last executing test programs: 11m6.010272637s ago: executing program 1 (id=3775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000000000ae3ff62791c38e3d14ec66e16bf69f66"], 0x28}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r3, 0x0) ioctl(r1, 0x8b29, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000ac0)=@proc={0x10, 0x0, 0xfffffffd, 0x2}, 0xc, &(0x7f0000000d80), 0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r4, @ANYRES64=r1, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES32=r0, @ANYBLOB="00002abcb158155400"/20, @ANYRES8=r3, @ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRESHEX=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000008ab5461af072d0d757cfafed428e8491b97a94703407f4acbb94c34fa984e4dd454751ab620144b1b9ab76dfd60064c1531d6499de91f12fdc7731a3cf965b1a74b5d32ba6d96c4399cb6f99f0e6305ba029f2f9ceaa80b7563401316da8192da38aa29a2449a0fdfc7ff35caee25dba0000000000000800e0f91086c5317a0c245dd7fffe0536713124137269aa00ae3b343cb19db73b889df10f74addea4def6df4d91a5ed8f85be9ab9221f02435d232ecf1af022eb4d695fceabe09b2033d25660cb11866263b345c3f874764328c32d7c9cc5e8caa754082512ca713f0f0e2d03a2634b758c456bdc2cb33400"/262, @ANYRES32=r1, @ANYRES32, @ANYRESHEX=0x0, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r0, @ANYRES8=r3, @ANYBLOB='\x00\x00\x00\x00'], 0xe0, 0x40800}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="440000000f1400022bbd7000ffdbdf25080001000200000008000100020000000800030001000000080001000200000008000100020000f40900450069706f6962000000"], 0x44}, 0x1, 0x0, 0x0, 0x44005}, 0x9894) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="64e41e00fb0488d3c57d3a3ee1ad7eeda99b2f6f78ada5a25f12b8adf4dd7fef7745c505ac5a16a1f8cf0a882ff2f5371cc11f39aff0fb7ecab9bb65a7eb29f2cd34f201bf14df02be6ebe1bbba5c096d55416a96fbfdbdc34f343e6d95fc2f48e0a5bf756a97ce6bbed9c9407cb55a6c34f72a209326a3ceb49e0ce558d067f468c07a3d0c2ed5ca4e86cc4ad74ebb695ed0b3388620c5114c7a386aab5ea0f754c0983ab84220ea090f0e4f982341dc33279a25f374df38198fc2764d2b54c1490b1d0aa2913ce93dc71caaa0b808fb2405ad8f3aa37", @ANYRES16=r5, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000000000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffac1414bb06001b004e230000"], 0x64}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r3) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000005c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000640)={'gretap0\x00', &(0x7f0000000600)={'sit0\x00', 0x0, 0x8, 0x1, 0x8001, 0x1, {{0x7, 0x4, 0x3, 0x3, 0x1c, 0x68, 0x0, 0x0, 0x4, 0x0, @loopback, @loopback, {[@rr={0x7, 0x7, 0x26, [@remote]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="d8010000", @ANYRESOCT=r5, @ANYBLOB="010025bd7000ffdbdf250c000000920001801400020070696d72656730000000000000000000080003000300000008000100", @ANYRESOCT, @ANYRES16=r8, @ANYRES32=r8, @ANYRESHEX, @ANYRES32=r9, @ANYRESOCT=r6, @ANYRES32=r0, @ANYBLOB="5c4f0de1706fdf2961cd863b10b785b2a1936b04bc6180b499bb7a59432f24906c1d6e6d5b71e834e913d99e662e4e1c8497500598ca91ab966337492d67d4689710cc7a8c4d1be0861b52797229a7afde291464e746dc5670b7759f3312e94304476ed8cc4e2a390e352e81400682cff9788cf691068e1bdd7858305268ac62a1b2d485de0037365c44ee89fcafd330cd4564e33d7b5f70d22db860ef72281cc3e0314963d743e26d1be860100c5cc3fdc97f3979"], 0x1d8}}, 0x8010) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e21, 0x400002, @loopback, 0x2}}, 0x0, 0x7, 0x300, 0x0, 0x54, 0x4}, 0x9c) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002bbd7000fedbdf25490000000c0099000900000007000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x8080) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0xb, 0x3, 0x18, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x700, 0x10, 0x7ff, 0x3}}) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000015000400000000000000ffff0e0000000800060009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000180)={@remote, 0x11, r12}) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000001000000f400000000000000000000000a0000000002000000090001007377959a3c5c1f33797a30140000000900020073797a3100000000080403400000000108000860000000000800044000"/92, @ANYBLOB="31d311b2cbc704d78fd267f5f69e9765396b5e91b09703c42cd3505fce39a99225f838c16206731e6e50626b0720"], 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004090) 11m5.493116116s ago: executing program 1 (id=3776): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003400)=@newtaction={0x2a68, 0x30, 0x9, 0x0, 0x0, {}, [{0x1dc, 0x1, [@m_skbedit={0xc8, 0xd, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}]}, {0x94, 0x6, "2da0473cff0936aa23dd96f3e365ab5469ed8aa72a6ab28abce796bf730505ade2718883ff73b4dc8ac1be47ec1e77e2d9cd606269653f774ee53061d5331bebb721e0f20e7f3dda6bc7097e19aadb69572a4d97c02397cc8e200a411bc860fb6b54b559149f7003cbe402f3fef0d25995b6dd8bc2dc0a650fe4991917603802c4b0a1141402d0340c64fd98238833ee"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0x110, 0x1a, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}]}, {0xc1, 0x6, "4f9988b5a6bc1ccde32374314f881db464ca7357f47ca9eab41a424dd6131430230fdfeb4eb1908685b30e00d780d373111820c296f0208c65bb142e26277587b2b72b6e3e95855c2302b9b2d9d7c721503526b9b19af0fce79f975de20330642898bf413caf6cf742b266300783775500c2133fe8152641db050f5550822e3355b25e7548837fec53000b6246a5b911f92e18d5d2250cf1a0ac43a60bbc9b80dc5355ed95674df4fa64d000829a62d3ccdb45f1171877b964b5246cd6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x2878, 0x1, [@m_vlan={0x108, 0x13, 0x0, 0x0, {{0x9}, {0x68, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0xacc7, 0x1, 0x1}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x7, 0x3, 0x1, 0x1}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x3, 0x1, 0x4a83, 0x2}, 0x1}}]}, {0x78, 0x6, "f3d6e695107d01adcbe3dad6aacd6f4dc6c7f77d5aaea484c76b149af5b790d113976f4dab378b2bd5aaece52bcb4ff092a87bec2ce5e53ab6c5338c2e7b180baf8ad6465b46ab803a2d27718bc7f3f10ac3b62a34c84699a7712c172a6881086fca777bba60d99f4817a8b23c23ca3a06d0adbe"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0xe0, 0x1f, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x7, 0x4, 0x2d6, 0xc}}, @TCA_GACT_PARMS={0x18, 0x2, {0xe, 0xba69, 0x4, 0x6, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x3, 0x1b5c, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x5, 0x3, 0x0, 0x800}}]}, {0x60, 0x6, "6a5f8ab9cd46ce993b08957a703a75e7f879550ae5b7f8891e2204d6a6c9c05b0710e7e47d28c85acacb22539e97d5a7c11a2bc6d8fa0ee0eeffde1b87e830a6256a23f1f7fb748218b7ec48072fafcdb3071d3abdd18b9dfdcc2e18"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0xc8, 0xf, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0x8010101}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x5}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x4}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}]}, {0x5f, 0x6, "46d7ffe19a320e84270d1aa222266eaa6fffe12e4ff4cd8c0ab71a8bbd3aad5219a21040987a503a6026f0771d9b3f88b2ea8dbfcd6e360334fadfac4291b5288fb364cec57ca48308ce3b729e4a1011d667ab851b9f856fa2f4ad"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0x8c, 0xd, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4f, 0x6, "3226fca67a08d9610abee837fa4750a71b339d71b72d788509cb50e0b852bc21202ea874c8255ff4fbcfcf0ee5cd5c26b200da9876af34d9be2387acdb24608d931974ffa21653ea809e61"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x108c, 0x7, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffff7, 0x2, 0x5, 0xffffff59, 0x7ff}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x9, 0x20000000, 0x3, 0x3}}}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0xffff8001, 0x4, 0x2}, 0x1}}]}, {0x1004, 0x6, "ad09c85955993d0dd0fa568d1c52d9e7986e79a64c3ccd4adee9ee8238882fbdc50571b718db451900cb8a8d4f9a4d0dc703283d639de101d595c3d927be46cfd5118d936256fb92c062396f443ab3ba0ce4831c93d05f05cb363e5caee4bb8d3027e8563ceaaa300d2c3de559d5f89a9e9e44af7c92c25448da088f65637d6df78f8daafb1dc1a82879656fcd553b9bcafcb26fe70cd2b2d31d7febac5a5f17f6104c42c19dd2cedbf21b4c9b6240fd15658b2161689e9347a810698e4ef4975a447c2ebfba8ba5aba04dc7d8aaeb5415d84228c63414ee790f5c87608162105c5a7fa7a1199609e90254bb440245eb8e1c69f5361a2cea3a80bd452627880fa25b06b3903b1148ead3547dcbefcd117e5af70226268eb30b4ddb20e1e85d56b8d001b8640fa9cdbe447abb51d34b966685b37d8981d530c20485ce381baafa3d8e0660551cf98e1062684ca0ef5025d1566c17f0812717ccc6975ca10567fd42bb354b67c5f65cab463f17bdb8a2a4c52a6e38fd571e48a1c459b56b62a1497a56f001d09cc06ac91100678461324c7bdd5dead1ad1e9b409e299a498b79c348a52113fc7a2547b27533d2d52cf9c1b713fc7acb3a52aa32835bcea7916b56c1a9929df97724847629f30aac2867400518ec7c4a1b775274cdb86d74cdd8af7b67cb1c6c722d9b93d5904696fb260272ac72b7b2fb2084afa21b85b1aa31165063a96b38848ad51909dcfdb59673b1e9aef45294c6e8d16763b731dc154d8cc8e8e67dc4fafd8ecffa330b48911ec75f41d6dac6bc0d1e63ab1b46fc09678854192a1981e408f21e42ae09d33fefc98e52d43160c79f215d738dd2ab0f78fd2f99b0c2b02d8ef7112354b3af7bedff6cbc6282883410d54699c877a0ec7568aa36e2871443701f142c52a94fb870684ca394549eb19e95008cea2825ca30085e0970bf40cd3fdefe7a0e6dd4fc4685a8cbc2b4e35c7ff17df1d1e1b791ba29e89f693865766a5fd66f69b5a4a02b09f506580e2fbbcb6d5f7eb9596d29955fd093c3e79a0bc39fcbda3d85c3af69a2ac2ed6b2293e2400b812c03da0f6121c12beef345585c9fb76cbefb7e7f1a8467cdc850ad4d718d27e29736a4ba92ecdf665dcb30d1f6b9472b52b90dcc76962650b10adb2d8e8779e2c81938daba27a22dfe978f45cc5f620b8675f4842f4f5a4be0f6134aece4373dc87d5315c4e91249405646d720f8af5b1f058c27920f658269cd7e83fe19a45ec43359b0cd1a5cf6d75c6913102ce19c1541a4aeb83dcee5eb46b09e97333239afb8ac5f9b3adf75303e9709840aef868d98b1776ef015fcb20604068e40ca495d6b0733bfa8840de16297adab92b37bd098f9a5a357f5457d8679084be0c243025d41845e9a660e50729aaef26947e5fe53dbba076113c2d7d9495b9a7043ef47486113c72b148cd41d32d4f86d776ebe496699ab7c92f0e39ba6ea730fc7fd29a9749534869f00e797f82f95b8efc72342092b3e933e6e2e127ce8472e0622a229f5db577e5c930287c1fdf747c4c2e72178eb3ae142794969c7314e175993c3d180a7a5845594e2a47e5bf84e74d4fda3c6ca50e373f18e79a2a554477eeade3cd6e0f05e9de3ea460d1e6cdb19478f88cc6b9d431e7a6483c829f4f657a34075123b274d7f61878355012dc9275d2a3cfcab4c34100cb8564b010ba9d22863a849a90741e9b108dd18dce5ff630f948852b603b6745a3609f5e8aafffc40034a97c10c3e0b637dfecaa01a3d33876d9748d88ae3649f43aa6db4885262169870b07eba8d51aacecbd61d597a67f4c61488357c11b7d0a81252fac4004c847cd9c2724c4a06999479e31d807076ce8873e37745d3d6f481ca93b4d66ba0cb5cba1492813b9c6a9ca7c3392233dba9fb0e64ec7582313a0e351bb44e02d8e0d6b130da1cfc0d316c8ec213d10574088f4250ab3c1d421de59fe1efd920211c1b926e69a73049c1cccf4b995eab62c193dbf94d7716af5eeec5639ba5d6bdd150c86386834f610d11e3d9848956f1de194509318a819960579ace31e554f6efca7d42b1845e7d6062ff2d7c09baf4f13dffcfebb86cc4537e776116f68a4e3742ee492fd060bd5ba69f1d06059c9c0191a7f94ffecb13f6aa2e8d61d34c66d33019e6e4035a5894dddaa3e1bf77e8efbf49e81f7ed07a03b0c2d2546e23c3b56fcd4847ee002f99334fc00e8d878c1d1d668f65da318f74100d823f0e52c3791bd9f84201abd237771c79861e2e519f1f28642c03a4fe7433e5f35da9761322e26c122c179a1f0557310a1411b571873a3d5adc56affcf0cd13794523a8f2adb1f3d78521db1e39a5ddbf87a8b8e7445e14cd9d0cd59e67e439b782b764ce14fb89b750cbc3a9b1d6b0b36ad36aa9a4f2d9a39e67d5b8ba76d915179be2fac5bf99fcaec5d0167c04d5f6c6706a29f4839137939508500bda059481b37895d32e04d0c03a4650bea98b95cdf20fd1ddc01f59d662eeeb11ef6ec9120c6d3fec86b3e3108d7e2cab7a0f2fab2afaa981002cb53318235700eb18ebbf8b81904c9808f2ff51688182e0d9afb853c123584dc2735bfe525a559339286b0e79c79f67a5378b93d5a4fd72dabdac6c31da311064a28325664b15d1d4c101e88044fa0fcfa72eb9555fcd301a034cd8016ae9477a919e4dcf6ac727ba2bde145e39ee60fcaf97165d49817ab02109b59a778b21957b1d6908cfaff4498295f3498433fe72b75ec8a9403b0fb762d9b6930eb91350762cd2fd0da7e6f264f17dac5b805623a3b08a7507154938ecf61d1ffb7a08004528cc17ee0c0bf6b5cfe6a1764586e1fadec3deda1ccb159ef32d263a39af274257d6e9a54f740d173ba4bfd122962395dd25d3ebfd05b8f352790e3b49218ff56da216ee84364831150021ea640e42ee49819583ba000894e57a8072ce4c67e4ab5c25cc0ffa41f0a642a208764696e253ccbbadf0f4b03f3df79a8b693750f52656b7dc4f2bf03c90e8d3051a4b0758b5ed8e0b18f085c68079c17ff433f7ef25ff33691090027e6170abc6daa69fc28f9e6d68ae06e7b8b955a06b4754e05279c8a5c1599f0cef2f5c8903836519e77cc93b4046bc7dcfa0b444d8a36c629ebaf3c71d841103151c4fd9b5f125358c8db6f20264e8f10686a6ef3385cda0f00a608775d438b27e009f1fcdad7ddf9566f3da4193e9cb7e6e88cde5c45a548ef7b45246be5672985667eb3b35b366780e2b80ab7c002777faa65e54d3fc49b20db2de8e52c62ac09f4563c3fae32e3ecb4db892e35a3d0eb17f3a167e0535e67341e1a15dcfa48a486e105390c31d282ef1bcd4658b801fe2a6147fc885906d5532a7cd9d6fcdc23b9b3787021d1a7172a48353564e5bab678b92541547003a70d9448ee631dc3552021a1e07fd26e7308e80b649ea4fcad232a404149d29ebb0d1e8b30bd72f52c7332d3fd2fc8c7bf65f7da344345ca95b6136ba23f807ad1ce31451222b8d7fb821094ee8630381480053945d9e145fed2dbab30d7bb6c3ca5d21b93a2f04cf2ad4e0dda4726d481657ba18f08459cc33ab06aaef42f8fcfe7fc37a45dd6c5161a80d01e43701a35791048d5675b95c5ee966a44e8629835b0b2938826e6528f59701eebaf7a00a4c72b9e3d78bb310edaf30edcc0b2846fad33bc49eda100cf552f57f9d5ff014aa521c0e6c735ea7a76ea84a02c815750f18970c486292cbc492874715ec1b7d83291e94d34653104b39d670b88212881399830799ae8f70bb8965f662682559cc065d0e9efec6c1afe284e85a7fd1c243564a80a08beae61d744b1a4aab7f7db87c8fe9b7bc165d5a51be867723e1b2c2ae3bbccf4470ed922e7651052b40bd8a9aee2d51a7f20de98990fd72e05239807b696424601c85c098e485699d3e466237c5cfb021e7be24cb40382294d4e710bc2913b7fd738928bcae9a00092a75b639b01a36b3ad1d15b680a06e56d5bca72ebe88ae698ad5ac38af67c97412b74a4d0d9e118374ebdfd4da87ac5bf7aa7ac3e88e2c99f9c3bffd7cde5bab909f4ac524cfae5a587e85b338b9d9f1eef7d90ca8da54ef0bb50f9299de0d693023908fb4130c7fea8d7222f75b435fae192061b7715afe06e255af0dc163d6b0ddc5dc2c7651c6bd30eff59fd40b985ea89bbda7bace33891f2fc04625bb779800c4003aa00c20abcd9c31f4039fdb18d4b0503a1d49758e41f881e8b0a391a5646755f1820b2affd87924829b981565b196cf29d45f2ded541003a7a8eaa9d782b80131a35e642aeec8649d09129388ff285afac196ef74aee1420b1324bf00cb468e5f6d580496cefa5f76d29217a64758ca8ad235c433654e1ef5791361d82dccfab30c26c2b977f356ebace38047ed147bf647bd26429fc0b0a27f0a09940e0224dcd91276562d6eb6985c2144989f0f1e4f6aad1abbba1692b52cf0db953698dd9a0f401e3b6aae7636e86436fc9b3eb9c8368171a8d0247401a252f359ea9bea559efd1e0ee491968cd9cc9c2dbbb0f190cb4061c3a293d5653d33fbbcf8fab7bc142e2cdb308dc80a48edc0eca7195b1c73129efc7060137909ffbb48ac0ddef50d63ac85c98bcf029142c619c8fdea5d8b308a9bab61df2ae4f3cd6f31c7f3cdb8c325ef9d3694ec0218cc6c1ae90281d23f394a4853038ed7a49211316ba844a27dad4cdf00afd872470661d369823b2ea1c8e238ed60b08c0de2d520d246f7dc8a27d22ceedf0c7859659b68a9366ed76c33588a00e7ec554a11c6ba14da3bb66994d4776b10e8d513def0a4ba2b3884d6860f7eea1d50a8555bca4ec8cf28762e5a27c170a7432373d6984c6547664868dae3d7934dde006c76ee46d84c57d9c9f66d78b50efbadfe4a9dc4ae84787228f6d1bee20e74e8756d2b6870d5c14f2598e05965dc9f4f2f22e38605a38200f339d1eac3279607a21df48d36cd6e18f30d2c6e93577ebc599dd4790db540500b6a8eeb68999066680393efa52a50af41edcb8b90f1b3267d42660aef7fae8bfc4c351f5d7cca9779b0dd302b13b29e02eb06e67a57171ea2bd76c181a5c58e180bff3550e9508c13fc6ac9296b04464991a15b5d6ffc489163946beffc2b570a677be2208687f71220f85369dae9bd3b971220ee9de10ee8c310ef050f9bc295ee43c5b966341d8414aa4723198890997d54f9de50efe2bffb93131953915e4a51bf65d0661056855bf4654718438d0b2242e73e8efac190b45402b2de8415000c863e29678e05b79248aff98b6d8ae88f1430758a5a963d0dfc3a76c0407e59d152f6ec2af9901ac4697c63afa2d22f3ea470510a0ffa3eaeb92336ff03ff9a9bdd50d294f9c1afb378605353543d6e0a5f1081f5635cf285bf44d145f5a11115806f61063ef7223a4b60b29b83dca8d77cb2d757c5a8686657e68b3796d53cff5b6709e35106d9fb59749086b3293aadd58af4537aa3422db568b376e644c0e54d033a7844f01600956c5fbdb4ee7cf9f4b2871c8890c37e4be165fbad28f685df75346d6595a109f47c9749b2197fd2bd447591e87b13f5f813c96e483a598ba6326a8edcedc5952c756a01301b861c7eae44dcde79cc20b49d9ba5efafc053ac53cf2ae434d3576e68dcee84edb9d473f14f123c91e4a84702cb32103410f80e0e4dd622bfe1f75cc4f99f366ec88192c3ae2f4e7d66b310cec3c9e81bad031647ce3f1a6c612ce5816f9ed8cde5f804926fde32f81c4d8826e4cbc57d343fc9412ef6ddd8ba2dfe302aa2851"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x190, 0x11, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x3, 0x6, 0x4, 0xb}, @private=0xa010102, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x4, 0x6, 0x8, 0xffffffff}, @remote, @multicast1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xf, 0x10000, 0x6, 0x6, 0xc000}, @remote, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x7ff, 0x1, 0x6, 0x3fc}, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000}}]}, {0xc6, 0x6, "63df9edd3ea9a54ed71a24256be0c48704ecb798d1ae6b66864f06b10eeec9cf85b1135906022739223f0b716cbc5bafb0359ea77ae167f902a8db7e8eb35bfba3073b84a4f7e1d1eb7ba8e1e34c8f2da1b3387e1bc68663afe9078b5475db2fbc1d433f4c10c8decbe106fdae288b774e0b9f4fa1c78997749aeabfdb6af6f54763d2d526603ac8c6c0cd5860277fafa0c61a879602a2ce7729865127577091e217bf756ed7ef6d650ba2673d53487b495bbcd5d976ef6b5fa2a159e59b11647a90"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x13c, 0x9, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xc9a3, 0x3, 0xffffffffffffffff, 0x7fff, 0x2}, 0x34}}]}, {0xf4, 0x6, "2438b620436c9e9608f50967a5fa30713334255fdd8d2c3cedbf2b9326456e8cafc010fc95675dee33a422a0eb6a0669cf633f383800b42648233f9021160abea669655911593ff48bca937c229921ed6ccdef0f2ccf6e16d4b075f6e196cb0796c282b32ff35d01ffd4e12fedcd7f7047803c64cd39419cc01391e912b8b104647777a86cead4511e7e7131f1ac999797a7bb25ef3e7be874dd9e3e76fdfaf381d6dbb12b3b5a2572d6013f4946f88d2a282934aa4f4a79ff5876fe5ed4c65c285c011969cf65a271c4b5ab332aa7cf878e46c09cfa339759bee6b0923f8c31688ac612950f1fdf9bb7535699987e5c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_csum={0x198, 0x1f, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xff, 0x40, 0xffffffffffffffff, 0x9, 0x5}, 0x10}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5f, 0x3, 0x8, 0x2, 0x9}, 0x7b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x2, 0x8, 0x752}, 0x4a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x8, 0x3, 0x5}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x5, 0xfffffffb, 0xcdbe}, 0x5d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x11b, 0xffffffffefffffff, 0x1, 0x2}, 0x42}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb19b, 0x833, 0x8, 0x53b, 0x2}, 0x1}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x10001, 0x6, 0x0, 0xf42}, 0x6a}}]}, {0x8c, 0x6, "ed87297ab442c23232ba8dc51f411e192e5fdac1e3e9aeda4dfcd8a8b650fece7820a2069acf7d4beeea88acd57989f1180b590be827f3109500c590abda5e1f43c887bafc94c4816b34e5fad7cef409f2e8df71ec25a1cd6c73d873b5eb791557be4e922b28306572b59191b43bb6d5b9cad4591e5b460ea9a0b9cf08a525fce827a094dfefb492"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x1048, 0x4, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}]}, {0x1004, 0x6, "8415c9643a4fbe1d0eed4b9cdbae0b7747c9464d1914a9af0afecdae0c802ad667b5078b096dc18d9c20255be703cec39fc45cf6af9727c43357216443a7d875869ddf2d677b72f9214f44f9bf8879eb3de81025b3481a1c17514fccd02673c923d9cdbd882ee1c33549b8110c95893b3b5085c7d0391fccd3ba955c72e2e0c2f29b66b43c42e6c9d9c674851b03001cdba4e711525a387693217c79fcf4bc2ce7eadb51b83d60f34d1d5b7ac09be857264c8c1ef4b16bdc5e6089064801189dba66f42122b0779b68b6a07199a483f05fc86f614e42227cb3d1ee641ff15af60bdd1daffcc7ba36278da9228542ef6fa76605ea2dc23eeb5e4916bbd740176b00c7f7da6000445520c4251a2d4a6f5cc95b7ef404c0d729ae35c37eefb6232c1a4960833ab3fdd189587be0522724b0421d31a45336d52d09475069722fdc99b9e4b280891a94373bc229893cb95727e2c37b2dd21bbafaa24c663d5903a69a620373df0fc558e5526c9fe946144f9b9e4658746c80bce20af5786988369cce3bac70f38741ed7c18818480e55f690a3da6dd28e66efd738ff807929e4962daddbf8d95ec9f56111f49717a4774155e3381ba589da628e89f2296e46cd8a741620e73802e89b1316d093be7268cc9a057b6fab9a38de55c953f84947a8c8c63614cee102ebab5faf068bc677976b0a98836064e146f7c4cc7dbc860f83f0dc4c9c5c14bf8d763f8ba67ef3bb7c068b8ffe0b6ab6db6b77524c8fb02d4b67bb894c2975f974db24968917a1823748344e653e29e7c4d3d24734c1ad49233b7c531a155831ccd8d79f4a96457aec8c0fc5e3d54c9cd5230e1922c4f5568138ddc3cab27b67d9039c9e8ede841ec647bed64a8518cf4b97563e4201bac6a70eab650a6d162e12d0e59022f51606d57f93b9398a31f8aae0621d339e6c727bdd5f0a71cd345a459671fc3d3f2c71b1735a0c2eee541de06bb6e636e1641a0bb3e3938003f42877e6a5d315834a279f514e392e8d643b94d5584eb0266adc9074ebc3cbd6a36fc8956be2309c49f977aa96708495d406b6731481b6ce2b85c36a397946388be8c7462c969235688fce096331155e4b5fc64b4c158436e373dd05d231ff401d85ce4511f2bc43995a658a6da810423e5a1b9c9651a56f599097e6b8e220402df65368364b21d6fa01782a35f2b368c82465ab8ecc20b643b98c633c1c35618b5c912a751a6b8467d9fd7705638bba02c7654b9e7feab6cd8f810909537c42b8c40f28afebb5f006ed38e202cd4814a2598b65b17a05298c38f49f0b31f46182d391fe542e3fdc323817fe5b7b3234aa5615e540a6b2a104bcbc1b297a336cef40736ec0edb02575c56ef57dc7f9174abc243607453aac1bcd816c4509002db5d85a7ca6d0670824c0d33118b621ae651a5f9fde5b72b9c63e9fa55872795df4ae0c17850928de62a2d7294d6194ebc2664b45c02ecff08c261a322f94285d5123fae9621cb932b94c40770b4da19ada5654141e75faf58b42133bb08276f15529f56b3baced6bd6e10b927f3c52852164fe1824b407b7d67df24466c25ed82855aa9537254b2461cfb017e33a17a01856b8087cb19a1ba1a331a8f0519cf1a3779299d217878c3904d7c5477e91a62a7da7d16fe4ad53492a28b5452ce290566f3262f4fc105aa468c50464ff17410e67f6a01786e33522b370e5c2162dbd9c7369a273cf7546bfcb047af163ff5c3c2ae7c99d12ef7afc1cc40a6a88251f355d9d19c63a4a40a2e13d25157e83321660b8bc89da7ec38aa09e223b9a8365f8aab0c19c0b9a9f2b77b1f9b18750cd7bd519c30dcbfa8cf86e56babcdd6589143a4cf128e5b20a282b77686b5e119c98f60943282233141f49c13c3ad714450a92fbc0065f0244ff02fcb9bc35185b080b9d19fcf26b08f1aa4b350bb574ee6df8bb2abec6f97047948765858c209a27fea0e6aabb6c2ea84ed58249d27a3525e6abca0b29052376173daf510093cb5bbf0438eb8776e12cd0eb80b767cecfac8de5ee2c91bba764b1445ea7f885aac4bc1ab13f25a2641420cc01209a50a29d9f826bba731b4b0f102a76594dd02074f1bef8226e8642c640c41dde6db6b8103b4387b55302f658250ed6c7b29cd778c0c34e83db53d689a780486719e01605b86f1cdac9b6a0fb929ee9ad7dcf2dcc1e9ff1685eac9f5be782db63f4f4400def43eaa0cde170525763d482b5e4b045487054465381ddd7a987cc617b7bd764e362a0238f2a67d4f28ad9e26c75896f5a32ca2b7908d8738eb8452c25931cf90423221325d0cdabd8d398a690a14744b93e7b497eb7759651c6a6f9bdd981be12d802f353fe157ae8b5d0dfeb7d448b89faca3ff62e80758942ee21c801f8f5412a4fd5d8f35dd228635acd09fcf0249a961a92344982156705bb2106c0bdf07f5141e67a5a1423d438bf3b384a68f945a7ff2d449eccfe40c91ad7f64f7398179b911fb9facf479e061b9c6003e135b81cb36c62a65c2070ea43f3aa52f346ab33c84a9436084f4eabe5378e5aee7dfc5886a3cdfee9546c88510fcb2b5b9125c113c0ed956c6a6052844f6341206af5b8e0fd9038dd9d1651ce5cb7c52a0dd252468e80a424cf04de9d3af4ad92482d9ffc8aa252a5087324c66475d27e34102bced5b6183440358869dc8ce30ee212c720ee1db2c92c029380761c29b57191aa57510b78ef911dca32051b4a6277c765f02526781d6f3c14f0b7e43087e7775a0119423b2d9362430f234a2309f4825b174230d1e5081d6d7f1041f85ae8dfb554d19ba481269ccc9b474190f8aca1560c0d42a8f262f9668291a57d604fa50fa328227804d42be01a2b7bb19b32ac407728969b1790232ecd835b2fa06f2b964945280a1b0d74df924c895517af615c72fdfcf84a290b4fdc8f9820e87e00681309bf090df98ee2e1aeeffb905d502de38247206bbd3e7e20e2062b516bbe7d6e33f0869102abed2970f98f4dfad120d611e2572dcc4f5d35a72b1ab34aa74a7ab641534e47a76cc23433939e8cc411941d8255741bd310ec6ec0ccf0fe25fd77fedf9e05209fd716465acc6efde1e5e0bae2d9408918da2bbd70e2bf45ea77998f5f9e5d0fea16076d2d7d9fe21a41857a221abebc4bb76f24b6572c1e17b47e4d130e8dcddbb6041fb1893d04175b0ec399013ae2ed43c64910c35f1b74a449500b5813db28da366e1ef9f8fa4a7f4fa956b2fd9e271a11e22d64b6ec5cec26401bf46d40038debd7704b544b0536387d8eaa1f72133ff0991d37559700a332fd48012c2e61ca7b04ca012a3e25ff8567a87c074ec2a9cad7ee5393a7e8f13d9d7d0677f9c35a0a90f5e751198861e9c0ea4cb701ecefe0d3c3ecc5e93ea97b7a57ea967c783494b3f20998bfa33dfe38b52ab7bacff87c9d5f8f34b44de7d281b2febfe47e67505faff137e6a706eb0827bd3b1b725e23ce0b84da41402874715f07985567b615205b032adce5e6f23bd1f496d024a08a7d3f9ba1b01de9173b92566ae434b583ec07c5393ed548a29bffec2a80516c2c2049670aceae6ebc0a4c78a258ad2f48d193834b168174d97fd818c75ff019822a9ea6d170544b8881e474465fd1263d5c1527694937742e672200fc8abd829e2dcfcb2433f05a17c4121fc0bc4ebe77322a05e3f6ed0cb085963a742584e46c20823a50cf3dd927a7efad50333eecc5369979963ff86019c42894a69b2880dd65b0a6567cafc1b701caf55a2be18f3c7a28eb9c2745a19768729213a1bc44c42cd4ea879917c637ad41c32436ada1a76c88ffec94d2216a19a21eabfe529f49668af15ce664053aeb9ec8bfd708abdf2d5d597fab72264a66c87cd3d7b29d5d303b1e5dd22760ad438f204c3e4cf6e4be10ce1875c1a1f6a99116624df5111454a908b36f2c4d477229f50cba6777a286ecb864fcb49f299ed38d01bb22d8dcb9b442c9258e1af4290e2528b175f776bf983e88fbb1d9c5aaac93209207305af3a3314570fdb5b14165afced830c1a24fa6fcdf4b9f0f2db0d55cf2bdf004f798057921589b366cbbedba159cffbb528b1a7b349b3e8d827e6add4b874d40def2ab4055e32c2eb025c895e4ba1904585da114e16bb2d83f45bbea677d6bd21849b17e729cda889eef79aeb0857c37599e2e0f18ad889d2dd0295911e6d0688985b02c97d5961fcee7201a187f486d304f4ddc0ae5584dd6253845daacc6f97fa30a1332ae54eda092516ee95c1c47515f39c3ce01001599526e36eb0c36b984344d5582665d9423a99840fae0a55570c445e0ef5a7607556f3f55008f189b45be0bb6f9b515290078a66be2697147f937ccef1fbf1c8056d62da5055d61f074b64b39ee96d4d9156801078755579b2c62b8ec601ac9a051a12d903010346ce1ebb6a1bb8dba4b096a3977a5afed48d68b1b409fa2dd74b634d4a51a05a681d5e121ebfb88e6c70f66e2b12d2cbd8aace42a04899d675a85e236c510923cb7221818d548e1b5daac41558c96a62bd314325f95656f999b0e2529edc44579e857dbc87ece5686b0450d8d898c40d3a5af130f566c9035bfe3f77bd6b530f015d2f0e5a458baa71f5f911a9271bc2bf363a88e964a785fec5613346500a5a0d0743639c15cd5c747c2eb25927d88bdde160d2429fa6487c7bdd5c8443f5d7feebbfbc5a2d7436fb0e2e437ef3c192ae7b893078b627bdb6f9fd8f58a439506de7834561ab1371fb9d3e5f669e3424446be958463bfb048cb82a67e73457c767befd56b7c5b8c6801227b962a5aa787e6f3de942bae601cd3e9ecf73b32c878ca028acdd4762dbdd19dc469fd66800d2d417e2fbad7ad62bc71bbfa1353346d087e50156f858753189beb81f59d5163df06d914f820e7e0e38b719e584a96bb236b19bb70fe0095f646fbef3f7ac3f0cc6362570d1a0cd4092eafdad900c991a2984a53653988bef5e5ac8d5080de3558637405c7001b92d6551b8b820fdd9e444d2527012314f0eedbdfc1f4fa8cdd0a6e9235526ee562e527ec3437894df13763d639cc0f807456beddffd0b377caa03e09d7d0883f9135d62b2a029bf302aa9ac2b64a39b7697c01e137ded66fec582db208142bc14cb91c322cd1761a0bc87afbfb06ca1d547c751af77953fad1e73035b64ad6c193bd7051d0a6a96342cd950f859dd0c3992d4c8058d9a4a4107201cf79ed9382be04a7cb696f5ac88081e38cb80e51bc86781472b38168bacf896b373c757a5f27a4c9c97bc215d1ce45babd8ac075db22fa4db4e9440837df81be765a5b13cb755c3b2ba0f9452155d6ad955e4295f0d3e360116107f5be443e86b24eed02a0e344d81c619df2cd8567608c595eb8c5e63f27baa822383bb0a2769cba9c70cca00f13f5cd863a646534d6371103a8f595b7f2a575b0885ce3904a732c965c3530584e2ab4a511b39d9d9113ae308b3f4ef0d6e0bd9bbec7e676531958f0b289a3bf9f464648848740508e677364e9e3191f9431d49a6a23f811d5af25e57b51e502424d6f36c6c3e98de2f5e89d9e36728691b8410cbfd45b0b60ac9af809bc2328f6321aac7eab7288a657ea2b24a33c81fa9e254cb1af0f3f1767f067ce9a88092e92e6090ddf26bf5ec6b39801e2504a205fe3d679adc8b2145ee9293092bf1cd734f01c1c7101e20c8c5ad078d1ad131095290779425e9744cd4035fff8bd459f6a24b43c52c6c29e9c11c46455b98f206a020eef569c8c4085748a3699a971a0c612e2b8e36f1bbc320"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x2a68}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[], 0x138}}, 0x24004000) socket$kcm(0x10, 0x2, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 32) socket$rds(0x15, 0x5, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000004c0)=0x2, 0x4) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6d}, 0x10) (async, rerun: 32) ioctl$F2FS_IOC_COMPRESS_FILE(r2, 0xf518, 0x0) (async, rerun: 32) r3 = socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @remote, 0x7}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000004c0)=@ccm_128={{0x304}, "7afeaf380cd65f74", "88bcbcd203e72719315561ed6f8927e6", "4049791a", "5039c5561fa65c8c"}, 0x28) (async) sendto$inet6(r4, &(0x7f0000000000)="442e2717bdbd39f5d2185ec9050d681a1038f4288cdf755974233383e991deafe13ec24721ef116fda212dd27e0721c58186bfbe1d785b388574284f5aa4690e75ef85fed10d5ea68101b561eceaa0819d3a08dd490e3e7329bbd7ae3046144c707d3711683e31c48321a00eb417197763febc793fbeb3fbe48b0ad4c53b53a0310a82a3b056fba67949c02123fef77ba70ad4fee04ed92b740fde61d4772679940150e8983afa27d5283cdccaaa86d51aa1e3fdc06ffdd7533cf66aa908e64d866539a7f5ebf84174207b3fa5f28033e38439c6a1fe21e545db15c52eb05df08c8a7ac656471e8fa1ba9733abd75f991a", 0xf1, 0x40, 0x0, 0x0) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(blake2b-384-generic,rfc3686(cbc(cast5)))\x00'}, 0x58) (async) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000015000103000000000000dfff2200000008000200b82253b7e0db06e1c8108b8358ecfdc5fb3371f73619ad144062c134b30075a4f506946c577d9feaa2908f8e82a588ca575caed9eb0e85df4579ba5ff536fd398dc1de1928305953e20bc8f3894095637a9eaadaf38a8f8fc13c25282c70ddfbca0560ad103300cb092a", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x20000080) (async, rerun: 64) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) 11m5.109645944s ago: executing program 1 (id=3782): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000580)=ANY=[@ANYBLOB="11020201"], 0x18) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0xd1, @remote, 0x4}, 0x1c) (async) r3 = getpid() ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000200)=r3) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) (async, rerun: 32) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8881}, 0x10) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@delsa={0x28, 0x11, 0x400, 0x70bd2b, 0x25dfdbff, {@in=@empty, 0x4d3, 0xa, 0x6c}}, 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async, rerun: 64) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) (rerun: 64) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRES32=r7, @ANYBLOB="05"], 0x10) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) (rerun: 64) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 11m4.870493866s ago: executing program 1 (id=3784): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newtaction={0x524c, 0x30, 0x871a15abc695fb3d, 0x70bd2c, 0x25dfdbfe, {}, [{0x3f74, 0x1, [@m_xt={0x1ec, 0x9, 0x0, 