, 0x10}, {}, {0x8, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}}, 0xc000) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00'], 0xfe33) close(r4) socket$kcm(0x29, 0x5, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000060000000085000000070000009500"/40], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "8181"}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r11, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) 0s ago: executing program 32 (id=5253): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010601000000000000000200000a0900010073797a30000000004c000000030a010602000000000000000200000a0900010073797a30000000000900030073797a30000000000b00070066696c7465720000140004800800014000000003080002400000000098000000060a010603000000000000000200000a0900010073797a30000000000900020073797a30000000006c0004802c0001800e000100696d6d6564696174650000001800028008000140000000010c00028008000100313233343c0001800a00010072616e67650000002c000280080001400000000108000240000000000c00038008000100313233340c000480080001003536373814000000110001"], 0x12c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="7105b88601000101031f"], 0xbb) kernel console output (not intermixed with test programs): 842] veth1_macvtap: left promiscuous mode [ 651.268122][T20842] veth0_macvtap: left promiscuous mode [ 651.281319][T20842] veth0_macvtap: entered promiscuous mode [ 651.313839][T20842] veth1_macvtap: entered promiscuous mode [ 651.347972][T20842] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 651.357881][T20842] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 651.378517][T20842] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 651.391193][T20842] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 651.418623][T20842] 8021q: adding VLAN 0 to HW filter on device bond1 [ 651.478098][T20842] 8021q: adding VLAN 0 to HW filter on device bond2 [ 651.905436][ T6137] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.936235][T14049] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 651.947179][T14049] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 651.967074][ T5726] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 651.981899][T20876] tap0: tun_chr_ioctl cmd 2147767507 [ 652.037915][T14049] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.070808][T14049] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.114950][T14049] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.317030][T20891] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 652.344638][T20894] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3703'. [ 652.394135][T20891] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3703'. [ 652.466134][ T5747] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 652.609835][T20908] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3707'. [ 652.768492][ T5747] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 653.152565][T20934] sock: sock_set_timeout: `syz.2.3715' (pid 20934) tries to set negative timeout [ 653.431910][T20948] pimreg: tun_chr_ioctl cmd 1074025677 [ 653.437807][T20948] pimreg: linktype set to 1 [ 653.563323][T20945] netlink: 'syz.1.3719': attribute type 4 has an invalid length. [ 653.720583][T20955] netlink: 276 bytes leftover after parsing attributes in process `syz.1.3719'. [ 653.751052][T14049] wlan1: Trigger new scan to find an IBSS to join [ 653.853852][T20959] FAULT_INJECTION: forcing a failure. [ 653.853852][T20959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 653.909803][T20959] CPU: 0 UID: 0 PID: 20959 Comm: syz.4.3722 Not tainted syzkaller #0 PREEMPT(full) [ 653.909827][T20959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 653.909839][T20959] Call Trace: [ 653.909846][T20959] [ 653.909854][T20959] dump_stack_lvl+0xe8/0x150 [ 653.909888][T20959] should_fail_ex+0x40c/0x560 [ 653.909918][T20959] _copy_to_user+0x31/0xb0 [ 653.909939][T20959] bpf_verifier_vlog+0x496/0x900 [ 653.909974][T20959] __btf_verifier_log+0xe2/0x140 [ 653.910031][T20959] ? __pfx___btf_verifier_log+0x10/0x10 [ 653.910051][T20959] ? __might_fault+0xaf/0x130 [ 653.910080][T20959] ? btf_parse_hdr+0x1da/0x810 [ 653.910110][T20959] btf_parse_hdr+0x33f/0x810 [ 653.910140][T20959] btf_new_fd+0x32f/0xbb0 [ 653.910162][T20959] __sys_bpf+0xd2e/0xd90 [ 653.910211][T20959] ? __pfx___sys_bpf+0x10/0x10 [ 653.910244][T20959] ? __fget_files+0x2a/0x420 [ 653.910283][T20959] ? ksys_write+0x242/0x270 [ 653.910304][T20959] ? __pfx_ksys_write+0x10/0x10 [ 653.910332][T20959] __x64_sys_bpf+0xba/0xd0 [ 653.910353][T20959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.910374][T20959] do_syscall_64+0x174/0x580 [ 653.910401][T20959] ? trace_irq_disable+0x3b/0x140 [ 653.910425][T20959] ? clear_bhb_loop+0x40/0x90 [ 653.910446][T20959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.910470][T20959] RIP: 0033:0x7f3eed79e019 [ 653.910488][T20959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.910504][T20959] RSP: 002b:00007f3eee58a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 653.910525][T20959] RAX: ffffffffffffffda RBX: 00007f3eeda25fa0 RCX: 00007f3eed79e019 [ 653.910538][T20959] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 653.910549][T20959] RBP: 00007f3eee58a090 R08: 0000000000000000 R09: 0000000000000000 [ 653.910559][T20959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 653.910569][T20959] R13: 00007f3eeda26038 R14: 00007f3eeda25fa0 R15: 00007ffc6ce28488 [ 653.910597][T20959] [ 654.162906][T20969] tipc: Enabled bearer , priority 0 [ 654.317735][T20969] tipc: Disabling bearer [ 654.329731][T20976] veth0: entered allmulticast mode [ 654.526247][T20987] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3731'. [ 654.557588][T20987] xt_TCPMSS: Only works on TCP SYN packets [ 654.601055][T20991] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3731'. [ 654.690828][T20996] netlink: 'syz.1.3733': attribute type 1 has an invalid length. [ 654.740915][T20996] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3733'. [ 654.889060][T21005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3736'. [ 654.890239][T21009] FAULT_INJECTION: forcing a failure. [ 654.890239][T21009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 654.967447][T21009] CPU: 0 UID: 0 PID: 21009 Comm: syz.0.3737 Not tainted syzkaller #0 PREEMPT(full) [ 654.967473][T21009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 654.967484][T21009] Call Trace: [ 654.967492][T21009] [ 654.967500][T21009] dump_stack_lvl+0xe8/0x150 [ 654.967534][T21009] should_fail_ex+0x40c/0x560 [ 654.967562][T21009] _copy_to_user+0x31/0xb0 [ 654.967583][T21009] bpf_verifier_vlog+0x496/0x900 [ 654.967617][T21009] __btf_verifier_log+0xe2/0x140 [ 654.967645][T21009] ? __pfx___btf_verifier_log+0x10/0x10 [ 654.967666][T21009] ? __might_fault+0xaf/0x130 [ 654.967694][T21009] ? btf_parse_hdr+0x1da/0x810 [ 654.967725][T21009] btf_parse_hdr+0x36b/0x810 [ 654.967757][T21009] btf_new_fd+0x32f/0xbb0 [ 654.967781][T21009] __sys_bpf+0xd2e/0xd90 [ 654.967814][T21009] ? __pfx___sys_bpf+0x10/0x10 [ 654.967850][T21009] ? __fget_files+0x2a/0x420 [ 654.967892][T21009] ? ksys_write+0x242/0x270 [ 654.967913][T21009] ? __pfx_ksys_write+0x10/0x10 [ 654.967937][T21009] __x64_sys_bpf+0xba/0xd0 [ 654.967960][T21009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.967980][T21009] do_syscall_64+0x174/0x580 [ 654.968005][T21009] ? trace_irq_disable+0x3b/0x140 [ 654.968029][T21009] ? clear_bhb_loop+0x40/0x90 [ 654.968052][T21009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.968071][T21009] RIP: 0033:0x7f58f639e019 [ 654.968106][T21009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.968122][T21009] RSP: 002b:00007f58f7263028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 654.968142][T21009] RAX: ffffffffffffffda RBX: 00007f58f6625fa0 RCX: 00007f58f639e019 [ 654.968156][T21009] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 654.968168][T21009] RBP: 00007f58f7263090 R08: 0000000000000000 R09: 0000000000000000 [ 654.968180][T21009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 654.968191][T21009] R13: 00007f58f6626038 R14: 00007f58f6625fa0 R15: 00007fffef1f9b18 [ 654.968242][T21009] [ 655.412796][T21020] vti0: entered promiscuous mode [ 656.144200][T21049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3747'. [ 656.285654][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 656.383814][T21059] netlink: 'syz.3.3750': attribute type 1 has an invalid length. [ 656.481893][T21061] nft_compat: unsupported protocol 5 [ 656.620252][T21068] x_tables: duplicate underflow at hook 3 [ 656.887065][T21081] netlink: 'syz.1.3757': attribute type 21 has an invalid length. [ 656.897672][T21081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3757'. [ 657.011723][T18788] Bluetooth: hci1: command 0x0406 tx timeout [ 657.259728][T21097] netlink: 'syz.4.3761': attribute type 2 has an invalid length. [ 657.727813][T21119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3769'. [ 657.738303][T21119] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 657.747355][T21119] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 657.756096][T21119] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 657.766776][T21119] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3769'. [ 657.800169][T14054] wlan1: Trigger new scan to find an IBSS to join [ 657.987241][T21122] batadv0: entered promiscuous mode [ 658.002700][T21122] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 658.019740][T21127] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3772'. [ 658.038424][T21127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3772'. [ 658.039886][T21122] batadv0: left promiscuous mode [ 658.063787][T21127] xt_bpf: check failed: parse error [ 658.182526][T21133] x_tables: duplicate entry at hook 1 [ 658.238491][T21139] FAULT_INJECTION: forcing a failure. [ 658.238491][T21139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 658.276208][T21139] CPU: 1 UID: 0 PID: 21139 Comm: syz.0.3776 Not tainted syzkaller #0 PREEMPT(full) [ 658.276233][T21139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 658.276244][T21139] Call Trace: [ 658.276252][T21139] [ 658.276259][T21139] dump_stack_lvl+0xe8/0x150 [ 658.276294][T21139] should_fail_ex+0x40c/0x560 [ 658.276324][T21139] _copy_to_user+0x31/0xb0 [ 658.276345][T21139] bpf_verifier_vlog+0x496/0x900 [ 658.276375][T21139] __btf_verifier_log+0xe2/0x140 [ 658.276411][T21139] ? __pfx___btf_verifier_log+0x10/0x10 [ 658.276431][T21139] ? __might_fault+0xaf/0x130 [ 658.276463][T21139] ? btf_parse_hdr+0x1da/0x810 [ 658.276495][T21139] btf_parse_hdr+0x3c1/0x810 [ 658.276527][T21139] btf_new_fd+0x32f/0xbb0 [ 658.276553][T21139] __sys_bpf+0xd2e/0xd90 [ 658.276584][T21139] ? __pfx___sys_bpf+0x10/0x10 [ 658.276619][T21139] ? __fget_files+0x2a/0x420 [ 658.276660][T21139] ? ksys_write+0x242/0x270 [ 658.276680][T21139] ? __pfx_ksys_write+0x10/0x10 [ 658.276702][T21139] __x64_sys_bpf+0xba/0xd0 [ 658.276723][T21139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.276743][T21139] do_syscall_64+0x174/0x580 [ 658.276767][T21139] ? trace_irq_disable+0x3b/0x140 [ 658.276790][T21139] ? clear_bhb_loop+0x40/0x90 [ 658.276812][T21139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.276829][T21139] RIP: 0033:0x7f58f639e019 [ 658.276847][T21139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.276864][T21139] RSP: 002b:00007f58f7263028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 658.276883][T21139] RAX: ffffffffffffffda RBX: 00007f58f6625fa0 RCX: 00007f58f639e019 [ 658.276896][T21139] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 658.276906][T21139] RBP: 00007f58f7263090 R08: 0000000000000000 R09: 0000000000000000 [ 658.276917][T21139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 658.276928][T21139] R13: 00007f58f6626038 R14: 00007f58f6625fa0 R15: 00007fffef1f9b18 [ 658.276957][T21139] [ 658.706949][T21147] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 658.713409][T21152] netlink: 'syz.4.3778': attribute type 10 has an invalid length. [ 658.753118][T21153] FAULT_INJECTION: forcing a failure. [ 658.753118][T21153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 658.776352][T21153] CPU: 1 UID: 0 PID: 21153 Comm: syz.0.3779 Not tainted syzkaller #0 PREEMPT(full) [ 658.776379][T21153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 658.776390][T21153] Call Trace: [ 658.776398][T21153] [ 658.776407][T21153] dump_stack_lvl+0xe8/0x150 [ 658.776442][T21153] should_fail_ex+0x40c/0x560 [ 658.776472][T21153] _copy_from_user+0x2d/0xb0 [ 658.776493][T21153] ___sys_recvmsg+0x173/0x5a0 [ 658.776527][T21153] ? __pfx____sys_recvmsg+0x10/0x10 [ 658.776557][T21153] ? __fget_files+0x2a/0x420 [ 658.776606][T21153] ? __fget_files+0x3a2/0x420 [ 658.776642][T21153] do_recvmmsg+0x31a/0x7f0 [ 658.776675][T21153] ? __pfx_do_recvmmsg+0x10/0x10 [ 658.776707][T21153] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 658.776733][T21153] ? __fget_files+0x3a2/0x420 [ 658.776782][T21153] __x64_sys_recvmmsg+0x198/0x250 [ 658.776807][T21153] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 658.776838][T21153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.776858][T21153] do_syscall_64+0x174/0x580 [ 658.776882][T21153] ? trace_irq_disable+0x3b/0x140 [ 658.776906][T21153] ? clear_bhb_loop+0x40/0x90 [ 658.776929][T21153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.776947][T21153] RIP: 0033:0x7f58f639e019 [ 658.776964][T21153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.776980][T21153] RSP: 002b:00007f58f7242028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 658.777000][T21153] RAX: ffffffffffffffda RBX: 00007f58f6626090 RCX: 00007f58f639e019 [ 658.777013][T21153] RDX: 0000000000000003 RSI: 0000200000005000 RDI: 0000000000000003 [ 658.777024][T21153] RBP: 00007f58f7242090 R08: 0000000000000000 R09: 0000000000000000 [ 658.777038][T21153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.777049][T21153] R13: 00007f58f6626128 R14: 00007f58f6626090 R15: 00007fffef1f9b18 [ 658.777077][T21153] [ 658.778123][T21147] bond3 (unregistering): Released all slaves [ 659.022414][T14054] wlan1: Creating new IBSS network, BSSID 8a:25:7c:20:12:7d [ 659.168863][T21152] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 659.412804][T21178] netlink: 'syz.0.3786': attribute type 1 has an invalid length. [ 659.464494][T21183] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3785'. [ 659.568006][T21168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.588798][T21168] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.613686][T21168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.698615][T21168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 659.707497][T21192] FAULT_INJECTION: forcing a failure. [ 659.707497][T21192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 659.712935][T21168] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 659.722932][T21192] CPU: 0 UID: 0 PID: 21192 Comm: syz.4.3787 Not tainted syzkaller #0 PREEMPT(full) [ 659.722957][T21192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 659.722968][T21192] Call Trace: [ 659.722976][T21192] [ 659.722984][T21192] dump_stack_lvl+0xe8/0x150 [ 659.723018][T21192] should_fail_ex+0x40c/0x560 [ 659.723045][T21192] _copy_to_user+0x31/0xb0 [ 659.723067][T21192] bpf_verifier_vlog+0x496/0x900 [ 659.723098][T21192] __btf_verifier_log+0xe2/0x140 [ 659.723130][T21192] ? __pfx___btf_verifier_log+0x10/0x10 [ 659.723150][T21192] ? __might_fault+0xaf/0x130 [ 659.723177][T21192] ? btf_parse_hdr+0x1da/0x810 [ 