last executing test programs: 26m39.406091491s ago: executing program 32 (id=311): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000040000000400000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0)=0x474c, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x48, &(0x7f0000000540)=ANY=[], 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580), 0xfffffff8, r0}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r1, 0x1}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x4, &(0x7f0000000a00)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000a40)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) sendmsg$sock(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)="c2", 0x1}], 0x1}, 0x20000000) close(0x4) recvmsg$unix(r5, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x42) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a000000080000004200000040000000c2000000", @ANYRES32=0x1, @ANYBLOB="0000000000000021e600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) unshare(0x0) close(0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000780)={r6, &(0x7f00000007c0)="b70627ffcb6e3423965d27100105a0ba252696f7d009fde9a8abb35bb9d65aec8a25834d654d7d771ec0d82e6323b2d87a7f86668c8b5411630bc69232e97dbe6c4ca1ea144b8c7672b5a160d33eb495fdd0389b55bca343362a9c79161eb3dd54fa14bd3c267e824f7365188ad4a74040fcf812a75c8bab06f2dd078eec707ed75c79f69b37c5db0233c6db46ad60c0ec33eda87995e00ea0a3a77e740868d23e2429b7c8e5301b82dceeaca4f9bd1bb6dd1a790a5a6b062b9ccf8b2d9e3ddb79cae8f9511513bc0b14c40cda854906cb91bfef6ff16060cba4c541841030718e06d415f693", &(0x7f00000008c0)=""/81}, 0x20) unshare(0x24020400) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x14, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000dc0)={r10}, 0xc) sendmsg$DEVLINK_CMD_TRAP_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x58, r8, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x0) 24m11.040787372s ago: executing program 4 (id=1630): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000080)="585518a2010000000000000077f84d0230e8ee6fc592ce2bfe02b4e7fa6f66414fa12e8876fd5b2884e6c4fb16817dbe00000000000000000eda7799aa3f4a0c9ec1951e212e573c2947f6df422c00adb3df6ae0078c4316", 0x58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r1, 0x1) connect$inet(r1, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0x63, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800feff", @ANYRES16=r0, @ANYBLOB="010000000000fcffffff0100000044000180060001000a00000008000500020000000c00070000000000000000000800090000000000090006006e6f6e6500000000080008000000000008000b0073697000"], 0x58}}, 0x44042) 24m10.991428635s ago: executing program 4 (id=1633): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0x0, 0xe8, 0x2e0, 0x2e0, 0xe8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xffffff00, 0xff000000, 0x2, 0x1, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0xc9, 0x0, 0x7, 0x8, 0xe, 0x8, 'vlan0\x00', 'lo\x00', {0xff}, {}, 0x0, 0x90}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @private=0xa010100, @empty, 0x1, 0xffffffff}}}, {{@arp={@multicast1, @local, 0xff, 0xff000000, 0xf, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@random="4811ddec0199", {[0x0, 0x0, 0x0, 0xff]}}, 0x3, 0x6, 0x6f, 0xf011, 0x1, 0x2, 'veth1_virt_wifi\x00', 'team0\x00', {0xff}, {0xff}, 0x0, 0x600}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000680)={0x0, @rc={0x1f, @none, 0xfc}, @isdn={0x22, 0xa2, 0x70, 0x7, 0x2}, @hci={0x1f, 0x1, 0x4}, 0xfffb, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)='wlan0\x00', 0x1, 0x9, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x28, 0x6, 0xef, 0xfffff018}, {0x6, 0x6, 0xfe, 0x1057c}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3f00}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) bind(r2, &(0x7f0000000600)=@l2={0x1f, 0x74, @none, 0xfff4, 0x1}, 0x80) 24m10.797858232s ago: executing program 4 (id=1637): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x9) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00') preadv(r3, 0x0, 0x0, 0x3, 0xffffffff) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x1402, 0x8, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x24000001) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000030400000000fdffff0000000300", @ANYRES32=0x0, @ANYBLOB="0000000040000000140012800900010076657468000000000400028008004040", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x48}}, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x4, 0x4, 0x20300, 0xff, 0x4, 0x800000, 0x81}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000400)=0xb2, 0xfee7) 24m10.624914584s ago: executing program 4 (id=1638): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0xae00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bond={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f}, @IFLA_BOND_ARP_IP_TARGET={0x4}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x8}]}}}]}, 0x48}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x1412, 0x1, 0x4}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x0) 24m10.443527073s ago: executing program 4 (id=1639): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000010000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0xa, 0xffffffff, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0x1}, 0x50) 24m7.759718797s ago: executing program 4 (id=1651): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) sendmmsg$unix(r4, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}], 0x20, 0x2000c084}}], 0x1, 0x4004) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@multicast1, @in=@rand_addr=0x64010101, 0x4e23, 0x80, 0x4e20, 0xfc01, 0xa, 0x20, 0x80, 0x87, 0x0, r6}, {0x3, 0x2, 0x80000000, 0x3, 0x2, 0x10, 0x7, 0x1}, {0x2, 0x3, 0x6, 0x8}, 0x1, 0x6e6bb9, 0x2, 0x0, 0x2, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x2b}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x3502, 0x3, 0x1, 0x7, 0x5, 0x7, 0x8001}}, 0xe8) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtaction={0xa0, 0x30, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x6a00}, [{0x8c, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x2, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x38, 0x2, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x22}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 24m7.260266399s ago: executing program 33 (id=1651): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) sendmmsg$unix(r4, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}], 0x20, 0x2000c084}}], 0x1, 0x4004) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@multicast1, @in=@rand_addr=0x64010101, 0x4e23, 0x80, 0x4e20, 0xfc01, 0xa, 0x20, 0x80, 0x87, 0x0, r6}, {0x3, 0x2, 0x80000000, 0x3, 0x2, 0x10, 0x7, 0x1}, {0x2, 0x3, 0x6, 0x8}, 0x1, 0x6e6bb9, 0x2, 0x0, 0x2, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x2b}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x3502, 0x3, 0x1, 0x7, 0x5, 0x7, 0x8001}}, 0xe8) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtaction={0xa0, 0x30, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x6a00}, [{0x8c, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x2, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x38, 0x2, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x22}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 22m44.731509245s ago: executing program 6 (id=1937): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180100002028782500000000002020207b1bf0ff00000000bfa100000000000007010000f8fffeffb702000008000000b50afbff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0xc}, 0x94) 22m44.730990193s ago: executing program 6 (id=1938): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) read$alg(r0, &(0x7f0000000300)=""/74, 0x4a) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) socket$kcm(0x2, 0xa, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000380)={&(0x7f0000000600)=@phonet, 0x80, &(0x7f0000000680)=[{0x0}, {&(0x7f00000006c0)="4ab3c2", 0x3}], 0x2, 0x0, 0x0, 0x100100}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002900)=r4, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000040000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c009900410000005700000008002600fd1600000800270003"], 0x60}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fddbdf252500000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x40) r8 = epoll_create1(0x80000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000880)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f00000008c0)={'syzkaller1\x00', @link_local}) write$tun(r9, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffffff015dc200000e88004500002000194000001190e6284b0101e00000014e2217c1000c90fcdc65e8fd"], 0x36) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRESOCT=r8], 0x1c}}, 0x4008054) 22m44.70264382s ago: executing program 6 (id=1947): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0), 0x0, 0x10, &(0x7f0000000b00), 0x45}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000b40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000bc0)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000c40)=0x9, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000240)={r1, 0x0, 0x0}, 0x10) connect(r0, &(0x7f00000001c0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000280)) 22m44.462567773s ago: executing program 6 (id=1952): r0 = socket(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x8, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @mlv2_report={0x8f, 0x0, 0x0, 0xe}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x62, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000000010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000000000000000900000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000040800000000000000000000000000000002000000000000010001000000000084010500ac1414aa00000000000000000000000000000000330000000000000064010100000000000000000000000000ff340000000000000000000000000000402000007f000001000000000000000000000000000020003c00000002000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000e00000010000000000000000000000000000000000000000000000000000000000000000ac14144300000000000000000000020000000000330000000200000000000000000000000000ffffac1414aa000000000001000000000000000000000000000020010000000000000000000000000000000004d26c"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 22m44.208103011s ago: executing program 6 (id=1956): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x94d01, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48004}, 0x0) recvmmsg(r2, 0x0, 0x0, 0x40002022, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x2000000000000216, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0x1d, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0xc, &(0x7f0000000000)=ANY=[@ANYRES16], &(0x7f0000000300)='syzkaller\x00', 0x2, 0x0, 0x0, 0x1f00, 0x71, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r5, &(0x7f0000000440)="4c00000011000c0000000000001cff200000000000", 0x15) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x0) pipe(&(0x7f0000000540)) (async) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000580)=r4, 0x4) r7 = socket$netlink(0x10, 0x3, 0x4) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="ff7f00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="008cd586ccdec77a603dc10062e600"/41], 0x50) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000840)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r10, r10, 0x0, 0x7ff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x7, 0x17, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000400000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b60901000000002066000000646c6c251801000020756c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003f93000000000000b5030000030000008500000085000000b7000000000000009500000000000000"], &(0x7f00000007c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write(r7, &(0x7f0000000800)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) (async) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x41) (async) unshare(0x60600) 