0x0, {{0x7}, {0x198, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x796eeb01}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x116, 0x6, {0xb96e, 'filter\x00', 0x5, 0xfff9, "027e89a7cf6c16043e840d4618a48372c4c4217b01efbbb59f010d9af6f6eab39fcb36304a085f1e48dc9ac967dce56599aff1443f86f7ce1ada20bf36cc62ac1cfbc0253e9c98229e950569c587e35631366974f60fd0f766b3221a37b143624ff7de4d651326863c41b3e576a9f7fbc4e498fcb0b0e4c5e9546f6a00ead7183533ebfab5ee7fddd1f56affc726aa1f5b16daa7d41a518b91d6857f353e39e5865622de53091cebe3a22c7592adbc26d5ef586e145ef74b8923f201de38f5db69862d37e174470cdceb63d14fb654d14e16c60ebb69c8c762075440828f01c80bfb11b736728e98add9db99"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0x2d, 0x6, "c80b2447af1cb1fe6d2286513978f6437e64e32baa0c24293b3f936ef892e53198294795b00f9f0926"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_police={0x3b80, 0x15, 0x0, 0x0, {{0xb}, {0x3b18, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x944}], [@TCA_POLICE_RATE={0x404, 0x2, [0x400, 0x5dc3, 0x3ff, 0x1, 0x1000, 0x4, 0xffffff00, 0x9, 0xffffffff, 0x2, 0x1, 0x763, 0x8da, 0x93, 0x22, 0x8, 0x80000000, 0x9, 0x8, 0x1, 0x7, 0x0, 0x4, 0x3, 0x8, 0x8, 0x800, 0x5, 0xd, 0x0, 0x5, 0xb, 0x8b, 0x8, 0x2, 0x81, 0x2, 0x2, 0x7, 0x101, 0x2, 0xe3eb, 0xa, 0x0, 0x3, 0x4dd, 0x8, 0x7f, 0x7f, 0x8, 0x9, 0xdb2, 0x5, 0x3, 0x40, 0x61f, 0x7, 0x400, 0x7fffffff, 0x6, 0x5, 0x13, 0x8000, 0x7, 0x5, 0x6, 0xc90, 0x6, 0x7, 0x7, 0x3, 0x1, 0x9, 0x9, 0xff, 0x53, 0x3ff, 0x1afba3d6, 0x16f1cf78, 0x2, 0x3, 0x0, 0x2, 0x77a8000, 0x6, 0x7, 0x2, 0x1, 0xe6a, 0x4, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x6, 0xdf, 0x9, 0x7, 0x9180, 0x5, 0xff00, 0x80000000, 0x2, 0x7, 0x3, 0x400, 0x7102, 0x3, 0x59c7, 0x6000, 0x4a, 0xfffc0000, 0xd2, 0xfffffffa, 0x232a, 0x1, 0x8001, 0x4, 0x1, 0xf, 0x5, 0x8, 0x3, 0x3, 0xd8, 0x88d5, 0x3, 0x7, 0x4, 0x4, 0x5, 0x1, 0x80000000, 0xfffffffc, 0x43000000, 0x2, 0x6, 0x5, 0x7, 0x1ff, 0x2, 0xfffffff9, 0xa, 0xf8, 0x9e5, 0x6, 0x4, 0x7fff, 0x800, 0xc5, 0x4, 0xb, 0xfeac, 0x7ad1, 0x8, 0xfff, 0xbf81, 0x2, 0x3, 0x9bd, 0x7, 0x6, 0x40, 0x3, 0x80f, 0x3d, 0x3c, 0x8, 0x7, 0xfff, 0x7, 0x14, 0x25, 0x4, 0xda73, 0x2, 0x8001, 0xf1, 0x8, 0x1, 0x7, 0x7fffffff, 0x7f, 0x0, 0x9, 0xfff, 0xebe6, 0x4, 0x1, 0x78c, 0x80, 0x400, 0x0, 0x0, 0x17, 0x27a9, 0x9, 0x1, 0x2, 0x1, 0x4, 0x5, 0x1000, 0x8, 0x1, 0x2, 0x6, 0x0, 0x7, 0x0, 0x8001, 0x8, 0x4, 0x657d0d6e, 0x1, 0x473, 0x3, 0x1, 0x0, 0x4, 0x2, 0x2f07, 0x3, 0x7f, 0x6, 0x2, 0x4, 0x1, 0x9, 0xe0000000, 0x7, 0x4, 0x0, 0x8, 0x2, 0x5, 0x4, 0xffffff3a, 0x0, 0xf, 0x8001, 0x8, 0xff, 0xeb3, 0x9, 0x9, 0xfff, 0x0, 0xc9bb, 0x2, 0x6, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x7, 0x2, 0x5, 0xe, {0x5, 0x0, 0x2, 0x10, 0x5, 0x9}, {0x1, 0x2, 0x800, 0x1, 0xa, 0xb5}, 0x6, 0x7, 0x3}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x7f, 0x10, 0x1, 0xf716, 0x2, 0x2, 0x3, 0x100, 0x4, 0xa, 0x7f, 0xd, 0x0, 0x7, 0x3, 0x6, 0x7, 0x1, 0x2, 0xfcdc, 0xc63, 0x3, 0x800, 0x8a6, 0x2, 0x9, 0x5, 0x7, 0x1, 0xfffffffc, 0x1, 0x6, 0x9, 0x10000, 0x5, 0x5a, 0x7fff, 0xcf8d, 0xfffffffc, 0x2c, 0x7, 0xcdd, 0xfe4, 0xfffffffa, 0x0, 0xfffff801, 0x6a96fbdd, 0x80, 0x3, 0x2, 0x8, 0x4, 0x200, 0x2, 0x1, 0x7, 0x0, 0x6, 0x5, 0x80, 0xffffb910, 0xf, 0x7, 0x2, 0x10000, 0x8, 0x7, 0x8, 0x7, 0x1ff, 0x9, 0x0, 0x2, 0x7, 0x8, 0xa4, 0x5a, 0x2, 0x3, 0x2, 0x8, 0x18000, 0x1, 0x1, 0x7fffffff, 0x86, 0x9, 0x1, 0x401, 0x1, 0x2, 0x4, 0x0, 0x401, 0x0, 0x7, 0x400, 0x7fff, 0x4000, 0x6, 0xfffffffb, 0x101, 0x1000, 0x2, 0x8, 0x401, 0x4, 0x7, 0x1, 0xa219, 0x7, 0x0, 0x1, 0x1, 0x3, 0x1, 0x217eb40d, 0x80, 0x7, 0x1, 0x3, 0x2, 0x1, 0x8, 0x1, 0x4, 0x80000000, 0x2000, 0x0, 0xfffffff7, 0xd, 0x66, 0x2, 0x0, 0x0, 0x476, 0x1ff, 0x10, 0x6, 0x9, 0xf, 0x8, 0x200, 0x7, 0x7, 0x6b4, 0x3, 0x3, 0xfffffff6, 0x2, 0x7, 0x3, 0x100, 0x5, 0x1, 0x400, 0x81, 0x1000, 0x9, 0x9, 0xf, 0x300000, 0x2, 0xff, 0x3045, 0xfff, 0x3, 0xc0, 0x2, 0x7f, 0x1, 0x27, 0x6, 0xfffffff7, 0x8, 0x4, 0x1, 0x1, 0x4c, 0x8000, 0x3, 0x2, 0x40, 0x7, 0x7c917a8, 0x0, 0x3, 0x40, 0x0, 0x9, 0x1ca8, 0x3, 0xd, 0x2, 0x80, 0x40000, 0x6, 0x2, 0x3, 0x3, 0x8000, 0x80000000, 0xac, 0x8a, 0x4, 0x0, 0x5, 0x2e2e95fa, 0xffffffff, 0x6, 0x8, 0xc8, 0x4, 0x3, 0x0, 0x7fff, 0x4, 0x8, 0x42d6, 0x4, 0x6, 0x5, 0x1ff, 0x3, 0x4, 0xfffffff8, 0x2, 0x7, 0xe, 0x100, 0x2, 0x0, 0x1, 0x5, 0xe, 0xd, 0x4, 0x7, 0x6, 0x3, 0x5, 0x4, 0x4, 0x0, 0x5, 0x5, 0x3, 0x9, 0x6, 0x7, 0x29dc, 0x5, 0xa, 0x7eb1, 0x9e7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x690, 0x4, 0xa, 0x2, 0x3, 0x5, 0x9, 0x0, 0x100, 0x6, 0x1, 0x7, 0xc, 0x2, 0x9, 0x5, 0x7, 0x9, 0x7f, 0x9, 0xfff, 0xffff604f, 0x1, 0x8, 0x8000007, 0x46bb, 0x1, 0xf, 0x3e0, 0xffffff26, 0x5, 0x1910, 0xff, 0xd4, 0x7, 0x0, 0xf, 0xd, 0x92b, 0x101, 0x300, 0x0, 0x8, 0x2, 0x3a, 0xf0, 0x4, 0x100, 0xbef, 0xd, 0x58, 0xffffffff, 0x8, 0x7, 0x90000, 0x6, 0x400, 0x5, 0x2, 0x200, 0xc, 0xfffffba0, 0x3, 0x2, 0x1, 0x3ff, 0x1ff, 0x9, 0x9614, 0x4, 0x401, 0x8001, 0x0, 0xb, 0x3, 0x6, 0x5, 0x40000000, 0xfffffffd, 0xbc, 0xfffff001, 0x3, 0x4, 0x1513, 0x1ff, 0x80af, 0x10000, 0xfff, 0x7, 0x5, 0xff, 0x6, 0x9, 0x2, 0x5, 0x0, 0x9, 0xfffffffb, 0x9, 0x0, 0x9, 0x4, 0x6, 0xc00000, 0x0, 0x7, 0x5, 0x8, 0x0, 0x2, 0x5, 0xa, 0xcb1, 0x78100, 0x10000, 0x44f5, 0x3, 0x2, 0x3ff, 0x8001, 0x3, 0x7ff, 0x6, 0xfffffffa, 0x10000, 0x0, 0x1, 0x7, 0x6, 0x4, 0x1, 0x623, 0x7f, 0x8, 0xd, 0x81, 0x7, 0x5, 0x2, 0x1, 0x81, 0x3, 0x6, 0x20000000, 0x3, 0x5, 0xbd8, 0x4, 0x80000, 0x54f65d36, 0x6, 0x1, 0x7, 0x9, 0x6, 0x9, 0x0, 0x25, 0x2, 0x10, 0x4, 0xa3, 0x6f, 0x10000, 0x5, 0xfffffffc, 0x6, 0x1, 0xfffffffd, 0x8, 0x200, 0x78, 0x7, 0x80000000, 0x0, 0x8, 0x5, 0x9, 0x3, 0x6, 0xffffff80, 0x5, 0x8, 0x8001, 0x2, 0x1, 0xfffffe01, 0xffffffff, 0xe232, 0x8, 0x1, 0x1, 0x0, 0xcb4, 0xffffffff, 0x9b75, 0x400, 0x200, 0x6372, 0x4, 0x5, 0xffffff7f, 0x5, 0x0, 0x2, 0xfffffffa, 0x7a1, 0x0, 0x7c, 0x8001, 0x5, 0x2, 0x0, 0x8000, 0x1, 0x4, 0x200, 0x9, 0xb, 0x86, 0x523f, 0x2, 0x357d, 0x7, 0x6, 0x2, 0x0, 0x5, 0x8, 0x9, 0x58be, 0x0, 0x6, 0x8, 0xfffffaa7, 0x8, 0x7fff, 0x80, 0x8, 0x5, 0xa, 0xa, 0x0, 0x9, 0xfffffff8, 0x6, 0x1, 0x0, 0x7, 0x8, 0x92ce, 0xd, 0x4, 0xffffff67, 0xadb]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf680, 0x8, 0x2, 0xe, 0x8, 0x9, 0x7, 0xe0, 0x5, 0x5, 0x7, 0x7, 0x53b, 0xcb2, 0x9, 0x0, 0x3ff, 0xa40eb4b, 0x10001, 0x1000, 0xfff, 0x1, 0x60, 0xd2c, 0x2, 0x2, 0x2, 0x0, 0xd, 0xe, 0xd58, 0x4, 0x4, 0x4, 0x3, 0xffffffff, 0x8, 0x7fff, 0x1, 0x8, 0x8, 0x401, 0xa7, 0x7, 0x9c79, 0xccaa, 0x1800000, 0x1, 0x9, 0x1, 0x7, 0x10001, 0x5acf, 0x5, 0x5, 0x7f, 0x80000, 0x10001, 0x5e, 0x2, 0x4, 0x6, 0x8, 0x7d, 0x1, 0xea37f98, 0xb, 0xd56, 0x7fffffff, 0xffffffff, 0x5, 0x6, 0x4, 0xa, 0x0, 0xd, 0x6, 0xfffffff9, 0x9, 0x2, 0x6, 0x6a, 0x200, 0x8, 0x2, 0x7, 0x4, 0x8, 0xffffffff, 0x4ca06667, 0x3, 0x1000, 0x3, 0x40, 0x7ff, 0x5, 0x5, 0x0, 0x3, 0x7fff, 0x962c, 0x4, 0xb547, 0x852e, 0x10000, 0x9, 0x8000, 0x4, 0xffffff81, 0x3, 0x68, 0x0, 0x5, 0x1, 0x8, 0x0, 0x6, 0x3, 0x3, 0x1000, 0x3ff, 0x2, 0x2, 0x0, 0x7fffffff, 0xffff, 0x3, 0xa72, 0x4, 0xa99, 0x2, 0x285a, 0x4, 0x80000001, 0x4, 0x80, 0x4, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xc, 0xfffeffff, 0x2, 0x2, 0x80000004, 0xfff, 0x8001, 0x6, 0x2, 0x2, 0x80000000, 0x7, 0x7ff, 0x2, 0xda, 0x8c6, 0x50d2f644, 0x3, 0x6, 0xfffffffd, 0xa6b, 0x7, 0x7ff, 0x3, 0x9, 0x7, 0x4, 0x7, 0x6, 0x35b0f0f3, 0x6, 0x7, 0x4c3, 0x3, 0x80, 0xf, 0x7fff, 0x81, 0x3b4, 0x1, 0x3, 0x6, 0xa, 0xe, 0x92e, 0x2, 0x68, 0xbce, 0x0, 0x8, 0x2814791b, 0x3f, 0x40, 0x98, 0x9ae, 0x200, 0x3, 0x3, 0x83, 0x9, 0xad9, 0x4, 0x4, 0x3, 0x896b, 0x50000, 0x6, 0x2, 0x0, 0x0, 0x8, 0x5, 0x80, 0x40, 0x7f, 0x3c0f2f96, 0x4, 0xc9, 0x0, 0x6, 0x7, 0x3, 0x7fff, 0xb82, 0xffffffff, 0xc, 0x61b, 0xfff, 0x100, 0x5, 0x1, 0x7, 0x0, 0x7, 0xc, 0x800, 0x1ff, 0x4, 0x1, 0x1, 0xfffffe01, 0x80, 0x9, 0x4, 0x2, 0x1, 0x5, 0x2, 0x6, 0x8, 0x8, 0x3, 0xb83]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0xa, 0x5b2, 0x9ee7, {0x9c, 0x1, 0x3, 0x7560, 0x9, 0xaf}, {0x1, 0x1, 0x7, 0xbdb, 0xb1}, 0x7, 0x29961f73, 0xfffff7bb}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x2, 0x1, 0x2, 0xac, 0x8, 0x200, 0x7, 0x29f, 0xf, 0xffff7fff, 0x40, 0x5, 0x10000, 0x3, 0xfc15, 0x8, 0x0, 0x0, 0xdc, 0x215, 0xeaaa, 0xffffffff, 0x400, 0x2, 0x2, 0x1, 0xd634, 0x449d9e9, 0x6, 0x4, 0xfe, 0x0, 0x2, 0x0, 0x9, 0xc6a, 0x8, 0x7, 0x1, 0x8, 0x7, 0x9, 0xf30, 0x0, 0xffffffff, 0x3, 0x7, 0x1, 0x10001, 0xb6, 0x2a, 0xffffffff, 0xa50, 0x8, 0x7, 0x60c, 0x61f5d710, 0x1000, 0x2, 0x0, 0x6bb2, 0x100, 0x7, 0x1, 0xadd, 0x3, 0x8, 0xfffffffd, 0x4, 0x7, 0x6, 0x3, 0xfffffffc, 0x2, 0x4a, 0x2, 0x7fffffff, 0x32, 0xc, 0x7, 0x662, 0x7, 0x10, 0xffffffff, 0x3, 0x9, 0x81, 0x5, 0x4, 0x9, 0xfffffffa, 0x3, 0x401, 0x3, 0xcc74, 0x6, 0x0, 0x9, 0x5, 0xb, 0x7, 0x6, 0x6da, 0x8, 0xface, 0x9, 0x1, 0x9, 0x45, 0x2, 0x6, 0x7, 0x9, 0x2, 0x9, 0x1, 0x400, 0x9, 0x3, 0x7, 0x100, 0x7, 0xffffffff, 0x6, 0xfffffff9, 0x7fff, 0x64cf, 0x3, 0x8, 0x7, 0xfffffffb, 0x10000, 0x7, 0x2, 0xffff671e, 0x7, 0x1, 0xfffffff9, 0x7ff, 0x4, 0x3, 0x5, 0x8, 0x2, 0x9, 0xffff0000, 0x8, 0x504a, 0x5, 0x3c, 0x4, 0xff, 0x3000, 0x9, 0x6, 0x4, 0x3, 0x0, 0x1, 0x2, 0xfffffffe, 0x5, 0x5, 0xc, 0x48000000, 0x0, 0xbb, 0x4, 0x6, 0x400, 0x7, 0x7f, 0x6, 0xa, 0x7, 0x3, 0xa, 0x5, 0x0, 0x200, 0x10000, 0xffff, 0x9, 0x7, 0x401, 0xb3f1, 0x6, 0x9, 0x2, 0x1, 0x4, 0x3, 0x7fff, 0x9d, 0x7, 0x8, 0xffff0001, 0x8000, 0x2, 0x1, 0xc50, 0x0, 0x3, 0x1, 0x2, 0xc2, 0x8, 0x2, 0x7, 0xfb, 0x7fffffff, 0x6, 0x1, 0x4, 0x5, 0x6, 0xfff, 0x8, 0x4, 0x1, 0x8, 0xd09, 0x400, 0x8000, 0x10, 0x6, 0x6, 0x1ff, 0x9, 0x73, 0x5, 0x1, 0x4, 0x7, 0x1465, 0x6, 0x3, 0x9, 0x1000, 0xc, 0x7ff, 0x1ff, 0x0, 0x101, 0xe603, 0x401, 0x81, 0x548, 0x5, 0x6, 0x7f, 0x1, 0xa152, 0x8, 0x24d]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffd, 0x6, 0x1, 0x80, 0x3b, {0x2, 0x2, 0x100, 0x4, 0x9, 0x6284c622}, {0xff, 0x1, 0x4, 0x8001, 0x9, 0x3}, 0xffff, 0x3}}], [], [@TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x26b, 0xd8, 0x2139, 0x7fff, 0xfffffffd, 0x4, 0x7, 0x1000, 0x5, 0xfffffffb, 0x7fff, 0x6, 0x4f52, 0x8001, 0x0, 0x8, 0x7, 0x401, 0xd3a, 0x10001, 0x3249, 0x9, 0x8, 0x2, 0x4, 0xffffffff, 0xc, 0x6ad7ebba, 0x4, 0x8, 0x9, 0x1, 0x7fffffff, 0x3, 0xfff, 0x3, 0x9, 0x6, 0x2, 0x80000000, 0x42, 0x15cc5946, 0x5, 0x800, 0xfffffffb, 0x0, 0x3, 0x7f, 0x6, 0x8, 0x1, 0x0, 0x6, 0x7, 0x7, 0xffff0000, 0x1, 0x3, 0x80, 0x1, 0xa63f, 0x4, 0x8000, 0x4, 0x1, 0x18eb1efe, 0x7, 0x9, 0xd, 0xf7ea, 0x5, 0x7fffffff, 0x1, 0xd61, 0x0, 0x8001, 0x2, 0x8, 0x4, 0x7ba, 0x1, 0x2, 0x935, 0x101, 0x101, 0x81, 0x1, 0x6, 0x8, 0xffffff19, 0x6, 0x9, 0x7, 0x3, 0x9, 0x4, 0x8, 0x8, 0xb46, 0x4, 0x0, 0x0, 0xfffff880, 0x1, 0x79c5, 0x271, 0x8, 0x4, 0x4, 0x3, 0x612f, 0x1, 0x6, 0x3, 0x8001, 0xfffffeff, 0x3, 0x0, 0x0, 0x5, 0x10000, 0xffffffff, 0x5, 0x8, 0x4, 0xff, 0x2, 0x8001, 0x2, 0x1, 0x100000, 0x7, 0x1, 0x8000, 0x3, 0x4, 0x2, 0x1, 0xfffffff8, 0x50df, 0x79, 0x7, 0x4, 0x99, 0xc, 0x100, 0x3, 0x2, 0x4, 0x1ff, 0x10001, 0x1, 0xe, 0xfff, 0x1, 0x6, 0x1, 0x6, 0x0, 0x6, 0x7de3, 0x5, 0x3, 0x8, 0x7fffffff, 0x8, 0x4, 0x3, 0x3bbd, 0x6, 0xfffffd23, 0xfffffff9, 0x3, 0x0, 0xffffffff, 0x1, 0xea, 0xffffffff, 0x0, 0x0, 0x8, 0x9, 0x1000, 0x0, 0x4, 0x6, 0x8, 0x9, 0x800, 0x6, 0x7fff, 0x0, 0x6, 0x140db7bb, 0x7, 0x7, 0x800, 0x2, 0x5, 0x2, 0x81, 0x7, 0x6, 0x10, 0x6, 0x45b6, 0x9, 0x2, 0xe, 0x3c9b, 0x7ff, 0x8f49, 0x6, 0x800, 0x6, 0x5, 0x8, 0x0, 0x1, 0x4, 0x3, 0x3, 0x0, 0x6, 0xfffffffb, 0x941, 0x0, 0xba, 0xf1a0, 0x4b7, 0xb226, 0xde, 0xffffffff, 0x1, 0x445, 0xfffffffe, 0x1, 0x101, 0x4, 0x1c, 0xfffffffb, 0x8, 0x10000, 0x3, 0xb99, 0x7ff, 0xcc0, 0x538, 0x10000, 0x4, 0x6, 0x101, 0x5400000, 0xfffff801, 0x1, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x61}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xffffffffffffffff, 0x7, 0x4080000, 0x2, {0x7, 0x1, 0x7, 0x800, 0x1ff, 0xf}, {0x6, 0x1, 0xe, 0x5, 0x6, 0x8}, 0x6, 0x7, 0x3}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x8, 0x1, 0x5, 0x28c, 0x7, 0x8, 0x6, 0x3, 0x2, 0x2000000, 0x8, 0x7, 0x81, 0x8, 0x3, 0x7ff, 0x8, 0x2, 0x5, 0xe87, 0x4, 0x9, 0x7, 0x6, 0x4, 0x2, 0x9, 0x2, 0xff, 0x400, 0x8000, 0x5, 0xffffff7f, 0xfff, 0x28e519ef, 0x490, 0x0, 0x101, 0x800, 0x6, 0x5, 0x8, 0x2, 0x8000, 0xfff, 0x1, 0x80, 0x7fff, 0x5, 0x4, 0x3, 0x80000000, 0xa34, 0x9, 0x8, 0x80000001, 0x7fff, 0x1, 0x1, 0x0, 0xfff, 0x568, 0x5eb, 0x7, 0xff, 0x1, 0x8, 0x9, 0x4, 0x1, 0x59, 0x2, 0x7f, 0x4, 0xfffffffd, 0x9, 0x3, 0xfffffeb6, 0x3, 0x7, 0x1, 0x1ff, 0x2, 0x4, 0x7f, 0xfffffff9, 0xa, 0x5, 0x6, 0x3, 0x7, 0x1000, 0x7, 0x8, 0xfffffff4, 0x9, 0x4, 0x35800, 0x8000, 0x4, 0x8000, 0x10000, 0x9, 0x8, 0x7, 0x80, 0x85, 0xb, 0x8, 0x4, 0x8b6f, 0x6, 0x8, 0x4000000, 0x2, 0xc81, 0xeb, 0xfffffffb, 0x8, 0x1, 0x1000, 0x4, 0x8, 0x7, 0x4, 0x7, 0x3, 0x8, 0x7, 0x2, 0xf, 0x1000, 0x20000000, 0x1b, 0x3ff, 0x4000000, 0x9, 0xf, 0x200, 0x0, 0x1, 0x8, 0x80000000, 0x0, 0x4, 0xd, 0x2, 0x0, 0x6, 0x7, 0x10001, 0x4, 0x3, 0x5, 0x400000, 0x353, 0x8422, 0x596, 0x2, 0xd, 0x75, 0x200, 0x9, 0xc4de, 0x101, 0xffff, 0x0, 0x3, 0x3, 0x0, 0x3fd, 0x4, 0x800, 0x2, 0x9, 0x2, 0x8, 0x606, 0x73, 0x1200, 0x4, 0x3, 0x7f, 0x6, 0x200, 0x5, 0xae0b, 0x5, 0x1, 0x8, 0x1, 0x6, 0x2331, 0xf8, 0xfffffff9, 0x2, 0x0, 0x7, 0xa, 0x4ce9ca24, 0xd, 0x0, 0xa, 0x52, 0x280000, 0x6, 0x3, 0x2, 0x9, 0x200, 0xc, 0x2, 0xa, 0x514, 0x5, 0x8, 0x8, 0x2, 0x8f, 0x9, 0x5, 0x5cf5, 0x6, 0xa, 0x380, 0x1, 0x0, 0xfffffffa, 0x1, 0x3ff, 0x1, 0x8, 0xfffffffb, 0x7, 0x7, 0x8001, 0x4, 0x9, 0x51eb, 0xffffffff, 0x40, 0xa, 0x4, 0x0, 0x401, 0x5, 0x0, 0x5, 0x3, 0x5, 0x40, 0x3, 0x4, 0xfffffffb, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4cd, 0x80000000, 0x3, 0xffff0000, 0x9e, 0x2, 0xfffffff8, 0x8, 0x2, 0x7fffffff, 0x1, 0x1, 0xf, 0x4, 0x7, 0x3, 0x8, 0x6, 0x995, 0xc0000000, 0x1, 0x5, 0x9f8, 0xea000000, 0x0, 0x1, 0x2, 0x1bb, 0x80000000, 0x3, 0x3, 0x2, 0x3, 0x49, 0x8, 0x0, 0x7, 0x573d, 0xe, 0x7fff, 0xffff, 0x10001, 0x9, 0x8001, 0x5e109d68, 0x800, 0xc, 0x9, 0x3, 0x40, 0x6, 0x3, 0x800, 0x2, 0x40, 0x80000000, 0x2, 0x9, 0x615, 0x4, 0x0, 0xf641, 0xa4, 0x4, 0x3, 0x5, 0x0, 0xb0, 0x7, 0x8147da, 0x0, 0x1000, 0x3, 0xe8, 0x7, 0x5730, 0x6, 0x100, 0xd, 0x8, 0x1, 0x2, 0x9, 0xc64d, 0x8e, 0x6, 0x6, 0x100000, 0x10000, 0x0, 0xb, 0x9, 0x8, 0x10, 0x3, 0x4, 0x1, 0x401, 0xffff, 0x80, 0x4, 0x8, 0xaa, 0xe, 0x6, 0x7, 0x9, 0x4, 0x1, 0x8, 0x0, 0x3, 0x5, 0x9, 0x7, 0x7, 0xc784, 0x0, 0xfffffffe, 0xa, 0x1000, 0x4b, 0x6, 0x80, 0x400, 0x10001, 0x200, 0x2, 0x7, 0x6, 0xb, 0x7, 0x3a, 0x2, 0x1, 0xee9, 0x0, 0x1, 0x2, 0x7, 0x5006ab54, 0x4, 0x85, 0x2, 0x4, 0x8000, 0x4, 0x1, 0x9, 0x90, 0x76, 0xa7c, 0xf, 0x401, 0xa3, 0x1, 0x6, 0x2, 0x8300, 0x4244, 0x81e, 0x4, 0x9, 0x6, 0x2, 0x4, 0xc4d, 0x8000, 0x5, 0x8001, 0x1, 0x9f6, 0x86, 0x0, 0x1f, 0x8, 0x3, 0xf20, 0x5, 0xffffff01, 0x160000, 0x7, 0x8, 0x6, 0xa, 0xd4, 0x6, 0x3, 0x2, 0x7, 0x1, 0xd9, 0x3, 0x7, 0x10001, 0x186, 0x9, 0x8, 0x7, 0x8001, 0x7, 0x7, 0x10000, 0x5, 0x8, 0x80000000, 0x9, 0x4, 0xee71, 0x80000001, 0x1, 0x17c, 0x2, 0x7578, 0x5, 0x7, 0x10, 0x3, 0x8000, 0x6, 0xd, 0x6, 0x3, 0x101, 0xa3d, 0x0, 0x2, 0x5, 0x1, 0x3, 0x5, 0x7, 0x4, 0x5, 0x2, 0x4, 0x1000, 0x101, 0x7, 0xffffff2e, 0xb, 0x6, 0x6, 0x2, 0x10000, 0x1, 0x9, 0x3, 0xaf36, 0x6, 0x7, 0x80000000, 0x7fffffff, 0xad, 0x9, 0x7]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x7, 0x22, 0x1, 0xff, {0xd7, 0x1, 0x101, 0xa, 0x200, 0x1178f1ce}, {0x5, 0x1, 0x37, 0x8, 0x80, 0x9}, 0x0, 0xffffffff, 0x5}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xa}, @TCA_POLICE_TBF={0x3c, 0x1, {0xed, 0x1, 0xfff, 0xc, 0x6b, {0x7b, 0x2, 0x4, 0xf800, 0x1539, 0x6}, {0x0, 0x0, 0x800, 0x4, 0x4, 0x4}, 0x7, 0xd1da, 0x10}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7fffffff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x81, 0x3, 0x1, 0x2, 0x4, {0x1, 0x0, 0x6, 0xd48c, 0x6, 0x800}, {0xf9, 0x2, 0xf, 0x1, 0x9, 0x81}, 0x8, 0xa1, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x10000, 0x1, 0x80, 0xffffffff, 0x7, 0xffffffa8, 0x9, 0x6, 0x400000, 0x0, 0x2, 0xc0000000, 0x2, 0x10000, 0x19, 0xfffffffe, 0x8, 0x5, 0x81, 0x6, 0xfffffffe, 0x4, 0x2, 0x80000001, 0x100, 0x6, 0x0, 0x7, 0x6, 0xfffffffb, 0x6, 0x4, 0x2, 0x10000, 0x2, 0x9, 0xffffffff, 0x2, 0x800, 0x7, 0x2, 0x3, 0x3, 0x10000, 0x2, 0x9, 0x6f, 0x4, 0x0, 0xffff, 0x8, 0xffff965a, 0x5, 0x7, 0x1, 0x10001, 0x1, 0xfff, 0x8, 0x4, 0x40000000, 0xffff, 0xff, 0x5, 0x5, 0x4, 0x2b2c, 0x5, 0x0, 0xfffffffa, 0xfffffffb, 0x7, 0x6, 0x18a, 0xe4a, 0x2, 0x640, 0x4, 0x1000, 0x81, 0x5d4b, 0x0, 0x81, 0x7, 0xecec, 0xbb, 0x5, 0x5, 0x6, 0x4, 0x4b, 0x8000000, 0x6, 0x7971, 0x9, 0xf, 0x9, 0x3, 0x7, 0x10001, 0x5, 0x6, 0x30, 0x0, 0x401, 0x8, 0xeac3, 0xfffffff9, 0xddd, 0x5ace, 0x7, 0x8, 0x8, 0x40, 0x5, 0x80, 0x5, 0x3, 0x5, 0x9, 0x1, 0x1, 0x500, 0x9, 0x5, 0x3, 0x81, 0x0, 0x5, 0x3f, 0x3, 0x4, 0x111, 0x4, 0x10, 0x8, 0xfff, 0x9, 0x3, 0x7ff, 0x3, 0x3, 0x1, 0x9, 0x1, 0x1, 0x3, 0x1000, 0x9, 0x8000, 0x2f, 0x3ff, 0x4, 0x7fffffff, 0x8, 0xb, 0x3, 0x8, 0x4, 0x6, 0x7, 0x5, 0x3, 0x8, 0x1, 0x9, 0x95f776c3, 0x7fffffff, 0x5, 0xa70, 0x401, 0xc0, 0x8, 0x0, 0x1, 0x0, 0x3, 0x0, 0x7f, 0x3, 0x8c56, 0x9, 0xffffffff, 0x0, 0x0, 0x7, 0x8, 0x400, 0x9, 0x0, 0xf0000, 0x1000, 0x4, 0x5, 0x6, 0x1ff, 0x0, 0x7, 0x4, 0x7ff, 0x4, 0x401, 0x1, 0x4, 0x5, 0x3, 0xae, 0x3ff, 0x9, 0x5, 0xfffffffc, 0x6, 0x3, 0x3d, 0x5, 0x3, 0x1, 0x1, 0x200, 0x80, 0x3, 0x3, 0x3ff, 0x7, 0x8, 0x9, 0xa, 0x3ff, 0x2, 0x7, 0xd02e, 0x1, 0x5, 0x7, 0xc, 0x7, 0x6, 0xbd1b, 0x1000, 0x40, 0x1, 0x1, 0xa, 0x9, 0x3, 0x3, 0xfffffffa, 0x200, 0x7, 0x1b, 0x0, 0x7, 0x2, 0x1, 0x7ff]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x40, 0x0, 0x9, 0x8, 0x4, 0x400, 0x7, 0x1, 0x977, 0x44a2, 0x7, 0x80, 0x5, 0x8, 0x6e49, 0x9, 0x3, 0x9, 0x4a, 0xb, 0xffff, 0x2, 0x3ff, 0xfffffffe, 0x6, 0x7f, 0x6, 0x273, 0x9, 0x8, 0x0, 0x1, 0x1ff, 0x1, 0x6, 0x8, 0x9, 0x3, 0x6, 0x0, 0x0, 0x1ff, 0x5d9, 0x7, 0x1, 0x10, 0x14782b09, 0x8, 0x6, 0xffffffff, 0x9, 0x6, 0x1ff, 0xffffff80, 0x2, 0x7fffffff, 0x0, 0x10000, 0x9, 0xd07, 0x1, 0x7d95, 0x98b, 0xffffff00, 0x1, 0x1, 0x7, 0x2, 0x3, 0xd0, 0x0, 0xfffffff7, 0x7, 0x1de, 0xf5d, 0x2, 0x2, 0x5, 0x0, 0x6, 0x0, 0x77c3, 0x0, 0x8, 0x102, 0x2, 0xd, 0x1, 0x0, 0x91, 0x4, 0xdf, 0x9, 0xbae3, 0x3, 0x8, 0x8, 0x7, 0xc, 0x3, 0x9, 0x2, 0xb, 0x40, 0x10, 0x5, 0x5, 0x7, 0xee53, 0xffffffff, 0x81, 0x4, 0x3, 0x8, 0x9, 0x6, 0x10, 0x3, 0x280, 0xffff8000, 0x2, 0x5, 0xd602, 0x8, 0x9, 0x9, 0x4, 0x8, 0xffffd803, 0x2, 0xffffffff, 0x5, 0x0, 0x75d5, 0x8, 0xffffffff, 0x1, 0x6, 0x5626, 0x5b1e466c, 0x400, 0x6, 0x9, 0xfffffe01, 0x2, 0x6, 0x1, 0x8, 0x5, 0x4, 0x101, 0x4, 0x7, 0x7, 0x1, 0x7, 0x7fff, 0x941, 0x8, 0x400, 0x7, 0x100, 0x3, 0x1, 0xef3, 0x7, 0x3, 0x942e, 0x4, 0x9, 0x6, 0x5, 0xc, 0x2, 0x76, 0x6, 0x7fffffff, 0xa, 0x10001, 0x1, 0xe5f9, 0x22, 0x8, 0x9, 0xfffffffb, 0xe8c, 0xc5, 0x80000000, 0xffffffff, 0xff, 0x30000000, 0x7, 0xbb, 0x2, 0x8, 0x1ff, 0x33, 0xc, 0x9, 0xb, 0x6, 0x37, 0x2, 0x0, 0x80, 0x9, 0x1, 0x5, 0x4, 0x2d, 0x6, 0x5, 0x81, 0x713c, 0x5, 0x2, 0x7ff, 0x2, 0x6, 0x200, 0xfffffff7, 0x8, 0x5, 0x5, 0x1, 0x1, 0x1, 0x7e9b, 0x0, 0x2, 0x3, 0x7, 0x0, 0xf7, 0x9, 0x7f, 0x9, 0x800, 0x4, 0x1, 0x2e, 0x2, 0x3, 0x0, 0x6, 0x8, 0x56, 0x8, 0x8, 0x4d, 0x10, 0x1000, 0x4bc, 0x100, 0x8, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffff77c2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7ff}], [@TCA_POLICE_RATE={0x404, 0x2, [0x81, 0x4, 0x8, 0x5, 0x8, 0x7, 0x9, 0x0, 0xae07, 0x6, 0x4, 0x9ddd, 0xd, 0x9, 0x400, 0x9615, 0x7, 0xa, 0x3, 0x8001, 0x2, 0x34cd, 0x8, 0xff9, 0x6, 0x9d5, 0x1000, 0x8, 0x5704, 0xfffffff8, 0x6, 0x31, 0x0, 0x8000, 0x6, 0x0, 0x0, 0x1, 0x9, 0x4, 0x5ce, 0x15, 0x2, 0x9, 0x4, 0x3, 0x6, 0x1, 0x99d7577, 0x0, 0x400, 0x5, 0x4000, 0x7ff, 0x80000001, 0x5f40ceed, 0x6, 0x7, 0x1, 0x3, 0x0, 0x8, 0xaca, 0xd, 0x7, 0xd, 0x1, 0x0, 0x8000, 0xedd0, 0x8, 0x7c7, 0x70b55a65, 0x3e78, 0x40000, 0x62, 0x101, 0x4f26341e, 0x0, 0x3, 0x5, 0x3, 0x5fc8, 0x8, 0xca6, 0x12b, 0x4, 0x100, 0x6, 0x2, 0x9, 0x0, 0x1, 0x8, 0x9, 0x8, 0xe, 0x7, 0x6, 0x401, 0x2, 0x31, 0x6, 0xb, 0x5, 0x5, 0x6, 0xb28, 0x2, 0x7, 0xd, 0x7, 0x5, 0x5, 0x5, 0x3, 0x4, 0x2, 0x6, 0x39, 0x4, 0x4, 0xaf, 0x17af, 0x8, 0x6, 0x1cf, 0x3, 0xeb2, 0x53, 0x38f, 0x80000001, 0x2, 0x6, 0xd4, 0xfffffffd, 0xfffffff1, 0x5, 0x101, 0x4, 0x81, 0x5, 0x0, 0x1, 0x2, 0x1, 0x9, 0xff, 0x10001, 0xffffc933, 0x5, 0x9, 0xfffffffe, 0x5, 0x9, 0x0, 0x0, 0x6, 0x0, 0xd65f, 0x92, 0x3, 0xb, 0x5, 0x7, 0x2, 0x2, 0x7ff, 0x5, 0x0, 0x1, 0xe, 0xffff, 0x9, 0x5, 0x8, 0x2, 0xffffffe0, 0x100, 0x8300, 0x7, 0x0, 0x1, 0xc087, 0x4, 0x1, 0x200, 0x400, 0x0, 0xfffffff8, 0xfffffffd, 0x0, 0x7, 0x1, 0x3, 0xbdb6, 0x6, 0x9, 0x7ff, 0x80000000, 0x1, 0x6, 0x4, 0x200000, 0x21, 0x8, 0x1ff, 0x2, 0x9, 0x7, 0x5, 0x1b1, 0x80000000, 0x8, 0x9, 0x4775, 0x2, 0x4, 0x6, 0x4, 0x7, 0xf, 0x5, 0x9, 0x1, 0x7, 0xc, 0x37, 0x5, 0x6, 0x200, 0x64febb32, 0x3, 0x9, 0x7f, 0x7, 0x1, 0x34, 0x7, 0x1, 0x80, 0x3, 0xc, 0x3ff, 0x1, 0x5, 0xfffffff9, 0x20000000, 0x600, 0xc0000000, 0x7, 0x3, 0xffffffff, 0x7ff, 0x0, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x400, 0x3, 0xffffff22, 0x6229, 0x3, 0xa92d, 0x7, 0xaec4, 0x4, 0xfffffff9, 0xa, 0x3, 0xfffffff7, 0x7, 0x7fff, 0x9, 0x7f, 0xc7da, 0xe0, 0x0, 0x5, 0x3, 0x400, 0x7, 0x8, 0x14, 0x7, 0x80000000, 0x1, 0x8001, 0x7fffffff, 0x3, 0x5, 0x5, 0x0, 0xece, 0x3, 0x9, 0x2, 0x7fffffff, 0x8, 0x10001, 0xffffffff, 0x9, 0x9, 0xf2, 0x9, 0x9, 0x6110, 0x7, 0x5, 0x7, 0x1, 0x8, 0x3, 0x4, 0x0, 0x3, 0x5, 0x0, 0x5, 0x1000, 0x3, 0xdcf, 0x26f7, 0x2, 0x9, 0x2, 0x8, 0x5, 0xfffffffd, 0x0, 0x1ff, 0x5, 0x57, 0xaec, 0x2, 0x2, 0xffffffff, 0x1e, 0x3, 0x2, 0x7, 0x9, 0xa9, 0x0, 0x7, 0x8, 0x7, 0xff, 0x7, 0x2, 0x1, 0x81, 0xb6000000, 0x1, 0x1, 0xa, 0x4, 0x6c, 0x1800000, 0x3, 0x8, 0x4, 0x80000001, 0x1, 0x4, 0x2, 0x7f, 0x5, 0xfff, 0x1, 0x800, 0xffffdc05, 0x2, 0x4, 0x7fffffff, 0xff, 0x8, 0x8, 0x4, 0xfff, 0x8, 0x0, 0x449f, 0x2000000, 0x4, 0x1, 0xffff, 0xfff, 0x6, 0x1, 0x5, 0x0, 0xf84, 0x400, 0x5, 0xfde, 0xdba, 0x7d, 0x4, 0x6, 0x7, 0x1910, 0x5, 0x1, 0x24f00000, 0x6, 0x4, 0x7, 0x8, 0x10001, 0xe1d, 0x1, 0x4, 0x2, 0x1fcc1602, 0x5, 0x5, 0x0, 0x7fffffff, 0x8, 0x9, 0x7, 0x1, 0x7, 0x2, 0x3, 0x6, 0x101, 0x9, 0xff, 0x914, 0x1e, 0x8, 0xf6, 0x5, 0x7ff, 0x7, 0x3, 0x2, 0x0, 0x1, 0x0, 0xfffffffd, 0x8, 0x0, 0x1, 0xd660000, 0x2, 0x3ec, 0x200, 0x2e, 0x8, 0xb, 0x7ff, 0x4, 0xb, 0x7d4, 0x0, 0xc2, 0x5, 0x2d, 0x6, 0x5, 0x7, 0x794e, 0x7, 0x1, 0x6, 0x400, 0x8, 0xc80e, 0x1, 0x7, 0x1000, 0x1, 0x101, 0x7, 0x5, 0x8001, 0x800, 0x6, 0x5, 0x0, 0x8, 0x5, 0x3, 0xe7, 0x2, 0x5, 0x7, 0xa737, 0x7ff, 0x8, 0x9, 0xfffff1cf, 0xf, 0x7, 0x7, 0x23, 0x8, 0x5, 0x0, 0x100, 0x0, 0x0, 0x80, 0xfff, 0x3, 0x9, 0x6b7, 0x5, 0x7, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000000, 0x2, 0x0, 0x9, {0x0, 0x2, 0xfffc, 0xa, 0x10, 0x43e}, {0x2, 0x0, 0x401, 0x8, 0x80, 0x2}, 0x1000, 0x3, 0x8}}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x4, 0x8, 0x5ad, 0xc, 0x6, 0x5, 0x2, 0x200, 0x9, 0x7, 0x82e, 0xfffffffd, 0x1, 0x2000, 0x4, 0xfe14, 0x0, 0x6, 0x4, 0x5, 0x6, 0xfffffff7, 0xffff0001, 0x2e2eafe1, 0x7, 0x80000000, 0x8, 0x3, 0x9, 0x2, 0xfffffffb, 0x6, 0xd5, 0x268cb628, 0x3, 0xf, 0x7, 0x6, 0x3, 0x5, 0xffff, 0x9, 0x40, 0x0, 0x2, 0x9, 0xffffffff, 0x7fff, 0xfffffff7, 0x6, 0x4, 0x80008, 0x3, 0x4, 0x3, 0xfffffffc, 0xf5, 0x1000, 0x6, 0x3000000, 0xb, 0x3, 0xffffffff, 0x4, 0x57c, 0xee6, 0xa, 0x2, 0x5, 0x3a8, 0xe93b, 0x1000, 0x4, 0x68c, 0xa5, 0x9, 0x80, 0x1000, 0x60, 0x5, 0x3, 0x8, 0x10001, 0x81, 0xffff, 0x1, 0x0, 0x2, 0xf0, 0x6, 0x2, 0x9, 0x5, 0x61, 0x7, 0x6, 0x1, 0xfffffffc, 0x10000, 0x0, 0xd6, 0x9, 0xffff0001, 0x8, 0x1, 0x87a7, 0x7fffffff, 0x7, 0x6, 0xca88, 0x4, 0x7f, 0x8, 0x10001, 0xc, 0x3, 0xeb, 0x176c, 0x1, 0x4d, 0x3, 0x1, 0x1, 0x4, 0xbd, 0xff, 0x6, 0x7, 0x6, 0x6, 0x9, 0x2, 0x8, 0xfffffff7, 0x3, 0xe, 0x0, 0x8000, 0xfffffffe, 0x7, 0x7, 0x2, 0x6, 0x7, 0x7, 0x10, 0x0, 0x5, 0xd8, 0x3, 0x5, 0x5, 0xc87, 0xc, 0x1, 0x3ff, 0x11a, 0x80000000, 0x3, 0x200, 0x7, 0x0, 0xffff, 0x1ff, 0x4, 0x2, 0x0, 0x8, 0x7, 0xffff, 0x0, 0x2, 0x1, 0x2, 0xaa, 0x27a2, 0xee30, 0x7, 0x4, 0x2, 0x0, 0x34, 0x9, 0x10, 0x8, 0xd, 0x1ff, 0xfd, 0x8, 0xfff, 0x2, 0x80, 0x7, 0x0, 0x5, 0x80000001, 0x1ff, 0x200, 0x657e, 0x5, 0xf, 0x54aa9d6c, 0x10000, 0x4, 0x80, 0x9, 0x3974c89e, 0x5, 0x0, 0x7, 0x101, 0x6, 0x7, 0x1, 0xd, 0x3, 0x5, 0x7fffffff, 0x7, 0xed, 0x6, 0x9, 0x5, 0x10000, 0x1, 0xfffffffa, 0x6, 0x4, 0x1, 0x200000, 0x3483, 0x0, 0xad7, 0x10000, 0xb0, 0x4, 0x1, 0x2, 0x0, 0x4, 0x10001, 0x1, 0x15c2, 0xfc, 0xbf90, 0xbc, 0xfffffffb, 0x9, 0x2, 0x8, 0x101, 0x2, 0x3, 0x2]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x2, 0x7, 0x5, 0x3, 0x1, 0xfffffffe, 0x0, 0x9, 0x1, 0x1b5c, 0x6, 0xa, 0x1b, 0x5, 0x0, 0x140, 0x70, 0x800, 0x5, 0x5, 0x504b, 0x7f, 0x3, 0x8000, 0x0, 0xa5, 0x9, 0x3, 0x0, 0x3, 0x6, 0xff, 0x4, 0x1, 0x4, 0x10000, 0xc, 0x8, 0x2, 0x103d0acf, 0x100, 0x1a46, 0x274, 0x9, 0x800, 0xb42f, 0x5, 0x3, 0x9, 0x3a, 0x45, 0x4, 0x0, 0xffffffff, 0x8, 0x80000001, 0x9, 0x5, 0x0, 0x2, 0x7fffffff, 0x4, 0x6, 0x9, 0xfffffffe, 0x8, 0x1ff, 0x2, 0x657a, 0x7ff, 0x3, 0x97, 0x401, 0xa, 0xcf9, 0x7, 0x10000, 0x6, 0x2, 0xfffffe00, 0xffffffff, 0x2, 0x1, 0x1, 0x6, 0x132, 0x1, 0x0, 0xea1, 0x3, 0x40000, 0x5, 0x9f, 0x3, 0x5, 0x8, 0xfff, 0x101, 0x2, 0xdb04, 0x9, 0x8, 0x40, 0xd, 0xa013, 0x2, 0x3ff, 0x93, 0x1, 0x9, 0x5, 0x992, 0x8, 0x3, 0x0, 0x61, 0x2, 0x3, 0xd070, 0x31, 0x10, 0x8000, 0x4, 0x2, 0x9, 0x7, 0x1, 0x9, 0x3, 0x1, 0x0, 0xffff7fff, 0x2, 0x7fffffff, 0x7, 0x0, 0xa, 0x10000, 0x6, 0x3, 0x4, 0x1, 0x8d, 0x5, 0xcb07, 0x2, 0x8, 0xfbaf, 0x5, 0x9, 0xff58, 0xc, 0x8000, 0x4, 0x1, 0x8000, 0xba73, 0xfffffffc, 0x80000001, 0x3, 0x4, 0x100000, 0xca, 0x8, 0xe23c36e9, 0x40, 0xf85, 0x8, 0x10000, 0x3, 0x80000000, 0x7f, 0x200, 0x2, 0x200, 0x101, 0x81, 0x80, 0x6f2, 0x2, 0x67, 0x9, 0x83, 0xc0000000, 0x6, 0x5, 0x5, 0x6, 0x7, 0x882, 0x7f, 0x6a8, 0x9, 0x5, 0x128, 0xde9, 0xfffff000, 0x7, 0xa, 0x3, 0x8001, 0x10, 0x6, 0x9, 0x91ad, 0x3, 0xffff, 0x5, 0x18, 0x3d, 0x9, 0x5, 0x0, 0x7, 0x9, 0x7, 0x9, 0x8, 0xc, 0x1, 0x2, 0x0, 0x4dfa, 0x80000001, 0x5, 0x7, 0x9, 0x7fffffff, 0x8, 0x80, 0x3, 0x8, 0x80, 0xe, 0x7, 0x9041, 0x0, 0x8, 0x7, 0x714faef1, 0x40, 0x806, 0x9, 0xb4, 0x81, 0x6, 0x10, 0x5, 0x5, 0x7ff, 0x7, 0x8001, 0x40, 0xfffffff7, 0x2]}]]}, {0x40, 0x6, "f64bf6732dd65cbc9feab9b6bae322da8b06253f4c7caf51b218566322de58c6d776a81f66a7c2efbc8f3a96c9f98f9b7ed31c09b19c20de8cf9a3af"}, {0xc}, {0xc}}}, @m_skbedit={0x90, 0x1, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0xff, 0x10000000, 0x9, 0x6}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xffff}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x566}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9, 0xfff1}}]}, {0x23, 0x6, "8a920d972e069ca0b2ca5e902ba67e5c600798eb463a93646d9ff7bf7176ff"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0x174, 0x1a, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xf, 0xfffffff7, 0x10000000, 0xd0b5, 0x42c6}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3b96, 0x644, 0x5, 0x9, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x10001, 0x8, 0x3f, 0xb44}, 0x1}}]}, {0xe7, 0x6, "803a56d4e062894abd8d4d5f258b7e6d449a0fee5e33ad59288ef46bdc64b221d5daca56e320ede48e2c28d3ea801ebfd625f8a37497e5590f77d0e3117dc346f840775be00c1da9c9a67be20dba3b9b94e6a01b5cfba6842c2fdb68a8463744beb1885200c582a00315be739840b61c961a66bd15e21c158e76988d436bf0123b8e560d5d0eba43e554794cbf52871890264abc007e523b8e2ed47e15fecd5f9e8f236df609ba1cebcc073c3c47214387e6048d113267e68108f71e9cd10d3adb064649fc452efbb4376c5337843d3111eae975228e2c8dcd7b925c891add4a900ec5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x12c4, 0x1, [@m_simple={0x134, 0x1, 0x0, 0x0, {{0xb}, {0x68, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x12, 0x3, 'wp384-generic\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffff3fd, 0x1, 0x20000000, 0x3, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0xc26, 0x1, 0xfff, 0x91}}, @TCA_DEF_PARMS={0x18, 0x2, {0xab, 0x7fff, 0x7, 0x4, 0x2}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0xa3, 0x6, "c396e38b8ecff6956bf18665d4cbc8cee2e7b87763ab13230ec10a1d81b17756a98ecd41a10bfc0ce7c87c6f9f2a093d0727c42c298882a9e65c436cb4045127d51f51229ef703d96d44152729780ccfe3c3995201f4ac159c62bc61e5efce3b861548afb3b6c16ba957f99e8fe1ab0e29f0fb9d71bc7f171857493d7544650ed92af762ce42ef5082468bda893fb44058c4f97e8589f3d6acb53fa1c6914c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_xt={0x118c, 0x14, 0x0, 0x0, {{0x7}, {0x1144, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x102a, 0x6, {0xfffb, 'nat\x00', 0x2, 0x3ff, "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"}}, @TCA_IPT_TARG={0xc5, 0x6, {0x5, 'filter\x00', 0x40, 0x8, "88d55947dd38329cc09bf1a1a313638c22d7b71c4b141911be6868e3a599994ccc16dfcd7f30352dba27939945b4a93e8faf2da3b6e686b969f82ab4966f830299bc22f4fd8d1c4bdfd6d5270692f8c86a701bcb12dca77599acb3573c3d27f9a41d7b1467cfc640d5436abb5281276d78875834cc66e8b72d594837b02f45b42029d805aea51adb5b30f0d19d19d5da10722079266eb87d44f206"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_INDEX={0x8, 0x3, 0x10001}, @TCA_IPT_INDEX={0x8, 0x3, 0x80000000}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x22, 0x6, "65dc2aad2cb5d9fba0c552ffbbe3661fc7852614bc9519f537a79a6d932e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x524c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[], 0xfe33) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000740)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES64=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x2040804}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x4014040}, 0x0) r7 = socket(0x21, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=ANY=[@ANYBLOB="380000001800010000000000000000000200140000000009000c0000060015000400000014001680100008800c"], 0x38}}, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYRES16=r0, @ANYRES16=r4], 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x0) close(r6) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) 11m4.651078482s ago: executing program 1 (id=3786): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00000001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000000000000000000002000000000000001f0d0000fe8000000000000000000000000000bb000000003200000000000000fe80000000000000000000000000000000000000000000000000000000000000800000007f000001000000000000000000000000000000006c00000000000000ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000006c000000000000006401010000000000000000000000000000000000020200000000000000000000000000102001000000000000000000000000000100000000ff00000000000000fc010000000000000000000000000000000000000500"/436], 0x1fc}}, 0x40800) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000005465563d6f9bbc5704000000000002009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) socket$xdp(0x2c, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000fc0)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x11, 0xa, 0x300) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x240080d0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000010000108006ec9005c1b5ca5b631a776a6d7937c554bc60000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 11m3.243528347s ago: executing program 1 (id=3795): unshare(0x26020480) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010010000000000000000300000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c000480380001800e000100696d6d656469617465000000240002800800014000000000180002801400028008000180fffffffc88000340000000040900010073797a30"], 0xd8}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r0, 0x0) unshare(0x48040000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xdc, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$inet6_udp_int(r2, 0x11, 0x64, 0x0, &(0x7f00000000c0)) 10m48.070814484s ago: executing program 32 (id=3795): unshare(0x26020480) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010010000000000000000300000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c000480380001800e000100696d6d656469617465000000240002800800014000000000180002801400028008000180fffffffc88000340000000040900010073797a30"], 0xd8}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r0, 0x0) unshare(0x48040000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xdc, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$inet6_udp_int(r2, 0x11, 0x64, 0x0, &(0x7f00000000c0)) 6m47.128735702s ago: executing program 5 (id=5556): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000080), 0x4) syz_emit_ethernet(0xfc0, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b32db0619e9baaaaaaaaaa3a8864"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x3}]}, 0x10) write$tun(r1, &(0x7f0000001400)=ANY=[], 0x152) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x79, 0x0, 0x0, 0x0, 0x0, 0x800}, {}, 0xfff}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@remote, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffb}}, 0xe4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0xe01, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x50) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x4, [@float={0x2, 0x0, 0x0, 0x10, 0x4}, @enum64={0xd, 0x2, 0x0, 0x13, 0x0, 0x8, [{0x6, 0xffffffff, 0x6}, {0xf, 0xbf8}]}, @enum={0x10, 0x4, 0x0, 0x6, 0x4, [{0xc, 0x6}, {0x7, 0x2}, {0xa, 0x4}, {0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x200}}, @restrict={0xb, 0x0, 0x0, 0xb, 0x2}, @fwd={0x6}]}, {0x0, [0x30, 0x61]}}, &(0x7f00000006c0)=""/248, 0xa8, 0xf8, 0x1, 0xfffffff7, 0x10000}, 0x28) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0x0, 0x80000000, 0x18}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0xffffffff, 0x2, 0x3ff, 0x180, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1, 0x5}, 0x50) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x16, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x209a0, r4, 0x0, &(0x7f0000000980)=[r8, r9, r10, r5, r8], 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400000044000701feffffff00000000037c0000040042800c00018006000600800a0000100002800a"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 6m41.478191689s ago: executing program 5 (id=5563): socketpair(0x1, 0x800, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$x25(r0, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x800) recvfrom$x25(r0, &(0x7f00000000c0)=""/210, 0xd2, 0x101, &(0x7f00000001c0), 0x12) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), r1) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r2, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x2) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x114, 0xb, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}]}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_to_batadv\x00'}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x40}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4b5}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_DATA={0x70, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0xd, 0x1a, '@(]!