659.723207][T21192] btf_parse_hdr+0x4a2/0x810 [ 659.723238][T21192] btf_new_fd+0x32f/0xbb0 [ 659.723263][T21192] __sys_bpf+0xd2e/0xd90 [ 659.723295][T21192] ? __pfx___sys_bpf+0x10/0x10 [ 659.723329][T21192] ? __fget_files+0x2a/0x420 [ 659.723370][T21192] ? ksys_write+0x242/0x270 [ 659.723390][T21192] ? __pfx_ksys_write+0x10/0x10 [ 659.723412][T21192] __x64_sys_bpf+0xba/0xd0 [ 659.723435][T21192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.723455][T21192] do_syscall_64+0x174/0x580 [ 659.723482][T21192] ? clear_bhb_loop+0x40/0x90 [ 659.723504][T21192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.723522][T21192] RIP: 0033:0x7f3eed79e019 [ 659.723539][T21192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.723555][T21192] RSP: 002b:00007f3eee58a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 659.723574][T21192] RAX: ffffffffffffffda RBX: 00007f3eeda25fa0 RCX: 00007f3eed79e019 [ 659.723588][T21192] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 659.723599][T21192] RBP: 00007f3eee58a090 R08: 0000000000000000 R09: 0000000000000000 [ 659.723610][T21192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 659.723621][T21192] R13: 00007f3eeda26038 R14: 00007f3eeda25fa0 R15: 00007ffc6ce28488 [ 659.723652][T21192] [ 659.935212][T21168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 659.951057][T21168] veth1_vlan: left promiscuous mode [ 659.957955][T21168] veth0_vlan: entered promiscuous mode [ 659.964715][T21168] veth1_vlan: entered promiscuous mode [ 659.979129][T21168] veth1_macvtap: left promiscuous mode [ 659.986126][T21168] veth0_macvtap: left promiscuous mode [ 659.992743][T21168] veth0_macvtap: entered promiscuous mode [ 660.010427][T21168] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 660.033567][T21168] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 660.042739][T21168] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 660.061093][T21168] 8021q: adding VLAN 0 to HW filter on device bond1 [ 660.082248][T21168] bridge0: port 3(vlan2) entered blocking state [ 660.088631][T21168] bridge0: port 3(vlan2) entered forwarding state [ 660.113326][T14046] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.120530][T14046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.130590][T14046] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.137757][T14046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.196724][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.286642][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.445819][ T125] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.462496][ T125] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.511934][ T125] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.564079][ T125] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.629046][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.650495][T14054] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 660.755040][T21214] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3793'. [ 660.771440][T21214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3793'. [ 660.786038][T21206] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 660.820818][T21221] bridge0: port 1(veth1_to_bridge) entered blocking state [ 660.849258][T21221] bridge0: port 1(veth1_to_bridge) entered disabled state [ 660.880589][T21221] veth1_to_bridge: entered allmulticast mode [ 660.897176][T21221] veth1_to_bridge: entered promiscuous mode [ 660.935291][T21221] bridge0: port 1(veth1_to_bridge) entered blocking state [ 660.943659][T21221] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 661.080694][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.118381][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.151717][T21212] tipc: Enabling of bearer rejected, failed to enable media [ 661.223858][T14054] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.269545][T14054] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.425124][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.487788][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.695879][T21253] syzkaller0: entered promiscuous mode [ 661.719236][T21253] syzkaller0: entered allmulticast mode [ 661.919669][T21266] geneve1 speed is unknown, defaulting to 1000 [ 661.944102][T21266] lo speed is unknown, defaulting to 1000 [ 662.125570][T18788] Bluetooth: hci0: command 0x0406 tx timeout [ 662.323635][T21282] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3806'. [ 662.448021][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.476224][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.490616][ T6129] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 662.646943][T14054] wlan1: Selected IBSS BSSID 8a:25:7c:20:12:7d based on configured SSID [ 662.768245][ T125] wlan1: Trigger new scan to find an IBSS to join [ 662.828514][T21302] syzkaller0: entered promiscuous mode [ 662.854683][T21302] syzkaller0: entered allmulticast mode [ 662.872646][T21308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3812'. [ 662.892147][T21308] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3812'. [ 662.933682][T21310] netlink: zone id is out of range [ 662.943576][T21310] netlink: zone id is out of range [ 662.949796][T21310] netlink: zone id is out of range [ 663.029957][T21311] netlink: 'syz.2.3812': attribute type 1 has an invalid length. [ 663.367001][T21284] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 663.666422][T21332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3820'. [ 663.720667][T21335] bridge0: entered promiscuous mode [ 663.747997][T21335] bridge0: entered allmulticast mode [ 663.773947][T21335] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3820'. [ 663.817001][T21332] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.824734][T21332] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.027192][ T12] wlan1: Selected IBSS BSSID 8a:25:7c:20:12:7d based on configured SSID [ 665.170813][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 665.224892][T21402] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3836'. [ 665.239462][T21398] syzkaller0: entered promiscuous mode [ 665.267123][T21398] syzkaller0: entered allmulticast mode [ 665.276654][T21402] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3836'. [ 665.551807][T21413] bridge0: port 3(dummy0) entered blocking state [ 665.573921][T21413] bridge0: port 3(dummy0) entered disabled state [ 665.603938][T21413] dummy0: entered allmulticast mode [ 665.638317][T21413] dummy0: entered promiscuous mode [ 665.668997][T21413] bridge0: port 3(dummy0) entered blocking state [ 665.675503][T21413] bridge0: port 3(dummy0) entered forwarding state [ 665.704245][T21415] dummy0: left allmulticast mode [ 665.738999][T21415] dummy0: left promiscuous mode [ 665.763491][T21415] bridge0: port 3(dummy0) entered disabled state [ 665.839153][T21428] netlink: 'syz.2.3842': attribute type 13 has an invalid length. [ 665.893802][T21433] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3842'. [ 665.923400][T21428] netlink: 'syz.2.3842': attribute type 17 has an invalid length. [ 666.097386][T21427] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.106520][T21427] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.129632][ T5628] Bluetooth: hci3: command 0x0405 tx timeout [ 666.488308][T21458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3850'. [ 666.608582][ C1] net_ratelimit: 1736 callbacks suppressed [ 666.608605][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.833402][T21428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.880999][T21428] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.031928][T21428] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.039485][T21428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.080059][T21428] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.087296][T21428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 667.240457][T21428] veth1_vlan: left promiscuous mode [ 667.253029][T21428] veth0_vlan: left promiscuous mode [ 667.266558][T21428] veth0_vlan: entered promiscuous mode [ 667.277389][T21428] veth1_vlan: entered promiscuous mode [ 667.293417][T21428] veth1_macvtap: left promiscuous mode [ 667.301310][T21428] veth0_macvtap: left promiscuous mode [ 667.309490][T21428] veth0_macvtap: entered promiscuous mode [ 667.338638][T21428] veth1_macvtap: entered promiscuous mode [ 667.358487][T21428] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 667.385833][T21428] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 667.420964][T21428] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 667.437313][T21428] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 667.491826][ T6137] wlan1: Selected IBSS BSSID 32:50:80:14:d4:25 based on configured SSID [ 667.593308][T21470] syzkaller0: entered promiscuous mode [ 667.603582][T21470] syzkaller0: entered allmulticast mode [ 667.652973][T21491] PKCS7: Unknown OID: [4] (bad) [ 667.658269][T21491] PKCS7: Only support pkcs7_signedData type [ 667.684876][T21491] macsec1: entered allmulticast mode [ 667.690416][T21491] dummy0: entered allmulticast mode [ 667.697028][T21491] dummy0: entered promiscuous mode [ 667.705746][T21491] dummy0: left allmulticast mode [ 667.727661][ T6137] wlan1: Trigger new scan to find an IBSS to join [ 668.680945][ T125] wlan1: Creating new IBSS network, BSSID 6a:6d:e2:3d:5a:fc [ 670.763484][T21478] syzkaller0: entered promiscuous mode [ 670.769565][T21478] syzkaller0: entered allmulticast mode [ 670.778231][T20558] dummy0: left promiscuous mode [ 670.822294][T21516] syzkaller1: entered promiscuous mode [ 670.828003][T21516] syzkaller1: entered allmulticast mode [ 671.094110][T21528] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3863'. [ 671.203980][T21540] IPVS: Error connecting to the multicast addr [ 671.626168][T21562] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 329 [ 671.844443][ T6137] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 671.884756][T21564] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 671.963742][T21574] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 672.405424][T21594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3878'. [ 673.204363][T21637] batadv0: entered promiscuous mode [ 673.219955][T21599] No such timeout policy "syz1" [ 673.234794][T21637] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 673.320424][T21599] netlink: zone id is out of range [ 673.342236][T21599] netlink: zone id is out of range [ 673.366452][T21599] netlink: zone id is out of range [ 673.381279][T21599] netlink: zone id is out of range [ 673.405486][T21599] netlink: zone id is out of range [ 673.423690][T21599] netlink: zone id is out of range [ 673.456956][T21599] netlink: zone id is out of range [ 673.525824][T21645] geneve1 speed is unknown, defaulting to 1000 [ 673.617377][T21645] lo speed is unknown, defaulting to 1000 [ 673.839758][T21630] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3886'. [ 673.856315][T21650] bridge0: port 1(veth1_to_bridge) entered disabled state [ 674.802686][T21642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3890'. [ 674.958604][T21687] netlink: 'syz.0.3900': attribute type 1 has an invalid length. [ 674.987648][T21681] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3901'. [ 674.988953][T21647] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 674.999217][T21681] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3901'. [ 675.022876][T21647] bond1 (unregistering): Released all slaves [ 675.123312][T21680] batadv_slave_0: entered allmulticast mode [ 675.154735][T21680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3900'. [ 675.483229][T21704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3905'. [ 675.504025][T21706] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3904'. [ 675.520272][T21708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3905'. [ 675.553162][T21704] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 675.602478][T21708] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 675.763222][ T6137] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 676.700032][T21744] __nla_validate_parse: 2 callbacks suppressed [ 676.700049][T21744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3915'. [ 676.733379][T21744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3915'. [ 676.964255][T21758] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3919'. [ 676.994336][T21764] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3918'. [ 677.301290][T21776] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3923'. [ 677.330674][T21776] netlink: 239 bytes leftover after parsing attributes in process `syz.3.3923'. [ 677.354210][T21778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3925'. [ 677.439039][T21781] netlink: 'syz.4.3926': attribute type 12 has an invalid length. [ 677.503118][T21776] syzkaller0: entered promiscuous mode [ 677.521069][T21776] syzkaller0: entered allmulticast mode [ 677.721961][T21800] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 677.777816][T21800] net_ratelimit: 18 callbacks suppressed [ 677.777834][T21800] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 678.282126][T21790] netlink: zone id is out of range [ 678.305240][T21790] netlink: zone id is out of range [ 678.318104][T21790] netlink: zone id is out of range [ 678.333766][T21790] netlink: zone id is out of range [ 678.356696][T21790] netlink: zone id is out of range [ 678.384149][T21790] netlink: zone id is out of range [ 678.395403][T21790] netlink: zone id is out of range [ 678.420615][T21790] netlink: zone id is out of range [ 678.437642][T21831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3938'. [ 678.459863][T21790] netlink: zone id is out of range [ 678.477924][T21831] netlink: 'syz.1.3938': attribute type 3 has an invalid length. [ 678.504517][T21831] netlink: 'syz.1.3938': attribute type 5 has an invalid length. [ 678.534703][T21831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3938'. [ 678.600213][T21831] geneve2: entered promiscuous mode [ 678.638128][T21831] geneve2: entered allmulticast mode [ 678.682066][T14054] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 33455 - 0 [ 678.715709][T14054] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 33455 - 0 [ 678.755917][T14054] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 33455 - 0 [ 678.792923][T14054] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 33455 - 0 [ 678.869003][T21845] netlink: 'syz.0.3941': attribute type 30 has an invalid length. [ 679.531757][T21882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3955'. [ 679.674832][T21888] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 679.814748][T21894] syzkaller0: entered promiscuous mode [ 679.841229][T21894] syzkaller0: entered allmulticast mode [ 680.249314][T21917] netlink: 'syz.1.3966': attribute type 16 has an invalid length. [ 680.275673][T21917] netlink: 'syz.1.3966': attribute type 17 has an invalid length. [ 680.314390][T21919] bond1: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 680.330150][T21919] bond1 (unregistering): Released all slaves [ 680.441497][T21917] gretap0: left promiscuous mode [ 680.498043][T21917] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 680.527236][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 680.535575][T21917] bridge3: left allmulticast mode [ 680.536786][T21917] bond2: left promiscuous mode [ 680.541058][T21917] geneve2: left promiscuous mode [ 680.589259][T21917] geneve2: left allmulticast mode [ 680.638783][T21935] tipc: Started in network mode [ 680.644247][T21935] tipc: Node identity e2cfad0b2459, cluster identity 4711 [ 680.656292][T21935] tipc: Enabled bearer , priority 0 [ 680.677447][T21924] syzkaller0: entered promiscuous mode [ 680.725212][T21924] syzkaller0: entered allmulticast mode [ 680.808502][T21944] ±ÿ: renamed from lo [ 681.108435][T21922] tipc: Resetting bearer [ 681.188905][T21922] tipc: Disabling bearer [ 681.717105][T21988] __nla_validate_parse: 5 callbacks suppressed [ 681.717124][T21988] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3982'. [ 681.764758][T21980] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.823379][T21980] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.066934][T21980] bridge0: port 3(vlan2) entered disabled state [ 683.036432][T22045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3998'. [ 683.087406][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 683.738068][T22057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4002'. [ 684.256830][T22087] netlink: 'syz.0.4010': attribute type 1 has an invalid length. [ 684.725514][T22098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4013'. [ 684.784270][T22097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4013'. [ 685.314547][T22121] netlink: 'syz.1.4018': attribute type 1 has an invalid length. [ 685.353905][T22121] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.4018'. [ 685.632209][T22130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4020'. [ 685.861957][T22135] bridge_slave_0: left allmulticast mode [ 685.870717][T22135] bridge_slave_0: left promiscuous mode [ 685.887930][T22135] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.917261][T22143] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4023'. [ 685.951417][T22135] bridge_slave_1: left allmulticast mode [ 685.958589][T22149] net_ratelimit: 1710 callbacks suppressed [ 685.958605][T22149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 685.987965][T22135] bridge_slave_1: left promiscuous mode [ 685.998904][T22135] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.013429][T22135] bond0: (slave bond_slave_0): Releasing backup interface [ 686.060243][T22135] bond0: (slave bond_slave_1): Releasing backup interface [ 686.082411][T22135] team0: Port device team_slave_0 removed [ 686.089575][T22135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 686.100348][T22135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.119276][T22135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 686.141362][T22135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 686.153031][T22135] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 686.833704][T22190] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4037'. [ 686.868859][T22191] sctp: [Deprecated]: syz.0.4035 (pid 22191) Use of int in maxseg socket option. [ 686.868859][T22191] Use struct sctp_assoc_value instead [ 686.900894][T22187] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 686.990910][T22194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4036'. [ 687.233551][T22210] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 687.286209][T22210] bond6: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 687.298522][T22213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4042'. [ 687.316159][T22210] bond6 (unregistering): Released all slaves [ 687.816709][ T12] IPVS: starting estimator thread 0... [ 687.879587][T22213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 687.891261][T22232] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4045'. [ 687.894941][T22213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 687.935494][T22228] IPVS: using max 33 ests per chain, 79200 per kthread [ 688.223376][T22235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4045'. [ 688.293575][ T125] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.403968][T22251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4047'. [ 688.418858][ T6133] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.461081][ T6133] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.585852][T14054] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.726539][T22259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4049'. [ 688.765872][T22259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4049'. [ 688.810946][T22273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4050'. [ 688.848080][ T5628] Bluetooth: hci0: command 0x0406 tx timeout [ 688.982709][T22259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4049'. [ 690.230352][T22334] netlink: 'syz.1.4064': attribute type 1 has an invalid length. [ 690.428321][T22334] bond3: (slave veth0_to_bond): making interface the new active one [ 690.478680][T22334] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 690.602644][T22338] veth9: entered allmulticast mode [ 690.641065][T22338] bond3: (slave veth9): Enslaving as an active interface with a down link [ 690.664247][T22334] 8021q: adding VLAN 0 to HW filter on device bond3 [ 690.723201][T22355] bond0: (slave erspan0): Opening slave failed [ 691.511575][T22393] ip6gre4: entered promiscuous mode [ 691.553351][T22393] ip6gre4: entered allmulticast mode [ 691.644479][T22393] netlink: 'syz.4.4075': attribute type 6 has an invalid length. [ 691.760016][T22403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 692.208169][T22418] __nla_validate_parse: 16 callbacks suppressed [ 692.208189][T22418] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4081'. [ 692.275958][T22418] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4081'. [ 692.393926][T22424] x_tables: duplicate entry at hook 1 [ 692.749037][T22408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 693.094205][T22463] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4091'. [ 693.129846][T22462] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4091'. [ 693.249013][T22467] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4093'. [ 693.300265][T22468] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4093'. [ 693.362893][T22476] netlink: 'syz.3.4095': attribute type 10 has an invalid length. [ 693.420425][T22476] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 693.564794][T22485] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4098'. [ 693.587594][T22478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4095'. [ 694.302606][T22481] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 694.757338][T22530] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4107'. [ 694.793330][T22530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4107'. [ 695.291927][T22544] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20003 [ 695.892288][ T6133] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 696.209941][T22563] IPv6: NLM_F_CREATE should be specified when creating new route [ 696.359649][T22573] netlink: 'syz.2.4118': attribute type 15 has an invalid length. [ 697.584054][ T6140] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 697.805393][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 698.160174][T22618] __nla_validate_parse: 4 callbacks suppressed [ 698.160193][T22618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4131'. [ 698.251063][T22621] netlink: 'syz.1.4131': attribute type 10 has an invalid length. [ 698.408946][T22619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 698.748032][T22621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 698.779180][T22621] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 699.045716][T22647] netlink: 'syz.2.4139': attribute type 1 has an invalid length. [ 699.196725][T22645] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 699.231833][T22647] 8021q: adding VLAN 0 to HW filter on device bond1 [ 699.729374][ T6137] wlan1: Trigger new scan to find an IBSS to join [ 699.908118][T22679] netlink: 'syz.2.4147': attribute type 1 has an invalid length. [ 700.131712][T22689] ipip0: entered promiscuous mode [ 700.187977][T22689] ipip0: entered allmulticast mode [ 700.572107][T22713] netlink: 'syz.1.4157': attribute type 3 has an invalid length. [ 700.753913][T22718] smc: net device vlan1 applied user defined pnetid SYZ2 [ 700.834313][T22722] netlink: 16170 bytes leftover after parsing attributes in process `syz.0.4160'. [ 700.975738][T22734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4162'. [ 701.009046][T14047] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 701.108564][T22732] geneve1 speed is unknown, defaulting to 1000 [ 701.170826][T22732] lo speed is unknown, defaulting to 1000 [ 701.292192][T22740] netlink: 'syz.2.4164': attribute type 1 has an invalid length. [ 701.904304][T22753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4166'. [ 702.342664][T22758] netlink: 'syz.2.4168': attribute type 30 has an invalid length. [ 702.401232][T22760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4169'. [ 702.548574][T22758] bond2: option arp_missed_max: invalid value (0) [ 702.571805][T22758] bond2: option arp_missed_max: allowed values 1 - 255 [ 702.593197][T22758] bond2 (unregistering): Released all slaves [ 702.698034][ T6137] wlan1: Trigger new scan to find an IBSS to join [ 703.207941][T22779] bridge_slave_1: default FDB implementation only supports local addresses [ 703.523221][T22784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4177'. [ 703.568583][T22784] sctp: [Deprecated]: syz.2.4177 (pid 22784) Use of int in max_burst socket option deprecated. [ 703.568583][T22784] Use struct sctp_assoc_value instead [ 704.498677][T22819] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4188'. [ 704.583132][T22824] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4190'. [ 704.729056][T22831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4188'. [ 704.803721][T22833] syzkaller0: entered promiscuous mode [ 704.809390][T22833] syzkaller0: entered allmulticast mode [ 705.354444][T22858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4197'. [ 705.367800][T22858] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4197'. [ 705.519271][T22861] netlink: 13 bytes leftover after parsing attributes in process `syz.2.4196'. [ 705.725194][ T36] wlan1: Creating new IBSS network, BSSID 8a:6a:6d:00:94:3c [ 705.732655][ T6131] wlan1: Trigger new scan to find an IBSS to join [ 707.692064][T22834] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 708.349275][T22907] ipip0: entered promiscuous mode [ 708.363367][T22907] ipip0: entered allmulticast mode [ 708.586703][T22919] batman_adv: batadv0: Adding interface: macvtap1 [ 708.597888][T22919] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.672036][T22919] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 708.685790][ T6140] wlan1: Trigger new scan to find an IBSS to join [ 708.767405][T22923] netlink: 'syz.4.4211': attribute type 3 has an invalid length. [ 708.931694][T22920] batman_adv: batadv0: Removing interface: macvtap1 [ 708.956328][T22934] netlink: 336 bytes leftover after parsing attributes in process `syz.0.4215'. [ 708.979548][T22934] netlink: 336 bytes leftover after parsing attributes in process `syz.0.4215'. [ 709.059841][T22939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4216'. [ 709.070953][T22939] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4216'. [ 709.563051][T22962] netlink: 'syz.3.4219': attribute type 39 has an invalid length. [ 709.889671][T22968] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4220'. [ 709.926797][T22975] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4222'. [ 711.726022][ T6140] wlan1: Trigger new scan to find an IBSS to join [ 712.621707][ T6131] wlan1: Creating new IBSS network, BSSID 9a:2a:46:44:5a:7b [ 718.925620][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 732.365650][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 733.005387][ T6137] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 738.125173][ T6129] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 742.790514][T22988] netlink: 'syz.2.4227': attribute type 1 has an invalid length. [ 742.798505][T22988] netlink: 756 bytes leftover after parsing attributes in process `syz.2.4227'. [ 742.848947][T22994] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4225'. [ 742.891135][T22996] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4226'. [ 745.166965][T14049] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 770.125879][ T6137] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 772.690566][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 772.717065][T14049] bond4: left allmulticast mode [ 772.723539][T14049] bond4: left promiscuous mode [ 772.732538][T14049] bridge0: port 3(bond4) entered disabled state [ 772.742625][T14049] vlan0: left allmulticast mode [ 772.747976][T14049] geneve0: left allmulticast mode [ 772.753169][T14049] vlan0: left promiscuous mode [ 772.758092][T14049] geneve0: left promiscuous mode [ 772.764574][T14049] bridge0: port 1(vlan0) entered disabled state [ 772.774434][T14049] bridge_slave_1: left allmulticast mode [ 772.780324][T14049] bridge_slave_1: left promiscuous mode [ 772.786729][T14049] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.903051][T14049] ip6gretap0 (unregistering): left promiscuous mode [ 773.161783][T14049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 773.185621][T14049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 773.203268][T14049] bond0 (unregistering): Released all slaves [ 773.213504][T14049] bond1 (unregistering): Released all slaves [ 773.227577][T14049] bond2 (unregistering): Released all slaves [ 773.240916][T14049] bond3 (unregistering): Released all slaves [ 773.262068][T14049] bond4 (unregistering): Released all slaves [ 773.288877][T14049] bond5 (unregistering): Released all slaves [ 773.307600][T14049] bond6 (unregistering): Released all slaves [ 773.322149][T14049] bond7 (unregistering): (slave veth5): Releasing active interface [ 773.334660][T14049] batadv2: entered promiscuous mode [ 773.360304][T14049] bond7 (unregistering): (slave batadv2): Releasing active interface [ 773.371387][T14049] bond7 (unregistering): Released all slaves [ 773.386657][T14049] bond8 (unregistering): Released all slaves [ 773.399921][T14049] bond9 (unregistering): Released all slaves [ 773.420309][T14049] bond10 (unregistering): Released all slaves [ 773.438964][T14049] bond11 (unregistering): Released all slaves [ 773.623257][T14049] tipc: Left network mode [ 773.658080][T14049] IPVS: stopping backup sync thread 9330 ... [ 774.223751][T14049] dummy0: left promiscuous mode [ 774.234354][T14049] hsr_slave_0: left promiscuous mode [ 774.242561][T14049] hsr_slave_1: left promiscuous mode [ 774.250932][T14049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 774.258609][T14049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 774.266874][T14049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 774.274380][T14049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.420589][T14049] team0 (unregistering): Port device team_slave_1 removed [ 774.866311][T14049] IPVS: stop unused estimator thread 0... [ 777.165652][T14047] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 779.041714][T23022] netlink: 'syz.1.4233': attribute type 1 has an invalid length. [ 779.053628][T23022] netlink: 756 bytes leftover after parsing attributes in process `syz.1.4233'. [ 779.077237][T23026] netlink: 'syz.2.4234': attribute type 3 has an invalid length. [ 779.079143][T23022] netlink: 'syz.1.4233': attribute type 1 has an invalid length. [ 