22m43.031794881s ago: executing program 6 (id=1962): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0xfffffffd, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0xffffffffffffff0a, 0x1, {{0x7, 0x0, 0x20000000, 0x0, 0x2}, 0x2f}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x3, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r1}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000480), 0x7ff, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r4, &(0x7f0000000500), &(0x7f0000000540)=""/89}, 0x20) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0xffffffffffffffff, 0x6000, 0x18}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={0x1, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1f, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80), &(0x7f0000000ac0), 0xfffffff8, r8}, 0x38) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b80)={{r1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)='%-010d \x00'}, 0x20) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x10, 0x4, &(0x7f0000000c80)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000cc0)='GPL\x00'}, 0x90) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000d40)=ANY=[@ANYRES32=r12, @ANYRES32=r11, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000d80)={r12, &(0x7f0000000dc0), &(0x7f0000000e00)=@tcp6=r10}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x8, 0x16, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x80}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffe00}, @map_val={0x18, 0x5, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x101}, @jmp={0x5, 0x0, 0x4, 0x7, 0x8, 0x30, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000000680)='syzkaller\x00', 0xffffff00, 0x10, &(0x7f00000006c0)=""/16, 0x41100, 0x2, '\x00', r5, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000e40)=[r6, r7, r8, r9, r12], 0x0, 0x10, 0xb05}, 0x94) sendmsg$nl_route(r2, 0xfffffffffffffffd, 0x4000) 22m27.950324546s ago: executing program 34 (id=1962): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0xfffffffd, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0xffffffffffffff0a, 0x1, {{0x7, 0x0, 0x20000000, 0x0, 0x2}, 0x2f}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x3, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r1}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000480), 0x7ff, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r4, &(0x7f0000000500), &(0x7f0000000540)=""/89}, 0x20) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0xffffffffffffffff, 0x6000, 0x18}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={0x1, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1f, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80), &(0x7f0000000ac0), 0xfffffff8, r8}, 0x38) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b80)={{r1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)='%-010d \x00'}, 0x20) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x10, 0x4, &(0x7f0000000c80)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000cc0)='GPL\x00'}, 0x90) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000d40)=ANY=[@ANYRES32=r12, @ANYRES32=r11, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000d80)={r12, &(0x7f0000000dc0), &(0x7f0000000e00)=@tcp6=r10}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x8, 0x16, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x80}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffe00}, @map_val={0x18, 0x5, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x101}, @jmp={0x5, 0x0, 0x4, 0x7, 0x8, 0x30, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000000680)='syzkaller\x00', 0xffffff00, 0x10, &(0x7f00000006c0)=""/16, 0x41100, 0x2, '\x00', r5, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000e40)=[r6, r7, r8, r9, r12], 0x0, 0x10, 0xb05}, 0x94) sendmsg$nl_route(r2, 0xfffffffffffffffd, 0x4000) 13m34.532778815s ago: executing program 1 (id=4866): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_NH4={0x8, 0x4, @loopback}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x34}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_NH4={0x8, 0x4, @loopback}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x34}}, 0x0) 13m34.096712876s ago: executing program 1 (id=4867): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x18000000000002a0, 0xda, 0x0, &(0x7f0000000340)="b9ff03076044238cb89e14f0430547e0ffff00004000638877fbac14140cac14140c07029f89052f87e577ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf7", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000000000000000000408000200000000000000000200000000002e5f61610030dc3000"], 0x0, 0x3a}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000580)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000600)=[{0x18, 0x2, 0x8, 0x6}], 0x10, 0x10001}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r4}, 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000280)={r3, &(0x7f00000000c0)='GPL\x00', 0x3d87e06204c2889f, &(0x7f0000000100)={@_ha_fsid={[0x1, 0x8]}, {0x8001, 0x1, 0x80000000, 0xfffffffffffffffe}}, 0x401, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000240)=0x65f}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xf, 0x18, &(0x7f0000000980)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75}, 0x94) 13m33.570283698s ago: executing program 1 (id=4871): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)=ANY=[@ANYRESDEC], 0x28}], 0x1}, 0x4000004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000640)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, @in6={0xa, 0x4e34, 0x6, @private0, 0xfe}, @in6={0xa, 0x4e23, 0x100, @dev={0xfe, 0x80, '\x00', 0x98}, 0x4}, @in6={0xa, 0x4e21, 0x10000, @empty}, @in6={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0xfffffffb}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @local}], 0xd0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) (async, rerun: 64) r3 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000340)={0x1d, r7}, 0x10) (async) bind$can_raw(r6, &(0x7f0000000380), 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r8, {0xd}, {0x4, 0x7}, {0xb, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000040) listen(r2, 0x7) close(0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001400)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xb}, {0xffe0, 0xfff3}, {0x9, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041006}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, 0x0, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) 13m30.980382464s ago: executing program 1 (id=4879): bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @short={0x2, 0x2, 0xfffe}}, 0x14) socketpair(0x26, 0x6, 0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x9, 0xb14, 0x7, 0x10980, 0xffffffffffffffff, 0xef73, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0xfff, 0x0, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'ip_vti0\x00', 0x0, 0x8000, 0x80, 0x200, 0x81, {{0xf, 0x4, 0x3, 0x1, 0x3c, 0x68, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@generic={0x88, 0xa, "f23f760868f2bf80"}, @ssrr={0x89, 0xf, 0xe0, [@broadcast, @dev={0xac, 0x14, 0x14, 0x25}, @remote]}, @generic={0x82, 0xa, "2c9ffb4448a52bbc"}, @ra={0x94, 0x4}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0], 0x0, 0x44, &(0x7f0000000840)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x65, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x18, 0x16, &(0x7f0000000a80)=@raw=[@alu={0x7, 0x1, 0x0, 0xa, 0x0, 0x40ac75f458d1bdf4, 0x8}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa372}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x1, 0xc, 0x8, 0x6, 0x80, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ldst={0x0, 0x3, 0x5, 0x8, 0x4, 0x2, 0x4}, @call={0x85, 0x0, 0x0, 0xb0}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x3}, @generic={0x81, 0xd, 0x8, 0xf000, 0xa0}], &(0x7f0000000b40)='syzkaller\x00', 0x10, 0x1000, &(0x7f0000000b80)=""/4096, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b80)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001bc0)={0x5, 0x2, 0x1}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001c00)=[{0x0, 0x4, 0x0, 0x9}], 0x10, 0x6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001d00), &(0x7f0000001d40)}, 0x20) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001e00)=@generic={&(0x7f0000001dc0)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001ec0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001e40), &(0x7f0000001e80)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001f80)={{0x1, 0xffffffffffffffff}, &(0x7f0000001f00), &(0x7f0000001f40)='%pi6 \x00'}, 0x20) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000020c0)={r1, &(0x7f0000001fc0)='*\x00', 0x2c0, &(0x7f0000002000)={@align=0x6, {0xff80, 0xe4ab, 0x100, 0xd7cd}}, 0xc, &(0x7f0000002040)={@_ha_fsid}, &(0x7f0000002080)=0x4}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002180)={{0x1, 0xffffffffffffffff}, &(0x7f0000002100), &(0x7f0000002140)='%pK \x00'}, 0x20) r17 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000021c0)={0xffffffffffffffff, 0x1, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000022c0)={0xa, 0x30, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xab}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_fd={0x18, 0x4, 0x1, 0x0, r6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='GPL\x00', 0x1000, 0xa0, &(0x7f0000000540)=""/160, 0x41000, 0x4, '\x00', r7, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0xa, 0xe, 0x800}, 0x10, r9, r10, 0x5, &(0x7f0000002200)=[r11, r12, r13, r14, r15, r16, r17], &(0x7f0000002240)=[{0x5, 0x3, 0x9, 0xb}, {0x1, 0x4, 0x9, 0x5}, {0x0, 0x5, 0x6, 0x2}, {0x3, 0x5, 0xa9, 0x2}, {0x3, 0x1, 0x1, 0x8}], 0x10, 0x7}, 0x94) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r16, 0xf50f, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002380)={0x1b, 0x0, 0x0, 0x2, 0x0, r5, 0x5, '\x00', r8, r15, 0x3, 0x4, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002600)={0x18, 0x4, &(0x7f0000002400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200}, [@jmp={0x5, 0x0, 0x1, 0x1, 0x3, 0x80, 0xffffffffffffffff}]}, &(0x7f0000002440)='syzkaller\x00', 0xc1e5, 0x16, &(0x7f0000002480)=""/22, 0x41100, 0x1, '\x00', 0x0, 0x0, r15, 0x8, &(0x7f00000024c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000002500)={0x5, 0x4, 0x9, 0x19e8e315}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000002540)=[r14, r13, r4, r2, r16, r17, r6, r4], &(0x7f0000002580)=[{0x5, 0x1, 0x10, 0x2}, {0x5, 0x5, 0x6, 0xa}, {0x5, 0x4, 0x10, 0xc}, {0x0, 0x3, 0x6, 0xa}, {0x2, 0x4, 0xc, 0xc}, {0x3, 0x3, 0x6, 0x7}, {0x0, 0x2, 0x5, 0x2}, {0x5, 0x4, 0x3, 0x9}], 0x10, 0x4}, 0x94) r18 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002700), r1) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000027c0)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x6050060c}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x1c, r18, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x42) ioctl$BTRFS_IOC_GET_DEV_STATS(r10, 0xc4089434, &(0x7f0000002800)={0x0, 0x1, 0x0, [0x2, 0x4, 0xef, 0x80, 0x400], [0x6, 0xffffffffffff7fff, 0x72, 0x3, 0xfd7, 0x54, 0x3, 0x9, 0x5, 0x400, 0x3, 0x6, 0x7, 0x5, 0x2, 0xdc15, 0x300, 0x2, 0x0, 0x8001, 0x7, 0x627, 0xff, 0x3, 0x6, 0x0, 0x6, 0x6, 0x2, 0x4, 0x80000000, 0x80, 0x8000, 0x8000, 0x8, 0x7, 0x80, 0x52, 0x3, 0x9, 0x6, 0x80, 0x9, 0x7, 0x2, 0xfffffffffffffff7, 0x1, 0xffffffffffffffff, 0x1000, 0x1ca2639f800000, 0x9, 0x489b, 0x7, 0x5, 0x6, 0xfffffffffffffffb, 0x2, 0x0, 0x1, 0x800, 0x2665, 0x4, 0x7, 0x3, 0xffff, 0x77, 0x9, 0x4, 0x54, 0x8000000000000000, 0x5, 0x9, 0x20, 0x5, 0xffffffff, 0x1, 0x9, 0x10000, 