\xb7!$*\x00'}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xfff}, @IPSET_ATTR_ETHER={0xa}, @IPSET_ATTR_COMMENT={0xa, 0x1a, '[!.[%\x00'}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x9}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x5e}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x4040) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x60, 0x0, 0x7, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8001}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfcf0}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x100000001}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x8041}, 0x8001) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), r0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000700)={0x4}, 0x4) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r4, 0x40086e81, &(0x7f0000000740)=0x100) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000d00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f00000007c0)={0x4c8, 0xd, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4ac, 0x3, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x80, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x2c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x6}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xc}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}]}, {0x1b4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x9c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x98, 0x1, "e5b0f290f10048d31f4c3d74ba542fa2f9a2f8eb126264cca6e6d9fea64f4a71a9f2ff9405cdc65cb54c85f1a4c3c5ceeaee8cbfc60a4546df4b24e05c0f88a8c33e0c9dc2615e40c93f3b703c333442a31a31c05cb3c42d11cec08377aef28d320813f5545b7704f68f1eafb69644eb08a3cb3d4e055eacd8dd9e2dd8150d990bbed53ddd7666a322f1e7854e2131d1d196d770"}]}, @NFTA_SET_ELEM_DATA={0x108, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xae, 0x1, "db6099214ab25f1732bc4c50d2f6dd4667f0253c1379cdeefd23bfcbd086b0ca55acdcde5bc1b19256913ebbb733e416774ce2b7262ae89fdfa8f566424e2c4af965fb866d3083482fb18379d3916294725efd92ac39786873042c6fcb751993c3eedf34bf9dae61d7483ce93c1503aa9b5f8b82be2625ca794e203306fba5e446147ea6e154919b23ef052de4d703e00a6309050411cfe33e513cc38c7065930651ab7da32d401f63f4"}, @NFTA_DATA_VALUE={0x53, 0x1, "fc8d6df99be5deb5e76d0882285f48ecc4ff452138f3cff66ecbb8bcf9c41d658f570710263f30ac8645df20f55b410ae59ab01933cdb3cff018c4721d5a5f3c9ba583fa0b7b71a2787b459b7e4bd1"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xb}]}, {0x270, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x10001}, @NFTA_SET_ELEM_EXPR={0x4c, 0x7, 0x0, 0x1, @limit={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x208, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8f, 0x1, "fdc4de45912f2a0e8870bf2e89b2b575e332517c4f43dfe2794eee910ab8a5ddb733ebfe820c35d1d8ee5a3e55950800d1c5220bee6f0fe9d7ec37538d4588d971468ae0142b1c9e6142d6564224d7a89b9270413434ac80feea9c2db2d434aa7d3d7d8eebe667f731349a579c9c55a5b763490f8f0f81579b16f3068d62d3cbd1c5b9200ff5d32770e03e"}, @NFTA_DATA_VALUE={0xa8, 0x1, "ce2de307ffd9b121bd6cdab16cb7b6b6d7b280147f42788c98a14b8667e6018174ce11216b97caa99bc2947db5a3b9f2423b8e9c09d03fc7b0e37afdfa5022ea55feefd2af40f60e71a6bf509ffbb8cc6d36456566f75beea0f672d59995a78dda3e088c08da65e7c4528c9c1420f04a1e43195ce861a3d762a0b5f9e535e85b8374a89b3e0c086a492151851bf0702d171667f39b259608a3378e70b2ae0b1f055f36f7"}, @NFTA_DATA_VALUE={0x76, 0x1, "a26e061982d36328b77e4c6da1951165a0c69271f8a5e7601da4030b505dfff0372d8b61c1e5b1961adc94c02e3e251066a700f567b178e361d5ff640dd885c5367b8ba182898e662919f219875cace6d744de9e9758412a4c2760a151cb9e215d75ef05cb70016f7ce0956dd24d069b22c1"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x4c8}, 0x1, 0x0, 0x0, 0x840}, 0x54) r5 = socket(0x2c, 0x4, 0xa56d) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), r5) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x7c, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x10001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5763b39d}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xbea5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x880}, 0x8000) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r5, 0x110, 0x5, &(0x7f0000000ec0)=[0x1, 0x4], 0x2) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000f40)={'sit0\x00', &(0x7f0000000f00)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0xd, 0x18}}) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0xa, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f80), 0x440281, 0x0) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000001000)={0x2, &(0x7f0000000fc0)=[{0xca47, 0x84, 0x98, 0x7d6}, {0xfe7c, 0x5, 0x6, 0x4}]}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000001180)={{0xffffffffffffffff, &(0x7f0000001040)='syz1\x00', 0x100, &(0x7f0000001080)={@_ha_fsid, {0x4, 0x2, 0x4, 0xfffffffffffffffc}}, 0x3, &(0x7f00000010c0), &(0x7f0000001100)=0x3}, {[0x5, 0xfffffffe, 0x5, 0x7]}, 0x3ff, 0x40, &(0x7f0000001140)=""/64}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001580)={0xffffffffffffffff, 0xe0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb6, &(0x7f0000001380)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000013c0), &(0x7f0000001400), 0x8, 0x9c, 0x8, 0x8, &(0x7f0000001440)}}, 0x10) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x11, 0xe, &(0x7f0000001200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x3, 0x2, 0x6, 0xa, 0x3, 0x30, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @jmp={0x5, 0x0, 0x3, 0x4, 0x7, 0x30, 0x4b66c37b77ce146e}, @initr0, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000001280)='syzkaller\x00', 0x101, 0x0, 0x0, 0x41100, 0x69, '\x00', r9, 0x0, r3, 0x8, &(0x7f00000015c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000001600)={0x1, 0xe, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000016c0)=[r10, 0x1], &(0x7f0000001700)=[{0x3, 0x5, 0xf, 0x8}, {0x0, 0x2, 0xc}, {0x4, 0x4, 0xb}], 0x10, 0x7}, 0x94) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r11, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x78, r12, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040001}, 0x8004) ioctl$NS_GET_USERNS(r8, 0xb701, 0x0) 6m41.098106523s ago: executing program 5 (id=5568): r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x3, 0xfffffffd, 0x14, @mcast1, @mcast2={0xff, 0x3}, 0x8, 0xba08}}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[], 0x5c}}, 0x20084884) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket(0x10, 0x803, 0x0) socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x3}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0x8000}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x5, 0xfff3}}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0xc040) socket$igmp6(0xa, 0x3, 0x2) r8 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="b40000000109010800000000000000000a0000090900010073797a3100000000080005400000001c08000540000000060900010073797a30000000000c00048008", @ANYRESDEC=r9], 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x880) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6m39.931691436s ago: executing program 5 (id=5576): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f000000000000090000008500000075000000de0000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x5b3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c10200000006125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) 6m34.608897089s ago: executing program 5 (id=5582): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in6=@empty, 0x3, 0x8, 0x4e20, 0x0, 0x2}, {0x0, 0x0, 0x1fffffe, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1, 0xfffffffffffffffd}, {0x1ff, 0x800000000000, 0x4, 0xffffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0xffffffff, 0x2b}, 0x2, @in=@loopback, 0x3504, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xffffff87, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 6m33.609113528s ago: executing program 5 (id=5591): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRESHEX=r0, @ANYBLOB="400d0000001200003000128008000100687372002400028008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES64=0x0], 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) 6m18.515955541s ago: executing program 33 (id=5591): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRESHEX=r0, @ANYBLOB="400d0000001200003000128008000100687372002400028008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES64=0x0], 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) 5.745804861s ago: executing program 2 (id=7328): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="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"], 0x22c}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x400c084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="02040000000000004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000000100000007000300000000005cae641872319dfae5a988272763a36abcf1f74cfd4bf988531a30a528c1c044813d8205fd8b1fdf1c2ccd79b5fb7f9e096fbd1c7eeee4b6646c0b2fc39d3fe20000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x296) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_emit_ethernet(0x1f, &(0x7f0000000100)=ANY=[@ANYBLOB="4907aaaaaaaaaaaaaaaa2430907460aaaa00431011aaab63f876a76c0cae145e4c"], 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x10, @private1, 0x8}, 0x1c) close(0x4) unshare(0x6a040000) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x2e, 0x5, 0x72}, 0x2c) unshare(0x2000000) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) unshare(0x2010100) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) 4.642175883s ago: executing program 2 (id=7338): syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x1, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5, 0x1}, {0x0, 0x8000000}, {0x0, 0x0, 0x800000, 0x0, 0x6, 0x80000001}, {0xffff4c74, 0xc3}, {0x0, 0x5, 0x4, 0x9}, {0x5}, {}, {0x0, 0x10, 0x0, 0xfffffffd}, {0x0, 0x470a, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x1, 0x1000, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0xd9f7}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffc}, {0xffffffff, 0x0, 0x0, 0x0, 0xfffffffd, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x5, 0x0, 0x0, 0x4}, {0xffffffff, 0x0, 0x0, 0x3, 0xfffff800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {0x0, 0x5}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80, 0xffffffff}, {0x0, 0x0, 0x0, 0x5, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2a}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {0x0, 0x9}, {0x0, 0xffffffff, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {0x2}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x2000, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200, 0x0, 0x0, 0xfffffffc}, {0x0, 0xe3b6, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {0x4, 0x0, 0xfa48}, {0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {0x0, 0x0, 0x800}, {0xdb3, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0x4}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {}, {}, {0x0, 0x5, 0xe}, {0x2000, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x9797, 0x0, 0xec33, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x9, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x2000, 0x1}, {0x7f}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0xfffffffd, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x81, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80, 0x2}, {0x10000008, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x200000}, {0x0, 0x10000, 0xffffffff, 0x0, 0xfffffffd}, {0x3, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x2d, 0x0, 0x10000}, {0x0, 0x4, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x1010000, 0x0, 0x0, 0x8}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x87}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {0x3}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {0x1}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {0x3}, {}, {0x2}, {}, {}, {0x2}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x200c0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b40)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0xe8, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000140), {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@local, @remote, @empty, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r3, @ANYBLOB="b759cdc0af94680674f451c513371f4927b49175dc9ee9db8eb8eb5fcaca9296def45a15b56382a7441ce4e79983c157442c23fe123fd4468ca55c510635f9c28dc8b0648bf29681f9ab1313f4ccad8e0ded61a6f250426f9eac"], 0x3c}}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000001400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES16=r5, @ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="1100000000001d0000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x6, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) 3.945462094s ago: executing program 3 (id=7344): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001000)="98", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000a00)="449f6aed247d197178", 0x9}, {&(0x7f0000000780)="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", 0x173}], 0x2}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)="bae4", 0x2}, {&(0x7f00000000c0)="d825079a98f00eedab87b0af330c7e2d626924216763b5579a3c85b2d1d46bc5b3ec13932a25cc7486d10c7a582a9d573d6807ca73ae27ac0c656b8ff80c5277da81f2bd35f1070706da1c17f225db1a5b84ae6628b081dafe87bf4de0728e1c2b76e0c0d91e622fc1c716", 0x6b}], 0x2}}], 0x3, 0x4004) recvmsg$unix(0xffffffffffffffff, &(0x7f00000038c0)={&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000000580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000000c0)=""/34, 0x22}, {&(0x7f0000000200)=""/5, 0x5}], 0xa}, 0x40010163) 3.728766366s ago: executing program 6 (id=7345): syz_80211_join_ibss(0x0, &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='veno', 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001000)="98", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000a00)="449f6aed247d197178", 0x9}, {&(0x7f0000000780)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351050b828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c3fedaec3144d1ee66a0eb0750363e346cb9556a649fb246dd788930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d5637f61d05401a64482860fc94a6311097055383c1d39604895eac4f83a498251f71485b91b9b091354c0d70b5058755b701b57a992f5012829db80bb04ecbc7663de9c8fad1a822cc061166f1cfebc8c45cc776ebf8e5147e66c1acd96eb77ae8020e14bf11a2d4207e684984f4e94fc16a52975713358927efef5921b8bf843aadd9fc96939a06efab6526fe5a8de5870fabaaa896a98b9e81c862259767880aee29a30c7ffe", 0x173}], 0x2}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)="bae4", 0x2}, {&(0x7f00000000c0)="d825079a98f00eedab87b0af330c7e2d626924216763b5579a3c85b2d1d46bc5b3ec13932a25cc7486d10c7a582a9d573d6807ca73ae27ac0c656b8ff80c5277da81f2bd35f1070706da1c17f225db1a5b84ae6628b081dafe87bf4de0728e1c2b76e0c0d91e622fc1c716", 0x6b}], 0x2}}], 0x3, 0x4004) 3.511994239s ago: executing program 3 (id=7347): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x4c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040841}, 0x4) unshare(0x40400) socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x200, 0xffffffff}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c898}, 0x20004804) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r2) 3.007204355s ago: executing program 4 (id=7351): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x2}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xfffffffe}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x44885) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x2000c058) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) (async) socket$phonet(0x23, 0x2, 0x1) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet(0xa, 0x801, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r8], 0xc4}}, 0x0) (async, rerun: 32) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3ff9a26b8731abf4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r9, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040040}, 0x4040000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r7, @ANYBLOB="14002f80080001"], 0x30}}, 0x4000040) 2.778333587s ago: executing program 4 (id=7353): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000980)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e00100000184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce2d715f2828"], 0xe0}], 0x1}, 0x40040) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) pwritev(r4, 0x0, 0x0, 0x4, 0x2) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0x18}, 0x1, 0x0, 0x0, 0x4809}, 0x14) r5 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x39, 0x1, 0x7fffa, 0x25dfdbfe, {0x1}, [@typed={0x8, 0xec, 0x0, 0x0, @u32=0x800b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xec601, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001b14010029bd7000ffdbe825080045006d46e539"], 0x18}, 0x1, 0x0, 0x0, 0x4040800}, 0xc0) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) (async) unshare(0x2020600) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="06000000040000004000000089"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r10, 0x0, 0x7}, 0x38) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000100)={r9, 0x7}, &(0x7f0000000140)=0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={r9, 0x2c, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, @in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000340)=0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) (async) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/125, 0x7d}], 0x1}, 0x40) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000000800000000010000000100000506000000000000010200000000000000005f"], 0x0, 0x58, 0x0, 0xa}, 0x28) 2.670081634s ago: executing program 6 (id=7355): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'hsr0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x20008042) 2.547712873s ago: executing program 4 (id=7356): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'ip_vti0\x00', {0x2, 0x0, @empty}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000304000000000000000100000300", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000006200028008004040", @ANYRES32=0x0, @ANYBLOB="22e45a85974c07585fc2ba2c9b7cd9657f713d0920e375f7f5990004053346a2a78ab55090a807b105461a8223d3b13ab6eeed4cda9adab7f265abb5708bee131ed5bc9f542c2081e0c112962460a8d225f58c411a0eb6eb03cad9"], 0x3c}}, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@multicast1, @empty}, &(0x7f0000000240)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x80, 0x1, 0x7, 0x8, {{0x15, 0x4, 0x1, 0x3b, 0x54, 0x67, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@timestamp={0x44, 0x18, 0x5e, 0x0, 0x9, [0x3, 0x8001, 0x2, 0x7, 0xf]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0x1f, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xb}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @loopback, @multicast1]}]}}}}}) unshare(0x8000400) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendfile(r5, r5, 0x0, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r8, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r9, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r9, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @local, @loopback}}}], 0x20}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000340)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="aaf6ef73584c58665a7466b89eeaa5998217b433bef5f569350449ee49792c771a5207dfb555bc09eb13f92b5397", @ANYRES16=r4, @ANYBLOB="000427bd7000fcdbdf250300000005000300f500000005000200020000000500050005000000050005009d0000004c000180080003000100000008000300020000001400020069703665727370616e3000000000000008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="14000200736974300000000000000000000000000500050007000000"], 0x88}, 0x1, 0x0, 0x0, 0x20004800}, 0x30000010) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r12}, 0x10) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r13, &(0x7f0000000000), 0xffffff6a) r14 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendfile(r14, r13, 0x0, 0x5) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r2, @ANYRES64=r2, @ANYRES64=r12, @ANYRES64=r12, @ANYRES64=r2, @ANYRES64=r12], 0x20000600}}, 0x20000011) 2.501675322s ago: executing program 6 (id=7358): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x400c084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_emit_ethernet(0x1f, &(0x7f0000000100)=ANY=[@ANYBLOB="4907aaaaaaaaaaaaaaaa2430907460aaaa00431011aaab63f876a76c0cae145e4c"], 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x10, @private1, 0x8}, 0x1c) close(0x4) unshare(0x6a040000) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x2e, 0x5, 0x72}, 0x2c) unshare(0x2000000) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) unshare(0x2010100) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) 2.330336359s ago: executing program 3 (id=7359): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x6720f15ce8555866) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={r1, r2/1000+10000}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES8=r5, @ANYRES8, @ANYRES64=0x0, @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x11, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8954, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={0x0}}, 0x20004890) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000000)={0xf, 0x6, 0x8000, 0xb3d, 0xbf1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) accept4(r9, 0x0, 0x0, 0x80000) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000000201010200000000000000000a0000073c0002800c00028005000100210000002c00018014620300fc01000000000000000000000000000114000400fe8000000000000000000000000000aa"], 0x50}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={r10, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NILFS_IOCTL_GET_VINFO(r5, 0xc0186e86, &(0x7f0000000640)={&(0x7f00000004c0)=[{0xc, 0x678f967f, 0x2, 0xfffffffffffffffb}, {0xf, 0x8000000000000001, 0x491705a5, 0xde}, {0x6da, 0x1, 0x2, 0x8}, {0x9, 0x6, 0x6, 0x8}, {0x0, 0xffff, 0x9, 0xc}], 0x5, 0x20, 0x9}) 1.943839696s ago: executing program 0 (id=7360): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x41, 0x3, 0xa10, 0x0, 0x19, 0x0, 0x0, 0x0, 0x978, 0x1f0, 0x1f0, 0x978, 0x1f0, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x42}, @dev, 0xff000000, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00', {}, {}, 0x73, 0x0, 0x40}, 0x0, 0x878, 0x898, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@u32={{0x7e0}, {[{[{}, {0x9, 0x2}, {0x59, 0x3}, {0x7fffffff, 0x1}, {0x74000000, 0x2}, {0xe0, 0x1}, {0x0, 0x2}, {0x100, 0x2}, {0x6}, {0x9, 0x3}, {0x8ee}], [{0x9, 0x1ff}, {0x6729, 0x4}, {0x4, 0x5}, {0xffffffff, 0x2}, {0x9, 0x9}, {0x2, 0x200}, {0x6, 0x291}, {0x8, 0x1}, {0x5, 0x4}, {0x7, 0x53}, {0xf, 0x1}], 0x5, 0x3}, {[{0x100, 0x3}, {0x9, 0x3}, {0xd}, {0x8, 0x3}, {0xfffff801, 0x3}, {0x3b21aa46, 0x2}, {0x2}, {0x1, 0x2}, {0x6, 0x2}, {0x9, 0x2}, {0x800, 0x2}], [{0xffffffdb, 0x5}, {0x4, 0x7}, {0x2, 0x64}, {0x9, 0x10000}, {0x3ff, 0x7}, {0x1}, {0x10001, 0x3}, {0x48, 0xffff}, {0x5, 0xb}, {0xb3b5, 0x3784}, {0xfffffffd, 0x29}], 0xb, 0x7}, {[{0x12a}, {0xd4, 0x2}, {0x80000000, 0x2}, {0x4, 0x2}, {0x8, 0x3}, {0x3b84}, {0x2, 0x3}, {0x9}, {0x2, 0x3}, {0x6}, {0x1, 0x3}], [{0xfaa, 0x2}, {0xfffffff9, 0x800}, {0x3, 0xa}, {0x816, 0x200}, {0x13}, {0x5d3, 0x5}, {0x5, 0x9}, {0x2, 0x4}, {0x7, 0x200}, {0x8, 0x135}, {0xc5}], 0x7, 0x9}, {[{0x7, 0x1}, {0xaf8f, 0x1}, {0x10001, 0x2}, {0x800, 0x3}, {0xb3, 0x1}, {0x924}, {0x4, 0x1}, {}, {0x81, 0x1}, {0x40, 0x2}, {0x101, 0x1}], [{0x2, 0x9}, {0x2, 0xa}, {0x8, 0x3}, {0x1, 0x8}, {0x5, 0x7}, {0x1, 0x1}, {0xd04, 0x280000}, {0x5}, {0x8, 0xb71}, {0xd, 0x9}, {0x1, 0x40}], 0x1, 0x9}, {[{0x6}, {0x2, 0x2}, {0x9, 0x3}, {0x1, 0x2}, {0x400, 0x1}, {0x7, 0x2}, {0x1, 0x2}, {0x4, 0x1}, {0x4753, 0x2}, {0x9, 0x3}, {0xec4, 0x3}], [{0x3, 0xfff}, {0x3, 0x655}, {0x8000, 0xd}, {0x2, 0x2}, {0x4, 0x3}, {0x3, 0x2}, {0xb, 0x3c11f007}, {0x2, 0x80}, {0x7, 0x5}, {0x26e, 0x10}, {0x2, 0x7}], 0x9, 0xb}, {[{0x5}, {0x80, 0x2}, {0x1}, {0x8, 0x1}, {0xfff}, {0x8}, {0x4, 0x2}, {0x8}, {0x8001, 0x2}, {0xffffffff, 0x2}, {0x7, 0x1}], [{0x81, 0x800}, {0x225d5607, 0x8}, {0x72}, {0xc, 0x3}, {0x4, 0x3}, {0x7, 0x10001}, {0xc8c5, 0x100}, {0x4, 0xff}, {0x8001, 0x8001}, {0xf55, 0x40}, {0x7f, 0x3104}], 0x8, 0xb}, {[{0x9, 0x3}, {0x2, 0x1}, {0x3}, {0xc0000000, 0x1}, {0x6}, {0x3, 0x3}, {0x3e06, 0x1}, {0x0, 0x2}, {}, {0xff, 0x2}, {0xffff8001, 0x1}], [{0x10001}, {0xc5, 0x2}, {0x9a8a, 0x7fffffff}, {0x8, 0x1}, {0x0, 0x2}, {0xf, 0x9}, {0x0, 0xffff8000}, {0x1000, 0x9}, {0x6, 0x3}, {0x48bb, 0xfffff800}, {0x8, 0x1}], 0x6, 0x6}, {[{0x0, 0x2}, {0x6, 0x1}, {0x2, 0x2}, {0x2}, {0x4, 0x3}, {0xc843, 0x2}, {0x3, 0x3}, {0x9, 0x3}, {0x3, 0x1}, {0x4, 0x3}, {0x7fffffff, 0x2}], [{0x5be, 0x7ff}, {0x7, 0x8f}, {0x1, 0x6}, {0x2, 0x9}, {0x1, 0xeb}, {0x2, 0x1}, {0x9, 0x101}, {0x32, 0x7a}, {0xff, 0xf}, {0x927, 0x80000001}, {0x1ff, 0x9}], 0x9, 0x6}, {[{0x7, 0x3}, {0x2000000, 0x1}, {0x9, 0x1}, {0x51c6, 0x3}, {0x1fc7d189, 0x3}, {0x400, 0x2}, {0x3, 0x2}, {0x0, 0x1}, {0x4}, {0x9, 0x3}, {0x8, 0x3}], [{0x2, 0x6}, {0x3}, {0x9, 0x8d3}, {0x7f, 0x10}, {0xfffffc00, 0x7fff}, {0x53, 0x8000}, {0x5, 0x7}, {0x8, 0x8}, {0x5, 0xffff0000}, {0x1, 0x1}, {0x6, 0x8}], 0x7}, {[{0xe1, 0x2}, {0xc0, 0x3}, {0x8, 0x2}, {0x6, 0x1}, {0x7f, 0x1}, {0x200000, 0x3}, {0x8, 0x3}, {0x2, 0x3}, {0x1, 0x3}, {0x0, 0x1}, {0xb2}], [{0xcde7, 0x7}, {0x4, 0x63}, {0x5, 0x1}, {0x2, 0x1000}, {0x101, 0x8001}, {0x3, 0x9}, {0x1, 0x5954}, {0x8, 0x6}, {0x80000000, 0x5}, {0x40, 0x24b3}, {0xffffa468, 0x6}], 0x3, 0x9}, {[{0x7, 0x1}, {0xffffffff, 0x1}, {0x9, 0x3}, {0x7f, 0x2}, {0x2}, {0x4}, {0x70}, {0x5, 0x1}, {0x7fff, 0x2}, {0xe6e6, 0x2}, {0x5}], [{0xe53e, 0x9b}, {0x36, 0x4}, {0x8, 0x1}, {0x5, 0x5}, {0x4, 0x1}, {0x1000, 0x6}, {0x6, 0x10001}, {0x10000, 0x7fffffff}, {0x5, 0x1}, {0x9, 0x2}, {0x2, 0xa8f}], 0x5, 0x4}], 0xff, 0x1}}, @common=@inet=@socket1={{0x28}, 0xc}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xa70) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180)={0x4, 0x7, 0x7, 0x2, 0x8}, 0x14) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000100)={r0, &(0x7f0000000000)='syz0\x00', 0x103100, &(0x7f0000000040)={@_ha_fsid={[0x1, 0x4]}, {0x8000, 0x0, 0x4, 0x3}}, 0x10000, &(0x7f0000000080), &(0x7f00000000c0)}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0x8, 0x7f02ae, 0xd8, 0x200, 0x218, 0x2e8, 0x2e8, 0x218, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x5, 0x3}, {0xffffffffffffffff, 0x0, 0x2}, 0x0, 0x5}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xff000000], 'pim6reg1\x00', 'netdevsim0\x00', {}, {0xff}, 0x84, 0x0, 0x1}, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@srh={{0x30}, {0x2b, 0x2, 0x9, 0xf4, 0xa0ec, 0x10, 0x18}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x8, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) r8 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r8, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x98fd}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/65, 0x41}, {&(0x7f0000002880)=""/264, 0x108}, {&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f0000002740)=""/141, 0x8d}], 0x5}, 0x101}], 0x3, 0x20, 0x0) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) r9 = socket$key(0xf, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x3, [@union={0x9, 0x2, 0x0, 0x5, 0x0, 0x4, [{0x1, 0x5, 0xe}, {0x9, 0x4, 0x4}]}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0x70, 0x6}, @var={0x10, 0x0, 0x0, 0xe, 0x2, 0x2}, @datasec={0xe, 0x4, 0x0, 0xf, 0x2, [{0x1, 0x1ea, 0x7}, {0x3, 0x1, 0x2}, {0x1, 0x6, 0x59}, {0x2, 0x7, 0x1}], "aef5"}, @var={0xe, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x61]}}, &(0x7f0000000880)=""/107, 0xaf, 0x6b}, 0x28) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x804000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8014}, 0x8040) sendmsg$key(r9, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000010001fff0000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400", @ANYRES32=r6, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) 1.724061019s ago: executing program 4 (id=7361): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6, @local}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfeffff, 0xffffff69, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 1.656411647s ago: executing program 0 (id=7362): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0xffffffff}, 0x10) pipe(&(0x7f0000000000)) listen(r0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) 1.490395273s ago: executing program 0 (id=7363): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d70300000000000000d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df6c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8a9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2a9e99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8be1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaa072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a3ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a98838156ff00000000000000cdbf91f7582ab314be3e67b8c9459564c856339a80919ecf839560c62e69df8667b274cc53f83f2086cfd2664252471fad9081824d60741d663ee258705c364e162b84a09870acd0a19399103474444f4fa12dcbd10b40195b6088513029b60a34e4161fe48c092693eb07dc8ddcba2eac2efe30b285a877c862c73ff8a60cf73f1b17da0000000000005664181c1f28cd2880e6872bae932eaf4b0000000000007b662c0fe22cfd6d4bd7b851ae928cebeec6375b16af342e93c39d97e5d74d5a8e96c15fdcde7526b0af54b145e61b042c1e600390590a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x401, 0x0, 0x0, {0x92258420943190a, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x40091}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x10e, 0x0, &(0x7f0000000f40)="b9ff03310644268cb89614e886dd6f8ec0a5fa7a80339e916b28fea3fc5c6afe0189acc82c8112eb153b3415124ef9ab1d0dd98b72de1b26e4fd2e609528a070fae09a0635da2ffd387c6fd5e5ac46aac8451354edc649517ae97180e7cc2be6b7b30cbf598462873e96b66fe2e235531119304df361dbf40cf5de780eb639d138ede237de3544bc0a6a503b6594c88569ad44f647345e1f699a4a6912b1d7b56a43371305ccf8541970c523754a0776012f3071e0034e4ddfec8b0412fd69f9a891997e8976852eccc5b2f845e2e0131858f6640f68e9cf7d7d61e68a7b92759839e1e70b217117b106075ec6470ba5c75052d8bf1847aabbe2a40dfb0fc3f6d7b2fd244cc5fce5fe6526454130", 0x0, 0x3, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.376094493s ago: executing program 4 (id=7364): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf83) (async) shutdown(r0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f00000011c0)=ANY=[@ANYBLOB="1800000008000000000000000800000091110d000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x3, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xc, 0x5}}}, 0x24}}, 0xc4) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a310000000009"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001100010025bd7000fddbdf2500000000", @ANYRES32, @ANYBLOB="206001000031000008001c"], 0x40}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000006800010003001000fdffff7f00000000000000000c0002000100000015000000080010"], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r3 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, 0x0, 0x0) unshare(0x6020400) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000780)={0x0, 0x1, 0xfffffc8e}, 0x10) (async) r5 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa}, 0x78, r6}) (async, rerun: 64) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x8936, &(0x7f0000000000)) (async, rerun: 64) setsockopt$inet_tcp_int(r3, 0x6, 0x6, &(0x7f0000000000)=0x3, 0x4) 1.292153782s ago: executing program 6 (id=7365): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x17, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x10000000, 0x1, 0xfff}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca3", 0x4}], 0x1}], 0x1, 0x40800) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x29}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000080000400001a0000f7"], 0x50) (async, rerun: 32) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, 0xc80, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x6}]}}}]}, 0x3c}}, 0x0) getsockopt$bt_hci(r4, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0x140, 0xffffffff, 0xffffffff, 0x140, 0xffffffff, 0x238, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0xfffff08e, 0x1, 'snmp_trap\x00', {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) (async) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) (async) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f00000000c0)=0x101, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000), 0x4) (async) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000001080)=@llc, 0x80, &(0x7f0000002340)=[{&(0x7f0000001100)=""/91, 0x5b}, {&(0x7f0000001180)=""/199, 0xc7}, {&(0x7f0000001280)=""/162, 0xa2}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x4, &(0x7f0000002380)=""/1, 0x1}, 0x100) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000005440)=ANY=[@ANYBLOB="1200000005000000080000000900000000000000", @ANYRES32, @ANYBLOB="0000000000000000df000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r9, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000002600)={'syztnl1\x00', &(0x7f0000002580)={'ip6gre0\x00', 0x0, 0x4, 0x9, 0x5, 0x4, 0x8, @rand_addr=' \x01\x00', @private2, 0x10, 0x7800, 0x5, 0x4}}) 1.267276549s ago: executing program 3 (id=7366): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60000000001c0600aafe8000"/42, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7002008890780010fe06e2d4c3d90802"], 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000680)=0x8000, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000980)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000100)={0x38, r6, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x38}}, 0x4004084) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r8) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffff0000000108000700263a0909140002"], 0x44}, 0x1, 0x1000000, 0x0, 0x4000}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x88, r9, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:xen_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x24040001}, 0x40000) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003180)=""/23, 0x17}, 0xfffffff9}], 0x1, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$OSF_MSG_ADD(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000980)=ANY=[@ANYBLOB="68020000000501040000000000000000030000065402010003000000080000005afcfaff0800190073797a31000000000000000000000000000000000000000000000000000000007b6452ea8bff65b56314a91d43a4edab2962119324e3385625ab9a002045f14aca8d62f4648edb0c1c75054fcb21694e17c949d4222360623f4d79659086a22c020009"], 0x268}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x7c, 0x4, 0x8, 0xe01, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x1538}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x430c2c07c0585eb7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4040005}, 0x2000000) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="40000000100039040000000000000000000003e4", @ANYRES32=r2, @ANYBLOB="000000000000000020001280080001007369740014000280080014000f00000008000100d4"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) 1.240526933s ago: executing program 0 (id=7367): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000580)={r0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0901000000005e1affd5020000000900010073797a300000000e7810fa3a99a3bd90fb753f4d0008000240000000032c000000030a01030000e6ff00000000020000000904010073797a30000000000900030073797a320000000014000000110001", @ANYRES64=r1, @ANYRESDEC=r1], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x7}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x19}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x2, 0xa}, 0x20) r5 = socket(0x2, 0x80805, 0x0) connect$qrtr(r5, &(0x7f0000000240)={0x2a, 0x3, 0x4001}, 0xc) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0xf) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000000540)={&(0x7f00000005c0)={0xa, 0x5e21, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x25}, 0x8000) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) close(0x4) 1.238498027s ago: executing program 2 (id=7368): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'hsr0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x20008042) 1.088198887s ago: executing program 2 (id=7369): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c0000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000005c0)={0x0, 0x4, 0x2, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000a00)={r3, "ef9c88d34ddc872e7ebfc3bda05988f2"}) 954.394357ms ago: executing program 4 (id=7370): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) shutdown(r0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x8, 0x8, 0x8, 0x0, 0x1, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007500000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r6, &(0x7f0000000140), 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000140)="c1188e99b95d02ff4284860188a8", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x72, 0xffffffffffffffff, 0x2bebc000) getsockopt$inet6_opts(r2, 0x29, 0x4d, 0x0, &(0x7f00000001c0)) 934.434151ms ago: executing program 2 (id=7371): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001000)="98", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000a00)="449f6aed247d197178", 0x9}, {&(0x7f0000000780)="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", 0x173}], 0x2}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)="bae4", 0x2}, {&(0x7f00000000c0)="d825079a98f00eedab87b0af330c7e2d626924216763b5579a3c85b2d1d46bc5b3ec13932a25cc7486d10c7a582a9d573d6807ca73ae27ac0c656b8ff80c5277da81f2bd35f1070706da1c17f225db1a5b84ae6628b081dafe87bf4de0728e1c2b76e0c0d91e622fc1c716", 0x6b}], 0x2}}], 0x3, 0x4004) recvmsg$unix(0xffffffffffffffff, &(0x7f00000038c0)={&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000000580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000000c0)=""/34, 0x22}, {&(0x7f0000000200)=""/5, 0x5}], 0xa}, 0x40010163) 813.048387ms ago: executing program 6 (id=7372): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000d2a8e09a21dbd0000000000000ff070000010000000000000095"], &(0x7f0000001840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket(0x2b, 0x1, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a090400000000000000000200000060000480300001800e000100696d6d6564696174650000001c000280100002800c000280080001800000000008000140000000002c0001800b0001006e756d67656e00001c0002800800014000000004080002400000009408000340000000000900010073797a30000000000900020073797a32"], 0xb4}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) write$tun(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xfce) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x5, 0x8000, 0x11, @loopback, @dev={0xfe, 0x80, '\x00', 0x12}, 0x10, 0x20, 0x8, 0xffffff81}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'erspan0\x00', r7, 0x7, 0x80, 0x2, 0x3, {{0x13, 0x4, 0x2, 0xb, 0x4c, 0x64, 0x0, 0xc, 0x0, 0x0, @multicast1, @multicast2, {[@rr={0x7, 0xb, 0xd9, [@dev={0xac, 0x14, 0x14, 0x29}, @local]}, @timestamp_addr={0x44, 0x2c, 0xc8, 0x1, 0x8, [{@broadcast, 0x1}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x7}, {@empty, 0xed6}, {@private=0xa010100, 0x198a}, {@private=0xa010100, 0x6}]}]}}}}}) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) r8 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r10 = accept4$inet(r1, &(0x7f00000007c0)={0x2, 0x0, @initdev}, &(0x7f0000000700)=0x10, 0x80800) setsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f0000000780)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, r7}, 0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r9, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x5, 0x600}}, 0x20) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000fedbdf000014000380040004000400050008000200000000000c00018008000100000000", @ANYRES32=r12, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044094) setsockopt$IPT_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xcf8a) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000046090100000003e71600000006000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000000000024090000114200005c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 721.847046ms ago: executing program 2 (id=7373): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="5ecb3030168c"}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=@newqdisc={0x144, 0x24, 0xc11, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0xc}, {0xfff1, 0x98b5798ab9fa21b0}, {0x1, 0x9}}, [@qdisc_kind_options=@q_blackhole={0xe}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc1, 0x6, 0x8, 0x5, 0x2, 0x7, 0x5, 0x4}}, {0xc, 0x2, [0x6, 0x7, 0x7fff, 0x8]}}, {{0x1c, 0x1, {0x8, 0x8, 0x8, 0x101, 0x2, 0xa, 0x7, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x9, 0x7, 0xeff, 0x3ff, 0x2, 0x200, 0x6, 0x7}}, {0x12, 0x2, [0x0, 0x100, 0x9, 0xfff9, 0x9, 0x5, 0x5]}}, {{0x1c, 0x1, {0x40, 0xc, 0x7, 0xffffffc5, 0x2, 0x4, 0xfffffffa, 0x2}}, {0x8, 0x2, [0x3, 0x1]}}, {{0x1c, 0x1, {0x5, 0x89, 0x4, 0x0, 0x2, 0x5, 0x9, 0x3}}, {0xa, 0x2, [0xd, 0x7, 0xc]}}, {{0x1c, 0x1, {0x5, 0x9, 0x7, 0x6364, 0x2, 0x9f, 0x15, 0x5}}, {0xe, 0x2, [0xd, 0x7, 0x101, 0xce, 0x790]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_RATE={0x6, 0x5, {0x8, 0x9}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8001}]}, 0x144}}, 0x2004c000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x1}, 0xfffffffffffffeaf) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000000c0)={r4, 0x8, 0x9, 0xd5}, 0x14) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) splice(r2, &(0x7f0000000080)=0x8001, r2, &(0x7f0000000140)=0x79, 0x5, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000000300)=0x3, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x303}, "f2f3b992d21a6bc1", "5499cf9561b306372622efa591133423", "e6fb82fb", "173b5d15a03cc0f9"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) readv(r2, &(0x7f0000000a80)=[{&(0x7f0000000300)=""/157, 0x9d}, {&(0x7f0000000440)=""/211, 0xd3}, {&(0x7f0000000580)=""/241, 0xf1}, {&(0x7f0000000680)=""/196, 0xc4}, {&(0x7f0000000780)=""/200, 0xc8}, {&(0x7f0000000880)=""/249, 0xf9}, {&(0x7f0000000980)=""/254, 0xfe}], 0x7) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000280)=@req={0x7, 0x0, 0x0, 0x101}, 0x10) 646.306056ms ago: executing program 3 (id=7374): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x3c, r2, 0x1, 0x70bd2c, 0x44, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}}, 0x4) 424.615921ms ago: executing program 0 (id=7375): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r3}, 0x8) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32=r2, @ANYBLOB=' \a\x00>', @ANYRES32=r0], 0x38}}, 0x20000140) 68.024062ms ago: executing program 3 (id=7376): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000002c0)='G', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x2, 0x10, 0x5, 0x0, 0x2, 0x0, 0x70bd2d, 0x25dfdbfb}, 0x10}}, 0x4000000) 234.734µs ago: executing program 0 (id=7377): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtaction={0x14, 0x76, 0x1, 0x70bd2b, 0x25d7dbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) (async) close(r1) syz_genetlink_get_family_id$l2tp(&(0x7f0000001200), r0) 0s ago: executing program 6 (id=7378): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000001) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r3, &(0x7f0000000080), 0x12) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x12, 0x2, 0x6, 0x9, 0x40, 0x8000}, 0x0, &(0x7f0000000240)={0x1f, 0x112, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000004}, 0x0, 0x0) write$cgroup_devices(r3, 0x0, 0x3b) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000005"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) kernel console output (not intermixed with test programs): 0][T30308] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6127'. [ 1037.337048][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1037.341210][T30306] syzkaller0: entered allmulticast mode [ 1038.742833][T30272] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1043.159037][T30332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6132'. [ 1043.206815][T30330] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.059544][T30330] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.160175][T30354] netlink: 'syz.4.6137': attribute type 2 has an invalid length. [ 1044.168158][T30354] netlink: 'syz.4.6137': attribute type 2 has an invalid length. [ 1044.255216][T30355] bond0: option packets_per_slave: invalid value (1048582) [ 1044.262500][T30355] bond0: option packets_per_slave: allowed values 0 - 65535 [ 1044.285440][T30355] bond0 (unregistering): Released all slaves [ 1044.465940][T30357] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.473844][T30357] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.633005][T30357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1044.669288][T30357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1044.876379][T25645] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.891362][T25645] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.900767][T25645] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.909547][T25645] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.996573][T30330] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.368164][T30330] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.463537][T30368] netlink: 'syz.4.6140': attribute type 10 has an invalid length. [ 1045.481257][T30368] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1045.492324][T30368] team0: Device netdevsim1 is of different type [ 1045.582464][T30368] netlink: 26 bytes leftover after parsing attributes in process `syz.4.6140'. [ 1045.628697][T30376] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6143'. [ 1045.843127][T25623] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.862660][T25623] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.871238][T30380] tipc: Enabled bearer , priority 0 [ 1045.931907][T30380] syzkaller0: entered promiscuous mode [ 1045.938006][T30380] syzkaller0: entered allmulticast mode [ 1045.944398][T30380] tipc: Resetting bearer [ 1045.948457][T30383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6145'. [ 1045.967422][T25618] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.979291][T30383] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6145'. [ 1045.988664][T25618] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.066428][T25618] tipc: Resetting bearer [ 1046.074460][T30379] tipc: Resetting bearer [ 1046.617854][T30397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6148'. [ 1050.858087][ T6534] page_pool_release_retry() stalled pool shutdown: id 222, 1 inflight 423 sec [ 1051.204862][T30379] tipc: Disabling bearer [ 1051.252163][T30401] ipvlan2: entered allmulticast mode [ 1051.281821][T30401] veth0_to_team: entered allmulticast mode [ 1053.299209][T30466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6162'. [ 1053.311544][T30466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6162'. [ 1053.533378][T30470] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6163'. [ 1053.588235][T30470] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6163'. [ 1053.958467][T30476] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1053.993810][T30476] bond5 (unregistering): Released all slaves [ 1054.160064][T30484] syzkaller1: entered promiscuous mode [ 1054.180269][T30484] syzkaller1: entered allmulticast mode [ 1054.648889][ T1316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.797318][T30515] hsr0: entered promiscuous mode [ 1054.930161][T30519] netlink: 'syz.3.6175': attribute type 4 has an invalid length. [ 1054.989778][T30521] netlink: 'syz.3.6175': attribute type 4 has an invalid length. [ 1055.073634][T30529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6178'. [ 1055.116592][T30529] erspan0: entered promiscuous mode [ 1055.132525][T30529] macvtap1: entered promiscuous mode [ 1055.138975][T30529] macvtap1: entered allmulticast mode [ 1055.144441][T30529] erspan0: entered allmulticast mode [ 1055.156628][T30529] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1055.164024][T30529] IPv6: NLM_F_CREATE should be set when creating new route [ 1055.171434][T30529] IPv6: NLM_F_CREATE should be set when creating new route [ 1055.180398][T30530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6178'. [ 1055.186858][T30529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6178'. [ 1055.309501][T30546] sctp: [Deprecated]: syz.3.6182 (pid 30546) Use of int in max_burst socket option. [ 1055.309501][T30546] Use struct sctp_assoc_value instead [ 1055.690522][T30552] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1056.278998][T30569] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1056.298188][T30569] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1056.816918][T30574] can: request_module (can-proto-4) failed. [ 1057.091916][T30587] syzkaller1: entered promiscuous mode [ 1057.097454][T30587] syzkaller1: entered allmulticast mode [ 1057.418835][T30574] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6189'. [ 1057.499120][T30574] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6189'. [ 1059.173483][T30676] netlink: 'syz.2.6219': attribute type 14 has an invalid length. [ 1059.646340][T30690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6224'. [ 1059.857676][ T5645] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1059.881254][ T5645] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1059.892854][ T5645] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1059.901617][ T5645] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1059.909862][ T5645] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1059.987399][T30690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1060.026640][T30691] ipvlan3: entered allmulticast mode [ 1060.044682][T30691] bond0: entered allmulticast mode [ 1060.358990][T30707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6226'. [ 1060.512583][T18855] bridge0: port 3(macvlan2) entered disabled state [ 1060.543590][T18855] macvlan2 (unregistering): left allmulticast mode [ 1060.550263][T18855] macvlan2 (unregistering): left promiscuous mode [ 1060.556811][T18855] bridge0: port 3(macvlan2) entered disabled state [ 1060.653392][T30712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6227'. [ 1060.864048][T30720] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6229'. [ 1061.081491][T30723] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6230'. [ 1061.111150][T30736] syzkaller0: entered promiscuous mode [ 1061.116692][T30736] syzkaller0: entered allmulticast mode [ 1061.502668][T30695] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.512142][T30695] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.527380][T30695] bridge_slave_0: entered allmulticast mode [ 1061.535681][T30695] bridge_slave_0: entered promiscuous mode [ 1061.550845][T30695] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.563764][T30695] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.571661][T30695] bridge_slave_1: entered allmulticast mode [ 1061.579932][T30695] bridge_slave_1: entered promiscuous mode [ 1061.640553][T30695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1061.655441][T30695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1061.749280][T30753] netlink: 'syz.4.6236': attribute type 1 has an invalid length. [ 1061.804561][T30695] team0: Port device team_slave_0 added [ 1061.814963][T30695] team0: Port device team_slave_1 added [ 1061.867537][T30764] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6235'. [ 1061.898743][T30695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1061.919451][T30695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.973207][T30695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1062.060932][T30695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1062.076221][ T5645] Bluetooth: hci3: command tx timeout [ 1062.109301][T30695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1062.141152][T30695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1062.222387][T30695] hsr_slave_0: entered promiscuous mode [ 1062.230405][T30695] hsr_slave_1: entered promiscuous mode [ 1062.256520][T30695] debugfs: 'hsr0' already exists in 'hsr' [ 1062.262715][T30695] Cannot create hsr debugfs directory [ 1062.574579][T30781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6238'. [ 1062.724928][T25618] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1062.747816][T25618] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1062.784657][T25618] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1063.128749][T30695] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1063.160878][T30695] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.859726][T30695] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1063.869569][T30695] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.158241][T30695] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1064.168073][T30695] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.175436][ T5645] Bluetooth: hci3: command tx timeout [ 1064.272035][T30838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6254'. [ 1064.348490][T30695] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1064.358377][T30695] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.475711][T30847] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6256'. [ 1064.901922][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1065.085386][T30860] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6261'. [ 1065.601967][T30695] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1065.761457][T30695] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1065.770778][T30695] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1065.846666][T30695] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1065.979160][T30695] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1065.991483][T30695] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1066.020234][T30695] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1066.043179][T30695] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1066.056916][T30882] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6266'. [ 1066.224229][ T5645] Bluetooth: hci3: command tx timeout [ 1066.481806][T30900] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6269'. [ 1067.289003][T30905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6270'. [ 1068.345171][ T5645] Bluetooth: hci3: command tx timeout [ 1068.864111][T30905] workqueue: Failed to create a rescuer kthread for wq "bond25": -EINTR [ 1069.083452][T30695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1069.155863][T30695] 8021q: adding VLAN 0 to HW filter on device team0 [ 1069.219273][T30910] dvmrp0: entered allmulticast mode [ 1069.230563][T25632] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.237763][T25632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1069.270417][T25632] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.277663][T25632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1069.359434][T30921] bridge_slave_0: left allmulticast mode [ 1069.405496][T30921] bridge_slave_0: left promiscuous mode [ 1069.456071][T30921] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.492695][T30921] bridge_slave_1: left allmulticast mode [ 1069.498715][T30921] bridge_slave_1: left promiscuous mode [ 1069.505948][T30921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.531737][T30929] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6275'. [ 1069.550432][T30931] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6275'. [ 1069.571454][T30921] : (slave bond_slave_0): Releasing backup interface [ 1069.582543][T30921] : (slave bond_slave_1): Releasing backup interface [ 1069.595918][T30921] team0: Port device team_slave_0 removed [ 1069.611130][T30921] team0: Port device team_slave_1 removed [ 1069.617510][T30921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1069.626160][T30921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1069.643290][T30921] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1069.685642][T30924] bond25: entered promiscuous mode [ 1069.704667][T30924] 8021q: adding VLAN 0 to HW filter on device bond25 [ 1069.734429][T30932] ip6gre1: entered allmulticast mode [ 1069.766019][T30932] team0: Port device ip6gre1 added [ 1070.113596][T25640] dvmrp0: left allmulticast mode [ 1070.693233][T30957] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6281'. [ 1070.809499][T30957] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1070.840634][T30965] ipvlan3: entered allmulticast mode [ 1070.846014][T30965] bond5: entered allmulticast mode [ 1070.861085][T30958] tipc: Started in network mode [ 1070.866023][T30958] tipc: Node identity f2cccdc12c26, cluster identity 4711 [ 1070.932247][T30958] tipc: Enabled bearer , priority 0 [ 1070.939823][T30969] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6284'. [ 1071.002236][T30957] bond5: (slave ipip0): refused to change device type [ 1071.086848][T30975] xt_policy: output policy not valid in PREROUTING and INPUT [ 1071.153755][T30966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6282'. [ 1071.162715][T30966] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6282'. [ 1071.298945][T30958] syzkaller0: entered promiscuous mode [ 1071.304496][T30958] syzkaller0: entered allmulticast mode [ 1071.318434][T30958] tipc: Resetting bearer [ 1071.474226][T25645] tipc: Resetting bearer [ 1071.487135][T30987] netlink: 88 bytes leftover after parsing attributes in process `syz.6.6289'. [ 1071.503148][T30956] tipc: Resetting bearer [ 1071.873063][T30985] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6286'. [ 1072.076658][T18363] Bluetooth: hci5: command 0x0406 tx timeout [ 1077.002963][T30956] tipc: Disabling bearer [ 1077.026651][ T29] tipc: Node number set to 3739930049 [ 1077.083774][T30695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1077.399763][T31032] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6300'. [ 1077.511391][T30695] veth0_vlan: entered promiscuous mode [ 1077.547141][T30695] veth1_vlan: entered promiscuous mode [ 1077.682475][T30695] veth0_macvtap: entered promiscuous mode [ 1077.764169][T30695] veth1_macvtap: entered promiscuous mode [ 1077.828464][T30695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1077.917120][T30695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1078.008665][T25650] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.048764][T25650] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.058741][T25650] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.067931][T25650] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.465654][T25618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1078.501012][T25618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1078.602194][T25645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1078.609840][T25650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1078.617879][T25645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1078.617949][T25650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1078.636082][T31071] tipc: Started in network mode [ 1078.642000][T31071] tipc: Node identity 060c10d23a47, cluster identity 4711 [ 1078.663534][T31071] tipc: Enabled bearer , priority 0 [ 1078.730546][T31078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6311'. [ 1078.739506][T31078] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6311'. [ 1078.833264][T31071] syzkaller0: entered promiscuous mode [ 1078.838821][T31071] syzkaller0: entered allmulticast mode [ 1078.845208][T31071] tipc: Resetting bearer [ 1078.895212][T31080] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6313'. [ 1078.969046][T31070] tipc: Resetting bearer [ 1079.061848][T31088] netlink: 'syz.6.6315': attribute type 61 has an invalid length. [ 1079.148651][T31090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6316'. [ 1079.280707][T31092] xt_hashlimit: size too large, truncated to 1048576 [ 1079.350552][T31093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6316'. [ 1081.067129][T25641] wlan1: Trigger new scan to find an IBSS to join [ 1084.399655][T31070] tipc: Disabling bearer [ 1084.424683][T31090] workqueue: Failed to create a rescuer kthread for wq "bond26": -EINTR [ 1084.485131][ T5750] tipc: Node number set to 1011552466 [ 1084.708219][T31114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6322'. [ 1084.799804][T31119] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1084.852579][T31119] IPv6: Can't replace route, no match found [ 1084.918897][T31119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6323'. [ 1084.933424][T31114] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1084.953553][T31126] ipvlan4: entered allmulticast mode [ 1084.976606][T31126] bond1: entered allmulticast mode [ 1085.055272][T31130] bond1: (slave ipip0): refused to change device type [ 1085.100708][T31119] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6323'. [ 1085.120488][T31119] netlink: 'syz.0.6323': attribute type 21 has an invalid length. [ 1085.184655][T25621] wlan1: Trigger new scan to find an IBSS to join [ 1085.327873][T31144] 5nè: entered promiscuous mode [ 1085.556921][T31147] tipc: Enabled bearer , priority 0 [ 1085.570928][T31151] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6334'. [ 1085.628912][T31152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6334'. [ 1085.654883][T31154] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6332'. [ 1085.671741][T31147] syzkaller0: entered promiscuous mode [ 1085.677633][T31154] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6332'. [ 1085.697321][T31147] syzkaller0: entered allmulticast mode [ 1085.704147][T31147] tipc: Resetting bearer [ 1085.716688][T31155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6334'. [ 1085.741820][T31149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1085.791158][T31145] tipc: Resetting bearer [ 1085.835993][T31153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1086.875946][T25640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.466513][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1090.903891][T31145] tipc: Disabling bearer [ 1092.214393][T31193] syzkaller0: entered promiscuous mode [ 1092.231976][T31193] syzkaller0: entered allmulticast mode [ 1092.880386][T31215] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6348'. [ 1093.382814][T31222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6349'. [ 1093.392100][T31222] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6349'. [ 1093.694396][ T5742] IPVS: starting estimator thread 0... [ 1093.703721][T31228] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6351'. [ 1093.996645][T31229] IPVS: using max 28 ests per chain, 67200 per kthread [ 1094.093331][T31237] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6353'. [ 1097.874945][T31199] syzkaller1: entered promiscuous mode [ 1097.880490][T31199] syzkaller1: entered allmulticast mode [ 1098.013485][T31219] tipc: Enabled bearer , priority 0 [ 1098.097111][T31244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6355'. [ 1098.106082][T31244] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 1098.118999][T31220] syzkaller0: entered promiscuous mode [ 1098.127464][T31220] syzkaller0: entered allmulticast mode [ 1098.133898][T31220] tipc: Resetting bearer [ 1098.163425][T31217] tipc: Resetting bearer [ 1099.479717][T31284] netlink: 'syz.6.6365': attribute type 1 has an invalid length. [ 1099.487823][T31284] netlink: 228 bytes leftover after parsing attributes in process `syz.6.6365'. [ 1099.500342][T31284] Cannot find del_set index 1 as target [ 1100.761173][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1102.840951][T18363] Bluetooth: hci6: command 0x0406 tx timeout [ 1103.779757][T31217] tipc: Disabling bearer [ 1104.043169][T31296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6369'. [ 1104.069774][T31299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6369'. [ 1104.145719][T31302] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input12 [ 1104.159196][T31301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6370'. [ 1104.370977][T31318] netlink: 'syz.0.6373': attribute type 2 has an invalid length. [ 1104.378785][T31318] netlink: 'syz.0.6373': attribute type 1 has an invalid length. [ 1104.405922][T31318] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6373'. [ 1104.540536][T31312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6373'. [ 1104.578247][T31312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6373'. [ 1105.209347][T25621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1105.217264][T25621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1105.498666][T31344] tipc: Enabled bearer , priority 0 [ 1105.592005][T31346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6380'. [ 1105.627980][T31346] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6380'. [ 1105.652076][T31344] syzkaller0: entered promiscuous mode [ 1105.657622][T31344] syzkaller0: entered allmulticast mode [ 1105.663927][T31344] tipc: Resetting bearer [ 1105.706945][T31343] tipc: Resetting bearer [ 1105.822434][T31352] netlink: 34 bytes leftover after parsing attributes in process `syz.3.6383'. [ 1105.888855][T31356] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 1105.960894][T31354] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6382'. [ 1106.179332][T31366] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1110.736782][T31343] tipc: Disabling bearer [ 1110.985785][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1111.467322][ T29] page_pool_release_retry() stalled pool shutdown: id 222, 1 inflight 483 sec [ 1111.882791][T31410] netlink: 'syz.2.6392': attribute type 3 has an invalid length. [ 1112.028050][T31419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6394'. [ 1112.255309][T31427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6392'. [ 1112.312520][T31402] veth1_vlan: left allmulticast mode [ 1112.642535][T31417] syzkaller1: entered promiscuous mode [ 1112.669252][T31417] syzkaller1: entered allmulticast mode [ 1112.758997][T31433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6396'. [ 1112.770286][T31436] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6397'. [ 1112.801598][T25621] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1112.810638][T25621] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.819611][T25621] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1112.828844][T25621] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.970557][T31433] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1112.978355][T25621] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1112.987367][T25621] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.021016][T31439] ipvlan1: entered allmulticast mode [ 1113.026484][T31439] bond26: entered allmulticast mode [ 1113.041894][T31442] bond26: (slave ipip2): refused to change device type [ 1113.072123][T31448] tipc: Enabled bearer , priority 0 [ 1113.170777][T31441] syzkaller0: entered promiscuous mode [ 1113.176397][T31441] syzkaller0: entered allmulticast mode [ 1113.182713][T31441] tipc: Resetting bearer [ 1113.204641][T31441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6398'. [ 1113.213653][T31441] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6398'. [ 1113.246063][T31440] tipc: Resetting bearer [ 1113.362530][T31458] netlink: 6024 bytes leftover after parsing attributes in process `syz.6.6402'. [ 1113.413382][T31460] netlink: 'syz.0.6403': attribute type 10 has an invalid length. [ 1113.511179][T31461] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6402'. [ 1116.075262][ T1316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.186678][T31440] tipc: Disabling bearer [ 1118.223469][T31461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1118.232208][T31461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1118.240480][T31461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1118.248658][T31461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1118.368362][T31477] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1118.393393][T31477] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6405'. [ 1118.411288][T31477] pimreg: entered allmulticast mode [ 1118.881025][T31476] pimreg: left allmulticast mode [ 1119.475593][T31502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6411'. [ 1119.500087][T31502] ip6tnl1: entered allmulticast mode [ 1119.518202][T25650] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1119.525504][T31504] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6412'. [ 1119.529045][T25650] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1119.555735][ T29] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1119.630870][T31507] netlink: 'syz.0.6414': attribute type 13 has an invalid length. [ 1119.847099][ T6534] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1119.869868][T31519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6417'. [ 1120.339137][T31544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6423'. [ 1120.419301][ T6534] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1120.753760][T31553] syzkaller0: entered promiscuous mode [ 1120.862540][T31553] syzkaller0: entered allmulticast mode [ 1121.530394][T18363] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1121.551558][T18363] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1121.568767][T18363] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1121.581972][T18363] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1121.590447][T18363] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1121.749307][T31578] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 1122.422973][T31595] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6432'. [ 1122.438756][T31595] netlink: 'syz.6.6432': attribute type 61 has an invalid length. [ 1123.943296][ T5645] Bluetooth: hci2: command tx timeout [ 1124.005498][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1125.995641][ T5645] Bluetooth: hci2: command tx timeout [ 1127.285290][T19436] bridge0: port 3(syz_tun) entered disabled state [ 1127.315975][T19436] syz_tun (unregistering): left allmulticast mode [ 1127.322461][T19436] syz_tun (unregistering): left promiscuous mode [ 1127.330991][T19436] bridge0: port 3(syz_tun) entered disabled state [ 1127.437958][T25640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1127.460298][T25640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1128.113185][ T5645] Bluetooth: hci2: command tx timeout [ 1128.897922][T31656] netlink: 'syz.4.6441': attribute type 1 has an invalid length. [ 1129.053025][T31656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1129.343373][T31572] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.354189][T31572] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.361596][T31572] bridge_slave_0: entered allmulticast mode [ 1129.369734][T31572] bridge_slave_0: entered promiscuous mode [ 1129.378617][T31572] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.379226][T31675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1129.385873][T31572] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.386236][T31572] bridge_slave_1: entered allmulticast mode [ 1129.391221][T31572] bridge_slave_1: entered promiscuous mode [ 1129.542655][T31572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1129.620009][T31671] syzkaller0: entered promiscuous mode [ 1129.625903][T31671] syzkaller0: entered allmulticast mode [ 1129.638997][T31572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1130.136043][T31694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1130.206970][ T5645] Bluetooth: hci2: command tx timeout [ 1133.346793][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1135.254058][T31572] team0: Port device team_slave_0 added [ 1135.352463][T31572] team0: Port device team_slave_1 added [ 1135.622452][T31572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1135.647873][T31572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1135.699419][T31572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1135.712571][T31572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1135.719557][T31572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1135.747890][T31719] netlink: 'syz.6.6453': attribute type 1 has an invalid length. [ 1135.792354][T31572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1135.909766][T31719] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1135.928433][T31724] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1135.983292][T31727] bond6: (slave batadv0): Opening slave failed [ 1136.094793][T31572] hsr_slave_0: entered promiscuous mode [ 1136.101557][T31572] hsr_slave_1: entered promiscuous mode [ 1136.108001][T31572] debugfs: 'hsr0' already exists in 'hsr' [ 1136.113758][T31572] Cannot create hsr debugfs directory [ 1136.759034][T31739] 8021q: adding VLAN 0 to HW filter on device ipvlan5 [ 1136.971908][T31748] syzkaller0: entered promiscuous mode [ 1136.980759][T31748] syzkaller0: entered allmulticast mode [ 1137.327939][T31752] siw: device registration error -23 [ 1137.851578][T31758] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6462'. [ 1138.640674][T28584] Bluetooth: hci0: command 0x0406 tx timeout [ 1142.472929][T31781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6465'. [ 1142.500543][T31781] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 1143.252678][T31572] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1143.262323][T31572] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1143.270340][T31572] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1143.279643][T31572] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1143.287677][T31572] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1143.297245][T31572] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1143.305261][T31572] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1143.358161][T31572] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1143.448831][T31572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1143.492615][T31572] 8021q: adding VLAN 0 to HW filter on device team0 [ 1143.512761][T25625] bridge0: port 1(bridge_slave_0) entered blocking state [ 1143.519978][T25625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1143.535827][T25625] bridge0: port 2(bridge_slave_1) entered blocking state [ 1143.543033][T25625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1144.123261][T31825] syzkaller0: entered promiscuous mode [ 1144.171594][T31825] syzkaller0: entered allmulticast mode [ 1144.394829][T31836] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6478'. [ 1144.399279][T31838] FAULT_INJECTION: forcing a failure. [ 1144.399279][T31838] name failslab, interval 1, probability 0, space 0, times 0 [ 1144.416579][T31838] CPU: 1 UID: 0 PID: 31838 Comm: syz.2.6479 Not tainted syzkaller #0 PREEMPT(full) [ 1144.416606][T31838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1144.416619][T31838] Call Trace: [ 1144.416628][T31838] [ 1144.416636][T31838] dump_stack_lvl+0xe8/0x150 [ 1144.416665][T31838] should_fail_ex+0x412/0x560 [ 1144.416693][T31838] should_failslab+0xa8/0x100 [ 1144.416713][T31838] ? skb_clone+0x212/0x3a0 [ 1144.416737][T31838] kmem_cache_alloc_noprof+0x87/0x650 [ 1144.416765][T31838] ? __bpf_redirect+0xcec/0x12a0 [ 1144.416801][T31838] skb_clone+0x212/0x3a0 [ 1144.416828][T31838] bpf_clone_redirect+0x16a/0x4b0 [ 1144.416858][T31838] ? bpf_test_run+0x1d1/0x830 [ 1144.416886][T31838] ? bpf_test_run+0x1d1/0x830 [ 1144.416909][T31838] bpf_prog_43388ee67a65acbd+0x22/0x2a [ 1144.416952][T31838] bpf_test_run+0x354/0x830 [ 1144.416998][T31838] ? __pfx_bpf_test_run+0x10/0x10 [ 1144.417047][T31838] ? skb_checksum+0x7b9/0x8c0 [ 1144.417078][T31838] ? skb_dst_set+0x72/0x140 [ 1144.417103][T31838] bpf_prog_test_run_skb+0xe2c/0x2260 [ 1144.417149][T31838] ? __fget_files+0x3a0/0x420 [ 1144.417173][T31838] ? __fget_files+0x2a/0x420 [ 1144.417203][T31838] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1144.417227][T31838] bpf_prog_test_run+0x2c7/0x340 [ 1144.417251][T31838] __sys_bpf+0x643/0x950 [ 1144.417282][T31838] ? __pfx___sys_bpf+0x10/0x10 [ 1144.417329][T31838] ? ksys_write+0x242/0x270 [ 1144.417360][T31838] ? __pfx_ksys_write+0x10/0x10 [ 1144.417394][T31838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.417416][T31838] __x64_sys_bpf+0x7c/0x90 [ 1144.417444][T31838] do_syscall_64+0x174/0x580 [ 1144.417464][T31838] ? trace_irq_disable+0x3b/0x140 [ 1144.417493][T31838] ? clear_bhb_loop+0x40/0x90 [ 1144.417518][T31838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.417537][T31838] RIP: 0033:0x7f402819ce59 [ 1144.417556][T31838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1144.417573][T31838] RSP: 002b:00007f4028f78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1144.417595][T31838] RAX: ffffffffffffffda RBX: 00007f4028415fa0 RCX: 00007f402819ce59 [ 1144.417609][T31838] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1144.417622][T31838] RBP: 00007f4028f78090 R08: 0000000000000000 R09: 0000000000000000 [ 1144.417634][T31838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1144.417646][T31838] R13: 00007f4028416038 R14: 00007f4028415fa0 R15: 00007ffecf1637f8 [ 1144.417680][T31838] [ 1145.085760][T31849] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6482'. [ 1145.895032][T31852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6483'. [ 1150.383982][T31875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6486'. [ 1150.594546][T31572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1150.684539][T31572] veth0_vlan: entered promiscuous mode [ 1150.747512][T31572] veth1_vlan: entered promiscuous mode [ 1150.805901][T31572] veth0_macvtap: entered promiscuous mode [ 1150.847458][T31572] veth1_macvtap: entered promiscuous mode [ 1150.877898][T31572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1150.917874][T31572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1151.025144][T25632] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.063230][T25632] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.113462][T25632] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.141701][T25632] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.219067][T31890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6492'. [ 1151.275601][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1151.365291][T31890] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 1151.392148][T31890] netlink: 'syz.2.6492': attribute type 1 has an invalid length. [ 1151.438591][T31887] syzkaller0: entered promiscuous mode [ 1151.444235][T31887] syzkaller0: entered allmulticast mode [ 1151.554650][T25641] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.587672][T25641] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.689425][T31903] netlink: 'syz.6.6497': attribute type 62 has an invalid length. [ 1151.698790][T25632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.701219][T31903] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6497'. [ 1151.706662][T25632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.773938][T31901] syzkaller0: entered promiscuous mode [ 1151.779551][T31901] syzkaller0: entered allmulticast mode [ 1153.031902][T31924] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6502'. [ 1153.413659][T31933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6503'. [ 1153.422600][T31933] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1157.643616][T31921] netlink: 260 bytes leftover after parsing attributes in process `syz.6.6502'. [ 1157.863519][T31942] tipc: Enabling of bearer rejected, failed to enable media [ 1157.885859][T31940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6427'. [ 1157.964578][T31944] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6427'. [ 1158.101400][T31940] team0: Port device team_slave_0 removed [ 1159.252803][T31979] netlink: 120 bytes leftover after parsing attributes in process `syz.6.6514'. [ 1159.589466][T31992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1159.612930][T31989] syzkaller0: entered promiscuous mode [ 1159.645040][T31989] syzkaller0: entered allmulticast mode [ 1159.653017][T31992] v: renamed from sit0 (while UP) [ 1159.669036][T31981] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1159.676489][T31981] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1159.942170][T32003] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6520'. [ 1159.978336][T32003] netlink: 'syz.3.6520': attribute type 7 has an invalid length. [ 1159.986140][T32003] netlink: 'syz.3.6520': attribute type 8 has an invalid length. [ 1160.012761][T32003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6520'. [ 1166.003727][T32027] ip6erspan1: entered allmulticast mode [ 1166.594774][T32051] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6535'. [ 1166.718056][T32057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6537'. [ 1166.762283][T32057] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1167.336486][T32087] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6543'. [ 1167.358028][T32087] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6543'. [ 1167.459047][T32093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6544'. [ 1167.537718][T32093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6544'. [ 1168.442952][T25625] vlan2: left allmulticast mode [ 1168.448022][T25625] geneve0: left allmulticast mode [ 1168.453090][T25625] vlan2: left promiscuous mode [ 1168.457879][T25625] geneve0: left promiscuous mode [ 1168.463297][T25625] bridge0: port 2(vlan2) entered disabled state [ 1168.478634][T25625] bond16: left promiscuous mode [ 1168.535249][T25625] bond16: left allmulticast mode [ 1168.540389][T25625] bridge0: port 1(bond16) entered disabled state [ 1169.130181][T32132] netlink: 'syz.2.6554': attribute type 1 has an invalid length. [ 1169.398365][T25625] erspan0 (unregistering): left allmulticast mode [ 1169.572940][T25625] bond1 (unregistering): (slave gre1): Releasing backup interface [ 1169.580862][T25625] gre1 (unregistering): left promiscuous mode [ 1169.604152][T25625] bond17 (unregistering): (slave gre2): Releasing backup interface [ 1169.612087][T25625] gre2 (unregistering): left promiscuous mode [ 1169.636879][T25625] bond21 (unregistering): (slave gre3): Releasing backup interface [ 1169.649321][T25625] gre3 (unregistering): left promiscuous mode [ 1169.679606][T25625] bond22 (unregistering): (slave gre4): Releasing backup interface [ 1169.687980][T25625] gre4 (unregistering): left promiscuous mode [ 1169.703489][T25625] bond23 (unregistering): (slave gre5): Releasing backup interface [ 1169.713381][T25625] gre5 (unregistering): left promiscuous mode [ 1169.771543][T25625] bond3 (unregistering): (slave geneve2): Releasing active interface [ 1169.973061][T25625] bond0 (unregistering): Released all slaves [ 1169.990860][T25625] bond1 (unregistering): Released all slaves [ 1170.014205][T25625] bond2 (unregistering): Released all slaves [ 1170.029097][T25625] bond3 (unregistering): Released all slaves [ 1170.044256][T25625] bond4 (unregistering): Released all slaves [ 1170.060020][T25625] bond5 (unregistering): Released all slaves [ 1170.077372][T25625] bond6 (unregistering): Released all slaves [ 1170.107756][T25625] bond7 (unregistering): Released all slaves [ 1170.124643][T25625] bond8 (unregistering): Released all slaves [ 1170.141444][T25625] bond9 (unregistering): Released all slaves [ 1170.158678][T25625] bond10 (unregistering): Released all slaves [ 1170.176589][T25625] bond11 (unregistering): Released all slaves [ 1170.204359][T25625] bond12 (unregistering): Released all slaves [ 1170.226579][T25625] bond13 (unregistering): Released all slaves [ 1170.240968][T25625] bond14 (unregistering): Released all slaves [ 1170.256572][T25625] bond15 (unregistering): Released all slaves [ 1170.275880][T25625] bond16 (unregistering): Released all slaves [ 1170.293250][T25625] bond17 (unregistering): Released all slaves [ 1170.329364][T25625] bond18 (unregistering): Released all slaves [ 1170.346228][T25625] bond19 (unregistering): Released all slaves [ 1170.363439][T25625] bond20 (unregistering): Released all slaves [ 1170.381338][T25625] bond21 (unregistering): Released all slaves [ 1170.398873][T25625] bond22 (unregistering): Released all slaves [ 1170.431871][T25625] bond23 (unregistering): Released all slaves [ 1170.449410][T25625] bond24 (unregistering): Released all slaves [ 1170.467367][T25625] bond25 (unregistering): (slave veth13): Releasing backup interface [ 1170.486870][T25625] bond25 (unregistering): Released all slaves [ 1170.531189][T32132] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1170.534351][T32133] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1170.781046][T32147] xt_hashlimit: overflow, try lower: 9/9223372036854775808 [ 1171.039948][T32149] netlink: 51 bytes leftover after parsing attributes in process `syz.2.6557'. [ 1171.196629][T32149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6557'. [ 1171.307313][T32149] hsr_slave_1 (unregistering): left promiscuous mode [ 1171.393685][T25625] tipc: Disabling bearer [ 1171.428070][T25625] tipc: Left network mode [ 1171.501790][ T6534] page_pool_release_retry() stalled pool shutdown: id 222, 1 inflight 543 sec [ 1171.630593][T32175] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6563'. [ 1172.600843][T32195] 8021q: VLANs not supported on wg2 [ 1172.619400][T32190] netlink: 45 bytes leftover after parsing attributes in process `syz.0.6567'. [ 1172.734353][T32199] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1172.854621][T32202] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6569'. [ 1172.863652][T32202] netlink: 'syz.0.6569': attribute type 7 has an invalid length. [ 1172.871682][T32202] netlink: 'syz.0.6569': attribute type 8 has an invalid length. [ 1172.879449][T32202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6569'. [ 1172.896737][T32202] erspan0: entered promiscuous mode [ 1172.903627][T32202] gretap0: entered promiscuous mode [ 1172.910532][T32202] erspan0: left promiscuous mode [ 1172.934456][T32202] gretap0: left promiscuous mode [ 1173.258282][T32209] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20002 [ 1173.266036][T32214] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20002 [ 1173.528375][T32226] syzkaller0: entered promiscuous mode [ 1173.533925][T32226] syzkaller0: entered allmulticast mode [ 1173.925063][T32234] lo: entered allmulticast mode [ 1174.004983][T32237] lo: left allmulticast mode [ 1174.589097][T25625] hsr_slave_0: left promiscuous mode [ 1174.595152][T25625] hsr_slave_1: left promiscuous mode [ 1174.604492][T25625] veth1_macvtap: left promiscuous mode [ 1174.610002][T25625] veth0_macvtap: left promiscuous mode [ 1174.640643][T25625] veth1_vlan: left promiscuous mode [ 1174.934294][T32270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6588'. [ 1175.201295][ T6536] IPVS: starting estimator thread 0... [ 1175.367808][T32280] IPVS: using max 24 ests per chain, 57600 per kthread [ 1175.408433][T32286] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6591'. [ 1175.487783][T32287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6591'. [ 1175.556731][T32288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6591'. [ 1175.827393][T32272] bridge1: port 1(veth3) entered blocking state [ 1175.834262][T32272] bridge1: port 1(veth3) entered disabled state [ 1175.845480][T32272] veth3: entered allmulticast mode [ 1175.853725][T32272] veth3: entered promiscuous mode [ 1175.864845][T32274] bridge1: port 2(veth0_to_bond) entered blocking state [ 1175.880916][T32274] bridge1: port 2(veth0_to_bond) entered disabled state [ 1175.891875][T32274] veth0_to_bond: entered allmulticast mode [ 1175.907238][T32274] veth0_to_bond: entered promiscuous mode [ 1176.064287][T32291] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6592'. [ 1176.084582][T32291] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6592'. [ 1176.118151][T32295] digital: digital_start_poll: Unknown protocol [ 1177.458884][T32330] __nla_validate_parse: 1 callbacks suppressed [ 1177.458908][T32330] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6601'. [ 1177.482388][T32330] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6601'. [ 1177.493004][T32331] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6601'. [ 1177.502539][T32330] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6601'. [ 1177.512034][T32330] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6601'. [ 1177.521359][T32330] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6601'. [ 1177.530679][T32330] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6601'. [ 1177.539803][ T1316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.549797][T32330] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6601'. [ 1177.559165][T32330] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6601'. [ 1177.591842][T32330] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6601'. [ 1177.927795][T25625] IPVS: stop unused estimator thread 0... [ 1179.199218][T32298] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1179.556307][T32352] gtp0: entered promiscuous mode [ 1179.561342][T32352] gtp0: entered allmulticast mode [ 1180.291805][T32385] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1181.482621][T32418] bond0: entered promiscuous mode [ 1181.592284][T32418] bond_slave_0: entered promiscuous mode [ 1181.676689][T32418] bond_slave_1: entered promiscuous mode [ 1181.703602][T32439] openvswitch: netlink: Flow actions attr not present in new flow. [ 1181.714110][T32439] netlink: 'syz.2.6618': attribute type 1 has an invalid length. [ 1181.764428][T32431] netlink: 'syz.4.6617': attribute type 1 has an invalid length. [ 1181.975153][T32439] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1182.117908][T32442] bond3: (slave veth3): Enslaving as an active interface with a down link [ 1182.498253][T32472] netlink: 'syz.6.6625': attribute type 13 has an invalid length. [ 1182.537954][T32472] __nla_validate_parse: 59 callbacks suppressed [ 1182.537978][T32472] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6625'. [ 1182.672664][T32476] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6625'. [ 1182.719684][T32488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6629'. [ 1182.729134][T32488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6629'. [ 1182.812804][T32478] gtp0: entered promiscuous mode [ 1182.819143][T32478] gtp0: entered allmulticast mode [ 1183.046090][T32498] Bluetooth: MGMT ver 1.23 [ 1183.610736][T32509] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6634'. [ 1183.663572][T32509] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6634'. [ 1184.009996][T32518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6636'. [ 1184.442520][T32540] netlink: 'syz.2.6641': attribute type 1 has an invalid length. [ 1184.473419][T32540] netlink: 92 bytes leftover after parsing attributes in process `syz.2.6641'. [ 1185.439756][T32580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6652'. [ 1185.452506][T32581] tipc: Enabled bearer , priority 0 [ 1185.538713][T32587] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6651'. [ 1185.543949][T32581] syzkaller0: entered promiscuous mode [ 1185.553293][T32581] syzkaller0: entered allmulticast mode [ 1185.561422][T32581] tipc: Resetting bearer [ 1185.597118][T32578] tipc: Resetting bearer [ 1185.850587][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1187.290762][T32570] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1190.876646][T32578] tipc: Disabling bearer [ 1191.001728][T32625] FAULT_INJECTION: forcing a failure. [ 1191.001728][T32625] name failslab, interval 1, probability 0, space 0, times 0 [ 1191.014625][T32625] CPU: 0 UID: 0 PID: 32625 Comm: syz.2.6659 Not tainted syzkaller #0 PREEMPT(full) [ 1191.014645][T32625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1191.014652][T32625] Call Trace: [ 1191.014658][T32625] [ 1191.014664][T32625] dump_stack_lvl+0xe8/0x150 [ 1191.014684][T32625] should_fail_ex+0x412/0x560 [ 1191.014700][T32625] should_failslab+0xa8/0x100 [ 1191.014713][T32625] ? skb_clone+0x212/0x3a0 [ 1191.014727][T32625] kmem_cache_alloc_noprof+0x87/0x650 [ 1191.014744][T32625] ? __bpf_redirect+0xcec/0x12a0 [ 1191.014764][T32625] skb_clone+0x212/0x3a0 [ 1191.014780][T32625] bpf_clone_redirect+0x16a/0x4b0 [ 1191.014797][T32625] ? bpf_test_run+0x1d1/0x830 [ 1191.014814][T32625] ? bpf_test_run+0x1d1/0x830 [ 1191.014827][T32625] bpf_prog_43388ee67a65acbd+0x22/0x2a [ 1191.014849][T32625] bpf_test_run+0x354/0x830 [ 1191.014874][T32625] ? __pfx_bpf_test_run+0x10/0x10 [ 1191.014905][T32625] ? skb_checksum+0x7b9/0x8c0 [ 1191.014935][T32625] ? skb_dst_set+0x72/0x140 [ 1191.014958][T32625] bpf_prog_test_run_skb+0xe2c/0x2260 [ 1191.015001][T32625] ? __fget_files+0x3a0/0x420 [ 1191.015023][T32625] ? __fget_files+0x2a/0x420 [ 1191.015049][T32625] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1191.015071][T32625] bpf_prog_test_run+0x2c7/0x340 [ 1191.015095][T32625] __sys_bpf+0x643/0x950 [ 1191.015126][T32625] ? __pfx___sys_bpf+0x10/0x10 [ 1191.015170][T32625] ? ksys_write+0x242/0x270 [ 1191.015201][T32625] ? __pfx_ksys_write+0x10/0x10 [ 1191.015234][T32625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.015256][T32625] __x64_sys_bpf+0x7c/0x90 [ 1191.015283][T32625] do_syscall_64+0x174/0x580 [ 1191.015303][T32625] ? trace_irq_disable+0x3b/0x140 [ 1191.015330][T32625] ? clear_bhb_loop+0x40/0x90 [ 1191.015354][T32625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.015372][T32625] RIP: 0033:0x7f402819ce59 [ 1191.015390][T32625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1191.015407][T32625] RSP: 002b:00007f4028f78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1191.015427][T32625] RAX: ffffffffffffffda RBX: 00007f4028415fa0 RCX: 00007f402819ce59 [ 1191.015439][T32625] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1191.015451][T32625] RBP: 00007f4028f78090 R08: 0000000000000000 R09: 0000000000000000 [ 1191.015463][T32625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1191.015474][T32625] R13: 00007f4028416038 R14: 00007f4028415fa0 R15: 00007ffecf1637f8 [ 1191.015507][T32625] [ 1191.613751][T32640] bond1: entered promiscuous mode [ 1192.074287][T32673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6676'. [ 1192.309103][T32681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6680'. [ 1192.776024][ T6534] syz_tun: tun_net_xmit 110 [ 1192.909603][T32715] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6686'. [ 1192.975415][T32721] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6686'. [ 1193.323131][T32727] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1193.339919][T32727] bridge0: port 3(bond7) entered blocking state [ 1193.351960][T32727] bridge0: port 3(bond7) entered disabled state [ 1193.358580][T32727] bond7: entered allmulticast mode [ 1193.366860][T32727] bond7: entered promiscuous mode [ 1193.372725][T32727] bridge0: port 3(bond7) entered blocking state [ 1193.379203][T32727] bridge0: port 3(bond7) entered forwarding state [ 1193.432077][T25632] bridge0: port 3(bond7) entered disabled state [ 1193.576599][ T6534] syz_tun: tun_net_xmit 110 [ 1193.756049][T32739] netlink: 'syz.2.6692': attribute type 3 has an invalid length. [ 1193.763876][T32739] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6692'. [ 1193.902666][T32744] netlink: 'syz.6.6694': attribute type 1 has an invalid length. [ 1193.910469][T32744] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6694'. [ 1193.928440][T32744] netlink: 1 bytes leftover after parsing attributes in process `syz.6.6694'. [ 1194.005759][T32744] netlink: 658 bytes leftover after parsing attributes in process `syz.6.6694'. [ 1194.251522][T32757] tipc: Enabled bearer , priority 0 [ 1194.370539][T32757] syzkaller0: entered promiscuous mode [ 1194.415069][ T300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6697'. [ 1194.424176][T32757] syzkaller0: entered allmulticast mode [ 1194.430446][T32757] tipc: Resetting bearer [ 1194.704240][T25641] tipc: Resetting bearer [ 1194.710799][T32756] tipc: Resetting bearer [ 1194.762500][ T311] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6701'. [ 1200.076927][T32756] tipc: Disabling bearer [ 1200.158518][ T353] netlink: 'syz.3.6712': attribute type 6 has an invalid length. [ 1200.199707][ T355] __nla_validate_parse: 3 callbacks suppressed [ 1200.199731][ T355] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6713'. [ 1201.049313][ T383] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6720'. [ 1201.058359][ T383] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6720'. [ 1201.097982][ T382] netlink: 175008 bytes leftover after parsing attributes in process `syz.0.6721'. [ 1201.308835][ T388] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6722'. [ 1201.318294][ T360] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6715'. [ 1201.329277][ T360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6715'. [ 1201.529927][ T394] tipc: Enabling of bearer rejected, failed to enable media [ 1201.787092][ T401] tipc: Enabling of bearer rejected, failed to enable media [ 1201.873503][ T405] netlink: 'syz.0.6725': attribute type 5 has an invalid length. [ 1202.097803][ T30] audit: type=1804 audit(1780075074.206:26): pid=411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6727" name="/newroot/134/memory.events" dev="tmpfs" ino=698 res=1 errno=0 [ 1202.977778][ T431] pimreg: entered allmulticast mode [ 1203.141588][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1204.291641][T25621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1204.315974][T25621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1204.435567][ T477] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6745'. [ 1204.768536][ T482] tipc: Started in network mode [ 1204.792691][ T482] tipc: Node identity cee95d44832c, cluster identity 4711 [ 1204.813091][ T482] tipc: Enabled bearer , priority 0 [ 1204.877711][ T482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6748'. [ 1204.924464][ T483] syzkaller0: entered promiscuous mode [ 1204.955823][ T483] syzkaller0: entered allmulticast mode [ 1204.962312][ T483] tipc: Resetting bearer [ 1205.084103][ T481] tipc: Resetting bearer [ 1207.062821][ T501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1210.994431][ T481] tipc: Disabling bearer [ 1211.012073][ T6534] tipc: Node number set to 1304780100 [ 1211.324258][ T510] x_tables: duplicate underflow at hook 1 [ 1211.542532][ T521] syzkaller0: entered promiscuous mode [ 1211.548081][ T521] syzkaller0: entered allmulticast mode [ 1211.724954][ T525] syzkaller0: entered promiscuous mode [ 1211.730524][ T525] syzkaller0: entered allmulticast mode [ 1212.109170][ T542] xt_hashlimit: size too large, truncated to 1048576 [ 1212.466286][ T542] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6763'. [ 1217.538121][ T571] netlink: 504 bytes leftover after parsing attributes in process `syz.3.6770'. [ 1217.573894][ T576] netlink: 'syz.2.6771': attribute type 2 has an invalid length. [ 1217.722993][ T587] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6775'. [ 1217.744874][ T583] netlink: 260 bytes leftover after parsing attributes in process `syz.6.6773'. [ 1217.769145][ T583] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6773'. [ 1217.859987][ T595] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1217.916677][ T595] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1217.948667][ T595] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1217.957144][ T595] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1217.965272][ T595] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1217.974840][ T595] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1217.982604][ T595] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1217.998461][ T595] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1218.007045][ T595] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1218.016184][ T595] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1218.513363][ T611] netlink: 'syz.6.6780': attribute type 1 has an invalid length. [ 1218.534972][ T615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6781'. [ 1218.552055][ T617] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1218.568093][ T615] IPv6: addrconf: prefix option has invalid lifetime [ 1218.593736][ T615] xt_hashlimit: size too large, truncated to 1048576 [ 1218.639182][ T611] bond8: entered promiscuous mode [ 1218.644749][ T611] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1218.783960][ T611] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1218.792392][ T611] bond8: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1218.802689][ T611] bond8: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1218.816464][ T611] bond8: (slave ip6gre1): making interface the new active one [ 1218.824000][ T611] ip6gre1: entered promiscuous mode [ 1218.831579][ T611] bond8: (slave ip6gre1): Enslaving as an active interface with an up link [ 1218.926522][ T625] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6783'. [ 1218.941554][ T631] netlink: 'syz.3.6784': attribute type 30 has an invalid length. [ 1218.976679][ T631] batadv_slave_1: entered promiscuous mode [ 1219.008529][ T631] netlink: 'syz.3.6784': attribute type 1 has an invalid length. [ 1219.011090][ T625] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6783'. [ 1219.100547][ T628] batadv_slave_1: left promiscuous mode [ 1219.301786][ T625] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6783'. [ 1219.393136][ T643] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6788'. [ 1219.402170][ T643] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6788'. [ 1219.711302][ T655] syz_tun: tun_net_xmit 42 [ 1220.192741][ T678] tipc: Started in network mode [ 1220.197688][ T678] tipc: Node identity 329cdb24ec9e, cluster identity 4711 [ 1220.204999][ T678] tipc: Enabled bearer , priority 0 [ 1220.371680][ T679] syzkaller0: entered promiscuous mode [ 1220.377255][ T679] syzkaller0: entered allmulticast mode [ 1220.420005][ T679] tipc: Resetting bearer [ 1220.426190][ T679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.435415][ T679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.451789][ T678] netlink: 'syz.3.6796': attribute type 13 has an invalid length. [ 1220.605946][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.614981][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.787573][ C1] syz_tun: tun_net_xmit 42 [ 1220.842785][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.900308][ T676] tipc: Resetting bearer [ 1220.920701][ T706] openvswitch: netlink: Flow actions attr not present in new flow. [ 1221.029554][ T676] tipc: Disabling bearer [ 1221.655199][ T721] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1221.857035][ C1] syz_tun: tun_net_xmit 42 [ 1222.104146][ T759] netlink: 'syz.3.6815': attribute type 1 has an invalid length. [ 1222.120054][ T766] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1222.183215][ T759] bond2: entered promiscuous mode [ 1222.188829][ T759] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1222.818331][ T789] syzkaller0: entered promiscuous mode [ 1222.823974][ T789] syzkaller0: entered allmulticast mode [ 1222.867643][ T789] __nla_validate_parse: 5 callbacks suppressed [ 1222.867667][ T789] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6822'. [ 1222.929034][ T798] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6826'. [ 1225.555832][ T785] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1228.732700][ C0] ip6_tnl_xmit_ctl: 474 callbacks suppressed [ 1228.732722][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1231.855591][ T6534] page_pool_release_retry() stalled pool shutdown: id 222, 1 inflight 604 sec [ 1232.580430][ T845] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1232.946452][ T893] FAULT_INJECTION: forcing a failure. [ 1232.946452][ T893] name failslab, interval 1, probability 0, space 0, times 0 [ 1232.959221][ T893] CPU: 1 UID: 0 PID: 893 Comm: syz.0.6854 Not tainted syzkaller #0 PREEMPT(full) [ 1232.959247][ T893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1232.959264][ T893] Call Trace: [ 1232.959272][ T893] [ 1232.959280][ T893] dump_stack_lvl+0xe8/0x150 [ 1232.959304][ T893] should_fail_ex+0x412/0x560 [ 1232.959326][ T893] should_failslab+0xa8/0x100 [ 1232.959341][ T893] ? skb_clone+0x212/0x3a0 [ 1232.959360][ T893] kmem_cache_alloc_noprof+0x87/0x650 [ 1232.959382][ T893] ? __bpf_redirect+0xcec/0x12a0 [ 1232.959408][ T893] skb_clone+0x212/0x3a0 [ 1232.959429][ T893] bpf_clone_redirect+0x16a/0x4b0 [ 1232.959451][ T893] ? bpf_test_run+0x1d1/0x830 [ 1232.959474][ T893] ? bpf_test_run+0x1d1/0x830 [ 1232.959490][ T893] bpf_prog_43388ee67a65acbd+0x22/0x2a [ 1232.959507][ T893] bpf_test_run+0x354/0x830 [ 1232.959543][ T893] ? __pfx_bpf_test_run+0x10/0x10 [ 1232.959574][ T893] ? skb_checksum+0x7b9/0x8c0 [ 1232.959599][ T893] ? skb_dst_set+0x72/0x140 [ 1232.959618][ T893] bpf_prog_test_run_skb+0xe2c/0x2260 [ 1232.959653][ T893] ? __fget_files+0x3a0/0x420 [ 1232.959671][ T893] ? __fget_files+0x2a/0x420 [ 1232.959693][ T893] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1232.959711][ T893] bpf_prog_test_run+0x2c7/0x340 [ 1232.959730][ T893] __sys_bpf+0x643/0x950 [ 1232.959754][ T893] ? __pfx___sys_bpf+0x10/0x10 [ 1232.959789][ T893] ? ksys_write+0x242/0x270 [ 1232.959813][ T893] ? __pfx_ksys_write+0x10/0x10 [ 1232.959838][ T893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.959855][ T893] __x64_sys_bpf+0x7c/0x90 [ 1232.959876][ T893] do_syscall_64+0x174/0x580 [ 1232.959892][ T893] ? trace_irq_disable+0x3b/0x140 [ 1232.959914][ T893] ? clear_bhb_loop+0x40/0x90 [ 1232.959933][ T893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.959948][ T893] RIP: 0033:0x7fc81379ce59 [ 1232.959964][ T893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1232.959977][ T893] RSP: 002b:00007fc814685028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1232.959995][ T893] RAX: ffffffffffffffda RBX: 00007fc813a15fa0 RCX: 00007fc81379ce59 [ 1232.960006][ T893] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1232.960016][ T893] RBP: 00007fc814685090 R08: 0000000000000000 R09: 0000000000000000 [ 1232.960026][ T893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1232.960035][ T893] R13: 00007fc813a16038 R14: 00007fc813a15fa0 R15: 00007ffe6bd9e638 [ 1232.960061][ T893] [ 1233.487180][ T896] netlink: 'syz.2.6855': attribute type 4 has an invalid length. [ 1233.494996][ T896] netlink: 3581 bytes leftover after parsing attributes in process `syz.2.6855'. [ 1233.837353][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1234.362037][ T914] bond0: left promiscuous mode [ 1234.385026][ T914] bond_slave_0: left promiscuous mode [ 1234.401853][ T914] bond_slave_1: left promiscuous mode [ 1234.461802][ T914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1234.673069][ T951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1234.704136][ T914] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1234.772928][ T955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1234.780012][ T958] sctp: [Deprecated]: syz.2.6870 (pid 958) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1234.780012][ T958] Use struct sctp_sack_info instead [ 1234.841274][ T914] gtp0: left promiscuous mode [ 1234.863607][ T914] bond1: left promiscuous mode [ 1234.876874][ T914] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1234.907835][ T914] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1234.918880][ T914] bond2: left promiscuous mode [ 1234.927264][T25641] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1234.935945][ T960] bridge_slave_1: left allmulticast mode [ 1234.941784][ T960] bridge_slave_1: left promiscuous mode [ 1234.948283][ T960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.991217][ T960] bridge_slave_0: left allmulticast mode [ 1235.001968][ T960] bridge_slave_0: left promiscuous mode [ 1235.019901][ T960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.607611][ T984] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6876'. [ 1236.061947][T28584] Bluetooth: hci3: command 0x0406 tx timeout [ 1236.454508][ T1004] xt_hashlimit: size too large, truncated to 1048576 [ 1238.366393][ T972] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1238.667040][ T1012] sctp: [Deprecated]: syz.0.6881 (pid 1012) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1238.667040][ T1012] Use struct sctp_sack_info instead [ 1238.947509][ T1316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.966917][ T1027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6887'. [ 1239.055491][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1239.241102][ T1038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6888'. [ 1239.626140][ T1057] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1239.844513][ T1053] syzkaller0: entered promiscuous mode [ 1239.850060][ T1053] syzkaller0: entered allmulticast mode [ 1239.854221][ T1065] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 1240.254159][ T1085] sctp: [Deprecated]: syz.0.6897 (pid 1085) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1240.254159][ T1085] Use struct sctp_sack_info instead [ 1242.962964][ T1074] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1243.376857][ T1122] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1244.145736][ T1155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6914'. [ 1244.831239][ T1158] syzkaller0: entered promiscuous mode [ 1244.837264][ T1158] syzkaller0: entered allmulticast mode [ 1246.206774][T28584] Bluetooth: hci2: command 0x0406 tx timeout [ 1247.272139][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1247.472909][ T1174] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1250.966820][ T1193] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1250.979188][ T1193] batman_adv: batadv0: Adding interface: gretap1 [ 1250.985628][ T1193] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1251.017568][ T1193] batman_adv: batadv0: Interface activated: gretap1 [ 1251.348988][ T1237] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6930'. [ 1251.358288][ T1237] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6930'. [ 1251.378200][ T1237] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6930'. [ 1251.748564][ T1256] syzkaller0: entered promiscuous mode [ 1251.754108][ T1256] syzkaller0: entered allmulticast mode [ 1252.493204][ T1276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6938'. [ 1252.737504][ T1276] veth5: entered allmulticast mode [ 1252.746739][ T1276] bond2: (slave veth5): Enslaving as an active interface with an up link [ 1252.969203][ T1301] sctp: [Deprecated]: syz.6.6944 (pid 1301) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1252.969203][ T1301] Use struct sctp_sack_info instead [ 1253.104908][ T1283] bond2 (unregistering): (slave veth5): Releasing backup interface [ 1253.118961][ T1283] bond2 (unregistering): Released all slaves [ 1253.136613][ T1307] netlink: 124 bytes leftover after parsing attributes in process `syz.6.6945'. [ 1253.156449][ T1288] tipc: New replicast peer: 255.255.255.255 [ 1253.163877][ T1288] tipc: Enabled bearer , priority 5 [ 1253.377040][ T1309] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 1253.387304][ T1311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1253.454504][ T1311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6946'. [ 1253.463447][ T1311] netlink: 'syz.0.6946': attribute type 30 has an invalid length. [ 1253.599271][ T1323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6946'. [ 1253.631087][ T1323] netlink: 'syz.0.6946': attribute type 30 has an invalid length. [ 1253.631771][T25632] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1253.751414][T25632] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1253.820541][ T1331] netlink: 'syz.4.6952': attribute type 1 has an invalid length. [ 1253.936548][ T1338] netlink: 51 bytes leftover after parsing attributes in process `syz.2.6953'. [ 1253.945760][ T1334] netlink: 51 bytes leftover after parsing attributes in process `syz.2.6953'. [ 1253.994315][ T1331] bond2: entered promiscuous mode [ 1254.037353][ T1331] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1254.126211][T25632] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1254.135199][T25632] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1254.294847][ T1350] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6954'. [ 1254.311687][ T1348] sctp: [Deprecated]: syz.0.6955 (pid 1348) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1254.311687][ T1348] Use struct sctp_sack_info instead [ 1254.407970][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1254.553182][ T1342] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1254.562471][ T1342] bond2: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 1254.574037][ T1342] bond2: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 1254.610975][ T1349] xt_CT: No such helper "netbios-ns" [ 1254.652974][ T1342] bond2: (slave ip6gre3): making interface the new active one [ 1254.686207][ T1342] ip6gre3: entered promiscuous mode [ 1254.693459][ T1342] bond2: (slave ip6gre3): Enslaving as an active interface with an up link [ 1254.727910][ T6536] tipc: Node number set to 3724729124 [ 1254.828156][ T1355] tipc: Enabled bearer , priority 0 [ 1255.042071][ T1355] syzkaller0: entered promiscuous mode [ 1255.058163][ T1355] syzkaller0: entered allmulticast mode [ 1255.075994][ T1355] tipc: Resetting bearer [ 1255.314647][T25645] tipc: Resetting bearer [ 1255.337810][ T1354] tipc: Resetting bearer [ 1255.927288][ T1398] FAULT_INJECTION: forcing a failure. [ 1255.927288][ T1398] name failslab, interval 1, probability 0, space 0, times 0 [ 1255.940536][ T1398] CPU: 1 UID: 0 PID: 1398 Comm: syz.3.6967 Not tainted syzkaller #0 PREEMPT(full) [ 1255.940565][ T1398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1255.940577][ T1398] Call Trace: [ 1255.940595][ T1398] [ 1255.940604][ T1398] dump_stack_lvl+0xe8/0x150 [ 1255.940633][ T1398] should_fail_ex+0x412/0x560 [ 1255.940662][ T1398] should_failslab+0xa8/0x100 [ 1255.940681][ T1398] ? skb_clone+0x212/0x3a0 [ 1255.940705][ T1398] kmem_cache_alloc_noprof+0x87/0x650 [ 1255.940734][ T1398] ? __bpf_redirect+0xcec/0x12a0 [ 1255.940768][ T1398] skb_clone+0x212/0x3a0 [ 1255.940794][ T1398] bpf_clone_redirect+0x16a/0x4b0 [ 1255.940823][ T1398] ? preempt_schedule_common+0x82/0xd0 [ 1255.940843][ T1398] ? bpf_test_run+0x1d1/0x830 [ 1255.940872][ T1398] ? bpf_test_run+0x1d1/0x830 [ 1255.940896][ T1398] bpf_prog_43388ee67a65acbd+0x22/0x2a [ 1255.940918][ T1398] bpf_test_run+0x354/0x830 [ 1255.940963][ T1398] ? __pfx_bpf_test_run+0x10/0x10 [ 1255.941004][ T1398] ? skb_checksum+0x7b9/0x8c0 [ 1255.941036][ T1398] ? skb_dst_set+0x72/0x140 [ 1255.941061][ T1398] bpf_prog_test_run_skb+0xe2c/0x2260 [ 1255.941118][ T1398] ? __fget_files+0x3a0/0x420 [ 1255.941141][ T1398] ? __fget_files+0x2a/0x420 [ 1255.941170][ T1398] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1255.941194][ T1398] bpf_prog_test_run+0x2c7/0x340 [ 1255.941219][ T1398] __sys_bpf+0x643/0x950 [ 1255.941250][ T1398] ? __pfx___sys_bpf+0x10/0x10 [ 1255.941303][ T1398] ? ksys_write+0x242/0x270 [ 1255.941334][ T1398] ? __pfx_ksys_write+0x10/0x10 [ 1255.941366][ T1398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.941389][ T1398] __x64_sys_bpf+0x7c/0x90 [ 1255.941417][ T1398] do_syscall_64+0x174/0x580 [ 1255.941436][ T1398] ? trace_irq_disable+0x3b/0x140 [ 1255.941466][ T1398] ? clear_bhb_loop+0x40/0x90 [ 1255.941491][ T1398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.941510][ T1398] RIP: 0033:0x7f421d79ce59 [ 1255.941530][ T1398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1255.941548][ T1398] RSP: 002b:00007f421e739028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1255.941570][ T1398] RAX: ffffffffffffffda RBX: 00007f421da15fa0 RCX: 00007f421d79ce59 [ 1255.941585][ T1398] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1255.941598][ T1398] RBP: 00007f421e739090 R08: 0000000000000000 R09: 0000000000000000 [ 1255.941610][ T1398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1255.941622][ T1398] R13: 00007f421da16038 R14: 00007f421da15fa0 R15: 00007ffeadb215b8 [ 1255.941655][ T1398] [ 1256.435282][ T1407] netlink: 'syz.3.6968': attribute type 13 has an invalid length. [ 1256.537336][ T6536] IPVS: starting estimator thread 0... [ 1256.762918][ T1409] IPVS: using max 25 ests per chain, 60000 per kthread [ 1256.985513][ T1415] sctp: [Deprecated]: syz.6.6969 (pid 1415) Use of int in maxseg socket option. [ 1256.985513][ T1415] Use struct sctp_assoc_value instead [ 1259.425710][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1261.486580][ T1354] tipc: Disabling bearer [ 1261.603714][ T1408] vlan2: entered promiscuous mode [ 1261.610818][ T1413] bridge0: left allmulticast mode [ 1261.622637][ T1414] bridge0: port 4(vlan2) entered blocking state [ 1261.629049][ T1414] bridge0: port 4(vlan2) entered disabled state [ 1261.635635][ T1414] vlan2: entered allmulticast mode [ 1261.640868][ T1414] geneve0: entered allmulticast mode [ 1261.647548][ T1414] vlan2: entered promiscuous mode [ 1261.652576][ T1414] geneve0: entered promiscuous mode [ 1261.755668][ T1419] tipc: Enabling of bearer rejected, failed to enable media [ 1261.878996][ T1423] __nla_validate_parse: 1 callbacks suppressed [ 1261.879011][ T1423] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6972'. [ 1262.100787][ T1434] netlink: 193 bytes leftover after parsing attributes in process `syz.0.6975'. [ 1262.134834][ T1435] mac80211_hwsim hwsim90 syzkaller0: entered promiscuous mode [ 1262.136673][ T1434] netlink: 'syz.0.6975': attribute type 1 has an invalid length. [ 1262.144034][ T1435] mac80211_hwsim hwsim90 syzkaller0: entered allmulticast mode [ 1262.246700][ T1434] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1262.324140][T25632] tipc: Resetting bearer [ 1262.580601][ T1453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6979'. [ 1263.004268][T25632] bond8 (unregistering): (slave gre1): Releasing backup interface [ 1263.012179][T25632] gre1 (unregistering): left promiscuous mode [ 1263.023141][T25632] bond9 (unregistering): (slave gre2): Releasing backup interface [ 1263.031025][T25632] gre2 (unregistering): left promiscuous mode [ 1263.048510][T25632] bond11 (unregistering): (slave gre3): Releasing backup interface [ 1263.056507][T25632] gre3 (unregistering): left promiscuous mode [ 1263.067637][T25632] bond12 (unregistering): (slave gre4): Releasing backup interface [ 1263.075604][T25632] gre4 (unregistering): left promiscuous mode [ 1263.111967][T25632] bond17 (unregistering): (slave gre5): Releasing backup interface [ 1263.119948][T25632] gre5 (unregistering): left promiscuous mode [ 1263.130486][T25632] bond18 (unregistering): (slave gre6): Releasing backup interface [ 1263.138426][T25632] gre6 (unregistering): left promiscuous mode [ 1263.148959][T25632] bond19 (unregistering): (slave gre7): Releasing backup interface [ 1263.156905][T25632] gre7 (unregistering): left promiscuous mode [ 1263.167448][T25632] bond20 (unregistering): (slave gre8): Releasing backup interface [ 1263.175455][T25632] gre8 (unregistering): left promiscuous mode [ 1263.265459][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1263.276176][T25632] tipc: Disabling bearer [ 1263.286912][T25632] bond7 (unregistering): (slave bridge1): Releasing active interface [ 1263.369940][T25632] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1263.384541][T25641] smbdirect: ib_dev[syz1] removed [ 1263.393575][T25632] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1263.406413][T25632] bond0 (unregistering): Released all slaves [ 1263.431898][T25632] bond1 (unregistering): Released all slaves [ 1263.477820][T25632] bond2 (unregistering): Released all slaves [ 1263.503281][T25632] bond3 (unregistering): Released all slaves [ 1263.521267][T25632] bond4 (unregistering): Released all slaves [ 1263.538832][T25632] bond5 (unregistering): Released all slaves [ 1263.589394][T25632] bond6 (unregistering): Released all slaves [ 1263.622996][T25632] bond7 (unregistering): (slave veth3): Releasing active interface [ 1263.634261][T25632] bond7 (unregistering): Released all slaves [ 1263.648905][T25632] bond8 (unregistering): Released all slaves [ 1263.664371][T25632] bond9 (unregistering): Released all slaves [ 1263.689245][T25632] bond10 (unregistering): Released all slaves [ 1263.717223][T25632] bond11 (unregistering): Released all slaves [ 1263.731981][T25632] bond12 (unregistering): Released all slaves [ 1263.747515][T25632] bond13 (unregistering): Released all slaves [ 1263.762407][T25632] bond14 (unregistering): Released all slaves [ 1263.779027][T25632] bond15 (unregistering): (slave veth9): Releasing backup interface [ 1263.823265][T25632] bond15 (unregistering): Released all slaves [ 1263.838066][T25632] bond16 (unregistering): Released all slaves [ 1263.852842][T25632] bond17 (unregistering): Released all slaves [ 1263.868294][T25632] bond18 (unregistering): Released all slaves [ 1263.882973][T25632] bond19 (unregistering): Released all slaves [ 1263.897904][T25632] bond20 (unregistering): Released all slaves [ 1263.941801][T25632] bond21 (unregistering): Released all slaves [ 1263.961182][T25632] bond22 (unregistering): Released all slaves [ 1264.912176][T25632] hmó3)óÿ: left promiscuous mode [ 1265.881244][ T1512] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1265.956499][T25632] 5nè: left promiscuous mode [ 1266.205703][ T1522] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6993'. [ 1266.412927][ T1522] netlink: 'syz.6.6993': attribute type 1 has an invalid length. [ 1266.422010][T25632] tipc: Left network mode [ 1266.904712][ T1538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1266.921638][ T1542] syzkaller0: entered promiscuous mode [ 1266.927181][ T1542] syzkaller0: entered allmulticast mode [ 1267.026260][ T1549] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6995'. [ 1267.198189][ T1552] netlink: 'syz.4.7001': attribute type 1 has an invalid length. [ 1267.285570][ T1546] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1267.817715][ T1552] bond3: entered promiscuous mode [ 1267.858793][ T1552] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1268.067065][ T1565] bond3: (slave bridge2): making interface the new active one [ 1268.085994][ T1565] bridge2: entered promiscuous mode [ 1268.103422][ T1565] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 1269.447892][ T1619] xt_connbytes: Forcing CT accounting to be enabled [ 1270.096853][ T1629] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7014'. [ 1270.126436][ T1629] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7014'. [ 1270.165214][ T1634] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7014'. [ 1270.183326][ T1636] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1271.238150][ T1645] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7018'. [ 1271.494588][ T1672] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20002 [ 1271.585029][T25632] hsr_slave_0: left promiscuous mode [ 1271.591528][T25632] hsr_slave_1: left promiscuous mode [ 1271.599053][T25632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1271.607027][T25632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1271.625069][T25632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1271.634820][T25632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1271.653420][T25632] batman_adv: batadv0: Removing interface: dummy0 [ 1271.696772][ T1677] netlink: 'syz.2.7022': attribute type 1 has an invalid length. [ 1271.828956][T25632] veth1_macvtap: left promiscuous mode [ 1271.834575][T25632] veth0_macvtap: left promiscuous mode [ 1271.840563][T25632] veth1_vlan: left promiscuous mode [ 1271.847819][T25632] veth0_vlan: left promiscuous mode [ 1273.598684][ T1686] netlink: 722 bytes leftover after parsing attributes in process `syz.0.7024'. [ 1273.738730][ T1694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7026'. [ 1273.832402][ T1694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7026'. [ 1273.934612][ T1698] sctp: [Deprecated]: syz.0.7026 (pid 1698) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1273.934612][ T1698] Use struct sctp_sack_info instead [ 1274.090113][ T1707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7030'. [ 1274.111435][ T1704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7027'. [ 1274.204503][ T1704] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1274.256893][ T1694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7026'. [ 1274.327437][ T1713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7031'. [ 1274.337646][ T1712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7031'. [ 1274.555428][ T1719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7033'. [ 1275.020896][T25632] IPVS: stop unused estimator thread 0... [ 1275.052687][ T1730] netlink: 'syz.4.7035': attribute type 1 has an invalid length. [ 1275.107077][ T1733] SET target dimension over the limit! [ 1275.184799][ T1731] veth0_macvtap: entered allmulticast mode [ 1275.269064][ T1731] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1275.394962][ T1742] netlink: 'syz.3.7037': attribute type 13 has an invalid length. [ 1275.417615][ T1742] netlink: 'syz.3.7037': attribute type 17 has an invalid length. [ 1275.629670][ T1737] bond4: (slave veth7): Enslaving as an active interface with a down link [ 1275.806832][ T1745] bond4: (slave dummy0): making interface the new active one [ 1275.873002][ T1745] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 1276.364018][ T1742] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1276.459222][ T1774] netlink: 56 bytes leftover after parsing attributes in process `syz.6.7041'. [ 1276.577798][ T1790] sctp: [Deprecated]: syz.3.7044 (pid 1790) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1276.577798][ T1790] Use struct sctp_sack_info instead [ 1277.109553][ T1805] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1278.030332][ T1829] sctp: [Deprecated]: syz.4.7057 (pid 1829) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1278.030332][ T1829] Use struct sctp_sack_info instead [ 1278.961941][ T1861] __nla_validate_parse: 3 callbacks suppressed [ 1278.961963][ T1861] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7064'. [ 1278.974653][ T1863] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1278.986957][ T5830] team_slave_1: entered promiscuous mode [ 1279.095110][ T1863] netlink: 'syz.0.7066': attribute type 1 has an invalid length. [ 1279.103037][ T1863] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7066'. [ 1279.209989][ T1863] netlink: 'syz.0.7066': attribute type 10 has an invalid length. [ 1279.243153][ T1863] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1279.297886][ T1871] netlink: 'syz.0.7066': attribute type 10 has an invalid length. [ 1279.332193][ T1863] team0: Port device netdevsim1 added [ 1279.337808][ T1863] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 1279.358200][ T1871] team0: Port device netdevsim1 removed [ 1279.365572][ T1871] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1279.405453][ T1871] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1279.414372][ T1871] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 1279.431467][ T1883] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7071'. [ 1279.657067][ T1893] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7073'. [ 1279.790803][ T1893] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7073'. [ 1280.043705][ T1893] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7073'. [ 1280.097079][ T1913] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20265 [ 1280.512738][ T1925] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7078'. [ 1280.577599][ T1925] veth1_to_team: entered promiscuous mode [ 1280.660044][ T1925] veth1_to_team: left promiscuous mode [ 1280.769330][ T1940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7083'. [ 1280.769592][ T1932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1280.785853][ T1932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1280.884806][ T1932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1280.892259][ T1932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1281.112712][ T1947] netlink: 72 bytes leftover after parsing attributes in process `syz.6.7085'. [ 1281.122423][ T1947] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7085'. [ 1281.142206][ T1947] team0: Port device team_slave_0 removed [ 1281.740108][ T1957] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1281.751871][ T1957] netlink: 'syz.2.7088': attribute type 15 has an invalid length. [ 1281.829426][ T1959] A link change request failed with some changes committed already. Interface ip6gre1 may have been left with an inconsistent configuration, please check. [ 1281.870462][ T1944] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1281.878628][ T1944] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1281.885486][ T1960] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1281.989489][ T1970] syz_tun: tun_net_xmit 382 [ 1282.812102][ T1984] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1282.892112][ T1984] bond6: entered promiscuous mode [ 1282.897227][ T1984] bond6: entered allmulticast mode [ 1282.939126][ T1984] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1282.946962][ T1984] team0: Device bond6 is of different type [ 1283.047800][ C0] syz_tun: tun_net_xmit 382 [ 1283.487983][ T2005] A link change request failed with some changes committed already. Interface ip6gre1 may have been left with an inconsistent configuration, please check. [ 1283.800419][ T2019] tipc: Enabled bearer , priority 0 [ 1283.858254][ T2020] tipc: Failed to remove unknown binding: 66,0,0/1011552466:1179164228/1179164230 [ 1283.897347][ T2020] tipc: Failed to remove unknown binding: 66,0,0/1011552466:1179164228/1179164229 [ 1283.931507][ T2025] tipc: Failed to remove unknown binding: 66,0,0/1011552466:1179164228/1179164230 [ 1283.951314][ T2025] tipc: Failed to remove unknown binding: 66,0,0/1011552466:1179164228/1179164229 [ 1284.031569][ T2026] dvmrp0: entered allmulticast mode [ 1284.179560][ T2031] __nla_validate_parse: 5 callbacks suppressed [ 1284.179584][ T2031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7106'. [ 1284.440184][ T2042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1284.522437][ T2048] openvswitch: netlink: Actions may not be safe on all matching packets [ 1284.557957][ T2048] openvswitch: netlink: Actions may not be safe on all matching packets [ 1284.622795][ T2048] openvswitch: netlink: Actions may not be safe on all matching packets [ 1284.721978][ T2058] netlink: 'syz.0.7116': attribute type 11 has an invalid length. [ 1284.729954][ T2058] netlink: 'syz.0.7116': attribute type 4 has an invalid length. [ 1284.737702][ T2058] netlink: 'syz.0.7116': attribute type 6 has an invalid length. [ 1284.745442][ T2058] netlink: 199556 bytes leftover after parsing attributes in process `syz.0.7116'. [ 1284.907219][ T2067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1285.080477][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1285.512344][ T2088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7118'. [ 1285.521282][ T2088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7118'. [ 1285.699288][ T2092] netlink: 'syz.3.7119': attribute type 11 has an invalid length. [ 1286.258166][ T2102] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1286.304445][ T2117] netlink: 'syz.6.7127': attribute type 1 has an invalid length. [ 1286.335563][ T2117] netlink: 'syz.6.7127': attribute type 2 has an invalid length. [ 1286.353637][ T2117] netlink: 'syz.6.7127': attribute type 3 has an invalid length. [ 1286.375069][ T2117] netlink: 228 bytes leftover after parsing attributes in process `syz.6.7127'. [ 1286.389837][ T2092] mac80211_hwsim hwsim96 wlan0: entered promiscuous mode [ 1286.397464][ T2092] mac80211_hwsim hwsim96 wlan0: entered allmulticast mode [ 1286.807435][ T2121] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7128'. [ 1288.151099][ T2164] netlink: 204 bytes leftover after parsing attributes in process `syz.4.7139'. [ 1288.160745][ T2164] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7139'. [ 1288.199980][ T2168] hsr0: entered promiscuous mode [ 1288.236383][ T2167] hsr0: left promiscuous mode [ 1288.391675][ T2172] FAULT_INJECTION: forcing a failure. [ 1288.391675][ T2172] name failslab, interval 1, probability 0, space 0, times 0 [ 1288.404544][ T2172] CPU: 1 UID: 0 PID: 2172 Comm: syz.4.7142 Not tainted syzkaller #0 PREEMPT(full) [ 1288.404573][ T2172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1288.404585][ T2172] Call Trace: [ 1288.404594][ T2172] [ 1288.404603][ T2172] dump_stack_lvl+0xe8/0x150 [ 1288.404634][ T2172] should_fail_ex+0x412/0x560 [ 1288.404663][ T2172] should_failslab+0xa8/0x100 [ 1288.404684][ T2172] ? skb_clone+0x212/0x3a0 [ 1288.404709][ T2172] kmem_cache_alloc_noprof+0x87/0x650 [ 1288.404737][ T2172] ? __bpf_redirect+0xcec/0x12a0 [ 1288.404773][ T2172] skb_clone+0x212/0x3a0 [ 1288.404801][ T2172] bpf_clone_redirect+0x16a/0x4b0 [ 1288.404831][ T2172] ? bpf_test_run+0x1d1/0x830 [ 1288.404866][ T2172] ? bpf_test_run+0x1d1/0x830 [ 1288.404890][ T2172] bpf_prog_43388ee67a65acbd+0x22/0x2a [ 1288.404912][ T2172] bpf_test_run+0x354/0x830 [ 1288.404958][ T2172] ? __pfx_bpf_test_run+0x10/0x10 [ 1288.405002][ T2172] ? skb_checksum+0x7b9/0x8c0 [ 1288.405035][ T2172] ? skb_dst_set+0x72/0x140 [ 1288.405061][ T2172] bpf_prog_test_run_skb+0xe2c/0x2260 [ 1288.405117][ T2172] ? __fget_files+0x3a0/0x420 [ 1288.405141][ T2172] ? __fget_files+0x2a/0x420 [ 1288.405172][ T2172] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1288.405195][ T2172] bpf_prog_test_run+0x2c7/0x340 [ 1288.405221][ T2172] __sys_bpf+0x643/0x950 [ 1288.405253][ T2172] ? __pfx___sys_bpf+0x10/0x10 [ 1288.405300][ T2172] ? ksys_write+0x242/0x270 [ 1288.405332][ T2172] ? __pfx_ksys_write+0x10/0x10 [ 1288.405366][ T2172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.405389][ T2172] __x64_sys_bpf+0x7c/0x90 [ 1288.405418][ T2172] do_syscall_64+0x174/0x580 [ 1288.405439][ T2172] ? trace_irq_disable+0x3b/0x140 [ 1288.405468][ T2172] ? clear_bhb_loop+0x40/0x90 [ 1288.405493][ T2172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.405514][ T2172] RIP: 0033:0x7f0ebd39ce59 [ 1288.405532][ T2172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1288.405550][ T2172] RSP: 002b:00007f0ebe33a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1288.405572][ T2172] RAX: ffffffffffffffda RBX: 00007f0ebd615fa0 RCX: 00007f0ebd39ce59 [ 1288.405587][ T2172] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1288.405600][ T2172] RBP: 00007f0ebe33a090 R08: 0000000000000000 R09: 0000000000000000 [ 1288.405613][ T2172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1288.405625][ T2172] R13: 00007f0ebd616038 R14: 00007f0ebd615fa0 R15: 00007ffc95455a08 [ 1288.405660][ T2172] [ 1288.833964][ T2181] netlink: 100 bytes leftover after parsing attributes in process `syz.6.7144'. [ 1288.894832][ T2183] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1288.919122][ T2183] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1288.930720][ T2183] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1288.977126][ T2184] netlink: 180 bytes leftover after parsing attributes in process `syz.4.7147'. [ 1289.320980][ T2200] netlink: 'syz.2.7153': attribute type 22 has an invalid length. [ 1289.328863][ T2200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7153'. [ 1289.347773][T25625] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1289.351749][ T2200] netlink: 'syz.2.7153': attribute type 22 has an invalid length. [ 1289.356049][T25625] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1289.356095][T25625] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1289.364131][ T2200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7153'. [ 1289.372094][T25625] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1289.572293][ T2205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7154'. [ 1289.879325][ T2196] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7151'. [ 1290.408884][ T2221] netlink: 260 bytes leftover after parsing attributes in process `syz.2.7159'. [ 1290.444024][ T2221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7159'. [ 1290.648597][ T2178] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1291.012363][ T2238] netlink: 'syz.3.7167': attribute type 1 has an invalid length. [ 1291.041259][ T2241] netlink: 260 bytes leftover after parsing attributes in process `syz.2.7166'. [ 1291.041957][ T2238] netlink: 16142 bytes leftover after parsing attributes in process `syz.3.7167'. [ 1291.070827][ T2240] netlink: 148 bytes leftover after parsing attributes in process `syz.3.7167'. [ 1291.093164][ T2241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7166'. [ 1291.254369][ T2247] FAULT_INJECTION: forcing a failure. [ 1291.254369][ T2247] name failslab, interval 1, probability 0, space 0, times 0 [ 1291.267178][ T2247] CPU: 1 UID: 0 PID: 2247 Comm: syz.3.7169 Not tainted syzkaller #0 PREEMPT(full) [ 1291.267206][ T2247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1291.267219][ T2247] Call Trace: [ 1291.267230][ T2247] [ 1291.267240][ T2247] dump_stack_lvl+0xe8/0x150 [ 1291.267271][ T2247] should_fail_ex+0x412/0x560 [ 1291.267300][ T2247] should_failslab+0xa8/0x100 [ 1291.267321][ T2247] ? skb_clone+0x212/0x3a0 [ 1291.267345][ T2247] kmem_cache_alloc_noprof+0x87/0x650 [ 1291.267375][ T2247] ? __bpf_redirect+0xcec/0x12a0 [ 1291.267410][ T2247] skb_clone+0x212/0x3a0 [ 1291.267438][ T2247] bpf_clone_redirect+0x16a/0x4b0 [ 1291.267468][ T2247] ? bpf_test_run+0x1d1/0x830 [ 1291.267499][ T2247] ? bpf_test_run+0x1d1/0x830 [ 1291.267522][ T2247] bpf_prog_43388ee67a65acbd+0x22/0x2a [ 1291.267545][ T2247] bpf_test_run+0x354/0x830 [ 1291.267592][ T2247] ? __pfx_bpf_test_run+0x10/0x10 [ 1291.267635][ T2247] ? skb_checksum+0x7b9/0x8c0 [ 1291.267667][ T2247] ? skb_dst_set+0x72/0x140 [ 1291.267693][ T2247] bpf_prog_test_run_skb+0xe2c/0x2260 [ 1291.267739][ T2247] ? __fget_files+0x3a0/0x420 [ 1291.267762][ T2247] ? __fget_files+0x2a/0x420 [ 1291.267793][ T2247] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1291.267817][ T2247] bpf_prog_test_run+0x2c7/0x340 [ 1291.267843][ T2247] __sys_bpf+0x643/0x950 [ 1291.267874][ T2247] ? __pfx___sys_bpf+0x10/0x10 [ 1291.267921][ T2247] ? ksys_write+0x242/0x270 [ 1291.267952][ T2247] ? __pfx_ksys_write+0x10/0x10 [ 1291.267986][ T2247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.268009][ T2247] __x64_sys_bpf+0x7c/0x90 [ 1291.268037][ T2247] do_syscall_64+0x174/0x580 [ 1291.268059][ T2247] ? trace_irq_disable+0x3b/0x140 [ 1291.268088][ T2247] ? clear_bhb_loop+0x40/0x90 [ 1291.268121][ T2247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.268142][ T2247] RIP: 0033:0x7f421d79ce59 [ 1291.268162][ T2247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1291.268178][ T2247] RSP: 002b:00007f421e739028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1291.268201][ T2247] RAX: ffffffffffffffda RBX: 00007f421da15fa0 RCX: 00007f421d79ce59 [ 1291.268215][ T2247] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1291.268228][ T2247] RBP: 00007f421e739090 R08: 0000000000000000 R09: 0000000000000000 [ 1291.268241][ T2247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1291.268252][ T2247] R13: 00007f421da16038 R14: 00007f421da15fa0 R15: 00007ffeadb215b8 [ 1291.268286][ T2247] [ 1292.217632][ T2263] Bluetooth: MGMT ver 1.23 [ 1292.459216][ T2266] xt_cluster: node mask cannot exceed total number of nodes [ 1292.885899][ T6534] page_pool_release_retry() stalled pool shutdown: id 222, 1 inflight 665 sec [ 1293.453359][ T2304] netlink: 'syz.6.7188': attribute type 1 has an invalid length. [ 1293.607288][ T2304] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1294.172682][ T2329] netlink: 'syz.0.7193': attribute type 1 has an invalid length. [ 1294.220284][ T2329] netlink: 'syz.0.7193': attribute type 2 has an invalid length. [ 1294.228509][ T2329] netlink: 'syz.0.7193': attribute type 2 has an invalid length. [ 1294.236350][ T2329] netlink: 'syz.0.7193': attribute type 1 has an invalid length. [ 1294.484748][ T2343] xt_limit: Overflow, try lower: 268435456/134217728 [ 1294.494518][ T2343] netlink: 'syz.0.7197': attribute type 1 has an invalid length. [ 1294.502303][ T2343] __nla_validate_parse: 5 callbacks suppressed [ 1294.502322][ T2343] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7197'. [ 1294.589192][ T2336] xt_CT: No such helper "netbios-ns" [ 1294.627379][ T2350] sctp: [Deprecated]: syz.6.7199 (pid 2350) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1294.627379][ T2350] Use struct sctp_sack_info instead [ 1294.660272][ T2349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7200'. [ 1294.712599][ T2349] ip6tnl1: entered allmulticast mode [ 1294.828930][ T2346] IPVS: persistence engine module ip_vs_pe_À not found [ 1294.945358][ T2349] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7200'. [ 1295.253658][ T2371] syzkaller0: entered promiscuous mode [ 1295.271154][ T2371] syzkaller0: entered allmulticast mode [ 1295.317474][ T2371] FAULT_INJECTION: forcing a failure. [ 1295.317474][ T2371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1295.344787][ T2376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7207'. [ 1295.389204][ T2371] CPU: 1 UID: 0 PID: 2371 Comm: syz.4.7205 Not tainted syzkaller #0 PREEMPT(full) [ 1295.389234][ T2371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1295.389246][ T2371] Call Trace: [ 1295.389255][ T2371] [ 1295.389264][ T2371] dump_stack_lvl+0xe8/0x150 [ 1295.389294][ T2371] should_fail_ex+0x412/0x560 [ 1295.389322][ T2371] _copy_from_user+0x2d/0xb0 [ 1295.389348][ T2371] ___sys_sendmsg+0x1c6/0x360 [ 1295.389370][ T2371] ? __lock_acquire+0x6b5/0x2cf0 [ 1295.389396][ T2371] ? __pfx____sys_sendmsg+0x10/0x10 [ 1295.389456][ T2371] ? __fget_files+0x2a/0x420 [ 1295.389479][ T2371] ? __fget_files+0x3a0/0x420 [ 1295.389512][ T2371] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1295.389538][ T2371] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1295.389571][ T2371] ? __pfx_ksys_write+0x10/0x10 [ 1295.389607][ T2371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.389630][ T2371] do_syscall_64+0x174/0x580 [ 1295.389651][ T2371] ? trace_irq_disable+0x3b/0x140 [ 1295.389679][ T2371] ? clear_bhb_loop+0x40/0x90 [ 1295.389704][ T2371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.389724][ T2371] RIP: 0033:0x7f0ebd39ce59 [ 1295.389743][ T2371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1295.389759][ T2371] RSP: 002b:00007f0ebe33a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1295.389781][ T2371] RAX: ffffffffffffffda RBX: 00007f0ebd615fa0 RCX: 00007f0ebd39ce59 [ 1295.389795][ T2371] RDX: 0000000000004011 RSI: 00002000000000c0 RDI: 0000000000000009 [ 1295.389808][ T2371] RBP: 00007f0ebe33a090 R08: 0000000000000000 R09: 0000000000000000 [ 1295.389820][ T2371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1295.389832][ T2371] R13: 00007f0ebd616038 R14: 00007f0ebd615fa0 R15: 00007ffc95455a08 [ 1295.389875][ T2371] [ 1295.937126][ T2397] bond3: option min_links: invalid value (18446744073709551612) [ 1295.944843][ T2397] bond3: option min_links: allowed values 0 - 2147483647 [ 1296.063408][ T2397] bond3 (unregistering): Released all slaves [ 1296.549391][ T2424] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7215'. [ 1296.555372][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1297.200398][ T2454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1297.226551][ T2454] x_tables: duplicate underflow at hook 1 [ 1298.044884][ T2488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7230'. [ 1298.201744][ T2499] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7233'. [ 1298.210797][ T2499] netlink: 43 bytes leftover after parsing attributes in process `syz.2.7233'. [ 1298.219772][ T2499] netlink: 'syz.2.7233': attribute type 5 has an invalid length. [ 1298.227540][ T2499] netlink: 43 bytes leftover after parsing attributes in process `syz.2.7233'. [ 1298.400610][ T2510] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7234'. [ 1298.463129][ T30] audit: type=1800 audit(1780075170.586:27): pid=2489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7229" name="memory.events" dev="tmpfs" ino=979 res=0 errno=0 [ 1298.578791][ T2519] netlink: 'syz.2.7238': attribute type 2 has an invalid length. [ 1298.587674][ T2519] netlink: 'syz.2.7238': attribute type 21 has an invalid length. [ 1298.730919][ T2524] tipc: MTU too low for tipc bearer [ 1298.825670][ T2536] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1298.847356][ T2536] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.856824][ T2536] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.103568][ T2552] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1299.167541][ T2552] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1299.395364][ T2552] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1299.576859][ T2571] __nla_validate_parse: 4 callbacks suppressed [ 1299.576891][ T2571] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7249'. [ 1299.592058][ T2571] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7249'. [ 1299.892761][ T2586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7252'. [ 1299.923140][ T2587] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7251'. [ 1300.227179][ T2591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7253'. [ 1300.408642][ T1316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1301.231439][ T2617] syzkaller0: entered promiscuous mode [ 1301.266670][ T2617] syzkaller0: entered allmulticast mode [ 1302.171876][ T2665] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7262'. [ 1302.263327][ T2667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7264'. [ 1307.437500][ T2667] hsr_slave_1 (unregistering): left promiscuous mode [ 1307.646919][ T2681] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7266'. [ 1307.722859][ T2681] ip6gre1: entered promiscuous mode [ 1307.759574][ T2681] ip6gre1: entered allmulticast mode [ 1308.013020][ T2694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7268'. [ 1308.041773][ T2701] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7270'. [ 1308.146160][ T2702] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7267'. [ 1308.433270][ T2715] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7272'. [ 1308.457158][ T2715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7272'. [ 1308.805424][ T2740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7277'. [ 1308.859647][ T2743] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7275'. [ 1308.961382][ T2740] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1309.155112][ T30] audit: type=1804 audit(1780075181.236:28): pid=2749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.7277" name="/newroot/259/cgroup.controllers" dev="tmpfs" ino=1339 res=1 errno=0 [ 1309.177527][ T30] audit: type=1800 audit(1780075181.236:29): pid=2749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7277" name="cgroup.controllers" dev="tmpfs" ino=1339 res=0 errno=0 [ 1309.336597][ T2761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7279'. [ 1310.155378][ T2800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7286'. [ 1310.340770][ T2800] macvlan2: entered promiscuous mode [ 1310.365244][ T2800] bond0: entered promiscuous mode [ 1310.384779][ T2800] bond_slave_0: entered promiscuous mode [ 1310.413562][ T2800] bond_slave_1: entered promiscuous mode [ 1310.441555][ T2800] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1310.915189][ T2824] openvswitch: netlink: Flow actions attr not present in new flow. [ 1311.339473][ T2847] pimreg: tun_chr_ioctl cmd 1074025677 [ 1311.361493][ T2847] pimreg: linktype set to 774 [ 1312.290923][ T2875] FAULT_INJECTION: forcing a failure. [ 1312.290923][ T2875] name failslab, interval 1, probability 0, space 0, times 0 [ 1312.303726][ T2875] CPU: 1 UID: 0 PID: 2875 Comm: syz.6.7296 Not tainted syzkaller #0 PREEMPT(full) [ 1312.303754][ T2875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1312.303766][ T2875] Call Trace: [ 1312.303774][ T2875] [ 1312.303783][ T2875] dump_stack_lvl+0xe8/0x150 [ 1312.303813][ T2875] should_fail_ex+0x412/0x560 [ 1312.303843][ T2875] should_failslab+0xa8/0x100 [ 1312.303864][ T2875] ? skb_clone+0x212/0x3a0 [ 1312.303888][ T2875] kmem_cache_alloc_noprof+0x87/0x650 [ 1312.303925][ T2875] ? __bpf_redirect+0xcec/0x12a0 [ 1312.303961][ T2875] skb_clone+0x212/0x3a0 [ 1312.303990][ T2875] bpf_clone_redirect+0x16a/0x4b0 [ 1312.304021][ T2875] ? bpf_test_run+0x1d1/0x830 [ 1312.304051][ T2875] ? bpf_test_run+0x1d1/0x830 [ 1312.304074][ T2875] bpf_prog_43388ee67a65acbd+0x22/0x2a [ 1312.304096][ T2875] bpf_test_run+0x354/0x830 [ 1312.304144][ T2875] ? __pfx_bpf_test_run+0x10/0x10 [ 1312.304188][ T2875] ? skb_checksum+0x7b9/0x8c0 [ 1312.304222][ T2875] ? skb_dst_set+0x72/0x140 [ 1312.304248][ T2875] bpf_prog_test_run_skb+0xe2c/0x2260 [ 1312.304295][ T2875] ? __fget_files+0x3a0/0x420 [ 1312.304320][ T2875] ? __fget_files+0x2a/0x420 [ 1312.304356][ T2875] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1312.304380][ T2875] bpf_prog_test_run+0x2c7/0x340 [ 1312.304407][ T2875] __sys_bpf+0x643/0x950 [ 1312.304440][ T2875] ? __pfx___sys_bpf+0x10/0x10 [ 1312.304489][ T2875] ? ksys_write+0x242/0x270 [ 1312.304521][ T2875] ? __pfx_ksys_write+0x10/0x10 [ 1312.304556][ T2875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.304579][ T2875] __x64_sys_bpf+0x7c/0x90 [ 1312.304608][ T2875] do_syscall_64+0x174/0x580 [ 1312.304629][ T2875] ? trace_irq_disable+0x3b/0x140 [ 1312.304658][ T2875] ? clear_bhb_loop+0x40/0x90 [ 1312.304682][ T2875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.304703][ T2875] RIP: 0033:0x7f773599ce59 [ 1312.304722][ T2875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1312.304739][ T2875] RSP: 002b:00007f7736919028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1312.304762][ T2875] RAX: ffffffffffffffda RBX: 00007f7735c15fa0 RCX: 00007f773599ce59 [ 1312.304776][ T2875] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1312.304788][ T2875] RBP: 00007f7736919090 R08: 0000000000000000 R09: 0000000000000000 [ 1312.304801][ T2875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1312.304812][ T2875] R13: 00007f7735c16038 R14: 00007f7735c15fa0 R15: 00007fffee8b9c78 [ 1312.304847][ T2875] [ 1312.686886][ T2879] openvswitch: netlink: Key type 142 is out of range max 32 [ 1312.881810][ T2891] netlink: 'syz.0.7299': attribute type 2 has an invalid length. [ 1313.834658][ T2924] tipc: Enabled bearer , priority 0 [ 1313.923299][ T2929] __nla_validate_parse: 2 callbacks suppressed [ 1313.923322][ T2929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7308'. [ 1313.960464][ T2929] netlink: 740 bytes leftover after parsing attributes in process `syz.2.7308'. [ 1313.992442][ T2931] FAULT_INJECTION: forcing a failure. [ 1313.992442][ T2931] name failslab, interval 1, probability 0, space 0, times 0 [ 1314.005265][ T2931] CPU: 1 UID: 0 PID: 2931 Comm: syz.0.7309 Not tainted syzkaller #0 PREEMPT(full) [ 1314.005292][ T2931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1314.005304][ T2931] Call Trace: [ 1314.005313][ T2931] [ 1314.005322][ T2931] dump_stack_lvl+0xe8/0x150 [ 1314.005352][ T2931] should_fail_ex+0x412/0x560 [ 1314.005381][ T2931] should_failslab+0xa8/0x100 [ 1314.005403][ T2931] ? skb_clone+0x212/0x3a0 [ 1314.005427][ T2931] kmem_cache_alloc_noprof+0x87/0x650 [ 1314.005457][ T2931] ? __bpf_redirect+0xcec/0x12a0 [ 1314.005491][ T2931] skb_clone+0x212/0x3a0 [ 1314.005520][ T2931] bpf_clone_redirect+0x16a/0x4b0 [ 1314.005551][ T2931] ? bpf_test_run+0x1d1/0x830 [ 1314.005582][ T2931] ? bpf_test_run+0x1d1/0x830 [ 1314.005605][ T2931] bpf_prog_43388ee67a65acbd+0x22/0x2a [ 1314.005627][ T2931] bpf_test_run+0x354/0x830 [ 1314.005676][ T2931] ? __pfx_bpf_test_run+0x10/0x10 [ 1314.005730][ T2931] ? skb_checksum+0x7b9/0x8c0 [ 1314.005764][ T2931] ? skb_dst_set+0x72/0x140 [ 1314.005790][ T2931] bpf_prog_test_run_skb+0xe2c/0x2260 [ 1314.005838][ T2931] ? __fget_files+0x3a0/0x420 [ 1314.005863][ T2931] ? __fget_files+0x2a/0x420 [ 1314.005894][ T2931] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1314.005919][ T2931] bpf_prog_test_run+0x2c7/0x340 [ 1314.005943][ T2931] __sys_bpf+0x643/0x950 [ 1314.005976][ T2931] ? __pfx___sys_bpf+0x10/0x10 [ 1314.006025][ T2931] ? ksys_write+0x242/0x270 [ 1314.006056][ T2931] ? __pfx_ksys_write+0x10/0x10 [ 1314.006090][ T2931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1314.006112][ T2931] __x64_sys_bpf+0x7c/0x90 [ 1314.006140][ T2931] do_syscall_64+0x174/0x580 [ 1314.006160][ T2931] ? trace_irq_disable+0x3b/0x140 [ 1314.006187][ T2931] ? clear_bhb_loop+0x40/0x90 [ 1314.006212][ T2931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1314.006230][ T2931] RIP: 0033:0x7fc81379ce59 [ 1314.006249][ T2931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1314.006265][ T2931] RSP: 002b:00007fc814685028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1314.006288][ T2931] RAX: ffffffffffffffda RBX: 00007fc813a15fa0 RCX: 00007fc81379ce59 [ 1314.006303][ T2931] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1314.006316][ T2931] RBP: 00007fc814685090 R08: 0000000000000000 R09: 0000000000000000 [ 1314.006329][ T2931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1314.006340][ T2931] R13: 00007fc813a16038 R14: 00007fc813a15fa0 R15: 00007ffe6bd9e638 [ 1314.006375][ T2931] [ 1314.043425][ T2924] syzkaller0: entered promiscuous mode [ 1314.344319][ T2924] syzkaller0: entered allmulticast mode [ 1314.351301][ T2924] tipc: Resetting bearer [ 1314.475595][ T1779] tipc: Resetting bearer [ 1314.574248][ T2923] tipc: Resetting bearer [ 1314.691852][ T2944] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7313'. [ 1316.365371][ T1776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.373831][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.431861][T25645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.440364][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.455659][T25632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.463971][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.493453][T25632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.528335][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.564998][T25632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.573312][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.472646][ T2923] tipc: Disabling bearer [ 1320.493255][ T2945] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1320.509870][ T2945] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1320.524941][ T2945] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1320.583950][ T2966] erspan1: entered promiscuous mode [ 1320.595976][ T2966] erspan1: entered allmulticast mode [ 1320.730140][ T2974] netlink: 'syz.3.7321': attribute type 1 has an invalid length. [ 1320.750634][ T2974] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7321'. [ 1320.787932][ T2974] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7321'. [ 1320.861582][ T2980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7323'. [ 1320.979030][ T2980] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1321.008084][ T2990] netlink: 'syz.4.7326': attribute type 1 has an invalid length. [ 1321.131489][ T2984] bond4: (slave veth5): Enslaving as an active interface with an up link [ 1321.302837][ T2992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1321.312507][ T2992] bond4: (slave batadv0): Enslaving as an active interface with an up link [ 1321.336186][ T3002] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1321.345779][ T2996] syzkaller1: entered promiscuous mode [ 1321.351299][ T2996] syzkaller1: entered allmulticast mode [ 1321.377832][ T2990] veth9: entered promiscuous mode [ 1321.389117][ T2990] bond7: (slave veth9): Enslaving as a backup interface with a down link [ 1321.412994][ T2990] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7326'. [ 1321.639210][ T3020] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7331'. [ 1321.648485][ T3020] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7331'. [ 1321.788892][ T3025] netlink: 'syz.4.7333': attribute type 1 has an invalid length. [ 1321.871778][ T3025] bond8: entered promiscuous mode [ 1321.877957][ T3025] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1321.914582][ T3028] netlink: 41 bytes leftover after parsing attributes in process `syz.4.7333'. [ 1321.937864][ T3028] netlink: 140 bytes leftover after parsing attributes in process `syz.4.7333'. [ 1321.979029][ T3028] netlink: 41 bytes leftover after parsing attributes in process `syz.4.7333'. [ 1321.989314][ T3032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7335'. [ 1322.263307][ T5645] block nbd7: Receive control failed (result -1) [ 1322.296232][ T3042] netlink: 'syz.2.7338': attribute type 1 has an invalid length. [ 1322.424251][ T3042] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1322.542154][ T3042] bond7: (slave veth5): Enslaving as an active interface with a down link [ 1322.571686][ T3042] bond7: (slave dummy0): Enslaving as an active interface with a down link [ 1322.651389][ T3050] syzkaller0: entered promiscuous mode [ 1322.695010][ T3050] syzkaller0: entered allmulticast mode [ 1322.784186][ T3050] net_ratelimit: 4 callbacks suppressed [ 1322.784207][ T3050] TC_ACT_REPEAT abuse ? [ 1323.241503][ T3065] netlink: 'syz.0.7346': attribute type 1 has an invalid length. [ 1323.269515][ T3065] netlink: 'syz.0.7346': attribute type 2 has an invalid length. [ 1323.277421][ T3065] netlink: 'syz.0.7346': attribute type 2 has an invalid length. [ 1323.285176][ T3065] netlink: 'syz.0.7346': attribute type 2 has an invalid length. [ 1323.292923][ T3065] netlink: 'syz.0.7346': attribute type 1 has an invalid length. [ 1323.344566][ T3065] netlink: 'syz.0.7346': attribute type 2 has an invalid length. [ 1324.268111][ T3111] Unsupported ieee802154 address type: 0 [ 1324.890651][ T3130] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1325.419080][ T3142] veth0_virt_wifi: entered promiscuous mode [ 1325.428337][ T3141] veth0_virt_wifi: left promiscuous mode [ 1325.775346][ T3157] __nla_validate_parse: 8 callbacks suppressed [ 1325.775368][ T3157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7367'. [ 1325.825392][ T3157] syzkaller1: entered promiscuous mode [ 1325.831467][ T3157] syzkaller1: entered allmulticast mode [ 1326.083927][ T3168] syzkaller1: entered promiscuous mode [ 1326.089474][ T3168] syzkaller1: entered allmulticast mode [ 1326.670031][ T3183] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7375'. [ 1326.886277][ T3186] [ 1326.888677][ T3186] ====================================================== [ 1326.895719][ T3186] WARNING: possible circular locking dependency detected [ 1326.902762][ T3186] syzkaller #0 Not tainted [ 1326.907204][ T3186] ------------------------------------------------------ [ 1326.914241][ T3186] syz.0.7377/3186 is trying to acquire lock: [ 1326.920239][ T3186] ffffffff8ea85640 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650 [ 1326.929429][ T3186] [ 1326.929429][ T3186] but task is already holding lock: [ 1326.936835][ T3186] ffff888031540338 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 1326.946373][ T3186] [ 1326.946373][ T3186] which lock already depends on the new lock. [ 1326.946373][ T3186] [ 1326.956882][ T3186] [ 1326.956882][ T3186] the existing dependency chain (in reverse order) is: [ 1326.965901][ T3186] [ 1326.965901][ T3186] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 1326.973477][ T3186] __might_fault+0xcb/0x130 [ 1326.978531][ T3186] _copy_from_user+0x28/0xb0 [ 1326.983672][ T3186] csum_and_copy_from_iter_full+0x1e7/0x1f00 [ 1326.990182][ T3186] ip_generic_getfrag+0x149/0x2d0 [ 1326.995742][ T3186] __ip6_append_data+0x39cd/0x3f60 [ 1327.001384][ T3186] ip6_append_data+0x10f/0x280 [ 1327.006671][ T3186] rawv6_sendmsg+0x12d3/0x18e0 [ 1327.011965][ T3186] ____sys_sendmsg+0x80a/0x9f0 [ 1327.017251][ T3186] ___sys_sendmsg+0x2a5/0x360 [ 1327.022452][ T3186] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1327.027907][ T3186] do_syscall_64+0x174/0x580 [ 1327.033018][ T3186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.039428][ T3186] [ 1327.039428][ T3186] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1327.047169][ T3186] lock_sock_nested+0x41/0x100 [ 1327.052460][ T3186] inet_shutdown+0x6a/0x390 [ 1327.057490][ T3186] nbd_mark_nsock_dead+0x2e9/0x560 [ 1327.063129][ T3186] recv_work+0x1c2e/0x1d40 [ 1327.068061][ T3186] process_scheduled_works+0xb5d/0x1860 [ 1327.074127][ T3186] worker_thread+0xa53/0xfc0 [ 1327.079234][ T3186] kthread+0x389/0x470 [ 1327.083832][ T3186] ret_from_fork+0x514/0xb70 [ 1327.088939][ T3186] ret_from_fork_asm+0x1a/0x30 [ 1327.094222][ T3186] [ 1327.094222][ T3186] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1327.101874][ T3186] __mutex_lock+0x1a3/0x1550 [ 1327.107002][ T3186] nbd_queue_rq+0x37b/0x1100 [ 1327.112123][ T3186] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1327.118192][ T3186] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1327.125054][ T3186] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1327.131580][ T3186] blk_mq_run_hw_queue+0x348/0x4f0 [ 1327.137319][ T3186] blk_mq_dispatch_list+0xd16/0xe10 [ 1327.143060][ T3186] blk_mq_flush_plug_list+0x48d/0x570 [ 1327.149004][ T3186] __blk_flush_plug+0x3ed/0x4d0 [ 1327.154397][ T3186] __submit_bio+0x28d/0x580 [ 1327.159431][ T3186] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1327.165632][ T3186] block_read_full_folio+0x599/0x830 [ 1327.171439][ T3186] filemap_read_folio+0x137/0x3b0 [ 1327.176992][ T3186] do_read_cache_folio+0x358/0x590 [ 1327.182703][ T3186] read_part_sector+0xb6/0x2b0 [ 1327.187992][ T3186] adfspart_check_ICS+0xb1/0x960 [ 1327.193464][ T3186] bdev_disk_changed+0x817/0x1770 [ 1327.199009][ T3186] blkdev_get_whole+0x380/0x510 [ 1327.204389][ T3186] bdev_open+0x31e/0xd30 [ 1327.209157][ T3186] blkdev_open+0x470/0x610 [ 1327.214128][ T3186] do_dentry_open+0x822/0x13a0 [ 1327.219420][ T3186] vfs_open+0x3b/0x340 [ 1327.224009][ T3186] path_openat+0x2e08/0x3860 [ 1327.229126][ T3186] do_file_open+0x23e/0x4a0 [ 1327.234154][ T3186] do_sys_openat2+0x113/0x200 [ 1327.239352][ T3186] __x64_sys_openat+0x138/0x170 [ 1327.244810][ T3186] do_syscall_64+0x174/0x580 [ 1327.249927][ T3186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.256357][ T3186] [ 1327.256357][ T3186] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1327.264029][ T3186] __mutex_lock+0x1a3/0x1550 [ 1327.269159][ T3186] nbd_queue_rq+0xc6/0x1100 [ 1327.274198][ T3186] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1327.280269][ T3186] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1327.287123][ T3186] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1327.293627][ T3186] blk_mq_run_hw_queue+0x348/0x4f0 [ 1327.299268][ T3186] blk_mq_dispatch_list+0xd16/0xe10 [ 1327.304992][ T3186] blk_mq_flush_plug_list+0x48d/0x570 [ 1327.310889][ T3186] __blk_flush_plug+0x3ed/0x4d0 [ 1327.316266][ T3186] __submit_bio+0x28d/0x580 [ 1327.321301][ T3186] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1327.327456][ T3186] block_read_full_folio+0x599/0x830 [ 1327.333276][ T3186] filemap_read_folio+0x137/0x3b0 [ 1327.338827][ T3186] do_read_cache_folio+0x358/0x590 [ 1327.344557][ T3186] read_part_sector+0xb6/0x2b0 [ 1327.349852][ T3186] adfspart_check_ICS+0xb1/0x960 [ 1327.355324][ T3186] bdev_disk_changed+0x817/0x1770 [ 1327.360872][ T3186] blkdev_get_whole+0x380/0x510 [ 1327.366246][ T3186] bdev_open+0x31e/0xd30 [ 1327.371009][ T3186] blkdev_open+0x470/0x610 [ 1327.375951][ T3186] do_dentry_open+0x822/0x13a0 [ 1327.381237][ T3186] vfs_open+0x3b/0x340 [ 1327.385840][ T3186] path_openat+0x2e08/0x3860 [ 1327.390981][ T3186] do_file_open+0x23e/0x4a0 [ 1327.396011][ T3186] do_sys_openat2+0x113/0x200 [ 1327.401208][ T3186] __x64_sys_openat+0x138/0x170 [ 1327.406579][ T3186] do_syscall_64+0x174/0x580 [ 1327.411698][ T3186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.418111][ T3186] [ 1327.418111][ T3186] -> #3 (set->srcu){.+.+}-{0:0}: [ 1327.425236][ T3186] __synchronize_srcu+0xca/0x300 [ 1327.430706][ T3186] elevator_switch+0x1e8/0x7a0 [ 1327.435990][ T3186] elevator_change+0x2cc/0x450 [ 1327.441303][ T3186] elevator_set_default+0x36c/0x430 [ 1327.447563][ T3186] blk_register_queue+0x3e9/0x4e0 [ 1327.453150][ T3186] __add_disk+0x677/0xd50 [ 1327.458068][ T3186] add_disk_fwnode+0xfb/0x480 [ 1327.463279][ T3186] nbd_dev_add+0x72c/0xb50 [ 1327.468227][ T3186] nbd_init+0x168/0x1f0 [ 1327.472918][ T3186] do_one_initcall+0x250/0x870 [ 1327.478204][ T3186] do_initcall_level+0x104/0x190 [ 1327.483673][ T3186] do_initcalls+0x59/0xa0 [ 1327.488530][ T3186] kernel_init_freeable+0x2a6/0x3e0 [ 1327.494258][ T3186] kernel_init+0x1d/0x1d0 [ 1327.499116][ T3186] ret_from_fork+0x514/0xb70 [ 1327.504233][ T3186] ret_from_fork_asm+0x1a/0x30 [ 1327.509526][ T3186] [ 1327.509526][ T3186] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1327.517353][ T3186] __mutex_lock+0x1a3/0x1550 [ 1327.522474][ T3186] elevator_change+0x1b3/0x450 [ 1327.527986][ T3186] elevator_set_none+0xb5/0x140 [ 1327.533360][ T3186] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1327.539697][ T3186] nbd_start_device+0x17f/0xb10 [ 1327.545075][ T3186] nbd_genl_connect+0x165b/0x1cf0 [ 1327.550624][ T3186] genl_family_rcv_msg_doit+0x22a/0x330 [ 1327.556704][ T3186] genl_rcv_msg+0x61c/0x7a0 [ 1327.561729][ T3186] netlink_rcv_skb+0x232/0x4b0 [ 1327.567013][ T3186] genl_rcv+0x28/0x40 [ 1327.571518][ T3186] netlink_unicast+0x75c/0x8e0 [ 1327.576805][ T3186] netlink_sendmsg+0x813/0xb40 [ 1327.582091][ T3186] ____sys_sendmsg+0x972/0x9f0 [ 1327.587373][ T3186] ___sys_sendmsg+0x2a5/0x360 [ 1327.592572][ T3186] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1327.598029][ T3186] do_syscall_64+0x174/0x580 [ 1327.603318][ T3186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.609731][ T3186] [ 1327.609731][ T3186] -> #1 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 1327.618518][ T3186] blk_alloc_queue+0x546/0x680 [ 1327.623808][ T3186] __blk_mq_alloc_disk+0x197/0x390 [ 1327.629443][ T3186] nbd_dev_add+0x499/0xb50 [ 1327.634383][ T3186] nbd_init+0x168/0x1f0 [ 1327.639056][ T3186] do_one_initcall+0x250/0x870 [ 1327.644340][ T3186] do_initcall_level+0x104/0x190 [ 1327.649886][ T3186] do_initcalls+0x59/0xa0 [ 1327.654737][ T3186] kernel_init_freeable+0x2a6/0x3e0 [ 1327.660460][ T3186] kernel_init+0x1d/0x1d0 [ 1327.665311][ T3186] ret_from_fork+0x514/0xb70 [ 1327.670510][ T3186] ret_from_fork_asm+0x1a/0x30 [ 1327.675803][ T3186] [ 1327.675803][ T3186] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1327.683108][ T3186] __lock_acquire+0x15a5/0x2cf0 [ 1327.688490][ T3186] lock_acquire+0x106/0x350 [ 1327.693550][ T3186] fs_reclaim_acquire+0x71/0x100 [ 1327.699050][ T3186] prepare_alloc_pages+0x152/0x650 [ 1327.704720][ T3186] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1327.711076][ T3186] alloc_pages_mpol+0x235/0x490 [ 1327.716471][ T3186] alloc_pages_noprof+0xac/0x2a0 [ 1327.721943][ T3186] __pud_alloc+0x3a/0x460 [ 1327.726802][ T3186] handle_mm_fault+0x2b2c/0x3170 [ 1327.732263][ T3186] do_user_addr_fault+0x75b/0x1340 [ 1327.737899][ T3186] exc_page_fault+0x6a/0xc0 [ 1327.742937][ T3186] asm_exc_page_fault+0x26/0x30 [ 1327.748307][ T3186] rep_movs_alternative+0x30/0x90 [ 1327.753859][ T3186] _copy_from_user+0x7a/0xb0 [ 1327.759059][ T3186] vlan_ioctl_handler+0xbd/0x630 [ 1327.764523][ T3186] sock_ioctl+0x668/0x7f0 [ 1327.769403][ T3186] __se_sys_ioctl+0xfc/0x170 [ 1327.774656][ T3186] do_syscall_64+0x174/0x580 [ 1327.779815][ T3186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.786290][ T3186] [ 1327.786290][ T3186] other info that might help us debug this: [ 1327.786290][ T3186] [ 1327.796521][ T3186] Chain exists of: [ 1327.796521][ T3186] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 1327.796521][ T3186] [ 1327.809139][ T3186] Possible unsafe locking scenario: [ 1327.809139][ T3186] [ 1327.816675][ T3186] CPU0 CPU1 [ 1327.822037][ T3186] ---- ---- [ 1327.827413][ T3186] rlock(&mm->mmap_lock); [ 1327.831852][ T3186] lock(sk_lock-AF_INET6); [ 1327.838882][ T3186] lock(&mm->mmap_lock); [ 1327.845749][ T3186] lock(fs_reclaim); [ 1327.849761][ T3186] [ 1327.849761][ T3186] *** DEADLOCK *** [ 1327.849761][ T3186] [ 1327.857920][ T3186] 2 locks held by syz.0.7377/3186: [ 1327.863117][ T3186] #0: ffffffff8fda9b40 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x641/0x7f0 [ 1327.872538][ T3186] #1: ffff888031540338 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 1327.882470][ T3186] [ 1327.882470][ T3186] stack backtrace: [ 1327.888360][ T3186] CPU: 0 UID: 0 PID: 3186 Comm: syz.0.7377 Not tainted syzkaller #0 PREEMPT(full) [ 1327.888378][ T3186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1327.888388][ T3186] Call Trace: [ 1327.888397][ T3186] [ 1327.888407][ T3186] dump_stack_lvl+0xe8/0x150 [ 1327.888424][ T3186] print_circular_bug+0x2e1/0x300 [ 1327.888446][ T3186] check_noncircular+0x12e/0x150 [ 1327.888467][ T3186] __lock_acquire+0x15a5/0x2cf0 [ 1327.888485][ T3186] ? __lock_acquire+0x6b5/0x2cf0 [ 1327.888502][ T3186] ? __lock_acquire+0x6b5/0x2cf0 [ 1327.888518][ T3186] ? prepare_alloc_pages+0x152/0x650 [ 1327.888539][ T3186] lock_acquire+0x106/0x350 [ 1327.888554][ T3186] ? prepare_alloc_pages+0x152/0x650 [ 1327.888583][ T3186] ? unwind_next_frame+0xa6/0x2550 [ 1327.888603][ T3186] fs_reclaim_acquire+0x71/0x100 [ 1327.888623][ T3186] ? prepare_alloc_pages+0x152/0x650 [ 1327.888643][ T3186] prepare_alloc_pages+0x152/0x650 [ 1327.888667][ T3186] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1327.888684][ T3186] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1327.888707][ T3186] ? __pfx_policy_nodemask+0x10/0x10 [ 1327.888720][ T3186] ? is_bpf_text_address+0x26/0x2b0 [ 1327.888737][ T3186] ? kernel_text_address+0xa5/0xe0 [ 1327.888757][ T3186] ? __kernel_text_address+0xd/0x30 [ 1327.888778][ T3186] alloc_pages_mpol+0x235/0x490 [ 1327.888794][ T3186] alloc_pages_noprof+0xac/0x2a0 [ 1327.888809][ T3186] __pud_alloc+0x3a/0x460 [ 1327.888829][ T3186] handle_mm_fault+0x2b2c/0x3170 [ 1327.888849][ T3186] ? mt_find+0x186/0x630 [ 1327.888865][ T3186] ? __pfx_mt_find+0x10/0x10 [ 1327.888880][ T3186] ? handle_mm_fault+0xf1/0x3170 [ 1327.888900][ T3186] ? __pfx_handle_mm_fault+0x10/0x10 [ 1327.888922][ T3186] ? __lock_acquire+0x6b5/0x2cf0 [ 1327.888938][ T3186] ? lock_mm_and_find_vma+0xa7/0x340 [ 1327.888959][ T3186] do_user_addr_fault+0x75b/0x1340 [ 1327.888980][ T3186] exc_page_fault+0x6a/0xc0 [ 1327.888996][ T3186] asm_exc_page_fault+0x26/0x30 [ 1327.889011][ T3186] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 1327.889031][ T3186] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1327.889045][ T3186] RSP: 0018:ffffc900044dfc98 EFLAGS: 00050206 [ 1327.889058][ T3186] RAX: 00007ffffffff001 RBX: 0000000000000038 RCX: 0000000000000038 [ 1327.889069][ T3186] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffc900044dfd00 [ 1327.889079][ T3186] RBP: ffffc900044dfdb0 R08: ffffc900044dfd37 R09: 1ffff9200089bfa6 [ 1327.889090][ T3186] R10: dffffc0000000000 R11: fffff5200089bfa7 R12: dffffc0000000000 [ 1327.889101][ T3186] R13: ffffffff9a948240 R14: ffffc900044dfd00 R15: 0000200000000040 [ 1327.889120][ T3186] _copy_from_user+0x7a/0xb0 [ 1327.889138][ T3186] vlan_ioctl_handler+0xbd/0x630 [ 1327.889155][ T3186] ? __pfx___mutex_lock+0x10/0x10 [ 1327.889171][ T3186] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1327.889185][ T3186] ? do_futex+0x333/0x420 [ 1327.889206][ T3186] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1327.889221][ T3186] sock_ioctl+0x668/0x7f0 [ 1327.889241][ T3186] ? __pfx_sock_ioctl+0x10/0x10 [ 1327.889259][ T3186] ? __fget_files+0x2a/0x420 [ 1327.889275][ T3186] ? __fget_files+0x3a0/0x420 [ 1327.889292][ T3186] ? __fget_files+0x2a/0x420 [ 1327.889309][ T3186] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1327.889331][ T3186] ? __pfx_sock_ioctl+0x10/0x10 [ 1327.889348][ T3186] __se_sys_ioctl+0xfc/0x170 [ 1327.889369][ T3186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.889384][ T3186] do_syscall_64+0x174/0x580 [ 1327.889399][ T3186] ? trace_irq_disable+0x3b/0x140 [ 1327.889420][ T3186] ? clear_bhb_loop+0x40/0x90 [ 1327.889436][ T3186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.889451][ T3186] RIP: 0033:0x7fc81379ce59 [ 1327.889464][ T3186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1327.889476][ T3186] RSP: 002b:00007fc814685028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1327.889491][ T3186] RAX: ffffffffffffffda RBX: 00007fc813a15fa0 RCX: 00007fc81379ce59 [ 1327.889502][ T3186] RDX: 0000200000000040 RSI: 0000000000008982 RDI: 0000000000000004 [ 1327.889512][ T3186] RBP: 00007fc813832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1327.889521][ T3186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1327.889530][ T3186] R13: 00007fc813a16038 R14: 00007fc813a15fa0 R15: 00007ffe6bd9e638 [ 1327.889547][ T3186] [ 1328.453893][ T3192] ieee80211 phy115: Selected rate control algorithm 'minstrel_ht'