779.103332][T23026] netlink: 'syz.2.4234': attribute type 1 has an invalid length. [ 779.135244][T23026] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4234'. [ 779.255492][T23033] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4237'. [ 779.672160][T23054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 779.711329][T23055] syzkaller0: entered promiscuous mode [ 779.727889][T23055] syzkaller0: entered allmulticast mode [ 780.042341][T23066] syzkaller0: entered promiscuous mode [ 780.063172][T23066] syzkaller0: entered allmulticast mode [ 780.264312][T23076] netlink: 420 bytes leftover after parsing attributes in process `syz.3.4247'. [ 780.865431][T23095] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4254'. [ 780.902379][T23096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4253'. [ 781.565883][T23102] syzkaller1: entered promiscuous mode [ 781.583988][T23102] syzkaller1: entered allmulticast mode [ 781.623449][T23107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4258'. [ 781.729581][T23107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4258'. [ 781.762972][T23109] x_tables: unsorted entry at hook 2 [ 781.868559][T23113] netlink: 'syz.2.4260': attribute type 1 has an invalid length. [ 782.011032][T23124] syz_tun: entered allmulticast mode [ 782.041559][T23124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4262'. [ 782.069267][T23124] netlink: 'syz.3.4262': attribute type 9 has an invalid length. [ 782.077628][T23124] netlink: 'syz.3.4262': attribute type 6 has an invalid length. [ 782.088760][T23123] syz_tun: left allmulticast mode [ 782.113947][T23126] netlink: 'syz.2.4263': attribute type 4 has an invalid length. [ 782.233354][T23131] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 782.246493][T23131] batman_adv: batadv0: Adding interface: gretap1 [ 782.254882][T23131] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.284380][T23131] batman_adv: batadv0: Interface activated: gretap1 [ 782.663052][T23148] netlink: 'syz.2.4270': attribute type 13 has an invalid length. [ 782.700946][T23148] netlink: 'syz.2.4270': attribute type 17 has an invalid length. [ 782.892158][T23148] veth0_to_team: entered promiscuous mode [ 783.204390][T23166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4274'. [ 784.223107][T23213] __nla_validate_parse: 4 callbacks suppressed [ 784.223124][T23213] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4285'. [ 784.250077][T23217] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4286'. [ 784.276698][T23221] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4285'. [ 784.289609][T23217] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 784.310028][T23213] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 784.323283][T23217] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4286'. [ 784.358042][T23221] validate_nla: 1 callbacks suppressed [ 784.358060][T23221] netlink: 'syz.0.4285': attribute type 16 has an invalid length. [ 784.377987][T23217] netlink: 'syz.2.4286': attribute type 16 has an invalid length. [ 784.386790][T23221] netlink: 'syz.0.4285': attribute type 17 has an invalid length. [ 784.394689][T23217] netlink: 'syz.2.4286': attribute type 17 has an invalid length. [ 784.665718][T23221] erspan0: left promiscuous mode [ 784.696580][T23221] bridge0: left promiscuous mode [ 784.701643][T23221] bridge0: left allmulticast mode [ 784.726485][T23221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 784.734262][T23236] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4290'. [ 784.735645][T23238] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4290'. [ 784.757305][T23221] 8021q: adding VLAN 0 to HW filter on device team0 [ 784.809705][T23221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.978368][T23221] batadv_slave_0: left allmulticast mode [ 784.990254][T23221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 785.009920][T23221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 785.048561][T23221] veth1_vlan: left promiscuous mode [ 785.059027][T23221] veth0_vlan: left promiscuous mode [ 785.091583][T23221] veth0_vlan: entered promiscuous mode [ 785.104040][T23221] veth1_vlan: entered promiscuous mode [ 785.116301][T23221] veth1_macvtap: left promiscuous mode [ 785.124299][T23221] veth1_macvtap: entered promiscuous mode [ 785.139575][T23250] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4293'. [ 785.140401][T23221] bond1: left promiscuous mode [ 785.170246][T23221] xfrm1: left promiscuous mode [ 785.178370][T23221] 8021q: adding VLAN 0 to HW filter on device bond1 [ 785.189011][T23221] 8021q: adding VLAN 0 to HW filter on device bond2 [ 785.198211][T23221] erspan0: entered promiscuous mode [ 785.204359][T23221] veth0_to_team: entered promiscuous mode [ 785.224035][T23221] 8021q: adding VLAN 0 to HW filter on device bond3 [ 785.234576][T23221] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 785.244223][T23221] 8021q: adding VLAN 0 to HW filter on device bond4 [ 785.252365][T23221] vti0: left promiscuous mode [ 785.292648][T23221] 8021q: adding VLAN 0 to HW filter on device bond5 [ 785.391750][T23221] 8021q: adding VLAN 0 to HW filter on device eth0 [ 785.403000][T23221] 8021q: adding VLAN 0 to HW filter on device eth1 [ 785.414494][T23221] 8021q: adding VLAN 0 to HW filter on device eth2 [ 785.428502][T23221] 8021q: adding VLAN 0 to HW filter on device eth3 [ 785.467491][T14042] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.474607][T14042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.531929][T14042] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.539063][T14042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.653390][T23264] syzkaller0: entered promiscuous mode [ 785.670420][T23264] syzkaller0: entered allmulticast mode [ 785.699362][ T6140] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 785.745305][ T5747] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 785.757090][ T6140] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 785.832183][T23264] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4299'. [ 785.844050][T14048] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.861467][T23264] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 785.958477][T14054] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.981875][T23277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4302'. [ 786.026098][T23277] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.4302'. [ 786.211426][ T6131] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.316036][ T6140] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.525611][ T5747] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 786.608708][ T5747] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 787.159026][T23326] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 787.165592][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 787.224575][T23320] netlink: 'syz.0.4314': attribute type 16 has an invalid length. [ 787.234686][T23320] netlink: 'syz.0.4314': attribute type 17 has an invalid length. [ 787.328803][T14048] IPVS: starting estimator thread 0... [ 787.437466][T23335] IPVS: using max 28 ests per chain, 67200 per kthread [ 787.728572][T14054] wlan1: Trigger new scan to find an IBSS to join [ 787.875587][T23354] FAULT_INJECTION: forcing a failure. [ 787.875587][T23354] name failslab, interval 1, probability 0, space 0, times 0 [ 787.924719][T23354] CPU: 1 UID: 0 PID: 23354 Comm: syz.0.4320 Not tainted syzkaller #0 PREEMPT(full) [ 787.924744][T23354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 787.924756][T23354] Call Trace: [ 787.924763][T23354] [ 787.924771][T23354] dump_stack_lvl+0xe8/0x150 [ 787.924807][T23354] should_fail_ex+0x40c/0x560 [ 787.924838][T23354] should_failslab+0xa8/0x100 [ 787.924869][T23354] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 787.924892][T23354] ? local_lock_release+0x9c/0x160 [ 787.924916][T23354] ? __alloc_skb+0x1d7/0x7a0 [ 787.924937][T23354] ? __alloc_skb+0x1d7/0x7a0 [ 787.924962][T23354] __alloc_skb+0x1d7/0x7a0 [ 787.924985][T23354] alloc_skb_with_frags+0xc6/0x760 [ 787.925007][T23354] ? __lock_acquire+0x683/0x2cf0 [ 787.925042][T23354] sock_alloc_send_pskb+0x878/0x990 [ 787.925075][T23354] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 787.925210][T23354] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 787.925236][T23354] ? dev_get_by_index+0x22/0x2d0 [ 787.925292][T23354] ? dev_get_by_index+0x22/0x2d0 [ 787.925322][T23354] packet_sendmsg+0x3258/0x5040 [ 787.925412][T23354] ? aa_label_sk_perm+0x532/0x6e0 [ 787.925453][T23354] ? try_to_merge_with_ksm_page+0x1a0/0x4b0 [ 787.925479][T23354] ? __lock_acquire+0x683/0x2cf0 [ 787.925520][T23354] ? __pfx_packet_sendmsg+0x10/0x10 [ 787.925559][T23354] ? __pfx_aa_sk_perm+0x10/0x10 [ 787.925581][T23354] ? aa_sock_msg_perm+0xf1/0x1b0 [ 787.925615][T23354] ? __pfx_packet_sendmsg+0x10/0x10 [ 787.925641][T23354] sock_sendmsg_nosec+0x13a/0x180 [ 787.925671][T23354] ____sys_sendmsg+0x54e/0x850 [ 787.925698][T23354] ? __pfx_____sys_sendmsg+0x10/0x10 [ 787.925728][T23354] ? import_iovec+0x73/0xa0 [ 787.925749][T23354] ___sys_sendmsg+0x2a5/0x360 [ 787.925772][T23354] ? __lock_acquire+0x683/0x2cf0 [ 787.925801][T23354] ? __pfx____sys_sendmsg+0x10/0x10 [ 787.925828][T23354] ? kstrtouint+0x6e/0xe0 [ 787.925876][T23354] ? __fget_files+0x2a/0x420 [ 787.925901][T23354] ? __fget_files+0x3a2/0x420 [ 787.925935][T23354] __sys_sendmmsg+0x273/0x4d0 [ 787.925965][T23354] ? __pfx___sys_sendmmsg+0x10/0x10 [ 787.925996][T23354] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 787.926039][T23354] ? ksys_write+0x242/0x270 [ 787.926061][T23354] ? __pfx_ksys_write+0x10/0x10 [ 787.926085][T23354] __x64_sys_sendmmsg+0xa0/0xc0 [ 787.926108][T23354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.926127][T23354] do_syscall_64+0x174/0x580 [ 787.926153][T23354] ? clear_bhb_loop+0x40/0x90 [ 787.926175][T23354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.926194][T23354] RIP: 0033:0x7f58f639e019 [ 787.926212][T23354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.926228][T23354] RSP: 002b:00007f58f7263028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 787.926248][T23354] RAX: ffffffffffffffda RBX: 00007f58f6625fa0 RCX: 00007f58f639e019 [ 787.926261][T23354] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000005 [ 787.926272][T23354] RBP: 00007f58f7263090 R08: 0000000000000000 R09: 0000000000000000 [ 787.926284][T23354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.926294][T23354] R13: 00007f58f6626038 R14: 00007f58f6625fa0 R15: 00007fffef1f9b18 [ 787.926326][T23354] [ 788.045859][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 788.424143][T23359] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 788.651139][T23370] netlink: 'syz.0.4324': attribute type 2 has an invalid length. [ 790.046591][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 791.539313][T23383] __nla_validate_parse: 9 callbacks suppressed [ 791.539340][T23383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4325'. [ 791.612136][T23367] geneve1 speed is unknown, defaulting to 1000 [ 791.729739][T14054] wlan1: Trigger new scan to find an IBSS to join [ 791.779048][T23367] lo speed is unknown, defaulting to 1000 [ 791.869049][T23396] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4327'. [ 791.948751][T23389] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4327'. [ 791.993406][T23396] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 792.068473][T23389] netlink: 'syz.3.4327': attribute type 16 has an invalid length. [ 792.113975][T23389] netlink: 'syz.3.4327': attribute type 17 has an invalid length. [ 792.391377][T23389] 8021q: adding VLAN 0 to HW filter on device bond1 [ 792.407308][T23389] 8021q: adding VLAN 0 to HW filter on device bond2 [ 792.561008][T23389] ipip0: left promiscuous mode [ 792.567508][T23389] ipip0: left allmulticast mode [ 792.676885][ T6131] wlan1: Creating new IBSS network, BSSID 5a:f6:65:b0:0a:9c [ 792.862828][T23421] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4331'. [ 792.997972][T23424] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4331'. [ 793.082969][T23430] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20003 [ 793.431958][T23424] bond0: entered promiscuous mode [ 793.458065][T23424] bond_slave_0: entered promiscuous mode [ 793.485766][T23424] bond_slave_1: entered promiscuous mode [ 793.518119][T23424] gretap0: entered promiscuous mode [ 793.534399][T23424] hsr1: entered promiscuous mode [ 793.809883][T14042] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 794.063479][T23463] vlan0: entered promiscuous mode [ 794.075319][T23463] bridge0: entered promiscuous mode [ 794.370698][T23470] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4342'. [ 794.434801][T23470] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 794.483954][T23470] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4342'. [ 794.551282][T23470] netlink: 'syz.2.4342': attribute type 16 has an invalid length. [ 794.591351][T23470] netlink: 'syz.2.4342': attribute type 17 has an invalid length. [ 794.647655][ T5747] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 794.740032][T23470] 8021q: adding VLAN 0 to HW filter on device bond2 [ 794.760841][T23470] hsr1: left promiscuous mode [ 795.215473][T22240] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 795.368940][T23493] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4350'. [ 795.458130][T23497] netlink: 'syz.3.4352': attribute type 1 has an invalid length. [ 795.476039][T23497] netlink: 5120 bytes leftover after parsing attributes in process `syz.3.4352'. [ 795.554194][T23497] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4352'. [ 795.945982][ T6137] tipc: Subscription rejected, illegal request [ 796.177270][T23526] netlink: 'syz.4.4357': attribute type 6 has an invalid length. [ 796.573104][T23542] netlink: 'syz.2.4363': attribute type 3 has an invalid length. [ 796.604030][T23542] __nla_validate_parse: 2 callbacks suppressed [ 796.604046][T23542] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4363'. [ 797.482386][T23578] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4369'. [ 797.633182][T23589] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4369'. [ 797.868575][T23597] netlink: 324 bytes leftover after parsing attributes in process `syz.4.4372'. [ 797.902816][T23601] openvswitch: netlink: IPv4 tun info is not correct [ 797.907376][T23600] IPv6: Can't replace route, no match found [ 797.967228][T23597] blkio.reset_stats is deprecated [ 798.277867][T23611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4376'. [ 798.370387][T23552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 798.380404][T23614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4376'. [ 798.391021][T23614] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4376'. [ 798.501649][T23552] veth0_vlan: left promiscuous mode [ 798.514297][T23616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4376'. [ 798.693489][T23552] veth9: left allmulticast mode [ 798.708559][T23552] vlan0: left promiscuous mode [ 798.746913][ T6133] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 798.756475][ T6133] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.782874][ T6133] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 33455 - 0 [ 798.926578][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 799.126734][ T6131] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 799.164904][ T6131] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.213828][ T6131] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 33455 - 0 [ 799.342139][T23614] veth3: entered allmulticast mode [ 799.418392][T23616] bond3 (unregistering): Released all slaves [ 799.453956][T23647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4381'. [ 799.516597][T14048] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 799.525410][T23645] netlink: 'syz.1.4381': attribute type 1 has an invalid length. [ 799.604759][T14048] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.654200][T23652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4383'. [ 799.703095][T14048] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 33455 - 0 [ 799.751612][T14048] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 799.784272][T14048] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.794188][T14048] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 33455 - 0 [ 800.276900][T23674] ip6tnl3: entered allmulticast mode [ 800.284261][T23681] netlink: 'syz.2.4391': attribute type 13 has an invalid length. [ 800.293365][T23678] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 800.334135][T23674] netlink: 'syz.4.4387': attribute type 4 has an invalid length. [ 800.395342][T23685] netlink: 'syz.1.4390': attribute type 16 has an invalid length. [ 800.399724][T23687] netlink: 'syz.3.4392': attribute type 10 has an invalid length. [ 800.414362][T23685] netlink: 'syz.1.4390': attribute type 17 has an invalid length. [ 800.486624][T22239] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 800.504523][T23693] xt_l2tp: missing protocol rule (udp|l2tpip) [ 800.948049][T23687] 8021q: adding VLAN 0 to HW filter on device team0 [ 800.988593][T23687] bond0: (slave team0): Enslaving as an active interface with an up link [ 801.125720][T17735] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 801.181600][T23685] bridge0: left promiscuous mode [ 801.201202][T23685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.233128][T23685] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.302575][T23685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 801.390893][T23685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 801.412616][T23685] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 801.423470][T23685] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 801.468480][T23685] veth1_vlan: left promiscuous mode [ 801.499972][T23685] veth0_vlan: entered promiscuous mode [ 801.525570][T23685] veth1_vlan: entered promiscuous mode [ 801.586398][T23685] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 801.633937][T23729] netlink: 'syz.4.4399': attribute type 10 has an invalid length. [ 801.650412][T23685] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 801.697122][T23685] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 801.700695][T23731] netlink: 'syz.0.4400': attribute type 21 has an invalid length. [ 801.708530][T23685] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 801.741280][T23685] 8021q: adding VLAN 0 to HW filter on device bond1 [ 801.770054][T23685] bridge0: port 3(vlan2) entered blocking state [ 801.777537][T23685] bridge0: port 3(vlan2) entered forwarding state [ 801.801927][T23685] 8021q: adding VLAN 0 to HW filter on device bond2 [ 801.828155][T23685] 8021q: adding VLAN 0 to HW filter on device bond3 [ 801.859209][T22240] bridge0: entered promiscuous mode [ 801.867348][ T6129] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.892429][ T6129] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.903325][ T6129] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 56023 - 0 [ 801.917082][T14048] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.924317][T14048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.991452][T14048] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.998711][T14048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.125027][ T6133] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 802.137303][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 802.168992][T23729] syz_tun: entered promiscuous mode [ 802.191838][T23729] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 802.274685][T23731] __nla_validate_parse: 7 callbacks suppressed [ 802.274703][T23731] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4400'. [ 802.369681][ T6137] bond3: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 802.462360][ T6131] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 802.502669][ T6131] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.519224][ T6131] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 56023 - 0 [ 802.560606][T23765] netlink: 'syz.3.4404': attribute type 13 has an invalid length. [ 802.575336][ T6131] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 802.610345][ T6131] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.647921][ T6131] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 56023 - 0 [ 802.716052][T23730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 802.762712][T14054] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 802.774505][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 802.824629][T14054] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.846359][T14054] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 56023 - 0 [ 802.896946][T23779] netlink: 324 bytes leftover after parsing attributes in process `syz.3.4408'. [ 802.928245][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 802.992202][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.014397][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.051859][T23770] syzkaller0: entered promiscuous mode [ 803.058628][T23770] syzkaller0: entered allmulticast mode [ 803.289128][T23785] syzkaller0: entered promiscuous mode [ 803.311911][T23785] syzkaller0: entered allmulticast mode [ 803.376082][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.403441][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.429917][T23796] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4411'. [ 803.475384][T23796] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 803.507765][T23799] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4411'. [ 803.564383][T23796] netlink: 'syz.1.4411': attribute type 16 has an invalid length. [ 803.620207][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.687354][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.692077][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.839391][T23811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4419'. [ 803.905712][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.991957][T23811] bond3: entered promiscuous mode [ 804.000497][T23811] 8021q: adding VLAN 0 to HW filter on device bond3 [ 804.100345][T23818] bridge2: entered promiscuous mode [ 804.108068][T23818] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 804.139468][T23814] syzkaller0: entered promiscuous mode [ 804.191024][T23814] syzkaller0: entered allmulticast mode [ 804.662704][T23849] syzkaller0: entered promiscuous mode [ 804.680113][T23849] syzkaller0: entered allmulticast mode [ 804.756362][T23849] tc action pedit 'at' offset 20 out of bounds [ 804.958822][T23855] geneve1 speed is unknown, defaulting to 1000 [ 804.977267][T23855] lo speed is unknown, defaulting to 1000 [ 805.729140][T14049] wlan1: Trigger new scan to find an IBSS to join [ 805.780669][T23884] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4436'. [ 806.189431][T23906] validate_nla: 1 callbacks suppressed [ 806.189450][T23906] netlink: 'syz.4.4438': attribute type 33 has an invalid length. [ 806.404105][T23909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4438'. [ 806.549126][T23915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4441'. [ 806.608161][T23915] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4441'. [ 806.712345][T23926] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4441'. [ 806.934294][T23926] batadv0: entered promiscuous mode [ 807.273140][T23931] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.286807][T23952] netlink: 'syz.2.4448': attribute type 16 has an invalid length. [ 807.306043][T23952] netlink: 'syz.2.4448': attribute type 17 has an invalid length. [ 807.407431][T20557] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 807.630454][T23931] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.745851][T20557] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 807.787860][T23958] __nla_validate_parse: 3 callbacks suppressed [ 807.787881][T23958] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4453'. [ 807.850894][T23959] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4453'. [ 807.949418][T23931] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.972763][T23963] netlink: 'syz.2.4453': attribute type 16 has an invalid length. [ 807.993715][T23963] netlink: 'syz.2.4453': attribute type 17 has an invalid length. [ 808.040265][ T5719] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 808.167446][ C1] net_ratelimit: 15 callbacks suppressed [ 808.167468][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 808.234252][T23931] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.327716][T23969] netlink: 'syz.2.4457': attribute type 1 has an invalid length. [ 808.478974][T23973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4459'. [ 808.585543][ T47] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.688037][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 808.769745][ T3383] wlan1: Trigger new scan to find an IBSS to join [ 808.796033][ T47] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.903546][T23931] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.016220][T23931] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.017322][T20557] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 809.086320][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 809.167812][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 809.275991][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 809.337036][T24008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4468'. [ 809.554664][T24019] netlink: 'syz.0.4471': attribute type 322 has an invalid length. [ 809.767124][ T36] wlan1: Creating new IBSS network, BSSID a2:34:0d:b1:ac:4b [ 810.078956][T24042] netlink: zone id is out of range [ 810.084472][T24042] netlink: zone id is out of range [ 810.088836][T24043] veth1_to_team: Caught tx_queue_len zero misconfig [ 810.091442][T24042] netlink: zone id is out of range [ 810.104089][T24042] netlink: zone id is out of range [ 810.124490][T24042] netlink: zone id is out of range [ 810.144268][T24042] netlink: zone id is out of range [ 810.347459][T24050] netlink: 'syz.0.4479': attribute type 4 has an invalid length. [ 810.550459][T24055] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 810.577675][T24055] syzkaller1: linktype set to 823 [ 810.632343][T24061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4484'. [ 810.646807][T24061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4484'. [ 810.722997][T24063] ipvlan0: Caught tx_queue_len zero misconfig [ 810.791583][T24063] syzkaller0: entered promiscuous mode [ 810.798573][T24063] syzkaller0: entered allmulticast mode [ 810.849044][T24072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4487'. [ 810.863740][T24072] netlink: 83 bytes leftover after parsing attributes in process `syz.0.4487'. [ 811.787460][T24077] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 812.122354][T24095] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.4492'. [ 813.375979][ C1] net_ratelimit: 18 callbacks suppressed [ 813.375998][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 813.421522][T24107] netlink: 'syz.0.4497': attribute type 1 has an invalid length. [ 814.455902][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 814.642595][T24107] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 815.253751][T24143] IPv6: Can't replace route, no match found [ 815.415652][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 815.441913][T24159] bond0: Caught tx_queue_len zero misconfig [ 815.531509][T24153] syzkaller0: entered promiscuous mode [ 815.562185][T24153] syzkaller0: entered allmulticast mode [ 816.133723][T24180] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4514'. [ 816.210761][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 816.353586][T24188] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4515'. [ 816.445548][T24192] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4517'. [ 816.496263][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 816.794340][T24200] netlink: 'syz.0.4521': attribute type 10 has an invalid length. [ 816.848276][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 816.884726][T24200] team0 (unregistering): Port device team_slave_0 removed [ 816.918744][T24200] team0 (unregistering): Port device team_slave_1 removed [ 816.966469][T24216] syzkaller0: entered promiscuous mode [ 816.997750][T24216] syzkaller0: entered allmulticast mode [ 817.095513][T24219] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4526'. [ 817.130102][T24219] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 817.162164][T24219] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4526'. [ 817.230740][T24219] netlink: 'syz.2.4526': attribute type 16 has an invalid length. [ 817.274111][T24219] netlink: 'syz.2.4526': attribute type 17 has an invalid length. [ 817.372369][ T5719] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 817.489891][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 817.505991][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.056139][T24223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4528'. [ 818.273346][T24257] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4534'. [ 818.286402][T24251] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 818.296560][ T5719] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 818.440621][T24270] ip6gre2: entered promiscuous mode [ 818.457248][T24270] ip6gre2: entered allmulticast mode [ 818.635512][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.942530][T24287] netlink: 'syz.3.4545': attribute type 1 has an invalid length. [ 818.980996][T24287] nbd: error processing sock list [ 818.996473][T24289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 819.755557][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 820.490594][T24340] tipc: Enabled bearer , priority 10 [ 820.706295][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 821.585091][T17736] tipc: Node number set to 3788882955 [ 821.645780][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 822.639438][T24432] syzkaller0: entered promiscuous mode [ 822.665465][T24432] syzkaller0: entered allmulticast mode [ 822.685818][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 822.743150][T24432] TC_ACT_REPEAT abuse ? [ 822.798003][T24437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4579'. [ 822.819045][T24437] netlink: 'syz.0.4579': attribute type 1 has an invalid length. [ 822.828200][T24437] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4579'. [ 822.874153][T24437] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4579'. [ 822.880576][T24441] netlink: 'syz.1.4581': attribute type 1 has an invalid length. [ 823.147441][T24451] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4582'. [ 823.243637][T24456] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4582'. [ 823.258505][T24455] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4583'. [ 823.275699][T24455] netlink: 