0x8000000000000000, 0x5, 0x401, 0x699, 0xaf4b, 0x800, 0x7, 0x0, 0x8, 0x0, 0x85893e0, 0x7, 0x8, 0x4, 0x47, 0x7, 0x0, 0x4, 0x9, 0x7, 0x5e, 0x4, 0xfffffffffffffffe, 0x80000001, 0xd, 0xfffffffffffffff9, 0x3, 0x0, 0x2, 0x33, 0x58, 0xfff, 0x1000, 0x8000000000000000, 0x4, 0xab, 0x5, 0x401, 0x81, 0xffff, 0x800, 0x101, 0x100]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r10, 0xc4089434, &(0x7f0000002c40)={r19, 0x0, 0x14f07a7e4773e09d, [0x0, 0x7000000000000, 0x7, 0x1, 0xd], [0x42f1, 0x0, 0x5, 0x0, 0x2, 0x3, 0x103e, 0x9, 0x7ff, 0x3, 0xa8e8, 0x1, 0x1, 0x0, 0xa1a, 0x7, 0x3, 0x547e54dc, 0x80, 0x1, 0x62, 0x10001, 0x80, 0xff, 0x8000000000000000, 0x7, 0x6, 0x7, 0x3, 0xfff, 0x80000001, 0x400, 0x4, 0x3, 0x3, 0xfffffffffffffffe, 0x7, 0x6, 0x0, 0xffffffffffffffff, 0x5, 0x10000, 0xd, 0x5, 0x3ff, 0x9, 0xffffffffffffff5f, 0xffffffffffffffff, 0x9, 0x5, 0x3, 0x0, 0xc59, 0x10000, 0x0, 0xbb3b, 0x81, 0x0, 0x8000000000000000, 0x7420, 0x8000, 0x100, 0x0, 0x4, 0x2, 0x10001, 0x5, 0x3, 0x7, 0xf5, 0x1, 0x8, 0x4, 0xffff, 0xfffffffffffff801, 0x8, 0xfffffffffffffffb, 0x4, 0xdc, 0x2, 0x2, 0x0, 0x1, 0x7, 0x1, 0x6, 0x100000000, 0x6, 0xfffffffffffffff8, 0x4, 0x400, 0x40000000, 0x9, 0x67cc, 0x2, 0x400, 0x8, 0x1000, 0x3, 0x4, 0xd, 0x3, 0x9, 0x7fff, 0x1, 0xfffffffffffff001, 0x2, 0x3, 0xf2, 0xacc, 0xffffffffffff7fff, 0xffffffff, 0x4, 0xe9, 0xff, 0x1, 0x1f93, 0x298a, 0x8, 0x101, 0x3]}) ioctl$SIOCGETSGCNT(r15, 0x89e1, &(0x7f0000003080)={@private=0xa010101, @empty}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000030c0)={'netdevsim0\x00'}) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000003100)) socket$nl_generic(0x10, 0x3, 0x10) 13m30.622123798s ago: executing program 1 (id=4881): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) write$tun(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e00000000000000ca00000003"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0xf, &(0x7f0000000400)=ANY=[@ANYRESDEC=r1, @ANYBLOB="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", @ANYRESDEC=r1], &(0x7f00000000c0)='syzkaller\x00', 0xfffffff8, 0x0, 0x0, 0x0, 0x25}, 0x94) 13m29.987981815s ago: executing program 1 (id=4885): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) recvmmsg(r1, &(0x7f0000007440)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/108, 0x6c}], 0x1}, 0xd2c7}], 0x40000, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="050000000000000071118401c1dee62c71227f8d00000000a0ff8e9e16236de86a5207c81f0978dde042c7fd4368140dc6d2700cdf83a377de2e4421f78bacde8359b51115b6e272f4cca762cb7cd79bb320719cd5356185f71f46b1df50cb3637faa16fd9bad26dd73b1dd42c54ebc3655b355bd1699297871d8382df34f37213a6613b3f27f8ee35"], 0x0, 0x5, 0xc3, &(0x7f0000000640)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) sendmsg$nl_route_sched(r2, 0x0, 0x24040084) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xa, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 13m14.722686317s ago: executing program 35 (id=4885): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) recvmmsg(r1, &(0x7f0000007440)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/108, 0x6c}], 0x1}, 0xd2c7}], 0x40000, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="050000000000000071118401c1dee62c71227f8d00000000a0ff8e9e16236de86a5207c81f0978dde042c7fd4368140dc6d2700cdf83a377de2e4421f78bacde8359b51115b6e272f4cca762cb7cd79bb320719cd5356185f71f46b1df50cb3637faa16fd9bad26dd73b1dd42c54ebc3655b355bd1699297871d8382df34f37213a6613b3f27f8ee35"], 0x0, 0x5, 0xc3, &(0x7f0000000640)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) sendmsg$nl_route_sched(r2, 0x0, 0x24040084) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xa, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 10m32.546551279s ago: executing program 2 (id=5412): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) setsockopt$inet_sctp6_SCTP_REMOTE_UDP_ENCAPS_PORT(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000ac0)={0x0, @in6={{0xa, 0x4e24, 0x8001, @mcast1, 0x6}}, 0x4e20}, 0x90) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$kcm(0x2a, 0x2, 0x0) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000140), 0xffffffffffffff80) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20048040) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000007c0)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000001701000004000000040000000000000010000000000000001701000002"], 0x11c0}], 0x1, 0x20004080) socket$inet6(0xa, 0x3, 0xff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x204843, 0x0) ioctl$SIOCGSKNS(r5, 0x894c, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x600}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r6, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r7, 0x891b, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) 10m28.222971914s ago: executing program 2 (id=5428): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYRESHEX=r1], 0x44}, 0x1, 0x0, 0x0, 0x44800}, 0x4040001) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x1, &(0x7f0000000000)="0100203200"/20, 0x14) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x20, 0x18, 0x107, 0x70bd27, 0x0, {0x4b, 0x7c, 0x3f}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x5, 0x0, 0x0, @pid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40811}, 0xc000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b80)=ANY=[@ANYBLOB="1c0000004500090000000000000000000300000008000200", @ANYRES64=r7], 0x1c}, 0x1, 0x0, 0x0, 0x4004010}, 0x20000004) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x20, r5, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40008d6}, 0x840) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000600)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f00000006c0)={0x18, r5, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x8040) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x68, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x2, 0x4, &(0x7f0000001c80)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000001cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x2, 0x4, &(0x7f0000001dc0)=ANY=[], &(0x7f0000001e00)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001e40)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000001e80)='./cgroup/cgroup.procs\x00', &(0x7f0000001ec0)=[0x0], 0x0, 0x0, 0x1}}, 0x40) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001f00)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000001f40)='./cgroup/cgroup.procs\x00', &(0x7f0000001f80)=[0x0], 0x0, 0x0, 0x1}}, 0x40) close(r10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r4) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000740)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001800)={&(0x7f0000001840)={0x1c, r11, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000001900)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x1c, r11, 0x4, 0x70bd28, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004005}, 0x80) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001ac0)={0x1c, 0x31, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x5, 0x18, 0x0, 0x0, @binary='\r'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x46854}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x18, &(0x7f0000000300)=ANY=[@ANYBLOB="180000008d000000000000000320110018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf0900000000000055090100ffffffff950000000000000045000600040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ffffff1fb7030000080000005000000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f00000003c0)='GPL\x00', 0xf, 0x1001, &(0x7f0000000780)=""/4097, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 10m26.860832557s ago: executing program 2 (id=5434): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async, rerun: 32) listen(r0, 0x402) (async, rerun: 32) syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000286dd6000000000180600fe8000000000000000000000000000aafe8000000000000000000000000000aafffc4e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c200059001f50000000000"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000040)={0x0, 0xa1ff, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01fffff0000000000000200100000c000280080002006c6f0000180003800400010008000200050000000800040076"], 0x38}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000900150000060015000200000014001680100008800c00038005ee5e5107000000"], 0x38}}, 0x0) 10m26.376403047s ago: executing program 2 (id=5436): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x228, 0x18c, 0x203, 0x0, 0x19030000, 0x368, 0x2e0, 0x2e0, 0x368, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x511e], 0x5df9b3d1, 0x2, 0x5, [@ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x3e}, @empty, @empty, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @empty, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}], 0x13}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x9}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0x1}, 0x0, &(0x7f00000006c0)='%pI4 \x00'}, 0x20) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069003a00000000009500740000000000", @ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000240)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000440)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed090f0000600000f3a1bc5603ca00000f7f89e3ff296aa1f6475322f000200000004a2471083ec6991778581acb6c0101ff00", 0x48}], 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)={0x170, r3, 0x10, 0x70bd28, 0x3, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x15c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1a, 0xb, 0x12, 0x2, 0x5, 0x2, 0x3, 0x1, 0x18, 0x0, 0xb, 0x6c]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x18, 0x2, 0x1, 0x16, 0x1b, 0x12, 0x36, 0xb, 0x2, 0x6c, 0x16, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0xf, 0x9, 0x4, 0x82, 0x2189, 0xffb0]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xfff7, 0x0, 0x21, 0x7, 0x6d, 0x5, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2b, 0xfbff, 0x5d, 0x401, 0x4, 0x8, 0x2943, 0x9adf]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x6, 0x9}, {0x0, 0x2}, {0x5, 0x5}, {0x5}, {0x0, 0x7}, {0x2, 0x2}, {0x2, 0x5}, {0x1, 0x2}, {0x0, 0x1}, {0x3, 0x7}, {0x7}, {0x5, 0x6}, {0x4, 0x2}, {0x2, 0x6}, {0x2, 0x4}, {0x7, 0x7}, {0x5, 0x6}, {0x1, 0x7}, {0x7, 0x5}, {0x1, 0x6}, {0x1, 0x2}, {0x5, 0x4}, {0x5, 0xa}, {0x0, 0x4}, {0x7, 0x8}, {0x1, 0xa}, {0x6, 0x8}, {0x0, 0x4}, {0x1}, {0x0, 0x1}, {0x7, 0x6}, {0x0, 0xa}, {0x0, 0x5}, {0x1}, {0x6, 0x8}, {0x2, 0x7}, {0x0, 0xa}, {0x1, 0x5}, {0x4, 0x8}, {0x1, 0x6}, {0x3, 0x2}, {0x5, 0xa}, {0x3, 0x8}, {0x0, 0x1}, {0x2, 0x5}, {0x4, 0x9}, {0x5, 0x5}, {0x0, 0x2}, {0x7}, {0x2, 0x5}, {0x5, 0x2}, {0x6, 0x3}, {0x2, 0x9}, {0x5, 0xa}, {0x3, 0x5}, {}, {0x7, 0x8}, {0x2, 0x1}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0xc, 0x1, 0x60, 0x1, 0x5, 0x48, 0x1, 0x12, 0x6c, 0x2, 0x30, 0x48, 0x48, 0xb, 0x18, 0x16, 0x60, 0x36, 0x4, 0x18, 0x1, 0x6c, 0x18, 0x48]}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x1, 0x9}, {0x5, 0x2}, {0x6}, {0x5, 0x4}, {0x5, 0x4}, {0x1, 0x7}, {0x4, 0x9}, {0x7, 0x5}, {0x7, 0xa}, {0x7, 0x4}, {0x3, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x3, 0x2}, {0x2, 0x6}, {0x0, 0x6}, {0x5, 0x5}, {0x2, 0x2}, {0x2, 0x3}, {0x1, 0x4}, {0x6, 0x2}, {0x7, 0xa}, {0x1, 0x8}, {0x4, 0x7}, {0x3}, {0x2, 0x4}, {0x2, 0x3}, {0x2, 0x6}, {0x4, 0x7}, {0x1, 0x3}, {0x0, 0x5}, {0x6, 0x8}, {0x4, 0x3}, {0x5, 0x5}, {0x7, 0x1}, {0x2, 0x9}, {0x2, 0x2}, {0x2, 0x4}, {0x4, 0x8}, {0x0, 0x7}, {0x1, 0x3}, {0x1, 0x2}, {0x3, 0x1}, {0x3, 0x7}, {0x4, 0x7}, {0x6, 0xa}, {0x7, 0x7}, {0x3, 0x3}, {0x1, 0x4}, {0x1, 0x7}, {0x1, 0xa}, {0x3, 0x1}, {0x2, 0x4}, {0x0, 0x9}, {0x0, 0x1}, {0x3, 0x5}, {0x2, 0x5}, {0x3}, {0x6, 0x9}, {0x0, 0x5}, {0x7, 0x1}, {0x0, 0x1}, {0x4, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x5, 0x9}, {0x0, 0x2}, {0x2, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x48080}, 