last executing test programs: 11.840268508s ago: executing program 0 (id=6078): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x3, 0x4, 0x8, 0x0, 0x1}, 0x50) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x1, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x0, 0xe, 0x0, &(0x7f0000000980)="667fa2ca000000df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000009c0)=[{&(0x7f0000000a00)='wi', 0x2}], 0x1, 0x1) close(r5) splice(r4, 0x0, r5, 0x0, 0x7, 0x2) sendmsg$key(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x2, 0xa, 0x94, 0x7, 0x15, 0x0, 0x70bd2a, 0x25dfdbfc, [@sadb_lifetime={0x4, 0x3, 0x0, 0x9, 0x1, 0x5}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e22}, @sadb_address={0x5, 0x6, 0x2b, 0x80, 0x0, @in6={0xa, 0x4e20, 0xcae, @loopback, 0x9ca6}}, @sadb_ident={0x2, 0x0, 0x40, 0x0, 0x2}, @sadb_x_filter={0x5, 0x1a, @in=@local, @in=@multicast1, 0x18, 0x30, 0x4}, @sadb_ident={0x2, 0xb, 0x80}]}, 0xa8}}, 0x20000000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000fc0)={@fallback=r2, 0x1d, 0x0, 0x3, &(0x7f0000000ec0)=[0x0], 0x1, 0x0, &(0x7f0000000f00)=[0x0], &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f80)=[0x0]}, 0x40) r6 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000640)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000600)=""/28, 0x1c}, &(0x7f0000000680)=0x40) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@newsa={0x138, 0x10, 0x1, 0x0, 0x1, {{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5e}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x1, 0x3, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x1}, 0x102, 0x0, 0x2, 0x4, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)={0x14, 0x17, 0x9, 0x70bd27, 0x40000000, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2804}, 0x4) bind$inet(r8, &(0x7f0000000d40)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000d80)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000dc0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r8, 0x0, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f00000001c0)={0x0, @rand_addr, @multicast2}, &(0x7f0000000200)=0xc) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000280)={'wlan0\x00', {0x2, 0x4e23, @broadcast}}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newroute={0x2c, 0x1a, 0x4, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x1}, [@RTA_SPORT={0x6}, @RTA_IIF={0x8, 0x3, r10}]}, 0x2c}}, 0x20004000) sendmsg$tipc(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)="f996c6a0e3934fd84f8b92ce78217bee4dfa7a721afbd2e073865ce36a3a5588b30229ec066ff4d9fa1ea34accc6d9ca0119d0cda50b54455f501663b89fb3798dbf157573abf5b22bfb97d832d36f98d00894a595a595b0cec3fd0ead8be59a700e9552bd699b06fef979c428f23ca86d61c3ca3f7796cf9890cf8b169f961bb58f73443485f864f7abe1d9a2a5edc3ed153cf299f7af54c5fea8c296b5dd6a4ea5104d8616c7776ef88b2785632918643499cb6049", 0xb6}, {&(0x7f0000000380)="f8d24a560a7a571a33bdf733d6bf11ad3b00f74facd67fde74e858cd5584dbcf67fe4cc8195c8f4fc759ae002c8e8cdcc3508b96144b80a690254a35bcc4c8f5466e629f29659cfab62bc20ed682c5ab668da4e170612b40197823aaa3c8b82e6c1c2fc795cd548f6d4ccfd9904d5c7ecff38be50a7060f5ef27a355aeabe072644543732676ca7ffe5b347f28b9fb5913e3b04b39a1ff62ada1b8728b1c208d2d37bfe73fcaec1d49455a0951906f", 0xaf}, {&(0x7f0000000440)="4b1072e8290ba9e7d52b", 0xa}], 0x3, &(0x7f00000004c0)="9e7218ce7d55e603eeba5996ba551f3b115eda40e20916d2fa761e1d711563faa5f5290b1b4b875859a48f3b1e5075d12cf15be082fdc083d1a48a642de33a42905bc96c91beb8cb39e99d2e3646aec6a6a2cfd8756b33f0948bb2aca6f60045ad421599545db13b88b24874cdfebe8605ab9ac96bef0caf5b3a93", 0x7b}, 0x40) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="b86e6f9021c363d8c038a50bedac2786e5ba87174ac7787b4c402321c4bc2fc84150a6d53db1c0a9c1a9bee081ccfee077", @ANYBLOB="01002abd7000fedbdf25140000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="d5235eef9a96296a854bc2afe0622d17e698bc5f55b83203f58a1d748565fa9c2b35"], 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x24080855) 11.785547327s ago: executing program 0 (id=6079): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x98, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x68, 0x2, [@TCA_BASIC_ACT={0x64, 0x3, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x18, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x4}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x4}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000000, 0x20, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x98}}, 0x0) write$tun(r0, &(0x7f0000000400)=ANY=[], 0xfdef) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r4) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, r5, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8041}, 0x4000800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x1a, 0x4, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xffffff15}, [@call={0x85, 0x0, 0x0, 0x7e}]}, &(0x7f0000000a80)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) 11.429688748s ago: executing program 0 (id=6084): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e23, 0x8001, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000740), 0x8) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', 0x1}) write$tun(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="aa08804b8d6148f3360041bf5e00000000000200b6e7140fc00068000003069078", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0xfce) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000340)={{{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f0000000440)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast1, @in6=@mcast2, 0x4e24, 0x0, 0x4e22, 0x7, 0xa, 0x80, 0x20, 0x29, 0x0, r5}, {0x2, 0x5, 0xffffffffffffffff, 0xa, 0xfffffffffffffffb, 0x10001, 0xda6, 0x9}, {0x1, 0x2, 0x9, 0x5}, 0x7fffffff, 0x6e6bb0, 0x0, 0x0, 0x1, 0x3}, {{@in=@multicast2, 0x4d5, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1, 0x2, 0x8, 0x3c8, 0x0, 0x7}}, 0xe8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r2, &(0x7f0000000080), &(0x7f00000000c0)=@tcp6=r1}, 0x20) sendmmsg$unix(r1, &(0x7f0000000180)=[{{&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/65, 0x41}], 0x1}}], 0x1, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000007c0)='X', 0x34000, 0xe0, &(0x7f0000000800)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 8.976894982s ago: executing program 0 (id=6090): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x60, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 8.793137026s ago: executing program 0 (id=6092): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000009, 0x3032, 0xffffffffffffffff, 0xc6dd5000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x13, &(0x7f0000000c80)=ANY=[@ANYBLOB="1808000000ffd0000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000001020000ff0000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000d40)='GPL\x00', 0x2, 0xb019, &(0x7f0000000d80)=""/234}, 0x78) 8.548901464s ago: executing program 0 (id=6094): syz_emit_ethernet(0x56, &(0x7f0000000140)={@local, @remote, @val={@val={0x88a8, 0x6, 0x1, 0x3}, {0x8100, 0x5, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0xe, 0x4, 0x2, 0x0, 0x40, 0x67, 0x0, 0x3, 0x1, 0x0, @empty, @multicast1, {[@generic={0x82, 0x6, "adbab404"}, @cipso={0x86, 0x1c, 0x0, [{0x5, 0x6, "2df3d108"}, {0x0, 0x5, "7a1470"}, {0x0, 0x7, "754ed4bb66"}, {0x2, 0x4, 'IA'}]}]}}, @info_request={0xf, 0x0, 0x0, 0x0, 0x2}}}}}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="87d1b6fbdc91bdb41270acaa75d9564bd63c3f6bd19002ceaaaa90aaa200000000de00892f"], 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="780000005400e50129bd7000fdffffff07000000", @ANYRES32, @ANYBLOB="210001"], 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async, rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000640)=ANY=[@ANYRESHEX=r0, @ANYRES32=r4, @ANYRESDEC=r3], &(0x7f0000000680)='syzkaller\x00', 0x800000, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x4e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r6, 0xffffffffffffffff}, &(0x7f0000000cc0), &(0x7f0000000d00)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{r8}, &(0x7f0000001280)=0x20000, &(0x7f00000012c0)=r7}, 0x20) (async) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002880)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0xced, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001380)={{r9, 0xffffffffffffffff}, &(0x7f00000013c0)=0x2000000, &(0x7f0000001400)=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001440)={r8, &(0x7f0000001480)}, 0x20) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000014c0)={'wlan0\x00'}) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f00000017c0)={0x1024, r5, 0x400, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}]}, 0x1024}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000001600)={'wlan1\x00', 0x0}) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r15, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000003a0000000a000300", @ANYRES32=r14, @ANYBLOB="04005b00"], 0x20}}, 0x48000) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001780)={0x28, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES16=r10], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x50) (async, rerun: 64) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFQNL_MSG_CONFIG(r16, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, 0x2, 0x3, 0x301, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) 4.268374326s ago: executing program 4 (id=6119): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x1a, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ebffff7f0000000015ffffff7920000047490300951000d100000000"], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x3d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x129642, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x2}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000740)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000d40)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x3}, {0x0, 0x2, 0x8, 0x3, 0xfffd}, 0x2, 0x401, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000dc0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=@newqdisc={0x440, 0x28, 0x4ee4e6a52ff56541, 0x4002, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0xffff, 0x7}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x414, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x6, 0x0, 0xd96b, 0x9, 0x1, 0xfffffffc, 0x4, 0xa627, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x6, 0x99, 0x9, 0x5, 0x3, 0x40000007, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000043, 0x4, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x5, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x5, 0x7, 0x1, 0x10001, 0xffffffff, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0x0, 0x1, 0xffffffff, 0x3, 0x1004, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0x5, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x8, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x7f, 0x2, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x5, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x5, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x2, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PRATE64={0xc, 0x5, 0x3f602be049d63c23}]}}]}, 0x440}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000017c0), 0x40000000000009f, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0xfc, 0x1}]}, 0x10) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0x10, &(0x7f0000000740)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000500)=r9, 0x4) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r10, 0x5, 0x10, 0x0, &(0x7f0000000380)="259a5388a8f338009565480d2f150000", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) recvfrom(r8, 0x0, 0x0, 0x20, 0x0, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1a, 0x0, &(0x7f0000000100)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x3a) 3.478862737s ago: executing program 4 (id=6127): socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x58}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0xf, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4801}, 0x4000040) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400010401000000000000002d000000010000000500020008000000"], 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r2 = socket(0x2, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_mtu=0x44}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r3) socket$inet(0x2, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r4, 0x0, 0x0) listen(r4, 0x5) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000380)="510003000000", 0x6) socket(0x2, 0x1, 0x0) r6 = socket(0x2d, 0x2, 0x0) bind(r6, &(0x7f0000000500)=@generic={0x2d, "00000100000008010800"}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x2d, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendto(r7, &(0x7f0000000600)="010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101", 0xc8, 0x0, &(0x7f0000000700)=@generic={0x2d, "0000010000000801080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000034000"}, 0x80) 3.133466146s ago: executing program 4 (id=6132): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000234373190000000000000000850000004100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) pipe(&(0x7f0000000000)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000700)={0x2, &(0x7f0000000740)=[{0x28, 0x3, 0x2, 0xfffff03c}, {0x6, 0x7, 0x2, 0x9}]}, 0x10) 2.859863746s ago: executing program 1 (id=6134): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000000010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000000000000000900000000000000000000000000000005000000000000000000000000000000000000000000320000000000000000000000000000000000040800000000000000000000000000000002000000000000010001000000000084010500ac1414aa00000000000000000000000000000000330000000000000064010100000000000000000000000000ff340000000000000000000000000000402000007f000001000000000000000000000000000020003c00000002000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000e00000010000000000000000000000000000000000000000000000000000000000000000ac1414430000000000000000000002000000000033"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 2.60894454s ago: executing program 1 (id=6136): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000080)={0xa, 0x4e23, 0x6000000, @ipv4={'\x00', '\xff\xff', @local}, 0x16}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1400000000000000290000874300000009000000000000dd28"], 0x40}, 0x28010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x4, 0x7, 0x6, 0x8, 0x61, @dev={0xfe, 0x80, '\x00', 0x1c}, @empty, 0x8, 0x0, 0x6, 0x9}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xff}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x4}, @ETHTOOL_A_LINKINFO_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x24040080}, 0x800) 2.495569934s ago: executing program 2 (id=6137): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000100)=ANY=[], 0x0, 0x6}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000041b7030000000000008500000023000000bf0920000000000035090100000000009500000000000000bf080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000020000b7050000080000001c20000000000000bf9800000000000056080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 2.245024974s ago: executing program 2 (id=6138): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x0, @any, 0x4}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000980)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000009c0)={0x2}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r1, &(0x7f0000000000)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x7, @remote}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000002c0)="f3235159be879e19368886eb5d8f2006e79b0087e8dd4ce9c513893d131201a74e08b2691cd3cc3135eca62c592a4adee3235749fa7c", 0x36}, {&(0x7f0000000300)="a2cc841b5a45e6f81eb7c9bed555b3880da77cf45a2af353b5061eedcfcf4cebe278ee81a525af7840a105522cccf17e812c5ae1022ee25d6f8fed3921ae8102e01ada0dc481b9beba9c9e8c57ee5494f958f90a7d6ec7e1afaf4e81d96b0c07ce0e952da97c96ef83f69ea56e2de45f483e547f1307cb15d0b7e02db133ce12b17755f6e4409302e6b3b966b9e247343ae65bb81c1d7d9e454f681bdf0c37", 0x9f}, {0x0}], 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/651], 0x298}}], 0x1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000791838000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) ioctl$XFS_IOC_INUMBERS(r2, 0x80405880, &(0x7f0000000a00)={{0x9, 0x4, 0x1ff, 0x100, 0xd}, [{0x80000001, 0x888, 0xfc, 0xf7}, {0x7, 0x5}, {0x9, 0x1, 0x7, 0x8}]}) r3 = socket$kcm(0x10, 0x2, 0x0) clock_gettime(0x0, 0xfffffffffffffffc) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000bc0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0xffffffff}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) syz_emit_ethernet(0x3a, &(0x7f0000001000)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000ac0), 0x0) close(r6) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f0000000b00)=r4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000b40), &(0x7f0000000b80)=0x4) sendmsg$kcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000004c0)="d8000000180081064e81f782db44b9040a5d080006007c09e80000a10a0015400100143803600e1208001e0000000401040016004000094003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408ecd8ef52a98516277ce06bbace8017cbec4c2ee59ecef4090000001fb7b0643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d20a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bfface0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.129438569s ago: executing program 2 (id=6139): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0000000210001002dbd700000000000ffffffff000000000000000000000000ac1414aa00000000000000000000000000000000040000000000002000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000050001100200100000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000000000000a00"/88], 0xa0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r2 = socket(0x1, 0x1, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x24048054}, 0x20040040) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fbdbdf25010000000c000200d540000000000000100007800c00018008000100", @ANYRES32=r2, @ANYBLOB="b765f1533f7cbccef7763d5d0f4d7eed05de85ae33011e74fa08fc53d51861da55c36b3c2f0e733b43346b84627ff89d217a1b789a69810e6ebc44fd2f96f63e9ea2cf1c85aff8f0135cce305fa06ac3a7de7a43e407a252d1"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r7 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000a004e23ffff8e27ff0200000000000000000000000000010c00"/144], 0x20000) socket$netlink(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x13, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1a"], 0x0, 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$key(0xf, 0x3, 0x2) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000680)="4b001bc33f6364218b4343af357800000000000000000000000000000000000000d747489c5ad34274f75bc4adcfb9922b77ebd0be03ae7a6d9d7be7b422918c8785c3c28814cacbf27f1a67405e80843d98416e4f27777402d9a61013b6ff196043cc2e56b00000000000", 0x4e7327143867902b) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90656}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x1}, @IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x2}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x7}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x690}, 0x40) sendmsg$key(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="020906030200000028bd7000c7173c9a3dfb587d707bc43267040dffdbdf25"], 0x10}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f0000001140)=ANY=[@ANYBLOB="5c060000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fcdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="780102803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r1, @ANYRESDEC=r3, @ANYRES32=0x0, @ANYRESDEC=r3, @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r1, @ANYRES8=r5, @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c656400000000000000000000000b000000000000000000000000000500030006000038a6d7a61f7ff0ad00", @ANYRES32=0x0, @ANYBLOB="0800015c", @ANYRES32=0x0, @ANYRES8=r10, @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="3801028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYRESDEC=r7, @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7800028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400040000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0400028008000100", @ANYRES32=0x0, @ANYBLOB="8400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400ffffff7f08000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r1, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x65c}, 0x1, 0x0, 0x0, 0x8000}, 0x20048011) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840), 0x801, 0x0) 1.529257181s ago: executing program 4 (id=6141): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000005780)=@base={0x5, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_HASH_MODULUS={0x8}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x81}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x8c}, 0x1, 0x0, 0x0, 0x14004015}, 0x24000040) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x40400d4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f80), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001080)={'syzkaller1\x00', 0xc201}) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f00000010c0), 0x4) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000001100)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000001140)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000047300fe88a43de1a400000000000000027d01ff020000000000000000000000000001"], 0xfdef) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050029bd7000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="080005000b000000050053"], 0x2c}, 0x1, 0x0, 0x0, 0x400c000}, 0x200000d0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="3a010000000000027800000000fc4b5195749e51221fd4253aafb0b5414117138dc9ca23c39469ba905d9d0b3f779d0b7bb96e06000000258d4478cc85f550fef9bd92135d48a79ac45b2f8a97b624c8d4e5e3865cc2400fcccf3bfcb58dd94efdc1a56e78707c436762521eec7d630fbd30cda56907d330e89e4e6b3ce6f820b68a71b1ebf87db52d1b4c179f8769bd19bd4f26d4cb7bfef78571f134e246c7198d30ba674158ab77f08d2b", @ANYRES8=r0, @ANYRES32=r0], &(0x7f0000005940)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000f80)=ANY=[], 0x2adc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000fc0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000001000)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c881}, 0x40014) sendmsg$NFT_BATCH(r11, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000001180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4050) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005980)={r9, 0x0, 0xe, 0x0, &(0x7f0000005a00)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$XFS_IOC_FD_TO_HANDLE(r9, 0xc038586a, &(0x7f00000006c0)={r2, &(0x7f00000005c0)='GPL\x00', 0x50400, &(0x7f0000000600)={@align=0x8, {0x1, 0x8, 0x7, 0x9}}, 0x4ac, &(0x7f0000000640)={@_ha_fsid}, &(0x7f0000000680)=0x8001}) recvmsg$can_raw(r12, &(0x7f0000000cc0)={&(0x7f0000000700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000780)=""/181, 0xb5}, {&(0x7f0000000840)=""/141, 0x8d}, {&(0x7f0000000900)=""/73, 0x49}, {&(0x7f0000000980)=""/186, 0xba}, {&(0x7f0000000a40)=""/242, 0xf2}], 0x5, &(0x7f0000000bc0)=""/196, 0xc4}, 0x40000060) 1.528799192s ago: executing program 1 (id=6142): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) pipe(0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000006c0)=ANY=[], 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000801) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x6, &(0x7f0000000040)=0x6, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x8f5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x8, 0x1ff, 0x8, 0x2, 0x5, 0x7c099268, 0x80000000, 0x3bb}}}}]}, 