'syz.4.4583': attribute type 7 has an invalid length. [ 823.284596][T24460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4585'. [ 823.301833][T24455] netlink: 'syz.4.4583': attribute type 8 has an invalid length. [ 823.314616][T24460] netlink: 'syz.0.4585': attribute type 9 has an invalid length. [ 823.318210][T24455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4583'. [ 823.525093][ T36] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.544368][ T36] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.606024][T24414] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.635328][T24414] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.660675][T24470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4586'. [ 823.866233][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.883220][T24470] syzkaller0: entered promiscuous mode [ 823.933782][T24470] syzkaller0: entered allmulticast mode [ 824.020753][T24488] geneve2: entered allmulticast mode [ 824.812082][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.180848][T24414] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 825.806867][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 826.935522][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 827.377333][T24496] bridge0: port 1(syz_tun) entered blocking state [ 827.386459][T24496] bridge0: port 1(syz_tun) entered disabled state [ 827.393262][T24496] syz_tun: entered allmulticast mode [ 827.399884][T24496] syz_tun: entered promiscuous mode [ 827.407962][T24496] bridge0: port 1(syz_tun) entered blocking state [ 827.414485][T24496] bridge0: port 1(syz_tun) entered forwarding state [ 827.869216][T24530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4599'. [ 828.006074][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.398562][T24550] netlink: 'syz.2.4608': attribute type 3 has an invalid length. [ 828.407196][T24550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4608'. [ 828.955724][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.233857][T24575] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4612'. [ 830.012399][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.927714][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 831.115590][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 831.406714][T24555] tipc: Disabling bearer [ 831.438210][T24575] 1·: renamed from c0· (while UP) [ 831.484879][T24575] 1·: entered allmulticast mode [ 831.497831][T24575] hsr_slave_0: entered allmulticast mode [ 831.519589][T24575] hsr_slave_1: entered allmulticast mode [ 831.555740][T24575] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 831.641960][T24580] netlink: 'syz.2.4614': attribute type 12 has an invalid length. [ 831.660759][T24580] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4614'. [ 831.686215][T24582] bridge0: port 1(syz_tun) entered disabled state [ 832.025483][T24583] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4613'. [ 832.166055][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 832.351702][T24613] xt_TCPMSS: Only works on TCP SYN packets [ 832.367020][T24619] netlink: 'syz.0.4625': attribute type 11 has an invalid length. [ 832.375499][T24619] netlink: 'syz.0.4625': attribute type 4 has an invalid length. [ 832.383563][T24619] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4625'. [ 832.417792][T24623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4624'. [ 832.572897][T24628] openvswitch: netlink: VXLAN extension 317 out of range max 1 [ 832.848528][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.095628][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.458431][T24665] C: renamed from veth1_to_team (while UP) [ 833.519660][T24666] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4637'. [ 833.527476][T24665] netlink: 'syz.0.4637': attribute type 2 has an invalid length. [ 833.589979][T24665] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4637'. [ 833.616314][T24665] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 834.128262][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 834.226077][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.312756][T24700] FAULT_INJECTION: forcing a failure. [ 834.312756][T24700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 834.335567][T24700] CPU: 1 UID: 0 PID: 24700 Comm: syz.4.4648 Not tainted syzkaller #0 PREEMPT(full) [ 834.335616][T24700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 834.335640][T24700] Call Trace: [ 834.335648][T24700] [ 834.335657][T24700] dump_stack_lvl+0xe8/0x150 [ 834.335694][T24700] should_fail_ex+0x40c/0x560 [ 834.335726][T24700] _copy_to_user+0x31/0xb0 [ 834.335748][T24700] simple_read_from_buffer+0xe1/0x170 [ 834.335782][T24700] proc_fail_nth_read+0x1bb/0x230 [ 834.335814][T24700] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 834.335843][T24700] ? rw_verify_area+0x24a/0x4c0 [ 834.335864][T24700] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 834.335889][T24700] vfs_read+0x213/0xa80 [ 834.335911][T24700] ? __pfx___mutex_lock+0x10/0x10 [ 834.335941][T24700] ? __pfx_vfs_read+0x10/0x10 [ 834.335963][T24700] ? __fget_files+0x2a/0x420 [ 834.335987][T24700] ? __fget_files+0x3a2/0x420 [ 834.336008][T24700] ? __fget_files+0x2a/0x420 [ 834.336041][T24700] ksys_read+0x150/0x270 [ 834.336062][T24700] ? __pfx_ksys_read+0x10/0x10 [ 834.336089][T24700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.336111][T24700] do_syscall_64+0x174/0x580 [ 834.336135][T24700] ? trace_irq_disable+0x3b/0x140 [ 834.336159][T24700] ? clear_bhb_loop+0x40/0x90 [ 834.336183][T24700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.336203][T24700] RIP: 0033:0x7f3eed75e84e [ 834.336222][T24700] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 834.336239][T24700] RSP: 002b:00007f3eee589fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 834.336260][T24700] RAX: ffffffffffffffda RBX: 00007f3eee58a6c0 RCX: 00007f3eed75e84e [ 834.336275][T24700] RDX: 000000000000000f RSI: 00007f3eee58a0a0 RDI: 0000000000000005 [ 834.336287][T24700] RBP: 00007f3eee58a090 R08: 0000000000000000 R09: 0000000000000000 [ 834.336300][T24700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 834.336312][T24700] R13: 00007f3eeda26038 R14: 00007f3eeda25fa0 R15: 00007ffc6ce28488 [ 834.336346][T24700] [ 834.368321][T24702] netlink: 'syz.0.4649': attribute type 1 has an invalid length. [ 834.642304][T24707] netlink: 'syz.3.4650': attribute type 3 has an invalid length. [ 834.727526][T24721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4651'. [ 834.736462][T24702] 8021q: adding VLAN 0 to HW filter on device bond6 [ 834.745508][T24702] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4649'. [ 834.816815][T24723] netlink: 'syz.1.4651': attribute type 10 has an invalid length. [ 834.884276][T24720] syzkaller0: entered promiscuous mode [ 834.902748][T24720] syzkaller0: entered allmulticast mode [ 835.267548][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.483222][T24746] netlink: 'syz.2.4660': attribute type 10 has an invalid length. [ 835.512344][T24746] syz_tun: entered promiscuous mode [ 835.551761][T24746] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 835.605823][T24753] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4662'. [ 835.691872][T24754] veth3: entered allmulticast mode [ 835.839348][T24761] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.4664'. [ 835.918439][T24762] bond3 (unregistering): Released all slaves [ 835.992633][T24764] syzkaller0: entered promiscuous mode [ 836.026663][T24764] syzkaller0: entered allmulticast mode [ 836.034045][T24735] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 836.057751][T24764] netlink: 19 bytes leftover after parsing attributes in process `syz.2.4665'. [ 836.206012][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 836.433361][T24785] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4671'. [ 836.459643][T24785] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4671'. [ 836.512174][T24785] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4671'. [ 836.547060][T14042] wlan1: Selected IBSS BSSID a2:34:0d:b1:ac:4b based on configured SSID [ 836.670939][ T6133] IPVS: starting estimator thread 0... [ 836.765612][T24798] IPVS: using max 30 ests per chain, 72000 per kthread [ 836.820407][T17736] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 837.725504][ T6133] wlan1: Trigger new scan to find an IBSS to join [ 837.805913][T22240] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 839.062682][T24771] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 839.753258][T24826] __nla_validate_parse: 1 callbacks suppressed [ 839.753278][T24826] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4682'. [ 840.358417][T17736] bridge0: left promiscuous mode [ 840.472050][T24856] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4690'. [ 840.542026][T24859] syzkaller1: entered promiscuous mode [ 840.565864][T24859] syzkaller1: entered allmulticast mode [ 840.651922][T24859] TCP: TCP_TX_DELAY enabled [ 840.691124][ T36] wlan1: Trigger new scan to find an IBSS to join [ 841.263631][T24881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4698'. [ 841.279195][T24890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 841.306595][T24881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4698'. [ 841.354603][T24881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4698'. [ 841.397313][T24881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4698'. [ 841.397470][T24892] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4701'. [ 841.424649][T24881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4698'. [ 841.447380][T24881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4698'. [ 841.493297][T24881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4698'. [ 842.689381][T14042] wlan1: Trigger new scan to find an IBSS to join [ 843.725863][ T3351] wlan1: Trigger new scan to find an IBSS to join [ 843.938352][T24995] batadv_slave_0: entered allmulticast mode [ 843.969495][T24995] batadv_slave_0: left allmulticast mode [ 844.150862][T25005] x_tables: duplicate underflow at hook 3 [ 844.686743][T24413] wlan1: Trigger new scan to find an IBSS to join [ 846.636685][T25028] __nla_validate_parse: 67 callbacks suppressed [ 846.636716][T25028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4740'. [ 846.678431][T25028] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.4740'. [ 846.765259][ T6133] wlan1: Trigger new scan to find an IBSS to join [ 846.968751][T25049] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4746'. [ 846.983826][T25051] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4747'. [ 847.070320][T25054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4748'. [ 847.610801][T25080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4755'. [ 847.669335][T25080] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.4755'. [ 847.725315][ T6133] wlan1: Trigger new scan to find an IBSS to join [ 847.893086][T25096] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4760'. [ 847.993787][T25103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4764'. [ 848.013918][T25106] netlink: 236 bytes leftover after parsing attributes in process `syz.0.4762'. [ 848.065932][T25103] 8021q: adding VLAN 0 to HW filter on device bond4 [ 848.097895][T25108] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 848.107633][T25108] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 848.161514][T25103] bond4 (unregistering): (slave batadv1): Releasing backup interface [ 848.176830][T25103] bond4 (unregistering): Released all slaves [ 848.597449][T25127] geneve1 speed is unknown, defaulting to 1000 [ 848.621321][T25127] lo speed is unknown, defaulting to 1000 [ 849.119248][T25143] ip6gre1: entered promiscuous mode [ 849.145214][T25143] ip6gre1: entered allmulticast mode [ 849.373099][T25155] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 849.750218][T14048] wlan1: Trigger new scan to find an IBSS to join [ 849.768221][T24430] wlan1: Trigger new scan to find an IBSS to join [ 850.537819][T25192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 850.700280][ T3351] wlan1: Trigger new scan to find an IBSS to join [ 850.710158][T14048] wlan1: Creating new IBSS network, BSSID 12:ab:ed:79:20:7e [ 850.727917][T25198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 850.842842][T25211] FAULT_INJECTION: forcing a failure. [ 850.842842][T25211] name failslab, interval 1, probability 0, space 0, times 0 [ 850.861193][T25211] CPU: 1 UID: 0 PID: 25211 Comm: syz.2.4790 Not tainted syzkaller #0 PREEMPT(full) [ 850.861219][T25211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 850.861230][T25211] Call Trace: [ 850.861239][T25211] [ 850.861248][T25211] dump_stack_lvl+0xe8/0x150 [ 850.861282][T25211] should_fail_ex+0x40c/0x560 [ 850.861313][T25211] should_failslab+0xa8/0x100 [ 850.861344][T25211] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 850.861370][T25211] ? skb_clone+0x212/0x3a0 [ 850.861396][T25211] ? skb_clone+0x212/0x3a0 [ 850.861433][T25211] skb_clone+0x212/0x3a0 [ 850.861462][T25211] __netlink_deliver_tap+0x413/0x860 [ 850.861602][T25211] ? netlink_deliver_tap+0x2e/0x1b0 [ 850.861629][T25211] netlink_deliver_tap+0x19c/0x1b0 [ 850.861656][T25211] netlink_sendskb+0x68/0x140 [ 850.861681][T25211] netlink_rcv_skb+0x2a4/0x4a0 [ 850.861707][T25211] ? __pfx_genl_rcv_msg+0x10/0x10 [ 850.861728][T25211] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 850.861770][T25211] ? down_read+0x2be/0x330 [ 850.861804][T25211] genl_rcv+0x28/0x40 [ 850.861821][T25211] netlink_unicast+0x7bb/0x940 [ 850.861855][T25211] netlink_sendmsg+0x813/0xb40 [ 850.861892][T25211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 850.861922][T25211] ? aa_sock_msg_perm+0xf1/0x1b0 [ 850.861952][T25211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 850.861977][T25211] sock_sendmsg_nosec+0x13a/0x180 [ 850.862010][T25211] ____sys_sendmsg+0x54e/0x850 [ 850.862047][T25211] ? __pfx_____sys_sendmsg+0x10/0x10 [ 850.862081][T25211] ? import_iovec+0x73/0xa0 [ 850.862103][T25211] ___sys_sendmsg+0x2a5/0x360 [ 850.862125][T25211] ? __lock_acquire+0x683/0x2cf0 [ 850.862157][T25211] ? __pfx____sys_sendmsg+0x10/0x10 [ 850.862221][T25211] ? __fget_files+0x2a/0x420 [ 850.862247][T25211] ? __fget_files+0x3a2/0x420 [ 850.862285][T25211] __x64_sys_sendmsg+0x1b1/0x290 [ 850.862313][T25211] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 850.862358][T25211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.862380][T25211] do_syscall_64+0x174/0x580 [ 850.862405][T25211] ? trace_irq_disable+0x3b/0x140 [ 850.862431][T25211] ? clear_bhb_loop+0x40/0x90 [ 850.862455][T25211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.862475][T25211] RIP: 0033:0x7f1ed839e019 [ 850.862494][T25211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 850.862511][T25211] RSP: 002b:00007f1ed9251028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 850.862649][T25211] RAX: ffffffffffffffda RBX: 00007f1ed8626090 RCX: 00007f1ed839e019 [ 850.862669][T25211] RDX: 0000000004000000 RSI: 0000200000001100 RDI: 0000000000000004 [ 850.862682][T25211] RBP: 00007f1ed9251090 R08: 0000000000000000 R09: 0000000000000000 [ 850.862695][T25211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 850.862707][T25211] R13: 00007f1ed8626128 R14: 00007f1ed8626090 R15: 00007fff92865858 [ 850.862744][T25211] [ 850.864721][T25203] syzkaller0: entered promiscuous mode [ 851.160385][T25203] syzkaller0: entered allmulticast mode [ 