0x4040) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x7, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r4, @ANYBLOB="000000000000000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000095"], &(0x7f0000000dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={r6, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000000f40), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f00000003c0)={r8}, &(0x7f0000000400)=0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0) 10m25.241034484s ago: executing program 2 (id=5441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000007f08000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000480050001"], 0x80}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x24000800}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 10m24.52479749s ago: executing program 2 (id=5443): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x9, 0x42, 0x1}, 0x50) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000014c0)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0xd, 0x5, &(0x7f00000002c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x18, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000000300)='GPL\x00'}, 0x80) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000540), 0xffff, r0}, 0x38) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff3}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 10m9.115923877s ago: executing program 36 (id=5443): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x9, 0x42, 0x1}, 0x50) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000014c0)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0xd, 0x5, &(0x7f00000002c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x18, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000000300)='GPL\x00'}, 0x80) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000540), 0xffff, r0}, 0x38) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff3}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 3m14.309613496s ago: executing program 5 (id=6629): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x9, 0x21, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x8, 0x8000, 0x5b30, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x0, 0x10}}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000004, 0x42072, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x34, 0x0, 0x1, 0x70bd29, 0xffffffbe, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x48080}, 0x20004056) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100033062cbd700000000000fc020000000000000000000000000000ac1414aa0000000000000000000000000000000900000008000000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000000000000000000000000000000000000700000000000000fcffffffffffffff00000000000000000900000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000100000000000002000000200000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000500)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x29) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) connect$inet(r6, &(0x7f0000000640)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@remote, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xad, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) bind$can_raw(r4, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0xcc411eaf6a585b1f, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040095}, 0x40) 3m12.888003209s ago: executing program 5 (id=6636): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000000100081050040bb00fcdbdf2500000000bf21b04f56dba169de4c587348e9c111116b40581a88cf8977000def032f1d7ba900f30961cafb3eeede0c5e56eb19d0ce628927e7acbbb91317805930ea61235690f44e795f2351a10afaae12d5dc4453e01e70c3969c0db92155ec01c2df2b6e96dfef3aaaae07b291d0228bb2c1bd6079c1cf04ebd64460d4d0d68e951c6e40849259cebc20c3e42a608146078ec3bbc18bd0", @ANYRES32=0x0, @ANYBLOB="02d00400000000002400128009000100626f6e640000000014000280050001000500000005001b0010000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x4004000) (async) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000000100081050040bb00fcdbdf2500000000bf21b04f56dba169de4c587348e9c111116b40581a88cf8977000def032f1d7ba900f30961cafb3eeede0c5e56eb19d0ce628927e7acbbb91317805930ea61235690f44e795f2351a10afaae12d5dc4453e01e70c3969c0db92155ec01c2df2b6e96dfef3aaaae07b291d0228bb2c1bd6079c1cf04ebd64460d4d0d68e951c6e40849259cebc20c3e42a608146078ec3bbc18bd0", @ANYRES32=0x0, @ANYBLOB="02d00400000000002400128009000100626f6e640000000014000280050001000500000005001b0010000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x4004000) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x2, 0xffffffffffffffff, 0x80000}, &(0x7f0000000100)=0xc) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x912d0eb9cc551e10, 0x3, 0x6, 0x5, 0x1c, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x700, 0x9, 0x20000001}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg2\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a00), 0x4) (async) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a00), 0x4) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a40), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000a80)={0x0, r6}, 0x8) (async) r9 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000a80)={0x0, r6}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x8001, 0x0, 0x10000, 0x1f080, 0x1, 0x7, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x100000001, @value=r8, @void, @value=r9}, 0x50) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x8001, 0x0, 0x10000, 0x1f080, 0x1, 0x7, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x100000001, @value=r8, @void, @value=r9}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r10, &(0x7f0000000b80), 0x0}, 0x20) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r11, &(0x7f0000000bc0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000c00)={r11, r11, 0x7, 0x0, 0x0, 0xe, 0x4, 0x8, 0x9, 0x3, 0x2, 0x2, 'syz1\x00'}) shutdown(r11, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r12, 0x84, 0x9, &(0x7f0000000cc0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0x2}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r12, 0x84, 0x9, &(0x7f0000000cc0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r12, 0x84, 0x9, &(0x7f0000000d80)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x1, 0xfffe, 0x0, 0x6, 0x8a}, 0x9c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000e40)={'pimreg\x00', 0x1}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r13, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a250000000008000a"], 0xe0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40800) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000003c0)={@any, 0xfffffff9, 0xfeff, 0x8, 0x1, 0x7, "909087efd0b15fa7d88d7c91cf6293b74c72e829646fb27ae35a275712ed5d5a2b38937f95a1b4394fad0e13bff873ce91aeffc59f89d9eccda4daf28b979f72d2a3fcb5b04a35578344da2612d76314e96ea9d79e64fe8f5732053c13512dbc168cbdb9653af971245134d069aeb6bf6f63c8ef658be1b15c980f68291acef3"}) (async) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000003c0)={@any, 0xfffffff9, 0xfeff, 0x8, 0x1, 0x7, "909087efd0b15fa7d88d7c91cf6293b74c72e829646fb27ae35a275712ed5d5a2b38937f95a1b4394fad0e13bff873ce91aeffc59f89d9eccda4daf28b979f72d2a3fcb5b04a35578344da2612d76314e96ea9d79e64fe8f5732053c13512dbc168cbdb9653af971245134d069aeb6bf6f63c8ef658be1b15c980f68291acef3"}) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000300)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)="ca2a287c2308934ba463b37552b031af3ffb25ee3316f9bd3e831f250458799dd0f3cace900449d10409ef8cd53fcb42cb55ff3e7ddbc186401f69", 0x3b}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0000000000000000000000001c000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="640101006401010000000000"], 0x170}, 0x40) r14 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r14, 0x1, 0x3c, &(0x7f0000000640)={0x1}, 0x8) 3m11.768993649s ago: executing program 5 (id=6641): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001b80), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'sit0\x00', 0x10}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000001c40)=[{0x28, 0x8, 0x5, 0xfffff004}, {0x6, 0xc0, 0x40}]}) 3m11.464808074s ago: executing program 5 (id=6645): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\xd6.\x00', 0x90002, &(0x7f0000000040)={@_ha_fsid={[0xfff, 0x2]}, {0x6, 0xb, 0xfffffffa, 0x2}}, 0x6, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xb8b5}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r0}, 0x8) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000180)=""/124, &(0x7f0000000200)=0x7c) r2 = accept4$phonet_pipe(r0, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0) getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x4) connect(r1, &(0x7f0000000340)=@vsock={0x28, 0x0, 0x8c2b7af99f83deaf, @local}, 0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000a80)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a40)={&(0x7f0000000440)={0x5e4, r3, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x5d0, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x2b0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x27c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x24, 0x1, 0x24, 0x16, 0x48, 0xc, 0x17, 0x3, 0x9, 0x36, 0x36, 0x6c, 0x30, 0x12, 0x2, 0x2b, 0x0, 0x9, 0x60, 0x4, 0x3, 0x48, 0x36, 0x6c, 0x12, 0x18, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xbf2, 0x3, 0xacaf, 0x6, 0x7, 0x4, 0xecf5]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x60, 0xa, 0x9, 0xc7, 0x6, 0x26, 0x12, 0x1, 0x1, 0xb, 0x1, 0xc, 0x48, 0xc, 0x16, 0x22, 0xc, 0x36, 0xb, 0x9, 0x1, 0x30, 0x60, 0x24, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x81, 0x3, 0x1, 0x7, 0x3, 0x47d, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2aa4, 0x4, 0x6c5, 0x5, 0x9, 0x56f, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x391, 0x5, 0x3, 0x7782, 0x6, 0x1ff, 0x1, 0x8f30]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x4, 0x6}, {0x3, 0x6}, {0x5, 0x8}, {0x1, 0x8}, {0x7, 0x18}, {0x4, 0x2}, {0x2, 0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x7}, {0x1, 0x8}, {0x4, 0x3}, {0x7, 0x5}, {0x4, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x1, 0x2}, {0x5, 0x7}, {0x3}, {0x0, 0x6}, {0x0, 0x1}, {0x2, 0xa}, {0x3, 0xa}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0xa}, {0x0, 0x9}, {0x3, 0xa}, {0x0, 0x5}, {0x5, 0x8}, {0x5}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0xac23, 0x5, 0x7, 0x2, 0x0, 0x7ff, 0x2]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x4, 0x12, 0x9, 0x16, 0x12, 0x1, 0x16, 0x18]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8841, 0x3, 0xffff, 0x3, 0x0, 0x8, 0x6, 0x5]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x4}, {0x1, 0x4}, {0x4, 0x4}, {0x3, 0x2}, {0x6, 0x1}, {0x6, 0x3}, {0x5}, {0x4, 0x7}, {0x6, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x2, 0x8}, {0x2, 0x4}, {0x6, 0x1}, {0x4, 0x6}, {0x7, 0x5}, {0x5, 0x5}, {0x2, 0x4}, {0x7, 0x6}, {0x1, 0x5}, {0x5, 0x9}, {0x0, 0x8}, {0x1, 0x2}, {0x1}, {0x6, 0x9}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xb, 0x48, 0x0, 0x4e, 0x6c, 0x9, 0xb, 0x30, 0x6c, 0x9, 0x9, 0x0]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x3, 0xa}, {0x7, 0x1}, {0x3, 0x3}, {0x0, 0xa}, {0x4}, {0x7, 0x3}, {0x7, 0x8}, {0x0, 0x5}, {0x1, 0x3}, {0x7}, {0x7, 0x9}, {0x3, 0x3}, {0x0, 0x9}, {0x7, 0x3}, {0x4, 0xa}, {0x4}, {0x3, 0x7}, {0x5, 0x5}, {0x1, 0x5}, {0x6, 0x7}, {0x2, 0x4}, {0x4, 0xa}, {0x2, 0x3}, {0x3, 0x4}, {0x1, 0x6}, {0x6, 0x6}, {0x6, 0x1}, {0x1, 0x5}, {0x7, 0xa}, {0x1, 0x1}, {0x7, 0x3}, {0x4, 0x3}, {0x1, 0x3}, {0x3, 0x6}, {0x6, 0x1}, {0x3, 0x8}, {0x4, 0x3}, {0x6, 0x3}, {0x7, 0x6}, {0x7}, {0x0, 0x7}, {0x4, 0x9}, {0x7, 0x5}, {0x7, 0x2}, {0x6, 0x8}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x6}, {0x7, 0x2}, {0x7, 0x2}, {0x6, 0x4}, {0x0, 