0x96}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000003c0)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000440)="05031c00d3fc142efd004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000480)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.336303028s ago: executing program 2 (id=6143): unshare(0x8040480) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="06000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000d00000005000700120000000500170002000000060008000000000006000a00ffff0000"], 0x34}, 0x1, 0x0, 0x0, 0x18001}, 0x48004) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000480)='GPL\x00'}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r4, @ANYBLOB="0100000002"], 0x40) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x40) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x6, 0x578d2b3c232dfacf}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="6bbb5ea8"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newtaction={0x78, 0x30, 0x53b, 0x0, 0x25dfdbfc, {0x9}, [{0x64, 0x1, [@m_sample={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x6, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9c}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000810}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7, {0x0, 0x0, 0x3f}}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x3, &(0x7f0000000b00)=""/166, &(0x7f0000000bc0)=0xa6) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), 0xffffffffffffffff) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c40), r8) sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000000c80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000d40)={0x30, r12, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x13, @l2={'eth', 0x3a, 'pim6reg1\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x10000000) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r10, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000", @ANYRES16=r11, @ANYBLOB="ad4300000000000000000f"], 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r5) 961.920876ms ago: executing program 3 (id=6145): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='GPL\x00', 0xb, 0x100a, &(0x7f0000000ac0)=""/4106, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value=0x29f}, 0x94) 941.396714ms ago: executing program 1 (id=6146): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000000010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000000000000000900000000000000000000000000000005000000000000000000000000000000000000000000330000000000000000000000000000000000040800000000000000000000000000000002000000000000010001000000000084010500ac1414aa00000000000000000000000000000000330000000000000064010100000000000000000000000000ff340000000000000000000000000000402000007f000001000000000000000000000000000020003c00000002000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000e00000010000000000000000000000000000000000000000000000000000000000000000ac1414430000000000000000000002000000000033"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 840.116069ms ago: executing program 4 (id=6147): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x10, 0x20, 0xf6000, 0x90ff, {{0x15, 0x4, 0x0, 0x5, 0x54, 0x68, 0x0, 0x1, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x31}, {[@timestamp_prespec={0x44, 0x24, 0x95, 0x3, 0x7, [{@remote, 0x7fff}, {@multicast1, 0x7}, {@local, 0x5}, {@broadcast}]}, @ssrr={0x89, 0x1b, 0xc4, [@multicast1, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0x3c}, @empty, @multicast2]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x5, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb01, 0x0, 0x0, 0x0, 0x1000000}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xb12}]}, &(0x7f00000002c0)='GPL\x00', 0x2, 0xb1, &(0x7f0000000300)=""/177, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000911187000000000095"], &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', r0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff4}, 0x94) 600.08132ms ago: executing program 2 (id=6148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000200)={0x2, 0xffffffffffffffff, 0x80000}, &(0x7f00000003c0)=0xc) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000400)={0x1, 0x7fffffff}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000480)=@assoc_value={r2, 0x6d}, 0x8) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @broadcast}) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB='\b\x00\b'], 0xfce) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x5c234f07698c1413}]}}}, {0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x401}]}}}]}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xf0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 571.300322ms ago: executing program 1 (id=6149): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x1c, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1808000000000000000000000a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000045090200000300006e00fcff00000000b7020000000000007b9af0ff00000000c509feff00000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f2ff76000000bf9820000011000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 570.827858ms ago: executing program 3 (id=6150): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004c00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000004c40)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000004c80)={0xa, 0x10, &(0x7f0000004d40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230050", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000004dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 549.827787ms ago: executing program 4 (id=6151): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000001ac0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r1, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe}]}, 0x1c}}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x29, 0x6, 0x0) r4 = epoll_create1(0x80000) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000001b80)=@assoc_value={0x0}, &(0x7f0000001bc0)=0x4) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000001c00)={0x0, 0x1c, &(0x7f0000001c40)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}]}, &(0x7f0000001c80)=0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000001cc0)={r7, 0x1}, 0x8) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f00000000c0)={0x2000a210}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x1f, 0x6, 0x450, 0x0, 0x1f0, 0x288, 0x320, 0x3b8, 0x158, 0x1f0, 0x288, 0x320, 0x3b8, 0x6, 0x0, {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x80, 'kmp\x00', 'abc\x00', 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4b0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r9, 0x112, 0xa, &(0x7f0000001b00)=0x2, &(0x7f0000001b40)=0x4) splice(r2, &(0x7f0000000000)=0x4, r2, &(0x7f0000000040), 0x4, 0x2) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x40241, 0x0) r11 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r11, &(0x7f0000000080)=[{{&(0x7f0000001d80)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000001dc0)=[{&(0x7f0000001e00)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xc, &(0x7f0000001e40)=@assoc_value={0x0}, &(0x7f0000001e80)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r11, 0x84, 0x76, &(0x7f0000001ec0)={r12, 0x6}, 0x8) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000001d00)={{0x2, 0x4e21, @rand_addr=0x64010101}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x2, {0x2, 0x4e23, @loopback}, 'vcan0\x00'}) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000a40)={'bridge_slave_1\x00', 0x10}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000340)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r13 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000a80)={'syzkaller1\x00', @broadcast}) write$tun(r10, &(0x7f0000000ac0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x17}}, {0x4e24, 0x4e20, 0xfac, 0x0, @gue={{0x2, 0x0, 0x1, 0xa, 0x100, @val=0x80}, "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"}}}}, 0xfce) 481.861446ms ago: executing program 1 (id=6152): r0 = socket$kcm(0x29, 0x5, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={r1, r2/1000+10000}, 0x41) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xf3e, 0x0) 481.046934ms ago: executing program 3 (id=6153): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 297.504988ms ago: executing program 3 (id=6154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x6000, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 249.071312ms ago: executing program 3 (id=6155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40811}, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000440)='GPL\x00', 0xc}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_ext={0x1c, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000008000000000000fbffffff852000000100030095"], &(0x7f0000000580)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffff}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xfc, 0x380000, @empty, 0x1b}, 0x1c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) socket(0x21, 0x6, 0x7fff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x49daf9077688ab8c) 171.857972ms ago: executing program 3 (id=6156): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x38, r2, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r8, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000000700000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000001214010028bd7000fcdbdf250800", @ANYRES16=r9], 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000054) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1, 0x8}, {0x6, 0x10}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 0s ago: executing program 2 (id=6157): ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000080)={{}, 0x0, 0x1c, @inherit={0x60, &(0x7f0000000000)={0x0, 0x3, 0x1, 0xe793, {0x0, 0x5, 0x8, 0x157, 0xf}, [0xb, 0x100000001, 0x1]}}, @name="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"}) r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001080)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x4, 0x8000, 0xd, 0x607, 0x4, 0x6}, {0xfff, 0x1, 0x6, 0x3, 0x8, 0xcc9c}], ['\x00', '\x00', '\x00', '\x00']}) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x50, 0x140b, 0x8, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008891}, 0x80) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000001380)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000001440)={{r0}, r1, 0x2, @inherit={0x58, &(0x7f00000013c0)={0x0, 0x2, 0x4e23a7a7, 0xffff, {0x10, 0xb93, 0x4944, 0x0, 0x32}, [0x401, 0x8]}}, @devid}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002480), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000002540)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x28, r3, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f7, 0xc}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008810}, 0x40000) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000025c0), r2) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000002680)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x1c, r4, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x28000001) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f00000027c0)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002780)={&(0x7f0000002700)={0x80, r3, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7}, @NL80211_ATTR_IE={0x59, 0x2a, [@preq={0x82, 0x36, {{0x1, 0x0, 0x1, 0x0, 0x1}, 0x6, 0x9, 0xd0, @broadcast, 0x7, @value=@device_b, 0xaf, 0xc51, 0x2, [{{0x1}, @device_a, 0x91a}, {{}, @device_a, 0x4}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xfe, 0x24, 0x7}}, @rann={0x7e, 0x15, {{0x0, 0x7}, 0x6, 0xb2, @device_b, 0x9f, 0x7, 0x9}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f0000002900)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002840)={0x5c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_COMPAT_NAME={0xe, 0x1, 'v--.&\\:(:\x00'}, @NFTA_COMPAT_NAME={0xc, 0x1, 'nl80211\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0xc, 0x1, 'nl80211\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}, 0x5c}}, 0x20000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002980), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000029c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000002b40)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a00)={0xd0, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xb, 0x53}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20}, 0x81) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000002b80), &(0x7f0000002bc0)=0x30) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000002c00)={0x0, 0x5, 0x0, [0x1ff, 0x2, 0x1ff, 0x100, 0x5], [0x95, 0x100, 0x2, 0x7, 0x1, 0x983, 0x101, 0x10000, 0x3, 0x4, 0x5, 0x991c, 0x5, 0x7, 0x6, 0x5, 0x6, 0x7fffffffffffffff, 0x0, 0xf795, 0x9, 0x0, 0x6, 0x6, 0x1000, 0x10000, 0x2, 0xb21, 0x100, 0x6, 0xffffffffffffffff, 0x80000001, 0x4, 0x8, 0x9, 0x5, 0x1, 0xc4, 0x7, 0x80, 0x10001, 0x1, 0x6, 0x8, 0x9, 0x2, 0xd40, 0xfffffffffffffffd, 0x0, 0x8000, 0x9, 0x3, 0x5, 0x3, 0x7fffffffffffffff, 0xe74, 0x80000001, 0x2, 0xfff, 0xfffffffffffffff7, 0x1, 0x9, 0x1, 0x9, 0x8, 0x1, 0xff, 0x6, 0x4000, 0x40000, 0x8, 0x6, 0x5, 0x4, 0x6, 0x4, 0xb4e3, 0x1, 0xc, 0x6, 0x0, 0x7, 0x6, 0xfffffffffffffdf1, 0xbb6f, 0x0, 0x8, 0x4, 0x12, 0x100000000, 0xee88, 0x4, 0x6, 0xe4b4, 0xc, 0x3, 0x9, 0x6, 0x0, 0x5, 0x8, 0x1, 0x4, 0x200, 0x8, 0x9, 0xfffffffffffff81a, 0x40, 0x9bff000000000000, 0xe, 0x921, 0x2, 0x5, 0x5, 0x3ff, 0x9, 0x800, 0xff, 0x14, 0x1, 0x6]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000003040)={{}, 0x0, 0x2, @unused=[0x5, 0x2, 0x81, 0x157], @devid=r8}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000004040)={'veth1\x00', {0x2, 0x0, @loopback}}) r9 = socket$vsock_seqpacket(0x28, 0x5, 0x0) r10 = accept4(r9, &(0x7f0000004080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000004100)=0x80, 0x800) sendmsg$NFT_BATCH(r10, &(0x7f0000007b40)={&(0x7f0000004140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000007b00)={&(0x7f0000004180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWFLOWTABLE={0x50, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x30, 0x2, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x1101, 0x0, 0x0, {0xa}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_DELOBJ={0x44, 0x14, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x35ec, 0xc, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x19c, 0x3, 0x0, 0x1, [{0x168, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x158, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x75, 0x1, "7bdc4a576f4253098da1976c1353164d4d5682c70d75478d20090388dea7e9bcea9fd2b870aac1792e9e762bb823e0d51e87013303c120245b05e063fca63289f66e6a57646747adc868f9dbf88e719a514b5fad8fea498de661fb02111c7c5028db54dab5233384e35d295389a2547189"}, @NFTA_DATA_VALUE={0x3e, 0x1, "19ed8155a245fc2328f411c7d236f4ce13c0a7e68a39e2d3a52f043389bc3ea1ad52614f6a42b621873c243c65994428eca8c3085b989ba9efe3"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2ed8, 0x3, 0x0, 0x1, [{0x14bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x115c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xda, 0x1, "6383307b696b3a4dd4a326808e4b6ba2c5b044df19222f06e5d59edb60306e1ff2134e444e240eb7c223d44a744a977d23457c6377d6f894c81ecaac10866ae494ec62b701042e92e9c6249eae45d8f22d180cd73745d74d336ee1b2fb8e31bcacfa8535810ccccce613e2679e710ed82c988c7ddd531411072e2ffa07063163108ade9d11567fc709e4eaddcb1514f2a4ab1087e5d3ba1d08f68a438a89679cad2526b353f4d1a7204580b5bc5cc8addcf36322e93c1cb1ab6643543a484bc31eae17c999ace385871ec9cc62b0806cfaf08735e6f5"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_USERDATA={0xe7, 0x6, 0x1, 0x0, "55cd84c5e92506e446ecc1eb8371fdad1281c32b926e6eaed9bec350c9caa7ab92a98ece4cb0b4be70619e8c94d5246c680f09d3a3fda667d81b99d996c54a3a90fd6909f73af0aa5937c861364cbbf9f90c294a5bd0125327a748a5afd1b7228cb336417e08b8fe8f17b13841000fc0eeca0d7243728acc4ea662e1f9825b104b3ef0c7ff924e30931bc3c6b96fcaf3e5d4cb701f8af39878c1d7dda235a0b006798728d70164ac319132d83431c2ad32314491f3a612072b8eda7cd54d97552f528b0bc2d78d05917f255c67a43f2e67da3b800a31bf29aa8a7e5d67edfcd7d76800"}, @NFTA_SET_ELEM_EXPRESSIONS={0x158, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x134, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x124, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x10, 0x1, 'TCPOPTSTRIP\x00'}, @NFTA_TARGET_INFO={0xd5, 0x3, "b7f6b271c1512689c2a341454d97bbef68c06c58bdb8f5d0588c1c304797d3fec7bd6a781eb1f61fd5ff5a1030f74e996380645bc15c2c206e7b17716b17806229394fe788e0e9a09610c0edcce8041d5dc8160e433eefaa8a7f0767503e4c8b9dc5190066d83372c67c76f4afefc3904fc40a55ab2f37b09b9b4682456621f6760865141b6a2f69430f411c3197ce2687f45edcceddffa2f5c27e354062b44d72f7cca5457aa4313a4e268eeeada24fd612acfd79eb0f609fe66af859f230e5f50d9c5213e7a95147c19353d3e8e5f6db"}, @NFTA_TARGET_INFO={0x12, 0x3, "a8a2e47253289c91138340674f20"}, @NFTA_TARGET_NAME={0xb, 0x1, 'TCPMSS\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_KEY_END={0x94, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x41, 0x1, "a980f4712c0cbdcec2ed1fd1c40d6a029d841e59764e6f19d531df8746512652c10333579bf15fd64bd1abb373570e44e97fb11cb2cfc5095abf9d128a"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffa}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_USERDATA={0x3c, 0x6, 0x1, 0x0, "ed40eba1aecf7a86bc1faca0b0e8f2701e84073344df39542ab08a1a968b93ae8e448f100c4f15048601d0c2d631729894b2544c512e17df"}, @NFTA_SET_ELEM_EXPR={0x40, 0x7, 0x0, 0x1, @target={{0xb}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_INFO={0x14, 0x3, "3077edec2d3e186f7ec80ace9c2300d3"}, @NFTA_TARGET_NAME={0xf, 0x1, 'MASQUERADE\x00'}]}}}]}, {0x194, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x190, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x7c, 0x1, "3600d9da9adf1b824cda00585030733e8589dc23e9093fe51665ebd596edb8b76195cb09c7a60157895227065b103c8503d169f4a468f5b8c45002bae586625aa2d33305407a76324c6fe62a849333fb4cbcb461f7eab63c0a1b25f1863df552bfeddd1622a815fd0eda4ded4b4385fc6aecf9d7110ff567"}, @NFTA_DATA_VALUE={0xd6, 0x1, "8b8455663a4e43baa3d6b71338e38e9b78bc068dd0198431884fa9c5d57231bfde4dfff006c34a1f068e4cf8dac834aec191eb5764bee55bd12a1b8b3fd333f62d7ff42f8064a63a26f08bb9886a3fad5e8df19b49d87bd1b7267830861585206d749f4f791272e6ba6bee3fcc26c45c236e6edfa85e747b53421c2c976c1f81ee066b3b9ebbe16de3bec125cf0bcf21d5fc6ca82ce59868a208a11e9e0dc353cdf75cdeff2b9202de71c59eab3dfce8afbceab831bd689df2d2023cc57f15a0fabc36208439b9adc3b556d7dba31a2e76cb"}]}]}, {0x2e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @queue={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xb}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x1e0, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x114, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x108, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x1c, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CMP_DATA={0xd0, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8d, 0x1, "d9c66b4a7da48c7dad1ecb9b652cb953037492ec36ea76fa987c267347bda9264b4d82f5bb5e987a82d93ba0ec3d911909c598750027fd1584d9038dcf54aafd87712e02444315af07fa3b827d4e9a7b6aeceb83a9e183a57ae600f4d379fa7a652a31d2a32c9fc8ea0fdb2ee9bbbecf96a6accb39594033d0ccf4793ddf3b47b6f06d4e66f92b467c"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x20, 0x1, "a3d2c7f59ed4496922a8eda9709956e3d391840260372ce17ba8998f"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4}}}, {0x60, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xf6e}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0xa2, 0x6, 0x1, 0x0, "40997b696c956d715f0e0daca8d000fdf58adfa5921355f71ef2a9d5d86d12184ba28e15ad4c4c4e918b2e24ed2df4cf2492c234076f4d3a26d9efe49ceb6f9fe2909d58629f9dc404ee85c561c92c322047fc926e32459bf3899311c1e5739487dc08cb991b5b459e74ae203aa458d2fa6f04e88af160dc32fe51f8116c95f248282dcb007195354d2ab01e5153c3f3dc8717488d7430a02ef1b99d1938"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x100c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1008, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "c14b7af7cc03fb74ab85d038b2b75bdd7f60f8a302fe13ea04b652717e268c70d15e96def6736db291d6478e2308d4621b340e4ea609f7166b31c590b5a202ee7b1e304be93567e5c9eb6151cc09d991e6e849bc3d8e0e93a53e08147cf5337682d9663d66c2482a0044b0918f634193296070aa4369a0fcae208b182ebecb54d5e490bfe9995df6c7893442c963cdd994a08fb3e7f1f0dda23f396b9fdc265960053b2253cfcf92f939e8825470e4f016775e8beeab7fba897c945ad12d23c83a2beacf10efa6ce9548403cca0d4fd62373a8d0f0c1f82be90f821205e99813628ac2a86efaf196c32d7d37da2d6416e3c140bc7340ec3648521e181cb8473f53df4be3fa0dd4cc86a42e0470c25e94181257c13e6b26667c0c1c0f7ef6b4398de533b5c49f6f4714d082df474dbfc98d7db656dce992d5d9583298d012b4579e86f8837b08710caacb1c16858574ceb013d0e366dbd5bab00b9dd671d1dc7a044bdd7213bacd862a5b73c7ed1fc50020d50d7a213f8db32711c22ce84460aa0611dac04d56603fd508ebb72084bdc311d8111cff8315c7625df7a6a1d871798264a08da871d09570b694318a9185fc32cd18536df65ee44046853614e09f09de436c2eaf806db4c1f8c9cf81aa1c0864269b8ab2a18cff3035e50441b9921437ed9fdbf137bd8a991b551e068e7da9d548fe57304b02bd2fdf88c2d64edc8450871a12b6e245d4c03ab2fb4a1b0a3f50c0753d2b223a9fccf83963529a727de56cd54a9dc6826ff3f13dbc3e6fb05152c6b9d7c387d117c2eb728362e188e77ae713bf8efbdeeba20a3e2c908535735187c2ba07b57dc238fac8eae7d0c5351a2b0b9de76150803f8044508eccaf5cdbfceedf7126a4d23c7ccdf1ee7990975fb7b404ed8ff21e896ea0e535bca77bdf145f81c9446ccb719a99a159237239e24223fb526668deb2c3aec3af7b695761cb21de1cb60576d479ca1127be0708d6980b7e16b6205f28f0d7149a5573c8694fedaf98507d1cd44c10f88d4dfef2edf4e68524109753886577af680e9326b5c7a186cce11560cad387f5fa2de8ddaf106b5127ffddfcf61761dc32ba3ff2fcaf1308be369dce50559584286ee3456b3b8f852cd1f1d0e70c350470a27096f08e3dc60c95f16b7f750342a6d68213dc156f28d1b41d94453f224db0c6f86ba9baa387007a31263dc1225be5d7c488529c6abcc7db82036666ff38ac4564de4871ec49080dc7cd8d5c90c24643063c410eb2b37ee06eb8a2be5c143fae431d14160d90ee8064cb77bc0770f8ea144602d798db893b5117978db11f26cef2234cb3268ad6272119ea4f9a20948cf56da33e3e3599ea3d2fd14740b730edbf28dee4122cbda3694771eb1dc059fa007ada440f3b05f88f5224c003317c4b1010cbfe11e50839d7f9b0800b1987d987158b565449f89d7785165e051286802a1babc764d94786e41e427c4e75bcd2c41e3568ddc2892bea5ec61a24162e4577476c07c54226b9d02205cd1076bd02b7a8848f692efeca208a87d5930ad12380585bda6c9f73d4714d74cd02f99b8d4b48f3c3cc5a69454ef261f0bc6d76ef171448c8da95df027b4efc9fc951d31fc2494a1dbc8a0f8b7dbbbecb18cf31f7945902fbe6763b50f831a31541bef6c795bd0428d69c8ccc6b07d6b6e897f62d5d66cdc492a09106fe89115f7798efec030d4e57500deb26a8619a2ea028ed44e8d06a921eaf5c3dbc79ab9f382e31c0841fdf92e800bbb0c2f3b611d1537d0076df8f39c5d97f72c400edbd625d55ef85f353eff9644c711889bd5f43bb95f031e9e0ac357100fd134bffe16f2dd18e8800b4b6457a8f68e50c0e1a90e8ca309b2e6d231776130647bfabd712b2632d38643c528ce952be0c59887d7c788451296c7025163510132bea5e0fca8e37b9012f69c62b939e51d06864d6a935b3db7f47f806cc8b9007139f47f675e5dc5a34834fd84d0767d1d2635b31a33af343b5b2d888e4c92000f7fc31c20dbfa6b40a716f7223b72b58e53d71c663f285ee333f78a8afd616bdf3a9c9f911ce6ebbb6b00338815a7b130a64ef109724de53cb4b7e3ba1591bb2f435bd2bf0e76bf38129df1d469d90caf65f3707b478dc74de9835ed22d680207b39afbd81c93d914678b728154e14d0895b8e9fdc882b4812d1a67979cf8b6e8a03d9587fd8478b5ed4281ee2ce5b3d2ce4923f98a01a90b767e4c7e3031ef8b056f82cdaeae3cbaa75727c5e1d6fa2586c80af098ffe743e03624e38952329b8bdd9949703520c66b4c2c56f0ed2889941496322500e61d5acf6cd9f7319826f13e4b34b660778f9b5b0d6c956b67b66daba6c0ca42b53a1a18a151a74c037f3d7306ca7613daaec394241b6e293408b7fd1c5ccdfe3260c664bdc11968c9da6590b73bffe7fd13726034502191c65b0549a866688bd86cfff78ddce615cf7610604b9626a43a19d15693bc5b0e4986eb200d6fa21de004d8424c59381ed89fc9a7579c6aa3f7232e3c10b89aea3ec2852ef985578f69af8143d4ac8a655125a9bbb0637cc752f556029f78764f633cf253179806c1c305cc96746ce3e0c18b7d884cb6ec9619faf96f9cdc79eb3e0eb6667ca7f57ea59ab3aaf3755de8f33a3462ae20d5