851.443799][T25225] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 851.528126][T25225] netlink: 'syz.0.4795': attribute type 23 has an invalid length. [ 851.653951][T25227] geneve1 speed is unknown, defaulting to 1000 [ 851.669216][ T3351] wlan1: Creating new IBSS network, BSSID 16:17:bd:32:cc:bd [ 851.701561][T25227] lo speed is unknown, defaulting to 1000 [ 851.806503][T25240] netlink: 'syz.3.4800': attribute type 7 has an invalid length. [ 851.886177][T25246] netlink: 'syz.1.4802': attribute type 2 has an invalid length. [ 851.914882][T25246] __nla_validate_parse: 5 callbacks suppressed [ 851.945931][T25246] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4802'. [ 852.023958][T25254] pimreg: tun_chr_ioctl cmd 21731 [ 852.271900][T14042] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 852.372133][T25260] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 852.644042][T25270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4808'. [ 852.892141][T25283] netlink: 'syz.3.4816': attribute type 1 has an invalid length. [ 853.062186][T25291] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4814'. [ 853.090391][T25285] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 853.281109][T25303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4820'. [ 853.312038][T25294] bond4 (unregistering): Released all slaves [ 853.325208][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 853.369499][T25303] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 853.683891][T25318] lapb0: entered promiscuous mode [ 854.359200][T25356] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4833'. [ 854.615324][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 854.770790][ T3351] wlan1: Trigger new scan to find an IBSS to join [ 854.770798][T14042] wlan0: Trigger new scan to find an IBSS to join [ 854.862034][T25383] netlink: 'syz.0.4840': attribute type 9 has an invalid length. [ 854.914841][T25383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4840'. [ 854.936659][T25386] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4841'. [ 854.987356][T25386] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4841'. [ 855.003157][T25383] gretap0: entered promiscuous mode [ 855.043830][T25383] macvlan4: entered promiscuous mode [ 855.066731][T25383] macvlan4: entered allmulticast mode [ 855.073240][T25383] gretap0: entered allmulticast mode [ 855.597048][T25417] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4851'. [ 855.685542][T25420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4850'. [ 855.751719][T24430] wlan1: Creating new IBSS network, BSSID 0e:2c:29:a2:1f:43 [ 856.060766][T25437] veth2: entered promiscuous mode [ 857.731682][ T3351] wlan0: Trigger new scan to find an IBSS to join [ 857.781625][T25516] geneve1 speed is unknown, defaulting to 1000 [ 857.811797][T25516] lo speed is unknown, defaulting to 1000 [ 857.980471][T25532] xt_HMARK: spi-set and port-set can't be combined [ 858.234583][T25538] syzkaller0: entered promiscuous mode [ 858.248505][T25542] __nla_validate_parse: 3 callbacks suppressed [ 858.248522][T25542] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4877'. [ 858.276870][T25542] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4877'. [ 858.279838][T25538] syzkaller0: entered allmulticast mode [ 858.755367][T25559] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 859.643337][T25603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4891'. [ 859.765408][T25604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4891'. [ 860.108215][T25603] 8021q: adding VLAN 0 to HW filter on device bond7 [ 860.163804][T25604] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4891'. [ 860.749302][T25633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4898'. [ 860.767979][ T3351] wlan0: Trigger new scan to find an IBSS to join [ 860.985278][T25642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4900'. [ 861.052857][T25642] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 861.147709][T25642] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4900'. [ 861.167469][T25639] IPVS: Scheduler module ip_vs_sip not found [ 861.174272][T25651] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4903'. [ 861.724305][T24413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.410974][T25702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4917'. [ 862.475407][T25703] netlink: 'syz.3.4914': attribute type 4 has an invalid length. [ 862.543874][T25702] 8021q: adding VLAN 0 to HW filter on device bond4 [ 862.596923][T25707] vlan0: entered allmulticast mode [ 862.602249][T25707] erspan0: entered allmulticast mode [ 862.610977][T25707] bond4: (slave vlan0): Error -34 calling dev_set_mtu [ 862.630870][T24414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.653545][T24414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.791930][T25709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 863.711204][T25754] syzkaller0: entered promiscuous mode [ 863.723839][T25763] netlink: 'syz.0.4932': attribute type 8 has an invalid length. [ 863.730652][T25754] syzkaller0: entered allmulticast mode [ 863.795980][T25761] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 864.657726][T25794] nbd: socks must be embedded in a SOCK_ITEM attr [ 865.358102][T25822] __nla_validate_parse: 1 callbacks suppressed [ 865.358120][T25822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4942'. [ 866.176674][T25854] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4950'. [ 866.271832][T25863] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 866.519158][T25873] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4954'. [ 866.812464][T25885] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4957'. [ 866.841960][T25885] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4957'. [ 866.993220][T24418] nci: nci_ntf_packet: unknown ntf opcode 0x3 [ 867.492686][T25918] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4965'. [ 867.563773][T25920] geneve1 speed is unknown, defaulting to 1000 [ 867.600907][T25920] lo speed is unknown, defaulting to 1000 [ 867.643273][T25895] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 868.305936][ T5719] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 868.374304][T25943] netlink: 1064 bytes leftover after parsing attributes in process `syz.0.4971'. [ 868.530217][T25947] sctp: [Deprecated]: syz.0.4973 (pid 25947) Use of int in max_burst socket option. [ 868.530217][T25947] Use struct sctp_assoc_value instead [ 868.567577][T25949] netlink: 'syz.3.4972': attribute type 1 has an invalid length. [ 868.615058][T25949] netlink: 'syz.3.4972': attribute type 1 has an invalid length. [ 869.161815][T25982] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4978'. [ 869.175457][ T5719] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 869.379065][T25988] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 869.423683][T25988] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4983'. [ 869.681156][T26004] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4986'. [ 870.370820][T26016] syzkaller0: entered promiscuous mode [ 870.409802][T26016] syzkaller0: entered allmulticast mode [ 870.992460][T26034] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 871.057001][T26042] ipvlan2: entered promiscuous mode [ 871.090482][T26042] bridge0: port 4(ipvlan2) entered blocking state [ 871.133212][T26042] bridge0: port 4(ipvlan2) entered disabled state [ 871.178590][T26042] ipvlan2: entered allmulticast mode [ 871.199857][T26043] __nla_validate_parse: 2 callbacks suppressed [ 871.199875][T26043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4993'. [ 871.207103][T26042] bridge0: entered allmulticast mode [ 871.233299][T26042] ipvlan2: left allmulticast mode [ 871.238727][T26042] bridge0: left allmulticast mode [ 871.383412][T26052] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 871.616238][T26060] 0: reclassify loop, rule prio 0, protocol 03 [ 871.635613][T26060] netlink: 200 bytes leftover after parsing attributes in process `syz.1.4998'. [ 872.180187][T26084] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5003'. [ 872.216146][T26082] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 872.245049][T26081] syzkaller0: entered promiscuous mode [ 872.258753][T26081] syzkaller0: entered allmulticast mode [ 872.290049][T26081] tunl0: Caught tx_queue_len zero misconfig [ 872.314332][T26084] syzkaller0: entered promiscuous mode [ 872.323106][T26084] syzkaller0: entered allmulticast mode [ 872.382800][T26084] tipc: Enabled bearer , priority 0 [ 872.393727][T26083] tipc: Resetting bearer [ 872.456525][T26083] tipc: Disabling bearer [ 873.079130][T26115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5008'. [ 873.330349][T26122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5011'. [ 873.526904][T26119] netlink: 'syz.1.5010': attribute type 1 has an invalid length. [ 873.536632][T26119] netlink: 756 bytes leftover after parsing attributes in process `syz.1.5010'. [ 873.686568][T26134] macsec1: entered promiscuous mode [ 874.013690][T26149] geneve1 speed is unknown, defaulting to 1000 [ 874.093992][T26149] lo speed is unknown, defaulting to 1000 [ 874.759439][T26189] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 874.864408][T26191] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5023'. [ 874.939128][T26191] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5023'. [ 875.032211][T26197] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5025'. [ 875.080168][T26198] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5025'. [ 876.700118][ T30] audit: type=1800 audit(1785659524.437:16): pid=26269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5041" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2323 res=0 errno=0 [ 878.858666][T26230] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 879.204330][T26296] __nla_validate_parse: 3 callbacks suppressed [ 879.204350][T26296] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5050'. [ 879.374194][T26302] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5053'. [ 879.611520][T26315] netlink: 260 bytes leftover after parsing attributes in process `syz.3.5058'. [ 879.644597][T26314] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5057'. [ 879.778616][T26315] syzkaller0: entered promiscuous mode [ 879.796704][T26315] syzkaller0: entered allmulticast mode [ 880.310022][T26342] batadv_slave_0: entered allmulticast mode [ 880.319028][T26337] ip_tables: iptables: counters copy to user failed while replacing table [ 880.332293][T26342] batadv_slave_0: left allmulticast mode [ 880.513149][T26350] netlink: 'syz.1.5069': attribute type 11 has an invalid length. [ 880.573637][T26351] netlink: 'syz.0.5070': attribute type 13 has an invalid length. [ 880.627713][T26357] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5070'. [ 880.725630][T26365] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5072'. [ 881.689905][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 883.826557][T26382] netlink: 'syz.2.5074': attribute type 1 has an invalid length. [ 883.829795][T26368] ip6tnl0: Caught tx_queue_len zero misconfig [ 883.856014][T26370] erspan1: entered allmulticast mode [ 884.061376][T26390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5076'. [ 884.130613][T26382] bond6: entered promiscuous mode [ 884.136838][T26382] 8021q: adding VLAN 0 to HW filter on device bond6 [ 884.213842][T26390] vlan2: entered allmulticast mode [ 884.251019][T26390] bond0: entered allmulticast mode [ 884.285746][T26390] bridge0: entered allmulticast mode [ 884.310774][T26390] team0: entered allmulticast mode [ 884.764097][T26428] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5086'. [ 885.678065][T26455] SET target dimension over the limit! [ 886.010293][T26465] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5098'. [ 886.051477][T26464] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5098'. [ 886.662352][T26473] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.669967][T26473] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.741929][T26500] netlink: del zone limit has 8 unknown bytes [ 886.768693][T26473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 887.453226][T26473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 887.820259][T26473] gretap0: left allmulticast mode [ 887.827277][T26473] macvlan4: left promiscuous mode [ 887.832323][T26473] macvlan4: left allmulticast mode [ 887.955340][ T6140] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 888.016258][ T6140] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.061407][T24416] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 888.089050][T24416] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.136583][T24416] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 888.167037][T24416] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.200263][T24416] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 888.215309][T24416] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.225447][T26527] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5112'. [ 888.489074][T26538] netlink: 'syz.3.5114': attribute type 83 has an invalid length. [ 888.548681][T26536] netlink: 'syz.3.5114': attribute type 83 has an invalid length. [ 888.818280][T26549] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5117'. [ 888.839509][T26554] xt_hashlimit: size too large, truncated to 1048576 [ 888.883087][T26549] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5117'. [ 888.900070][T26554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5118'. [ 888.908714][T26560] syzkaller0: entered promiscuous mode [ 888.928213][T26560] syzkaller0: entered allmulticast mode [ 889.038698][T26566] netlink: 'syz.3.5118': attribute type 1 has an invalid length. [ 889.120359][T26554] netlink: 'syz.3.5118': attribute type 1 has an invalid length. [ 889.566584][T26584] syzkaller0: entered promiscuous mode [ 889.592387][T26584] syzkaller0: entered allmulticast mode [ 889.956948][T26602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5130'. [ 889.989000][T26602] bond7: Unable to set peer notification delay as MII monitoring is disabled [ 889.999951][T26602] bond7 (unregistering): Released all slaves [ 890.174406][T26606] geneve3: entered promiscuous mode [ 890.215658][T24414] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.230369][T24414] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.251195][T24414] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.279026][T24414] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.662465][T26637] netlink: 'syz.3.5136': attribute type 13 has an invalid length. [ 891.724612][T24429] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 891.856955][T26671] xfrm0: entered allmulticast mode [ 891.871823][T26671] team0: Port device xfrm0 added [ 892.283966][T26573] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 892.582674][T26676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5146'. [ 895.558967][T26684] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 895.866828][T26715] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5153'. [ 895.982818][T26722] tipc: Enabling of bearer rejected, failed to enable media [ 896.112889][T26726] tipc: Enabled bearer , priority 0 [ 896.900527][T26741] netlink: 'syz.2.5160': attribute type 5 has an invalid length. [ 896.964354][T26729] tipc: Disabling bearer [ 897.179834][T26749] siw: device registration error -23 [ 897.566198][T26764] IPVS: set_ctl: invalid protocol: 25965 114.121.46.101:30309 [ 897.605573][T26765] IPVS: set_ctl: invalid protocol: 64 0.32.0.0:45056 [ 897.987822][T26770] syz_tun: entered allmulticast mode [ 898.018250][T26769] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.5170'. [ 898.177360][T26768] syz_tun: left allmulticast mode [ 898.373964][T26781] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 898.684332][T26796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5177'. [ 899.550442][T26838] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5185'. [ 899.581511][T26839] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5186'. [ 899.681924][T26837] geneve1 speed is unknown, defaulting to 1000 [ 899.816028][T26837] lo speed is unknown, defaulting to 1000 [ 900.040078][T26839] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 900.103563][T26861] Bluetooth: MGMT ver 1.23 [ 900.299622][ T30] audit: type=1804 audit(1785659548.037:17): pid=26864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5189" name="/newroot/415/cgroup.controllers" dev="tmpfs" ino=2155 res=1 errno=0 [ 900.341212][T26867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5190'. [ 900.393824][T26867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 900.404103][ T30] audit: type=1800 audit(1785659548.067:18): pid=26864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5189" name="cgroup.controllers" dev="tmpfs" ino=2155 res=0 errno=0 [ 900.437023][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 900.491439][T26867] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 900.595148][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 900.788330][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 901.101800][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 901.786322][T26924] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5207'. [ 901.950874][T26933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5208'. [ 901.969524][T26933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5208'. [ 902.185636][T26944] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5210'. [ 902.204696][T26945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5211'. [ 902.363103][T26953] bond8: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 902.398010][T26953] bond8 (unregistering): Released all slaves [ 902.542053][T26939] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 902.767183][ T3383] wlan1: Trigger new scan to find an IBSS to join [ 902.882396][T26973] netlink: 1355 bytes leftover after parsing attributes in process `syz.1.5217'. [ 902.893375][T26971] dummy0: Caught tx_queue_len zero misconfig [ 903.261144][T26984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5223'. [ 903.420551][T26983] bond4: option xmit_hash_policy: invalid value (10) [ 903.444856][T26983] bond4 (unregistering): Released all slaves [ 903.641311][T26984] 8021q: adding VLAN 0 to HW filter on device bond5 [ 903.700403][T26992] bond5 (unregistering): Released all slaves [ 903.874467][T27012] syzkaller0: entered promiscuous mode [ 903.881947][T27012] syzkaller0: entered allmulticast mode [ 903.915307][T27005] tipc: Started in network mode [ 903.952212][T27005] tipc: Node identity 52dd58b311e6, cluster identity 4711 [ 903.992108][T27005] tipc: Enabled bearer , priority 0 [ 904.039689][T27025] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5229'. [ 904.062797][T26994] tipc: Resetting bearer [ 904.183791][T26994] tipc: Disabling bearer [ 904.430575][T27036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 904.453289][T27035] netlink: 'syz.4.5232': attribute type 23 has an invalid length. [ 904.578420][T27047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5236'. [ 904.839401][T27048] syzkaller0: entered promiscuous mode [ 904.856575][T27048] syzkaller0: entered allmulticast mode [ 904.872836][T27047] veth1_macvtap: left promiscuous mode [ 907.743160][T24427] wlan1: Trigger new scan to find an IBSS to join [ 908.248985][T27085] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 908.266305][T27097] syzkaller0: entered promiscuous mode [ 908.272105][T27097] syzkaller0: entered allmulticast mode [ 908.560810][T27106] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5248'. [ 908.679748][ T3383] wlan1: Creating new IBSS network, BSSID d2:22:e1:14:b7:d9 [ 909.243603][T27136] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5255'. [ 909.432864][T27140] netlink: 'syz.3.5256': attribute type 6 has an invalid length. [ 909.667195][T27125] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 914.801771][ C0] sched: DL replenish lagged too much [ 921.187509][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 926.293110][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 926.310803][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 931.417037][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 954.717624][T24428] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1014.864839][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1014.871826][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P27119/1:b.el [ 1014.880400][ C1] rcu: (detected by 1, t=10503 jiffies, g=171593, q=2243 ncpus=2) [ 1014.888308][ C1] task:syz.1.5252 state:R running task stack:24488 pid:27119 tgid:27119 ppid:17360 task_flags:0x400040 flags:0x00080002 [ 1014.903169][ C1] Call Trace: [ 1014.906471][ C1] [ 1014.909426][ C1] __schedule+0x17d9/0x56c0 [ 1014.913981][ C1] ? __pfx___schedule+0x10/0x10 [ 1014.918849][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1014.923897][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 1014.929288][ C1] preempt_schedule_common+0x82/0xd0 [ 1014.934596][ C1] ? nl80211_netlink_notify+0x722/0x860 [ 1014.940245][ C1] preempt_schedule_thunk+0x16/0x40 [ 1014.945467][ C1] __local_bh_enable_ip+0xe1/0x130 [ 1014.950594][ C1] nl80211_netlink_notify+0x722/0x860 [ 1014.955983][ C1] ? nl80211_netlink_notify+0x75/0x860 [ 1014.961458][ C1] notifier_call_chain+0x1a5/0x3d0 [ 1014.966595][ C1] blocking_notifier_call_chain+0x6a/0x90 [ 1014.972329][ C1] netlink_release+0x11f8/0x1a80 [ 1014.977292][ C1] ? netlink_release+0x106/0x1a80 [ 1014.982328][ C1] ? __pfx_netlink_release+0x10/0x10 [ 1014.987623][ C1] ? down_write+0x16d/0x200 [ 1014.992131][ C1] ? __pfx_down_write+0x10/0x10 [ 1014.997009][ C1] sock_close+0xad/0x220 [ 1015.001267][ C1] ? __pfx_sock_close+0x10/0x10 [ 1015.006139][ C1] __fput+0x418/0xa50 [ 1015.010186][ C1] task_work_run+0x1d9/0x270 [ 1015.014783][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1015.019937][ C1] exit_to_user_mode_loop+0x1fa/0x730 [ 1015.025326][ C1] ? rcu_is_watching+0x15/0xb0 [ 1015.030102][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.036186][ C1] do_syscall_64+0x353/0x580 [ 1015.040800][ C1] ? clear_bhb_loop+0x40/0x90 [ 1015.045488][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.051389][ C1] RIP: 0033:0x7fd12079e019 [ 1015.055813][ C1] RSP: 002b:00007ffcb3dc96d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1015.064238][ C1] RAX: 0000000000000000 RBX: 00007fd120a27da0 RCX: 00007fd12079e019 [ 1015.072393][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1015.080372][ C1] RBP: 00007fd120a27da0 R08: 0000000000000006 R09: 0000000000000000 [ 1015.088349][ C1] R10: 00007fd120a27cb0 R11: 0000000000000246 R12: 00000000000de0ac [ 1015.096324][ C1] R13: 00007fd120a2627c R14: 00000000000de039 R15: 00007fd120a26270 [ 1015.104321][ C1] [ 1015.107347][ C1] rcu: rcu_preempt kthread starved for 1040 jiffies! g171593 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1015.118544][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1015.128519][ C1] rcu: RCU grace-period kthread stack dump: [ 1015.134407][ C1] task:rcu_preempt state:R running task stack:27656 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1015.147993][ C1] Call Trace: [ 1015.151279][ C1] [ 1015.154224][ C1] __schedule+0x17d9/0x56c0 [ 1015.158751][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1015.163731][ C1] ? __pfx___schedule+0x10/0x10 [ 1015.168603][ C1] ? schedule+0x90/0x2b0 [ 1015.172856][ C1] schedule+0x164/0x2b0 [ 1015.177021][ C1] schedule_timeout+0x152/0x2c0 [ 1015.181953][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1015.187424][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1015.192721][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1015.198543][ C1] ? prepare_to_swait_event+0x322/0x350 [ 1015.204111][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1015.208978][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1015.214186][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1015.220004][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1015.226173][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1015.231466][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1015.236680][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1015.242502][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1015.247115][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1015.252329][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1015.257367][ C1] ? __kthread_parkme+0x196/0x1f0 [ 1015.262410][ C1] kthread+0x388/0x470 [ 1015.266497][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1015.271709][ C1] ? __pfx_kthread+0x10/0x10 [ 1015.276321][ C1] ret_from_fork+0x514/0xb70 [ 1015.280960][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1015.286085][ C1] ? __switch_to+0xc89/0x1420 [ 1015.290773][ C1] ? __pfx_kthread+0x10/0x10 [ 1015.295385][ C1] ret_from_fork_asm+0x1a/0x30 [ 1015.300170][ C1] [ 1015.303197][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1015.309527][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1015.314745][ C0] NMI backtrace for cpu 0 [ 1015.314766][ C0] CPU: 0 UID: 0 PID: 17736 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 1015.314786][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1015.314798][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 1015.314902][ C0] RIP: 0010:deref_stack_reg+0x18e/0x220 [ 1015.314928][ C0] Code: 20 c2 20 ca 80 fa 01 75 46 49 8d 40 08 4c 39 e0 0f 97 c1 4c 39 f0 0f 96 c0 20 c8 3c 01 75 30 4c 89 c7 49 89 f7 e8 12 07 00 00 <49> 89 c6 48 8b 5c 24 08 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 [ 1015.314944][ C0] RSP: 0018:ffffc90000006f38 EFLAGS: 00000202 [ 1015.314959][ C0] RAX: ffffc90000007f48 RBX: 1ffff92000000e05 RCX: 0000000000000001 [ 1015.314972][ C0] RDX: ffffc90000007068 RSI: dffffc0000000000 RDI: ffffc90000007d70 [ 1015.314985][ C0] RBP: ffffc90000000000 R08: ffffc90000007d70 R09: 0000000000000000 [ 1015.314998][ C0] R10: ffffc90000007078 R11: fffff52000000e11 R12: 1ffff92000000e06 [ 1015.315012][ C0] R13: 1ffff92000000e07 R14: ffffc90000008000 R15: dffffc0000000000 [ 1015.315026][ C0] FS: 0000000000000000(0000) GS:ffff888124f4f000(0000) knlGS:0000000000000000 [ 1015.315046][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1015.315059][ C0] CR2: 0000200000ee0000 CR3: 0000000079e50000 CR4: 00000000003526f0 [ 1015.315074][ C0] Call Trace: [ 1015.315081][ C0] [ 1015.315092][ C0] unwind_next_frame+0x19bd/0x2550 [ 1015.315114][ C0] ? __napi_poll+0xaa/0x330 [ 1015.315156][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1015.315176][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1015.315200][ C0] arch_stack_walk+0x11b/0x150 [ 1015.315222][ C0] ? net_rx_action+0x61d/0xf50 [ 1015.315242][ C0] stack_trace_save+0xa9/0x100 [ 1015.315263][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1015.315283][ C0] ? kfree+0x1c5/0x640 [ 1015.315306][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1015.315333][ C0] kasan_save_track+0x3e/0x80 [ 1015.315357][ C0] ? kasan_save_track+0x3e/0x80 [ 1015.315378][ C0] ? kasan_save_free_info+0x40/0x50 [ 1015.315396][ C0] ? __kasan_slab_free+0x5c/0x80 [ 1015.315418][ C0] ? kmem_cache_free+0x182/0x650 [ 1015.315440][ C0] ? nft_synproxy_eval_v4+0x36a/0x4e0 [ 1015.315491][ C0] ? nft_synproxy_do_eval+0x335/0x550 [ 1015.315508][ C0] ? nft_do_chain+0x48d/0x1b10 [ 1015.315573][ C0] ? nft_do_chain_inet+0x360/0x4b0 [ 1015.315613][ C0] ? nf_hook_slow+0xc5/0x220 [ 1015.315682][ C0] ? NF_HOOK+0x21f/0x3c0 [ 1015.315706][ C0] ? NF_HOOK+0x336/0x3c0 [ 1015.315728][ C0] ? process_backlog+0xa34/0x1860 [ 1015.315745][ C0] ? __napi_poll+0xaa/0x330 [ 1015.315784][ C0] ? nft_synproxy_eval_v4+0x36a/0x4e0 [ 1015.315801][ C0] kasan_save_free_info+0x40/0x50 [ 1015.315820][ C0] __kasan_slab_free+0x5c/0x80 [ 1015.315844][ C0] kmem_cache_free+0x182/0x650 [ 1015.315871][ C0] nft_synproxy_eval_v4+0x36a/0x4e0 [ 1015.315893][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1015.315913][ C0] ? nf_ip_checksum+0x13c/0x510 [ 1015.315934][ C0] nft_synproxy_do_eval+0x335/0x550 [ 1015.315954][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1015.315973][ C0] ? __ip_vs_conn_in_get+0xa6/0x10f0 [ 1015.316046][ C0] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 1015.316070][ C0] nft_do_chain+0x48d/0x1b10 [ 1015.316097][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1015.316120][ C0] ? __pfx_ip_vs_fill_iph_skb_off+0x10/0x10 [ 1015.316160][ C0] nft_do_chain_inet+0x360/0x4b0 [ 1015.316180][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1015.316204][ C0] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 1015.316252][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1015.316272][ C0] nf_hook_slow+0xc5/0x220 [ 1015.316300][ C0] NF_HOOK+0x21f/0x3c0 [ 1015.316324][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1015.316349][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1015.316372][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1015.316398][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1015.316426][ C0] ? ip_local_deliver+0x113/0x190 [ 1015.316452][ C0] NF_HOOK+0x336/0x3c0 [ 1015.316476][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1015.316500][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1015.316523][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1015.316547][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1015.316572][ C0] ? ip_rcv_core+0x88d/0xd50 [ 1015.316598][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1015.316622][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1015.316646][ C0] process_backlog+0xa34/0x1860 [ 1015.316667][ C0] ? process_backlog+0x3c3/0x1860 [ 1015.316692][ C0] __napi_poll+0xaa/0x330 [ 1015.316710][ C0] net_rx_action+0x61d/0xf50 [ 1015.316734][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1015.316768][ C0] handle_softirqs+0x225/0x840 [ 1015.316790][ C0] ? do_softirq+0x76/0xd0 [ 1015.316812][ C0] ? neigh_periodic_work+0xc23/0xe40 [ 1015.316831][ C0] do_softirq+0x76/0xd0 [ 1015.316850][ C0] [ 1015.316856][ C0] [ 1015.316862][ C0] __local_bh_enable_ip+0xf8/0x130 [ 1015.316883][ C0] neigh_periodic_work+0xc23/0xe40 [ 1015.316906][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1015.316926][ C0] process_scheduled_works+0xa8e/0x14e0 [ 1015.316962][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1015.316986][ C0] ? assign_work+0x3cf/0x5d0 [ 1015.317007][ C0] worker_thread+0xa47/0xfb0 [ 1015.317040][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1015.317068][ C0] kthread+0x388/0x470 [ 1015.317092][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1015.317111][ C0] ? __pfx_kthread+0x10/0x10 [ 1015.317136][ C0] ret_from_fork+0x514/0xb70 [ 1015.317163][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1015.317188][ C0] ? __switch_to+0xc89/0x1420 [ 1015.317210][ C0] ? __pfx_kthread+0x10/0x10 [ 1015.317235][ C0] ret_from_fork_asm+0x1a/0x30 [ 1015.317260][ C0]