0x3}, {0x6, 0x6}, {0x0, 0x3}, {0x5, 0xa}, {0x6, 0x4}, {0x1, 0x6}, {0x1, 0x8}, {0x1, 0x7}, {0x1, 0xa}, {}, {0x6, 0x9}]}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1, 0xd, 0x2, 0x1, 0x6c, 0x1, 0x12, 0x16, 0x32, 0x60, 0x3, 0x12, 0x4, 0x24, 0x6, 0x6c, 0xe, 0xc, 0x18, 0x1b, 0x60, 0x18, 0x1b, 0x12, 0x2, 0x36, 0x9, 0x6c, 0x24, 0x6, 0xc, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x4, 0x9, 0x8, 0x23fa, 0x5, 0x8]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6, 0x6, 0x3, 0x4, 0x60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc5, 0x9ebe, 0x6, 0x4, 0x1, 0x9, 0x100]}}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x2, 0xa}, {0x3, 0x4}, {0x1, 0x7}, {0x6, 0x2}, {0x2, 0x2}, {0x4, 0x4}, {0x6, 0x6}, {0x1, 0x4}, {0x7, 0xa}, {0x5, 0x6}, {0x1, 0x1}, {0x7, 0x4}, {0x0, 0x1}, {0x3, 0x5}, {0x7, 0x5}, {0x6, 0x3}, {0x1, 0x5}, {0x1, 0x3}, {0x3, 0x6}, {0x7, 0x7}, {0x3, 0xa}, {0x6, 0x4}, {0x5}, {0x0, 0xa}, {0x5, 0x2}, {0x2, 0x9}, {0x4, 0xa}, {0x3, 0x8}, {0x0, 0x5}, {0x0, 0x9}, {0x2, 0xa}, {0x0, 0x6}, {0x0, 0x2}, {0x3, 0x5}, {0x0, 0x5}, {0x3, 0x7}, {0x1, 0x1}, {0x0, 0x2}, {0x1, 0x1}, {0x7, 0x7}, {0x6}, {0x1, 0x1}, {0x6, 0x1}, {0x4, 0x7}, {0x2, 0x1}, {0x6, 0x7}, {0x2}, {0x1, 0x7}, {0x5, 0x7}, {0x5, 0x9}, {0x1, 0x1}, {0x3, 0x8}, {0x1, 0x3}, {0x5, 0x1}, {0x7, 0x4}, {0x0, 0x1}, {0x5, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe7}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc8}]}, {0x210, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x38}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1d0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x1, 0x4}, {0x6, 0x9}, {0x7, 0x1}, {0x1, 0x7}, {0x3, 0x2}, {0x0, 0x3}, {0x5, 0x5}, {0x6, 0x7}, {0x1, 0x9}, {0x2, 0x1}, {0x0, 0x4}, {0x1, 0x6}, {0x6, 0x8}, {0x5, 0x2}, {0x3, 0x9}, {0x2, 0x6}, {0x0, 0x8}, {0x5, 0x4}, {0x1, 0x4}, {0x4}, {0x1, 0x8}, {0x0, 0x4}, {0x2, 0x6}, {0x5, 0xa}, {0x7, 0x6}, {0x4, 0x2}, {0x5, 0x4}, {0x3, 0x2}, {0x3, 0x7}, {0x3, 0x9}, {0x5, 0x9}, {0x7, 0x8}, {0x5, 0x9}, {0x1, 0x9}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x0, 0x2}, {0x1, 0x7}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x36, 0x1b, 0x2, 0x7f, 0x3, 0x18, 0x60, 0x12, 0x48, 0x1b, 0x4, 0x4, 0x24, 0x3, 0x48, 0x2, 0xb, 0x7e, 0x6, 0x4, 0x3, 0x48, 0xb, 0x5, 0xc, 0x36, 0xb, 0x48, 0x18, 0x1, 0xc]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x3, 0x4}, {0x5, 0x2}, {0x4, 0x4}, {0x3, 0x3}, {0x3, 0x9}, {0x4, 0x6}, {0x0, 0x5}, {0x1}, {0x1, 0x9}, {0x3, 0x9}, {0x2, 0x5}, {0x0, 0xa}, {}, {0x7}, {0x4, 0x3}, {0x1, 0x2}, {0x1, 0x9}, {0x2, 0xa}, {0x6, 0xa}, {0x0, 0x2}, {0x1, 0x2}, {0x0, 0x4}, {0x6, 0xa}, {0x1, 0x3}, {0x2, 0x3}, {0x1, 0xa}, {0x7, 0x4}, {0x2, 0x1}, {0x4}, {0x1}, {0x7}, {0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x4, 0x3}, {0x2, 0x5}, {0x7, 0xa}, {0x1, 0x1}, {0x0, 0x9}, {0x3, 0x7}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x2, 0x6}, {0x3, 0x9}, {0x5, 0x1}, {0x0, 0x2}, {0x6, 0x8}, {0x0, 0x4}, {0x7, 0x4}, {0x0, 0x5}, {0x1, 0x1}, {0x2, 0x4}, {0x1, 0x9}, {0x1, 0x3}, {0x7, 0x1}, {0x0, 0x1}, {0x2, 0x8}, {0x0, 0x4}, {0x6, 0x4}, {0x1, 0x7}, {0x5}, {0x4, 0x3}, {0x2}, {0x1, 0x8}, {0x0, 0x2}, {0x5, 0x8}, {0x0, 0xa}, {0x2, 0xa}, {0x0, 0x5}, {0x5, 0x7}, {0x3, 0x4}, {0x2, 0x3}, {0x4, 0x5}, {0x1, 0x7}, {0x2, 0x8}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x9, 0x71f1, 0x80, 0x1, 0x1, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xfff7, 0x2, 0x6f74, 0x10, 0x8, 0x4, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x1120, 0x6, 0x3, 0xc5, 0x6, 0xf301]}}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x38, 0x2, [{0x2, 0x6}, {0x5, 0x8}, {0x2, 0x7}, {0x5, 0x5}, {0x6, 0x7}, {0x4}, {0x2, 0x2}, {0x5, 0xa}, {0x3, 0x1}, {0x3, 0x2}, {0x6, 0x4}, {0x3, 0x5}, {0x6, 0x6}, {0x2, 0x7}, {0x1, 0xa}, {0x4, 0x6}, {0x7, 0x9}, {0x5, 0x3}, {0x5, 0x2}, {0x3, 0x2}, {0x2, 0xa}, {0x4, 0x7}, {0x6, 0x3}, {}, {0x0, 0x2}, {0x6, 0x4}, {0x3, 0x8}, {0x0, 0x7}, {0x0, 0x4}, {0x1, 0xa}, {0x3, 0x7}, {0x5, 0x8}, {0x5, 0x9}, {0x3, 0x9}, {0x2, 0x8}, {0x5, 0x9}, {0x2, 0x8}, {0x7, 0x5}, {0x3, 0x9}, {0x3, 0x2}, {0x6, 0x1}, {0x7, 0x4}, {0x6, 0x6}, {0x0, 0x9}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x7}, {0x2, 0x4}, {0x1, 0x6}, {0x5, 0x8}, {}, {0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7ff, 0xff, 0x7fff, 0x9, 0x7f, 0x0, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6c]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x2, 0x48, 0x16, 0x0, 0x1b, 0x4, 0x24, 0x2, 0x1, 0x16, 0x48, 0x18, 0xb, 0x30, 0x4, 0x39, 0x12, 0x30, 0x2, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7dd6, 0xf654, 0x0, 0x65bb, 0x43, 0xb75, 0x8, 0xfff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x63, 0x1000, 0x3ff, 0x7, 0xc658, 0x400, 0xa9c, 0x400]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x100, 0x7, 0x7, 0x8, 0xc, 0x80, 0x22a3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x78}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6f5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f0000000b80)={'sit0\x00', &(0x7f0000000ac0)={@multicast2, 0x1, 0x0, 0x80, 0x0, [{@initdev}, {@local}, {@initdev}, {@initdev}, {@empty}, {@dev}, {@remote}, {@loopback}]}}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0xb, [@var={0x2, 0x0, 0x0, 0xe, 0x2, 0x1}, @union={0x5, 0x4, 0x0, 0x5, 0x0, 0x6d1, [{0x1, 0x1, 0x3}, {0x4, 0x5, 0x575}, {0x0, 0x3, 0x4}, {0xf, 0x5, 0x2}]}, @union={0x10, 0x4, 0x0, 0x5, 0x1, 0x3, [{0x6, 0x0, 0x7ca}, {0xb, 0x2, 0x4}, {0xc, 0x1, 0x4}, {0xe, 0x4, 0x6376}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x61, 0x5f, 0x0, 0x3d]}}, &(0x7f0000000c80)=""/165, 0xab, 0xa5, 0x1, 0x6, 0x10000, @value=r1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000f00)={r5, 0x20, &(0x7f0000000ec0)={&(0x7f0000000d80)=""/242, 0xf2, 0x0, &(0x7f0000000e80)=""/3, 0x3}}, 0x10) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000f40), &(0x7f0000000f80)=0x28) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001000)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000001080)={'erspan0\x00', &(0x7f0000001040)={'syztnl0\x00', 0x0, 0x20, 0x8040, 0x28000000, 0x81, {{0x6, 0x4, 0x2, 0x2, 0x18, 0x67, 0x0, 0x2, 0x4, 0x0, @empty, @empty, {[@end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000010c0)={'vcan0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001100)={0x0, @dev, @multicast2}, &(0x7f0000001140)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001180)={'vxcan1\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000011c0)={@private, @multicast2, 0x0}, &(0x7f0000001200)=0xc) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000001340)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0xa8, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xa8}}, 0x0) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000001380)={0xffffffffffffffff}) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r14, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x20, r3, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4) setsockopt$inet6_mreq(r1, 0x29, 0x13, &(0x7f00000014c0)={@private2, r6}, 0x14) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r13, 0x8983, &(0x7f0000001500)={0x7, 'team_slave_1\x00', {0xff}, 0xf614}) close(r0) preadv(r5, &(0x7f00000045c0)=[{&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/51, 0x33}, {&(0x7f0000003580)=""/34, 0x22}, {&(0x7f00000035c0)=""/4096, 0x1000}], 0x5, 0xb24e, 0x3) ioctl$sock_inet_SIOCGIFDSTADDR(r13, 0x8917, &(0x7f0000004640)={'team0\x00', {0x2, 0x0, @multicast2}}) sendmmsg$unix(r13, &(0x7f00000063c0)=[{{0x0, 0x0, &(0x7f0000004680), 0x0, &(0x7f0000004f00)=[@rights={{0x24, 0x1, 0x1, [r5, r4, r12, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r4]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r1, r12, r0, r14, r2, r13]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x130, 0x4000000}}, {{&(0x7f0000005040)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000006340)=[{&(0x7f00000050c0)="0055f1644616a831a01eb909bc30fa4ec812a14816ee8f20f6", 0x19}, {&(0x7f0000005100)="b443d5ee51dead5a7cc01c4036d814dc9ee0e38e1680b7e6e9dfd727cbfbf2e39835d28691e7135b88e27694574f65cb898011bda68b3f2432997feaa03fac87edaf1f482c737be0a4e0a9ac8a7c5b5ae86805283897a4f2502bc3baef559b0c713318c38cbb1ab31d8173525c4f15683c40a1cf76759bfd7cebe1bd496b3980235462461980bc8eddc1ba03708e9d1ec9880fc5d17ff9021bf49125bf9d7a6f82bb9e0cd733d97431af22e3aaed0475c89b88ce8db3a0f0a6bd78b076f8780288d319", 0xc3}, {&(0x7f0000005200)="b67d0f4bfd94b1fad830086dc780bf192cd408f6e3ecaa410f2533460632baf3", 0x20}, {&(0x7f0000005240)="e85b10c0c2a1cb2f2dd3c86ae85eb857fbb0abd4adde8aa1e3a744cbff2799c6fbd06ff9e9a622452be13a6e9cf43edb7de91528bba1439baf5c7fd7d0990db2d56da91a7f8ba23255ac0835a7dadff1b906531d318d027423a28b61687ea1c3851b8774774ed89c29e14840cc931bcd4abdd4d17a375866309d5af26796bd984dee97b071175d4b9f8abbe085897ff864118205503928e3fd47cb933f0e4d24adeaf8196a986e860e76631f699892ae3cf7307245c2dcba3f056cecf795", 0xbe}, {&(0x7f0000005300)="19adb8a846884e7f04e61b0ebcdf3e3c71066a8e1474f33f5def44b2bdbda4979d3ed76331f28d7edfca1e40", 0x2c}, {&(0x7f0000005340)="a93a80172754d54c52f9844b3c8257ee82e1bfc6ddd4fb90cf8347d18cbe11d91f5ebe8b73eaaaff054f7d1e850e8ce7a59e85a7508edc0635059dc77a310e9f070ba82c55061a7ee4d974455d3694ae944794d9352f3447e4cb5d2fac1391e8d94689184c5d37ee796ead5e270b21f599eaa671d73a49326e716b9e02b0959052a61230e23a031c72183326ee2710dcea8af4ace656d6394abeb4dbaa4e809d7075b992a255b0931e261ba3f4e112626ff869d16b1cc3a8f4baed57d26441e6a3978b37c5f1861da656a2d69a4a3d7258e981adce9faa45bf683e0491eae66ab6e6090353b4b8bb674290a135c2da60b18ece5580f650b4950ed465dfb03aa88654e6a910e45546efc4f84bdacedf5d24adaa0eb5461d5e5c18cb03443f9e4c7fa8a05c404c57b62edc5a7aaa00efc0fc0209ac90e9b24587d3dc30be75b54a6056147e205216b01f2c4abd7ef740599d9cbda205860f884665988e71313e8a9180f2d6e85a627b4d1786505372d17a43e9074cb9188c64c241d995bddf631ca544bf545061db2dd9b23c6ac59c779060c2a0fbd705802efdac86cf1b2c028dc500b3af4e2af18596c9968474b701560a1a90391e4488063f275cc27ed3d2cb68c3169a5f6d90e64b801c55d67427c6022b0c02869e8db0ffef976f69b61787302cbbfce42606dbe2195ba59a4e8234584d967a1bb1ff57462323162bb5ba3e7233941e8ea8d94dfb61a114732cd5e7937e6e50427e6b63bc52e362e36c7d1c545420efd192005d63c904c2998331ca652d6048a3c89bd6ba15f769378a3e2c32026d97c004dcf2a377178fee7c1a4ce79e2d78af13e0948fea4a8abf1a62ea931db3e4f6dbd36281cab0d511c920c16c5147d0abe3ea32fe94e8130f644cf0d902757b36641891b43f5f5ea349c709ba2bec10e22c681133767ab79cd33c7f9c09eff502f184650772f1e405afda97d55ad9e8df8271d650f3f94298069fda9c9332dd9655330175ec8583ce9fc86bb60f35edd5a9a0ff58b61e1e066b047a6d145cef3d89baffc8321685967a92011225d9a252ba60509996f405f41bebf3aa12e039cfcc441e7e62c617f73d182937db05ff3b5151cd08e9b87478b513797f1eb63442c99c11b95f287dac20dfd505d602ee8e7cd7bfc5a1cd95ad7fede7b06e30b4fd5b8402184ab72d2b12eaf0ba0057ed8d11b9710178dcf73f2824a0a1ce483e5d0459cf59873525599f7786983d2c682a14392f7a4ccdf515af159f690dae871c029a190e590f9314ff2448f3e2ae0564e9aaa06590701ed45993275fcfa90c63f9dc873e7d34f8aedd2dd91b59abf47b117acacaa0016315443a6c17c830c24341fdbfedd7444cb56981e3c4a4dfecf523b9f5424e82436232bb6eaf7663854fb1d679b29421e3bb7dfc643c0d1033f5bdb7b8ac4f0231b198085702c5d527cd443ff61a2f1b69bcf571f60d3b4cfe7d57d28345da2544eaca0980ed4e75646ccc389c4e243e8ee8a07b16a58b213cd2cf799b0050cf9233c4a80f02c1d2e6159557bad9214768e42fb4463546e94c65fcb3cb253c61e2e2e5515c234e1fe695675fb4d3a28c5023140fb81f0f1e8abcc86816223ce91991d6bcccdbb92dfdfa2a719df87f0f677847797bcdca565150b8d8542f05c2471d522b574b617a6e0941db4d177c205e9aeea57ac58d47591f438e6b718907f41310c8c1f6ce3ea2d04f74fb947b76122c3506a7be5f98dca62e74fc54d5ea54b0015a5ae5391f16510db46e34a2ac268c293b76999b8646b2b7c20af02c4bbdb7f7fd986d2b0212257922bf2b9e3308e08c30ddb1dbaeb4aa3f1b90ea1372b36f5ccf0e894018e354b1594770cb5df3e4b335bf90223b4b0d0ccb90526c4345faec1ae82b017b5ec68ccf41ce16d5650dc5c6ba34db6325a075e5f150cd263b83cf235e591580b919a91b312dec535820fb0f8937284e5a38e735679e8b170505378d8ed7d544605