e7e836792f35cb284063cb3751c1d4f2cf483f54761f736700ce6d39822b891f3df976289633c482fdbff8f7e2d759b1697a2a666d8c84cdc5cfe3b11b1cc1e70d163b8def317fe6d32cc917b54ace42cb266175d5f5977c7f6be2bea8e9b540399e455752d766fb0e85d050a2fb4a873daff19302ccfd093202f04f84a106b43e2f2091fd7c6e435322f5abc37a8f356aef853759e4e04e5b1dc959f740e95a0d6e971bcf6487dbedad2c76d60d86b4b9972b2aa8b70e2a06c9696f14b0166c433ad4bfb4dbea444b95f7749ac532b1620407ad39bca50a317ea698d502260ec609e593be7ade35e090277efe038444b3e3f38e5841ca448bf2f1a9b24e993bde931d26262c4856aae198f32e5066b38a690540e0b6c2c3ef2913f8dce9cf597b753571d6643c691ae39cb66d8bb59ac8396fe4650463f67288b5588ab075f7fe1421818e337e5bc7fb56bbbc1ba5b1ce410671a2c2bac2297ea8a6b0febb03738191ad922cf684a4f8f00744db0ec62656e914b43cdea89335870eabe7b1bafebd3b4c906f526870f860abe6457b4979684939435f23aa56d26068a28df0930019b3296b7553098263d5b666540ed79c6e24fbd9807df095b802bd2e120d7eb1dd198b5f08e89fe051deb3177b289244a03acc3d81b1f013b1a667b020ebe6eb7bd56e40f617b353c859d69644a443fedad227e017b2ed0e7059ced68a7e283be7122f9f00ecb4735e7820a3479618a57e1450fad2a6ada7d09b44a391dd3e067fbf07e0693d12271c2b671064e0812c8141dbf643481d2a965124f324685ba4b332df81418e5f34814f2bd522a5f4ad88c7cc74f381575ef22fc959dce19da9f4ca25a77dfb0b35e4a60a7885f18a4ba2e607bd1583f74302328232ddfa3cbfac7f7f4878bfcc589c3d69e5f5991b252913a8d9153d283864a98bb8b82c886fa4f6287ab33606c72ffa25b370d0bbc9618f892ef2f1c26575127ea02b944865d1c587d3408b8c766618b5a878994b1ea3601c585c021a92e0a153641e3f56b1754228489bd51513096d79e23f6656c670b33f43214472d11d1251177faeb1a285f6a18c67e3a08a2af73fdc6d4f37cf6701bae69d2ae38decbd8cd0b9a3e9437a3dc93cd526e233af452609d6433f320e2cf8c495637e80ddb500693673b69b0214f046c47938ad42154f2877692c3f98318b114b860a42362af17a7e6e8487babefde8cd4a2c48e7f55e19c0907c06af45baec7a31da3459ed72e437df7cff8124cc7bf97eaedadfb8a00de868b2762f80e483bc7f22451df4b81a5bfd873f46baa1dc4760f5139f1065976e79fac96626a8fb25855f756fc6ab247e74444d5b1f21b6157796bb657c6759aee1caaf4ef689b4a1e92eb1fd74b49d6a2397f859fff07bbab47303038c9798df57a8cefaae85776c362bf783720007e2d2666089aa1eb4963ac6d6b6c378b526573b2fc781c0320a5889688ce81541e9dbf104d8f250b3cf3d1b455cafd507f94bf8897e467b5aeed53aa3ea170556f5bd3eab176c6dfeec58b736eaa44b451d7a72917d2a0517f9a187b8f710fbd996afa51341c7d08bfdf00968ba56ce39109713f2ac1ba9c09f6af20cd42c98efe6fe96ebc5b73614299c68f65fc0fde7d4c8fbfe415d1b0fb40699452c04bbc476440d65a8ff0226020ba3a38449c9eac0509b1007132f956daecfe743586a32890c13ef939bde16e620cb442b6a4f2115f8cff73362dc473a0ccaa8fde7bf3543eba1672ece3ef2746e41baef675aba367558c11c02c915a8d2ecd7bc8f454fc557c75db5232948bd730d4be1a93580e89eabd7e012c911a658a03bf92563a4497ebd0ce54f5500cd86deff7132908ddb24fa9464f54abcc5e9cffbe6a003f337500d6dcba68f073003f8440163f944bd4c83af5e46bf9f335f29d4594bcbcae3cf1cf8882ea67cfbaa3ba2a026ed5918ce6f0c150cbe6db6e18de626472787ecf9ea9e3075488ef781ae91420a367f3316209518be8bcb87982d36ab603a346b8b63fe1341a3df88fca3eb5a7b2d233da273a5a724005dac1c4de9de85c4484944e845cf04fbfcef99e7a7ec91622ac2f502c3355e785848b06525219e5e76f092f8411bffdec5b5e8e7aa619df5a79df661c0f80351fb71a6b36fafa771b6a7cdb49f7bbdef10869de68bf81226b3c9b0212d745e1e4ede1ce87d128ccda3f52cec06f701c8ee894d1405b8508f1286041e0bf36f0406f9ec38cc6435dffaa1632d54846560f56138ecc3787e38e35ad02f081c412dfb4d5bfb7bc6116bdc2723ad1d596d0b45da0a35e097d1f0e2122efee48a5850b0c58502c89ab568d73509c347fe75c07d9ac236da85fb5f20c3d58368d4abc03764222598b847612c3c61c1380186bd68144edf07eae6b547aede2cd1181859ad8100a5aafc5644c3c2e2b5c57d77b00e5da5750830acced4df5d47846178d59b57d196bbc48581592969e0c88a6b72a1e4a1a6b4e62f86234fec9139ae370f92dc5f2e03af1d627bebab6c0ab00a2963f7255a47a97982420742ddcbb2ab534cbf468529d45244afbfedafc4c95274f47fa96103d751ade39cb5241f79c34902fb43e611fd6795c30e377b3cda326178653ba72823cee0067ffa3449575d7b19c85e109952bdcdfe4b123dd42b3599eb6e5aa7dd14fb92547ac30b9d20227ea1ae7a462f060b764a50df3bd433ef691e37a474840b2b3343fc2f9e383d492286576ace1d7a89ee8680d1434f1f53b2f03b5c7636fca19c2e78b0011f8eb115e0b74e132853a6b1a916cbc6b4ffce855547bcb355d1e9af5d9231eedad22be576ffdb9b9b5f6824bbdeb9eb7809aa07cd1d0672d8c60af4b47f5a0ef9870636fa3a01e842251053e1aeb3eaa47b4216988f804a888ecc30a01e5f41033ec057d570450f28dd7db1db96ff98acc0be9832d696ee71cb468d17a4c2a0d52341aabda4d4ce82a235d8ae769506400f48890efbd2ee57aff30f33c96ff863402c3de31f289b46dfa57597c42499aff7366df1b7beda18ab796187be6c4fa2324984680856c7ba69e29f978156d9f2aef90107fec28ffe8f951dfc5e7edb3f4337e6530a7060e8b9db15e4b71974229dae3e9"}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3c3}]}, {0x328, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_ELEM_USERDATA={0x62, 0x6, 0x1, 0x0, "8c3c805b0510d507f5ada4a855e1b4ab0d4576579ed4092a9804926a61196ae88f8815212c023d9d16bff429f2b202737312630821070347e4b491919d338da6802bfdb8502ccd4ef97a9352b46dec3900382c424be8aeedea58af54d3fc"}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_ELEM_KEY_END={0x1bc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x82, 0x1, "abd08865db30d8d0b3ba56a312c34b6609ef9a2f3e9f430767eb6ff5ece80794e9ebd03f59db726732900fb074420ab852509d9d4a12213d6da0cb865899bdccc45aff1274010c1962535895c316d89fa738ede868084d1522a27546c8b0d308e21223571aef6ea7065ce812690ac97fa48214b24668d942d6366f687561"}, @NFTA_DATA_VALUE={0xc, 0x1, "09f124177902d915"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x78, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}]}, {0xd0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_USERDATA={0xc0, 0x6, 0x1, 0x0, "8577ad9f5b74757da1503667d006d745744d391d716e9a5e094ae99636f4173ea2e2ec44e7274ae352e0d41549ff76c8477a46511c5d79196df60285706e49a6561c49028e47eb8ca31ba1c47aad4e6a4951b52bc8e8a6389337766ce55a44b6d8c0da38a6ec1ca8585f3cee3c594064a028a6f0f4c57a5c121f090b7243394d1dc72782ac004ef323d1522313953a8440d6c08e832ca224995d11a203dc7a97b9820223a476dd9ccc162f5e588cc0ed7d68de0514edccdac511c613"}]}, {0x18c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @tunnel={{0xb}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY_END={0x38, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x20, 0x1, "833319f4275951e5e8fa362a58bf54c357818a4d10cbbf74053e659c"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_DATA={0x20, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_KEY={0x108, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa9, 0x1, "89fa06d5fb4723ea7bb22313b07d0268f966bdfca21fecf796b227f5b91015b7cf1b9eeeac27ee673766b96bf3bc2b511c93b2055410a69a94bc0c81b2a538cccf420153479abf6a213284f1c73e2dfaacc8375965e7d11d4e0cbc4883b05f5b566e415b30db92444f8b52d913f0fc24625eac29cdb00e5ca80faa692194e84ef52abaf3eeddd2f0c9ac8b5b3282c74ee9650bbfa79cada24f4194c0c7b1be46fc2760f6b3"}, @NFTA_DATA_VALUE={0x58, 0x1, "5f9b20d6adce05c4e3b3bac17f44cb3dac79f48408627e1cbaa783d7f4367d1661161d2a39e15d01f5d24ad0b2338bdaf1034fbc9cc7f6de5772b1d556feba36f8cbf18d331bb01d842be53826b46d2ca76dd090"}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x55c, 0x3, 0x0, 0x1, [{0x20c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @connlimit={{0xe}, @void}}, @NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_KEY={0x74, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6f, 0x1, "d58e82490c4bc8d27450935cfa7f9a62c2f70ed57978b52ba83b18e85870909c4eb20cbf280c6902a8a7fb3380aa1a129a05f444507ff91d44b69a25191b0a1439316c33ab3850df397ea3c34d5274a10322226cbc892ba05b912f78d8bb155f7ef0179fae2d84a6dae424"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x150, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7d, 0x1, "b6a820d3033d2176ca7f2e3a8ff2414b92bfd66d10a503bd3f077cf093ff62fa21490bfad8bc64cbfc850d904ab42d1d22063348b2c6a2f4af1a9fe5c87cf07097cd598a17ae5e511dd7762d52db764380a88fa73eba3d722d4496d21a94521b17939ddb92d54ce36df457eaef08746eac68efe59de652e8c9"}, @NFTA_DATA_VALUE={0xcb, 0x1, "dc077fcf305faa314a7a954674c41712e68c9a2a98a21e8dffa9654282ee71ffb8a83c3f05aa224a0e445ab4a342eee49f937a1801d61f70a50fd2fb0e65f8d6a09712a94d2ceafe6095b1ec5f5489d1400a714ca0ead7276864a1fbcd31a8175ef80e35bf2fa41e62c1f76f9d9382bf727a8080b1750967ec5a7e52a31b7d4f346785793d8b3ae9de7d35aa3064d3eff50bfbf7ab26dd511173efe18ce7b8c0f25aee68e6187ac698a68efca7ab87ee3fcd1212b88534efe7924a6f729c0a5ccacbc45574dc73"}]}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x1ec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_DATA={0x118, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "00ec5ae4ea"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xb6, 0x1, "f882d2ec145cecd153f727ed29d7ce3b8d8612d909319b83578ae240ccba9742b3ddf577da5e5d2ba107e15dd4ba965a6aacdf00cfeaf722ef3ad9f18f292b28b2c1ba054394a81dd38d69338886ebf2500fc9328c719d15d0ef03264dd79c276947018b6d81dbb9e3fbc1eb45557deff90a452c63dfd116a1f0ac6e854f350b34935d118b53d404f13801202b208443049e4c0329573461738d6d2e935ce8a0c4f5fc9346da0a9167a775198e846038e71e"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xc4, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}]}}}, {0x48, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}, {0x44, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x89}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xf7}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x4}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x7}]}}}, {0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xb}]}}}]}]}, {0x160, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xc4, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0xb4, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xa4, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_FROM_DATA={0x1c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "ac1d074a6e3a1e81c4e80e9c52a67d6173"}]}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_RANGE_FROM_DATA={0x64, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}}}]}, @NFTA_SET_ELEM_USERDATA={0x7d, 0x6, 0x1, 0x0, "2ffcb28054e745e96b2fc39c99546d3ded78d586086eb87c59b32166a4db151c9d3831ae891b6be443b2f81198a430fca42f38cd07e3b7cc23886019b4f3cbad1583214330f2bddbd729916ad86c26cf0e5df67554347ba3ca551a55be490db1ea4d45c42f1c31259fa1300587b7ab7016488f10bf192de7e6"}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7f}]}]}]}, @NFT_MSG_NEWRULE={0xf0, 0x6, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_USERDATA={0xd1, 0x7, 0x1, 0x0, "072fe9735b0dbf3839cabf61f1ebbdcb8adacb5562c28d54375eada96190f2571d6f0fb0323dc7fb96432865d43a01ba81296d318a0a2720fb6b2615845050d8686885ddf611f632bd00fa1f3e6f19c40bd2edeee2321b8a73e26efe21adb14c08403292446d53d890accf2fea17f2f8f2634cf4e2bf40a93178ac18a287efee7dac86525afec46e7879fe9bf89d31809aee87901c2080287c60ebf4736e4d97d392c5daca513dbd2958918714a9a7540f9740500f1347042a4bf2b0157cccae2609567ef97390a1ae74063c91"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x15c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xf8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'syzkaller0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x396c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r11, &(0x7f0000007c40)={&(0x7f0000007b80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000007c00)={&(0x7f0000007bc0)={0x20, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x2}}}}, [""]}, 0x20}}, 0x0) r12 = accept$phonet_pipe(r11, 0x0, &(0x7f0000007c80)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r12, 0x50009418, &(0x7f0000007cc0)={{r10}, r1, 0x10, @unused=[0x3, 0x0, 0x4, 0x3], @subvolid}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000008e80)={{r5, &(0x7f0000008cc0)='\x00', 0x82000, &(0x7f0000008d00)={@align=0x53, {0xfffb, 0x8000, 0xfff, 0xfffffffffffffff2}}, 0xff, &(0x7f0000008d40), &(0x7f0000008d80)=0x4345}, {[0x3, 0xe, 0x0, 0x8]}, 0x200, 0xb1, &(0x7f0000008dc0)=""/177}) r14 = syz_genetlink_get_family_id$fou(&(0x7f0000008f40), r2) sendmsg$FOU_CMD_GET(r13, &(0x7f0000009000)={&(0x7f0000008f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000008fc0)={&(0x7f0000008f80)={0x1c, r14, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) kernel console output (not intermixed with test programs): 76524][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.976794][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.117151][T24312] 8021q: adding VLAN 0 to HW filter on device bond6 [ 549.354691][T24326] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4897'. [ 549.571452][T24336] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4898'. [ 549.571484][T24336] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4898'. [ 550.019294][T24348] IPVS: stopping master sync thread 24037 ... [ 550.160514][T24359] syzkaller1: entered promiscuous mode [ 550.160537][T24359] syzkaller1: entered allmulticast mode [ 550.384926][T24369] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4906'. [ 550.625274][T24382] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4909'. [ 550.626867][T24382] netlink: 'syz.2.4909': attribute type 2 has an invalid length. [ 550.811289][T24386] syzkaller0: entered promiscuous mode [ 550.811312][T24386] syzkaller0: entered allmulticast mode [ 551.070364][T24399] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4916'. [ 551.096501][T24401] xt_nfacct: accounting object `' does not exist [ 551.097631][T24402] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4915'. [ 551.112053][T24403] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4915'. [ 551.349363][T24405] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 551.437491][T24401] syzkaller1: entered promiscuous mode [ 551.437513][T24401] syzkaller1: entered allmulticast mode [ 551.561242][T24419] ip_tables: iptables: counters copy to user failed while replacing table [ 551.853528][T24420] syzkaller1: entered promiscuous mode [ 551.853551][T24420] syzkaller1: entered allmulticast mode [ 551.943407][T24436] netlink: 'syz.0.4921': attribute type 1 has an invalid length. [ 551.943448][T24436] nbd: illegal input index 393236 [ 551.981440][T24437] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 551.984388][T24436] IPVS: stopping backup sync thread 24437 ... [ 552.255563][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.329674][T24442] bond7: option xmit_hash_policy: invalid value (9) [ 552.333460][T24442] bond7 (unregistering): Released all slaves [ 552.830968][T24466] batman_adv: batadv0: Interface deactivated: syz_tun [ 552.837554][T24466] bridge0: port 5(ip6gretap0) entered disabled state [ 552.838145][T24466] bridge0: port 3(veth0) entered disabled state [ 552.838634][T24466] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.839012][T24466] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.930729][T24466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.933315][T24466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 552.964276][T24466] ipvtap0: left allmulticast mode [ 552.964294][T24466] veth0_vlan: left allmulticast mode [ 552.981188][T24466] tipc: Resetting bearer [ 552.981266][T24466] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 552.983263][T24466] syzkaller0: left promiscuous mode [ 552.983282][T24466] syzkaller0: left allmulticast mode [ 552.983886][T24466] gretap1: left allmulticast mode [ 552.984032][T24466] xfrm1: left promiscuous mode [ 552.984047][T24466] xfrm1: left allmulticast mode [ 553.030306][T24466] gre1: left promiscuous mode [ 553.031431][T24466] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 553.031679][T24466] ipvlan2: left allmulticast mode [ 553.031696][T24466] virt_wifi0: left allmulticast mode [ 553.052677][T24466] bridge2: left promiscuous mode [ 553.052690][T24466] bridge2: left allmulticast mode [ 553.093297][T24466] bond27: left promiscuous mode [ 553.093311][T24466] bond27: left allmulticast mode [ 553.256625][ T4337] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.256669][ T4337] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.256699][ T4337] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.256728][ T4337] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.318075][T24488] __nla_validate_parse: 8 callbacks suppressed [ 553.318092][T24488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4932'. [ 553.318109][T24488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4932'. [ 553.318123][T24488] netlink: 'syz.3.4932': attribute type 6 has an invalid length. [ 553.335683][T24496] IPVS: Error connecting to the multicast addr [ 553.448293][T24494] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4931'. [ 553.448318][T24494] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4931'. [ 553.489456][T24505] geneve3: entered promiscuous mode [ 553.507162][ T4337] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.507202][ T4337] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.507233][ T4337] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.507262][ T4337] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.582173][T24504] IPVS: length: 117 != 51800073432 [ 553.587961][T24504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4936'. [ 553.764220][T24518] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4937'. [ 554.029036][T24524] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4941'. [ 554.030267][T24524] net_ratelimit: 5 callbacks suppressed [ 554.030282][T24524] ip_tables: iptables: counters copy to user failed while replacing table [ 554.052071][T24522] wg2 speed is unknown, defaulting to 1000 [ 554.059608][T24522] lo speed is unknown, defaulting to 1000 [ 554.081082][T24524] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4941'. [ 554.095391][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.095724][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.096011][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.652355][T24540] macsec1: entered promiscuous mode [ 554.652382][T24540] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 554.652609][T24540] macsec1: entered allmulticast mode [ 554.652625][T24540] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 554.653645][T24540] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 554.937139][T24550] xt_check_table_hooks: 23 callbacks suppressed [ 554.937159][T24550] x_tables: duplicate underflow at hook 2 [ 554.958065][T24549] x_tables: duplicate underflow at hook 2 [ 555.708150][T24561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4949'. [ 555.885242][ T62] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.885284][ T62] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.885314][ T62] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.885367][ T62] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.225894][T24574] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4954'. [ 556.401210][T24585] bridge0: port 1(veth0) entered blocking state [ 556.402997][T24585] bridge0: port 1(veth0) entered disabled state [ 556.403155][T24585] veth0: entered allmulticast mode [ 556.405584][T24585] veth0: entered promiscuous mode [ 556.406515][T24585] bridge0: port 1(veth0) entered blocking state [ 556.406619][T24585] bridge0: port 1(veth0) entered forwarding state [ 556.755942][T24583] bridge0: port 1(veth0) entered disabled state [ 557.193752][T24583] bond0: left allmulticast mode [ 557.225310][ T7075] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.225355][ T7075] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.225386][ T7075] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.225418][ T7075] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.305366][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.305696][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.492364][T24600] wg2 speed is unknown, defaulting to 1000 [ 557.496577][T24600] lo speed is unknown, defaulting to 1000 [ 557.541592][T24619] team0: left allmulticast mode [ 557.541612][T24619] team_slave_0: left allmulticast mode [ 557.541627][T24619] team_slave_1: left allmulticast mode [ 557.541710][T24619] team0: left promiscuous mode [ 557.541723][T24619] team_slave_0: left promiscuous mode [ 557.546279][T24619] team_slave_1: left promiscuous mode [ 557.546964][T24619] bridge0: port 3(team0) entered disabled state [ 558.975368][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.975656][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.975922][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.408603][T24619] bond0: (slave batadv0): Releasing backup interface [ 560.424894][T24619] bridge_slave_0: left promiscuous mode [ 560.425714][T24619] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.440769][T24619] bond0: (slave bond_slave_0): Releasing backup interface [ 560.446015][T24619] bond0: (slave bond_slave_1): Releasing backup interface [ 560.467387][T24619] team0: Port device team_slave_0 removed [ 560.474533][T24619] team0: Port device team_slave_1 removed [ 560.477255][T24619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.477274][T24619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.482647][T24619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.482664][T24619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.495291][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.495575][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.495837][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.514094][T24619] bond1: (slave ip6gre1): Releasing backup interface [ 560.514115][T24619] ip6gre1: left promiscuous mode [ 560.541202][T24619] team0: Port device bridge4 removed [ 560.553787][T24619] bond3: (slave veth3): Releasing active interface [ 560.573386][T24619] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 560.573400][T24619] batman_adv: batadv0: Removing interface: ip6gretap1 [ 560.932216][T24644] syzkaller0: entered promiscuous mode [ 560.932238][T24644] syzkaller0: entered allmulticast mode [ 560.952626][T24667] sctp: [Deprecated]: syz.4.4974 (pid 24667) Use of int in max_burst socket option deprecated. [ 560.952626][T24667] Use struct sctp_assoc_value instead [ 561.272343][T24677] syzkaller0: entered promiscuous mode [ 561.272364][T24677] syzkaller0: entered allmulticast mode [ 561.353355][T24674] netlink: 'syz.4.4975': attribute type 16 has an invalid length. [ 561.622919][T24690] batman_adv: batadv0: Interface activated: syz_tun [ 561.634083][T24690] bridge0: port 5(ip6gretap0) entered blocking state [ 561.634210][T24690] bridge0: port 5(ip6gretap0) entered forwarding state [ 561.653025][T24690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.654623][T24690] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.673119][T24690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.255304][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.255571][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.255887][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.325684][T24690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.327997][T24690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.333817][T24690] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 562.333840][T24690] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 562.352343][T24690] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 562.450601][ T4418] bridge0: port 3(veth0) entered blocking state [ 562.450703][ T4418] bridge0: port 3(veth0) entered forwarding state [ 562.451933][ T4418] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.452066][ T4418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.454196][ T4418] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.454290][ T4418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.729703][T24711] netlink: 'syz.2.4985': attribute type 2 has an invalid length. [ 562.933958][T24715] __nla_validate_parse: 5 callbacks suppressed [ 562.933980][T24715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4985'. [ 562.999043][T24711] !: entered promiscuous mode [ 563.021777][T24715] !: left promiscuous mode [ 563.098647][T24711] netlink: 'syz.2.4985': attribute type 2 has an invalid length. [ 563.167903][T24711] !: entered promiscuous mode [ 563.274245][T24721] syzkaller0: entered promiscuous mode [ 563.274267][T24721] syzkaller0: entered allmulticast mode [ 563.297230][T24723] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4988'. [ 563.724452][T24740] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4994'. [ 563.835387][T24748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4996'. [ 564.269122][T24771] syzkaller0: entered promiscuous mode [ 564.269145][T24771] syzkaller0: entered allmulticast mode [ 564.366285][T24774] sctp: [Deprecated]: syz.1.5001 (pid 24774) Use of int in maxseg socket option. [ 564.366285][T24774] Use struct sctp_assoc_value instead [ 564.492523][T24779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5001'. [ 564.509480][T24774] ip_tables: iptables: counters copy to user failed while replacing table [ 564.512683][T24774] xt_CT: You must specify a L4 protocol and not use inversions on it [ 564.753470][T24786] nft_compat: unsupported protocol 1 [ 564.770027][T24786] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5006'. [ 564.975266][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.975570][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.060629][T24791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.128002][T24793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.262163][T24798] netlink: 'syz.0.5009': attribute type 29 has an invalid length. [ 565.288791][T24798] netlink: 'syz.0.5009': attribute type 29 has an invalid length. [ 565.535421][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.535675][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.535910][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.607145][T24845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5022'. [ 566.987265][T24868] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5028'. [ 567.061465][T24864] syzkaller0: entered promiscuous mode [ 567.061490][T24864] syzkaller0: entered allmulticast mode [ 567.734755][T24881] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5032'. [ 568.152427][T24890] netdevsim netdevsim2: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 568.178104][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.178383][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.178615][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.895629][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.895877][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.896141][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.330798][T24888] tc_dump_action: action bad kind [ 569.717376][T24917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5043'. [ 569.717397][T24917] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5043'. [ 569.849873][T24927] bridge1: left promiscuous mode [ 569.850116][T24927] bridge2: left promiscuous mode [ 569.850287][T24927] bridge3: left promiscuous mode [ 569.850434][T24927] bridge7: left promiscuous mode [ 569.850569][T24927] bond5: left promiscuous mode [ 569.850581][T24927] bond6: left promiscuous mode [ 569.889053][T24927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5047'. [ 569.890171][T24925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5047'. [ 570.049460][T24936] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING [ 570.052221][T24937] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING [ 570.142490][T24934] syzkaller0: entered promiscuous mode [ 570.142513][T24934] syzkaller0: entered allmulticast mode [ 570.689444][T24965] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5056'. [ 571.378491][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.378771][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.379012][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.962900][T25008] xt_CT: You must specify a L4 protocol and not use inversions on it [ 572.265266][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.265591][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.265880][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.042417][T25024] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5066'. [ 573.088063][T25030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5067'. [ 574.072062][T25068] xt_CT: You must specify a L4 protocol and not use inversions on it [ 574.130780][T25074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5079'. [ 574.170327][T25074] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 574.292601][T25075] syzkaller1: entered promiscuous mode [ 574.292625][T25075] syzkaller1: entered allmulticast mode [ 574.384628][T25085] syzkaller1: entered promiscuous mode [ 574.384649][T25085] syzkaller1: entered allmulticast mode [ 574.541637][T25093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5087'. [ 574.621387][T25101] netlink: 596 bytes leftover after parsing attributes in process `syz.3.5088'. [ 574.808805][T25107] netlink: 'syz.2.5090': attribute type 32 has an invalid length. [ 574.808825][T25107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5090'. [ 574.887284][T25107] bond7: option coupled_control: invalid value (10) [ 574.912458][T25107] bond7 (unregistering): Released all slaves [ 575.072073][T25113] xt_CT: You must specify a L4 protocol and not use inversions on it [ 575.278228][T25118] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5095'. [ 575.546976][T25137] netlink: 'syz.3.5098': attribute type 1 has an invalid length. [ 575.615212][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.615487][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.615756][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.666435][T25137] bond8: entered promiscuous mode [ 575.667772][T25137] 8021q: adding VLAN 0 to HW filter on device bond8 [ 575.882019][T25163] xt_CT: You must specify a L4 protocol and not use inversions on it [ 576.034324][T25161] syzkaller1: entered promiscuous mode [ 576.034339][T25161] syzkaller1: entered allmulticast mode [ 576.495328][ C1] net_ratelimit: 1 callbacks suppressed [ 576.495348][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.495672][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.495975][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.551476][T25193] ip6gretap0: entered promiscuous mode [ 576.620209][T25195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5117'. [ 576.754198][T25195] ip6gretap0 (unregistering): left promiscuous mode [ 577.075077][T25212] syzkaller1: entered allmulticast mode [ 577.094200][T25212] bond1: entered allmulticast mode [ 577.103637][T25211] bond1: left allmulticast mode [ 578.088072][T25239] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5135'. [ 578.088232][T25240] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5135'. [ 578.268575][T25254] lo: MTU not usable for tipc bearer [ 578.268641][T25254] tipc: Enabling of bearer rejected, failed to enable media [ 578.272488][T25254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5138'. [ 578.495226][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 578.601554][T25271] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5144'. [ 578.601773][T25270] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5144'. [ 578.804494][T25285] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5147'. [ 578.822322][T25285] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5147'. [ 578.824534][T25285] IPVS: set_ctl: invalid protocol: 163 0.0.0.0:19997 [ 578.895215][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.895430][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.895647][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.933073][T25289] syzkaller0: entered promiscuous mode [ 578.933095][T25289] syzkaller0: entered allmulticast mode [ 578.947983][T25289] 0: reclassify loop, rule prio 0, protocol 700 [ 578.949807][T25289] tc_dump_action: action bad kind [ 579.074106][T25292] syzkaller0: entered promiscuous mode [ 579.074128][T25292] syzkaller0: entered allmulticast mode [ 579.506094][T25322] syzkaller1: entered promiscuous mode [ 579.506117][T25322] syzkaller1: entered allmulticast mode [ 579.695357][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.695668][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.695935][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.392901][T25357] Cannot find del_set index 0 as target [ 580.393107][T25357] Cannot find del_set index 0 as target [ 580.393240][T25357] Cannot find del_set index 0 as target [ 580.393369][T25357] Cannot find del_set index 0 as target [ 580.393497][T25357] Cannot find del_set index 0 as target [ 580.393678][T25357] Cannot find del_set index 0 as target [ 580.393811][T25357] Cannot find del_set index 0 as target [ 580.393938][T25357] Cannot find del_set index 0 as target [ 580.394098][T25357] Cannot find del_set index 0 as target [ 580.394226][T25357] Cannot find del_set index 0 as target [ 580.550105][T25358] macsec1: entered promiscuous mode [ 580.550126][T25358] ip6gretap0: entered promiscuous mode [ 580.550546][T25358] macsec1: entered allmulticast mode [ 580.550560][T25358] ip6gretap0: entered allmulticast mode [ 580.587494][T25358] ip6gretap0: left allmulticast mode [ 580.587516][T25358] ip6gretap0: left promiscuous mode [ 580.779460][T25372] __nla_validate_parse: 8 callbacks suppressed [ 580.779479][T25372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5172'. [ 580.781576][T25372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5172'. [ 580.817999][T25372] IPv6: NLM_F_CREATE should be specified when creating new route [ 580.820117][T25372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5172'. [ 580.834069][T25372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5172'. [ 580.834356][T25372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5172'. [ 580.855761][ T62] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.855801][ T62] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.855830][ T62] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.855858][ T62] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.099511][T25388] netlink: 'syz.1.5178': attribute type 1 has an invalid length. [ 581.172251][T25388] bond8: entered promiscuous mode [ 581.172661][T25388] 8021q: adding VLAN 0 to HW filter on device bond8 [ 581.200235][T25384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5178'. [ 581.240394][T25384] bond8: (slave bridge8): making interface the new active one [ 581.240418][T25384] bridge8: entered promiscuous mode [ 581.241570][T25384] bond8: (slave bridge8): Enslaving as an active interface with an up link [ 581.404644][T25405] xt_CT: You must specify a L4 protocol and not use inversions on it [ 581.545870][T25407] netlink: 'syz.1.5185': attribute type 10 has an invalid length. [ 581.702475][T25417] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5190'. [ 581.764682][T25419] netlink: 'syz.4.5189': attribute type 1 has an invalid length. [ 581.839509][T25421] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5191'. [ 581.846503][T25421] netlink: 'syz.1.5191': attribute type 1 has an invalid length. [ 582.006878][T25433] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5196'. [ 582.006898][T25433] tc_dump_action: action bad kind [ 582.098553][T25439] xt_hashlimit: size too large, truncated to 1048576 [ 582.142582][T25440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 582.201150][T25443] x_tables: duplicate underflow at hook 2 [ 582.255685][ C0] net_ratelimit: 1 callbacks suppressed [ 582.255705][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.256039][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.256349][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.560119][T25458] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 582.560142][T25458] openvswitch: netlink: Message has 4 unknown bytes. [ 582.697732][T25468] ip_tables: iptables: counters copy to user failed while replacing table [ 583.113473][T25492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5218'. [ 583.280026][T25505] FAULT_INJECTION: forcing a failure. [ 583.280026][T25505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 583.280054][T25505] CPU: 1 UID: 0 PID: 25505 Comm: syz.0.5221 Not tainted syzkaller #0 PREEMPT(full) [ 583.280074][T25505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 583.280084][T25505] Call Trace: [ 583.280091][T25505] [ 583.280100][T25505] dump_stack_lvl+0xe8/0x150 [ 583.280133][T25505] should_fail_ex+0x3eb/0x540 [ 583.280161][T25505] _copy_from_user+0x2d/0xb0 [ 583.280185][T25505] ___sys_sendmsg+0x1c6/0x360 [ 583.280205][T25505] ? __lock_acquire+0x747/0x2de0 [ 583.280232][T25505] ? __pfx____sys_sendmsg+0x10/0x10 [ 583.280290][T25505] ? __fget_files+0x3a2/0x420 [ 583.280312][T25505] ? __fget_files+0x2a/0x420 [ 583.280344][T25505] __x64_sys_sendmsg+0x1b1/0x290 [ 583.280368][T25505] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 583.280410][T25505] do_syscall_64+0x166/0x520 [ 583.280432][T25505] ? trace_irq_disable+0x3b/0x140 [ 583.280455][T25505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.280473][T25505] ? clear_bhb_loop+0x70/0xc0 [ 583.280496][T25505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.280513][T25505] RIP: 0033:0x7f91b19a8f19 [ 583.280531][T25505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.280546][T25505] RSP: 002b:00007f91b278d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 583.280565][T25505] RAX: ffffffffffffffda RBX: 00007f91b1c26090 RCX: 00007f91b19a8f19 [ 583.280579][T25505] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 583.280591][T25505] RBP: 00007f91b278d090 R08: 0000000000000000 R09: 0000000000000000 [ 583.280602][T25505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.280612][T25505] R13: 00007f91b1c26128 R14: 00007f91b1c26090 R15: 00007ffc57178298 [ 583.280642][T25505] [ 584.794161][T25535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.815781][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.816104][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.816375][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.535346][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.821789][T25580] __nla_validate_parse: 2 callbacks suppressed [ 585.821809][T25580] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5242'. [ 585.821834][T25580] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5242'. [ 585.952767][T25586] netlink: 'syz.1.5244': attribute type 1 has an invalid length. [ 585.952788][T25586] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5244'. [ 586.561243][T25600] xt_CT: You must specify a L4 protocol and not use inversions on it [ 586.682269][T25602] netlink: 'syz.0.5247': attribute type 16 has an invalid length. [ 586.682290][T25602] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5247'. [ 587.017291][T25617] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5254'. [ 587.442919][T25638] net_ratelimit: 2 callbacks suppressed [ 587.442937][T25638] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 587.446714][T25638] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5259'. [ 588.013356][T25648] bridge11: entered promiscuous mode [ 588.013380][T25648] bridge11: entered allmulticast mode [ 588.015307][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.015585][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.345284][T25655] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5267'. [ 588.867248][T25670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5273'. [ 588.867283][T25670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5273'. [ 588.867598][T25670] 8021q: VLANs not supported on ip_vti0 [ 588.895342][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.895626][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.895914][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.053057][T25675] bridge7: entered promiscuous mode [ 589.053078][T25675] bridge7: entered allmulticast mode [ 589.207464][T25686] nbd: nbd2 already in use [ 589.207894][T25686] block nbd2: NBD_DISCONNECT [ 589.207935][T25686] block nbd2: Send disconnect failed -32 [ 589.207983][T25686] block nbd2: Send disconnect failed -32 [ 589.208009][T25686] block nbd2: shutting down sockets [ 589.263990][T25690] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5280'. [ 589.478857][ T6261] pim6reg99999999: left allmulticast mode [ 590.208021][ T6261] bond5 (unregistering): (slave bridge6): Releasing active interface [ 590.233253][ T6261] bond0 (unregistering): Released all slaves [ 590.241833][ T6261] bond1 (unregistering): Released all slaves [ 590.260801][ T6261] bond2 (unregistering): Released all slaves [ 590.306483][ T6261] bond3 (unregistering): Released all slaves [ 590.326093][ T6261] bond4 (unregistering): Released all slaves [ 590.340881][ T6261] bond5 (unregistering): Released all slaves [ 590.411628][ T7087] tipc: Resetting bearer [ 590.414819][T12345] wg2 speed is unknown, defaulting to 1000 [ 590.414854][T12345] syz2: Port: 1 Link DOWN [ 590.577976][ T6261] : left promiscuous mode [ 590.701975][ T6261] ovs-dp0: left promiscuous mode [ 590.748192][T25722] bridge9: entered promiscuous mode [ 590.748214][T25722] bridge9: entered allmulticast mode [ 590.798080][ T6261] tipc: Disabling bearer [ 590.803520][T25732] ip_tables: iptables: counters copy to user failed while replacing table [ 590.814441][ T6261] tipc: Disabling bearer [ 590.837717][ T6261] tipc: Disabling bearer [ 590.840093][ T6261] tipc: Left network mode [ 590.900218][T25741] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5296'. [ 591.114128][T25750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5300'. [ 591.114501][T25750] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5300'. [ 591.215500][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.215804][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.216124][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.325533][T25765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5304'. [ 591.379974][T25769] ip6t_REJECT: ECHOREPLY is not supported [ 591.687355][T25773] bridge12: entered promiscuous mode [ 591.687378][T25773] bridge12: entered allmulticast mode [ 591.871030][T25785] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5309'. [ 592.081561][ T6261] hsr_slave_0: left promiscuous mode [ 592.090935][ T6261] hsr_slave_1: left promiscuous mode [ 592.119098][ T6261] veth0_macvtap: left promiscuous mode [ 592.131312][ T6261] veth1_vlan: left promiscuous mode [ 592.131401][ T6261] veth0_vlan: left promiscuous mode [ 592.181005][T25806] netlink: 'syz.4.5316': attribute type 1 has an invalid length. [ 592.181025][T25806] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5316'. [ 592.181040][T25806] nbd: must specify at least one socket [ 592.254253][T25802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5315'. [ 593.186877][ T7075] smbdirect: ib_dev[syz2] removed [ 593.299011][T25797] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 593.542177][T25844] bridge10: entered promiscuous mode [ 593.542200][T25844] bridge10: entered allmulticast mode [ 593.724574][ T6261] IPVS: stop unused estimator thread 0... [ 593.806525][T25865] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5324'. [ 593.834865][T25853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5322'. [ 594.612372][T25919] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5337'. [ 594.841232][T25923] syzkaller0: entered promiscuous mode [ 594.841253][T25923] syzkaller0: entered allmulticast mode [ 594.844850][T25923] batman_adv: batadv0: Interface activated: syzkaller0 [ 594.865378][T25923] tipc: Resetting bearer [ 594.907620][ T6261] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.907665][ T6261] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.907699][ T6261] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.907731][ T6261] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.123938][T25934] bridge1: left promiscuous mode [ 595.124102][T25934] bridge2: left promiscuous mode [ 595.126546][T25934] bridge3: left promiscuous mode [ 595.126706][T25934] bridge4: left promiscuous mode [ 595.128757][T25934] bridge7: left promiscuous mode [ 595.128911][T25934] bond3: left promiscuous mode [ 595.128923][T25934] bridge8: left promiscuous mode [ 595.132467][T25934] bond4: left promiscuous mode [ 595.132485][T25934] ip6gre1: left promiscuous mode [ 595.134613][T25934] bond5: left promiscuous mode [ 595.139158][T25934] bond7: left promiscuous mode [ 595.139176][T25934] bridge10: left promiscuous mode [ 595.142266][T25934] macsec1: left promiscuous mode [ 595.142288][T25934] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 595.143009][T25934] bond8: left promiscuous mode [ 595.143773][T25934] bridge11: left promiscuous mode [ 595.144235][T25934] bridge12: left promiscuous mode [ 595.210213][T25940] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 595.270653][T25946] net_ratelimit: 3 callbacks suppressed [ 595.270670][T25946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 595.504361][T25940] openvswitch: netlink: IP tunnel dst address not specified [ 595.535208][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.535458][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.535694][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.658069][T25971] bridge14: entered promiscuous mode [ 595.658090][T25971] bridge14: entered allmulticast mode [ 595.695265][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.695585][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.695838][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.670721][T26090] netlink: 'syz.1.5358': attribute type 4 has an invalid length. [ 597.883891][T26105] __nla_validate_parse: 7 callbacks suppressed [ 597.883910][T26105] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5362'. [ 598.815429][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.815742][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.250013][T26159] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5375'. [ 599.372594][T26163] tipc: Invalid UDP bearer configuration [ 599.372657][T26163] tipc: Enabling of bearer rejected, failed to enable media [ 599.410919][T26155] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5374'. [ 599.750458][T26174] xt_CT: You must specify a L4 protocol and not use inversions on it [ 599.929573][T26179] Cannot find del_set index 17 as target [ 600.053822][T26191] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5387'. [ 600.073753][T26190] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 600.073770][T26190] IPv6: NLM_F_CREATE should be set when creating new route [ 600.167002][T26183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5383'. [ 600.167082][T26183] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5383'. [ 600.168108][T26194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5386'. [ 600.272757][T26183] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.122701][T26232] xt_CT: You must specify a L4 protocol and not use inversions on it [ 601.123922][T26234] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5398'. [ 601.265671][T26243] vlan3: entered promiscuous mode [ 601.265692][T26243] macvlan0: entered promiscuous mode [ 601.329115][T26249] FAULT_INJECTION: forcing a failure. [ 601.329115][T26249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 601.330149][T26249] CPU: 1 UID: 0 PID: 26249 Comm: syz.4.5402 Not tainted syzkaller #0 PREEMPT(full) [ 601.330170][T26249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 601.330180][T26249] Call Trace: [ 601.330187][T26249] [ 601.330195][T26249] dump_stack_lvl+0xe8/0x150 [ 601.330226][T26249] should_fail_ex+0x3eb/0x540 [ 601.330255][T26249] _copy_from_user+0x2d/0xb0 [ 601.330279][T26249] __sys_bpf+0x2e7/0xe00 [ 601.330306][T26249] ? __pfx___sys_bpf+0x10/0x10 [ 601.330335][T26249] ? __fget_files+0x2a/0x420 [ 601.330376][T26249] ? ksys_write+0x242/0x270 [ 601.330403][T26249] ? __pfx_ksys_write+0x10/0x10 [ 601.330428][T26249] __x64_sys_bpf+0xba/0xd0 [ 601.330456][T26249] do_syscall_64+0x166/0x520 [ 601.330478][T26249] ? trace_irq_disable+0x3b/0x140 [ 601.330500][T26249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.330518][T26249] ? clear_bhb_loop+0x70/0xc0 [ 601.330541][T26249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.330558][T26249] RIP: 0033:0x7fbcdfda8f19 [ 601.330573][T26249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.330587][T26249] RSP: 002b:00007fbce0c3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 601.330605][T26249] RAX: ffffffffffffffda RBX: 00007fbce0025fa0 RCX: 00007fbcdfda8f19 [ 601.330619][T26249] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000001 [ 601.330630][T26249] RBP: 00007fbce0c3a090 R08: 0000000000000000 R09: 0000000000000000 [ 601.330641][T26249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.330651][T26249] R13: 00007fbce0026038 R14: 00007fbce0025fa0 R15: 00007ffd8b2e36a8 [ 601.330679][T26249] [ 601.762454][T26270] xt_CT: You must specify a L4 protocol and not use inversions on it [ 601.851557][T26275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5413'. [ 601.852605][T26275] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5413'. [ 601.870089][T26275] ifb0: entered allmulticast mode [ 602.092460][T26282] FAULT_INJECTION: forcing a failure. [ 602.092460][T26282] name failslab, interval 1, probability 0, space 0, times 0 [ 602.092488][T26282] CPU: 1 UID: 0 PID: 26282 Comm: syz.4.5416 Not tainted syzkaller #0 PREEMPT(full) [ 602.092508][T26282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 602.092519][T26282] Call Trace: [ 602.092526][T26282] [ 602.092534][T26282] dump_stack_lvl+0xe8/0x150 [ 602.092566][T26282] should_fail_ex+0x3eb/0x540 [ 602.092593][T26282] should_failslab+0xa8/0x100 [ 602.092616][T26282] __kvmalloc_node_noprof+0x171/0x820 [ 602.092641][T26282] ? __fget_files+0x2a/0x420 [ 602.092664][T26282] ? vmemdup_user+0x2b/0xd0 [ 602.092682][T26282] ? vmemdup_user+0x2b/0xd0 [ 602.092710][T26282] vmemdup_user+0x2b/0xd0 [ 602.092731][T26282] map_lookup_elem+0x2ef/0xa60 [ 602.092751][T26282] ? bpf_lsm_bpf+0x9/0x20 [ 602.092771][T26282] __sys_bpf+0x866/0xe00 [ 602.092798][T26282] ? __pfx___sys_bpf+0x10/0x10 [ 602.092827][T26282] ? __fget_files+0x2a/0x420 [ 602.092866][T26282] ? ksys_write+0x242/0x270 [ 602.092894][T26282] ? __pfx_ksys_write+0x10/0x10 [ 602.092922][T26282] __x64_sys_bpf+0xba/0xd0 [ 602.092949][T26282] do_syscall_64+0x166/0x520 [ 602.092972][T26282] ? trace_irq_disable+0x3b/0x140 [ 602.093005][T26282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.093023][T26282] ? clear_bhb_loop+0x70/0xc0 [ 602.093046][T26282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.093063][T26282] RIP: 0033:0x7fbcdfda8f19 [ 602.093079][T26282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.093094][T26282] RSP: 002b:00007fbce0c3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 602.093114][T26282] RAX: ffffffffffffffda RBX: 00007fbce0025fa0 RCX: 00007fbcdfda8f19 [ 602.093128][T26282] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000001 [ 602.093140][T26282] RBP: 00007fbce0c3a090 R08: 0000000000000000 R09: 0000000000000000 [ 602.093151][T26282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 602.093162][T26282] R13: 00007fbce0026038 R14: 00007fbce0025fa0 R15: 00007ffd8b2e36a8 [ 602.093192][T26282] [ 602.095346][ C0] net_ratelimit: 6 callbacks suppressed [ 602.095362][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.095659][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.095953][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.342199][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.342439][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.342675][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.864902][T26314] FAULT_INJECTION: forcing a failure. [ 602.864902][T26314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 602.864930][T26314] CPU: 1 UID: 0 PID: 26314 Comm: syz.1.5429 Not tainted syzkaller #0 PREEMPT(full) [ 602.864952][T26314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 602.864963][T26314] Call Trace: [ 602.864971][T26314] [ 602.864979][T26314] dump_stack_lvl+0xe8/0x150 [ 602.865012][T26314] should_fail_ex+0x3eb/0x540 [ 602.865039][T26314] _copy_from_user+0x2d/0xb0 [ 602.865064][T26314] vmemdup_user+0x5e/0xd0 [ 602.865085][T26314] map_lookup_elem+0x2ef/0xa60 [ 602.865106][T26314] ? bpf_lsm_bpf+0x9/0x20 [ 602.865127][T26314] __sys_bpf+0x866/0xe00 [ 602.865153][T26314] ? __pfx___sys_bpf+0x10/0x10 [ 602.865181][T26314] ? __fget_files+0x2a/0x420 [ 602.865220][T26314] ? ksys_write+0x242/0x270 [ 602.865245][T26314] ? __pfx_ksys_write+0x10/0x10 [ 602.865275][T26314] __x64_sys_bpf+0xba/0xd0 [ 602.865303][T26314] do_syscall_64+0x166/0x520 [ 602.865326][T26314] ? trace_irq_disable+0x3b/0x140 [ 602.865349][T26314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.865367][T26314] ? clear_bhb_loop+0x70/0xc0 [ 602.865390][T26314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.865408][T26314] RIP: 0033:0x7eff905a8f19 [ 602.865425][T26314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.865441][T26314] RSP: 002b:00007eff91422028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 602.865469][T26314] RAX: ffffffffffffffda RBX: 00007eff90825fa0 RCX: 00007eff905a8f19 [ 602.865484][T26314] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000001 [ 602.865496][T26314] RBP: 00007eff91422090 R08: 0000000000000000 R09: 0000000000000000 [ 602.865508][T26314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 602.865519][T26314] R13: 00007eff90826038 R14: 00007eff90825fa0 R15: 00007ffd14446fe8 [ 602.865550][T26314] [ 602.912853][T26315] bridge8: entered promiscuous mode [ 602.912874][T26315] bridge8: entered allmulticast mode [ 603.178056][T26329] sctp: [Deprecated]: syz.3.5431 (pid 26329) Use of int in max_burst socket option. [ 603.178056][T26329] Use struct sctp_assoc_value instead [ 603.367168][T26339] netlink: 'syz.0.5437': attribute type 1 has an invalid length. [ 603.415242][T26339] bond6: option mode: invalid value (10) [ 603.418052][T26339] bond6 (unregistering): Released all slaves [ 603.453534][T26345] __nla_validate_parse: 2 callbacks suppressed [ 603.453553][T26345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5439'. [ 603.602691][T26353] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5442'. [ 603.617082][T26348] bond9: invalid ARP target 0.0.0.0 specified for addition [ 603.617106][T26348] bond9: option arp_ip_target: invalid value (0) [ 603.620224][T26348] bond9 (unregistering): Released all slaves [ 603.725539][T26360] bridge9: entered promiscuous mode [ 603.725562][T26360] bridge9: entered allmulticast mode [ 603.882301][T26365] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5447'. [ 603.974590][T26371] bond0: Error: Cannot enslave bond to itself. [ 604.050913][T26378] xt_CT: You must specify a L4 protocol and not use inversions on it [ 604.074314][T26380] FAULT_INJECTION: forcing a failure. [ 604.074314][T26380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 604.074347][T26380] CPU: 0 UID: 0 PID: 26380 Comm: syz.0.5454 Not tainted syzkaller #0 PREEMPT(full) [ 604.074367][T26380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 604.074378][T26380] Call Trace: [ 604.074385][T26380] [ 604.074393][T26380] dump_stack_lvl+0xe8/0x150 [ 604.074426][T26380] should_fail_ex+0x3eb/0x540 [ 604.074454][T26380] _copy_to_user+0x31/0xb0 [ 604.074480][T26380] simple_read_from_buffer+0xe1/0x170 [ 604.074509][T26380] proc_fail_nth_read+0x1bb/0x230 [ 604.074533][T26380] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 604.074556][T26380] ? rw_verify_area+0x24a/0x4c0 [ 604.074582][T26380] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 604.074600][T26380] vfs_read+0x213/0xa80 [ 604.074630][T26380] ? __pfx___mutex_lock+0x10/0x10 [ 604.074655][T26380] ? __pfx_vfs_read+0x10/0x10 [ 604.074682][T26380] ? __fget_files+0x2a/0x420 [ 604.074703][T26380] ? __fget_files+0x3a2/0x420 [ 604.074724][T26380] ? __fget_files+0x2a/0x420 [ 604.074751][T26380] ? fdget+0x1ac/0x250 [ 604.074781][T26380] ksys_read+0x150/0x270 [ 604.074808][T26380] ? __pfx_ksys_read+0x10/0x10 [ 604.074843][T26380] do_syscall_64+0x166/0x520 [ 604.074864][T26380] ? trace_irq_disable+0x3b/0x140 [ 604.074888][T26380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.074906][T26380] ? clear_bhb_loop+0x70/0xc0 [ 604.074929][T26380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.074949][T26380] RIP: 0033:0x7f91b196974e [ 604.074965][T26380] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 604.074980][T26380] RSP: 002b:00007f91b27adfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 604.074999][T26380] RAX: ffffffffffffffda RBX: 00007f91b27ae6c0 RCX: 00007f91b196974e [ 604.075011][T26380] RDX: 000000000000000f RSI: 00007f91b27ae0a0 RDI: 0000000000000006 [ 604.075022][T26380] RBP: 00007f91b27ae090 R08: 0000000000000000 R09: 0000000000000000 [ 604.075032][T26380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 604.075042][T26380] R13: 00007f91b1c26038 R14: 00007f91b1c25fa0 R15: 00007ffc57178298 [ 604.075074][T26380] [ 604.099896][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.099994][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.441063][T26391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5458'. [ 604.447599][T26391] ip_tables: iptables: counters copy to user failed while replacing table [ 604.448752][T26394] tc_dump_action: action bad kind [ 604.492117][T26397] sctp: [Deprecated]: syz.1.5460 (pid 26397) Use of struct sctp_assoc_value in delayed_ack socket option. [ 604.492117][T26397] Use struct sctp_sack_info instead [ 604.492313][T26397] sctp: [Deprecated]: syz.1.5460 (pid 26397) Use of struct sctp_assoc_value in delayed_ack socket option. [ 604.492313][T26397] Use struct sctp_sack_info instead [ 604.526531][T26397] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5460'. [ 604.672749][T26402] xt_CT: You must specify a L4 protocol and not use inversions on it [ 604.990077][T26409] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5464'. [ 605.072873][T26415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5466'. [ 605.129245][T26419] FAULT_INJECTION: forcing a failure. [ 605.129245][T26419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 605.129282][T26419] CPU: 0 UID: 0 PID: 26419 Comm: syz.0.5468 Not tainted syzkaller #0 PREEMPT(full) [ 605.129302][T26419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 605.129312][T26419] Call Trace: [ 605.129318][T26419] [ 605.129327][T26419] dump_stack_lvl+0xe8/0x150 [ 605.129358][T26419] should_fail_ex+0x3eb/0x540 [ 605.129387][T26419] _copy_from_user+0x2d/0xb0 [ 605.129411][T26419] copy_from_sockptr_offset+0x66/0xa0 [ 605.129439][T26419] do_ipt_set_ctl+0x991/0xe20 [ 605.129470][T26419] ? rcu_is_watching+0x16/0xb0 [ 605.129498][T26419] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 605.129540][T26419] ? __mutex_unlock_slowpath+0x731/0x900 [ 605.129571][T26419] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 605.129610][T26419] nf_setsockopt+0x26f/0x290 [ 605.129636][T26419] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 605.129665][T26419] do_sock_setsockopt+0x17c/0x1b0 [ 605.129690][T26419] __x64_sys_setsockopt+0x13d/0x1b0 [ 605.129715][T26419] do_syscall_64+0x166/0x520 [ 605.129737][T26419] ? trace_irq_disable+0x3b/0x140 [ 605.129760][T26419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.129778][T26419] ? clear_bhb_loop+0x70/0xc0 [ 605.129801][T26419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.129819][T26419] RIP: 0033:0x7f91b19a8f19 [ 605.129836][T26419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.129850][T26419] RSP: 002b:00007f91b27ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 605.129872][T26419] RAX: ffffffffffffffda RBX: 00007f91b1c25fa0 RCX: 00007f91b19a8f19 [ 605.129884][T26419] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 605.129896][T26419] RBP: 00007f91b27ae090 R08: 0000000000000328 R09: 0000000000000000 [ 605.129908][T26419] R10: 0000200000000f40 R11: 0000000000000246 R12: 0000000000000001 [ 605.129919][T26419] R13: 00007f91b1c26038 R14: 00007f91b1c25fa0 R15: 00007ffc57178298 [ 605.129951][T26419] [ 605.673007][T26441] xt_CT: You must specify a L4 protocol and not use inversions on it [ 605.695317][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.797737][T26447] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5478'. [ 605.918872][T26456] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5477'. [ 605.956532][T26461] FAULT_INJECTION: forcing a failure. [ 605.956532][T26461] name failslab, interval 1, probability 0, space 0, times 0 [ 605.956559][T26461] CPU: 1 UID: 0 PID: 26461 Comm: syz.1.5480 Not tainted syzkaller #0 PREEMPT(full) [ 605.956579][T26461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 605.956590][T26461] Call Trace: [ 605.956598][T26461] [ 605.956606][T26461] dump_stack_lvl+0xe8/0x150 [ 605.956639][T26461] should_fail_ex+0x3eb/0x540 [ 605.956667][T26461] should_failslab+0xa8/0x100 [ 605.956688][T26461] __kvmalloc_node_noprof+0x171/0x820 [ 605.956719][T26461] ? do_ipt_set_ctl+0x962/0xe20 [ 605.956742][T26461] ? do_sock_setsockopt+0x17c/0x1b0 [ 605.956760][T26461] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 605.956778][T26461] ? do_syscall_64+0x166/0x520 [ 605.956800][T26461] ? translate_table+0x193/0x1f80 [ 605.956821][T26461] ? translate_table+0x193/0x1f80 [ 605.956851][T26461] translate_table+0x193/0x1f80 [ 605.956900][T26461] ? __pfx_translate_table+0x10/0x10 [ 605.956923][T26461] ? lock_acquire+0x115/0x350 [ 605.956959][T26461] ? __might_fault+0xaf/0x130 [ 605.956983][T26461] ? _copy_from_user+0x94/0xb0 [ 605.957011][T26461] do_ipt_set_ctl+0xa53/0xe20 [ 605.957044][T26461] ? rcu_is_watching+0x16/0xb0 [ 605.957071][T26461] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 605.957112][T26461] ? __mutex_unlock_slowpath+0x731/0x900 [ 605.957142][T26461] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 605.957181][T26461] nf_setsockopt+0x26f/0x290 [ 605.957205][T26461] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 605.957233][T26461] do_sock_setsockopt+0x17c/0x1b0 [ 605.957257][T26461] __x64_sys_setsockopt+0x13d/0x1b0 [ 605.957282][T26461] do_syscall_64+0x166/0x520 [ 605.957303][T26461] ? trace_irq_disable+0x3b/0x140 [ 605.957326][T26461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.957344][T26461] ? clear_bhb_loop+0x70/0xc0 [ 605.957367][T26461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.957385][T26461] RIP: 0033:0x7eff905a8f19 [ 605.957401][T26461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.957416][T26461] RSP: 002b:00007eff91422028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 605.957436][T26461] RAX: ffffffffffffffda RBX: 00007eff90825fa0 RCX: 00007eff905a8f19 [ 605.957449][T26461] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 605.957462][T26461] RBP: 00007eff91422090 R08: 0000000000000328 R09: 0000000000000000 [ 605.957473][T26461] R10: 0000200000000f40 R11: 0000000000000246 R12: 0000000000000001 [ 605.957485][T26461] R13: 00007eff90826038 R14: 00007eff90825fa0 R15: 00007ffd14446fe8 [ 605.957517][T26461] [ 606.303203][T26466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5482'. [ 606.842208][T26491] netlink: 'syz.2.5490': attribute type 1 has an invalid length. [ 606.842674][T26492] netlink: 'syz.2.5490': attribute type 1 has an invalid length. [ 606.866844][T26502] netlink: 'syz.1.5493': attribute type 1 has an invalid length. [ 606.968085][T26491] 8021q: adding VLAN 0 to HW filter on device bond7 [ 607.046142][T26492] 8021q: adding VLAN 0 to HW filter on device bond8 [ 607.093870][T26502] bond9: entered promiscuous mode [ 607.094247][T26502] 8021q: adding VLAN 0 to HW filter on device bond9 [ 607.139448][T26496] lo speed is unknown, defaulting to 1000 [ 607.215317][ C1] net_ratelimit: 2 callbacks suppressed [ 607.215335][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.215630][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.215888][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.415887][T26542] x_tables: duplicate entry at hook 2 [ 608.975375][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.975747][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.976055][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.584664][T26616] netlink: 'syz.1.5526': attribute type 10 has an invalid length. [ 609.744044][T26626] netlink: 'syz.2.5529': attribute type 4 has an invalid length. [ 610.415262][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.415626][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.415936][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.497177][T26671] bridge12: entered promiscuous mode [ 611.497200][T26671] bridge12: entered allmulticast mode [ 611.806059][T26693] xt_CT: You must specify a L4 protocol and not use inversions on it [ 611.862298][T26699] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 611.882680][T26699] syzkaller0: entered promiscuous mode [ 611.882703][T26699] syzkaller0: entered allmulticast mode [ 611.924298][T26699] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 611.999362][T26703] __nla_validate_parse: 3 callbacks suppressed [ 611.999381][T26703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5554'. [ 612.078052][T26709] xt_CT: You must specify a L4 protocol and not use inversions on it [ 612.255807][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.256178][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.256498][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.997340][T26748] x_tables: unsorted entry at hook 4 [ 612.997424][T26748] x_tables: unsorted entry at hook 4 [ 612.997499][T26748] x_tables: unsorted entry at hook 4 [ 612.997572][T26748] x_tables: unsorted entry at hook 4 [ 612.997642][T26748] x_tables: unsorted entry at hook 4 [ 612.997711][T26748] x_tables: unsorted entry at hook 4 [ 612.997784][T26748] x_tables: unsorted entry at hook 4 [ 612.997854][T26748] x_tables: unsorted entry at hook 4 [ 612.997924][T26748] x_tables: unsorted entry at hook 4 [ 612.997995][T26748] x_tables: unsorted entry at hook 4 [ 613.610210][T26767] xt_CT: You must specify a L4 protocol and not use inversions on it [ 613.689649][T26771] bridge10: entered promiscuous mode [ 613.689671][T26771] bridge10: entered allmulticast mode [ 613.892710][T26779] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5575'. [ 614.072674][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 614.124827][T26781] xt_hashlimit: size too large, truncated to 1048576 [ 614.255709][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.256033][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.325350][T26836] syzkaller0: entered promiscuous mode [ 615.325373][T26836] syzkaller0: entered allmulticast mode [ 615.695205][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.695458][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.695696][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.865374][T26851] syzkaller1: entered promiscuous mode [ 615.865395][T26851] syzkaller1: entered allmulticast mode [ 615.923429][T26856] netlink: 'syz.1.5601': attribute type 2 has an invalid length. [ 615.923450][T26856] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5601'. [ 615.938610][T26858] netlink: 'syz.2.5602': attribute type 3 has an invalid length. [ 616.003976][T26852] ip_tables: iptables: counters copy to user failed while replacing table [ 616.211117][T26869] xt_CT: You must specify a L4 protocol and not use inversions on it [ 616.433959][T26884] xt_CT: You must specify a L4 protocol and not use inversions on it [ 616.470467][T26880] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5608'. [ 617.039096][T26912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5616'. [ 617.321099][T26917] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5618'. [ 618.095447][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.095727][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.975363][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.975604][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.975842][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.186278][T26928] xt_CT: You must specify a L4 protocol and not use inversions on it [ 620.468232][T26946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5628'. [ 620.570377][T26950] xt_check_table_hooks: 55 callbacks suppressed [ 620.570396][T26950] x_tables: duplicate underflow at hook 2 [ 620.730742][T26961] netlink: 'syz.0.5631': attribute type 8 has an invalid length. [ 621.148583][T26979] block nbd2: server does not support multiple connections per device. [ 621.148893][T26979] block nbd2: shutting down sockets [ 621.295232][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.295530][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.307972][T26990] IPv6: addrconf: prefix option has invalid lifetime [ 621.572778][T27005] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 621.628399][T27010] veth0_to_bridge: entered promiscuous mode [ 621.904244][T27020] xt_CT: You must specify a L4 protocol and not use inversions on it [ 621.950867][T27023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5652'. [ 621.950889][T27023] netlink: 22 bytes leftover after parsing attributes in process `syz.2.5652'. [ 621.962676][T27023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5652'. [ 621.962697][T27023] netlink: 22 bytes leftover after parsing attributes in process `syz.2.5652'. [ 621.962711][T27023] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 622.076548][T27027] netlink: 'syz.1.5653': attribute type 1 has an invalid length. [ 622.076568][T27027] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5653'. [ 622.213734][T27035] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5658'. [ 622.213793][T27035] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not syz0 [ 622.255749][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.356746][T27033] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 622.356845][T27033] syzkaller1: Refused to change device type [ 622.420006][T27042] xt_CT: You must specify a L4 protocol and not use inversions on it [ 622.459628][T27045] syzkaller1: entered promiscuous mode [ 622.459649][T27045] syzkaller1: entered allmulticast mode [ 622.493731][T27046] netlink: 'syz.1.5662': attribute type 21 has an invalid length. [ 622.698676][T27054] xt_CT: You must specify a L4 protocol and not use inversions on it [ 622.818858][T27056] can: request_module (can-proto-0) failed. [ 622.944662][T27064] netlink: 'syz.2.5666': attribute type 1 has an invalid length. [ 623.180750][T27060] 8021q: adding VLAN 0 to HW filter on device bond10 [ 623.200203][T27060] bond9: (slave bond10): making interface the new active one [ 623.205348][T27060] bond9: (slave bond10): Enslaving as an active interface with an up link [ 623.287141][T27064] bond9: (slave gretap1): Enslaving as a backup interface with an up link [ 623.532200][ T30] audit: type=1800 audit(1794333445.523:22): pid=27094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5675" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2132 res=0 errno=-22 [ 623.692955][T27098] xt_CT: You must specify a L4 protocol and not use inversions on it [ 623.712120][T27097] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5678'. [ 623.789701][T27101] FAULT_INJECTION: forcing a failure. [ 623.789701][T27101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 623.789731][T27101] CPU: 0 UID: 0 PID: 27101 Comm: syz.4.5679 Not tainted syzkaller #0 PREEMPT(full) [ 623.789777][T27101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 623.789802][T27101] Call Trace: [ 623.789818][T27101] [ 623.789837][T27101] dump_stack_lvl+0xe8/0x150 [ 623.789905][T27101] should_fail_ex+0x3eb/0x540 [ 623.789941][T27101] _copy_from_user+0x2d/0xb0 [ 623.789965][T27101] kstrtouint_from_user+0xd6/0x180 [ 623.789988][T27101] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 623.790017][T27101] ? lock_acquire+0x115/0x350 [ 623.790045][T27101] proc_fail_nth_write+0x8e/0x210 [ 623.790065][T27101] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 623.790094][T27101] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 623.790112][T27101] vfs_write+0x296/0xba0 [ 623.790146][T27101] ? __pfx_vfs_write+0x10/0x10 [ 623.790172][T27101] ? __fget_files+0x2a/0x420 [ 623.790194][T27101] ? __fget_files+0x3a2/0x420 [ 623.790214][T27101] ? __fget_files+0x2a/0x420 [ 623.790241][T27101] ? fdget+0x1ac/0x250 [ 623.790271][T27101] ksys_write+0x150/0x270 [ 623.790298][T27101] ? __pfx_ksys_write+0x10/0x10 [ 623.790336][T27101] do_syscall_64+0x166/0x520 [ 623.790358][T27101] ? trace_irq_disable+0x3b/0x140 [ 623.790381][T27101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.790400][T27101] ? clear_bhb_loop+0x70/0xc0 [ 623.790428][T27101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.790445][T27101] RIP: 0033:0x7fbcdfd6974e [ 623.790462][T27101] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 623.790477][T27101] RSP: 002b:00007fbce0c39fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 623.790496][T27101] RAX: ffffffffffffffda RBX: 00007fbce0c3a6c0 RCX: 00007fbcdfd6974e [ 623.790510][T27101] RDX: 0000000000000001 RSI: 00007fbce0c3a0a0 RDI: 0000000000000003 [ 623.790520][T27101] RBP: 00007fbce0c3a090 R08: 0000000000000000 R09: 0000000000000000 [ 623.790531][T27101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.790542][T27101] R13: 00007fbce0026038 R14: 00007fbce0025fa0 R15: 00007ffd8b2e36a8 [ 623.790575][T27101] [ 624.438782][T27123] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5688'. [ 624.730801][T27139] sctp: [Deprecated]: syz.1.5692 (pid 27139) Use of struct sctp_assoc_value in delayed_ack socket option. [ 624.730801][T27139] Use struct sctp_sack_info instead [ 625.135244][ C1] net_ratelimit: 2 callbacks suppressed [ 625.135264][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.135566][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.135835][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.615280][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.615582][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.615874][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.737476][ T5652] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 625.753545][ T5652] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 625.754536][ T5652] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 625.770987][ T5652] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 625.771626][ T5652] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 625.841202][ T5655] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 625.841630][ T5655] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 625.842107][ T5655] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 625.843836][ T5655] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 625.869516][ T5655] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 626.203997][T27187] xt_CT: You must specify a L4 protocol and not use inversions on it [ 626.398887][T26023] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.628786][T26023] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.822196][T26023] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.913788][T27235] netlink: 'syz.4.5712': attribute type 1 has an invalid length. [ 626.913807][T27235] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5712'. [ 627.032087][T26023] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 627.097340][T27168] rxe_eth0 speed is unknown, defaulting to 1000 [ 627.120557][T27168] rxe_eth0 speed is unknown, defaulting to 1000 [ 627.123884][T27168] rxe_eth0 speed is unknown, defaulting to 1000 [ 627.392159][T26023] veth0: left allmulticast mode [ 627.392190][T26023] veth0: left promiscuous mode [ 627.392391][T26023] bridge0: port 1(veth0) entered disabled state [ 627.693521][T26023] bond2 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 627.694234][T26023] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 627.699885][T26023] ip6gretap1 (unregistering): left allmulticast mode [ 627.830306][T27168] infiniband rxe0: set active [ 627.830377][T27168] infiniband rxe0: added rxe_eth0 [ 627.836232][T27265] xt_CT: You must specify a L4 protocol and not use inversions on it [ 627.870997][T27168] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 627.871029][T27168] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 627.871064][T27168] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 627.903326][T27168] RDS/IB: rxe0: added [ 627.903379][T27168] smc: adding ib device rxe0 with port count 1 [ 627.903398][T27168] smc: ib device rxe0 port 1 has no pnetid [ 627.936245][ T5655] Bluetooth: hci1: command tx timeout [ 628.089797][T26023] bond9 (unregistering): (slave gretap1): Releasing backup interface [ 628.279858][T27274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5722'. [ 628.365698][T26023] bond1 (unregistering): Released all slaves [ 628.387438][T26023] bond2 (unregistering): (slave macvlan3): Releasing backup interface [ 628.387878][T26023] macvlan3: left allmulticast mode [ 628.388321][T26023] bond2 (unregistering): Released all slaves [ 628.443058][T26023] bond0 (unregistering): (slave veth3): Releasing active interface [ 628.443815][T26023] bond0 (unregistering): Released all slaves [ 628.466920][T26023] bond3 (unregistering): Released all slaves [ 628.474837][T26023] bond4 (unregistering): Released all slaves [ 628.492211][T26023] bond5 (unregistering): (slave bond6): Releasing backup interface [ 628.492822][T26023] bond5 (unregistering): Released all slaves [ 628.510220][T26023] bond6 (unregistering): Released all slaves [ 628.524609][T26023] bond7 (unregistering): Released all slaves [ 628.539547][T26023] bond8 (unregistering): Released all slaves [ 628.555643][T26023] bond9 (unregistering): (slave bond10): Releasing backup interface [ 628.556227][T26023] bond9 (unregistering): Released all slaves [ 628.564816][T26023] bond10 (unregistering): Released all slaves [ 628.608409][ T24] rxe_eth0 speed is unknown, defaulting to 1000 [ 628.608503][T12339] rxe_eth0 speed is unknown, defaulting to 1000 [ 628.652809][T27279] vlan4: entered promiscuous mode [ 628.652830][T27279] bond0: entered promiscuous mode [ 628.672474][T27168] rxe_eth0 speed is unknown, defaulting to 1000 [ 628.773161][T26023] !: left promiscuous mode [ 628.865968][T26035] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 20004 - 0 [ 628.866011][T26035] netdevsim netdevsim2 eth5: set [1, 0] type 2 family 0 port 20004 - 0 [ 628.866042][T26035] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 628.866071][T26035] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 628.928794][T26023] tipc: Disabling bearer [ 628.929057][T26023] tipc: Left network mode [ 628.975419][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.975650][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.975858][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.047597][T27297] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5724'. [ 629.126316][T27304] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5726'. [ 629.149728][T27304] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5726'. [ 629.229886][T27168] rxe_eth0 speed is unknown, defaulting to 1000 [ 629.334658][T27312] xt_CT: You must specify a L4 protocol and not use inversions on it [ 629.615383][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.687864][T27326] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5730'. [ 629.778301][T27331] netlink: 'syz.4.5731': attribute type 1 has an invalid length. [ 629.850240][T27335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5731'. [ 629.933244][T27331] 8021q: adding VLAN 0 to HW filter on device bond30 [ 629.981228][T27335] bridge6: entered promiscuous mode [ 630.015726][ T5655] Bluetooth: hci1: command tx timeout [ 630.212629][ T5298] 8021q: adding VLAN 0 to HW filter on device eth2 [ 630.219073][T27168] rxe_eth0 speed is unknown, defaulting to 1000 [ 630.364057][T27346] atomic_op ffff88801ebba9e0 conn xmit_atomic 0000000000000000 [ 630.642991][T27168] rxe_eth0 speed is unknown, defaulting to 1000 [ 631.330980][T27168] rxe_eth0 speed is unknown, defaulting to 1000 [ 631.565855][T27401] netlink: 'syz.4.5744': attribute type 11 has an invalid length. [ 631.565875][T27401] netlink: 'syz.4.5744': attribute type 11 has an invalid length. [ 631.565887][T27401] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5744'. [ 631.810771][T27168] rxe_eth0 speed is unknown, defaulting to 1000 [ 631.874915][ T5298] 8021q: adding VLAN 0 to HW filter on device eth3 [ 632.096333][ T5655] Bluetooth: hci1: command tx timeout [ 632.257004][ C1] net_ratelimit: 5 callbacks suppressed [ 632.257025][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.257353][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.257666][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.261743][T27168] rxe_eth0 speed is unknown, defaulting to 1000 [ 632.813038][T27439] netlink: 'syz.4.5754': attribute type 70 has an invalid length. [ 632.815335][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 632.920062][T27444] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5755'. [ 633.040524][T27455] xt_CT: You must specify a L4 protocol and not use inversions on it [ 633.235262][T12339] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 633.235782][ T5298] 8021q: adding VLAN 0 to HW filter on device eth4 [ 633.370991][T27168] lo speed is unknown, defaulting to 1000 [ 633.427998][T27469] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5762'. [ 633.428361][T27469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5762'. [ 633.448924][T27463] syzkaller0: entered promiscuous mode [ 633.448943][T27463] syzkaller0: entered allmulticast mode [ 633.457182][T27470] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5762'. [ 633.894261][T27488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5767'. [ 634.036794][T27493] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5768'. [ 634.036816][T27493] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5768'. [ 634.178470][ T5655] Bluetooth: hci1: command tx timeout [ 634.458180][T26023] hsr_slave_0: left promiscuous mode [ 634.478088][T26023] hsr_slave_1: left promiscuous mode [ 634.601264][T27520] netlink: 'syz.0.5776': attribute type 1 has an invalid length. [ 634.601285][T27520] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5776'. [ 634.962173][T26023] team0 (unregistering): Port device team_slave_1 removed [ 634.984888][T26023] team0 (unregistering): Port device team_slave_0 removed [ 635.241800][T27168] rxe_eth0 speed is unknown, defaulting to 1000 [ 635.309687][ T5298] 8021q: adding VLAN 0 to HW filter on device eth5 [ 635.375261][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.375557][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.375836][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.376119][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.535349][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.535684][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.536017][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.579854][T27538] syzkaller0: entered promiscuous mode [ 635.579877][T27538] syzkaller0: entered allmulticast mode [ 635.850561][T27559] netlink: 'syz.3.5781': attribute type 1 has an invalid length. [ 635.906361][T27569] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5783'. [ 636.057705][T27574] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5785'. [ 636.072712][T27574] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5785'. [ 636.126707][T27575] netlink: 'syz.0.5785': attribute type 1 has an invalid length. [ 637.511669][T27559] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 637.628433][T27583] veth0: left allmulticast mode [ 637.628458][T27583] veth0: left promiscuous mode [ 637.628675][T27583] bridge0: port 3(veth0) entered disabled state [ 637.671794][T27583] batman_adv: batadv0: Adding interface: veth0 [ 637.671808][T27583] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.671832][T27583] batman_adv: batadv0: Interface activated: veth0 [ 637.752383][T27586] macsec0: entered allmulticast mode [ 637.809597][T26023] IPVS: stop unused estimator thread 0... [ 638.082429][T27605] gretap1: entered promiscuous mode [ 638.097315][T27608] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 638.203635][T27601] batman_adv: batadv0: Adding interface: macvtap1 [ 638.203653][T27601] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.203676][T27601] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 638.272327][T27601] macsec1: entered promiscuous mode [ 638.272623][T27601] macsec1: entered allmulticast mode [ 638.272638][T27601] veth1_macvtap: entered allmulticast mode [ 638.277660][T27601] veth1_macvtap: left allmulticast mode [ 638.427544][T27168] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.427711][T27168] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.427815][T27168] bridge_slave_0: entered allmulticast mode [ 638.429446][T27168] bridge_slave_0: entered promiscuous mode [ 638.459618][T27168] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.459851][T27168] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.460002][T27168] bridge_slave_1: entered allmulticast mode [ 638.461770][T27168] bridge_slave_1: entered promiscuous mode [ 638.532661][T27168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.545058][T27168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.585945][T27168] team0: Port device team_slave_0 added [ 638.589118][T27168] team0: Port device team_slave_1 added [ 638.630318][T27168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.630333][T27168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.630364][T27168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.632476][T27168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.632488][T27168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.632510][T27168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.807241][T27168] hsr_slave_0: entered promiscuous mode [ 638.808262][T27168] hsr_slave_1: entered promiscuous mode [ 638.878330][T27636] syzkaller0: entered promiscuous mode [ 638.878353][T27636] syzkaller0: entered allmulticast mode [ 638.895425][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.895781][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.896113][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.079329][T27649] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 639.488645][T27168] netdevsim netdevsim2 eth5 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 639.611651][T27168] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 639.841624][T27168] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 639.984025][T27168] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 640.180238][T27698] IPVS: Error connecting to the multicast addr [ 640.222349][T27168] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 640.238252][T27168] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 640.240624][T27168] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 640.267742][T27168] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 640.270274][T27168] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 640.292505][T27168] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 640.293473][T27168] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 640.333338][T27168] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 640.414798][T27695] Cannot find del_set index 4 as target [ 640.580807][T27711] netlink: 'syz.4.5810': attribute type 10 has an invalid length. [ 640.580828][T27711] __nla_validate_parse: 1 callbacks suppressed [ 640.580839][T27711] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5810'. [ 640.877455][T27722] netlink: 'syz.0.5814': attribute type 1 has an invalid length. [ 641.053516][T27722] 8021q: adding VLAN 0 to HW filter on device bond6 [ 641.115731][T27724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5815'. [ 641.135822][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.136133][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.136390][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.136659][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.161364][T27729] bond6: (slave ip6gretap2): making interface the new active one [ 641.169789][T27729] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 641.252441][T27738] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5817'. [ 641.334373][T27738] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5817'. [ 641.339036][T27168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.428962][T27168] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.465907][T26047] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.466033][T26047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.490319][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.490424][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.861424][T27760] xt_CT: You must specify a L4 protocol and not use inversions on it [ 642.255454][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.255754][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.312953][T27784] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5827'. [ 642.719482][T27807] sctp: [Deprecated]: syz.4.5833 (pid 27807) Use of int in max_burst socket option. [ 642.719482][T27807] Use struct sctp_assoc_value instead [ 642.719547][T27813] sctp: [Deprecated]: syz.4.5833 (pid 27813) Use of int in max_burst socket option. [ 642.719547][T27813] Use struct sctp_assoc_value instead [ 642.798953][T27168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 642.968698][T27818] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5837'. [ 643.003771][T27168] veth0_vlan: entered promiscuous mode [ 643.059082][T27820] xt_CT: You must specify a L4 protocol and not use inversions on it [ 643.080520][T27168] veth1_vlan: entered promiscuous mode [ 643.144797][T27830] xt_CT: You must specify a L4 protocol and not use inversions on it [ 643.266804][T27168] veth0_macvtap: entered promiscuous mode [ 643.293868][T27168] veth1_macvtap: entered promiscuous mode [ 643.348361][T27168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.413129][T27168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.526622][T27843] lo: entered allmulticast mode [ 643.528414][T27835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5840'. [ 643.540813][T27835] netlink: 'syz.4.5840': attribute type 2 has an invalid length. [ 643.540831][T27835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5840'. [ 643.578457][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 643.668977][T27847] syzkaller1: entered promiscuous mode [ 643.669000][T27847] syzkaller1: entered allmulticast mode [ 643.703746][T26035] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.706040][T26047] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.706867][T26023] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.706900][T26023] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.900315][T26035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.900337][T26035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.981421][T26043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.981441][T26043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.042025][T27858] netlink: 'syz.3.5845': attribute type 1 has an invalid length. [ 644.126963][T27861] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5845'. [ 644.144815][T27858] bond9: entered promiscuous mode [ 644.153079][T27858] 8021q: adding VLAN 0 to HW filter on device bond9 [ 644.165597][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 644.167785][T27861] bond9: entered allmulticast mode [ 644.330220][T27839] lo: left allmulticast mode [ 644.393693][T27869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5848'. [ 644.424101][T27858] bond9: (slave bridge15): making interface the new active one [ 644.424125][T27858] bridge15: entered promiscuous mode [ 644.424308][T27858] bridge15: entered allmulticast mode [ 644.453064][T27858] bond9: (slave bridge15): Enslaving as an active interface with an up link [ 644.640436][T27886] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 644.891997][T27900] xt_CT: You must specify a L4 protocol and not use inversions on it [ 644.893971][T27896] bridge16: entered promiscuous mode [ 644.893991][T27896] bridge16: entered allmulticast mode [ 644.932724][T27899] netlink: 'syz.2.5853': attribute type 2 has an invalid length. [ 645.615372][ C0] net_ratelimit: 3 callbacks suppressed [ 645.615392][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.615683][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.616021][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.873473][T27942] bridge17: entered promiscuous mode [ 645.873495][T27942] bridge17: entered allmulticast mode [ 646.161732][T27955] bridge18: entered promiscuous mode [ 646.373355][T27963] netlink: 'syz.3.5871': attribute type 1 has an invalid length. [ 646.456385][T27964] xt_CT: You must specify a L4 protocol and not use inversions on it [ 646.653624][T26036] IPVS: starting estimator thread 0... [ 646.735572][T27982] IPVS: using max 34 ests per chain, 81600 per kthread [ 646.895470][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.895827][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.896090][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.896334][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.964372][T27992] bridge7: entered promiscuous mode [ 646.964393][T27992] bridge7: entered allmulticast mode [ 647.232458][T28010] IPVS: wrr: FWM 3 0x00000003 - no destination available: all destinations are overloaded [ 647.250048][T28008] netlink: 'syz.1.5882': attribute type 1 has an invalid length. [ 647.341904][T28008] 8021q: adding VLAN 0 to HW filter on device bond11 [ 647.362011][T28010] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 648.082976][T28050] netlink: 'syz.2.5888': attribute type 8 has an invalid length. [ 648.370567][T28064] xt_CT: You must specify a L4 protocol and not use inversions on it [ 648.587256][T28076] __nla_validate_parse: 1 callbacks suppressed [ 648.587276][T28076] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5895'. [ 648.705826][T28077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5897'. [ 648.705857][T28077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5897'. [ 648.705872][T28077] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 648.773674][T28088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.833372][T28088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.895406][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.910786][T28088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.917104][T28094] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 648.926749][T28094] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 649.280854][T28123] netlink: 3604 bytes leftover after parsing attributes in process `syz.4.5909'. [ 649.620910][T28137] netlink: 'syz.0.5912': attribute type 1 has an invalid length. [ 649.728277][T28141] syzkaller1: entered promiscuous mode [ 649.728298][T28141] syzkaller1: entered allmulticast mode [ 649.787357][T28153] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5916'. [ 649.847306][T28153] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5916'. [ 649.867802][T28159] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5916'. [ 649.868642][T28153] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5916'. [ 650.129159][T28171] FAULT_INJECTION: forcing a failure. [ 650.129159][T28171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 650.129187][T28171] CPU: 0 UID: 0 PID: 28171 Comm: syz.4.5920 Not tainted syzkaller #0 PREEMPT(full) [ 650.129207][T28171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 650.129218][T28171] Call Trace: [ 650.129226][T28171] [ 650.129234][T28171] dump_stack_lvl+0xe8/0x150 [ 650.129267][T28171] should_fail_ex+0x3eb/0x540 [ 650.129295][T28171] _copy_to_user+0x31/0xb0 [ 650.129320][T28171] simple_read_from_buffer+0xe1/0x170 [ 650.129349][T28171] proc_fail_nth_read+0x1bb/0x230 [ 650.129371][T28171] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 650.129393][T28171] ? rw_verify_area+0x24a/0x4c0 [ 650.129419][T28171] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 650.129437][T28171] vfs_read+0x213/0xa80 [ 650.129466][T28171] ? __pfx___mutex_lock+0x10/0x10 [ 650.129490][T28171] ? __pfx_vfs_read+0x10/0x10 [ 650.129516][T28171] ? __fget_files+0x2a/0x420 [ 650.129537][T28171] ? __fget_files+0x3a2/0x420 [ 650.129557][T28171] ? __fget_files+0x2a/0x420 [ 650.129583][T28171] ? fdget+0x1ac/0x250 [ 650.129613][T28171] ksys_read+0x150/0x270 [ 650.129639][T28171] ? __pfx_ksys_read+0x10/0x10 [ 650.129676][T28171] do_syscall_64+0x166/0x520 [ 650.129698][T28171] ? trace_irq_disable+0x3b/0x140 [ 650.129722][T28171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.129740][T28171] ? clear_bhb_loop+0x70/0xc0 [ 650.129762][T28171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.129779][T28171] RIP: 0033:0x7fbcdfd6974e [ 650.129796][T28171] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 650.129811][T28171] RSP: 002b:00007fbce0c39fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 650.129831][T28171] RAX: ffffffffffffffda RBX: 00007fbce0c3a6c0 RCX: 00007fbcdfd6974e [ 650.129844][T28171] RDX: 000000000000000f RSI: 00007fbce0c3a0a0 RDI: 0000000000000003 [ 650.129855][T28171] RBP: 00007fbce0c3a090 R08: 0000000000000000 R09: 0000000000000000 [ 650.129866][T28171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.129877][T28171] R13: 00007fbce0026038 R14: 00007fbce0025fa0 R15: 00007ffd8b2e36a8 [ 650.129908][T28171] [ 650.138230][T28176] bridge0: entered promiscuous mode [ 650.138267][T28176] bridge0: entered allmulticast mode [ 650.828079][T28212] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5933'. [ 650.865380][T28215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5933'. [ 652.015450][ C1] net_ratelimit: 2 callbacks suppressed [ 652.015470][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.015772][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.016042][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.016309][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.255262][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.255536][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.255803][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.510464][ T5652] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 653.516595][ T5652] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 653.524570][ T5652] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 653.538724][ T5652] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 653.539475][ T5652] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 654.164059][T17582] batman_adv: batadv0: Interface deactivated: syz_tun [ 654.246086][T17582] batman_adv: batadv0: Removing interface: syz_tun [ 654.838737][T28368] netlink: 'syz.1.5967': attribute type 1 has an invalid length. [ 654.904199][T28368] 8021q: adding VLAN 0 to HW filter on device bond12 [ 654.932843][T28369] bond11: (slave veth0_to_bond): Releasing active interface [ 654.953944][T28369] bond12: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 654.992454][T28368] macvlan3: entered promiscuous mode [ 654.992476][T28368] macvlan3: entered allmulticast mode [ 654.993993][T28368] bond12: entered promiscuous mode [ 654.994602][T28368] bond12: entered allmulticast mode [ 655.019970][T28368] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 655.023524][T28368] bond12: left allmulticast mode [ 655.023563][T28368] bond12: left promiscuous mode [ 655.097458][T28321] lo speed is unknown, defaulting to 1000 [ 655.116700][T28380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5970'. [ 655.535341][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.535653][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.535975][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.617296][ T5655] Bluetooth: hci5: command tx timeout [ 655.809334][T28321] rxe_eth0 speed is unknown, defaulting to 1000 [ 655.815540][T28405] netlink: 'syz.2.5977': attribute type 1 has an invalid length. [ 656.107151][T28418] netlink: 'syz.3.5980': attribute type 1 has an invalid length. [ 656.140563][T28422] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5981'. [ 656.156380][T28418] 8021q: adding VLAN 0 to HW filter on device bond11 [ 656.160877][T28417] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 656.233478][T28422] bridge0: port 1(syz_tun) entered blocking state [ 656.233711][T28422] bridge0: port 1(syz_tun) entered disabled state [ 656.233841][T28422] syz_tun: entered allmulticast mode [ 656.259425][T28422] syz_tun: entered promiscuous mode [ 656.602657][T28436] syzkaller0: entered promiscuous mode [ 656.602678][T28436] syzkaller0: entered allmulticast mode [ 656.604108][T28321] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.604401][T28321] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.604786][T28321] bridge_slave_0: entered allmulticast mode [ 656.622236][T28435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5983'. [ 656.622277][T28435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5983'. [ 656.623043][T28321] bridge_slave_0: entered promiscuous mode [ 656.628685][T28435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5983'. [ 656.640431][T28321] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.640546][T28321] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.640683][T28321] bridge_slave_1: entered allmulticast mode [ 656.647403][T28321] bridge_slave_1: entered promiscuous mode [ 656.807983][T28321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.829227][T28321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.933138][T28321] team0: Port device team_slave_0 added [ 656.941760][T28321] team0: Port device team_slave_1 added [ 657.031053][T28321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.031071][T28321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.031093][T28321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.040258][T28321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 657.040273][T28321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.040296][T28321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.180888][T28321] hsr_slave_0: entered promiscuous mode [ 657.198374][T28321] hsr_slave_1: entered promiscuous mode [ 657.201880][T28321] debugfs: 'hsr0' already exists in 'hsr' [ 657.201896][T28321] Cannot create hsr debugfs directory [ 657.597049][T28321] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 657.696448][ T5655] Bluetooth: hci5: command tx timeout [ 657.779674][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.780011][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.780295][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.780574][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.829217][T28321] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 657.834430][T28481] ip_tables: iptables: counters copy to user failed while replacing table [ 657.919888][T28495] ip_tables: iptables: counters copy to user failed while replacing table [ 657.923278][T28321] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 657.951050][T28492] bridge19: entered promiscuous mode [ 657.951064][T28492] bridge19: entered allmulticast mode [ 657.991132][T28321] team0: Port device netdevsim0 removed [ 657.992131][T28321] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 658.032863][T28500] bridge20: entered promiscuous mode [ 658.032877][T28500] bridge20: entered allmulticast mode [ 658.138867][T28502] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5998'. [ 658.180496][T28321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 658.184319][T28321] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 658.200016][T28321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 658.203770][T28321] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 658.220641][T28321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 658.234692][T28321] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 658.243399][T28321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 658.260820][T28321] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 658.363366][T28321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.390746][T28321] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.406045][T26041] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.406161][T26041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.432140][T26047] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.432245][T26047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.439530][T28517] ip_tables: iptables: counters copy to user failed while replacing table [ 658.451628][T28519] ipt_REJECT: TCP_RESET invalid for non-tcp [ 658.893360][T28536] ip_tables: iptables: counters copy to user failed while replacing table [ 658.900796][T28536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6007'. [ 658.900830][T28536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6007'. [ 658.975168][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.975394][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.004665][T28541] bridge11: entered promiscuous mode [ 659.004680][T28541] bridge11: entered allmulticast mode [ 659.221884][T28321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.400229][T28568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6017'. [ 659.530648][T28579] syz_tun: entered allmulticast mode [ 659.586509][T28576] syz_tun: left allmulticast mode [ 659.664561][T28582] xt_CT: You must specify a L4 protocol and not use inversions on it [ 659.744320][T28584] lo speed is unknown, defaulting to 1000 [ 659.776048][ T5655] Bluetooth: hci5: command tx timeout [ 660.008225][T28321] veth0_vlan: entered promiscuous mode [ 660.050937][T28321] veth1_vlan: entered promiscuous mode [ 660.120197][T28584] rxe_eth0 speed is unknown, defaulting to 1000 [ 660.219740][T28321] veth0_macvtap: entered promiscuous mode [ 660.230991][T28321] veth1_macvtap: entered promiscuous mode [ 660.324469][T28321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.358278][T28321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.859103][T26041] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.895996][T26041] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.896496][T26041] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.896828][T26041] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.122302][T26038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.122323][T26038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.241703][T28624] bridge1: entered promiscuous mode [ 661.241726][T28624] bridge1: entered allmulticast mode [ 661.326051][T26047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.326072][T26047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.857864][ T5655] Bluetooth: hci5: command tx timeout [ 661.913258][T28639] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6033'. [ 661.917146][T28639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6033'. [ 662.508764][ T5652] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 662.511293][ T5652] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 662.512110][ T5652] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 662.538344][ T5652] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 662.539030][ T5652] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 662.599930][T28658] Bluetooth: MGMT ver 1.23 [ 662.901004][ C1] net_ratelimit: 37 callbacks suppressed [ 662.901025][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.901389][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.901675][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.396549][T28678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6043'. [ 663.723322][T28684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6044'. [ 663.723536][T28684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6044'. [ 663.723760][T28684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6044'. [ 663.723997][T28684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6044'. [ 663.724194][T28684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6044'. [ 663.724414][T28684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6044'. [ 663.724606][T28684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6044'. [ 663.971932][T28654] lo speed is unknown, defaulting to 1000 [ 664.656944][ T5652] Bluetooth: hci0: command tx timeout [ 664.823596][T28654] rxe_eth0 speed is unknown, defaulting to 1000 [ 665.175589][T28730] netlink: 'syz.2.6053': attribute type 1 has an invalid length. [ 665.175610][T28730] netlink: 'syz.2.6053': attribute type 2 has an invalid length. [ 665.511949][T28740] netlink: 'syz.2.6056': attribute type 1 has an invalid length. [ 665.511990][T28740] netlink: 'syz.2.6056': attribute type 2 has an invalid length. [ 665.616784][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.617049][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.617276][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.095258][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.095558][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.147786][T28759] bridge12: entered promiscuous mode [ 666.147809][T28759] bridge12: entered allmulticast mode [ 666.247813][T28765] macsec0: entered promiscuous mode [ 666.286348][T28765] veth1_macvtap: left promiscuous mode [ 666.306745][T28765] macsec0 (unregistering): left promiscuous mode [ 666.357226][T28775] x_tables: ip6_tables: NFQUEUE.0 target: invalid size 8 (kernel) != (user) 0 [ 666.440312][T28654] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.440420][T28654] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.440547][T28654] bridge_slave_0: entered allmulticast mode [ 666.443442][T28654] bridge_slave_0: entered promiscuous mode [ 666.481725][T28654] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.481841][T28654] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.482013][T28654] bridge_slave_1: entered allmulticast mode [ 666.492449][T28654] bridge_slave_1: entered promiscuous mode [ 666.557998][T28654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.561711][T28654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.616675][T28654] team0: Port device team_slave_0 added [ 666.620160][T28654] team0: Port device team_slave_1 added [ 666.666642][T28654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.666659][T28654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.666681][T28654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 666.668699][T28654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.668712][T28654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.668809][T28654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.756000][ T5652] Bluetooth: hci0: command tx timeout [ 666.814595][T28654] hsr_slave_0: entered promiscuous mode [ 666.824665][T28654] hsr_slave_1: entered promiscuous mode [ 666.825699][T28654] debugfs: 'hsr0' already exists in 'hsr' [ 666.825714][T28654] Cannot create hsr debugfs directory [ 667.300338][T28654] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 668.815243][ T5652] Bluetooth: hci0: command tx timeout [ 668.895233][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.895526][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.895793][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.056533][T28770] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 669.088712][T28654] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 669.112316][T28654] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 669.113216][T28654] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 669.158669][T28654] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 669.159522][T28654] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 669.184515][T28654] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 669.194214][T28654] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 669.212496][T28654] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 669.295305][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.295602][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.295863][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.521739][T28654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.558768][T28654] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.580157][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.580262][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.600616][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.600743][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.763797][T28822] bridge11: entered promiscuous mode [ 669.763818][T28822] bridge11: entered allmulticast mode [ 670.124718][T28836] syzkaller0: entered promiscuous mode [ 670.124741][T28836] syzkaller0: entered allmulticast mode [ 670.186687][T28846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.298180][T28856] netlink: 'syz.1.6083': attribute type 5 has an invalid length. [ 670.494375][T28865] syzkaller0: entered promiscuous mode [ 670.494400][T28865] syzkaller0: entered allmulticast mode [ 670.552993][T28654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.608517][T28654] veth0_vlan: entered promiscuous mode [ 670.629383][T28654] veth1_vlan: entered promiscuous mode [ 670.679803][T28654] veth0_macvtap: entered promiscuous mode [ 670.684779][T28654] veth1_macvtap: entered promiscuous mode [ 670.891996][T28873] __nla_validate_parse: 61 callbacks suppressed [ 670.892017][T28873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6087'. [ 670.904290][ T5652] Bluetooth: hci0: command tx timeout [ 672.256145][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.256315][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.256463][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.630003][T28654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 672.650657][T28654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 672.829402][T26038] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.829500][T26038] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.829531][T26038] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.829560][T26038] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.952131][T26023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.952152][T26023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.007087][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.007107][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.062890][T28890] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6091'. [ 673.177636][T28903] syzkaller0: entered promiscuous mode [ 673.177657][T28903] syzkaller0: entered allmulticast mode [ 673.338130][T26047] IPVS: starting estimator thread 0... [ 673.350754][T28920] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 673.427146][T28917] IPVS: using max 53 ests per chain, 127200 per kthread [ 673.428742][T28923] syzkaller0: entered promiscuous mode [ 673.428764][T28923] syzkaller0: entered allmulticast mode [ 673.598876][T28932] syzkaller0: entered promiscuous mode [ 673.598890][T28932] syzkaller0: entered allmulticast mode [ 673.710021][T28934] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6099'. [ 673.762629][T28935] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.763081][T28935] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.415267][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.415501][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.415650][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.615123][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.615272][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.615392][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.067282][T28897] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 676.426188][T28946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6106'. [ 676.482168][T28953] syzkaller0: entered promiscuous mode [ 676.482189][T28953] syzkaller0: entered allmulticast mode [ 676.484243][ T102] TC_ACT_REPEAT abuse ? [ 676.738526][ T5655] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 676.742830][ T5655] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 676.751002][ T5655] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 676.761740][ T5655] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 676.774351][ T5655] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 676.926068][T16932] bridge0: port 1(syz_tun) entered disabled state [ 676.961343][T28976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6113'. [ 676.961368][T28976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6113'. [ 676.972322][T28969] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 676.994305][T16932] syz_tun (unregistering): left allmulticast mode [ 676.994328][T16932] syz_tun (unregistering): left promiscuous mode [ 676.994421][T16932] bridge0: port 1(syz_tun) entered disabled state [ 677.112110][T28981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6114'. [ 677.112132][T28981] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6114'. [ 677.114605][T28981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6114'. [ 677.355708][ T102] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.520340][ T102] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.561106][T28999] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6120'. [ 677.577748][T29001] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6120'. [ 677.610977][T29003] xt_ecn: cannot match TCP bits for non-tcp packets [ 677.615247][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.615515][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.640419][T29006] xt_ecn: cannot match TCP bits for non-tcp packets [ 677.739819][ T102] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.783709][T28999] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6120'. [ 677.789498][T29001] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6120'. [ 678.009976][T29030] xt_CT: You must specify a L4 protocol and not use inversions on it [ 678.089454][ T102] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.233409][T28961] lo speed is unknown, defaulting to 1000 [ 678.478446][T29038] bridge1: entered promiscuous mode [ 678.478469][T29038] bridge1: entered allmulticast mode [ 678.485700][T26041] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 678.485747][T26041] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 678.607174][T26041] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 20004 - 0 [ 678.617106][T26023] netdevsim netdevsim0 eth5: set [1, 0] type 2 family 0 port 20004 - 0 [ 678.816822][ T5652] Bluetooth: hci2: command tx timeout [ 678.821674][ T102] pim6reg99999999: left allmulticast mode [ 679.162967][T29066] xt_CT: You must specify a L4 protocol and not use inversions on it [ 679.194586][ T102] bond6 (unregistering): (slave ip6gretap2): Releasing active interface [ 679.519356][T29081] net_ratelimit: 5 callbacks suppressed [ 679.519375][T29081] ip_tables: iptables: counters copy to user failed while replacing table [ 679.520744][T29081] netlink: 'syz.2.6138': attribute type 21 has an invalid length. [ 679.707267][ T5652] block nbd2: Receive control failed (result -22) [ 679.707444][T29083] nbd2: detected capacity change from 0 to 32 [ 679.711273][ T1987] block nbd2: Dead connection, failed to find a fallback [ 679.711292][ T1987] block nbd2: shutting down sockets [ 679.711392][ T1987] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 679.711503][ T1987] Buffer I/O error on dev nbd2, logical block 0, async page read [ 679.712019][ T1987] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 679.712045][ T1987] Buffer I/O error on dev nbd2, logical block 0, async page read [ 679.712152][ T1987] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 679.712174][ T1987] Buffer I/O error on dev nbd2, logical block 0, async page read [ 679.712271][ T1987] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 679.712293][ T1987] Buffer I/O error on dev nbd2, logical block 0, async page read [ 679.712398][ T1987] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 679.712457][ T1987] Buffer I/O error on dev nbd2, logical block 0, async page read [ 679.712646][ T1987] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 679.712669][ T1987] Buffer I/O error on dev nbd2, logical block 0, async page read [ 679.712786][ T1987] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 679.712806][ T1987] Buffer I/O error on dev nbd2, logical block 0, async page read [ 679.712926][ T1987] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 679.712947][ T1987] Buffer I/O error on dev nbd2, logical block 0, async page read [ 679.712984][T28964] ldm_validate_partition_table(): Disk read failed. [ 679.713069][ T1987] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 679.713089][ T1987] Buffer I/O error on dev nbd2, logical block 0, async page read [ 679.713186][ T1987] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 679.713207][ T1987] Buffer I/O error on dev nbd2, logical block 0, async page read [ 679.713415][T28964] Dev nbd2: unable to read RDB block 0 [ 679.713879][T28964] nbd2: unable to read partition table [ 679.729595][T28964] ldm_validate_partition_table(): Disk read failed. [ 679.729965][T28964] Dev nbd2: unable to read RDB block 0 [ 679.730579][T28964] nbd2: unable to read partition table [ 679.748759][T28964] ldm_validate_partition_table(): Disk read failed. [ 679.749194][T28964] Dev nbd2: unable to read RDB block 0 [ 679.752671][T28964] nbd2: unable to read partition table [ 679.759817][T28964] ldm_validate_partition_table(): Disk read failed. [ 679.760848][T28964] Dev nbd2: unable to read RDB block 0 [ 679.761316][T28964] nbd2: unable to read partition table [ 679.832184][ T102] bond0 (unregistering): Released all slaves [ 679.841508][ T102] bond1 (unregistering): Released all slaves [ 679.860302][ T102] bond2 (unregistering): Released all slaves [ 679.889029][ T102] bond3 (unregistering): Released all slaves [ 679.905515][ T102] bond4 (unregistering): Released all slaves [ 679.921173][ T102] bond5 (unregistering): Released all slaves [ 679.997686][ T102] bond6 (unregistering): Released all slaves [ 680.021321][T29049] sit0: entered promiscuous mode [ 680.047042][T29049] netlink: 'syz.4.6132': attribute type 1 has an invalid length. [ 680.050596][T28961] rxe_eth0 speed is unknown, defaulting to 1000 [ 680.059363][ T5298] 8021q: adding VLAN 0 to HW filter on device eth2 [ 680.197606][T29084] bond1: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 680.197633][T29084] bond1: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 680.216919][T29084] bond1: entered allmulticast mode [ 680.238050][ T102] tipc: Disabling bearer [ 680.238175][ T102] tipc: Left network mode [ 680.433526][T29092] syzkaller0: entered promiscuous mode [ 680.433548][T29092] syzkaller0: entered allmulticast mode [ 680.899443][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 680.899737][ T5652] Bluetooth: hci2: command tx timeout [ 681.283333][T29133] sctp: [Deprecated]: syz.4.6151 (pid 29133) Use of int in max_burst socket option. [ 681.283333][T29133] Use struct sctp_assoc_value instead [ 681.344669][T29140] ip_tables: iptables: counters copy to user failed while replacing table [ 681.397769][T29120] syzkaller1: entered promiscuous mode [ 681.397790][T29120] syzkaller1: entered allmulticast mode [ 681.455304][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.455640][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.614227][ T5298] 8021q: adding VLAN 0 to HW filter on device eth3 [ 681.677406][T29150] [ 681.679777][T29150] ====================================================== [ 681.686791][T29150] WARNING: possible circular locking dependency detected [ 681.693813][T29150] syzkaller #0 Not tainted [ 681.698212][T29150] ------------------------------------------------------ [ 681.705208][T29150] syz.3.6156/29150 is trying to acquire lock: [ 681.711256][T29150] ffff888033b93e98 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb6/0x2f0 [ 681.720145][T29150] [ 681.720145][T29150] but task is already holding lock: [ 681.727494][T29150] ffff888029813418 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 681.736988][T29150] [ 681.736988][T29150] which lock already depends on the new lock. [ 681.736988][T29150] [ 681.747374][T29150] [ 681.747374][T29150] the existing dependency chain (in reverse order) is: [ 681.756368][T29150] [ 681.756368][T29150] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 681.764168][T29150] __mutex_lock+0x197/0x15a0 [ 681.769273][T29150] elevator_change+0x1af/0x480 [ 681.774549][T29150] elevator_set_none+0xb5/0x140 [ 681.779913][T29150] blk_mq_update_nr_hw_queues+0x60b/0x1b70 [ 681.786301][T29150] nbd_start_device+0x189/0xb30 [ 681.791746][T29150] nbd_genl_connect+0x167d/0x1cd0 [ 681.797273][T29150] genl_family_rcv_msg_doit+0x233/0x340 [ 681.803326][T29150] genl_rcv_msg+0x614/0x7a0 [ 681.808338][T29150] netlink_rcv_skb+0x226/0x4a0 [ 681.813617][T29150] genl_rcv+0x28/0x40 [ 681.818105][T29150] netlink_unicast+0x8ef/0xa80 [ 681.823386][T29150] netlink_sendmsg+0x7f0/0xb20 [ 681.828654][T29150] sock_sendmsg_nosec+0x14e/0x190 [ 681.834191][T29150] ____sys_sendmsg+0x54e/0x850 [ 681.839464][T29150] ___sys_sendmsg+0x2a5/0x360 [ 681.844651][T29150] __x64_sys_sendmsg+0x1b1/0x290 [ 681.850100][T29150] do_syscall_64+0x166/0x520 [ 681.855212][T29150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.861613][T29150] [ 681.861613][T29150] -> #5 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 681.870202][T29150] blk_alloc_queue+0x544/0x690 [ 681.875549][T29150] __blk_mq_alloc_disk+0x194/0x390 [ 681.881188][T29150] nbd_dev_add+0x494/0xb60 [ 681.886118][T29150] nbd_init+0x168/0x1f0 [ 681.890804][T29150] do_one_initcall+0x250/0x870 [ 681.896077][T29150] do_initcall_level+0x10a/0x1a0 [ 681.901521][T29150] do_initcalls+0x59/0xa0 [ 681.906358][T29150] kernel_init_freeable+0x29d/0x3e0 [ 681.912064][T29150] kernel_init+0x22/0x1d0 [ 681.916903][T29150] ret_from_fork+0x514/0xb70 [ 681.922006][T29150] ret_from_fork_asm+0x1a/0x30 [ 681.927273][T29150] [ 681.927273][T29150] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 681.934495][T29150] fs_reclaim_acquire+0x71/0x100 [ 681.939944][T29150] __kmalloc_cache_node_noprof+0x66/0x620 [ 681.946181][T29150] create_worker+0x112/0x7c0 [ 681.951282][T29150] workqueue_prepare_cpu+0xe4/0x170 [ 681.956988][T29150] cpuhp_invoke_callback+0x434/0x810 [ 681.962794][T29150] _cpu_up+0x2ce/0x5b0 [ 681.967375][T29150] cpu_up+0x1d2/0x220 [ 681.971866][T29150] cpuhp_bringup_mask+0xb2/0x1a0 [ 681.977318][T29150] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 681.983637][T29150] bringup_nonboot_cpus+0x17/0x30 [ 681.989174][T29150] smp_init+0x32/0x110 [ 681.993754][T29150] kernel_init_freeable+0x27f/0x3e0 [ 681.999457][T29150] kernel_init+0x22/0x1d0 [ 682.004290][T29150] ret_from_fork+0x514/0xb70 [ 682.009388][T29150] ret_from_fork_asm+0x1a/0x30 [ 682.014670][T29150] [ 682.014670][T29150] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 682.022386][T29150] cpus_read_lock+0x3d/0x160 [ 682.027484][T29150] static_key_slow_inc+0x12/0x30 [ 682.032928][T29150] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 682.039156][T29150] nbd_genl_foreach_sock+0x265/0x450 [ 682.044949][T29150] nbd_genl_reconfigure+0xbbb/0x1040 [ 682.050744][T29150] genl_family_rcv_msg_doit+0x233/0x340 [ 682.056796][T29150] genl_rcv_msg+0x614/0x7a0 [ 682.061803][T29150] netlink_rcv_skb+0x226/0x4a0 [ 682.067079][T29150] genl_rcv+0x28/0x40 [ 682.071571][T29150] netlink_unicast+0x8ef/0xa80 [ 682.076849][T29150] netlink_sendmsg+0x7f0/0xb20 [ 682.082118][T29150] sock_sendmsg_nosec+0x14e/0x190 [ 682.087650][T29150] ____sys_sendmsg+0x54e/0x850 [ 682.092924][T29150] ___sys_sendmsg+0x2a5/0x360 [ 682.098107][T29150] __x64_sys_sendmsg+0x1b1/0x290 [ 682.103553][T29150] do_syscall_64+0x166/0x520 [ 682.108651][T29150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.115048][T29150] [ 682.115048][T29150] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 682.122683][T29150] __mutex_lock+0x197/0x15a0 [ 682.127785][T29150] nbd_queue_rq+0x373/0xff0 [ 682.132792][T29150] blk_mq_dispatch_rq_list+0x499/0x1990 [ 682.138928][T29150] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 682.145815][T29150] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 682.152298][T29150] blk_mq_run_work_fn+0x167/0x2f0 [ 682.157830][T29150] process_scheduled_works+0xc3d/0x1630 [ 682.163883][T29150] worker_thread+0xa47/0xfb0 [ 682.168989][T29150] kthread+0x38b/0x480 [ 682.173564][T29150] ret_from_fork+0x514/0xb70 [ 682.178656][T29150] ret_from_fork_asm+0x1a/0x30 [ 682.183957][T29150] [ 682.183957][T29150] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 682.191153][T29150] __mutex_lock+0x197/0x15a0 [ 682.196258][T29150] nbd_queue_rq+0xc1/0xff0 [ 682.201178][T29150] blk_mq_dispatch_rq_list+0x499/0x1990 [ 682.207236][T29150] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 682.214069][T29150] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 682.220563][T29150] blk_mq_run_work_fn+0x167/0x2f0 [ 682.226096][T29150] process_scheduled_works+0xc3d/0x1630 [ 682.232164][T29150] worker_thread+0xa47/0xfb0 [ 682.237269][T29150] kthread+0x38b/0x480 [ 682.241848][T29150] ret_from_fork+0x514/0xb70 [ 682.246947][T29150] ret_from_fork_asm+0x1a/0x30 [ 682.252213][T29150] [ 682.252213][T29150] -> #0 (set->srcu){.+.+}-{0:0}: [ 682.259320][T29150] __lock_acquire+0x164c/0x2de0 [ 682.264693][T29150] lock_sync+0xb3/0x130 [ 682.269361][T29150] __synchronize_srcu+0xca/0x2f0 [ 682.274805][T29150] elevator_switch+0x1e8/0x7b0 [ 682.280080][T29150] elevator_change+0x2fa/0x480 [ 682.285371][T29150] elevator_set_default+0x375/0x440 [ 682.291092][T29150] blk_register_queue+0x404/0x4f0 [ 682.296630][T29150] __add_disk+0x6b8/0xdb0 [ 682.301467][T29150] add_disk_fwnode+0x100/0x3a0 [ 682.306733][T29150] nbd_dev_add+0x733/0xb60 [ 682.311650][T29150] nbd_genl_connect+0x96c/0x1cd0 [ 682.317099][T29150] genl_family_rcv_msg_doit+0x233/0x340 [ 682.323158][T29150] genl_rcv_msg+0x614/0x7a0 [ 682.328165][T29150] netlink_rcv_skb+0x226/0x4a0 [ 682.333439][T29150] genl_rcv+0x28/0x40 [ 682.337926][T29150] netlink_unicast+0x8ef/0xa80 [ 682.343200][T29150] netlink_sendmsg+0x7f0/0xb20 [ 682.348462][T29150] sock_sendmsg_nosec+0x14e/0x190 [ 682.353991][T29150] ____sys_sendmsg+0x54e/0x850 [ 682.359257][T29150] ___sys_sendmsg+0x2a5/0x360 [ 682.364455][T29150] __x64_sys_sendmsg+0x1b1/0x290 [ 682.369897][T29150] do_syscall_64+0x166/0x520 [ 682.375008][T29150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.381408][T29150] [ 682.381408][T29150] other info that might help us debug this: [ 682.381408][T29150] [ 682.391614][T29150] Chain exists of: [ 682.391614][T29150] set->srcu --> &q->q_usage_counter(io)#51 --> &q->elevator_lock [ 682.391614][T29150] [ 682.405241][T29150] Possible unsafe locking scenario: [ 682.405241][T29150] [ 682.412669][T29150] CPU0 CPU1 [ 682.418016][T29150] ---- ---- [ 682.423358][T29150] lock(&q->elevator_lock); [ 682.427931][T29150] lock(&q->q_usage_counter(io)#51); [ 682.435810][T29150] lock(&q->elevator_lock); [ 682.442904][T29150] sync(set->srcu); [ 682.446780][T29150] [ 682.446780][T29150] *** DEADLOCK *** [ 682.446780][T29150] [ 682.454902][T29150] locks held by syz.3.6156/29150: 6, last CPU#1: [ 682.461210][T29150] #0: ffffffff916f7c28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 682.469376][T29150] #1: ffffffff916f7a60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 682.478318][T29150] #2: ffff88804470f1c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 682.488648][T29150] #3: ffff8880298134a0 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4f0 [ 682.498457][T29150] #4: ffff888029812f28 (&q->q_usage_counter(queue)#61){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 682.509321][T29150] #5: ffff888029813418 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 682.519155][T29150] [ 682.519155][T29150] stack backtrace: [ 682.525032][T29150] CPU: 1 UID: 0 PID: 29150 Comm: syz.3.6156 Not tainted syzkaller #0 PREEMPT(full) [ 682.534391][T29150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 682.544438][T29150] Call Trace: [ 682.547710][T29150] [ 682.550629][T29150] dump_stack_lvl+0xe8/0x150 [ 682.555217][T29150] print_circular_bug+0x2e2/0x300 [ 682.560236][T29150] check_noncircular+0x12f/0x150 [ 682.565169][T29150] __lock_acquire+0x164c/0x2de0 [ 682.570011][T29150] ? lockdep_unlock+0x5c/0xd0 [ 682.574671][T29150] ? __lock_acquire+0x1511/0x2de0 [ 682.579697][T29150] lock_sync+0xb3/0x130 [ 682.583853][T29150] ? __synchronize_srcu+0xb6/0x2f0 [ 682.588960][T29150] ? __synchronize_srcu+0xb6/0x2f0 [ 682.594065][T29150] __synchronize_srcu+0xca/0x2f0 [ 682.598996][T29150] ? __pfx___synchronize_srcu+0x10/0x10 [ 682.604532][T29150] ? do_raw_spin_lock+0x12b/0x2f0 [ 682.609551][T29150] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 682.615341][T29150] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 682.620873][T29150] ? synchronize_srcu+0x20c/0x270 [ 682.625891][T29150] elevator_switch+0x1e8/0x7b0 [ 682.630651][T29150] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 682.636097][T29150] elevator_change+0x2fa/0x480 [ 682.640860][T29150] ? do_raw_spin_unlock+0xf5/0x200 [ 682.645957][T29150] elevator_set_default+0x375/0x440 [ 682.651149][T29150] ? __pfx_elevator_set_default+0x10/0x10 [ 682.656861][T29150] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 682.663946][T29150] ? blk_crypto_sysfs_register+0x11c/0x170 [ 682.669774][T29150] blk_register_queue+0x404/0x4f0 [ 682.674790][T29150] __add_disk+0x6b8/0xdb0 [ 682.679108][T29150] add_disk_fwnode+0x100/0x3a0 [ 682.683859][T29150] nbd_dev_add+0x733/0xb60 [ 682.688263][T29150] ? __pfx_nbd_dev_add+0x10/0x10 [ 682.693191][T29150] ? __pfx_nbd_genl_foreach_sock+0x10/0x10 [ 682.698980][T29150] ? security_capable+0x7e/0x2c0 [ 682.703907][T29150] ? radix_tree_lookup+0x240/0x290 [ 682.709008][T29150] nbd_genl_connect+0x96c/0x1cd0 [ 682.713930][T29150] ? __pfx_nbd_genl_connect+0x10/0x10 [ 682.719283][T29150] ? rcu_is_watching+0x16/0xb0 [ 682.724034][T29150] ? trace_kmalloc+0x2a/0xf0 [ 682.728613][T29150] ? __kmalloc_noprof+0x387/0x710 [ 682.733628][T29150] ? __nla_parse+0x40/0x60 [ 682.738037][T29150] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 682.744354][T29150] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 682.750676][T29150] genl_family_rcv_msg_doit+0x233/0x340 [ 682.756210][T29150] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 682.762263][T29150] ? __lock_acquire+0x747/0x2de0 [ 682.767188][T29150] genl_rcv_msg+0x614/0x7a0 [ 682.771678][T29150] ? __pfx_genl_rcv_msg+0x10/0x10 [ 682.776686][T29150] ? __pfx_nbd_genl_connect+0x10/0x10 [ 682.782045][T29150] netlink_rcv_skb+0x226/0x4a0 [ 682.786799][T29150] ? __pfx_genl_rcv_msg+0x10/0x10 [ 682.791807][T29150] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 682.797086][T29150] ? down_read+0x2b9/0x320 [ 682.801497][T29150] genl_rcv+0x28/0x40 [ 682.805467][T29150] netlink_unicast+0x8ef/0xa80 [ 682.810223][T29150] netlink_sendmsg+0x7f0/0xb20 [ 682.814970][T29150] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.820237][T29150] ? aa_sock_msg_perm+0x144/0x210 [ 682.825247][T29150] ? apparmor_socket_sendmsg+0x18b/0x360 [ 682.830869][T29150] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.836145][T29150] sock_sendmsg_nosec+0x14e/0x190 [ 682.841170][T29150] ____sys_sendmsg+0x54e/0x850 [ 682.845921][T29150] ? __pfx_____sys_sendmsg+0x10/0x10 [ 682.851192][T29150] ? import_iovec+0x73/0xa0 [ 682.855685][T29150] ___sys_sendmsg+0x2a5/0x360 [ 682.860344][T29150] ? __lock_acquire+0x747/0x2de0 [ 682.865270][T29150] ? __pfx____sys_sendmsg+0x10/0x10 [ 682.870452][T29150] ? futex_wait+0x2a2/0x390 [ 682.874955][T29150] ? __fget_files+0x3a2/0x420 [ 682.879616][T29150] ? __fget_files+0x2a/0x420 [ 682.884196][T29150] __x64_sys_sendmsg+0x1b1/0x290 [ 682.889132][T29150] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 682.894581][T29150] do_syscall_64+0x166/0x520 [ 682.899160][T29150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.905210][T29150] ? clear_bhb_loop+0x70/0xc0 [ 682.909872][T29150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.915750][T29150] RIP: 0033:0x7fe4d7ba8f19 [ 682.920150][T29150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.939739][T29150] RSP: 002b:00007fe4d8ac7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 682.948137][T29150] RAX: ffffffffffffffda RBX: 00007fe4d7e25fa0 RCX: 00007fe4d7ba8f19 [ 682.956093][T29150] RDX: 0000000020000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 682.964051][T29150] RBP: 00007fe4d7c37f6d R08: 0000000000000000 R09: 0000000000000000 [ 682.972004][T29150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 682.979962][T29150] R13: 00007fe4d7e26038 R14: 00007fe4d7e25fa0 R15: 00007ffddbe2a258 [ 682.987923][T29150] [ 682.993812][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.994044][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.994227][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.010782][ T5652] Bluetooth: hci2: command tx timeout [ 683.032519][T29150] nbd3: detected capacity change from 0 to 63 [ 683.037218][T29156] block nbd3: NBD_DISCONNECT [ 683.037277][T29156] block nbd3: Disconnected due to user request. [ 683.037291][T29156] block nbd3: shutting down sockets [ 683.065311][T29155] nft_compat: unsupported protocol 0 [ 683.189958][T29156] netlink: 'syz.3.6156': attribute type 13 has an invalid length. [ 683.190284][T29156] __nla_validate_parse: 3 callbacks suppressed [ 683.190297][T29156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6156'. [ 683.192314][T29156] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.232075][T29156] bridge_slave_0 (unregistering): left allmulticast mode [ 683.232097][T29156] bridge_slave_0 (unregistering): left promiscuous mode [ 683.232154][T29156] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.342493][ T102] batman_adv: batadv0: Removing interface: macvtap1 [ 683.344362][ T102] veth0_macvtap: left promiscuous mode [ 683.344640][ T102] veth1_vlan: left promiscuous mode [ 683.344683][ T102] veth0_vlan: left promiscuous mode [ 683.703197][ T5298] 8021q: adding VLAN 0 to HW filter on device eth4 [ 683.835922][T28961] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.836073][T28961] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.836165][T28961] bridge_slave_0: entered allmulticast mode [ 683.843786][T28961] bridge_slave_0: entered promiscuous mode [ 683.855457][T28961] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.855529][T28961] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.855619][T28961] bridge_slave_1: entered allmulticast mode [ 683.856437][T28961] bridge_slave_1: entered promiscuous mode [ 683.919616][T28961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.921865][T28961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.957773][T28961] team0: Port device team_slave_0 added [ 683.959568][T28961] team0: Port device team_slave_1 added [ 683.985855][T28961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.985869][T28961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.985889][T28961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.986973][T28961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.986985][T28961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.987033][T28961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.107600][ T102] IPVS: stop unused estimator thread 0... [ 684.117656][T28961] hsr_slave_0: entered promiscuous mode [ 684.118340][T28961] hsr_slave_1: entered promiscuous mode [ 684.118748][T28961] debugfs: 'hsr0' already exists in 'hsr' [ 684.118761][T28961] Cannot create hsr debugfs directory [ 684.207180][ T5298] 8021q: adding VLAN 0 to HW filter on device eth5 [ 684.238322][T28961] netdevsim netdevsim0 eth5 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 684.320415][T28961] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 684.360680][T28961] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 684.404602][T28961] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 684.466367][T28961] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 684.470867][T28961] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 684.473009][T28961] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 684.482793][T28961] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 684.483859][T28961] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 684.491821][T28961] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 684.492538][T28961] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 684.503246][T28961] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 684.576502][T28961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.593041][T28961] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.607013][T26035] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.607082][T26035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.628650][T26035] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.628716][T26035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.990566][T28961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.033004][T28961] veth0_vlan: entered promiscuous mode [ 685.047236][T28961] veth1_vlan: entered promiscuous mode [ 685.056034][ T5655] Bluetooth: hci2: command tx timeout [ 685.080347][T28961] veth0_macvtap: entered promiscuous mode [ 685.092721][T28961] veth1_macvtap: entered promiscuous mode [ 685.111346][T28961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 685.124683][T28961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.166826][T28961] ieee80211 phy68: Selected rate control algorithm 'minstrel_ht' [ 685.175237][ T102] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.175273][ T102] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.175299][ T102] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.175324][ T102] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.232568][T26023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.232588][T26023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.234805][T28961] ieee80211 phy69: Selected rate control algorithm 'minstrel_ht' [ 685.259394][T26035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.259412][T26035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.305193][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.305381][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.305552][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.575122][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.575302][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.575471][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.135132][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.135332][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.135479][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.935121][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog