last executing test programs: 3m24.853807589s ago: executing program 3 (id=4449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x3, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x6}}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00', 0x0}) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20700, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x8203}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r2 = socket$rxrpc(0x21, 0x2, 0x2) recvfrom$rxrpc(r2, &(0x7f00000000c0), 0x0, 0x2, &(0x7f00000001c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x3, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x6}}]}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00'}) (async) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20700, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x8203}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) recvfrom$rxrpc(r2, &(0x7f00000000c0), 0x0, 0x2, &(0x7f00000001c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) (async) 3m24.412876814s ago: executing program 3 (id=4452): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002a80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}}], 0x20}}], 0x1, 0x400d1) r3 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0x10, 0x9345f607f9d277f5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000200)=@raw=[@generic={0x7b, 0xa, 0x0, 0xfff0, 0x40000000}, @generic={0xbf, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x56}, @generic={0x95}], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r3, &(0x7f00000002c0)="3f81c22525f7f6576323a6a26d4f998ca7dbb035ffcf0d62d68f5632f4f8911db97e5901ff8eb02e1f5cff17d30f", 0x2e) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x1, &(0x7f0000000000)=0x3ff, 0x4) sendmmsg$inet(r4, &(0x7f00000051c0)=[{{&(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000050c0)=[{&(0x7f0000000340)="67d628c20f6a631cc7", 0xffe3}], 0xc}}], 0x1, 0x4000004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000380)={0x0, 0x401, 0xa, [0x40b, 0x0, 0x3, 0x4, 0x0, 0x6, 0x6, 0x800, 0x0, 0xa]}, 0x1c) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x16}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x60}}, 0x20000000) 3m23.566001604s ago: executing program 3 (id=4455): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b15, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0xc, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000841}, 0x4000040) 3m23.161987411s ago: executing program 3 (id=4459): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000009040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) 3m22.513020313s ago: executing program 3 (id=4463): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) (async) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000f00511b48013d030100000000001c20000000000000bc26000000000000bf67200000000000070300000fff07006702000020000000360600000ee600f0bf050000000000000f370000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) 3m18.801880043s ago: executing program 3 (id=4477): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 3m3.02588416s ago: executing program 32 (id=4477): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 2m38.198013419s ago: executing program 4 (id=4637): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000006800b5610000000000000000020000000000000004000b00080010"], 0x24}}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x400) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4052) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r2, 0x6, 0xd, 0xffffffffffffffff, &(0x7f0000000240)) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r3, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40014}, 0x0) 2m37.713882128s ago: executing program 4 (id=4639): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)={0x14, 0x37, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a"], 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="120000008000"}) 2m37.15359443s ago: executing program 4 (id=4642): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="d60a00000400000061113400000000001800000000000000000000000000000095000000000000000fbe2394965dca3f095a5f44"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) 2m36.689662107s ago: executing program 4 (id=4643): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x7, [@private=0xa010100, @multicast1, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x20}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x33}, @broadcast]}, 0x2c) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)='%pS \x00'}, 0x20) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x67, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x50) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x4000}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)='%+9llu \x00'}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x9, 0x4, 0x7, 0x22290, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4, 0xe}, 0x50) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@o_path={&(0x7f0000000440)='./file0\x00', 0x0, 0x10, r0}, 0x18) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x1}], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0xb, 0x800, 0xfffffffc}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[r1, r2, r3, 0xffffffffffffffff, r4, 0xffffffffffffffff, r5, r6], &(0x7f0000000500)=[{0x4, 0x4, 0xf, 0x8}], 0x10, 0x4}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@delqdisc={0x70, 0x25, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0x10}, {0x10}, {0x4, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x34, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x4}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x3}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x7}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x979a}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x4ed}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x4}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8af6}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8e}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980), 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x1e, 0x0, 0x8, 0x5, 0x5040, r1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5, 0x6}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x20, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb18}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='GPL\x00', 0x7, 0xcf, &(0x7f0000000880)=""/207, 0x40f00, 0x28, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000009c0)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000a80)=[r5, r5, r9, r1], &(0x7f0000000ac0)=[{0x0, 0x5, 0xb, 0x6}, {0x3, 0x2, 0xc, 0xa}, {0x3, 0x2, 0x7, 0x9}], 0x10, 0xe85}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELFLOWTABLE={0x1c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x184, 0x0, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x4f, 0x6, "0d3c947b61f2f435612d8deb6e7a9cde3badf833593792a38f5c501f463d77c459fb793643a82086590767b7d93dd26366e207ae200a9dfb6899199cb8c95d6c1f633ccae4bda41ca22cd1"}, @NFTA_TABLE_USERDATA={0xbf, 0x6, "887ab3a2792907e6c049ae78d31030213f60da32b2cac9bf9f7425e26b192de8c87ac9aa861c0951505819c68424013a8d9d49f6b75ec7c185cdb7f0f9f334e1fae7dec5de67ae8462f3f726c0a140aced1cd8ad5cf52f2291997c18eb289017640a93386b43256bb05ad4dcbfbc96a01d8a34a024f76e72a3e97b261a1bb6abf894d11998e36d2882f5ac2dd5ebfe05839548daf0609756b04720ed1348519443e05e4f13da3a7e81e8ccc3cc127c15bd08334531102da0db17a6"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0x3f, 0x6, "d6eeb678e8a9c5dafa46e370739b1d7068842fc95a50453c6f150717b54b0b782be09b2b6922250d51b16c5f3a73981f886269941e12061e496f91"}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x28, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x210}, 0x1, 0x0, 0x0, 0x20008010}, 0x4004) getsockname$inet(r0, &(0x7f0000000ec0)={0x2, 0x0, @dev}, &(0x7f0000000f00)=0x10) ioctl$XFS_IOC_FSGEOMETRY(r7, 0x8100587e, &(0x7f0000000f40)) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000001040), r11) syz_genetlink_get_family_id$mptcp(&(0x7f0000001080), r11) r12 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001100), r11) sendmsg$SEG6_CMD_SETHMAC(r11, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x48dd879bb03e7ffc}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x48, r12, 0xd21df11a72d09fa1, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xfa}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6f}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xfa}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f0000001240)={0xa, 0x0, 0x0, @empty}, &(0x7f0000001280)=0x1c) r13 = accept(r0, &(0x7f00000012c0)=@l2tp={0x2, 0x0, @loopback}, &(0x7f0000001340)=0x80) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000001380)={0x6c, @multicast2, 0x4e21, 0x2, 'wrr\x00', 0x20, 0x1, 0x11}, 0x2c) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), r13) sendmsg$NL80211_CMD_SET_CQM(r13, &(0x7f00000015c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f0000001440)={0x12c, r14, 0x0, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffff4, 0x28}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3bb}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x6b4, 0x7fffffff, 0x4, 0x4, 0x8d, 0x5, 0x4]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x0, 0x122f, 0xd, 0x5, 0x4991]}]}, @NL80211_ATTR_CQM={0x28, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x5f, 0x3, 0x8, 0x4]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x9]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x818b}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xd9}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56}]}, @NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6a5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x8, 0x1, 0x4, 0x9]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8001}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x101}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4b}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xa}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x10}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40080}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001600)={'vcan0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000001680)={0x0, 0x0}) sendmsg$can_bcm(r13, &(0x7f00000017c0)={&(0x7f0000001640)={0x1d, r15}, 0x10, &(0x7f0000001780)={&(0x7f0000001700)={0x3, 0x0, 0x5, {r16, r17/1000+60000}, {}, {0x2, 0x1, 0x1}, 0x1, @can={{0x4, 0x1, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "c10008e1b95d749c"}}, 0x48}, 0x1, 0x0, 0x0, 0x4011}, 0x20000004) 2m36.102682587s ago: executing program 4 (id=4648): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xfc, r1, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x60, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52d2016}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd40006e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x16}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b7ad18d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc29db33}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7ee614a433ad4cde}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0xfc}}, 0x8000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_hsr\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:semanage_trans_lock_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:boot_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3b}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa0, r2, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x34}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_run_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:xconsole_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2f}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bridge\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x40) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000580)={0x0, 0x8, 0x8001, 0x7, 0x2, 0xe1}, &(0x7f00000005c0)=0x14) getsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(r3, 0x84, 0x84, &(0x7f0000000600)={r4, @in={{0x2, 0x4e23, @empty}}, 0x4e24}, &(0x7f00000006c0)=0x90) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000740), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000780)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000007c0)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r5, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x40000090) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r8, &(0x7f0000000940)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x200040d1}, 0x4004814) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000980)=[@in6={0xa, 0x4e24, 0x153e, @private1, 0x9}, @in={0x2, 0x4e24, @rand_addr=0x64010100}], 0x2c) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a00), r0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, r9, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x48000) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000d40), 0x8) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0x3, [@typedef={0xa, 0x0, 0x0, 0x8, 0x1}, @restrict={0xc, 0x0, 0x0, 0xb, 0x4}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x0, 0x2}, {0x6, 0x3}, {0x7, 0x1}, {0x1, 0x4}, {0xd, 0x4}, {0x1, 0x5}, {0x3, 0x1}]}, @float={0x1, 0x0, 0x0, 0x10, 0x4}, @typedef={0xe, 0x0, 0x0, 0x8, 0x2}, @typedef={0x1, 0x0, 0x0, 0x8, 0x1}, @struct={0xe, 0x3, 0x0, 0x4, 0x1, 0x4, [{0x5, 0x1, 0x401}, {0xf, 0x3, 0x2}, {0x8, 0x4, 0x6}]}]}, {0x0, [0x5f]}}, &(0x7f0000000c00)=""/252, 0xcb, 0xfc, 0x0, 0x5, 0x10000, @value=r10}, 0x28) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000d80), r10) ioctl$F2FS_IOC_MOVE_RANGE(r11, 0xc020f509, &(0x7f0000000dc0)={r10, 0x9, 0x3, 0x7}) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r12, 0x84, 0x4, &(0x7f0000000e00)=0x7, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ec0)={{r12, 0xffffffffffffffff}, &(0x7f0000000e40), &(0x7f0000000e80)='%pI4 \x00'}, 0x20) ioctl$XFS_IOC_FD_TO_HANDLE(r11, 0xc038586a, &(0x7f0000001000)={r13, &(0x7f0000000f00)='\x00', 0x0, &(0x7f0000000f40)={@_ha_fsid={[0xf, 0x1]}, {0xb, 0x8000, 0x6, 0xffffffffffffff96}}, 0x3, &(0x7f0000000f80)={@_ha_fsid}, &(0x7f0000000fc0)=0xcf}) sendmsg$AUDIT_ADD_RULE(r14, &(0x7f0000001540)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001080)={0x460, 0x3f3, 0x100, 0x70bd29, 0x25dfdbfc, {0x6, 0x0, 0x32, [0x3ff, 0xffffffff, 0xfffffffb, 0x8e2d, 0x80000001, 0xfed, 0xfffffffd, 0x1, 0x8, 0x919, 0x0, 0x800, 0x0, 0xfffffffd, 0x2, 0x4, 0x1, 0x80000000, 0xfffffff8, 0x0, 0x0, 0x80, 0x4, 0x0, 0xffffffff, 0x4, 0x400, 0x2, 0x0, 0x5, 0x6, 0x8001, 0x4, 0x8, 0xfffffff9, 0x1, 0x23a8, 0x2, 0x9, 0x7, 0x9, 0x2, 0x8, 0x800, 0x9e, 0x80000001, 0x9, 0x4, 0xe2, 0x7, 0x6dec, 0x400, 0x5, 0xedb4, 0x93b3, 0x29, 0x7f97, 0x8, 0x2, 0x2, 0x4c, 0xd91a, 0xfffffff8, 0xfffffff5], [0x0, 0xfffffff7, 0x225, 0x80, 0x9f81, 0x7fff, 0x6, 0x0, 0x7ff, 0x101, 0x3, 0x2fd6ac42, 0x3, 0x80000000, 0x71, 0x7, 0xa02, 0x2, 0x0, 0x3, 0x2, 0x1, 0x81, 0xd7, 0x7, 0x1, 0x4, 0x4, 0x0, 0x0, 0x8, 0x10001, 0x1, 0x6, 0x9, 0x0, 0x6, 0x8, 0x10001, 0x483dee9e, 0x2, 0x5, 0x5, 0xe, 0x6, 0x1000, 0x9, 0x3, 0x4, 0x80, 0x6, 0x0, 0x0, 0xeecf, 0x3, 0x8, 0x6, 0x9, 0x38000000, 0x5, 0xf, 0x7, 0x1, 0x200], [0x2de2, 0x7, 0x0, 0xc, 0x7056, 0x9, 0x3, 0x3, 0x7, 0x3ff, 0x1, 0x78, 0x1, 0x0, 0x0, 0x5, 0x5, 0x8638, 0x7, 0x20, 0x4, 0x6, 0xff, 0x0, 0xf4, 0x89e, 0x81, 0xa8, 0x7fe, 0x9, 0x9, 0x2, 0x81, 0x1, 0x4, 0x9, 0x100, 0x5, 0x2, 0x7, 0xac6e3ac, 0x7, 0x1, 0x9, 0xd7a, 0x1, 0x2, 0x5, 0x4, 0x400, 0x1, 0x3, 0x2, 0xfffff800, 0x1, 0x2, 0x7fff, 0x7fff, 0x42, 0x4, 0x8000, 0x7fffffff, 0x7, 0x9], [0x6, 0x6, 0xffffffff, 0x1000, 0xf1, 0x6a1, 0x3, 0x6, 0x9, 0x61c, 0x4, 0x9, 0x7ff, 0x0, 0x3, 0x5, 0x1ff, 0x8, 0x488, 0xfff, 0x5, 0x7, 0x800, 0xd, 0x37, 0xffffffd5, 0x1, 0x9, 0x9, 0x4ae, 0x400, 0x6, 0x0, 0xb, 0x6eff, 0x3, 0x7f, 0xa, 0x9, 0x57a, 0x5, 0x3, 0xfffffffb, 0x0, 0xcb, 0x8, 0x5, 0x9, 0x2, 0x400, 0x9, 0x1, 0x8, 0x8, 0x4, 0x38b, 0x4, 0x80000001, 0x6, 0x4f, 0x8, 0xfffffff7, 0x1, 0x8], 0x40, ['system_u:object_r:semanage_trans_lock_t:s0\x00', 'nfc\x00', ',\x00', '\x00', '%pI4 \x00', '):.\x00', '\xb9\x00']}, [""]}, 0x460}, 0x1, 0x0, 0x0, 0x4000804}, 0x4800) r15 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r15, 0x89e4, &(0x7f0000001580)={0x4f, "e828765fdae192ac256583772ccf78f9c345c19288f07446cb787dc0d0c19042685856607d0e651d7f67a749c44b6bd87b6e52daef270fe9676d86e147513a8f75a39285a919b5897c368d4b037c36bc1d87b9bf328ef0a80ab615117393f258d858c4bba024c7bb6684f9bd09a40551622e544df67b02c268aafe1849932a4a"}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000017c0)={&(0x7f00000016c0)={0xc4, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xf}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2fb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}]]}, 0xc4}, 0x1, 0x0, 0x0, 0x4040000}, 0x40070) 2m35.40647776s ago: executing program 4 (id=4651): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4020045}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r7, 0x25, 0x4, @void}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030027bd7000fddbdf251b00000008000300", @ANYRES32=r11, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)={0x4bc, 0x41, 0x1, 0x70bd25, 0x25dfdbfe, {0x1e}, [@nested={0x404, 0x40, 0x0, 0x1, [@nested={0x3c7, 0x15b, 0x0, 0x1, [@generic="8bc62638d8af94cccd4a2ca46c4a2ded2bf7ee6c50e39c7524acf3c3212a350c7d77e6c368ba9cc0484429164ad1af17c70ad901e8afaecabeaddf2dd88ed13e12ad318644b3c431bb7494ed23564b992b88bdc6e79edc067181a9470b95a497a5d9b83e5ade5bd4fd6576a57f4e22efe81d8bacfa6bab4b4fc3713736020d78b13e57e326a5915d6ce76176799112261ebb5dae99d0c85b1487ee5cf794714b33c057edc145857e02d00837daa95ded47b070e9d8b2407521b5a864578768baf05547667b902f5ac8dd78fe76a9d549c1095b03552c2be11bad9706ed51c9550b0e2543aa9995d8a99ed0fcb2c0e11fa6ae5d5605", @nested={0x10d, 0xf0, 0x0, 0x1, [@generic="7927f56d10ad01cd39a13a3b91d49f3a7d24a11a4cd16934ace2bcac40c0a2faca482924231b70c0ef832e0a51177b8a0ac2ad49722ba39bb16357376308d4b3a5d1d7af9496acfc0e1c39807440358f98886d15f28a3658b19e103792a7bb1ccb00e463c23b5db250ea91c3825cbce4bcb422904db9c0d2ef4c44ab70c27d0b20b67485b98fe99689f15dd0cbfa1bb1f8fe8df58e38a3da6ebbed4d8cabc59fda57307ee00a35fe79adece2bc5b46ef86", @generic="6348251c1a90d5b42b05805c1b46d26c22aeb20bd958a14a0b182a7456601506fb2379e1b6b8af4794250ca9cb03740be62029c0800f2e89414080291d51c0bac9eca2427541ced1f6c73092238cb71c", @nested={0x4, 0x160}, @nested={0x4, 0x164}]}, @typed={0x14, 0xf7, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @typed={0x4, 0x6d}, @nested={0xa6, 0x35, 0x0, 0x1, [@typed={0x8, 0x4e, 0x0, 0x0, @u32=0x3}, @nested={0x1c, 0xec, 0x0, 0x1, [@typed={0x8, 0x116, 0x0, 0x0, @pid}, @typed={0x8, 0x20, 0x0, 0x0, @fd}, @nested={0x4, 0x52}, @nested={0x4, 0x112}]}, @generic="be35403e9a7d3b137c37962f5e00f7a0d54bd917ce97e0bfb6c4212e46d190c9acdc8f8b7dde6211cd789d19409496fb26153a8481698b84d34af48044baca2afec7b969f2b240089c49a8d6d5a37c66de4b8ade66566ee1ebf431af4d3f7081fc96ea7228e4b8fbb9fc754be5fde3f46f446d40d4a551a4db5da15ed6d8"]}, @generic="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"]}, @typed={0x2e, 0xfc, 0x0, 0x0, @binary="321857d3a27da48ef75f624d37beb5a52aba779212b25427c4b82080cf7879e0dd1256e9f5002077d0e0"}, @typed={0x5, 0x148, 0x0, 0x0, @str='\x00'}]}, @generic="1ec2a61a4a879dda81a892146bd5e993706e3de923af3df383b070830118af8a6bf31f18d93fb0d1ea4fc3e7c2a770b5b9f447a4d378289bf0772b1d0f2b7d0f3056ca98d770d11e36e611ec742f6017bee782c0706b49505a10ccb36618da85f0fb61868d864fb3a1ec3b6c32139003d9e6e6eee858d3ad7df257b5d8d7357a69d444f18d483a879bd9a2fb0807", @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@local}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="850008002e000000760000150000002b0707e3fbe3366f5d0c008bb7000095000000000056"], 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x78, '\x00', 0x0, @sock_ops}, 0x94) r13 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r13, 0x89f2, &(0x7f0000000f80)={'gre0\x00', &(0x7f0000000fc0)={'sit0\x00', 0x0, 0xee3e0ec5e1c42de9, 0x7800, 0x0, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1b}, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x4c, 0x85, 0x3, 0x4, [{@multicast1, 0x3}, {@multicast2, 0x7}, {@remote, 0x3}, {@multicast2, 0x401}, {@local, 0x4}, {@private=0xa010101, 0x9}, {@multicast2, 0xfff}, {@loopback, 0x101}, {@multicast2, 0x49f6}]}, @ra={0x94, 0x4, 0x1}]}}}}}) socket$netlink(0x10, 0x3, 0x4) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r14, &(0x7f0000002fc0)=[{{&(0x7f0000000680)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x33}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}], 0x1, 0x24000045) shutdown(r14, 0x1) 2m21.377258704s ago: executing program 2 (id=4715): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000e80)={0x54, 0x2, 0x6, 0x5, 0x7, 0x0, {0x0, 0x0, 0x80}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044855}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000240)={@random="05c38c886b60", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "020008", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "a200fffffff5000000000000"}, {0x0, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x4c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001c00010428bd700002dcdf2507000000", @ANYRES32=r6, @ANYBLOB="021700030a000200aa"], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) 2m20.668848286s ago: executing program 2 (id=4717): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket(0x10, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000f46465767369bdbe6238341e057d6a657464650100690d86c4f690aa69c800000000000010", @ANYRES32=r0, @ANYRESHEX=r1], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r5) socket$netlink(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&'], 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x0, 0x9, 0x6a, &(0x7f00000002c0)=""/106, 0x41000, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0), &(0x7f0000000700), 0x10, 0x10}, 0x94) bind$l2tp6(r4, &(0x7f0000000100)={0xa, 0x0, 0x9, @local, 0xaa8}, 0x20) unshare(0x2c020400) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r10, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0xfffffffffffffc9e, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x19, 0x10, 0x8, 0x2, 0x0}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) recvmmsg(r5, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socket$inet(0x2, 0x3, 0x8d) socket$nl_generic(0x10, 0x3, 0x10) 2m20.358580742s ago: executing program 33 (id=4651): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4020045}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r7, 0x25, 0x4, @void}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030027bd7000fddbdf251b00000008000300", @ANYRES32=r11, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)={0x4bc, 0x41, 0x1, 0x70bd25, 0x25dfdbfe, {0x1e}, [@nested={0x404, 0x40, 0x0, 0x1, [@nested={0x3c7, 0x15b, 0x0, 0x1, [@generic="8bc62638d8af94cccd4a2ca46c4a2ded2bf7ee6c50e39c7524acf3c3212a350c7d77e6c368ba9cc0484429164ad1af17c70ad901e8afaecabeaddf2dd88ed13e12ad318644b3c431bb7494ed23564b992b88bdc6e79edc067181a9470b95a497a5d9b83e5ade5bd4fd6576a57f4e22efe81d8bacfa6bab4b4fc3713736020d78b13e57e326a5915d6ce76176799112261ebb5dae99d0c85b1487ee5cf794714b33c057edc145857e02d00837daa95ded47b070e9d8b2407521b5a864578768baf05547667b902f5ac8dd78fe76a9d549c1095b03552c2be11bad9706ed51c9550b0e2543aa9995d8a99ed0fcb2c0e11fa6ae5d5605", @nested={0x10d, 0xf0, 0x0, 0x1, [@generic="7927f56d10ad01cd39a13a3b91d49f3a7d24a11a4cd16934ace2bcac40c0a2faca482924231b70c0ef832e0a51177b8a0ac2ad49722ba39bb16357376308d4b3a5d1d7af9496acfc0e1c39807440358f98886d15f28a3658b19e103792a7bb1ccb00e463c23b5db250ea91c3825cbce4bcb422904db9c0d2ef4c44ab70c27d0b20b67485b98fe99689f15dd0cbfa1bb1f8fe8df58e38a3da6ebbed4d8cabc59fda57307ee00a35fe79adece2bc5b46ef86", @generic="6348251c1a90d5b42b05805c1b46d26c22aeb20bd958a14a0b182a7456601506fb2379e1b6b8af4794250ca9cb03740be62029c0800f2e89414080291d51c0bac9eca2427541ced1f6c73092238cb71c", @nested={0x4, 0x160}, @nested={0x4, 0x164}]}, @typed={0x14, 0xf7, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @typed={0x4, 0x6d}, @nested={0xa6, 0x35, 0x0, 0x1, [@typed={0x8, 0x4e, 0x0, 0x0, @u32=0x3}, @nested={0x1c, 0xec, 0x0, 0x1, [@typed={0x8, 0x116, 0x0, 0x0, @pid}, @typed={0x8, 0x20, 0x0, 0x0, @fd}, @nested={0x4, 0x52}, @nested={0x4, 0x112}]}, @generic="be35403e9a7d3b137c37962f5e00f7a0d54bd917ce97e0bfb6c4212e46d190c9acdc8f8b7dde6211cd789d19409496fb26153a8481698b84d34af48044baca2afec7b969f2b240089c49a8d6d5a37c66de4b8ade66566ee1ebf431af4d3f7081fc96ea7228e4b8fbb9fc754be5fde3f46f446d40d4a551a4db5da15ed6d8"]}, @generic="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"]}, @typed={0x2e, 0xfc, 0x0, 0x0, @binary="321857d3a27da48ef75f624d37beb5a52aba779212b25427c4b82080cf7879e0dd1256e9f5002077d0e0"}, @typed={0x5, 0x148, 0x0, 0x0, @str='\x00'}]}, @generic="1ec2a61a4a879dda81a892146bd5e993706e3de923af3df383b070830118af8a6bf31f18d93fb0d1ea4fc3e7c2a770b5b9f447a4d378289bf0772b1d0f2b7d0f3056ca98d770d11e36e611ec742f6017bee782c0706b49505a10ccb36618da85f0fb61868d864fb3a1ec3b6c32139003d9e6e6eee858d3ad7df257b5d8d7357a69d444f18d483a879bd9a2fb0807", @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@local}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="850008002e000000760000150000002b0707e3fbe3366f5d0c008bb7000095000000000056"], 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x78, '\x00', 0x0, @sock_ops}, 0x94) r13 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r13, 0x89f2, &(0x7f0000000f80)={'gre0\x00', &(0x7f0000000fc0)={'sit0\x00', 0x0, 0xee3e0ec5e1c42de9, 0x7800, 0x0, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1b}, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x4c, 0x85, 0x3, 0x4, [{@multicast1, 0x3}, {@multicast2, 0x7}, {@remote, 0x3}, {@multicast2, 0x401}, {@local, 0x4}, {@private=0xa010101, 0x9}, {@multicast2, 0xfff}, {@loopback, 0x101}, {@multicast2, 0x49f6}]}, @ra={0x94, 0x4, 0x1}]}}}}}) socket$netlink(0x10, 0x3, 0x4) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r14, &(0x7f0000002fc0)=[{{&(0x7f0000000680)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x33}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}], 0x1, 0x24000045) shutdown(r14, 0x1) 2m10.849924632s ago: executing program 2 (id=4732): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "0ac63141d8709ede", "0409e5944c2ce6e2c6bc25909acaf71d81ae64a3ea37dc2689301fbda31b595f", "55be309d", "9670cf67725864f4"}, 0x38) syz_emit_ethernet(0x3e, &(0x7f0000000a00)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, @local, {[@hopopts={0x2b}]}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000003f000501010000000000000001010000000000000c0001006f76732d64703000080002000000000008000900c8000000"], 0x34}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="5800000042000100020000000000000003010000c80000002e00010000112233445566778899aabb08004500001c00000000011100007f0000017f00000112341234000800000000040002800c0003800800178004000100"], 0x58}}, 0x0) 2m9.136034836s ago: executing program 2 (id=4735): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0x222f) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg1\x00', 0x4) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000380)={{r0, &(0x7f0000000080)='wg1\x00', 0x2000, &(0x7f00000000c0)={@align=0x1, {0x1, 0x1, 0xffffff16, 0x7}}, 0x6, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x6}, 0x2, &(0x7f0000000340)=[{0x2, 0xd6f, &(0x7f0000000180)='wg1\x00', &(0x7f00000001c0)="ebc50d15d10e6bc2a8e08689d535078bc997c2edfb1abdeb88e10772046d867e440c4de60b833662a75fd028f5e96b73f7ec06e1a2b81bf5c4d97fc061bd92aeb13898770248c206e1ecfb34116e2aa0c8511330a40adbd29536d1726a9383e3fde519051a04b6a13985044c8162533b2c3023fafa477aeb1a5a57c216fd3340a3dc404fde478e733eb6c3ff08f0881892c74e7e728879fbe074299234bbf294bb37723e9818f25ac6f9f194243bf4c9adde7640a8e2918c0ea2", 0xba}, {0x1, 0x1f, &(0x7f0000000280)='wg1\x00', &(0x7f00000002c0)="4b25c83a45612bf565b3aa8291769ad6acaab7eb8fb440d0a2c14cf8cf00de38a46062ad24f4aa507104f54a978a22b9c997ffc4e385d41c40428f800238e10426c6fb1774bb7ff2cc35ebb0348d3cc1e6", 0x51}]}) sendmsg$NFT_BATCH(r1, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x108, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0xc7, 0xc, "511f684750729eca422d695db7c2c9d50b7ec787c3f0836a6faad7c95a2346774d8d5d0d51c07c1d7ea2f35659f334a7a929b77d3fe705d327124db1331fcc799f6dfb3315bb3fea6e4115c889c6ff1f49e5d2d7d31f49fefe2474dc41fdd2519cd44fe1f65892e33df623872d969a7c15fd162a3f28b5a4fe2a3cf9d4d9faf6d44c4b709983e69f2f7cde9d680de7ddeaa1f4276012ed24d29ebabc1dff0e412cb45e2e3b5107a36a3d4c571f1e434dd637a34c2ec46c8abb8f7f7035e1f8ea564219"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWFLOWTABLE={0x74, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x700}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELRULE={0x12c, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x108, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x54, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xb8}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x5}, @NFTA_HASH_TYPE={0x8}, @NFTA_HASH_DREG={0x8}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0xa563}, @NFTA_HASH_TYPE={0x8}]}}}, {0x60, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_DYNSET_EXPRESSIONS={0x34, 