359da21764bba963a70abc2a2dda7bc7ad2ea363ec614bce7662e29e9fe7f53add5bbf19fe633ed5a0743e657a24e0880c2b3dcc5f4736086bf8e46480dcca45e7913e7f3a7ae60948a9760ff233769b60a7fee4862708bc142d570b46ce6b5de404883556468fe53d54a4d3c933f83fffbae1afea4c0807f1f509b4543a8e9408e3f00872524fa9be5d018f219207e249f43ed5f2c01484d1bf948a6e29ef1f6a8fe08672f5f281df03f94b2692d0e060ea69b96f30ebf269f21e535f3a78bfce4867d247350fec2f65156f63b35701c7d457b90d14787fe151dc8800903316ae06c00216c37e330f5c5319aa514fd10eb2d600c52303e22297cfcd7ad8dbb277083838cdd1a00a5814d331af8111630cdf5da7245deed5ae280ae8375c4bd51d18cc357862ef8ec9bad6470d24ae45060a0e12d00c916d3ac6466347789e46fdf77867f514597759678ad566798886cc68f3624ddc03f36515673192c21329327a7786d57c9e9d23bbda33a0abe366eb795778917ab85517e2c95aeb70248c5db48c5961f035b6f259a16298d9dc82dcffab1898f1a370b63a6c6e730bbf1ce989bd868d53f2e7e53c2b7a73ebe441f6aa553de52830f29774b25cdd17f7e1cbb7cdb3e42199be96216bb81bc3a5943beee77aa703108f6bf8fbf82f84d5be93f3d701ac4d928142ef3cfa42ebeae70857156139320a74000034f72b28868ae6a339e2c6a4614f258e90c1e13f89ac7f301d6efd02215edc06a78349557d7a3000ec3f148aaebb3209db489e79a653337c2dd917ec1b1c810fa067af08b638e6b92cecd8159e911e2359c8f83d2c1cba447161297564bcf03244f839bc8ece246e80681de73fbb0e213f951c1e89b047e5ee63e8214b0500164a6a1b95d6b0c29a9345ebc05068d94648438fdbf830b78b80eba0a7f891bfd6ce323f531fb4240b6ee5837efafc2a3c4a5e91e9971fb4d87e33ad961017054c377238df39d8567edfab74750d7e473c488b90c557f79cad57b80ffc399ba3afe5bff2aa57ae882bf769dcf6bccedc6d882d9a37771fa2d2c9d9d1b0c26440d7699b14220b4576f8ed98572bc3d988094b6b99fc08f765506c9913b2a6cb4133e1f00c69ef57f4e71264a40cfe40c3f1760b46a057455e97c9f9539d0a901d1e81ebe8d1804459f37e34ac862f2a68e4194ac8eee9c4fbccc9f20febf7c138ddf0c491c3ef9324f28d4f32c97fccc1d363f4894b2f9b9d7215a4b5fcccdde3090976e157f396d9141b66c6c7b014cfe66d579ec9eadccac0ad73527d2d8b2f1fb99fbc1e22e6283fe3760ffa2f41f93abc24bbc7e9ec2d276dbcc197726001917ded20a512d99a3c5f53b04c3343c2ef7fe81e2c462551adf761262cda1561108733fbc551a5ac28f6c9a835a32be555027e99cf2d249e3334805b7077630938cbfb39494450a96059573dc498b7907c41dd87087401ffcc26c2b0882e5b4e3a56288391ddc4bf230440cabd613cfcbcfbfdb3a20e2b36ec61b967b48c5a49bfe995901c5efb3925996636e61e4d7f4a08c4d7c3b898ab7f64a776a70a2f3aadeb44735f79d06835bf8096712b1d5fc9afe2042b706ec332518a5154285bc37966ad4a06c55f9c89b13a3f64b7fee7be51a7e097bb271306fd2352d1d44114705e0c605502d195f7ad8588e10e4bbe78d8a1dcd83aed3a99910cfb74a71f744e32f5d14a860e5aad8f7b93f1427091312689fbaa656acf789037750b51435a0d498b8df4dd08bff4e3d3317685a36bb954070fe3f619212d04a76190d76302a39731d1a97351300d28c80f567c91af43976dd4d069093917a406ed4debae03d7ee8abcc0e0ca80cf679b37be06759796b5e6fddb997a6206db143d044914dcd26cee981b5086573e563ea0148358b7c1ed73cd173c01cdf30f7b17094a6f14d8e52cf6d3192f818907bbd33a808228760985307c56ef30d4cec3333d4c7c5131b9ac5be3737555d596f5875fa4ec4d4974ad4da14c23f7568304c739f4c50d69aa3a7970ec052a813b99b9720c4d353dcb16fb4a19fe9e5fe9bd6180b24719af4d7a75bc6b5fdfb7e8d3d66b3178e2d832bc30f0d623806052357860df2589aaa817e1ff413e7edaef66ff35102129b764e85568d1a7d96d6836505ef1b4c31559102532da1e5914a3049180d2c0adced85309bb95a0789dc9ea5f81c67e231d20b812f7aa0335886b54432081ae8d73bffca6f2e6326878308dc801d367962ecaa1bc5f81459368d08349e0302e69df4106adc54ffec99bcea1bf17879c9183cd16cd1177e562274a3d4fbfc0eadb56b66c256ae508ebb84bc8440195debc7eae8d171e41061235159980a47a39295d3f7d5e5a1eba51b79f0eba03a9feac26ef14c9acac755980bcc9fae577640f163e720e321987849f38b240b39136eb10723e76652a82344de0702e8cae0200b99141a5e62b3e8221323a27feb704e249858cc3065062ad41aa819a205fb6e3db4298af9d2654356c0e3248d376249177b3c53d584a679f76e2f1276e9aa03d9bc725e8501004b7fa119e7948a0571ed0b4a99d8fc9e04df8195ddba1f257bf59a72c627852798bd5bfe05f9463ebbbd70f3df1740b96274c5b61f45db54f10ea25da95a278b27298003214115342d2011122a02126700be253cdf82bb926d028f191e7361aa10d062e377b2b6dc4b2b9e1632d162565d8534383864a873d657265ac68a088a31ced49529dd9b9470b963bc788aee065e8a7f63f134d6c61c089aabc2bf5ae6a68590bd3c345449c4cf43325551761ab009c4b1bfcc135c9bcf4a5b2aacd445b57031123bd7b090f33ca65ed35296b71142926c989ccdb045e56f6c32e0f2a47c9304661cb8ef56d208e05cc199ba240e57105c7a44520ab625c8ebf1f5746d8c779244471d9a5b45f7b163cd253afefcc90cde809bab1932f519cf5aa63b35a50a03d91bebad77bf25761891ba3a6d1446b3cbf157fb58da310cf54a6c32bd4f39f82abc0f60278546a0a5b1d6fc0c1c715aca1c2f6e1f101aa542aee35c19f1dc5ccb34fbe99ec4400e1049991494029686a61580cc9fb4872b6886603588dee08e11b9569b21d5c302411fbe9e61c1bed709332ce0823265c9ce99cd89da9f1a759a556aad9fdf58d9077cd93eb0091a2864b9394201fe2f35058803a105d535c549f2d92aff2485b71bcc0fbc356907c9ca1c827a4225c6337b43753d3cd28a327d0cd33cb772b3d7bb06fca7473d885fa414732f2f4835f00140e231336d02e33467b458c0bcbd48b051439e98b26b7f952d11fdba67df0ccbc230d923210fedaf5e6c0cf93dcb4de500c0ad6609bfb31d7c21e61bb5744f011263207ec3d529d75929ba456f566e5fcace13abb5be680aa0a6ba630142b8fe2ab2d7478cbe8b425ea634e00d1c653f1baa8261f973713a85542164935eb3d438cec0ac525e958ba05cbe885c247a0a80c71a97fda497ad5694aa8c307721ab9c464ac58b41c1f84b48600da24478f4d0ab358999c557551c10fd1aa26f72f77bdd834e816bfea01670158e2d9d4667d7eb5afe8a0a6efdae9a4c00574bdf7da6d499ee043e9cf3a7b717ebfc8883ac05327b9cc651ee24b1e39a58bf0d5e997b61e34dccce459cd869bcf3ff8b684552b6fde23c32b3a2017b10f38f0619735c26885408e47dba6cdda1f1f70d3ddf1d58e7ea65b37b854c2b1c51dfad377fc6f2652af90e26cfd66b78b92496d1109acd882fd5d431a41cab34706a38415f553f3ba0224802b0283a01ff5bb2a686", 0x1000}], 0x6, 0x0, 0x0, 0x5313e4b0b2b498f9}}], 0x2, 0x20000004) 3m11.114065317s ago: executing program 5 (id=6649): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x11, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0x2, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x7, 0x0, 0xdad1124f55525050, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x23}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xcc}, @exit], &(0x7f0000000280)='GPL\x00', 0x5, 0x70, &(0x7f00000000c0)=""/112, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94) 3m10.466431955s ago: executing program 5 (id=6654): setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x80000001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, @in={0x2, 0x4e23, @remote}], 0x2c) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x98, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x98}}, 0x8811) sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="54bbc49d1cb09b9e2e7e511bfb9e71", 0xf, 0x20000091, &(0x7f0000000240)={0x2, 0x4e22, @multicast2}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000280)={0x9, 0x100000000, 0x8, 0x0, 0x8cab}) r3 = socket(0x18, 0x5, 0x7ff) sendmsg$can_raw(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@canfd={{0x4, 0x0, 0x1}, 0x15, 0x1, 0x0, 0x0, "60d378920a4e5b8e1f4e4ad7ddacec04b56acc3841cf397730a0aa455d4b49f43837d0e0c4af9f68ebabe9ffe1e3fdcf3649cebbc0d4f902fbc641bb3faca928"}, 0x48}, 0x1, 0x0, 0x0, 0xc8a0}, 0x40000) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x20}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4840}, 0x40) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000500)=0x3, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r4) r5 = accept(r3, &(0x7f0000000580)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000600)=0x80) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000640)={0x4, 0x2, 0x4c, 0x8, 0x425}, 0x14) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0), r4) sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, r7, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x54}, 0x1, 0x0, 0x0, 0xc840}, 0x8846) socketpair(0x2a, 0x2, 0x7, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) bind$bt_l2cap(r9, &(0x7f0000000880)={0x1f, 0xd789, @none, 0x11a5}, 0xe) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000008c0), 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000900)='lp', 0x2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000940)={'wpan1\x00'}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c5}, 0x80) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@arena={0x21, 0x0, 0x0, 0x39, 0x400, r9, 0x2b, '\x00', 0x0, r9, 0x1, 0x0, 0x3}, 0x50) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000b00)={'gretap0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@arena={0x21, 0x0, 0x0, 0x29, 0x20400, r10, 0x3b43, '\x00', r11, r9, 0x1, 0x2}, 0x50) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000c00), r6) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x14021}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x30, r12, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0x30}}, 0x40040) 2m55.164451077s ago: executing program 37 (id=6654): setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x80000001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, @in={0x2, 0x4e23, @remote}], 0x2c) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x98, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x98}}, 0x8811) sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="54bbc49d1cb09b9e2e7e511bfb9e71", 0xf, 0x20000091, &(0x7f0000000240)={0x2, 0x4e22, @multicast2}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000280)={0x9, 0x100000000, 0x8, 0x0, 0x8cab}) r3 = socket(0x18, 0x5, 0x7ff) sendmsg$can_raw(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@canfd={{0x4, 0x0, 0x1}, 0x15, 0x1, 0x0, 0x0, "60d378920a4e5b8e1f4e4ad7ddacec04b56acc3841cf397730a0aa455d4b49f43837d0e0c4af9f68ebabe9ffe1e3fdcf3649cebbc0d4f902fbc641bb3faca928"}, 0x48}, 0x1, 0x0, 0x0, 0xc8a0}, 0x40000) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x20}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4840}, 0x40) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000500)=0x3, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r4) r5 = accept(r3, &(0x7f0000000580)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000600)=0x80) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000640)={0x4, 0x2, 0x4c, 0x8, 0x425}, 0x14) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0), r4) sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, r7, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x54}, 0x1, 0x0, 0x0, 0xc840}, 0x8846) socketpair(0x2a, 0x2, 0x7, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) bind$bt_l2cap(r9, &(0x7f0000000880)={0x1f, 0xd789, @none, 0x11a5}, 0xe) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000008c0), 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000900)='lp', 0x2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000940)={'wpan1\x00'}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c5}, 0x80) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@arena={0x21, 0x0, 0x0, 0x39, 0x400, r9, 0x2b, '\x00', 0x0, r9, 0x1, 0x0, 0x3}, 0x50) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000b00)={'gretap0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@arena={0x21, 0x0, 0x0, 0x29, 0x20400, r10, 0x3b43, '\x00', r11, r9, 0x1, 0x2}, 0x50) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000c00), r6) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x14021}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x30, r12, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0x30}}, 0x40040) 7.031202896s ago: executing program 0 (id=7490): r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x68, 0x10, 0x401, 0x0, 0xfffffffe, {0x0, 0x0, 0x600, 0x0, 0x20000, 0x4006}, [@IFLA_ADDRESS={0xa, 0x3, @random="08e7eebc872f"}, @IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x400008}, @IFLA_GRE_REMOTE={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}]}, 0x68}}, 0x40080) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x4076cbba9945d516, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, 0x1a025, 0x1703}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_TOS={0x5, 0x9, 0x7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x410c4}, 0x4000020) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000380)={0x0, 0x1000}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000400)={r4, 0x84, "cd52dcf91ff5cc01dea363beeb1619a75df73fd551deb1b5f939efe31eb4ee3f84108949406a5818825f8017093e7f86b3f958341f66241f48c7347d7f289ac60591f4c7762a03168c381cfa76c60147fc5a110524df7912ceec0969bb3214a36b4f9970db685118ed160e03e7cadb87372c1aaae26f2af7d38d8be96b15b5b5669d7b1a"}, &(0x7f00000004c0)=0x8c) 6.788049101s ago: executing program 0 (id=7494): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2602, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x20400, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000540)={'rose0\x00', 0x112}) socket$can_raw(0x1d, 0x3, 0x1) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000580)={0x2, &(0x7f00000005c0)=[{0x20, 0xe, 0x1, 0xfffff000}, {0x6, 0x5, 0x4, 0x101}]}) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000003c0)=0x14) setsockopt$packet_int(r4, 0x107, 0x10, &(0x7f0000000400)=0x2, 0x4) write(r2, &(0x7f0000000140)="09000300010001", 0x7) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000004000000080000000001"], 0x50) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000740)={'veth1\x00', @multicast}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QGROUP_CREATE(r4, 0x4010942a, &(0x7f0000000700)={0x0, 0x5}) syz_emit_ethernet(0x3a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaac100000000000000140002000000119078000000000000000000004e200016907804000000060000000200000000000000"], 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000780)={0x0, @initdev, @dev}, &(0x7f00000007c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000800)={{{@in6=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@private}}, &(0x7f0000000900)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000940)={{{@in=@multicast2, @in6=@rand_addr=' \x01\x00', 0x4e21, 0x3, 0x4e23, 0x5409, 0x2, 0x20, 0x0, 0x8, r9, r10}, {0x0, 0x6, 0xffffffffffffffff, 0x200, 0x68a1, 0x8, 0x5, 0x3}, {0x4, 0x1, 0x7, 0x400}, 0x1c05, 0x6e6bb8, 0x2, 0x0, 0x3}, {{@in6=@private1, 0x4d3, 0x33}, 0xa, @in=@multicast2, 0x3500, 0x5, 0x1, 0x3e, 0x8, 0x3, 0x5}}, 0xe8) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18008ef20000003a0a000094f32d15c2172e6af9f148bbf4ff00dddde16417b7628608900f82172127568113178449932cb6278324ba63715ddd7d0020000000000000a654f8ba00a8eb98df683f3a86ae177eb7c4921f157612cf6bbb7ab2c1cb356324d6b9204b8bc3b4810b54ce809fbd2cdc70cab198f612fad2e625bb93708bb7786d9f1144d7eed4285cdc51ac8c70eb424117dd16dd576c67a9cfbf22c3efe3fa86c2a9abc2469b1286984b1206803a8964641f53132386", @ANYRES32=r5, @ANYRESOCT=r3], &(0x7f0000000440)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000480)=r11, 0x4) sendmsg$unix(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 6.722983177s ago: executing program 8 (id=7495): r0 = socket(0x10, 0x3, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000580)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}, 0x10000}], 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)={0x18, 0x140a, 0x301, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40408c0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=ANY=[@ANYBLOB="540065efe505d190b93f0000000000000400ffff0c00078005001500080000000500010006000000050005000a00000005000400000000000d000300686173683a6e6574000000000900020073797a3000000000"], 0x54}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001780)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf251700100054000680140003002d3973353a5f2d5d382ee5364c4323843c00040067636d286165732900e8feffff0000000000000000000000000000000000000014"], 0x68}, 0x1, 0x0, 0x0, 0x400c841}, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)={0x38, 0x1412, 0x1, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}]}, 0x6d}, 0x1, 0x0, 0x0, 0x80}, 0x10) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x25a5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="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"], 0x8c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a00)) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=@base={0x9, 0x8, 0x4, 0x100, 0x0, 0x0, 0x1}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x1, 0x9, &(0x7f0000001b80)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r9}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000001c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x4000}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x64}}, 0x20000000) socket$inet6(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc20001180"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019008400"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001000010425bb9755e5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000440)={0x2, @in6={{0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffff00}}}, 0x84) r11 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r11, 0x114, 0xa, &(0x7f0000000500)=ANY=[], 0x4) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 6.028201488s ago: executing program 0 (id=7499): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0xffffffffffffff2d, &(0x7f0000000200)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x2b}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @local}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20005891}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x82f41, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000580)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000800)) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000005c0)={'syzkaller1\x00', 0x1}) write$tun(r5, &(0x7f0000000600)=ANY=[@ANYBLOB="0a0090000180c2000003bbbbbbbbbbbb86dd693afffe8000000000000000000000000000bb0402000000000000000000000000000186009078ea2b05"], 0x4a) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x23, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x1, 0x20000003}, 0x50) sendmsg$nl_route(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@RTM_GETMDB={0x18, 0x56, 0x200, 0x70bd27, 0x25dfdbfc, {0x7, r4}, ["", ""]}, 0x18}}, 0x20000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0xfffffffffffffe63, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) sendmsg$NFT_BATCH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001a40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c00038018000080140001800f0001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x80) 5.632315058s ago: executing program 8 (id=7501): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x38, r3, 0x1, 0x72bd25, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x209, 0x79, 0xa, 0x6, 0x3, 0x4, 0x1, 0xfff]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x5e}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x6e8}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x268}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x20, 0x13, [{0x48, 0x1}, {0x30, 0x1}, {0x12, 0x1}, {0x1b}, {0x30, 0x1}, {0x36, 0x1}, {0x4}, {0x6c}, {0xb}, {0x60}, {0x18, 0x1}, {0xb, 0x1}, {0x24, 0x1}, {0x6, 0x1}, {0x6c, 0x1}, {0x6c}, {0xb, 0x1}, {0x1b}, {0x30}, {0x6}, {0x2}, {0x18, 0x1}, {0x48, 0x1}, {0x3}, {0x1b, 0x1}, {0x3, 0x1}, {0x48, 0x1}, {0x36, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x84004}, 0x20008800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 5.48495029s ago: executing program 3 (id=7502): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000000)={{}, 0x6d}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000001000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa120000000000004010000f8fffeffb702000008000000b50af8ff00000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x7, 0xde, &(0x7f0000000600)=""/222, 0x0, 0x8}, 0x94) 5.318834439s ago: executing program 7 (id=7504): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000d40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=@newtfilter={0x40, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000000)) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c00)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000d40)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=@newtfilter={0x40, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) (async) 5.040981451s ago: executing program 0 (id=7505): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000840)={0x3, 0x4}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1e7}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xe6a7, 0x1e7}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) close(0x3) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100860000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c000280050001"], 0xc8}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x11c, 0x12, 0xd01, 0x70bd2b, 0x0, {0x7}, [@nested={0x108, 0x19, 0x0, 0x1, [@nested={0x104, 0xf3, 0x0, 0x1, [@nested={0x8, 0x28, 0x0, 0x1, [@nested={0x4, 0x41}]}, @nested={0xf5, 0x3c, 0x0, 0x1, [@typed={0x8, 0xf8, 0x0, 0x0, @u32=0x20000000}, @generic="d527e8dd154543187e09e1e3e6647883d50a9f7b64dcdcdcca47e08cedfe80673af91e25ea7e93f9f462f6dbeb7c60415cd1e6eafdfd5692553923b1639cfee237428a43dbfb6ed5da2dc1c352ad567ee60112f72b5244d1583ac96c6926cd6d627709d7be873ade5c8e328a6761fa90fea93374ac0f7d3f1a3a3ef9266192c53ca004e695b627f7c097f9010d2d65fd745dad7401730a70ad9689b68eba9505bb02822aa9090e6572704d4df53b2f15bbf21c10051e864485ba67e2094d5bdc421f03955a9d8cd2c30e6e90924ab624b866e26a1919f6abd32ee4b02dfff896269893ee5a47f9e24e"]}]}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r7, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xee}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000000}, 0x8010) 4.856436914s ago: executing program 3 (id=7506): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)={0x20, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa, 0x2, {0x6}}]}, 0x20}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x82600, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x7}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x10, 0x10, &(0x7f00000003c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000400)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$kcm(0x29, 0x7, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@arena={0x21, 0x0, 0x0, 0x2e, 0x20400, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000640)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="0c0001800800010003000100200001"], 0x44}}, 0x4000000) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='memory.events\x00', 0x275a, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000f40)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=ANY=[@ANYBLOB="1c0000005e00010027bd7000fbdbdf2500000000", @ANYRES32=r9, @ANYRES8=r7], 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x3, [@func={0xe, 0x0, 0x0, 0xc, 0x2}, @enum={0x2, 0x4, 0x0, 0x6, 0x4, [{0xf, 0x7}, {0xe, 0x4}, {0x8, 0xfff}, {0x1, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x8}}]}, {0x0, [0x5f]}}, &(0x7f00000007c0)=""/209, 0x6b, 0xd1, 0x0, 0x2, 0x10000, @value=r7}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x7, '\x00', r5, r10, 0x5, 0x5, 0x4}, 0x50) r11 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r11, 0x0, 0x60, &(0x7f0000000980)={'filter\x00', 0x7, 0x4, 0x410, 0x218, 0x108, 0x108, 0x328, 0x328, 0x328, 0x4, &(0x7f0000000140), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x22}, @rand_addr=0x64010100, 0x0, 0xff000000, 0xa, 0x9, {}, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x3, 0xfff, 0x7, 0x6, 0x800, 0xa82, 'vxcan1\x00', 'pim6reg1\x00', {}, {}, 0x0, 0x102}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x1000, {0x8}}}}, {{@arp={@broadcast, @rand_addr=0x64010101, 0xff, 0xffff00, 0x0, 0x9, {@mac=@broadcast, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@remote, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x1, 0x2c6, 0x0, 0xd, 0x7, 0x9, 'vxcan1\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x0, 