0xa, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}]}}}, {0x30, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x2d0}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@generic={&(0x7f00000007c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x40, '\x00', 0x0, r1, 0x0, 0x4, 0x1}, 0x50) socket$unix(0x1, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000980)={'syztnl0\x00', &(0x7f00000008c0)={'gre0\x00', 0x0, 0x1, 0x8020, 0x1, 0x1ff, {{0x1b, 0x4, 0x1, 0x8, 0x6c, 0x67, 0x0, 0x8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @remote, {[@rr={0x7, 0x23, 0xfc, [@empty, @remote, @empty, @dev={0xac, 0x14, 0x14, 0x26}, @private=0xa010100, @multicast1, @empty, @empty]}, @end, @generic={0x86, 0xb, "23976a7d23c2711d5d"}, @cipso={0x86, 0x26, 0x3, [{0x1, 0x11, "7390c179f30fcfcc1a09afc256e179"}, {0x5, 0x5, "340e79"}, {0x1, 0xa, "86cc46a2d3608dc8"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000a40)={'gre0\x00', &(0x7f00000009c0)={'sit0\x00', r3, 0x40, 0x8000, 0x0, 0x4482, {{0x9, 0x4, 0x3, 0x9, 0x24, 0x66, 0x0, 0x10, 0x4, 0x0, @local, @remote, {[@generic={0x82, 0xd, "1c68f97f6f97b2010b681f"}, @noop]}}}}}) r4 = openat$cgroup_freezer_state(r1, &(0x7f0000000a80), 0x2, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000000ac0)={0x3, 0xd1, "22ab7dacda4206a26635d18632238921b0065f863f514da01e6755df630315737524b68635783cb248004d01fe13d37e99caaebf3164e0d0dd35dff5d57c4af53f682c85a608e270cf11e59593b116ee67e8323b53cbe7378557bb6c71b5104c662f345f99771074a41c66047ce2efc861888a70e55e0cc9d248644f501e034ac7eb1b5c127ff95010ad451b78516dcb4e044a664869bc76338eb132fc3b774ea708039a5929734cc005e56ef1d14c48c159d66bac212048eefc2578b61a4105cb935d2c31cbc188f652e851da33b156d7"}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000c00)=@security={'security\x00', 0xe, 0x4, 0x330, 0xffffffff, 0x1a0, 0x1a0, 0x1a0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, &(0x7f0000000bc0), {[{{@ip={@loopback, @private=0xa010101, 0x0, 0xffffff00, 'macvtap0\x00', 'wg1\x00', {}, {}, 0x89, 0x2, 0x40}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x4, 0x5, 0x2, 0x1, 0x4, 0x3], 0x5, 0x1}, {0x1, [0x2, 0x0, 0x1, 0x1, 0x0, 0x1], 0x3, 0x1}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1}, @multicast1, 0x1fffffffe, 0xff000000, '\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x73, 0x2, 0x16}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 0x0, 0x6, [0x3e, 0x33, 0x28, 0x1, 0x1, 0x22, 0x29, 0x26, 0x39, 0x11, 0x11, 0x26, 0x34, 0x21, 0xc, 0x3], 0x2, 0x0, 0xcb55}}}, {{@ip={@rand_addr=0x64010101, @multicast1, 0xff, 0xffffff00, 'bridge_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x2, 0x2, 0x20}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x5}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x8, 0xe, [0x5, 0x7, 0x31, 0x2b, 0x7, 0x24, 0xa, 0x35, 0x21, 0x1d, 0x2a, 0x2b, 0x6, 0x1b, 0xb, 0x3c], 0x2, 0x5, 0x8000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) socketpair(0x1b, 0x3, 0x223a, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x64, 0xb, 0x6, 0xd244dc9335969443, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_ADT={0x50, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xb0d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5987}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x810) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001140)='./cgroup/syz0\x00', 0x1ff) socket$rds(0x15, 0x5, 0x0) sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x14, 0x1, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x20004840) bind$alg(r6, &(0x7f0000001280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x58) getsockopt(r6, 0x6, 0x5, &(0x7f0000001300)=""/70, &(0x7f0000001380)=0x46) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000013c0)={'batadv_slave_0\x00', 0x0}) connect$can_j1939(r1, &(0x7f0000001400)={0x1d, r7, 0x0, {0x0, 0xf0, 0x4}, 0xfe}, 0x18) listen(r6, 0x49b4) socket(0x10, 0x80000, 0x6ad7) accept$unix(r5, 0x0, &(0x7f0000001440)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1114}]}, 0x34}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r9, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000015c0)=""/218, 0xda}, {&(0x7f00000016c0)=""/94, 0x5e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/136, 0x88}], 0x4, &(0x7f0000002840)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002880), 0x6e, &(0x7f0000003980)=[{&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/40, 0x28}, {&(0x7f0000003940)=""/14, 0xe}], 0x3, &(0x7f00000039c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}], 0x2, 0x20, &(0x7f0000003ac0)) socket$kcm(0x29, 0x2, 0x0) 2m7.715969471s ago: executing program 2 (id=4739): socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x40000000000004, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000002b40)='cubic', 0x4) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000002b40)='cubic', 0x4) setsockopt$inet6_int(r3, 0x29, 0x38, &(0x7f0000000040)=0x4, 0x4) (async) setsockopt$inet6_int(r3, 0x29, 0x38, &(0x7f0000000040)=0x4, 0x4) close(r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) (async) close(r7) socket$unix(0x1, 0x5, 0x0) (async) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="b152000031ab58cb410e9ff177fc18b7ca21e92831ee0817b9b56c0e7f4ce49485724ef5bc85ea438548", @ANYRES16=r11, @ANYBLOB="050000000000ffdbdf250600000008000300", @ANYRES32=r12, @ANYBLOB="08000500060000000800178004000500"], 0x2c}, 0x1, 0x0, 0x0, 0x408d1}, 0x40800) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="b152000031ab58cb410e9ff177fc18b7ca21e92831ee0817b9b56c0e7f4ce49485724ef5bc85ea438548", @ANYRES16=r11, @ANYBLOB="050000000000ffdbdf250600000008000300", @ANYRES32=r12, @ANYBLOB="08000500060000000800178004000500"], 0x2c}, 0x1, 0x0, 0x0, 0x408d1}, 0x40800) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfff, 0x10001, 0x5, 0x5, 0xfffffdff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xfffd, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfff, 0x10001, 0x5, 0x5, 0xfffffdff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xfffd, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r14 = epoll_create1(0x0) poll(&(0x7f0000000a80)=[{r14, 0x2021}], 0x1, 0xdb4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) 2m5.089871867s ago: executing program 2 (id=4744): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write(r0, &(0x7f00000001c0)="34b07b", 0x3) (async) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xfffffffe, 0x7, 0x3, 0xffffffff, 0x2}}]}]}}}]}, 0x70}}, 0x0) (async) sendto$packet(r1, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}, 0xa) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) (async) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) (async) setsockopt$inet_tcp_int(r7, 0x6, 0x8, &(0x7f0000000140)=0xfb78, 0x4) (async) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000080)) (async) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r8, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x11}, 0xa) (async) shutdown(r6, 0x1) (async) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x4008001}, 0x4008090) 1m49.553496068s ago: executing program 34 (id=4744): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write(r0, &(0x7f00000001c0)="34b07b", 0x3) (async) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xfffffffe, 0x7, 0x3, 0xffffffff, 0x2}}]}]}}}]}, 0x70}}, 0x0) (async) sendto$packet(r1, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}, 0xa) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) (async) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) (async) setsockopt$inet_tcp_int(r7, 0x6, 0x8, &(0x7f0000000140)=0xfb78, 0x4) (async) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000080)) (async) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r8, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x11}, 0xa) (async) shutdown(r6, 0x1) (async) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x4008001}, 0x4008090) 13.721382628s ago: executing program 5 (id=5057): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x4f, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$XFS_IOC_FSGROWFSLOG(r5, 0x4008586f, &(0x7f0000000180)={0x1000000, 0x7}) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff000000000200002008000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000000000000800000006000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd02000000000000000000000000000002"], 0x23c}, 0x1, 0x0, 0x0, 0x60004000}, 0x10) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10440}}}}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x23, 0x6, 0x4) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x48, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x1c, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'lo\x00'}, @TCA_FW_ACT={0x4}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@newtfilter={0x48, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x1c, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'lo\x00'}, @TCA_FW_ACT={0x4}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b00)=@deltfilter={0x48, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x1c, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'lo\x00'}, @TCA_FW_ACT={0x4}]}}]}, 0x48}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r10, 0x0, 0xf3a, 0x0) unshare(0x2a060400) tee(r9, r12, 0x8f5, 0xb) ioctl$sock_inet_udp_SIOCINQ(r9, 0x541b, 0x0) 11.032181401s ago: executing program 5 (id=5062): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xffee, 0xffe0}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) 9.909498252s ago: executing program 5 (id=5066): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000160007012cbd7000fedbdf25137c00000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x20048891}, 0x8010) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x5}]}}}]}, 0x3c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="cc838a406751011367eae3d0273fdc6004b24caa7e1c9d7f19701413f3a44fda4fd5904e749186c5fb4361705c938cf964cfb6b203d2e08f014ea964e22d2cff54b2cd72c58a783a2f316a3b49c112446fbfda069e98add79809aec6f52469a025d245ee2782e4496d175cb39a4628592abc3bb4656bee4cac6f03a40b7001d6cd444bba5e88846b46cc368e6181721b301ea33bec8aa77a36d0212fb56ca0735fa330c2cf33d3ccec641b34cb15409531f173eb47f3a0cd7dc3c52230ad5ae909152a74dfa748", 0xc7}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000024c0)="5593d2daf11bb9c121979f92599f2eee2a29d9dfb5f134de3a44cb080b1ffbb54bf3579ccff18e5ff25b70ddcbd3baf05d9e7fab403fe800d41780cea41f3096b156cdda632a6bbae1d2d4191c94ee062d12b4f4a120560dc3cf7e440cb4899da545205fd253ecbd1bd4c5dd038856640048d78f1bca0da07aa19e2d437dd9aa17c30c0365c82c78c540f2b6f1d0e2d91ae6847270f62313bd4fed165c95295bba1ca2c013efca6bebee4ce2de2b6a5fc380b4916c53badeb48705e0fb018e0ac5b85b0df394d720c23b202c8489ca1ea86bf1373916dbef5cd71edb0bc0d844b1fb27a8df1e1759418e3eed2f3f4e058cb980c13110091fee940a5dce31b28887244d82f9eb712c0e94d6661934ae0bdf5a03f11b1ac80208acc785ada0f2db3cce3c6b5c1f843bf0e3d484e1670266e94ec35c37441ef90c98812d0637dfd77c81fd89d4d7d4f6637dae53987113563f0c08ec17da533cd3390a3dab9f443f5a32e6fa2c30cfffae639d4419ebcaf7bfd0a27d3175685f5006cec7175da15378f7daca65e4682ee9da50e5ca51b7e3d63a86bd588ab4811f27beddd4394aba79bc1befc5a3b23e32053aac76eb7ad15550c14dcadf7e87382289c5a7892391b84d19905de09f41c2df1eb8fc5066e320034629502e90d82e0adb81e3377d0be44da59dc4009bf75e11eefc74bf294d2592e535fb6db86e489549254c2c42c52b84a6c719b1e3306b3737c37515cffcda873441b9d71a11f35391d9f54d98f3d63d149dcb443e3f1684a38050044c9aaf14502593b19a7eb375cc6763614fe9816b98b6dbfde72a2b7f5384b8041bff7159e76ffbc89e777c4aef83162ca269ea11e6fa08d19b74d472cb63dcd98d6f6933119bec610f0a447a6ba96415a016eb176d716ebfd45abbc1e49a9ad24dfef2f8a31b0a4de43c4669a9f505fae86839a314eae8c3449554f341da72c24078cd2eb1bc101bb0760eb0494760ff88201676af94a1b79c995bfd008c4efeed23da8fdd345a6a8019e2610d6136d6fb7da62d07abf27ca6551820c0cd52c61198f269c01594e71459474b274a919e1be469c753f825c5d9a45d94782750b78b0645df16121ad38f98b8701833c5032094b4369428d591f7dd4d14801662c06c415ec7744eb3a6339b17345faf412948fd96d7bc3043ab0adc0df263fba6b166dba3022dcac7e41cd6bf35dc22b66b8ca223bedce15b6df4ad0c52b109b7c43782c3ed020214d1d4a3219bf87904cfb5ca3da59f6dba719cffee18ff4d11667b8a65ae74a4b68db8e0f33ceeead279aac980f08177f2de4347b9f4bd41671850277442902bc43bff18cf5e30ec79b6029aaab328ddede01b5fd9abf563332bf748f1b9f3e00a0916eda02ac518eaef52661bb55a4219c39969f43347d7b3edb9d1b72dea5f36a6fec57dd7fe95069c808b540d5886b94626465e82f89d350c7070352b151dd8a34d11c6e75a1fb1744843535f6f73f2b9155278d62914842be64198fb60e457656926e72996634de0cb508e0364394e4f9e91ac0531d46e6b766e907b0db89dfc1953715617af28e976915f49ca467caa15880ef6f951378567672958ff96b9757ee8009e2ca65650b70dbfd88bcd465310ea28c51c487d506964de8ecb331f55f05074ba8062ae6050fdf5fe654fa19eb7e46047c1a6efed781b23685f7d409156c092a978d46e09813b385b3c99fd5fb0d38a9ac20dc607266ccebc4e143efcea5fda45555a78d441e25f5f2a62a0df64d2ae84c55feb37ee445fbed0648ffdffdfd39d284cd19b55f375cb17d3227b3c52b9beb2705747154db905ca69a269bc35f7a8c9589dbe2d86e7e4c0b7d4743da80fc774a81e9f9823d33093cade72d3f7b485375fea7fa88d6e9fa75261fdbb8147a8f6e8295f78beba4e19f82162a8e5ddd44fc3738950e036e373327d76a077e8e97e6867b3efbc71765ce51a0b42cdf9262abe55581a1c9ebd81d428b053cbfd80b48f66c29116d534263e7479ee271f88745d72c64eff3b9bbe0fde2a31fd42d8b62613153bf30023c82c33be75771a3c6a78127b8f9cda0049baeb353f631243b23098a68c44283b5d506ad103d16f8314c6dc7bd264126e2a0986dbfcd878d99266c0f45ea691d303e1ef59c0580e9d6e97d996016e34e035c243d345b9d490df8f6421c2ca3606f7dc0e22930bb1eaab2b275ae1bf00e2e3b749bdc996e1ed0cfc8395061f3fdbc5cac0eb62ddd3d4e05e987005b3d82d73ad8d77dcc82afb5ceb4ca45160bb59feddf95fc33959463dfc85aaeacccc13d5d23f48a90767d57284d0e3fa850b4c004bd6ca88675e420930dcb0f7431be0e94f9e2f5ebaa3223aaeea3b99b218fea2d83a91d73bf493e4026f3213201a396e748d120b9b2c515de3c9e835de7b48535b0cf87da3545a87de108aa79b3dca6944d74846836e138ea1fd7ae3b9f5d9970230691d3f013fea098050b34c1cb408a4a37abc2b968bcc921646e0b1f2dda2495e762b7193f83b41c611f153a5f622a57fa73d20a0cf445d8552b125d6935e76549993d8624c644d99e65cfb25729ff53bbef61ea673f772334dc6b07b4ff722b4341da4db364784d0c577657e6a3d65aa25bd11619834cc9586b46471a89203ab8c56af6653482d86a297c62cd32c215835b27cf80bb794439af7a4d2967c773cfc7da1b0302e0f43fd6ae269cb03d5c01373972fd3eb27cf75d3ca74afaac7c17226133fdb81252d93c90852bf5003d6f6131fe3ea7b0e62e8f0cd6f34328fd736f7e96f7b14d06d19c86bc1ee7bd1d2ac70658cd2c3ef92ff46181199af835019163fa998d2e3fa1896817776aebfb383351bc0b5ce50cb1267898043f27c1e92a1dcb40ae93e5865451b4cb0ed81738f736e49491f4f570105f1776d225663f41e585c0a4756d914ef8c25204e49ab93fca61c157cfdf3262a853683c309c73f8f65a1ba3ad4ee05b2d81fa5587dfdb00d957e6e9c08782e6c0839824b2dbf6a7eccafd02f0e6296f4e845a76bd5d6f0462b3f45e3ac4e496ccdcd24af3b44ec416367a437deef2559f886b54ec53406925e8ebc2db2a4491daabe2f96c4c123f0476c10318398d528abf8e75c373e9e3a510e9bc6cec97ff38462509d4a6399306c6520e700b94cb5bde0440671d8813d5ebee200e4b4679fd4b8c23a519c5a14cfa896039f9f894262f9fbe84eb3afd4ba62e446bc1f93caae7f194fe9518bbe2aaea5b83d82df3381c3efb7808e292dce2d11eeb2268e43c064a00cf97af132c7c9d1282fd9fe9d42bce0b2fa9faa788c6bebac45d0bccee465bd237eb3c9d3fee6061efd4da772473a3f276784836b26f16d4c511aceb7a4b6c1efb7f32921a08ebaaf621a6a8211ff5c27cad4fc8a1e9cf32eb56013bbcb7ca41dbf6f6ac8a977a4937d93ab4592406d19eaf93b0ae8d75e166a2cb5d6d5477dd702f951aa6e94d641fd781caf9b14fb9541ea7f3552dfa0dcc6094d3999538bea07c4954da0a556c94d70614620578f72f680151628781cb52b9bb0f187535cbb436e5522ee8fedf143e21e4a09a0bc97fb6410f244a293bed2157254b611a4c3aac1dac21495e309744fe99c1c6ed01d25e065aaa1142ab41a2673ada2b5f57f8fb785139d4a41e15bcceffa04afdf72dea6ea56bf9a8cc0ba2f2017afdc6b640214b5ea21253ecfa65d673d455b147dd702e8e493b4b457ea10b530f38a2dbc46f926601f31daaba5b660e90354a343624667986beaad0906641f5cf97f22b28bbff354e728e34a08c950a0e1ebcbeec8536c11e5bef3a186a3be317c150476e02a89a0aba211330570de8ef57aa0fbd5b307e728dc31dfb92ce425e81d602954ab684be4220fae3e5dfe367f40be60c1f80bc08de688031797dc2f134406cab7e2c1787dcdaffba451f4a9773da222f04900b3b1aabca0968c00c908383780591f55575f54d31656a73d1d4d9e6ddc0148fc2cd0b05cb1d3f3436dfe6d0b1a81be10d110c2fc2b6d67db308ee7bc675710f4e4d17f4a2696c36cc3b2c6ea300e39bbbaff559d2c6044728210aac4ba18b1e86f4c066bfbee3a2816bd5faafdce62c01292396cf2d9ca4336f3e242ad4a6f27f48d301f8dd233f9214ea4609dbd53792f613c12dde305026218da311c5235377fc0d3d5291bc49734059f0f49a191266af7ebddf1ef2e15056bbb3d6bfb6496af9119ef634dd3278244b76957effed5a776e28c94f924aef62444452bfd513687e7d851c40f5219c9b2245e7ed02cc1b43831790597c3dc6f6f805ef1c3f2eca94fdce419275a27caf1f514a51c42f46e4887ebba18b33c9bdd04cd786bd954a736ff309a20a3e1d771d88975a197959dd12779aa22343963c58de0019b96d539492d7728c61e586284eaa200d5ac32e273bf718e09b50d75636e5ee5951f2cff5c92147041d2982994b56d6f7bf273fd053010df4ad7d645858d7ccfdd330d6227bced87184d77e6ece961d264d082c53ecf127a59c22dfdd02d163f43a8aa39c9edfdcd0d041db13e843f3430071f59a4ffa27b878302dd8f1a1ce64c8a76ba1eac42c701a45f08909877836521c4b5e06cc59519adbd2bd7e8facc9e5697409124ec93f91880a87547f7d0eaf0a61eafcb23598e5ff2fbb57d1226d13c3ea6732cd300a855f5588574f73f1c4c93984c610fe98a05e81c4491f0ea5823291d4b7967a5e6fdd824b93e2d2224d32439ca46ae6ef81ed9611730394b6dac5823835a2b9141ff634ca7cc5797e35d0e5306f9281c79bbc7d0a0260d924ad660e48d305f081b097e16ae9befb705ea768b5330a96a177ef0e6c701916fb7771e44ae62e1e3d28e45d4b290a8fe8eee051d2524e75aeef37e05cda951b9e259b5544589f6a93dc685e0c4bb5d2579fe62a98f67195d117f862d5c023e57e519776c5f10fa90b6af99bf3c3918ea480c9d08f38b9e1c9144db53ead346c2f38d1552e600f998c913ce0bd03885b7201885f87da401cf98fb7a9982a6634906227067f185f53e1e2694f89ac4c7b4b8f8a73691501dc22ebe5b6014c2dff3a4b2fc24b23cc45dbcb2882cd3aee9e0e92ecba000d70e60ca95f3fd69fe692b735a5a0c111c0abec111e88c8575ae09772e619054fc60c3551e6ed3cd06be1b89d0065e30ea135076a085b8c6b4cb2ad43e45a96b79ea78bb57a55c1b7c135a905992ad8b83cbca0df95561be517732074d14ef6c270c04180cf10b629392439464274f4b9c4cae78475603f06fa92766153c2914b717ff5e4b3be94e22a1f344a5fdbf3ca3d75b30aaa81be2c971b94959167d9c6fef45688cf51f4db909f61e556fc5c5e112b66a092ac83c4ca5ab9376535421f97a535af6119f38e677c85fcb514fe67b710ed4b5adb81dc2da9451267b156694017cc120032412b6aa133e2eb3c6e2d4181e678dc6ecf98c4645146968dc9078d1dd0b7ade5f14cd7b8736806e5dc4ec6a07794a3d694460cf541b19790ad83475991eb30c9d0a979c8046b6d4d4bd27fd09184a77f348c545da681c6953bf40d49d555fbdca4ab79f244dfe5b9023d31ed175947c5f9a489e372eb5935cf33af2c3e8e75a6d92f79ce4de5f70974a98b94d037c5899d8b92a76a0a3b72e4873b9c5694018f62afd02f4fdc7f9ca5974bf3209dc61e9853edaa6ddba3151efe60deed92090701d74392930679ec5df7e53c2d3ae60a7b0f6b797e4237394e9ad3c01a9e90ef7728d06880548cb98dd17a2b819e0d7d55b960bf1c7c174e0b600d8838d5be309bb", 0x1000}, {&(0x7f00000001c0)="b72c5be03f5e2ba1f220db37a75280f0aa6243e1b1bf404f39d22abb4fdc8a109af1d985ae", 0x25}, {&(0x7f0000000300)="9ba0bc78ec01c5bc0302f4e3c010a8aad6768c806b8fce7393bfb2aca762d14c5579edec6625daea2bc773ab8bb627b8e98d64411b8f849d9150de8b917833978852199e5c683133e8666892e55e0374119289c2a478fef8b4d4d173dfe3410114123ff0c594aa5b0e6b7150269f96d5b447a701e8195bc33066eef9dfabf628d732437065", 0x85}], 0x5}, 0x0) socket$inet(0x2, 0x2, 0x0) (async) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f00000000c0)={'pim6reg\x00', 0x6ef5}) connect$802154_dgram(r3, &(0x7f0000000180)={0x24, @none={0x0, 0xffff}}, 0x14) sendmmsg(r3, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x200001}, 0x50) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) (async) recvfrom$inet6(r4, &(0x7f0000000640)=""/248, 0xffffff1f, 0x40010002, 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) 9.353590369s ago: executing program 1 (id=5067): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, &(0x7f0000000200)=ANY=[@ANYRES8=r0], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00}, 0x94) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000140)="ed", 0x1, 0x20000000, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) (async) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002002000ffff000005"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002002000ffff000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x9, r3}, 0x38) write(r2, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0800030001000000", 0x34) r4 = socket$inet6(0xa, 0x2, 0x0) close(r3) (async) close(r3) socket$l2tp6(0xa, 0x2, 0x73) (async) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x3a, &(0x7f0000000040)=0x2005, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0xe26, @local}, 0x10) (async) connect$inet(r7, &(0x7f0000000080)={0x2, 0xe26, @local}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) (async) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r7, 0x0, 0x48a, &(0x7f00000003c0)={0x5, 0x1, 0x1ff}, 0xc) (async) setsockopt$IP_VS_SO_SET_TIMEOUT(r7, 0x0, 0x48a, &(0x7f00000003c0)={0x5, 0x1, 0x1ff}, 0xc) sendmsg$inet6(r5, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e20, 0x80000, @empty, 0x8}, 0xffffffe0, 0x0}, 0x3400c8d4) socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x2c060000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r6) 9.352260239s ago: executing program 6 (id=5068): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0xb00, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x1, 0x8, @l2={'ib', 0x3a, 'vxcan1\x00'}}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x80000}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0xb9e, 0x7}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x14}, 0xe2}}, 0x800, 0x1, 0xdf, 0x7, 0x73e2}, &(0x7f0000000340)=0x98) r5 = accept4$x25(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x12, 0x80800) sendto$x25(r5, &(0x7f0000000400)="17dbaeb9eeebbc526fda0cbea2853114c3fef13c294c357b8cffe1bc0b320a3049125c2d3d22a6871966be3121efdab47e8d", 0x32, 0x10, &(0x7f0000000440), 0x12) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001580)={0x0, r0}, 0x8) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x4, [@fwd={0x6}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x1, 0x3}, {0x5, 0x4}, {0xc}, {0x5}, {0x5}, {0xc, 0x4}]}, @union={0x1, 0x4, 0x0, 0x5, 0x0, 0x7ff, [{0xc, 0x5, 0x4}, {0x5, 0x2, 0xffffffff}, {0xe, 0x1, 0x5}, {0x10000, 0x5, 0x9}]}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000540)=""/4096, 0xa0, 0x1000, 0x0, 0x21d, 0x10000, @value=r6}, 0x28) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000015c0)={0xf800, 0x4, 0x6, 0x1, r3}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000001600)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0x1, 0x3, [@rand_addr=0x64010100, @multicast1, @broadcast]}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001800)={&(0x7f0000001640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xaf, 0xaf, 0x9, [@volatile={0x4, 0x0, 0x0, 0x9, 0x3}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x5e, 0x0, 0x7c, 0x3}, @float={0x3, 0x0, 0x0, 0x10, 0x2}, @ptr={0x7}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x2}, @datasec={0x9, 0x8, 0x0, 0xf, 0x3, [{0x4, 0x3, 0x4}, {0x4, 0x7fffffff, 0x9}, {0x4, 0x0, 0x7}, {0x2, 0x10001, 0x9}, {0x2, 0x8, 0x5}, {0x0, 0x1, 0x7e}, {0x3, 0x4, 0x2}, {0x4, 0x3, 0xfffff000}], "b3d8b6"}]}, {0x0, [0x426dda1d4e081641, 0x5f, 0x0, 0x30, 0x30, 0x2e, 0x61]}}, &(0x7f0000001740)=""/140, 0xd1, 0x8c, 0x0, 0x40}, 0x28) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001940)={'erspan0\x00', &(0x7f00000018c0)={'syztnl2\x00', 0x0, 0x80, 0x700, 0x0, 0x5, {{0x10, 0x4, 0x1, 0x5, 0x40, 0x65, 0x0, 0x9, 0x2f, 0x0, @local, @multicast1, {[@generic={0x94, 0x10, "a9b642a0a4c43c2333528782c682"}, @ra={0x94, 0x4}, @timestamp={0x44, 0x18, 0x98, 0x0, 0x6, [0x1, 0xd, 0x7, 0x3, 0x2b69f282]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001a00)={'syztnl0\x00', &(0x7f0000001980)={'ip6tnl0\x00', 0x0, 0x4, 0x7f, 0xf, 0x9, 0x71, @mcast2, @mcast1, 0x8000, 0x80, 0x0, 0xe}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000001a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001a80)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000001ac0)={@remote, 0x0}, &(0x7f0000001b00)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000001c40)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b40)={0xb8, r9, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4041}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000001c80)={r4, @in6={{0xa, 0x4e22, 0xeac9, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x5}}, 0x4, 0xe2d, 0x5, 0xb4, 0x10, 0x4, 0x1d}, &(0x7f0000001d40)=0x9c) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000001dc0), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0xc90b8762d0253800}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x34, r14, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001ec0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, r7, 0x3, 0x0, 0x4}, 0x50) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001f40)={0x1d, r11}, 0x10) socket$key(0xf, 0x3, 0x2) ioctl$NILFS_IOCTL_GET_SUSTAT(r8, 0x80306e85, &(0x7f0000001f80)) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x14, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 8.762260177s ago: executing program 7 (id=5070): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x2010, r0, 0x697f6000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x4000}], 0x1, 0x13c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005d7000/0x4000)=nil, 0x4000, 0x3, 0x28011, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000001, 0x11, r1, 0x1000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d6000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x2010, r0, 0x697f6000) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x4000}], 0x1, 0x13c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f00005d7000/0x4000)=nil, 0x4000, 0x3, 0x28011, r1, 0x0) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000001, 0x11, r1, 0x1000) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) mmap(&(0x7f00005d6000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r2, 0x0) (async) 8.387006794s ago: executing program 6 (id=5071): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x19, &(0x7f0000000700)=ANY=[@ANYBLOB="180000008b00000000000000ffffffff18110000", @ANYRES32=r0, @ANYBLOB="00f1000000000000b702000014000000b7030000000000008500000086000000bf09000000000000550901000000000095000000000000002d0a0600000000002500ffffdf070ae91801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050008008500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xb, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41000, 0x24}, 0x94) 8.033813181s ago: executing program 5 (id=5072): r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) unshare(0x22020400) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000640)={0x1a0, 0x1403, 0x200, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvtap0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'rose0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x80}, 0x40801) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r2 = socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r4, 0x0, 0xc0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000000900)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x83, &(0x7f0000000480)={0x0, 0x2}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r8, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r9 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex, r9, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) r10 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e000000130005000000000000000000030107fe100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x2, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x4008010) 7.647436542s ago: executing program 6 (id=5074): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>\x00\x00\x00B\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000160000000000000000000000000600000000000000000000f8e01b3f59e69fded8d685b8acd651037c485833ce6056537313ed94df7c6690b3f84e5602889036473119058f27deb90d4a133929e4a5b4f5ea454001ddd0dd979613c761c5fac36d6795f23bbffd2c9e46a8"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) (async) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c) (async) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r6, 0x100) accept4(r6, 0x0, 0x0, 0x0) shutdown(r6, 0x1) (async) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000", @ANYRESHEX=r0, @ANYRES32=r5, @ANYRES8=r0, @ANYRESDEC=r0], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4072, 0xfe8}], 0x1}, 0x9}], 0x1, 0x10101, 0x0) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="20020000300001002dbd70000000000007"], 0x220}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) 7.430006327s ago: executing program 7 (id=5075): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 7.317702823s ago: executing program 1 (id=5076): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xffee, 0xffe0}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) 7.043260508s ago: executing program 7 (id=5078): unshare(0x800) 6.557437179s ago: executing program 7 (id=5079): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0xffffffff, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}]}, 0x1c}}, 0x20008080) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1f000000", @ANYRES16=r2, @ANYBLOB="010024bd7000fcdbdf2501"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x804) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000040b708000000fff0007b8af8fe00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0xd, 0x0, 0x0, 0x40f00, 0x5}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={r3, &(0x7f0000000240)="243621ebae3b224b562e155eececda6da8e211c5134262a804453507b7e18508c0dc8cc3c007ef8e7cdfeb1b811eb468a8860b95cdfb3f65b22556caac273468d529a97c4f73952f94a0850f45ca30de49bc660bf9fad8758798ceecf7feaf4fcead2978c638f101d8faac45324458067a6644ed59f9fcd714a846875d29393d340c1fce4cc77a2f3115", &(0x7f0000000380)=""/30}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000200)={@local, 0x0}, &(0x7f0000000000)=0x14) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$can_bcm(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x208, 0x7f, {r6, r7/1000+60000}, {0x0, 0x2710}, {0x2, 0x1}, 0x1, @canfd={{0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "e2005a5f3251373ecadd6c132f506da995ec9e60cf21b276031ccfe1caf8663ee53fa59a8d92adbea733b8c51cff66099ef575912de6b39582b68ac2e2a13c80"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x24000800) 6.25884524s ago: executing program 1 (id=5081): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000000008500000005"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x24664885dea98ba5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000010401010000000000000000010004000500010001000000199a7925d8"], 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00000001040500000000000000000003000010050001000100000013635dcaa7ab6bb86fcc0528a816a07217fc067968ba63b47469264a8edb5bc15cf502074a64a5b1f17d209eb402a798f84e331e90eddcd2dcb30ab1affbe5dbd43a805663932c3604987a8488d0d7c0d06e335b4506ca96379efab3f781479b7d6e9d11bc533a752433af79d5ae5505b619e1555536a85b47fb81cd95b15cec333db501fa4cc1e96d6defd7f69a3584fd2f415638b4fcfc933a8b276160f3789c63e9617d84f539a866704c53457e19b1b514e6834f52401349363bce"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888) close(0x3) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x22, 0x0, @val=@perf_event={0x9}}, 0x18) sendmsg$nl_route_sched_retired(r0, &(0x7f0000002b80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa008000}, 0xc, &(0x7f0000002b40)={&(0x7f0000001300)=@delchain={0x181c, 0x65, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x9, 0xffe0}, {0xa, 0xe}, {0x5, 0x8}}, [@f_rsvp={{0x9}, {0x1064, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @multicast1}, @TCA_RSVP_POLICE={0x1058, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0xcf2}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xe72, 0x3, 0x8e, 0x8, 0x3, 0x9, 0x298e, 0x6, 0x0, 0x55d2, 0x10, 0xb, 0x1, 0x200, 0x10001, 0x2, 0x8, 0xfffffffa, 0x0, 0x2, 0x0, 0x6, 0x6, 0x1, 0x3, 0x424, 0x80000001, 0x4, 0x40, 0x1, 0x1, 0x8, 0x0, 0x8001, 0x5, 0x6, 0xe000000, 0x7, 0x9d3c, 0x7, 0x7, 0x6, 0x6, 0x10000, 0x7a9, 0x1, 0x0, 0x0, 0x1a, 0xfffffad0, 0xa9f, 0x1, 0x4, 0x6, 0x8, 0x2, 0x400, 0x1, 0xace, 0x80, 0x2, 0x4, 0x0, 0x0, 0x8, 0x2e35, 0x3, 0x2, 0x7fffffff, 0x4, 0xba6, 0x4eda, 0x3, 0x6, 0x81, 0x5, 0x3, 0x2, 0x6, 0xba, 0xeb7, 0x9, 0x2, 0x0, 0x5, 0x0, 0x1, 0x81, 0x8, 0x20, 0x2, 0x3, 0x1, 0x324faaba, 0x6, 0xa, 0x4b5, 0x68068087, 0xf5c6, 0x0, 0x3, 0x1ef1273f, 0x1000, 0x10, 0x200, 0x200, 0x100, 0x101, 0x5c35, 0xb09, 0xda9, 0xc, 0xfffff05a, 0x5, 0x3, 0xfffffff9, 0x1ff, 0x2, 0x4, 0xfff, 0x9, 0x1642, 0x2, 0x80000001, 0x6, 0xff, 0x8, 0xffffc00a, 0xa, 0x2, 0x6, 0x800, 0xfffffffb, 0x800, 0x2, 0x2, 0x8, 0x0, 0x1, 0x100, 0x4, 0x3, 0x1, 0xfd4, 0x8000, 0x7, 0x7, 0x6, 0x2, 0x101, 0x10, 0x7ff, 0x10000, 0x9, 0x0, 0x40, 0x3, 0x8, 0x5, 0xb, 0xa00000, 0x0, 0xffffffff, 0x5, 0x6, 0x7, 0xaa, 0x7fff, 0x6, 0xfffeffff, 0xa3, 0x80, 0x9951, 0x7, 0x800, 0x3, 0x5, 0x800, 0x16a729ec, 0x8, 0x9, 0x0, 0x9, 0x3, 0x2, 0x80, 0xe866, 0x1, 0x4, 0x5, 0x6bd, 0x100, 0x0, 0x2, 0x4, 0x77f, 0xe9, 0x200, 0x7fffffff, 0x80000001, 0x2, 0xfffff801, 0x80, 0x7, 0x4b232a41, 0x3000, 0x3, 0x800, 0xc, 0x4, 0x8, 0x0, 0x3, 0x3, 0x1000, 0x7ff, 0xb0, 0x7fffffff, 0x284, 0x9, 0xff, 0x99, 0x0, 0x9, 0x8, 0xff, 0x8, 0x9, 0x7, 0x6, 0x0, 0xf, 0x7f, 0x0, 0x5, 0xbfa7, 0x81, 0x5, 0x5, 0x81, 0x0, 0x8, 0x3, 0x51, 0x7, 0x1ff, 0x8, 0x6, 0x3, 0x0, 0x40, 0x8, 0x5, 0x4, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x1000, 0x400, 0x4, 0x8, 0x80, 0x7f, 0x8, 0x68, 0xfffffee3, 0x9, 0x2, 0x3, 0xffff, 0x2, 0x7, 0x800, 0x8, 0x5, 0xfffffff8, 0x2, 0x7fffffff, 0x7, 0x3, 0x5, 0xb, 0x4, 0x8, 0x3e, 0x8, 0xc61, 0x7, 0x3, 0x81, 0x4, 0x3, 0x3492, 0x0, 0x5, 0x6, 0x0, 0x2, 0x0, 0x9, 0x1, 0x1, 0x4, 0x4, 0x6, 0xc, 0x5, 0x6, 0x6, 0x7, 0x4, 0x6, 0x7, 0x321, 0x1, 0x10, 0x3, 0x4b, 0x6, 0x800, 0x6, 0xb14, 0xbd7, 0x3ff, 0x2, 0x2, 0x6, 0x7fffffff, 0x1, 0x702, 0x4, 0x0, 0x10, 0x0, 0xaa, 0xa, 0xe, 0xe, 0x8, 0x9, 0x6200, 0xb70, 0x1, 0x6b60754f, 0x81, 0x9d42, 0x8, 0x3, 0x1, 0x3, 0xfffffeff, 0x7, 0x2, 0xdd, 0x6, 0xa93, 0x8, 0x9, 0xfffffff8, 0x3, 0x4, 0x7, 0x76, 0x0, 0x9, 0x4, 0xe167, 0xfffffffa, 0x8, 0x4, 0x0, 0x6, 0x3, 0xffff, 0x4, 0x5, 0x2, 0x80000000, 0xee4, 0x1, 0x10000, 0x80, 0x6, 0x0, 0x2, 0x4, 0x5, 0x7, 0x2, 0x7, 0x4, 0x7, 0x6, 0x10c, 0x6, 0x7, 0x8, 0x10, 0x30000000, 0x5, 0x4, 0x80, 0x7, 0x8, 0xc40, 0x2, 0x3, 0x3, 0x76, 0x7, 0x3, 0x9, 0x6, 0x6, 0x8000, 0x8001, 0x8, 0x3, 0x800, 0x1, 0x1, 0xf52, 0x5, 0x7f, 0x1, 0x6, 0x10001, 0x1, 0x5, 0x4, 0x62b, 0x7fffffff, 0x1, 0x4, 0x1, 0x10000, 0x5, 0x8, 0x7fffffff, 0x9, 0x6, 0x8, 0xcd7d, 0x7, 0x949, 0xea, 0x5, 0x9, 0x0, 0x7fffffff, 0x8, 0x14, 0x6, 0x1, 0x7, 0x6, 0x0, 0x4, 0x5000, 0x3, 0x2, 0x69a253ef, 0x6, 0x3, 0x5, 0x2, 0x6, 0x7, 0x4, 0x2, 0x3, 0x8c9c, 0x5, 0x8, 0x6, 0x6, 0x3, 0x0, 0x5, 0xffffff38, 0x7, 0xd, 0x8, 0x7, 0x2, 0x7fc0, 0x1ff, 0x3, 0xfffffffe, 0x32, 0x5, 0x6, 0xffffc375, 0xee0, 0x6, 0x10000, 0x4, 0x2, 0x49cc6ff7, 0x8, 0xffffffff, 0x6, 0x1, 0x0, 0x800, 0xfffffffa, 0x1d98, 0x2, 0x7, 0xffffffe1, 0x3, 0x2]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7ff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0x7, 0x0, 0xa, 0x8, 0x8, 0x4, 0x1, 0x8, 0x2, 0x4, 0x2, 0x9032, 0x1ff, 0x3, 0x5, 0x100, 0x4, 0x80000000, 0xde0, 0x2, 0x8, 0x3, 0xbe, 0x1, 0x3, 0xb6, 0xfffffff7, 0x2, 0x2, 0x4, 0x4, 0x200, 0x8, 0x9, 0x9, 0x7, 0xfffffff3, 0x7fff, 0x8001, 0x8001, 0x956, 0x0, 0x7, 0x8, 0x5, 0xbf1, 0x0, 0x3, 0xc21e, 0x4, 0x0, 0x10, 0xfffffff1, 0x2, 0xd1, 0xd, 0xc, 0x4, 0x328e, 0x7ff, 0x3a, 0xa8, 0x7f, 0x4, 0x6, 0x3, 0xffff09f4, 0x7, 0xa4, 0x7, 0x8, 0xb9, 0x0, 0x8, 0x1, 0xffffff1b, 0x8c7d, 0x3, 0x1ff, 0x9, 0x41, 0x5, 0xe, 0x800, 0x100, 0x0, 0x2, 0x3, 0x8000, 0xae10, 0x5, 0x3, 0x8000, 0x9, 0x1, 0x1, 0xd19, 0x4987, 0x9, 0x5, 0x5, 0x0, 0x5, 0x9, 0x81, 0x5, 0x8, 0x6, 0xfffffff8, 0xf14cfbe, 0xfffffffc, 0x6, 0x7, 0x80000000, 0x3, 0x6, 0x7, 0x4, 0x2, 0x800, 0x0, 0xb, 0x2, 0x80000001, 0xfffffff8, 0x100, 0x3, 0x8, 0x1, 0x8001, 0x5, 0x80, 0x7, 0x18, 0x4, 0x8, 0x15f, 0x7f, 0x8, 0x7, 0x7, 0x8, 0x4, 0x9, 0x5, 0x7, 0x5, 0x9, 0x0, 0x4, 0x4, 0x7, 0x3, 0x9, 0xe, 0x59b, 0xd, 0x3, 0x1000, 0x80000001, 0x3, 0x10001, 0x2, 0x5928013c, 0x7, 0x4, 0x4, 0x9, 0x9, 0x7ff, 0x589c, 0x9, 0x6, 0x2, 0x2, 0x9, 0x3a, 0x4d8, 0x3ff, 0x8, 0x401, 0x5, 0x8, 0xf4aa, 0x80, 0xade, 0x7, 0x6, 0x10001, 0x0, 0x1000, 0x0, 0x9, 0x6, 0xff, 0x40, 0x1000, 0x1, 0x4, 0x6, 0xfffffffe, 0xe, 0x3c000000, 0x7ff, 0x4, 0x1000000, 0x4, 0x7, 0x3, 0x8, 0xa480, 0xfffffffa, 0x3, 0x6, 0xfffff800, 0x80, 0x1, 0xd6ed, 0x4, 0xffffffff, 0xb, 0x9, 0xffffff01, 0x7, 0x2, 0x3, 0x839d, 0x8001, 0x8, 0x7f, 0x5, 0xe57c, 0x4ee7, 0x9, 0x0, 0x20000000, 0x0, 0x3, 0x4, 0x10, 0x8b3f, 0x4, 0x9faa, 0x94, 0x2, 0x9, 0x2f62eddf, 0x1, 0x5, 0x2, 0xc, 0x399, 0x80000000, 0x800, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x4, 0x200, 0x7f80000, 0x1, 0xffff8000, 0x0, 0x75fe, 0x3, 0x7846, 0x2, 0x7fffffff, 0xfff, 0xe, 0x2, 0x7fffffff, 0x528, 0x1ff, 0x1, 0xffffffc0, 0x3, 0x2, 0x4, 0x5ee, 0x9, 0x4, 0x2, 0x7d1d7c0b, 0x8, 0x38643895, 0x2, 0x1, 0x65, 0x80000001, 0x7, 0x8, 0x30, 0x594e, 0x80000001, 0x5b8, 0x1e5, 0xfff, 0x0, 0xddd, 0xfab0, 0xf3, 0x10001, 0x4, 0x34, 0x5, 0x7f, 0x4e3, 0x80000000, 0x2e, 0x1, 0x8, 0x5, 0x4, 0x2, 0xfffffff9, 0xf299, 0x5, 0x3, 0x7, 0x0, 0x6, 0x2, 0x7, 0x5, 0x40, 0x9, 0x7, 0x5, 0x3, 0x7078f5cf, 0x6, 0x8, 0x10001, 0x1ff, 0x81, 0x1, 0xfffffff9, 0x5, 0x3, 0x4, 0x2, 0x1, 0xc, 0xd2a, 0x2, 0x6, 0xffffffff, 0x80, 0xffffffff, 0x2, 0xc, 0xffff, 0x9, 0x0, 0x5, 0x400, 0x7f, 0x4, 0x18000000, 0x10000, 0x3, 0x4, 0x6, 0x2, 0x7, 0xffff, 0x5, 0x1, 0x9, 0x1, 0x6, 0xb, 0x24000000, 0x19c239c2, 0x6, 0x8, 0x10001, 0x7f, 0x5, 0x0, 0x784, 0x3, 0x7, 0x4, 0x200, 0x3, 0x2, 0x5, 0x85a7, 0xfffffffb, 0x1, 0xb1df, 0xfff, 0x3, 0x7, 0x0, 0x2, 0x9, 0x1, 0x6, 0x100, 0x6, 0x7f, 0x2, 0x6, 0x7, 0xfff, 0x2, 0x3ff, 0x0, 0x0, 0xe5, 0x9, 0x9, 0x3, 0x9, 0x0, 0x8, 0x453a, 0x0, 0x6, 0x2, 0xfffffff9, 0xfff, 0xb, 0x4, 0x7, 0x9, 0x8, 0x9, 0x0, 0x6, 0x10000, 0x39a4, 0x80000001, 0x3, 0x3, 0x1, 0xd, 0xffff, 0xff, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x222, 0x1, 0x2, 0x6, 0x1, 0x10, 0x1, 0x5, 0x0, 0x2, 0xcd1, 0x5, 0x2, 0xffff94b6, 0x7, 0x6, 0x9, 0x4, 0xb, 0x7, 0x935, 0x1, 0x3a87, 0x6, 0x7, 0xfffffff0, 0x72, 0xd, 0x8, 0xfffffffb, 0x40, 0xa0c5, 0x4550, 0x5, 0x80, 0x7, 0x7ff, 0x8, 0xffffffb1, 0x2, 0x3, 0xb, 0x40, 0x1, 0x5, 0x7, 0xc00, 0xffffff95, 0x8, 0x3, 0x4, 0x4, 0x8, 0x872, 0x8001, 0x3a, 0xfffffffc, 0x200, 0x5, 0x6, 0xb6d, 0x40, 0x3, 0x7]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x32}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}]}]}}, @f_rsvp6={{0xa}, {0x450, 0x2, [@TCA_RSVP_POLICE={0x42c, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x8, 0xd80a, 0x0, 0x40, 0xb, 0x8, 0x4, 0x5, 0x4, 0x3, 0x9, 0x6, 0x4, 0x0, 0x4, 0x3b, 0x6, 0x6, 0x3, 0x7fffffff, 0x5, 0x5, 0x85f3, 0x69, 0x7, 0x8, 0x1, 0x2, 0x65f, 0x81, 0xfff, 0x10000, 0x10000, 0x8, 0x146ededa, 0x6, 0x7fffffff, 0x800, 0x4, 0x3, 0x3ff, 0x4, 0x69, 0x6, 0x9, 0xd5e5, 0xeb, 0x7ff, 0x7, 0x6, 0xb, 0x8, 0x1ff, 0x2, 0x79, 0x80000000, 0x4, 0x6, 0x33, 0x80, 0x0, 0x2, 0x7, 0xba30, 0x1, 0x1, 0x8001, 0x9, 0x58a2, 0x401, 0x2, 0x14, 0x7fffffff, 0x80000001, 0x1, 0x26ec, 0x98, 0x15, 0xf, 0x4cb, 0x1, 0xdaed, 0xf, 0x9, 0x1, 0x1, 0x5, 0x6, 0x80, 0x4, 0x10000, 0x2, 0x3, 0x1, 0x3, 0x401, 0x80000000, 0x6, 0x60000000, 0x80, 0x80000000, 0xc00, 0x4, 0xfffffffe, 0x4, 0xb2, 0xa780, 0x6, 0x1, 0x9e, 0x3, 0xfffff000, 0x10000, 0x1, 0x3, 0x7ff, 0xfffffffc, 0x3, 0xb, 0x7, 0x2fe4, 0x6, 0x9, 0x1, 0x7, 0x2, 0x424f, 0x8, 0x100, 0xb839, 0x6, 0x1, 0x6, 0x0, 0x731f79f5, 0xb1240bc, 0x5, 0x7, 0x5, 0x9, 0x4, 0x2, 0xfffffff7, 0xffff8001, 0x6, 0x1, 0x9, 0x8, 0x400, 0x1d3, 0x0, 0x3d6, 0x2, 0x89, 0x9, 0x101, 0x7, 0x8, 0x2ae6f068, 0xc8, 0x7, 0x6, 0x2, 0x8, 0x7, 0x7, 0x2, 0x1ff, 0x401, 0x5, 0x0, 0xe, 0xf, 0x4, 0xb, 0x9, 0x8, 0x7f, 0x6, 0x2, 0xc46, 0x800, 0x6, 0x3e82, 0xf2, 0x5, 0xffff, 0x4, 0x3, 0x9, 0x7, 0x0, 0x5, 0x3, 0x5, 0xd4b5, 0x9, 0x2, 0x16, 0x5, 0x1, 0x3, 0x8, 0xffffffff, 0x7, 0xc, 0x3, 0x3, 0xfffffff8, 0x8000, 0x1, 0x823, 0x2, 0x62, 0x7, 0x80, 0x7ff, 0xa4, 0x1, 0x6, 0x7ff, 0x3, 0x0, 0x20e, 0xf, 0x7fffffff, 0x9, 0x7, 0x1800000, 0xf, 0x6, 0x3, 0x3, 0x7, 0x4, 0x8000, 0x3, 0x2, 0x9, 0x949a, 0x3, 0x5, 0x6, 0xd3000000, 0xcf779ff8, 0x5, 0x9, 0xf6, 0x5, 0xbd, 0x3f82, 0xffff8000, 0x5, 0x9, 0x7f]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_PEAKRATE64={0xc}]}, @TCA_RSVP_POLICE={0x4}, @TCA_RSVP_SRC={0x14, 0x3, @empty}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x3, 0x7}}]}}, @f_rsvp6={{0xa}, {0x320, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @empty}, @TCA_RSVP_ACT={0x2a0, 0x6, [@m_csum={0x12c, 0x1f, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x562, 0x3, 0x0, 0x7fe5, 0x8c}, 0x10}}]}, {0xe1, 0x6, "de73a1d9ce2ea27d93a19b6b09ff1207296e9e567ebdd2500522279e35dedfeec2335caf56c712b42d6832a9760bb98e93edb5eac6bbf9a0766a283919603739d8ac6ff7136c0b0ac2a2716a1b53b8ae4acc36351e56c799918b2d96bdb98a08124b2c3c1fb4fcd1e8bdcc35b542638775a283f7a34cb56f2f0b58f0fcc51cfcc7c733677d547ee9777e64ffe27b71b50a9451b67271403220bd8ed8a9997aa0135e2cbfd17a7531f6643d795364d639d541154190a41c063c514df0db8316982451c1b632e0dd45d7c8674ec1be38c8ceeeb73ad10ee6822f3c5f5533"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_vlan={0x60, 0x9, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}]}, {0x2a, 0x6, "130397cae7764a8a2e5c201198a3b111793492ac3f4167e5e98510ff45653f343f3fb7efc6fb"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_pedit={0x110, 0x2, 0x0, 0x0, {{0xa}, {0x40, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x3c, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0xa6, 0x6, "8bc2fc61da3b2c89bfe0d1290e04d193a11ad2559199a1dee68df56651be0791df1e68b6c022283dceee7ae5178d0fa4163fa4202e8395e686bdaf08e5b670bc0e35d658cd5f2b3ed4ee4e58edb1a96cedd6369b4ee4535f3298abf14113c42c66f8ca1b33f7ea1748598566c82cdb1d4790f8eb27027440e7de938e42568ce4cab651cc2af5e27034eab5abf8fca46a1c966268d480c7d7eaf69c5d09803ee8fe7d"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x8c, 0x9, 0x2}, {0xa03, 0xc98, 0x6}, 0x8, 0x4, 0x38}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x5, 0x5}, {0x9, 0x6, 0x5}, 0xc, 0x8, 0x3f}}, @TCA_RSVP_DST={0x14, 0x2, @mcast1}, @TCA_RSVP_SRC={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}]}}]}, 0x181c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6, 0x5}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xffc, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_LINK={0x8}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) 3.904879523s ago: executing program 0 (id=5082): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000006c0), &(0x7f0000000700), 0x0, 0x20000000000000c4}}, 0x40) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x50) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3b, 0x4, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000040), &(0x7f0000000440)=""/183}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r2, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000006110040000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)={0x5c, 0x3f, 0x107, 0x70bd27, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x46, 0xec, 0x0, 0x1, [@generic="5e1d37fb2972949cc1fbfbc162670170152614962060705d035e7ce241c149957aa516a9b825727f12c28c682e27ba65318cfe6f27598651528cd37629612b78ee6e"]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20048092}, 0xc000) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000080)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108e004000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x11, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x2fcca2f7}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newlink={0x38c, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x364, 0x16, 0x0, 0x1, [{0x88, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x200, 0x1000}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x6, 0x5}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x6, 0x6}}, @IFLA_VF_MAC={0x28, 0x1, {0xa1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}}, @IFLA_VF_VLAN={0x10, 0x2, {0xd, 0xd85, 0x3}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x2, 0x4}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xc21, 0x2}}]}, {0x4}, {0x54, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0x3}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0x2}}, @IFLA_VF_MAC={0x28, 0x1, {0xd, @local}}, @IFLA_VF_RATE={0x10, 0x6, {0x2, 0x663, 0x6}}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xd0d5, 0x4}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x0, @multicast}}]}, {0x184, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x4, 0x3e5b}}, @IFLA_VF_TRUST={0xc, 0x9, {0x9, 0x3}}, @IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x2, 0x751, 0x8, 0x8100}}, {0x14, 0x1, {0x20000000, 0x81d, 0x7, 0x88a8}}, {0x14, 0x1, {0x200, 0x108, 0x8, 0x88a8}}, {0x14, 0x1, {0x0, 0xf11, 0x10, 0x8100}}]}, @IFLA_VF_VLAN_LIST={0xcc, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x85, 0x400000, 0x88a8}}, {0x14, 0x1, {0x2, 0xc46, 0x81, 0x88a8}}, {0x14, 0x1, {0xe, 0x12, 0x3ff, 0x88a8}}, {0x14, 0x1, {0x81, 0x6, 0x5, 0x8100}}, {0x14, 0x1, {0xfffffffe, 0x7a8}}, {0x14, 0x1, {0x6, 0xb88, 0x7, 0x9a8}}, {0x14, 0x1, {0x8, 0xddf, 0x1, 0x88a8}}, {0x14, 0x1, {0x29, 0xda, 0x9, 0x88a8}}, {0x14, 0x1, {0x198, 0xe1b, 0x3, 0x8100}}, {0x14, 0x1, {0x40000000, 0xf29, 0x6, 0x88a8}}]}, @IFLA_VF_RATE={0x10, 0x6, {0x0, 0x4, 0xa72}}, @IFLA_VF_RATE={0x10, 0x6, {0x7, 0x4}}, @IFLA_VF_MAC={0x28, 0x1, {0x2, @remote}}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x68}}, @IFLA_VF_TRUST={0xc, 0x9, {0x4, 0x8}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xb, 0xffff1ad1}}]}, {0x7c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x4, 0xc92, 0xfb, 0x88a8}}, {0x14, 0x1, {0x0, 0x656, 0x1, 0x8100}}, {0x14, 0x1, {0x4, 0xdba, 0x3, 0x88a8}}]}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x10, 0x7}}, @IFLA_VF_VLAN={0x10, 0x2, {0x7, 0x909}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x7}}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0xfff, 0x98f, 0x3}}]}]}]}, 0x38c}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 3.904446373s ago: executing program 7 (id=5083): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000040000000060000000800000000000000", @ANYRES32, @ANYBLOB="8100"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="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", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x80000000, 0x0, r0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000040000000060000000800000000000000", @ANYRES32, @ANYBLOB="8100"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="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", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x80000000, 0x0, r0}, 0x48) (async) 3.832767702s ago: executing program 1 (id=5084): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x19, &(0x7f0000000700)=ANY=[@ANYBLOB="180000008b00000000000000ffffffff18110000", @ANYRES32=r0, @ANYBLOB="00f8000000000000b702000014000000b7030000000000008500000086000000bf09000000000000550901000000000095000000000000002d0a0600000000002500ffffdf070ae91801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050008008500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xb, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41000, 0x24}, 0x94) 3.825976771s ago: executing program 5 (id=5085): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000700000007", @ANYBLOB], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000080)=ANY=[@ANYRES32=r0], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_FSGEOMETRY_V4(r1, 0x8070587c, &(0x7f0000000280)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.72192092s ago: executing program 6 (id=5086): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000f9dbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c00990001000000710000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24004884) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$unix(0x1, 0x2, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000f9dbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c00990001000000710000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24004884) (async) 3.359328544s ago: executing program 5 (id=5087): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r0 = socket(0x28, 0x5, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) unshare(0xc040480) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r3, @ANYBLOB="100000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f0000000000), &(0x7f0000000500)=r4}, 0x20) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x8) (async) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x4) (async) socketpair(0x3, 0x2, 0x81, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$nl_route_sched(r5, &(0x7f0000000f00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000f40)=@newchain={0xba4, 0x64, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0x10, 0x10}, {0x10, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xb6c, 0x2, [@TCA_BASIC_POLICE={0x814, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xfffffffb, 0x7, 0x3, 0x5, 0x1, 0xfffffffc, 0x5, 0x10000, 0xf, 0x8, 0x537, 0xfffffffa, 0x80, 0x7fffffff, 0x1, 0x0, 0xb, 0x800, 0x5c, 0x5, 0x8, 0x2, 0x7f, 0x6370, 0x100, 0x7, 0x9, 0x3, 0x1ff, 0x4, 0x6, 0xff, 0x6, 0x2, 0x9c, 0xc7, 0x8, 0xac, 0x29f8a306, 0x7, 0x401, 0xb0, 0x343, 0x40, 0x8, 0x8, 0x4, 0x8, 0xf8000000, 0x40, 0x6, 0x6, 0x5, 0x2, 0x6, 0x7fff, 0x7, 0xc, 0x5, 0x3ff, 0x6, 0xa9dc, 0x5, 0x1ff, 0x9, 0x8001, 0x1, 0x2, 0x1, 0xb, 0xffff, 0x8, 0x80000001, 0x2, 0xe, 0xfffffffd, 0x8, 0x1, 0x6, 0xffff18b9, 0x4, 0x2, 0x0, 0x80000001, 0x10, 0x6, 0x9, 0x585964dd, 0x4, 0x1000, 0x0, 0x7, 0x7, 0x80, 0x46, 0x1, 0x401, 0x8000, 0x8494, 0xa4, 0x6, 0x7fffffff, 0xffff, 0x1, 0x6, 0x9, 0x5, 0x100, 0x1, 0x400, 0x6, 0xfff, 0x800, 0x5, 0x3, 0xf8a, 0x0, 0x6, 0x7d24, 0x0, 0x9, 0x4, 0x1, 0x80000000, 0x9, 0x3, 0xf, 0x5, 0x10001, 0xfffffffc, 0x9, 0x401, 0x9, 0x10, 0x3, 0x3, 0x8, 0x3, 0xfffffffb, 0x1, 0x3ff, 0xffff, 0x6, 0x6, 0x0, 0x8, 0x0, 0x5, 0x3, 0x7, 0x3, 0x72, 0x4, 0x2, 0x9, 0x800, 0x0, 0x6, 0xfff, 0x7, 0x3, 0x4, 0x6, 0xfffffff7, 0x3ff, 0x9, 0xff, 0xc3ab, 0x7ff, 0x2, 0x0, 0x10, 0xfff, 0x8c9, 0xffffff2d, 0x1, 0x9, 0x8, 0x9, 0x4, 0xbf85, 0x4, 0x1, 0x9, 0xe070, 0xfffffff8, 0x1, 0x1, 0x1f44, 0x0, 0x3, 0x7a, 0x2, 0xc, 0x5, 0x400, 0x2, 0x7fffffff, 0x8, 0x8cc, 0x5, 0x7f, 0xb9, 0x40, 0x5, 0x9, 0x1, 0x2, 0x2, 0xffffffff, 0x6, 0x2, 0xb, 0x5, 0x7f, 0x7, 0x9, 0x7, 0x1, 0x2, 0x3, 0x9, 0xdec, 0x7, 0x6, 0x400, 0x2, 0x6, 0x1ff, 0x8, 0x4, 0x7, 0x5, 0xe, 0xf0, 0x969c, 0x0, 0x9, 0xfff, 0x3, 0x7, 0x30000000, 0x2, 0x1ff, 0x0, 0x6, 0x0, 0x9, 0x101, 0xcc5, 0x8, 0x9, 0x9, 0x5, 0xfffffff8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7f, 0x4, 0x5, 0x3, 0x23000, 0x9, 0xff, 0x0, 0x7ff, 0x6, 0x4, 0x0, 0xf8c5, 0xa37d, 0xf, 0x0, 0x4, 0x1, 0xb, 0x6, 0x6, 0xef, 0x2, 0x9, 0x7f, 0xda, 0x4, 0x4, 0x0, 0x8, 0x0, 0x3, 0x0, 0x3, 0x100, 0xd, 0x8000, 0x29, 0x6, 0x7, 0x4, 0xb141, 0x5, 0xbd, 0x1, 0x8001, 0xa, 0xe3, 0xa2f1240, 0x1, 0x8ffb, 0x3, 0x9, 0x0, 0xa3d, 0x3, 0x3, 0x9eddb23a, 0x2, 0x9, 0x1, 0x2, 0x3, 0x3, 0x10001, 0x7f, 0x1, 0x1, 0x9, 0x7, 0x4, 0x8, 0x1000, 0x1000, 0xfffffffa, 0xfffff3c1, 0x2, 0x6, 0x9e28, 0x4, 0x3, 0x9, 0xe, 0x40, 0x2, 0x516, 0x3, 0x7848, 0x5000, 0x6, 0x8aaf, 0x10000, 0x1, 0x401, 0x1, 0x8, 0x3, 0x81, 0x45, 0x7fff, 0x9, 0x5, 0x40, 0x2, 0x1ff, 0x9, 0x7fff, 0x0, 0x6, 0x5862, 0xfffffffa, 0x3, 0x81, 0xffffffff, 0x9, 0xfffffff0, 0x780, 0x386, 0x9, 0x1ff, 0x8, 0x1000, 0x7fffffff, 0x0, 0x0, 0x6, 0x7, 0x2, 0x5465, 0x101, 0x1ff, 0x9, 0x2, 0x3, 0x5, 0x57, 0x10001, 0x7, 0x80, 0x2, 0x180, 0x61bf, 0x101, 0x1, 0x7fff, 0x0, 0x80000001, 0x9, 0x101, 0x8, 0x4c, 0x8000, 0x80, 0x4, 0x50, 0x3, 0x80000000, 0x4, 0x2, 0x5dc5, 0x1, 0x3ff, 0xb26c, 0x9, 0x2, 0x1cbad178, 0x8, 0xe2c5, 0x5, 0x8, 0x68, 0x6, 0x3, 0x80000000, 0x1, 0xfff, 0x1, 0x12, 0x7, 0x1, 0xcd5c, 0x1, 0x6, 0xffffff37, 0xfff, 0x7, 0x4, 0x0, 0x1, 0x3, 0x9259, 0xfffffaa1, 0x80000001, 0xda, 0x9, 0xffffff80, 0x75, 0xd47, 0x3, 0xe, 0x9, 0x7, 0x7ff, 0x0, 0x554, 0x2, 0x7, 0x1, 0xfffffc01, 0x83, 0x9, 0x0, 0x5, 0x1, 0x77, 0x5, 0xbe5, 0xbf, 0x5, 0xe, 0xfff, 0x7, 0x14d, 0x458a, 0x1, 0xfffffffa, 0x1c000000, 0x1, 0xfffffffe, 0x7f, 0x0, 0x1ff, 0x2, 0xa718, 0x0, 0x4, 0xffff, 0x8, 0x9, 0x10, 0x6, 0xfffffff0, 0x3, 0x10, 0x972d, 0xd9, 0xfff, 0x8, 0x42e, 0x8, 0x5, 0x2, 0x44718a74, 0xb427, 0x5, 0x5]}]}, @TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7fff}}]}, @TCA_BASIC_EMATCHES={0x2e4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x2e0, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3, 0x8, 0xddfc}, {0x2, 0x3}}}, @TCF_EM_IPT={0x234, 0x1, 0x0, 0x0, {{0x6, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_DATA={0xed, 0x5, "e904e5b3e2ee36cdafd25b204bb2d895c537752fa5adb7186bb54ec6c4c67fff3b475b8fda218ecd0866fd84c01a315f82afcdd0de7096998b15be23149289241daa9f7cb36256a907fe35396675cdbfe6ec36685cd095f19deaf4a66545164cc6639445614a91ac6fe187e964b025b7e8ed9aa09873ee4d8773ada00afb7faa10475b70e2a5f9ada6401ec11d6f03f964b63548c45369da7f6a170b7d960f936e5c7e502c216376392bd6e7fb93229b461fa7c6b4c1afe53dab52663814d90fdf9ad5666bdc919e4ad9565b72f0ce2415b1f308b9cac01cedb89165053710a37bd8eeea30201bbbc3"}, @TCA_EM_IPT_MATCH_DATA={0x9d, 0x5, "f2b00b8bb2017ef6d704706de3a4d2b1bf589aecd96bfb64c137d28d8b94a5e042db2bcbfe157d3611cefbd7e228d26adab3ce61bf57cd036f9230f37facc8c8e15c5bcd7151a93768045d1d256399f78120cde8db09fc768b396bd84df78e7a6ddcf6b33c6d3b5f0d5f69194823424a21cbb6ed430d510d6a91fa6a9d57c9077eca49334b43d793cbc60fd06cc4ec77b758951410c75f6773"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x74, 0x5, "a2bd352d8953074e9df29294dcc583c801046fee59f07c69e682713d0f5aa5ca405a2c492fefc7da3f23c2531965185becdc776e7059a275a011da5118e0d8931e8af404be16de48dd89801097c5b1a51ba797ed12add018da59356249a3b039b852db5ea2dcd63459e56f020c710d6c"}]}}, @TCF_EM_CONTAINER={0x98, 0x1, 0x0, 0x0, {{0x0, 0x0, 0xfff8}, "0888c51c79818dad408522ef2eca040dc25910eb50c60470d88e2cd82d6953838e7c8a390c0b6d65776471c1a9962ba4080edfbb8a65fbfcd7105941e593f0c5697920e0c02f63d7c842c625d90d6dd2a59b32c3949187f64bf9662665f3805df9f288fe84b767a1df80ad8c6d938ad66550a418d08f33c9cb0c094d291972accca143577cd5e8d481f4ed"}}]}]}, @TCA_BASIC_EMATCHES={0x64, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x427, 0x8, 0x8}, {0x2, 0x4, 0x2}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x0, 0x7, 0x77e}, {{0x0, 0x1, 0x1}, {0x4, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7, 0x8, 0x3}, {0x4, 0x6, 0x3}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xc, 0x8, 0x9}, {0x0, 0x6, 0x2}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0xd42e, 0x2, 0x3}, {0x0, 0x0, 0x1}}}]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0xba4}}, 0x20000800) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6}, 0xc) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002800000000400600000a0000010a000002005000500000000100000001501003e800000000", 0x2a}], 0x1, 0x0, 0x0) (async) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002800000000400600000a0000010a000002005000500000000100000001501003e800000000", 0x2a}], 0x1, 0x0, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x1}]}, 0x1c}}, 0x4000080) (async) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)=@ethtool_cmd={0x2e, 0x8, 0x0, 0x400, 0x0, 0x7e, 0xe7, 0x5, 0x87, 0x0, 0x80000, 0x0, 0x1, 0x4, 0x0, 0x82000047, [0x2, 0x9]}}) (async) r8 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r8, 0x4) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000340)=""/89, &(0x7f00000004c0)=0x59) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r9) (async) socket$inet_udp(0x2, 0x2, 0x0) 3.308479453s ago: executing program 1 (id=5088): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 3.185606146s ago: executing program 7 (id=5089): syz_emit_ethernet(0x32, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000005cd3bb2ec0483170f6cb9188070008084500002400000000002f9078ac141400e0000001000065580401907800d8621b002c17a9"], 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x11, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1070bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x7, 0x4e82, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xd, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x7, 0x80000000, 0x0, 0x1, 0x0, 0x5, 0x4a, 0x81, 0x3, 0x8, 0x100, 0x10001, 0x3, 0x5, 0x5, 0x184, 0x8, 0x7, 0x1, 0x1, 0x200009, 0x0, 0x8, 0x7, 0x4, 0x6, 0x7f, 0x10, 0xfffff9b9, 0x5, 0x7, 0x7, 0xf285, 0x7, 0x8, 0x5, 0x2, 0x7, 0x8, 0x1ff, 0x401, 0x9, 0x80000000, 0xd8fa, 0x8, 0x7, 0x7fff, 0x3, 0x0, 0x4, 0x3, 0x80000001, 0x6, 0xff, 0x8001, 0x3, 0xd, 0x40, 0x7, 0xf5a, 0xffffffff, 0x1, 0x2, 0x0, 0x800, 0xc, 0x6, 0x1000, 0x6, 0xa, 0x0, 0x1ff, 0x7, 0x4, 0x8, 0xffffffff, 0x80000001, 0x4d, 0x5, 0x7, 0x600, 0x7, 0x6, 0x9, 0x13bf, 0x97, 0x7, 0x9, 0x1, 0x9, 0x0, 0x401, 0x7d, 0x6, 0x80000001, 0x736f, 0xdd0, 0xf577, 0x3ff, 0x6, 0x40, 0xfffffffc, 0x7, 0x6, 0xffffff4d, 0x7, 0x7fff, 0x8, 0x4, 0x9, 0x9, 0x475, 0x10, 0x1000, 0x9, 0x4, 0xff, 0x4, 0x1, 0x7, 0x4, 0xfffffff7, 0x2, 0x5, 0x99, 0x7, 0x4, 0x7fffffff, 0x6, 0x8, 0x1000, 0x8001, 0x100, 0x100, 0x2, 0x4, 0x25, 0x3ff, 0x2277, 0x9, 0xcc8f, 0xd, 0xce2, 0x8000, 0x9, 0x7f, 0x3, 0x8000, 0x7, 0x0, 0x9, 0x8, 0x5, 0x8211, 0x80000001, 0x7b51, 0x74, 0x101, 0xfffffc62, 0x60000, 0x2, 0x3, 0x7ad7, 0x3, 0x2, 0x4, 0x5, 0x54, 0x0, 0x101, 0x4, 0xa2e, 0x7, 0x2, 0x8001, 0x4, 0x80, 0x2, 0xffff5609, 0x6ca98c39, 0x81, 0x0, 0x0, 0x0, 0x5, 0x55a, 0xd, 0x4, 0x1, 0x0, 0x2, 0xfffffffe, 0x101, 0x6, 0x6, 0xa, 0x10000, 0x4, 0x80000000, 0x2000cf1, 0x7, 0x10001, 0x6, 0x4, 0x200, 0x0, 0x8, 0x7, 0x9, 0x3, 0xffff, 0x7fffffff, 0x2000007, 0x7, 0x200000, 0x5e0, 0xfffffff2, 0x7, 0x3, 0x31, 0x7, 0x5, 0x40000000, 0x4, 0x5, 0x2, 0x8, 0x9, 0x1000, 0x7, 0xbdb7, 0x3, 0xe, 0x7, 0x3, 0x6, 0x4, 0x1, 0x459, 0xd, 0x7, 0x68, 0x4, 0x4, 0x7fffffff, 0x7, 0x2, 0x80000000, 0x6cdd, 0xbd, 0x0, 0x6, 0x40, 0x81]}, @TCA_TBF_PTAB={0x404, 0x3, [0x7, 0x400, 0x8, 0x4, 0x0, 0x4, 0x9, 0xfffffff8, 0x1d, 0xff, 0x4, 0x7, 0x2, 0xfffffffc, 0x275d, 0xffffffff, 0x4, 0x5, 0x4b, 0x8, 0x7, 0x2, 0x100400, 0x9, 0x7d4, 0x6d59c30b, 0x6, 0x0, 0x9, 0x1, 0x1ff, 0xff, 0x1, 0xffff, 0x400, 0x20a, 0x200, 0xd8e9, 0xa48, 0xc70, 0x400, 0x7, 0x7a, 0x7fff, 0x7, 0x13, 0x4, 0xfffffffe, 0x7, 0x1800000, 0x4, 0xffff, 0x80000000, 0x3, 0x0, 0x4, 0x5, 0xd69, 0x7, 0x5, 0x2, 0x101, 0xd, 0x7, 0xffffffff, 0x9, 0x4, 0xc, 0x3, 0x3, 0x8, 0xe, 0x6, 0x5, 0x8, 0x2d, 0x0, 0x13, 0x10, 0x1ff, 0xa8, 0x2, 0x3, 0x401, 0x7, 0xf, 0x0, 0x4f, 0xffffffff, 0x7, 0x7fff, 0x6, 0xc5c, 0x5, 0xd, 0xb4, 0x80, 0x7, 0x7f, 0x4, 0x3d62, 0x7, 0x8, 0x200, 0x5, 0x100, 0xc2c, 0x6, 0x80, 0x63, 0x80, 0x6, 0x1, 0x4, 0x4, 0x4, 0xb, 0x5, 0x7, 0x9d, 0x120, 0x9, 0xfffffff6, 0x0, 0x0, 0x96, 0x1, 0xa2, 0x8, 0x3, 0x6, 0x7, 0x6, 0x3, 0x80, 0x6281, 0x125, 0x9, 0x10, 0xfffff000, 0x2, 0xfffffff8, 0x9, 0x9, 0x101, 0x6, 0x3, 0x2, 0x8, 0x7fff, 0x0, 0x0, 0x2f3, 0x4, 0x0, 0x0, 0x3, 0xa80, 0x8, 0x8, 0x7d2, 0x7f, 0x60000, 0x2, 0xfffffc01, 0x8, 0xfffffff9, 0x988, 0x101, 0xac3, 0x49da481b, 0x0, 0x0, 0x7fffffff, 0xa45, 0x7, 0xb, 0x9, 0x0, 0xffffffc0, 0x6b50, 0x0, 0xabd, 0x1, 0xef9c, 0x7, 0x6e, 0x9, 0x1, 0x9, 0x2, 0x7, 0x3, 0x80000001, 0x9, 0x7, 0x4, 0x6, 0x0, 0x2, 0x0, 0x4, 0x7fff, 0x81, 0x8, 0x80, 0x0, 0xfff, 0x4, 0xdb4d, 0x975, 0x2, 0x3fffc00, 0x0, 0x0, 0x6d, 0x9, 0x80000000, 0x2ad, 0xf4c, 0x9a27, 0x0, 0xfff, 0x6, 0x3ff, 0x10001, 0x0, 0x9, 0xc, 0x61c, 0x7, 0x3, 0x1ff, 0x10000, 0x9, 0xffffffff, 0x2, 0x7, 0x7e0995af, 0xfffffff9, 0x0, 0x7, 0xfff, 0x2, 0x5, 0x7, 0x8, 0x0, 0x80000001, 0x8, 0xa150, 0x4, 0x71, 0x9, 0x4, 0x7fe]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x40000) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 64) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000104000000000000fcffffff850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030010030000008500009471183000950000008d020006"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) (async, rerun: 32) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xeb8, 0x30, 0xb, 0x0, 0x0, {}, [{0xea4, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x81, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe58, 0x2, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x7, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x4, 0x5, 0xe6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x8, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffbc, 0x80, 0x3}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0xffffffff, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x80000001, 0x1001, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x1}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x8001, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x7}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3fd, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x1ff, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x1, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x10001000, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0xeb1}, {0xf85, 0x2e, 0x401, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x103, 0x4, 0xd}, {0x4, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x2000007f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x80100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x7ff}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x3, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x23, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55b0, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x3, 0x40007023, 0x1ff, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x10001, 0x8550, 0x9, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x1, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0xfffffffe, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x8, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0x10000b3, 0x2, 0x10000, 0x6, 0x6b9}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0x9, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x10000000, 0x2, 0x55, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0x2, 0x3, 0x5}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0x9d4d, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0xf9, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x8, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x2, 0x8, 0x3, 0xf, 0x9}, {0x7, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dce, 0x9}, {0x200, 0x4, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x5, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0xa, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x7e}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xb, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0xfffffffe, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x4, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d3, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x2129, 0xebd8}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x2}, {0x4}, {0x5}, {0x3}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb8}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) (async, rerun: 32) socket(0x10, 0x803, 0x8) (rerun: 32) r10 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r10, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) 3.074981776s ago: executing program 6 (id=5090): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (async) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000104050000000000000000000a0000000500010001"], 0x1c}, 0x1, 0x0, 0x0, 0x404c010}, 0x22000004) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x10, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a100000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0x94) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000280)='memory.pressure\x00', 0x2, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@delchain={0x24, 0x26, 0x10, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xe, 0x6}, {0x5, 0x6}}}, 0x24}}, 0x8000) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x100002000000008, 0x20, 0x10000000fffff}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x30, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x1, @bearer=@l2={'ib', 0x3a, 'macvtap0\x00'}}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f0000000f00)=ANY=[@ANYBLOB="1804000021bf783b901811000038e0bf868263407413ff5ce80e2848c674aaec9d520fa05738b0015d1ff983a5701674ea2f51ff2fb14178975b7d17558ade419b81589ae70e2f2e06e554c7c4877106a00a7d955a4c069af5a2147477dad3eb61459bb51acdfc50af72eb705b8fc12e08e4191f3db62e393ed8bb35403b5b96f9fcc39032c42d6a47a24b38d1a1259f7be1dc0dc75585511324185a431a7fdd198cc089a8fde74c5f9361ec541a96923d8bef0a31f7e54690e63cf6fdd53e9dcb9e84b6019200b5e3dff0e4df87cbc2e2562c5753197cc5a03470", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000db00180000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xd1, &(0x7f0000000040)=""/209, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff68}, 0x94) (async) r5 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000e40)=ANY=[@ANYBLOB="4000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000200012800b0001006d61637365630000100002800c00050001000001000280006bb85071523453579bf19c8c98b0f3e107a16cb975b4e45c0c94b767e64821b60a6c7c0856bcdf87b168b300fc91c2b8d09b2157f6356dc89543938940d31ccb3dfe983007d23ac98fde2f7646"], 0x40}, 0x1, 0x0, 0x0, 0x44890}, 0x0) close(r2) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f00000004c0)={r3, &(0x7f00000002c0)='syzkaller\x00', 0x102, &(0x7f0000000300)={@align=0xbf, {0xff, 0x529, 0x0, 0x82}}, 0x8, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0x100}) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001380)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x1c0, 0xf0, 0x0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 'lo\x00', {0x10}}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, [0xff000000], [0xff, 0xff000000, 0xff, 0xff], 'veth1_macvtap\x00', 'tunl0\x00', {}, {0xff}, 0x2f, 0x5, 0x2, 0x20}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@private1, @remote, [0xffffffff, 0xff, 0xffffffff], [0xff000000, 0xffffffff, 0xffffffff, 0xffffffff], 'ip6gretap0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x0, 0x9, 0x6, 0x4c}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x150, 0x802}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xc5, 0x1, 0x0, 0x0, 0x0, "2309e434aed9ed4562ae65f2bdd0af82e6c8cdd1de7bcfe58d1d94f3a0b29407ab3d48a249221cf4a1ccb3ef341865be1c8d24d5d20d39fbdf15b05e35478e52"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000800000000000000000000711033000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$inet6(0xa, 0x0, 0x7) (async) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x17, &(0x7f0000001440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x10, 0x0, 0x0, 0x41000}, 0x94) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000580)=[@window={0x3, 0x2, 0x5}, @timestamp, @mss={0x2, 0x1}, @sack_perm], 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a807c8c6394f903", 0x11}], 0x1}, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) 3.028156597s ago: executing program 0 (id=5091): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xffee, 0xffe0}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) 2.779058147s ago: executing program 1 (id=5092): r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x60, 0x80000) listen(r0, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r1) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)={0x44, r2, 0x411, 0x70bd2c, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x25, 0xa9, @random="05832f0e5d36af0f0d8fd9210cdeb636e95ffa39477d946d3f21db612ee03149d4"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4005005}, 0x40000d0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) r6 = socket$l2tp(0x2, 0x2, 0x73) getsockopt(r6, 0x9, 0x5, &(0x7f00000003c0)=""/30, &(0x7f0000000400)=0x1e) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f0000000040)=0xffffffff, 0x4) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, &(0x7f00000000c0)=0x93, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e000000000000000e00000007"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x4ef}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c0006"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) close(r8) 1.921454663s ago: executing program 6 (id=5093): r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$FITHAW(r0, 0xc0045878) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x27}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x5a, 0x1, 0x5, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000004026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x5, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0xa, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f425"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d220600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES64=0x0, @ANYRES8], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.817437405s ago: executing program 0 (id=5094): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000004200010025bd7000000000000301ffffffff00004400010000112233445566778899abbb86dd2cf9ff1b00002c000111000001f500010244132403b1fd606412c3258e3d67aa5b08820000ffffff840000001d2bffc1264d04000280040003"], 0x64}}, 0x0) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000060000000900000008"], 0x50) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040), 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x6c7, r2}, 0x38) (async, rerun: 32) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23, r2}, 0x38) (rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x14, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRES32=r1, @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000080)) (async) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) socket$inet6(0xa, 0x2, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xc, 0x4, 0x280, 0xffffffff, 0x148, 0x0, 0x4000000, 0x98, 0xffffffff, 0x1e8, 0x1e8, 0x1e8, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1000}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x6, {0x3ff}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) (async, rerun: 64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000000000101060000000000000000020000003400018014000180080001007f000001080002007f0000011c0002800500010011000000060002004e2000000600030006b700003400028014000180080001007f000001080002007f0000011c00028005000100110000000600020006b70000060003004e20000008000700000003e80c00058008000100524153000c000d80080001007f000002"], 0x9c}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) (async, rerun: 64) sendto$inet(r7, &(0x7f0000000100)="280000010000007f00000106b7", 0xd, 0x0, &(0x7f0000000200)={0x2, 0x6b7, @loopback}, 0x10) (async, rerun: 64) sendmmsg$inet6(r4, &(0x7f0000000000)=[{{&(0x7f0000000140)={0xa, 0x4c62, 0x7, @loopback, 0x9}, 0x1c, 0x0}}], 0x1, 0x60000040) (async) socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r10, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r10, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) 1.325629725s ago: executing program 0 (id=5095): socket$nl_rdma(0x10, 0x3, 0x14) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb}, [@generic={0x91, 0x1, 0x1, 0x5f}]}, &(0x7f0000000c40)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 1.005707905s ago: executing program 0 (id=5096): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x2c060000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') recvfrom$inet(r0, &(0x7f0000000080)=""/25, 0x19, 0x43, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001300)=[{&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f0000001180)=""/163, 0xa3}], 0x2) write$cgroup_int(r2, &(0x7f0000000140), 0xfffffdef) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(0x0, 0x0, 0x3, 0x30, r3, 0x80000000) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=ANY=[@ANYBLOB="3000000041000701fefffffffeffffff017c0000040042800c00018006000600800a00000c000280080013008b5a3b3443", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) listen(r4, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r7 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000002c0)) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x1, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@remote, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x10}}, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, 0x0, 0x0) writev(r9, 0x0, 0x0) r10 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000001240)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}, {{&(0x7f0000001340)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002780)=[{&(0x7f00000013c0)=""/159, 0x9f}, {&(0x7f0000001480)=""/34, 0x22}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/127, 0x7f}, {&(0x7f0000002740)=""/27, 0x1b}], 0x5, &(0x7f0000002800)=""/236, 0xec}, 0x1}, {{&(0x7f0000002b40)=@qipcrtr, 0x80, 0x0, 0x0, &(0x7f0000002cc0)=""/124, 0x7c}, 0x419}], 0x3, 0x2, 0x0) 0s ago: executing program 0 (id=5097): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca3", 0x4}], 0x1}], 0x1, 0x40800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f3030000800034000000007200004800600010000020000050002"], 0xcd0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x300, 0x61, 0x14, 0x7c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x3a, 0x0, 0x0, 0x200, 0x0, 0x0, 0x8, 0x0, 0x9, 0x4, 0x0, 0xbffff7fc, 0x0, 0x0, 0xb, 0x47, [0xfffffffc, 0x80]}}) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="540000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a3100000000050005000200000005000400000000000c00078008001240"], 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x98) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=@fragment={0x12, 0x0, 0x48, 0x0, 0x0, 0x1b, 0x67}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x44, @remote, 0x5}]}, &(0x7f0000000100)=0x10) bpf$BPF_PROG_TEST_RUN(0x12, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000280)={r4, 0xffff}, &(0x7f00000002c0)=0x8) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000300)={0x0, 0xffffffff}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={r8, 0x3}, &(0x7f0000000440)=0x8) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000001c0)={r5, &(0x7f00000000c0)='veth0_to_hsr\x00', 0x4040, &(0x7f0000000100)={@_ha_fsid={[0x2, 0xafc2]}, {0x9, 0x5ff, 0xfffffff8, 0xfff}}, 0x0, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x3ff}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r6, 0x9801, 0x2082}, [@IFLA_WEIGHT={0x8, 0xf, 0x3}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x101}, @IFLA_CARRIER={0x5, 0x21, 0x3}]}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="f29ce057fb25529cf12864980000001000390402", @ANYRES32=r6, @ANYBLOB="401000000041040030001280080001006772650024000280080007000a010100060003001700000006000f0003000000060010004e20000008002c0000000000140014007465616d3000000000000000000000000400220004001400080004000a0000001c0024004a2efc13a954582352ff335733c8f6c051d03a72055613be"], 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) kernel console output (not intermixed with test programs): mode [ 804.738431][ T6621] bond_slave_0: left promiscuous mode [ 804.738661][ T6621] @0Ù: left promiscuous mode [ 804.739049][ T6621] bridge0: port 4(bond0) entered disabled state [ 805.076250][ T6621] bridge_slave_1: left allmulticast mode [ 805.076280][ T6621] bridge_slave_1: left promiscuous mode [ 805.076519][ T6621] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.112936][ T6621] bridge_slave_0: left allmulticast mode [ 805.112967][ T6621] bridge_slave_0: left promiscuous mode [ 805.113188][ T6621] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.488952][ T6621] bond6 (unregistering): (slave gretap1): Releasing active interface [ 807.205395][ T6621] bond7 (unregistering): (slave bridge6): Releasing backup interface [ 807.255636][ T6621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 807.257908][ T6621] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 807.258963][ T6621] bond0 (unregistering): Released all slaves [ 807.299866][ T6621] bond1 (unregistering): Released all slaves [ 807.323804][ T6621] bond2 (unregistering): Released all slaves [ 807.357750][ T6621] bond3 (unregistering): Released all slaves [ 807.384771][ T6621] bond4 (unregistering): Released all slaves [ 807.407945][ T6621] bond5 (unregistering): (slave veth7): Releasing active interface [ 807.478447][ T6621] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 807.492154][ T6621] bond5 (unregistering): Released all slaves [ 807.518009][ T6621] bond6 (unregistering): Released all slaves [ 807.547743][ T6621] bond7 (unregistering): Released all slaves [ 807.587711][T22774] syzkaller0: left promiscuous mode [ 807.587739][T22774] syzkaller0: left allmulticast mode [ 807.645015][T22749] syzkaller1: entered promiscuous mode [ 807.645041][T22749] syzkaller1: entered allmulticast mode [ 808.290745][ T4933] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 808.295927][ T6621] ovs-dp0: left promiscuous mode [ 808.487950][T22808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3872'. [ 808.597052][T22808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3872'. [ 808.678386][T22813] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3873'. [ 809.055613][ T6621] tipc: Disabling bearer [ 809.133889][ T6621] tipc: Left network mode [ 810.237000][T22841] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3878'. [ 810.288588][T22842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3878'. [ 810.439062][ T6621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 810.489255][ T6621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 811.072310][T22846] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3879'. [ 811.072345][T22846] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3879'. [ 811.304592][T22850] openvswitch: netlink: Tunnel attr 14574 out of range max 16 [ 811.816719][ T4933] Bluetooth: hci1: command 0x0406 tx timeout [ 812.225792][ T6621] team0 (unregistering): Port device team_slave_1 removed [ 812.829396][T22877] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3883'. [ 812.918716][T22846] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 813.389572][T22885] netlink: 'syz.4.3886': attribute type 2 has an invalid length. [ 813.465478][T22886] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3885'. [ 813.532050][T22874] syzkaller0: entered promiscuous mode [ 813.532087][T22874] syzkaller0: entered allmulticast mode [ 814.275940][T22906] IPVS: length: 245 != 24 [ 814.792687][T22913] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3892'. [ 814.792754][T22913] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3892'. [ 822.098114][T22929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3898'. [ 822.241923][T22932] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:21 [ 822.320508][T22929] syz_tun (unregistering): left allmulticast mode [ 822.571966][ T6621] IPVS: stop unused estimator thread 0... [ 823.068987][T22945] syz_tun: left allmulticast mode [ 825.872331][T23005] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3915'. [ 826.214354][T22980] bond1: option lp_interval: invalid value (0) [ 826.214382][T22980] bond1: option lp_interval: allowed values 1 - 2147483647 [ 826.700917][T22980] bond1 (unregistering): Released all slaves [ 827.461890][T23025] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3919'. [ 828.097952][T23019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3918'. [ 828.747136][T23048] veth0_to_batadv: entered promiscuous mode [ 828.747161][T23048] veth0_to_batadv: entered allmulticast mode [ 831.457330][T23104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3934'. [ 831.457399][T23104] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3934'. [ 831.537806][ T31] audit: type=1107 audit(1791271162.629:15): pid=23105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Êõ,' [ 832.081591][T23109] syzkaller0: entered promiscuous mode [ 832.081623][T23109] syzkaller0: entered allmulticast mode [ 832.083466][T23107] syzkaller1: entered promiscuous mode [ 832.083487][T23107] syzkaller1: entered allmulticast mode [ 832.844253][T23114] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 833.181533][T23122] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 833.211854][T23122] xt_hashlimit: size too large, truncated to 1048576 [ 833.281640][T23126] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3940'. [ 834.086740][T23129] openvswitch: netlink: IP tunnel dst address not specified [ 835.318841][T23168] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3950'. [ 835.577905][T23173] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3951'. [ 835.577940][T23173] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3951'. [ 835.637002][T23176] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3952'. [ 835.718163][T23173] netlink: 'syz.3.3951': attribute type 21 has an invalid length. [ 835.718194][T23173] IPv6: NLM_F_CREATE should be specified when creating new route [ 835.758811][T23183] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3951'. [ 835.758848][T23183] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3951'. [ 835.771511][T23183] netlink: 'syz.3.3951': attribute type 21 has an invalid length. [ 835.919042][T23171] bond5: option min_links: invalid value (18446744073709551612) [ 835.919074][T23171] bond5: option min_links: allowed values 0 - 2147483647 [ 835.994684][T23171] bond5 (unregistering): Released all slaves [ 836.319907][T23185] lo: entered promiscuous mode [ 836.348270][T23185] tunl0: entered promiscuous mode [ 836.363918][T23185] gre0: entered promiscuous mode [ 836.448759][T23185] gretap0: entered promiscuous mode [ 836.482071][T23185] erspan0: entered promiscuous mode [ 836.507215][T23185] ip_vti0: entered promiscuous mode [ 836.522154][T23185] ip6_vti0: entered promiscuous mode [ 836.549556][T23185] sit0: entered promiscuous mode [ 836.593866][T23185] ip6tnl0: entered promiscuous mode [ 836.628847][T23185] ip6gre0: entered promiscuous mode [ 836.717163][T23185] ip6gretap0: entered promiscuous mode [ 836.780622][T23185] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.781355][T23185] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.789982][T23185] bridge0: entered promiscuous mode [ 836.851667][T23185] vcan0: entered promiscuous mode [ 836.928935][T23185] bond0: entered promiscuous mode [ 836.928962][T23185] bond_slave_0: entered promiscuous mode [ 836.929184][T23185] bond_slave_1: entered promiscuous mode [ 836.987414][T23185] team0: entered promiscuous mode [ 836.987441][T23185] team_slave_1: entered promiscuous mode [ 837.063264][T23185] dummy0: entered promiscuous mode [ 837.098901][T23185] nlmon0: entered promiscuous mode [ 837.121161][T23185] batadv0: entered promiscuous mode [ 837.158235][T23185] vxcan0: entered promiscuous mode [ 837.159262][T23185] vxcan1: entered promiscuous mode [ 837.195469][T23185] veth0: entered promiscuous mode [ 837.221624][T23185] veth1: entered promiscuous mode [ 837.286582][T23185] wg0: entered promiscuous mode [ 837.327081][T23185] wg1: entered promiscuous mode [ 837.350377][T23185] wg2: entered promiscuous mode [ 837.371958][T23185] veth0_to_bridge: entered promiscuous mode [ 837.428463][T23185] veth1_to_bridge: entered promiscuous mode [ 837.455090][T23185] veth0_to_bond: entered promiscuous mode [ 837.491692][T23185] veth1_to_bond: entered promiscuous mode [ 837.528111][T23185] veth1_to_team: entered promiscuous mode [ 837.549322][T23185] veth0_to_batadv: entered promiscuous mode [ 837.603085][T23185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 837.603155][T23185] batadv_slave_0: entered promiscuous mode [ 837.635811][T23185] veth1_to_batadv: entered promiscuous mode [ 837.655506][T23185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 837.655577][T23185] batadv_slave_1: entered promiscuous mode [ 837.689076][T23185] xfrm0: entered promiscuous mode [ 837.701529][T23185] veth0_to_hsr: entered promiscuous mode [ 837.723941][T23185] veth1_to_hsr: entered promiscuous mode [ 837.753539][T23185] hsr0: entered promiscuous mode [ 837.757908][T23185] veth1_virt_wifi: entered promiscuous mode [ 837.789674][T23185] veth0_virt_wifi: entered promiscuous mode [ 837.809262][T23185] virt_wifi0: entered promiscuous mode [ 837.833828][T23185] vlan0: entered promiscuous mode [ 837.839858][T23185] vlan1: entered promiscuous mode [ 837.865984][T23185] macvlan0: entered promiscuous mode [ 837.869244][T23185] macvlan1: entered promiscuous mode [ 837.884318][T23185] ipvlan0: entered promiscuous mode [ 837.884512][T23185] ipvlan1: entered promiscuous mode [ 837.885356][T23185] geneve0: entered promiscuous mode [ 837.888321][T23185] geneve1: entered promiscuous mode [ 837.946858][T23185] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 837.981909][T23185] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 837.986624][T23185] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 838.010371][T23185] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 838.210307][T23185] mac80211_hwsim hwsim38 wlan0: entered promiscuous mode [ 838.297757][T23185] mac80211_hwsim hwsim39 wlan1: entered promiscuous mode [ 838.308279][T23185] gre1: entered promiscuous mode [ 838.308442][T23185] veth2: entered promiscuous mode [ 838.308606][T23185] veth3: entered promiscuous mode [ 838.308771][T23185] syzkaller0: entered promiscuous mode [ 838.310775][T20722] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.310825][T20722] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.310863][T20722] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.310898][T20722] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.470055][T23188] syzkaller0: entered allmulticast mode [ 838.803209][T23223] netlink: 'syz.4.3958': attribute type 1 has an invalid length. [ 846.654511][T23223] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 846.702939][T23233] ip6erspan1: entered allmulticast mode [ 847.357746][T23277] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3965'. [ 847.918740][T23288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 851.848712][T23325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3978'. [ 851.923675][T23327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3979'. [ 851.985287][T23327] gretap0: entered promiscuous mode [ 851.993243][T23327] macvlan3: entered allmulticast mode [ 851.993268][T23327] gretap0: entered allmulticast mode [ 852.013340][T23330] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3981'. [ 852.244161][T23331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3980'. [ 852.244429][T23332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3980'. [ 852.438071][T23331] veth5: entered allmulticast mode [ 852.798679][T23353] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3984'. [ 852.820211][T23348] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3985'. [ 852.950520][T23346] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3984'. [ 853.032821][T23346] netlink: 'syz.0.3984': attribute type 1 has an invalid length. [ 853.032848][T23346] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3984'. [ 853.514573][ T6623] IPVS: starting estimator thread 0... [ 853.602013][T23360] IPVS: using max 25 ests per chain, 60000 per kthread [ 853.856606][ T6621] IPVS: starting estimator thread 0... [ 853.941455][T23367] IPVS: using max 24 ests per chain, 57600 per kthread [ 853.944285][T23368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3987'. [ 853.944313][T23368] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3987'. [ 853.944882][T23368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3987'. [ 853.944900][T23368] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3987'. [ 854.140163][T23376] netlink: 'syz.0.3991': attribute type 1 has an invalid length. [ 854.227118][T23374] pimreg: entered allmulticast mode [ 854.227384][T23374] pimreg: left allmulticast mode [ 854.502591][T23388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3993'. [ 854.547752][T23388] gretap0: entered promiscuous mode [ 854.547966][T23388] macvlan0: entered allmulticast mode [ 854.547982][T23388] gretap0: entered allmulticast mode [ 854.884533][T23391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3995'. [ 854.936385][T23390] nbd: illegal input index 65508 [ 856.079853][T23407] syzkaller0: entered promiscuous mode [ 856.080064][T23407] syzkaller0: entered allmulticast mode [ 856.124180][ T4933] Bluetooth: hci1: command 0x0406 tx timeout [ 856.699795][T23440] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 856.863750][T12433] IPVS: starting estimator thread 0... [ 856.981798][T23444] IPVS: using max 29 ests per chain, 69600 per kthread [ 857.268130][T23452] 8021q: adding VLAN 0 to HW filter on device bond1 [ 857.268601][T23453] bond0: left promiscuous mode [ 857.330223][T23459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 857.433492][T23450] IPv6: NLM_F_CREATE should be specified when creating new route [ 857.433599][T23450] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 857.433610][T23450] IPv6: NLM_F_CREATE should be set when creating new route [ 857.433656][T23450] IPv6: NLM_F_CREATE should be set when creating new route [ 857.433682][T23450] IPv6: NLM_F_CREATE should be set when creating new route [ 857.912534][T23470] xt_hashlimit: size too large, truncated to 1048576 [ 857.912560][T23470] xt_hashlimit: max too large, truncated to 1048576 [ 858.013860][T23466] netlink: 'syz.2.4011': attribute type 1 has an invalid length. [ 858.103776][T23473] netlink: 'syz.0.4013': attribute type 1 has an invalid length. [ 858.771438][T23484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 858.965428][T23485] __nla_validate_parse: 7 callbacks suppressed [ 858.965454][T23485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4016'. [ 858.995401][T23489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4016'. [ 860.301997][T23513] netlink: 'syz.1.4021': attribute type 5 has an invalid length. [ 860.546756][T23521] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4023'. [ 860.753829][T23529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4025'. [ 860.838269][T23526] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 860.838311][T23526] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 860.838350][T23526] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 860.948503][T23538] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4025'. [ 861.117649][T23523] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4024'. [ 861.171409][T23538] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4025'. [ 861.599293][T23528] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 862.087107][T23559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4031'. [ 862.405815][T23559] macvlan3: entered allmulticast mode [ 862.648711][T23561] netlink: 'syz.3.4032': attribute type 8 has an invalid length. [ 862.732414][T23565] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4033'. [ 862.770219][T23575] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4033'. [ 862.985770][T23576] netlink: 'syz.4.4036': attribute type 6 has an invalid length. [ 863.121190][ T6623] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 863.123729][ T6621] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 863.123774][ T6621] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 863.150594][ T6623] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 863.307361][T23596] digital: digital_start_poll: Unknown protocol [ 863.367177][T23601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 864.371601][T23632] ipvlan0: left promiscuous mode [ 864.431425][T23638] __nla_validate_parse: 5 callbacks suppressed [ 864.431455][T23638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4044'. [ 864.633575][T23638] macvlan4: entered allmulticast mode [ 865.068865][T23652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4045'. [ 865.147212][T23652] 8021q: adding VLAN 0 to HW filter on device bond2 [ 865.284882][T23664] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 865.351163][T23652] bond2 (unregistering): (slave geneve2): Releasing backup interface [ 865.383328][T23652] bond2 (unregistering): Released all slaves [ 865.998230][T23670] pim6reg: entered allmulticast mode [ 865.998534][T23670] pim6reg: left allmulticast mode [ 866.600343][T23692] netlink: 'syz.2.4049': attribute type 11 has an invalid length. [ 866.937645][T23694] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4050'. [ 867.624244][T23709] netlink: 'syz.2.4056': attribute type 10 has an invalid length. [ 867.675088][T23709] team0 (unregistering): Port device team_slave_1 removed [ 867.713226][T23710] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4056'. [ 869.142876][T23740] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4064'. [ 870.335368][T23762] ovs-dp0: entered promiscuous mode [ 870.338520][T23767] bond0: (slave vlan1): Opening slave failed [ 870.968798][T23782] netlink: 'syz.4.4075': attribute type 29 has an invalid length. [ 871.012260][T23782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4075'. [ 871.064238][T23782] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4075'. [ 871.088314][T23781] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4073'. [ 871.487931][T23793] sctp: [Deprecated]: syz.4.4077 (pid 23793) Use of int in max_burst socket option. [ 871.487931][T23793] Use struct sctp_assoc_value instead [ 873.479309][T23839] netlink: 'syz.0.4083': attribute type 8 has an invalid length. [ 873.638851][T23836] IPVS: set_ctl: invalid protocol: 31091 97.108.108.101:29233 [ 873.638895][T23836] IPVS: set_ctl: invalid protocol: 31091 97.108.108.101:29233 [ 873.638922][T23836] IPVS: set_ctl: invalid protocol: 31091 97.108.108.101:29233 [ 873.791797][T23850] netlink: 21 bytes leftover after parsing attributes in process `syz.2.4089'. [ 873.794169][T23833] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4087'. [ 873.855427][T23850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4089'. [ 873.872237][T23850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4089'. [ 874.229221][T23857] bond1: Unable to set up delay as MII monitoring is disabled [ 874.244083][T23857] bond1 (unregistering): Released all slaves [ 874.519903][T23864] netlink: 404 bytes leftover after parsing attributes in process `syz.3.4093'. [ 874.520363][T23865] netlink: 404 bytes leftover after parsing attributes in process `syz.3.4093'. [ 874.861140][T23864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4093'. [ 876.729477][T23917] __nla_validate_parse: 1 callbacks suppressed [ 876.729503][T23917] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4109'. [ 876.833985][T23924] netlink: ct family unspecified [ 876.834031][T23924] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 877.337599][T23935] xt_hashlimit: size too large, truncated to 1048576 [ 877.337624][T23935] xt_hashlimit: max too large, truncated to 1048576 [ 877.427846][T23928] bond1: entered allmulticast mode [ 877.529172][T23933] macvlan4: entered promiscuous mode [ 877.529200][T23933] macvlan4: entered allmulticast mode [ 877.548354][T23933] bond1: entered promiscuous mode [ 877.604619][T23933] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 877.653724][T23933] bond1: left promiscuous mode [ 877.722751][ T4933] Bluetooth: hci4: SCO packet too small [ 878.102403][T23941] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4116'. [ 878.432037][T23944] netlink: 'syz.0.4117': attribute type 4 has an invalid length. [ 878.884556][T23953] syzkaller0: entered promiscuous mode [ 878.884783][T23953] syzkaller0: entered allmulticast mode [ 879.068135][T23951] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4119'. [ 879.449067][T23948] bond2 (unregistering): Released all slaves [ 879.620374][T23974] netlink: 'syz.0.4122': attribute type 16 has an invalid length. [ 879.620864][T23974] netlink: 'syz.0.4122': attribute type 17 has an invalid length. [ 879.904328][T23974] veth0_to_batadv: left promiscuous mode [ 879.904363][T23974] veth0_to_batadv: left allmulticast mode [ 880.070233][T23216] s`z1: Port: 1 Link DOWN [ 880.280680][T23980] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4129'. [ 880.332349][T23978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4128'. [ 880.332374][T23978] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4128'. [ 880.749890][T23990] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4132'. [ 880.749935][T23990] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4132'. [ 881.249512][T24007] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4134'. [ 881.249551][T24007] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 882.998219][T24042] xt_hashlimit: size too large, truncated to 1048576 [ 882.998245][T24042] xt_hashlimit: max too large, truncated to 1048576 [ 883.037063][T24043] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4144'. [ 883.117567][T24047] ip_tables: iptables: counters copy to user failed while replacing table [ 883.776686][T24056] SET target dimension over the limit! [ 883.789201][T24057] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4147'. [ 883.789555][T24056] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4147'. [ 885.203041][T24094] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4149'. [ 885.444555][T24096] netlink: 'syz.3.4153': attribute type 2 has an invalid length. [ 885.444583][T24096] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4153'. [ 886.010871][T24075] gretap0: left allmulticast mode [ 886.112837][T21345] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 886.131312][ T35] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 886.131369][ T35] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 886.131409][ T35] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 886.789131][T24111] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4158'. [ 888.076481][T24143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4163'. [ 888.178641][T24147] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 888.356331][T24153] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4162'. [ 888.773043][T24156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4166'. [ 888.824078][T24156] macvlan4: entered allmulticast mode [ 888.824106][T24156] gretap0: entered allmulticast mode [ 889.132516][T24159] batman_adv: batadv0: Adding interface: syzkaller0 [ 889.132566][T24159] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 889.132601][T24159] batman_adv: batadv0: Interface activated: syzkaller0 [ 889.298078][T24158] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 889.458767][T24170] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4172'. [ 889.502829][T24169] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4171'. [ 889.529723][T24170] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4172'. [ 889.619382][T24158] batman_adv: batadv0: Removing interface: syzkaller0 [ 889.836111][T24182] x_tables: duplicate underflow at hook 1 [ 889.889283][T24173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4174'. [ 889.889313][T24173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4174'. [ 890.707357][T24181] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.709855][T24181] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.856761][T24193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4178'. [ 890.856788][T24193] netlink: 23 bytes leftover after parsing attributes in process `syz.2.4178'. [ 891.021872][T24181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 891.028240][T24181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 891.718136][T24181] batman_adv: batadv0: Interface deactivated: gretap1 [ 891.842617][T24212] FAULT_INJECTION: forcing a failure. [ 891.842617][T24212] name failslab, interval 1, probability 0, space 0, times 0 [ 891.842657][T24212] CPU: 1 UID: 0 PID: 24212 Comm: syz.1.4184 Not tainted syzkaller #0 PREEMPT(full) [ 891.842680][T24212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 891.842694][T24212] Call Trace: [ 891.842703][T24212] [ 891.842714][T24212] dump_stack_lvl+0xe8/0x150 [ 891.842757][T24212] should_fail_ex+0x410/0x560 [ 891.842790][T24212] should_failslab+0xa8/0x100 [ 891.842835][T24212] __kvmalloc_node_noprof+0x176/0x820 [ 891.842863][T24212] ? xt_alloc_table_info+0x40/0xb0 [ 891.842984][T24212] ? xt_alloc_table_info+0x40/0xb0 [ 891.843020][T24212] xt_alloc_table_info+0x40/0xb0 [ 891.843049][T24212] do_ipt_set_ctl+0x962/0xe20 [ 891.843111][T24212] ? rcu_is_watching+0x16/0xb0 [ 891.843141][T24212] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 891.843186][T24212] ? __mutex_unlock_slowpath+0x731/0x900 [ 891.843227][T24212] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 891.843273][T24212] nf_setsockopt+0x26f/0x290 [ 891.843305][T24212] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 891.843335][T24212] do_sock_setsockopt+0x17c/0x1b0 [ 891.843368][T24212] __x64_sys_setsockopt+0x13d/0x1b0 [ 891.843402][T24212] do_syscall_64+0x166/0x520 [ 891.843431][T24212] ? trace_irq_disable+0x3b/0x140 [ 891.843455][T24212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.843477][T24212] ? clear_bhb_loop+0x70/0xc0 [ 891.843504][T24212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.843524][T24212] RIP: 0033:0x7f1f2279e199 [ 891.843546][T24212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.843565][T24212] RSP: 002b:00007f1f23680028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 891.843590][T24212] RAX: ffffffffffffffda RBX: 00007f1f22a25fa0 RCX: 00007f1f2279e199 [ 891.843606][T24212] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 891.843620][T24212] RBP: 00007f1f23680090 R08: 0000000000000298 R09: 0000000000000000 [ 891.843633][T24212] R10: 0000200000000f00 R11: 0000000000000246 R12: 0000000000000001 [ 891.843648][T24212] R13: 00007f1f22a26038 R14: 00007f1f22a25fa0 R15: 00007ffd949c3948 [ 891.843682][T24212] [ 892.453487][T24187] vti0: entered promiscuous mode [ 892.453521][T24187] vti0: entered allmulticast mode [ 892.492427][T24190] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 892.632701][ T35] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 892.632748][ T35] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.632786][ T35] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 892.632810][ T35] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.632844][ T35] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 892.632869][ T35] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.632902][ T35] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 892.632927][ T35] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.773291][T24218] macvlan5: entered allmulticast mode [ 893.124606][T24225] __nla_validate_parse: 2 callbacks suppressed [ 893.124631][T24225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4187'. [ 893.591870][T24240] FAULT_INJECTION: forcing a failure. [ 893.591870][T24240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 893.591905][T24240] CPU: 1 UID: 0 PID: 24240 Comm: syz.1.4195 Not tainted syzkaller #0 PREEMPT(full) [ 893.591929][T24240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 893.591941][T24240] Call Trace: [ 893.591950][T24240] [ 893.591960][T24240] dump_stack_lvl+0xe8/0x150 [ 893.591994][T24240] should_fail_ex+0x410/0x560 [ 893.592025][T24240] _copy_from_user+0x2d/0xb0 [ 893.592054][T24240] copy_from_sockptr_offset+0x66/0xa0 [ 893.592085][T24240] do_ipt_set_ctl+0x991/0xe20 [ 893.592124][T24240] ? rcu_is_watching+0x16/0xb0 [ 893.592151][T24240] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 893.592195][T24240] ? __mutex_unlock_slowpath+0x731/0x900 [ 893.592232][T24240] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 893.592277][T24240] nf_setsockopt+0x26f/0x290 [ 893.592307][T24240] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 893.592333][T24240] do_sock_setsockopt+0x17c/0x1b0 [ 893.592365][T24240] __x64_sys_setsockopt+0x13d/0x1b0 [ 893.592397][T24240] do_syscall_64+0x166/0x520 [ 893.592425][T24240] ? trace_irq_disable+0x3b/0x140 [ 893.592446][T24240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.592467][T24240] ? clear_bhb_loop+0x70/0xc0 [ 893.592492][T24240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.592512][T24240] RIP: 0033:0x7f1f2279e199 [ 893.592532][T24240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 893.592550][T24240] RSP: 002b:00007f1f23680028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 893.592574][T24240] RAX: ffffffffffffffda RBX: 00007f1f22a25fa0 RCX: 00007f1f2279e199 [ 893.592589][T24240] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 893.592601][T24240] RBP: 00007f1f23680090 R08: 0000000000000298 R09: 0000000000000000 [ 893.592615][T24240] R10: 0000200000000f00 R11: 0000000000000246 R12: 0000000000000001 [ 893.592628][T24240] R13: 00007f1f22a26038 R14: 00007f1f22a25fa0 R15: 00007ffd949c3948 [ 893.592668][T24240] [ 894.059549][T24244] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 894.259300][T24250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4199'. [ 894.286640][T24250] macvlan5: entered allmulticast mode [ 894.309786][T24239] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4193'. [ 894.431855][T24252] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4201'. [ 895.386276][T24276] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4210'. [ 895.426992][T24278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 895.544112][T24288] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4213'. [ 895.545272][T24288] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4213'. [ 895.668518][T24290] netlink: 'syz.1.4212': attribute type 10 has an invalid length. [ 895.704550][T24290] team0: Port device dummy0 added [ 895.787710][T24290] netlink: 'syz.1.4212': attribute type 10 has an invalid length. [ 896.277685][T24309] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4218'. [ 896.297584][T24310] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4216'. [ 896.394685][T24290] team0: Port device dummy0 removed [ 897.071410][T24318] syz_tun: left promiscuous mode [ 897.184173][T24318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 897.301380][T24318] 8021q: adding VLAN 0 to HW filter on device team0 [ 897.426621][T24318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.898445][T24318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 898.044294][T24318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 898.131671][T24318] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 898.338943][T24355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4226'. [ 898.455675][T24356] netlink: 'syz.1.4226': attribute type 10 has an invalid length. [ 898.510084][T20723] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.510212][T20723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 898.557900][T20723] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.558027][T20723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 898.820124][T24361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4227'. [ 898.933803][T24361] macsec0: entered promiscuous mode [ 898.937028][T24361] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 899.202045][T24372] xt_hashlimit: size too large, truncated to 1048576 [ 899.202071][T24372] xt_hashlimit: max too large, truncated to 1048576 [ 899.687487][T24379] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4230'. [ 901.036382][T24405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4234'. [ 901.253279][T24404] netlink: NAT attribute has 8 unknown bytes [ 901.253319][T24404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 902.183526][T24427] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4240'. [ 902.293915][T24427] bond5: entered allmulticast mode [ 902.311100][T24427] 8021q: adding VLAN 0 to HW filter on device bond5 [ 902.340160][T24432] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4242'. [ 902.433966][T24425] syzkaller0: entered promiscuous mode [ 902.433998][T24425] syzkaller0: entered allmulticast mode [ 902.778870][T24436] vlan2: entered allmulticast mode [ 902.778922][T24436] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 902.784147][T24438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4243'. [ 902.856146][T24436] batman_adv: batadv0: Adding interface: vlan2 [ 902.856169][T24436] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 903.292523][T24456] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4246'. [ 903.453665][T24457] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4246'. [ 911.378366][T24452] tipc: Enabled bearer , priority 0 [ 912.031804][T24458] tipc: Resetting bearer [ 912.088259][T21345] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 912.088351][T21345] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 912.088391][T21345] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 912.088427][T21345] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 912.727673][T24489] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4253'. [ 913.414178][T24501] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4255'. [ 913.502377][T24471] syzkaller0: entered promiscuous mode [ 913.502414][T24471] syzkaller0: entered allmulticast mode [ 914.231974][T24508] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4258'. [ 914.232480][T24509] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4258'. [ 914.356862][T24480] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 914.508358][T24511] netlink: 'syz.2.4258': attribute type 16 has an invalid length. [ 914.508390][T24511] netlink: 'syz.2.4258': attribute type 17 has an invalid length. [ 922.032786][T24511] lo: left promiscuous mode [ 922.032981][T24511] tunl0: left promiscuous mode [ 922.033157][T24511] gre0: left promiscuous mode [ 922.033286][T24511] gretap0: left promiscuous mode [ 922.033410][T24511] erspan0: left promiscuous mode [ 922.033532][T24511] ip_vti0: left promiscuous mode [ 922.033692][T24511] ip6_vti0: left promiscuous mode [ 922.033822][T24511] sit0: left promiscuous mode [ 922.033963][T24511] ip6tnl0: left promiscuous mode [ 922.034085][T24511] ip6gre0: left promiscuous mode [ 922.034212][T24511] ip6gretap0: left promiscuous mode [ 922.034843][T24511] bridge0: left promiscuous mode [ 922.034982][T24511] vcan0: left promiscuous mode [ 922.035274][T24511] dummy0: left promiscuous mode [ 922.035435][T24511] nlmon0: left promiscuous mode [ 922.035588][T24511] batadv0: left promiscuous mode [ 922.035826][T24511] vxcan0: left promiscuous mode [ 922.035991][T24511] vxcan1: left promiscuous mode [ 922.036144][T24511] veth0: left promiscuous mode [ 922.036298][T24511] veth1: left promiscuous mode [ 922.036452][T24511] wg0: left promiscuous mode [ 922.036609][T24511] wg1: left promiscuous mode [ 922.036770][T24511] wg2: left promiscuous mode [ 922.036922][T24511] veth0_to_bridge: left promiscuous mode [ 922.037195][T24511] veth1_to_bridge: left promiscuous mode [ 922.037464][T24511] veth0_to_bond: left promiscuous mode [ 922.038737][T24511] bond_slave_0: left promiscuous mode [ 922.038909][T24511] veth1_to_bond: left promiscuous mode [ 922.039066][T24511] bond_slave_1: left promiscuous mode [ 922.039224][T24511] veth1_to_team: left promiscuous mode [ 922.039380][T24511] team_slave_1: left promiscuous mode [ 922.039536][T24511] veth0_to_batadv: left promiscuous mode [ 922.039710][T24511] batadv_slave_0: left promiscuous mode [ 922.039879][T24511] veth1_to_batadv: left promiscuous mode [ 922.040040][T24511] batadv_slave_1: left promiscuous mode [ 922.040230][T24511] xfrm0: left promiscuous mode [ 922.300636][T24511] veth0_to_hsr: left promiscuous mode [ 922.300998][T24511] veth1_to_hsr: left promiscuous mode [ 922.301308][T24511] hsr0: left promiscuous mode [ 922.301465][T24511] veth1_virt_wifi: left promiscuous mode [ 922.301667][T24511] veth0_virt_wifi: left promiscuous mode [ 922.301824][T24511] virt_wifi0: left promiscuous mode [ 922.302271][T24511] vlan0: left promiscuous mode [ 922.302638][T24511] vlan1: left promiscuous mode [ 922.302950][T24511] macvlan0: left promiscuous mode [ 922.303107][T24511] macvlan1: left promiscuous mode [ 922.303414][T24511] ipvlan1: left promiscuous mode [ 922.303579][T24511] geneve0: left promiscuous mode [ 922.303740][T24511] geneve1: left promiscuous mode [ 922.303908][T24511] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 922.304047][T24511] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 922.304180][T24511] netdevsim netdevsim2 netdevsim2: left promiscuous mode [ 922.304308][T24511] netdevsim netdevsim2 netdevsim3: left promiscuous mode [ 922.304437][T24511] mac80211_hwsim hwsim38 wlan0: left promiscuous mode [ 922.304603][T24511] mac80211_hwsim hwsim39 wlan1: left promiscuous mode [ 922.304762][T24511] ip6tnl1: left promiscuous mode [ 922.304776][T24511] ip6tnl1: left allmulticast mode [ 922.304897][T24511] gre1: left promiscuous mode [ 922.305021][T24511] veth2: left promiscuous mode [ 922.305177][T24511] veth3: left promiscuous mode [ 923.025756][T24544] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4266'. [ 923.054578][T24545] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4267'. [ 923.293470][T24555] netlink: 'syz.3.4268': attribute type 30 has an invalid length. [ 923.474744][T24558] netlink: 'syz.0.4269': attribute type 1 has an invalid length. [ 923.539827][T24557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4269'. [ 923.577397][T24557] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4269'. [ 923.749616][T24559] 8021q: adding VLAN 0 to HW filter on device bond7 [ 923.765544][T24559] bond6: (slave bond7): making interface the new active one [ 923.766911][T24559] bond6: (slave bond7): Enslaving as an active interface with an up link [ 923.838958][T24557] 8021q: adding VLAN 0 to HW filter on device bond6 [ 925.125245][T24612] netlink: 'syz.3.4279': attribute type 1 has an invalid length. [ 925.763451][T24631] xt_CT: You must specify a L4 protocol and not use inversions on it [ 925.965117][T24633] netlink: 'syz.4.4282': attribute type 9 has an invalid length. [ 928.462018][T24690] syzkaller0: left promiscuous mode [ 928.462043][T24690] syzkaller0: left allmulticast mode [ 928.568351][T24673] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 930.103932][T24719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4307'. [ 933.129353][T24719] gretap0: entered promiscuous mode [ 933.130020][T24719] macvlan3: entered allmulticast mode [ 933.130037][T24719] gretap0: entered allmulticast mode [ 933.264788][T24737] --map-set only usable from mangle table [ 934.780013][T24772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4319'. [ 935.558121][T24783] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 935.571190][T24783] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 935.633486][T24791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4325'. [ 935.659836][T24791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 936.031339][T24798] Cannot find set identified by id 65534 to match [ 936.163504][T24805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4329'. [ 936.227216][T24805] macvlan0: entered allmulticast mode [ 936.227247][T24805] gretap0: entered allmulticast mode [ 937.022168][T24822] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4336'. [ 937.895249][T24837] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4337'. [ 937.937020][T24832] bond8 (unregistering): Released all slaves [ 938.222814][T24839] netlink: 'syz.3.4341': attribute type 1 has an invalid length. [ 939.250865][T24857] netlink: Failed to add helper -22 [ 939.250941][T24857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 939.328548][T24865] ip_tables: iptables: counters copy to user failed while replacing table [ 939.328911][T24865] ip_tables: iptables: counters copy to user failed while replacing table [ 939.329287][T24865] ip_tables: iptables: counters copy to user failed while replacing table [ 939.340597][T24865] ip_tables: iptables: counters copy to user failed while replacing table [ 939.341044][T24865] ip_tables: iptables: counters copy to user failed while replacing table [ 939.341370][T24865] ip_tables: iptables: counters copy to user failed while replacing table [ 939.341674][T24865] ip_tables: iptables: counters copy to user failed while replacing table [ 939.364913][T24865] ip_tables: iptables: counters copy to user failed while replacing table [ 939.420649][T24868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4347'. [ 939.420676][T24868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4347'. [ 939.849010][T24845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4342'. [ 939.849051][T24845] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4342'. [ 940.304965][T24845] bridge20: entered promiscuous mode [ 940.305194][T24845] bridge20: entered allmulticast mode [ 940.449058][T24853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4343'. [ 940.449095][T24853] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4343'. [ 940.550731][T24853] bridge21: entered promiscuous mode [ 940.550760][T24853] bridge21: entered allmulticast mode [ 940.686239][T24890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4349'. [ 940.686275][T24890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4349'. [ 940.711643][T24891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4349'. [ 940.711674][T24891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4349'. [ 940.998218][T24897] SET target dimension over the limit! [ 941.027439][T24889] wireguard1: entered allmulticast mode [ 941.078861][T24900] syzkaller1: entered promiscuous mode [ 941.078885][T24900] syzkaller1: entered allmulticast mode [ 941.179517][T24890] vlan2: entered promiscuous mode [ 941.179546][T24890] bridge0: entered promiscuous mode [ 941.938296][T24923] syzkaller0: entered promiscuous mode [ 941.938532][T24923] syzkaller0: entered allmulticast mode [ 941.976457][T24923] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4358'. [ 941.976484][T24923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4358'. [ 942.085101][T24921] syzkaller0: entered promiscuous mode [ 942.085369][T24921] syzkaller0: entered allmulticast mode [ 942.798143][T24945] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4364'. [ 942.798176][T24945] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4364'. [ 942.798194][T24945] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4364'. [ 942.798330][T24945] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4364'. [ 943.629062][ T4933] block nbd4: Receive control failed (result -1) [ 944.419259][T24969] net_ratelimit: 58 callbacks suppressed [ 944.419291][T24969] netlink: Conntrack attr has 4 unknown bytes [ 944.419323][T24969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 944.979380][T24977] netlink: 'syz.4.4373': attribute type 1 has an invalid length. [ 944.979407][T24977] netlink: 'syz.4.4373': attribute type 2 has an invalid length. [ 945.383473][T24990] macvlan9: entered allmulticast mode [ 945.619285][T24995] FAULT_INJECTION: forcing a failure. [ 945.619285][T24995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 945.619322][T24995] CPU: 1 UID: 0 PID: 24995 Comm: syz.4.4379 Not tainted syzkaller #0 PREEMPT(full) [ 945.619345][T24995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 945.619358][T24995] Call Trace: [ 945.619368][T24995] [ 945.619377][T24995] dump_stack_lvl+0xe8/0x150 [ 945.619412][T24995] should_fail_ex+0x410/0x560 [ 945.619443][T24995] _copy_from_user+0x2d/0xb0 [ 945.619472][T24995] ___sys_sendmsg+0x1c6/0x360 [ 945.619500][T24995] ? __lock_acquire+0x747/0x2de0 [ 945.619528][T24995] ? __pfx____sys_sendmsg+0x10/0x10 [ 945.619592][T24995] ? __fget_files+0x2a/0x420 [ 945.619620][T24995] ? __fget_files+0x3a2/0x420 [ 945.619658][T24995] __x64_sys_sendmsg+0x1b1/0x290 [ 945.619688][T24995] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 945.619738][T24995] do_syscall_64+0x166/0x520 [ 945.619767][T24995] ? trace_irq_disable+0x3b/0x140 [ 945.619788][T24995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.619810][T24995] ? clear_bhb_loop+0x70/0xc0 [ 945.619834][T24995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.619855][T24995] RIP: 0033:0x7f85adb9e199 [ 945.619875][T24995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 945.619893][T24995] RSP: 002b:00007f85ae9ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 945.619916][T24995] RAX: ffffffffffffffda RBX: 00007f85ade25fa0 RCX: 00007f85adb9e199 [ 945.619931][T24995] RDX: 0000000000040000 RSI: 0000200000000380 RDI: 0000000000000005 [ 945.619944][T24995] RBP: 00007f85ae9ba090 R08: 0000000000000000 R09: 0000000000000000 [ 945.619958][T24995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 945.619970][T24995] R13: 00007f85ade26038 R14: 00007f85ade25fa0 R15: 00007ffeb4f8a2a8 [ 945.620004][T24995] [ 945.995564][T24996] netlink: 'syz.3.4378': attribute type 2 has an invalid length. [ 945.995591][T24996] __nla_validate_parse: 197 callbacks suppressed [ 945.995605][T24996] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4378'. [ 946.474119][T25015] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4384'. [ 946.509220][T25015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 947.063101][T25020] syzkaller1: entered promiscuous mode [ 947.063126][T25020] syzkaller1: entered allmulticast mode [ 947.188598][T25022] netlink: 'syz.1.4388': attribute type 1 has an invalid length. [ 947.413198][T25023] bond3: entered promiscuous mode [ 947.416871][T25023] bond3: entered allmulticast mode [ 947.417476][T25023] 8021q: adding VLAN 0 to HW filter on device bond3 [ 949.125805][T25063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4394'. [ 949.219837][T25066] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 949.353111][T25068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4394'. [ 949.512828][T25070] netlink: Conntrack attr has 2 unknown bytes [ 949.612436][T25076] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4398'. [ 949.752702][T25080] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4396'. [ 949.796858][T25081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4398'. [ 950.657578][T25079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4398'. [ 951.426203][T25117] tc_dump_action: action bad kind [ 951.676445][T25131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4408'. [ 951.685098][T25127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4406'. [ 951.762335][T25131] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.764823][T25131] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.822684][T25131] macvlan2: left promiscuous mode [ 951.822713][T25131] bond4: left promiscuous mode [ 951.826589][T25131] vti0: left promiscuous mode [ 952.010790][T25140] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 952.309636][T25135] netlink: 'syz.2.4409': attribute type 1 has an invalid length. [ 952.309665][T25135] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4409'. [ 952.389760][T25130] syzkaller0: entered promiscuous mode [ 952.389792][T25130] syzkaller0: entered allmulticast mode [ 953.223691][T25169] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4417'. [ 961.147874][T25165] bridge1: entered promiscuous mode [ 961.147901][T25165] bridge1: entered allmulticast mode [ 961.176424][T25165] team0: Port device bridge1 added [ 961.904756][T25194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4422'. [ 961.998495][T25194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4422'. [ 962.018809][T25194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4422'. [ 962.036453][T25194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4422'. [ 962.078661][T25194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4422'. [ 962.079685][T25194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4422'. [ 962.102099][T25194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4422'. [ 962.278243][T25194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4422'. [ 962.278851][T25194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4422'. [ 962.310167][T25194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4422'. [ 963.043747][T25206] netlink: 'syz.2.4424': attribute type 4 has an invalid length. [ 963.138492][T25206] netlink: 'syz.2.4424': attribute type 4 has an invalid length. [ 963.271946][T25206] batadv1: entered promiscuous mode [ 963.271972][T25206] batadv1: entered allmulticast mode [ 963.279317][T25206] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 963.988899][T25232] syzkaller0: entered promiscuous mode [ 963.988924][T25232] syzkaller0: entered allmulticast mode [ 965.784070][T25296] bond8: entered promiscuous mode [ 966.851555][T25321] netlink: 'syz.1.4443': attribute type 1 has an invalid length. [ 967.022877][T25326] __nla_validate_parse: 24 callbacks suppressed [ 967.022900][T25326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4445'. [ 967.182053][T25301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4437'. [ 967.182093][T25301] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4437'. [ 967.359880][T25301] bridge22: entered promiscuous mode [ 967.359906][T25301] bridge22: entered allmulticast mode [ 967.715479][T25336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4446'. [ 967.897076][T25336] macvlan4: entered allmulticast mode [ 969.838201][T25367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 969.983955][T25370] netlink: 'syz.2.4457': attribute type 4 has an invalid length. [ 969.983981][T25370] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4457'. [ 970.032455][T25370] .`: renamed from bond0 (while UP) [ 970.169164][T25372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4458'. [ 970.538105][T25383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 970.565429][T25383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 971.363695][T25403] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 972.880279][T25387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4462'. [ 972.880318][T25387] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4462'. [ 972.964958][T25387] bridge23: entered promiscuous mode [ 972.964984][T25387] bridge23: entered allmulticast mode [ 973.753910][T25434] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4473'. [ 974.341683][T25446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4474'. [ 974.366832][T25440] netlink: 'syz.1.4475': attribute type 1 has an invalid length. [ 974.366867][T25440] netlink: 756 bytes leftover after parsing attributes in process `syz.1.4475'. [ 974.491003][T25444] dvmrp16: entered allmulticast mode [ 975.271947][T25456] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4479'. [ 975.271981][T25456] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4479'. [ 975.272002][T25456] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4479'. [ 975.272021][T25456] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4479'. [ 975.272038][T25456] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4479'. [ 975.272760][T25456] tipc: Resetting bearer [ 975.537633][T25456] gretap0: left allmulticast mode [ 975.741112][T12442] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 975.741175][T12442] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 975.741210][T12442] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 975.741244][T12442] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 977.205083][T25513] netlink: 'syz.2.4491': attribute type 1 has an invalid length. [ 978.010970][T25524] bond9 (unregistering): Released all slaves [ 979.166668][T25479] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 979.798344][T25536] __nla_validate_parse: 188 callbacks suppressed [ 979.798366][T25536] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4498'. [ 979.843811][T25532] syzkaller0: entered promiscuous mode [ 979.843839][T25532] syzkaller0: entered allmulticast mode [ 980.291095][T25541] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4499'. [ 980.424161][T25547] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4499'. [ 980.614753][T25553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4502'. [ 981.054518][T25571] netlink: 'syz.1.4505': attribute type 1 has an invalid length. [ 981.054543][T25571] netlink: 1368 bytes leftover after parsing attributes in process `syz.1.4505'. [ 981.230094][T25560] 8021q: adding VLAN 0 to HW filter on device .` [ 981.516587][T25560] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 981.516721][T25560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 981.585055][T25560] veth1_vlan: left promiscuous mode [ 981.598402][T25560] veth0_vlan: left promiscuous mode [ 981.608422][T25560] veth0_vlan: entered promiscuous mode [ 981.625406][T25560] veth1_vlan: entered promiscuous mode [ 981.709474][T25560] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 981.723526][T25560] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 981.728764][T25560] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 981.750722][T25560] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 981.785302][T25560] 8021q: adding VLAN 0 to HW filter on device bond1 [ 981.813238][T25560] batadv1: left promiscuous mode [ 981.829270][T25560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 981.883019][ T6625] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.883141][ T6625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 981.917529][ T6625] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.917648][ T6625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 982.630852][ T6625] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 982.630890][ T6625] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.630983][ T6625] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 982.631008][ T6625] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.631078][ T6625] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 982.631102][ T6625] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.631237][ T6625] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 982.631262][ T6625] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.918250][T25589] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4509'. [ 982.944429][T25588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4510'. [ 982.964429][T25588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4510'. [ 983.122532][T25588] netlink: 15672 bytes leftover after parsing attributes in process `syz.4.4510'. [ 983.539631][T25602] openvswitch: netlink: Missing valid actions attribute. [ 983.539679][T25602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 983.675891][T25602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4514'. [ 984.343028][T25621] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 984.357396][T25621] 0ªX¹¦Dö»: entered allmulticast mode [ 984.795805][ T6625] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 984.795908][ T6625] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 984.795946][ T6625] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 984.810995][T12437] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 985.381648][T25642] __nla_validate_parse: 2 callbacks suppressed [ 985.381673][T25642] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4523'. [ 986.003620][T25650] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4525'. [ 986.491449][T25660] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4529'. [ 986.574468][T25660] vlan2: entered allmulticast mode [ 986.574493][T25660] bond0: entered allmulticast mode [ 987.092230][T25681] siw: device registration error -23 [ 987.164036][T25681] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4531'. [ 987.195067][T25684] netlink: 'syz.0.4533': attribute type 61 has an invalid length. [ 987.195101][T25684] netlink: 'syz.0.4533': attribute type 62 has an invalid length. [ 987.654858][T25691] ip6t_ah: unknown flags 4 [ 990.176950][T25684] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 990.192459][T25695] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4535'. [ 990.397115][T24264] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 990.477760][T24264] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 990.493319][T24264] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 990.571211][T24264] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 990.580197][T24264] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 991.258746][T25723] xt_REDIRECT: bad MAP_IPS. [ 991.816238][T25741] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4546'. [ 991.884084][T25741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4546'. [ 992.077062][T25741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4546'. [ 992.841600][ T4933] Bluetooth: hci2: command tx timeout [ 992.959514][T25753] vti1: entered promiscuous mode [ 993.127737][T25762] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4550'. [ 993.216553][T25753] netlink: 'syz.4.4547': attribute type 1 has an invalid length. [ 993.787294][T25770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4551'. [ 993.877319][T25770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4551'. [ 994.409188][T25774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4551'. [ 994.539477][T25774] ip6gre1: entered promiscuous mode [ 994.539520][T25774] ip6gre1: entered allmulticast mode [ 994.782239][T25757] syzkaller0: entered promiscuous mode [ 994.782273][T25757] syzkaller0: entered allmulticast mode [ 994.921427][ T4933] Bluetooth: hci2: command tx timeout [ 996.215999][T25816] bridge_slave_0: left allmulticast mode [ 996.216028][T25816] bridge_slave_0: left promiscuous mode [ 996.216254][T25816] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.256007][T25810] bridge_slave_1: left allmulticast mode [ 996.256037][T25810] bridge_slave_1: left promiscuous mode [ 996.256251][T25810] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.855979][T25710] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.856119][T25710] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.856303][T25710] bridge_slave_0: entered allmulticast mode [ 996.900279][T25710] bridge_slave_0: entered promiscuous mode [ 996.948758][T25710] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.948883][T25710] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.949054][T25710] bridge_slave_1: entered allmulticast mode [ 996.981729][T25710] bridge_slave_1: entered promiscuous mode [ 997.005604][ T4933] Bluetooth: hci2: command tx timeout [ 997.219505][T25833] netlink: 165 bytes leftover after parsing attributes in process `syz.0.4562'. [ 997.267280][T25833] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4562'. [ 997.448209][T25835] netlink: 'syz.0.4562': attribute type 3 has an invalid length. [ 997.616132][T25710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 997.639382][T25834] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4562'. [ 997.674701][T25710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 998.105642][T25710] team0: Port device team_slave_0 added [ 998.134233][T25710] team0: Port device team_slave_1 added [ 998.364046][T25710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 998.364067][T25710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 998.364095][T25710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 998.369928][T25710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 998.369946][T25710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 998.369974][T25710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 998.661316][T25710] hsr_slave_0: entered promiscuous mode [ 998.679296][T25710] hsr_slave_1: entered promiscuous mode [ 998.701342][T25710] debugfs: 'hsr0' already exists in 'hsr' [ 998.701372][T25710] Cannot create hsr debugfs directory [ 999.096556][ T4933] Bluetooth: hci2: command tx timeout [ 999.471857][T25882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4570'. [ 999.565382][T25887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4570'. [ 999.661001][T25879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4571'. [ 1000.569927][T25897] gretap0: entered promiscuous mode [ 1000.587269][T25900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4577'. [ 1000.587866][T25900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4577'. [ 1000.639060][T25897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1000.649568][T25897] 8021q: adding VLAN 0 to HW filter on device team0 [ 1000.666662][T25897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1002.025306][T25897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1002.046939][T25897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1002.081902][T25897] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1002.081932][T25897] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1002.108406][T25897] veth1_macvtap: left promiscuous mode [ 1002.109863][T25897] veth0_macvtap: left promiscuous mode [ 1002.129221][T25897] veth0_macvtap: entered promiscuous mode [ 1002.138042][T25897] veth1_macvtap: entered promiscuous mode [ 1002.138337][T25897] macsec0: left promiscuous mode [ 1002.170069][T25897] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1002.182525][T25897] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1002.184886][T25897] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1002.275288][T25897] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1002.276574][T25897] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1002.295985][T25897] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1002.298147][T25897] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1002.333314][T25897] bond8: left promiscuous mode [ 1002.333711][T25897] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1002.343643][T20722] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.368092][ T6623] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.383131][ T6621] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.412969][T25899] dvmrp0: entered allmulticast mode [ 1002.437637][T25919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4581'. [ 1002.526869][T14787] s`z1: Port: 1 Link ACTIVE [ 1003.224371][T25710] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1003.268322][T25710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1003.269576][T25710] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1003.394223][T25710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1003.411917][T25710] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1003.483323][T25936] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4584'. [ 1003.574128][T25941] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4584'. [ 1004.304051][T25710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1004.320242][T25710] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1004.551646][T25710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1005.003532][T25961] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4590'. [ 1005.507751][T25710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1005.685642][T25710] 8021q: adding VLAN 0 to HW filter on device team0 [ 1005.687484][T25974] netlink: 'syz.4.4593': attribute type 3 has an invalid length. [ 1005.687506][T25974] netlink: 'syz.4.4593': attribute type 1 has an invalid length. [ 1005.687519][T25974] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4593'. [ 1005.796279][ T6621] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.796397][ T6621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1005.855766][T12433] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.855885][T12433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1005.960218][T25982] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4594'. [ 1007.652073][T26024] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4602'. [ 1007.712303][T26025] x_tables: duplicate underflow at hook 1 [ 1007.803685][T26023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4601'. [ 1008.099039][T26045] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (32769) ! [ 1008.160038][T26044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4606'. [ 1009.559927][T25710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1009.937538][T26073] bond2: option xmit_hash_policy: invalid value (10) [ 1010.045352][T26073] bond2 (unregistering): Released all slaves [ 1010.156348][T26082] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4618'. [ 1010.156382][T26082] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4618'. [ 1010.836968][T26082] bond9: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 1010.839606][T26082] bond9 (unregistering): Released all slaves [ 1011.413899][T26115] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4624'. [ 1011.438243][T26107] bond4 (unregistering): Released all slaves [ 1011.463839][T26113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1011.703337][T26111] bond4 (unregistering): Released all slaves [ 1012.358724][T26133] netlink: 'syz.0.4628': attribute type 1 has an invalid length. [ 1012.358749][T26133] netlink: 'syz.0.4628': attribute type 6 has an invalid length. [ 1012.358762][T26133] netlink: 'syz.0.4628': attribute type 3 has an invalid length. [ 1012.486200][T26128] bond4: option mode: invalid value (255) [ 1012.511136][T26136] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4629'. [ 1012.598445][T26128] bond4 (unregistering): Released all slaves [ 1012.684162][T26138] netlink: 'syz.2.4629': attribute type 1 has an invalid length. [ 1013.035859][T25710] veth0_vlan: entered promiscuous mode [ 1013.148258][T25710] veth1_vlan: entered promiscuous mode [ 1013.400169][T25710] veth0_macvtap: entered promiscuous mode [ 1013.435641][T25710] veth1_macvtap: entered promiscuous mode [ 1013.667379][T25710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1013.778800][T25710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1013.873284][T20722] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.873497][T20722] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.873533][T20722] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.873583][T20722] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.230272][T26154] macvlan0: left allmulticast mode [ 1014.554406][T12438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1014.554432][T12438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1014.968620][T12435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1014.968645][T12435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1015.308573][T26175] netlink: 'syz.0.4638': attribute type 4 has an invalid length. [ 1015.391575][T26177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4639'. [ 1015.392491][T26177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4639'. [ 1016.311334][T26190] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4538'. [ 1016.356432][T26191] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4538'. [ 1016.967184][T26206] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4646'. [ 1017.125350][T26208] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4646'. [ 1017.125395][T26208] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4646'. [ 1017.783699][T26218] netlink: 308 bytes leftover after parsing attributes in process `syz.1.4650'. [ 1018.359859][T26222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4651'. [ 1018.545301][T26229] netlink: 'syz.0.4652': attribute type 1 has an invalid length. [ 1018.565261][T26231] netlink: 'syz.0.4652': attribute type 2 has an invalid length. [ 1018.637935][T26226] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1019.471484][T26247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4656'. [ 1019.471525][T26247] netlink: 'syz.2.4656': attribute type 12 has an invalid length. [ 1019.471542][T26247] netlink: 'syz.2.4656': attribute type 5 has an invalid length. [ 1019.562660][T26247] netlink: 'syz.2.4656': attribute type 12 has an invalid length. [ 1019.562686][T26247] netlink: 'syz.2.4656': attribute type 5 has an invalid length. [ 1019.567053][T26247] netlink: 'syz.2.4656': attribute type 12 has an invalid length. [ 1019.567080][T26247] netlink: 'syz.2.4656': attribute type 5 has an invalid length. [ 1019.568051][T26247] netlink: 'syz.2.4656': attribute type 12 has an invalid length. [ 1019.568068][T26247] netlink: 'syz.2.4656': attribute type 5 has an invalid length. [ 1021.435785][T26275] __nla_validate_parse: 45 callbacks suppressed [ 1021.435810][T26275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4662'. [ 1021.460781][T26283] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4663'. [ 1021.876034][T26289] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4665'. [ 1021.922364][ T4933] block nbd5: Receive control failed (result -32) [ 1022.211897][T26299] pim6reg1: entered promiscuous mode [ 1022.211923][T26299] pim6reg1: entered allmulticast mode [ 1022.469435][T26304] ip_tables: iptables: counters copy to user failed while replacing table [ 1022.566803][T26309] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4673'. [ 1023.051946][T26311] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 1023.379326][T26324] syzkaller1: entered promiscuous mode [ 1023.379356][T26324] syzkaller1: entered allmulticast mode [ 1023.551228][T26323] validate_nla: 55 callbacks suppressed [ 1023.551257][T26323] netlink: 'syz.2.4678': attribute type 1 has an invalid length. [ 1023.551741][T26323] netlink: 'syz.2.4678': attribute type 1 has an invalid length. [ 1023.552151][T26323] netlink: 'syz.2.4678': attribute type 1 has an invalid length. [ 1023.552524][T26323] netlink: 'syz.2.4678': attribute type 1 has an invalid length. [ 1024.793425][T26328] syzkaller0: entered promiscuous mode [ 1024.793452][T26328] syzkaller0: entered allmulticast mode [ 1027.906725][T26417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4696'. [ 1027.968148][T26417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4696'. [ 1028.901390][T26429] bond4: entered promiscuous mode [ 1028.901418][T26429] bond4: entered allmulticast mode [ 1029.086552][T26435] ip6t_rt: address list match requested but addrnr is 0 [ 1029.677003][T26423] syzkaller0: entered promiscuous mode [ 1029.677027][T26423] syzkaller0: entered allmulticast mode [ 1030.243294][T26452] Cannot find del_set index 0 as target [ 1030.569925][T26454] ip6gre1: entered promiscuous mode [ 1030.569950][T26454] ip6gre1: entered allmulticast mode [ 1030.589204][T26458] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1030.780776][T26459] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4709'. [ 1031.563701][ T6621] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1031.564041][ T6621] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1031.592204][T14787] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1031.611604][T14787] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1031.837371][T26474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4714'. [ 1031.837397][T26474] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4714'. [ 1031.904452][T26478] netlink: 292 bytes leftover after parsing attributes in process `syz.0.4713'. [ 1031.904483][T26478] netlink: 292 bytes leftover after parsing attributes in process `syz.0.4713'. [ 1031.934453][T26477] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4715'. [ 1031.934494][T26477] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4715'. [ 1032.090827][T14787] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1032.091199][T26484] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4716'. [ 1032.169552][T26484] gretap0: entered promiscuous mode [ 1032.177599][T26484] macvlan2: entered allmulticast mode [ 1032.177622][T26484] gretap0: entered allmulticast mode [ 1033.271573][T26501] netlink: 'syz.5.4722': attribute type 1 has an invalid length. [ 1033.373766][T26505] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4723'. [ 1033.416704][T26506] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4723'. [ 1033.608469][T26505] IPVS: set_ctl: invalid protocol: 50 172.30.1.2:20000 [ 1033.746392][T24264] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1033.764631][T24264] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1033.781851][T24264] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1033.802876][T24264] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1033.826144][T24264] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1035.029707][T12442] IPVS: starting estimator thread 0... [ 1035.107543][T26496] syzkaller0: entered promiscuous mode [ 1035.107569][T26496] syzkaller0: entered allmulticast mode [ 1035.126255][T26527] IPVS: using max 28 ests per chain, 67200 per kthread [ 1035.322446][T26530] block nbd0: reconnected socket [ 1035.400741][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1035.532748][T24264] block nbd0: Receive control failed (result -32) [ 1035.961482][T24264] Bluetooth: hci6: command tx timeout [ 1036.367862][ T6619] bond7 (unregistering): (slave ip6gre1): Releasing backup interface [ 1036.965477][T26542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4728'. [ 1038.041731][T24264] Bluetooth: hci6: command tx timeout [ 1038.396727][ T6619] bond13 (unregistering): (slave gretap3): Releasing active interface [ 1038.897518][T26564] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4731'. [ 1038.922574][T26564] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4731'. [ 1040.125714][T24264] Bluetooth: hci6: command tx timeout [ 1041.304029][ T6619] bond1 (unregistering): (slave gretap2): Releasing backup interface [ 1042.196373][ T6619] bond0 (unregistering): Released all slaves [ 1042.202336][T24264] Bluetooth: hci6: command tx timeout [ 1042.231944][ T6619] bond2 (unregistering): Released all slaves [ 1042.268344][ T6619] bond1 (unregistering): Released all slaves [ 1042.387817][ T6619] bond3 (unregistering): Released all slaves [ 1042.445791][ T6619] bond4 (unregistering): Released all slaves [ 1042.528862][ T6619] bond5 (unregistering): (slave veth3): Releasing active interface [ 1042.529997][ T6619] bond5 (unregistering): Released all slaves [ 1042.579807][ T6619] bond6 (unregistering): Released all slaves [ 1042.616798][ T6619] bond7 (unregistering): Released all slaves [ 1042.642518][ T6619] bond8 (unregistering): Released all slaves [ 1042.670181][ T6619] bond9 (unregistering): Released all slaves [ 1042.716518][ T6619] bond10 (unregistering): Released all slaves [ 1042.810243][ T6619] team0: Port device bond11 removed [ 1042.825153][ T6619] bond11 (unregistering): Released all slaves [ 1042.873951][ T6619] bond12 (unregistering): Released all slaves [ 1042.904124][ T6619] bond13 (unregistering): Released all slaves [ 1042.952108][ T6619] bond14 (unregistering): Released all slaves [ 1043.028216][ T6619] bond15 (unregistering): Released all slaves [ 1043.058161][ T6619] bond16 (unregistering): Released all slaves [ 1043.103151][ T6619] bond17 (unregistering): Released all slaves [ 1043.137059][ T6619] bond18 (unregistering): Released all slaves [ 1043.163403][ T6619] bond19 (unregistering): Released all slaves [ 1043.195650][ T6619] bond20 (unregistering): Released all slaves [ 1043.229374][ T6619] bond21 (unregistering): Released all slaves [ 1043.320890][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1043.352783][T26542] macvlan10: entered allmulticast mode [ 1043.352808][T26542] gretap0: entered allmulticast mode [ 1043.750139][T26577] ovs-dp0: entered promiscuous mode [ 1043.934009][T26581] bond0: (slave vlan1): Opening slave failed [ 1044.383809][ T6619] tipc: Disabling bearer [ 1044.383960][ T6619] tipc: Disabling bearer [ 1044.488133][ T6619] tipc: Left network mode [ 1046.586549][T26635] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4741'. [ 1047.196961][T26643] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4741'. [ 1047.197141][T26643] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4741'. [ 1047.197170][T26643] netlink: 'syz.0.4741': attribute type 1 has an invalid length. [ 1048.130647][T26660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4744'. [ 1048.215452][T26663] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4743'. [ 1049.926254][T26685] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4746'. [ 1050.051275][T26685] macvlan3: entered allmulticast mode [ 1050.116847][T26688] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 1050.282108][ T4933] Bluetooth: hci6: command 0x0405 tx timeout [ 1050.516032][T26692] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4748'. [ 1050.847337][T26692] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4748'. [ 1050.937591][T26699] tipc: Enabling of bearer rejected, already enabled [ 1051.336577][T26509] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.356596][T26509] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.356781][T26509] bridge_slave_0: entered allmulticast mode [ 1051.385897][T26509] bridge_slave_0: entered promiscuous mode [ 1051.387321][T26706] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4751'. [ 1051.398087][T26509] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.398571][T26509] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.443058][T26509] bridge_slave_1: entered allmulticast mode [ 1051.445383][T26509] bridge_slave_1: entered promiscuous mode [ 1051.497173][T26708] gretap1: entered allmulticast mode [ 1051.529748][ T6619] hsr_slave_1: left promiscuous mode [ 1051.805460][T26714] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4754'. [ 1053.128031][T26716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4754'. [ 1053.276216][T26509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.409770][T26509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1053.615550][T26733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4756'. [ 1053.948497][T26741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4758'. [ 1054.195676][T26741] netlink: 'syz.0.4758': attribute type 15 has an invalid length. [ 1054.195705][T26741] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4758'. [ 1054.375213][T26509] team0: Port device team_slave_0 added [ 1054.465579][T26509] team0: Port device team_slave_1 added [ 1054.564596][ T6619] IPVS: stop unused estimator thread 0... [ 1055.206199][T26742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1055.228117][T26742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1055.474696][T26742] gretap0: left allmulticast mode [ 1055.886270][T26747] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4759'. [ 1056.029324][T13110] s`z1: Port: 1 Link DOWN [ 1056.065244][ T6625] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.065322][ T6625] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.092960][T12432] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.239967][T26509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1056.239987][T26509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1056.240015][T26509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1056.311049][T26509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1056.311070][T26509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1056.311098][T26509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1056.727430][T26509] hsr_slave_0: entered promiscuous mode [ 1056.745650][T26509] hsr_slave_1: entered promiscuous mode [ 1056.756765][T26509] debugfs: 'hsr0' already exists in 'hsr' [ 1056.756793][T26509] Cannot create hsr debugfs directory [ 1057.203035][T26782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4764'. [ 1057.456766][T26792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4765'. [ 1057.456830][T26792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4765'. [ 1057.457343][T26791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4765'. [ 1057.458078][T26792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4765'. [ 1058.302478][T26805] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4769'. [ 1058.559592][T26805] bridge0: entered allmulticast mode [ 1058.911097][T26814] netlink: 'syz.1.4770': attribute type 2 has an invalid length. [ 1059.465419][T26814] ´: entered promiscuous mode [ 1059.466953][T26509] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1059.552045][T26509] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1059.572443][T26509] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1059.672884][T26509] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1059.707224][T26509] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1059.783964][T26509] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1059.806381][T26509] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1059.863435][T26509] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1060.984721][T26509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1061.136025][T26509] 8021q: adding VLAN 0 to HW filter on device team0 [ 1061.225271][T12442] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.225390][T12442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1061.286441][T21345] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.286559][T21345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1061.568214][T26854] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input6 [ 1061.634442][T26851] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1061.680021][T26857] netlink: 'syz.0.4776': attribute type 11 has an invalid length. [ 1062.474172][T26872] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4778'. [ 1064.712287][T24264] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1064.745297][T24264] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1064.766446][T24264] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1064.778306][T24264] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1064.797655][T24264] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1065.286916][T26509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1066.921770][ T4933] Bluetooth: hci7: command tx timeout [ 1068.899193][T26509] veth0_vlan: entered promiscuous mode [ 1069.001232][ T4933] Bluetooth: hci7: command tx timeout [ 1069.049636][T26509] veth1_vlan: entered promiscuous mode [ 1069.950020][T26509] veth0_macvtap: entered promiscuous mode [ 1070.056237][T26509] veth1_macvtap: entered promiscuous mode [ 1070.297843][T26509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1070.691632][T26509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1071.081082][ T4933] Bluetooth: hci7: command tx timeout [ 1071.491008][T20723] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.491979][T20723] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.492019][T20723] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.492055][T20723] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.318427][T26993] syzkaller0: entered promiscuous mode [ 1072.318458][T26993] syzkaller0: entered allmulticast mode [ 1072.354718][T27010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4796'. [ 1073.160945][ T4933] Bluetooth: hci7: command tx timeout [ 1081.568981][T27008] sit0: left promiscuous mode [ 1081.632828][T27008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1081.634651][T27008] 8021q: adding VLAN 0 to HW filter on device team0 [ 1081.638886][T27008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1081.815133][T27008] bond_slave_0: left promiscuous mode [ 1081.861460][T27008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1081.867961][T27008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1081.947816][T27008] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1081.947853][T27008] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1082.009277][T27008] veth1_vlan: left promiscuous mode [ 1082.029250][T27008] veth0_vlan: left promiscuous mode [ 1082.043403][T27008] veth0_vlan: entered promiscuous mode [ 1082.059307][T27008] veth1_vlan: entered promiscuous mode [ 1082.076854][T27008] veth1_macvtap: left promiscuous mode [ 1082.079837][T27008] veth0_macvtap: left promiscuous mode [ 1082.097197][T27008] veth0_macvtap: entered promiscuous mode [ 1082.107556][T27008] veth1_macvtap: entered promiscuous mode [ 1082.122821][T27008] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1082.124473][T27008] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1082.125628][T27008] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1082.126730][T27008] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1082.162934][T27008] syzkaller0: left promiscuous mode [ 1082.164991][T27008] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 1082.166308][T12442] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.432709][ T6621] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.432798][ T6621] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.432858][ T6621] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.646007][T12435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1082.646033][T12435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1082.995893][T27033] syzkaller0: entered promiscuous mode [ 1082.995921][T27033] syzkaller0: entered allmulticast mode [ 1083.041184][T26901] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.041308][T26901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.041479][T26901] bridge_slave_0: entered allmulticast mode [ 1083.077972][T26901] bridge_slave_0: entered promiscuous mode [ 1083.276618][T26901] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.276836][T26901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.277003][T26901] bridge_slave_1: entered allmulticast mode [ 1083.279188][T26901] bridge_slave_1: entered promiscuous mode [ 1083.432219][T27045] netlink: 15672 bytes leftover after parsing attributes in process `syz.1.4802'. [ 1083.525481][T21345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.525505][T21345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1083.553088][T26901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1083.712001][T26901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1083.862789][ T31] audit: type=1800 audit(1791271414.959:16): pid=27045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4802" name=2A7A09 dev="tmpfs" ino=2212 res=0 errno=0 [ 1083.943875][T27051] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4805'. [ 1083.943913][T27051] netlink: 'syz.5.4805': attribute type 10 has an invalid length. [ 1083.943930][T27051] netlink: 'syz.5.4805': attribute type 5 has an invalid length. [ 1083.943944][T27051] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4805'. [ 1084.061790][T26901] team0: Port device team_slave_0 added [ 1084.069925][T26901] team0: Port device team_slave_1 added [ 1084.190557][ T31] audit: type=1804 audit(1791271415.279:17): pid=27043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4802" name=2F6E6577726F6F742F3432372F2A7A09 dev="tmpfs" ino=2212 res=1 errno=0 [ 1084.319159][T27051] geneve2: entered promiscuous mode [ 1084.319185][T27051] geneve2: entered allmulticast mode [ 1084.491330][T12435] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 60325 - 0 [ 1084.491387][T12435] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 60325 - 0 [ 1084.491425][T12435] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 60325 - 0 [ 1084.491460][T12435] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 60325 - 0 [ 1084.864020][T27066] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4807'. [ 1084.996671][T26901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1084.996694][T26901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1084.996724][T26901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1085.193117][T27063] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 1085.335607][T26901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1085.335627][T26901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1085.335656][T26901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1085.789640][T26901] hsr_slave_0: entered promiscuous mode [ 1085.804715][T26901] hsr_slave_1: entered promiscuous mode [ 1085.809082][T26901] debugfs: 'hsr0' already exists in 'hsr' [ 1085.809104][T26901] Cannot create hsr debugfs directory [ 1085.938594][T27081] x_tables: duplicate underflow at hook 1 [ 1088.127627][T27102] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4812'. [ 1088.452342][T27115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4814'. [ 1088.621078][T27119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4814'. [ 1089.535141][T27090] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1089.570796][T27090] bond9 (unregistering): Released all slaves [ 1089.607316][T27124] Cannot find del_set index 0 as target [ 1089.922369][T27126] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4818'. [ 1090.123857][T27104] bridge0: port 3(vlan3) entered blocking state [ 1090.125237][T27104] bridge0: port 3(vlan3) entered disabled state [ 1090.125406][T27104] vlan3: entered allmulticast mode [ 1090.125423][T27104] geneve0: entered allmulticast mode [ 1090.172954][T27104] vlan3: entered promiscuous mode [ 1090.172981][T27104] geneve0: entered promiscuous mode [ 1090.302785][T27129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4819'. [ 1090.379381][ T4933] block nbd6: Receive control failed (result -107) [ 1091.037580][T26901] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1091.064841][T26901] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1091.126995][T26901] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1091.158968][T26901] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1091.174958][T26901] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1091.207817][T26901] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1091.236251][T26901] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1091.252628][T26901] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1092.194158][T27158] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4826'. [ 1092.251443][T26901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1092.408185][T26901] 8021q: adding VLAN 0 to HW filter on device team0 [ 1092.467632][T12438] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.467749][T12438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1092.496655][ T6621] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.496753][ T6621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1092.630856][T27170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4829'. [ 1092.630883][T27170] nbd: must specify at least one socket [ 1093.267703][T26901] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1093.529958][T27186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4832'. [ 1093.623413][T27190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4832'. [ 1093.642676][T27183] ip_tables: iptables: counters copy to user failed while replacing table [ 1093.775102][T27183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4831'. [ 1093.813573][T27183] sock: sock_timestamping_bind_phc: sock not bind to device [ 1094.063351][T27207] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4836'. [ 1094.794685][T27220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4839'. [ 1095.135548][T27220] macvlan11: entered allmulticast mode [ 1095.164336][T27225] syzkaller0: left promiscuous mode [ 1095.164363][T27225] syzkaller0: left allmulticast mode [ 1095.193151][T27224] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4840'. [ 1096.023244][T27241] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4842'. [ 1096.346460][T27243] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4842'. [ 1096.367485][T27243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4842'. [ 1096.543748][T27250] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4845'. [ 1096.639195][T27252] tipc: Started in network mode [ 1096.639235][T27252] tipc: Node identity 00000000000005000000000000000001, cluster identity 4711 [ 1096.639295][T27252] tipc: Enabling of bearer rejected, failed to enable media [ 1097.016855][T27255] netlink: 'syz.5.4845': attribute type 1 has an invalid length. [ 1097.566780][T27255] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1097.867195][T26901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1098.095678][T27279] FAULT_INJECTION: forcing a failure. [ 1098.095678][T27279] name failslab, interval 1, probability 0, space 0, times 0 [ 1098.095714][T27279] CPU: 1 UID: 0 PID: 27279 Comm: syz.0.4848 Not tainted syzkaller #0 PREEMPT(full) [ 1098.095738][T27279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1098.095751][T27279] Call Trace: [ 1098.095770][T27279] [ 1098.095780][T27279] dump_stack_lvl+0xe8/0x150 [ 1098.095820][T27279] should_fail_ex+0x410/0x560 [ 1098.095854][T27279] should_failslab+0xa8/0x100 [ 1098.095885][T27279] __kmalloc_cache_noprof+0xa3/0x600 [ 1098.095909][T27279] ? tipc_nametbl_lookup_group+0x78c/0xc10 [ 1098.096026][T27279] ? tipc_nametbl_lookup_group+0x78c/0xc10 [ 1098.096056][T27279] tipc_nametbl_lookup_group+0x78c/0xc10 [ 1098.096091][T27279] ? tipc_nametbl_lookup_group+0xac/0xc10 [ 1098.096116][T27279] __tipc_sendmsg+0x14d2/0x2b60 [ 1098.096173][T27279] ? arch_stack_walk+0xfb/0x150 [ 1098.096198][T27279] ? look_up_lock_class+0x57/0x110 [ 1098.096238][T27279] ? register_lock_class+0x31/0x2e0 [ 1098.096262][T27279] ? __pfx___tipc_sendmsg+0x10/0x10 [ 1098.096289][T27279] ? __lock_acquire+0x747/0x2de0 [ 1098.096321][T27279] ? ima_match_policy+0x21a6/0x2230 [ 1098.096396][T27279] ? lock_acquire+0x115/0x350 [ 1098.096435][T27279] ? process_measurement+0x7b2/0x1c10 [ 1098.096499][T27279] ? __lock_acquire+0x747/0x2de0 [ 1098.096522][T27279] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1098.096581][T27279] __tipc_sendstream+0x105f/0x12a0 [ 1098.096606][T27279] ? __lock_acquire+0x747/0x2de0 [ 1098.096640][T27279] ? __lock_acquire+0x747/0x2de0 [ 1098.096676][T27279] ? do_raw_spin_lock+0x12b/0x2f0 [ 1098.096707][T27279] ? __pfx___tipc_sendstream+0x10/0x10 [ 1098.096737][T27279] ? tipc_send_packet+0x6e/0xa0 [ 1098.096898][T27279] ? __local_bh_enable_ip+0xd6/0x140 [ 1098.096929][T27279] tipc_send_packet+0x7c/0xa0 [ 1098.096956][T27279] ? __pfx_tipc_send_packet+0x10/0x10 [ 1098.096981][T27279] sock_sendmsg_nosec+0x14e/0x190 [ 1098.097011][T27279] ____sys_sendmsg+0x54e/0x850 [ 1098.097046][T27279] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1098.097085][T27279] ? import_iovec+0x73/0xa0 [ 1098.097117][T27279] ___sys_sendmsg+0x2a5/0x360 [ 1098.097142][T27279] ? __lock_acquire+0x747/0x2de0 [ 1098.097168][T27279] ? __pfx____sys_sendmsg+0x10/0x10 [ 1098.097236][T27279] ? __fget_files+0x2a/0x420 [ 1098.097264][T27279] ? __fget_files+0x3a2/0x420 [ 1098.097302][T27279] __x64_sys_sendmsg+0x1b1/0x290 [ 1098.097334][T27279] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1098.097386][T27279] do_syscall_64+0x166/0x520 [ 1098.097415][T27279] ? trace_irq_disable+0x3b/0x140 [ 1098.097438][T27279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.097461][T27279] ? clear_bhb_loop+0x70/0xc0 [ 1098.097486][T27279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.097508][T27279] RIP: 0033:0x7f079db9e199 [ 1098.097530][T27279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1098.097548][T27279] RSP: 002b:00007f079eaa1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1098.097572][T27279] RAX: ffffffffffffffda RBX: 00007f079de25fa0 RCX: 00007f079db9e199 [ 1098.097588][T27279] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 1098.097601][T27279] RBP: 00007f079eaa1090 R08: 0000000000000000 R09: 0000000000000000 [ 1098.097615][T27279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1098.097627][T27279] R13: 00007f079de26038 R14: 00007f079de25fa0 R15: 00007ffdf6463d58 [ 1098.097664][T27279] [ 1098.818913][T27284] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4850'. [ 1098.901128][T27284] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4850'. [ 1099.327990][T27293] syz_tun: entered allmulticast mode [ 1099.350082][T27287] syzkaller1: entered promiscuous mode [ 1099.350344][T27287] syzkaller1: entered allmulticast mode [ 1099.510677][T27293] syz_tun: left allmulticast mode [ 1100.226913][T27307] can: request_module (can-proto-4) failed. [ 1100.264169][T27301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4854'. [ 1100.326225][T26901] veth0_vlan: entered promiscuous mode [ 1100.343280][T26901] veth1_vlan: entered promiscuous mode [ 1100.350628][T27313] syzkaller0: left allmulticast mode [ 1100.683263][T26901] veth0_macvtap: entered promiscuous mode [ 1100.739826][T26901] veth1_macvtap: entered promiscuous mode [ 1100.965657][T26901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1101.092623][T26901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1101.272387][T27327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4858'. [ 1101.272415][T27327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4858'. [ 1101.272440][T27327] netlink: 'syz.0.4858': attribute type 18 has an invalid length. [ 1101.384823][T12432] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.385880][ T6625] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.385921][ T6625] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.385957][ T6625] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.558756][T27328] Bluetooth: MGMT ver 1.23 [ 1101.674554][ T6619] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 1101.674648][ T6619] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 1101.772078][ T6625] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 1102.258055][T27346] FAULT_INJECTION: forcing a failure. [ 1102.258055][T27346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1102.258092][T27346] CPU: 1 UID: 0 PID: 27346 Comm: syz.1.4863 Not tainted syzkaller #0 PREEMPT(full) [ 1102.258115][T27346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1102.258127][T27346] Call Trace: [ 1102.258136][T27346] [ 1102.258146][T27346] dump_stack_lvl+0xe8/0x150 [ 1102.258194][T27346] should_fail_ex+0x410/0x560 [ 1102.258231][T27346] _copy_from_user+0x2d/0xb0 [ 1102.258260][T27346] __copy_msghdr+0x390/0x590 [ 1102.258298][T27346] ___sys_sendmsg+0x213/0x360 [ 1102.258323][T27346] ? __lock_acquire+0x747/0x2de0 [ 1102.258352][T27346] ? __pfx____sys_sendmsg+0x10/0x10 [ 1102.258417][T27346] ? __fget_files+0x2a/0x420 [ 1102.258446][T27346] ? __fget_files+0x3a2/0x420 [ 1102.258484][T27346] __x64_sys_sendmsg+0x1b1/0x290 [ 1102.258514][T27346] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1102.258564][T27346] do_syscall_64+0x166/0x520 [ 1102.258595][T27346] ? trace_irq_disable+0x3b/0x140 [ 1102.258617][T27346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.258640][T27346] ? clear_bhb_loop+0x70/0xc0 [ 1102.258666][T27346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.258686][T27346] RIP: 0033:0x7f1f2279e199 [ 1102.258707][T27346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1102.258724][T27346] RSP: 002b:00007f1f23680028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1102.258747][T27346] RAX: ffffffffffffffda RBX: 00007f1f22a25fa0 RCX: 00007f1f2279e199 [ 1102.258763][T27346] RDX: 000000000004c810 RSI: 0000200000000040 RDI: 0000000000000003 [ 1102.258777][T27346] RBP: 00007f1f23680090 R08: 0000000000000000 R09: 0000000000000000 [ 1102.258791][T27346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1102.258804][T27346] R13: 00007f1f22a26038 R14: 00007f1f22a25fa0 R15: 00007ffd949c3948 [ 1102.258837][T27346] [ 1102.551590][T12437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1102.551615][T12437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.023663][T27354] netlink: 'syz.5.4865': attribute type 12 has an invalid length. [ 1103.039597][ T6625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1103.039624][ T6625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.062749][T27354] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4865'. [ 1103.497608][ T4933] Bluetooth: hci2: SCO packet too small [ 1104.136330][T27374] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4781'. [ 1104.188200][T27380] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 1106.654541][T27439] tipc: New replicast peer: 127.0.0.1 [ 1106.676458][T27439] tipc: Enabled bearer , priority 10 [ 1107.983657][T27450] netlink: 1124 bytes leftover after parsing attributes in process `syz.1.4886'. [ 1108.138043][T27453] netlink: 14975 bytes leftover after parsing attributes in process `syz.5.4887'. [ 1108.190208][T27453] x_tables: ip6_tables: cgroup.2 match: invalid size 528 (kernel) != (user) 536 [ 1108.435191][T27456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4886'. [ 1109.156771][T27468] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 1, id = 0 [ 1109.365264][T27473] netlink: 'syz.5.4890': attribute type 1 has an invalid length. [ 1109.599396][T27473] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1109.770806][T27474] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1109.771282][T27474] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 1109.772197][T27474] bond2: (slave gre1): Error -95 calling set_mac_address [ 1109.893314][T27484] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4891'. [ 1110.079163][T27475] gretap2: entered promiscuous mode [ 1110.142956][T27475] bond2: (slave gretap2): making interface the new active one [ 1110.143584][T27475] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 1110.300025][T27481] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1111.053137][T27493] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4894'. [ 1111.257723][T27496] syzkaller0: entered promiscuous mode [ 1111.257754][T27496] syzkaller0: entered allmulticast mode [ 1112.337633][T27514] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4896'. [ 1112.476189][T27515] Unsupported ieee802154 address type: 0 [ 1113.883959][T24264] Bluetooth: hci2: command 0x0405 tx timeout [ 1116.734839][T27578] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4908'. [ 1116.735203][T27577] set match dimension is over the limit! [ 1117.277011][T27595] netlink: 'syz.1.4912': attribute type 23 has an invalid length. [ 1117.629554][T27602] netlink: 'syz.1.4912': attribute type 23 has an invalid length. [ 1118.439031][T27627] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4919'. [ 1118.572529][T27627] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1119.385276][T27650] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4922'. [ 1119.385308][T27650] IPv6: NLM_F_CREATE should be specified when creating new route [ 1119.551450][T23216] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1120.003307][T27660] netlink: 'syz.6.4924': attribute type 1 has an invalid length. [ 1120.179749][T27674] : renamed from bridge_slave_1 (while UP) [ 1120.602715][ T5729] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1121.304378][T27698] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4930'. [ 1121.306351][T27701] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4930'. [ 1121.435394][T27698] xt_ecn: cannot match TCP bits for non-tcp packets [ 1121.447850][T27701] xt_ecn: cannot match TCP bits for non-tcp packets [ 1122.045537][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1122.197984][T27713] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4932'. [ 1122.431665][T27709] pimreg: entered allmulticast mode [ 1122.431917][T27709] pimreg: left allmulticast mode [ 1122.550968][T27718] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4934'. [ 1122.856883][T12435] IPVS: starting estimator thread 0... [ 1122.941157][T27730] IPVS: using max 26 ests per chain, 62400 per kthread [ 1123.548978][T27726] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1123.578930][T27726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1125.029386][T27718] netlink: 84 bytes leftover after parsing attributes in process `syz.6.4934'. [ 1126.822348][T27753] syzkaller0: left promiscuous mode [ 1126.822378][T27753] syzkaller0: left allmulticast mode [ 1127.377453][T12432] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 1127.466998][T27779] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1128.136031][T27792] bond0: (slave tunl0): refused to change device type [ 1128.242430][T27795] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1128.715544][T27812] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 1129.159737][T27821] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4959'. [ 1129.208080][T27831] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4958'. [ 1129.230321][T27831] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4958'. [ 1130.705312][ T31] audit: type=1804 audit(1791271461.799:18): pid=27848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4964" name="/newroot/467/cgroup.controllers" dev="tmpfs" ino=2416 res=1 errno=0 [ 1130.705589][ T31] audit: type=1800 audit(1791271461.799:19): pid=27848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4964" name="cgroup.controllers" dev="tmpfs" ino=2416 res=0 errno=0 [ 1132.312409][T27865] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 1133.078318][T27888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4970'. [ 1133.173033][T27893] openvswitch: netlink: Message has 2 unknown bytes. [ 1133.191642][T27889] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4970'. [ 1133.232166][T27894] openvswitch: netlink: Message has 2 unknown bytes. [ 1134.604705][T27911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4974'. [ 1134.604737][T27911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1134.604757][T27911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1134.867124][T27911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1134.867151][T27911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1135.054062][T27911] tipc: Resetting bearer [ 1135.208618][T27911] tipc: Disabling bearer [ 1135.243194][T27920] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4977'. [ 1135.289290][ T4933] Bluetooth: hci7: link tx timeout [ 1135.289316][ T4933] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 1135.314574][ T4933] Bluetooth: hci7: link tx timeout [ 1135.314594][ T4933] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 1135.358740][ T4933] Bluetooth: hci7: link tx timeout [ 1135.358764][ T4933] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 1135.808365][T27932] netlink: 'syz.0.4979': attribute type 1 has an invalid length. [ 1136.028610][T27932] bond9: entered promiscuous mode [ 1136.034735][T27932] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1137.075587][T27955] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4983'. [ 1137.333869][ T4933] Bluetooth: hci7: command 0x0406 tx timeout [ 1140.164930][T28004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4994'. [ 1140.222139][T28004] tipc: Started in network mode [ 1140.222175][T28004] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 1140.222235][T28004] tipc: Enabling of bearer rejected, failed to enable media [ 1140.852684][T28008] IPVS: length: 13 != 8 [ 1141.392525][T28016] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4997'. [ 1141.519147][T28017] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4997'. [ 1144.038201][T28045] xt_TCPMSS: Only works on TCP SYN packets [ 1144.395394][T28048] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5007'. [ 1144.454590][T28048] ip_tables: iptables: counters copy to user failed while replacing table [ 1144.611618][T28053] ip6gretap1: entered allmulticast mode [ 1145.348629][T28055] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1146.341531][T28092] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5011'. [ 1146.604111][T28099] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5013'. [ 1146.604142][T28099] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5013'. [ 1146.620148][T28099] syzkaller0: entered promiscuous mode [ 1146.620405][T28099] syzkaller0: entered allmulticast mode [ 1147.058112][T28113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5017'. [ 1147.109366][T28113] vlan0: entered allmulticast mode [ 1147.109750][T28113] bridge0: port 1(vlan0) entered blocking state [ 1147.131080][T28113] bridge0: port 1(vlan0) entered disabled state [ 1147.147606][T28113] vlan0: entered promiscuous mode [ 1147.147632][T28113] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1149.495294][T28149] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.497441][T28149] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.595794][T28151] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.595953][T28151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1149.596378][T28151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.596518][T28151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1149.639910][T28151] bridge0: entered promiscuous mode [ 1149.639939][T28151] bridge0: entered allmulticast mode [ 1149.735944][T28148] netlink: 'syz.0.5025': attribute type 1 has an invalid length. [ 1149.735982][T28148] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5025'. [ 1149.735998][T28148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5025'. [ 1150.021996][T28148] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 1150.473030][T28160] lo: entered promiscuous mode [ 1150.473059][T28160] lo: entered allmulticast mode [ 1150.548129][T28160] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5027'. [ 1150.628220][ T5280] veth0_macvtap: left promiscuous mode [ 1150.816633][T28156] ip_tables: iptables: counters copy to user failed while replacing table [ 1151.168723][T28174] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5031'. [ 1151.193224][T28177] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5031'. [ 1153.571963][T28211] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 1155.318612][T28247] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5042'. [ 1155.547328][T28248] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5043'. [ 1156.351717][T28255] batadv_slave_1: entered promiscuous mode [ 1156.466523][T28255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5044'. [ 1156.573088][T28255] batadv_slave_1 (unregistering): left promiscuous mode [ 1156.776583][T28242] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5043'. [ 1157.140118][T28277] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5047'. [ 1157.276116][T28279] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5047'. [ 1157.337488][T28277] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5047'. [ 1157.517670][T28271] syzkaller1: entered promiscuous mode [ 1157.517705][T28271] syzkaller1: entered allmulticast mode [ 1158.392480][T28291] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5050'. [ 1158.782690][T28295] batadv0: entered promiscuous mode [ 1158.831718][T28295] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1158.837371][T28295] batadv0: left promiscuous mode [ 1158.983577][T28302] netlink: 'syz.1.5052': attribute type 1 has an invalid length. [ 1159.740586][T28302] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1159.859138][T28330] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5057'. [ 1159.895136][T28330] netlink: 388 bytes leftover after parsing attributes in process `syz.5.5057'. [ 1159.916726][T28330] netlink: 'syz.5.5057': attribute type 1 has an invalid length. [ 1160.084149][T28298] bond5: (slave geneve3): making interface the new active one [ 1160.212826][T28298] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 1160.590208][T28344] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5058'. [ 1160.967739][T28354] ip_tables: iptables: counters copy to user failed while replacing table [ 1161.095299][T28334] bond3: (slave veth3): Enslaving as an active interface with a down link [ 1161.580080][T20723] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x6c [ 1161.612688][T28338] bond3: (slave veth5): Enslaving as an active interface with a down link [ 1161.800010][T28357] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1162.798837][T28375] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5064'. [ 1163.171559][T28376] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5064'. [ 1163.171590][T28376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5064'. [ 1164.210225][T28382] bond4 (unregistering): Released all slaves [ 1164.728092][T28401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5069'. [ 1165.479877][T28420] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1166.016434][T28442] ip_tables: iptables: counters copy to user failed while replacing table [ 1166.043139][T28442] ip_tables: iptables: counters copy to user failed while replacing table [ 1166.050791][T28442] ip_tables: iptables: counters copy to user failed while replacing table [ 1166.051721][T28442] ip_tables: iptables: counters copy to user failed while replacing table [ 1166.054982][T28442] ip_tables: iptables: counters copy to user failed while replacing table [ 1166.061473][T28442] ip_tables: iptables: counters copy to user failed while replacing table [ 1166.062516][T28442] ip_tables: iptables: counters copy to user failed while replacing table [ 1166.065827][T28442] ip_tables: iptables: counters copy to user failed while replacing table [ 1166.079177][T28442] ip_tables: iptables: counters copy to user failed while replacing table [ 1166.080085][T28442] ip_tables: iptables: counters copy to user failed while replacing table [ 1167.075655][T28457] netlink: 'syz.0.5080': attribute type 8 has an invalid length. [ 1168.998618][T28428] netlink: 524 bytes leftover after parsing attributes in process `syz.6.5074'. [ 1169.554239][T28479] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 1169.662698][T28486] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5082'. [ 1170.940740][T28498] syzkaller0: entered promiscuous mode [ 1170.940918][T28498] syzkaller0: entered allmulticast mode [ 1171.166010][T28529] net_ratelimit: 24 callbacks suppressed [ 1171.166036][T28529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1171.209511][T28531] IPv6: addrconf: prefix option has invalid lifetime [ 1171.358441][T28533] nbd7: detected capacity change from 0 to 63 [ 1171.359502][T28533] block nbd0: NBD_DISCONNECT [ 1171.359528][T28533] block nbd0: Send disconnect failed -32 [ 1171.359546][T28533] block nbd0: shutting down sockets [ 1171.678886][T24264] block nbd7: Receive control failed (result -104) [ 1173.883886][ T32] INFO: task syz.4.4651:26220 blocked for more than 143 seconds. [ 1173.883917][ T32] Not tainted syzkaller #0 [ 1173.883928][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1173.883939][ T32] task:syz.4.4651 state:D stack:27104 pid:26220 tgid:26219 ppid:19608 task_flags:0x400140 flags:0x00080002 [ 1173.884005][ T32] Call Trace: [ 1173.884013][ T32] [ 1173.884030][ T32] __schedule+0x17db/0x58f0 [ 1173.884101][ T32] ? __pfx___schedule+0x10/0x10 [ 1173.884140][ T32] ? schedule+0x90/0x2b0 [ 1173.884172][ T32] schedule+0x164/0x2b0 [ 1173.884202][ T32] schedule_preempt_disabled+0x13/0x30 [ 1173.884228][ T32] __mutex_lock+0x7c1/0x1550 [ 1173.884291][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1173.884325][ T32] ? nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 1173.884451][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1173.884491][ T32] ? net_generic+0x1e/0x240 [ 1173.884515][ T32] ? net_generic+0x1e/0x240 [ 1173.884546][ T32] nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 1173.884572][ T32] ? __kmalloc_noprof+0x36b/0x720 [ 1173.884598][ T32] ? __asan_memset+0x22/0x50 [ 1173.884626][ T32] ? __nla_validate_parse+0x2429/0x2d50 [ 1173.884653][ T32] ? do_syscall_64+0x166/0x520 [ 1173.884680][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.884705][ T32] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 1173.884748][ T32] ? __pfx___nla_validate_parse+0x10/0x10 [ 1173.884795][ T32] ? rcu_is_watching+0x16/0xb0 [ 1173.884822][ T32] ? trace_kmalloc+0x2a/0xf0 [ 1173.884846][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 1173.884870][ T32] ? __nla_parse+0x40/0x60 [ 1173.884911][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1173.884967][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1173.885004][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 1173.885040][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1173.885082][ T32] ? bpf_lsm_capable+0x9/0x20 [ 1173.885103][ T32] ? security_capable+0x7e/0x2c0 [ 1173.885139][ T32] genl_rcv_msg+0x614/0x7a0 [ 1173.885175][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1173.885200][ T32] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 1173.885973][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1173.886002][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1173.886030][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1173.886070][ T32] ? down_read+0x2be/0x330 [ 1173.886123][ T32] genl_rcv+0x28/0x40 [ 1173.886147][ T32] netlink_unicast+0x7bd/0x940 [ 1173.886191][ T32] netlink_sendmsg+0x813/0xb40 [ 1173.886226][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1173.886282][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1173.886312][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1173.886332][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 1173.886359][ T32] ____sys_sendmsg+0x54e/0x850 [ 1173.886403][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1173.886474][ T32] ? import_iovec+0x73/0xa0 [ 1173.886507][ T32] ___sys_sendmsg+0x2a5/0x360 [ 1173.886533][ T32] ? __lock_acquire+0x747/0x2de0 [ 1173.886562][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 1173.886595][ T32] ? futex_wait+0x2a2/0x390 [ 1173.886670][ T32] ? __fget_files+0x2a/0x420 [ 1173.886696][ T32] ? __fget_files+0x3a2/0x420 [ 1173.886737][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 1173.886769][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1173.886822][ T32] do_syscall_64+0x166/0x520 [ 1173.886852][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.886873][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1173.886899][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.886920][ T32] RIP: 0033:0x7f85adb9e199 [ 1173.886941][ T32] RSP: 002b:00007f85ae9ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1173.886964][ T32] RAX: ffffffffffffffda RBX: 00007f85ade25fa0 RCX: 00007f85adb9e199 [ 1173.886980][ T32] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000004 [ 1173.886994][ T32] RBP: 00007f85adc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1173.887008][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1173.887020][ T32] R13: 00007f85ade26038 R14: 00007f85ade25fa0 R15: 00007ffeb4f8a2a8 [ 1173.887058][ T32] [ 1173.887092][ T32] [ 1173.887092][ T32] Showing all locks held in the system: [ 1173.887129][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 1173.887180][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1173.887345][ T32] locks held by dhcpcd/5280: 1, on CPU#1: [ 1173.887360][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1173.889120][ T32] locks held by getty/5374: 2, on CPU#1: [ 1173.889136][ T32] #0: ffff88807f9ab0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1173.889300][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1173.889358][ T32] locks held by kworker/u8:13/6621: 3, on CPU#1: [ 1173.889373][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1173.889437][ T32] #1: ffffc900039d7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1173.889490][ T32] #2: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1173.889572][ T32] locks held by kworker/u8:18/12433: 3, last CPU#0: [ 1173.889587][ T32] #0: ffff888040a0f140 ((wq_completion)krds_cp_wq#8/4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1173.889641][ T32] #1: ffffc9000d8cfc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1173.889694][ T32] #2: ffff888050371b80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1173.889822][ T32] locks held by kworker/u8:22/12437: 6, last CPU#1: [ 1173.889837][ T32] #0: ffff88803477e140 ((wq_completion)krds_cp_wq#8/3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1173.889890][ T32] #1: ffffc90007987c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1173.889945][ T32] #2: ffff888050371e80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1173.890002][ T32] #3: ffff888052a7b860 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 1173.890079][ T32] #4: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __inet6_bind+0x49b/0xf30 [ 1173.890126][ T32] #5: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __ipv6_chk_addr_and_flags+0x184/0x7e0 [ 1173.890209][ T32] locks held by kworker/u8:1/20723: 3, on CPU#1: [ 1173.890224][ T32] #0: ffff88802c9e9140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1173.890391][ T32] #1: ffffc900044c7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1173.890446][ T32] #2: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 1173.890503][ T32] locks held by syz.3.4477/25451: 2, on CPU#1: [ 1173.890517][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1173.890570][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1173.892320][ T32] locks held by syz.4.4651/26220: 2, on CPU#0: [ 1173.892337][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1173.892397][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 1173.892453][ T32] locks held by syz.2.4744/26673: 2, on CPU#1: [ 1173.892468][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1173.892519][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 1173.892575][ T32] locks held by syz.5.5087/28495: 2, on CPU#1: [ 1173.892589][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1173.892639][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 1173.892692][ T32] locks held by syz.7.5089/28497: 1, last CPU#1: [ 1173.892707][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1173.892818][ T32] locks held by syz.1.5092/28527: 2, on CPU#0: [ 1173.892833][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1173.892880][ T32] #1: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5e/0x890 [ 1173.892977][ T32] locks held by syz.1.5092/28528: 2, on CPU#1: [ 1173.892992][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1173.893042][ T32] #1: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5e/0x890 [ 1173.893098][ T32] locks held by syz.6.5093/28531: 2, on CPU#1: [ 1173.893112][ T32] #0: ffffffff9079e368 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1173.893215][ T32] #1: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 1173.893292][ T32] locks held by udevd/28537: 1, on CPU#1: [ 1173.893307][ T32] #0: ffff888027be5350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 1173.893427][ T32] locks held by syz.0.5097/28548: 1, on CPU#1: [ 1173.893442][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 1173.893517][ T32] locks held by syz.0.5097/28549: 1, on CPU#1: [ 1173.893532][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 1173.893587][ T32] [ 1173.893594][ T32] ============================================= [ 1173.893594][ T32] [ 1173.893605][ T32] NMI backtrace for cpu 1 [ 1173.893619][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1173.893641][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1173.893653][ T32] Call Trace: [ 1173.893663][ T32] [ 1173.893674][ T32] dump_stack_lvl+0xe8/0x150 [ 1173.893705][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1173.893763][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1173.893797][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1173.893829][ T32] sys_info+0x135/0x170 [ 1173.893851][ T32] watchdog+0xfd7/0x1030 [ 1173.893881][ T32] ? watchdog+0x1c7/0x1030 [ 1173.893911][ T32] kthread+0x38b/0x480 [ 1173.893932][ T32] ? __pfx_watchdog+0x10/0x10 [ 1173.893950][ T32] ? __pfx_kthread+0x10/0x10 [ 1173.893971][ T32] ret_from_fork+0x514/0xb70 [ 1173.894003][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1173.894033][ T32] ? __switch_to+0xc89/0x1420 [ 1173.894083][ T32] ? __pfx_kthread+0x10/0x10 [ 1173.894104][ T32] ret_from_fork_asm+0x1a/0x30 [ 1173.894150][ T32] [ 1173.894176][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1173.894203][ C0] NMI backtrace for cpu 0 [ 1173.894220][ C0] CPU: 0 UID: 0 PID: 12433 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT(full) [ 1173.894241][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1173.894255][ C0] Workqueue: krds_cp_wq#8/4 rds_connect_worker [ 1173.894317][ C0] RIP: 0010:its_return_thunk+0x0/0x10 [ 1173.894358][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e9 3b 25 4a f5 cc [ 1173.894374][ C0] RSP: 0018:ffffc90000007e48 EFLAGS: 00000046 [ 1173.894390][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 8000000000000102 [ 1173.894404][ C0] RDX: 8000000000000100 RSI: ffffffff8e688ec6 RDI: ffffffff8c6dad80 [ 1173.894418][ C0] RBP: ffff888056685938 R08: 0000000000000100 R09: 0000000000000001 [ 1173.894431][ C0] R10: dffffc0000000000 R11: fffff52000000fd0 R12: ffff8880b8628280 [ 1173.894445][ C0] R13: dffffc0000000000 R14: ffff8880b86286a0 R15: ffff8880b8628690 [ 1173.894459][ C0] FS: 0000000000000000(0000) GS:ffff888124cda000(0000) knlGS:0000000000000000 [ 1173.894474][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1173.894488][ C0] CR2: 00007f0e5df556c8 CR3: 000000005fd94000 CR4: 00000000003526f0 [ 1173.894506][ C0] Call Trace: [ 1173.894514][ C0] [ 1173.894521][ C0] __hrtimer_run_queues+0x20b/0xa10 [ 1173.894558][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 1173.894586][ C0] handle_softirqs+0x226/0x860 [ 1173.894611][ C0] ? do_softirq+0x77/0xd0 [ 1173.894635][ C0] ? __inet6_bind+0x386/0xf30 [ 1173.894653][ C0] do_softirq+0x77/0xd0 [ 1173.894674][ C0] [ 1173.894681][ C0] [ 1173.894688][ C0] __local_bh_enable_ip+0x100/0x140 [ 1173.894710][ C0] __inet6_bind+0x386/0xf30 [ 1173.894734][ C0] kernel_bind+0x13e/0x1c0 [ 1173.894762][ C0] ? __pfx_kernel_bind+0x10/0x10 [ 1173.894795][ C0] ? rds_tcp_conn_path_connect+0x336/0x920 [ 1173.894826][ C0] rds_tcp_conn_path_connect+0x53b/0x920 [ 1173.894860][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 1173.894898][ C0] ? lock_acquire+0x115/0x350 [ 1173.894924][ C0] rds_connect_worker+0x1d8/0x290 [ 1173.894946][ C0] ? process_scheduled_works+0x97a/0x1630 [ 1173.894969][ C0] process_scheduled_works+0xc3d/0x1630 [ 1173.895009][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1173.895035][ C0] ? assign_work+0x3cf/0x5d0 [ 1173.895059][ C0] worker_thread+0xa47/0xfb0 [ 1173.895098][ C0] kthread+0x38b/0x480 [ 1173.895115][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1173.895137][ C0] ? __pfx_kthread+0x10/0x10 [ 1173.895155][ C0] ret_from_fork+0x514/0xb70 [ 1173.895182][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1173.895208][ C0] ? __switch_to+0xc89/0x1420 [ 1173.895232][ C0] ? __pfx_kthread+0x10/0x10 [ 1173.895250][ C0] ret_from_fork_asm+0x1a/0x30 [ 1173.895286][ C0] [ 1174.283887][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1175.505760][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1175.518301][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1175.530234][ T32] Call Trace: [ 1175.533988][ T32] [ 1175.537174][ T32] vpanic+0x56d/0xa60 [ 1175.541560][ T32] ? __pfx___schedule+0x10/0x10 [ 1175.546805][ T32] ? __pfx_vpanic+0x10/0x10 [ 1175.552283][ T32] panic+0xc5/0xd0 [ 1175.556124][ T32] ? __pfx_panic+0x10/0x10 [ 1175.561052][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 1175.567641][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1175.573261][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1175.580141][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1175.587357][ T32] watchdog+0x1030/0x1030 [ 1175.591745][ T32] ? watchdog+0x1c7/0x1030 [ 1175.597707][ T32] kthread+0x38b/0x480 [ 1175.603806][ T32] ? __pfx_watchdog+0x10/0x10 [ 1175.609226][ T32] ? __pfx_kthread+0x10/0x10 [ 1175.614055][ T32] ret_from_fork+0x514/0xb70 [ 1175.618709][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1175.623923][ T32] ? __switch_to+0xc89/0x1420 [ 1175.628818][ T32] ? __pfx_kthread+0x10/0x10 [ 1175.634758][ T32] ret_from_fork_asm+0x1a/0x30 [ 1175.639775][ T32] [ 1175.643164][ T32] Kernel Offset: disabled [ 1175.647848][ T32] Rebooting in 86400 seconds..