0x50}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @broadcast, @rand_addr=0x64010102, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @broadcast, @broadcast, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'caif0\x00', 0x0}) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket$unix(0x1, 0x1, 0x0) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r16, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000e00)=ANY=[@ANYRES16=r15, @ANYRES32=r13, @ANYBLOB="0a245ebc6b75e28e7a1de30fd7cfb069446591dedebdfbdacca7b050c43f64922b4b90e3f99c3ee9a1acc89c894813046f37d653", @ANYRESOCT=r3, @ANYRES8=r5, @ANYRES64=r4], 0x110}, 0x1, 0x0, 0x0, 0x20040091}, 0x1) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r17, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x4c95fefb, 0x3, 0x3101}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 4.767398435s ago: executing program 8 (id=7507): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0270000000000000300012800b0001006272696467650000200771ec3109f34d1b76e9e565b10002800c7234fd002300020000000000000008001a0068b00000050029ffed000000"], 0x50}, 0x1, 0x0, 0x0, 0x8880}, 0x410) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r2, 0x215eb000) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, 0x0, 0x0) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000240)={r4, &(0x7f0000000280)='sit0\x00', 0x0, &(0x7f00000002c0)={@_ha_fsid={[0x0, 0xaa]}, {0x80, 0x1ff, 0x0, 0x6}}, 0x0, &(0x7f0000000300), &(0x7f0000000380)=0x8000}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x17, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000800004ef0375d003204f6da53a2a0f2ea90d6763bb6000081118500"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f4, &(0x7f0000000540)={'syztnl0\x00', 0x0}) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r7, &(0x7f0000000580)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) (async) listen(r7, 0x9) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000600)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(0x0, r4) (async) writev(r9, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYRES32=r6], 0x30}}, 0x0) 4.492257119s ago: executing program 0 (id=7508): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x30, 0x40, 0x107, 0x70bd2a, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @fd=r0}, @typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48854}, 0xc010) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_GETBMAPA(r1, 0xc020582c, &(0x7f00000000c0)={0xfffffffffffffffd, 0xeb69, 0x0, 0x7, 0x6}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000002605000000bd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket(0x2, 0x80805, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0, @ANYRES16], 0x128}, 0x40) r4 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000640)={@local, 0x78, r5}) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000680)={@dev, @initdev, 0x0}, &(0x7f00000006c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000780)={'gretap0\x00', &(0x7f0000000700)={'gre0\x00', 0x0, 0x7, 0x7800, 0xffffffff, 0x1786, {{0x17, 0x4, 0x0, 0x7, 0x5c, 0x65, 0x0, 0x6, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x17, 0xc9, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x21}, @broadcast, @multicast2]}, @timestamp_addr={0x44, 0x1c, 0x3d, 0x1, 0xa, [{@local, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff9}, {@multicast2, 0x2}]}, @rr={0x7, 0x7, 0x19, [@loopback]}, @timestamp_prespec={0x44, 0xc, 0x56, 0x3, 0xb, [{@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000d80)={'ip_vti0\x00', 0x0, 0x40, 0x80, 0x3e, 0xf38, {{0x49, 0x4, 0x0, 0x5, 0x124, 0x65, 0x0, 0x8, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @timestamp_addr={0x44, 0x3c, 0xf9, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@multicast1, 0x8}, {@empty, 0x7}, {@rand_addr=0x64010102, 0xffffff00}, {@remote, 0xfffffffb}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10001}, {@rand_addr=0x64010101, 0x7}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x54, 0xd, 0x1, 0x1, [{@local, 0x4}, {@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x8}, {@multicast1, 0x1}, {@loopback, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@local, 0x8000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf7a}, {@rand_addr=0x64010100, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @cipso={0x86, 0x78, 0x2, [{0x5, 0x12, "cd897d12617d5aec00628d144e000039"}, {0x7, 0xf, "3da59570bbd29d1a6aa0c9fcdd"}, {0x0, 0x11, "f84553af399e663559c4fcb3eaf7ff"}, {0x2, 0x6, "8eef52fe"}, {0x7, 0x7, "4a1fd28740"}, {0x6, 0x12, "aa3c68d1f15f5d4815d2c1fd217b301a"}, {0x5, 0x11, "7072c09aeb67fb7f04aebb23eaae88"}, {0x1, 0x10, "e3b88788cdf78b989cacbdbe9725"}]}]}}}}}) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000940)={@broadcast, @remote, 0x0}, &(0x7f0000000980)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000009c0)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000b00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ac0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=0x0, @ANYRES64=r10, @ANYRES32=0x0, @ANYRES16=r9, @ANYRES32=r5, @ANYBLOB="080003000100000014000200000000000000000000000000000000002c00018008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRESHEX=r7, @ANYRES16=r10, @ANYRES32=r8, @ANYBLOB="08b89200", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="1d264d1888c3c9aba8e622ea3a25ab0dcbaef8530a13035c82bf84df901d3e4b0169b417e1ba7053519869e0a453aa52f4fab67a80cee9f3f9fcb3e9bd8a9bf8e78175cc2f717450f88ef4e66f42529242d53a98b191c189820ab64b0cad8153bbee18b1e513a20a227e46b0a15be56548719efc"], 0x98}, 0x1, 0x0, 0x0, 0xc010}, 0x1) recvmsg$unix(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x128}, 0x800) recvmsg$unix(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x128}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c40)=ANY=[@ANYBLOB="6400000027cc9b72a200cb5ff20c0cab2364d35c03bc4773a14112a3debd56047d7caea22c8269ecba5bc4a6a0d3077a914700f871e64e06538fe8433bd94e9a0af541425e604453c4964734c8622673a76efad667e99ceadbf5978768457189196fcb798ad60bfa6234bca36d4ee5c90f71da4f667f0b1608be9f81904d254cf05d6417782d4adf88bea040d86882f621e81e4b488e9448663ae577a218e8abb1c7d02b50b5bdff7fd46b75514f6c4afd5ff102030f92", @ANYRES16=r16, @ANYBLOB="0100ffffffff00000000370000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030015000000"], 0x64}}, 0x0) recvmsg$unix(r13, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r17, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x128}, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) 4.392756586s ago: executing program 7 (id=7509): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$unix(0x1, 0x3, 0x0) (async, rerun: 32) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x4076cbba9945d516, &(0x7f0000000240)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000d038668e8052e7e900030000e200000000", @ANYRES32=r4, @ANYBLOB="24200400858d0000380012800e00010069703665727370616e00000024000280050016000100000014000700fc00000000000000000000000000000104001200"], 0x58}, 0x1, 0x0, 0x0, 0x40400c5}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=@newtfilter={0x48, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}, @TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @remote}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) (rerun: 32) 3.838889573s ago: executing program 3 (id=7511): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="330000003100090027bd707d4d0000000400000004001d00"], 0x18}, 0x1, 0x0, 0x0, 0x46854}, 0x4) 3.68310429s ago: executing program 3 (id=7512): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f40), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="2df0c74e8385a5baa2ee0351ab9a468731b02b897c3d5c7fa0d023adf76ed73654241335861190c136ab3585a82adfe95e2e4be6a48b2d8bbe834d3e4bcea21b8b53a141216da779642d6ad1ba0d8df352ed56bfc66e165c077ac9c0e8a96ef431a4d8ad59b4bb24e43eb4f1b9424300ac635963cc142c73f92fc69c8a0afef05fecb3d5a82f898d08ab92", @ANYRES16=r1, @ANYBLOB="010000000000000000000e000000180001801400020067656e65766530000000000000000000"], 0x2c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff48}, 0x48) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0598000007d4c100"], 0x10}, 0x331e5c6805043cda) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x20e, 0x126, 0x0, &(0x7f0000000880)="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", 0x0, 0x4, 0x6000000000000000, 0xfffffffffffffe43, 0xfffffde6, &(0x7f0000000000), &(0x7f0000000080)="71e3093ea52c160c399c90be39a39a003c404d547bf39722a11f62e7ab00f5", 0x2}, 0x50) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000089}, 0x8004) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0xfffffffe}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_ethernet(0x42, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2b995ba61596ceb700000000000000000000000e300000000000000000000fe804b25be60711b2a00002600000000000000000000000000aa00030e22000c907801030000dcbea5eda72958"], 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES32=r5, @ANYRES64=r5], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x800000}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0) write(r3, &(0x7f00000000c0)="270000001400070f030e0000120f0a001100b1128a151f75080039000500"/39, 0x27) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r9) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000009c0)=ANY=[@ANYBLOB="ff62d598cd6b074e81fffffffaaa1279a0be0cda4109d3bc600bbe069ef113a4e3cae96a0ac0838d4c2ac295510ee7e1667e515df002506bf9f9be399eb12e56de2972f1a9f4455d061576aa4a105c8422947c3922aa325e1443aa2efd4daca995b11c1ec51d618f535cdefc65cb0d9c669f05b145439064939414575ec373feb2815a18e59c2c999e6454b8368f68e82add9e304a2cd16b99336e64f2ac44d5252b9eff4af60f994570e167965d3ae1fae8cdc84f14d7092393ad3c5fc2e93d94281952a0dd20c957eb10ed7247be44969f65319d46df530ead2d5560371fcd6bee20f180cffe618761cdbe8ed2b9332da257ec866435c466855c1550f1698365aaa712f9e1fac07782281802032553f4f7ace6723f6d57a82f40d1e8", @ANYRES16=r10, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088018000c8014000b8008000a008fee00000800090000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/26, 0x2000, 0x1000, 0x1, 0x7}, 0x20) 3.204828802s ago: executing program 7 (id=7513): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400200, 0x0) write$tun(r0, &(0x7f0000000040)={@void, @void, @mpls={[{0x4, 0x0, 0x1}, {0x4}, {0x200}, {0x5}, {0x8c3, 0x0, 0x1}], @llc={@llc={0x2, 0x4, "8b", "883816a34611271fe3e5fd6a76361943dcbe34744aafc692b8a519c7dd65c149d992a88db084b6fb26d1654a93beb3915f176fb7666f0d23b81eee99738a09b692ead7ae362a202bd0a0e6afed8870b719e43baba0db4fec72a14a93b5c2b9331edd3781ddfd5279f9ddea83f6937eba500e17efaf486efec2989fe0f125d4f7a4954898b25a7c4344b631608a7bb3b4bc50136ee9c72c5dcd0e51cf9529a577ba50a8de136e717e6c6932ed9dde"}}}}, 0xc5) (async) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000580)={0x5, &(0x7f00000004c0)=[{0x9a, 0xf2, &(0x7f0000000140)="e0001bb85db0f1e3f8e952166b9b2424dd5a685e3cc7fc8c9204c432e1ae917809786088cedc6f203b91073b2260073125cf8bdb9f3a6c1057db0a62e729dbc3d798c7f85e31f345c19b63e55b1436f7e855f138b3375b378bd66b75cac0c9e23b4bef1c9789bdf705a45439e3274263fed0da31c24a36bae8e1319f31686da616ad15d4fb319887d2ab8565aa0db1579b755b2618a5f2c7e195bedced86dd957dcc288e2f7ecf83f269490ed55bc4865ad9133895f74d909743e2e94f4eb4b6df9245049daeb02859f142db0f8cf1946d7e78beea0b55d76a560d6b57204a0c23d3d68f194daca62c9e0fe0ec2b6535a179", 0x0, 0x1}, {0x7fff, 0x53, &(0x7f0000000240)="823a7d0b441fe7e4c43695abd486e931d068ef611d1a753fa144f3f2a9151c60dde64a3abb526d49de20f74e52ea845c1c54fd10b0c7b997a63856caa0b6dc48772f9a566d71c780ccf1957ea991578522eb81", 0x1, 0x1}, {0x7, 0xed, &(0x7f00000002c0)="3192aea7af0c68aabf2e09b4d1e13eb107bbac3f5c0b0c663eb7b673ec2c4dc4a6daaff1d94c4d76cab431a9ea030a38feb5d56e79e22d99355f60e0d48bfe6d29cc11aac693295324a020723b009dd8df44613c978311ec3b1c0e60ec81a0e819ae49b668a92d7d0e014516f702fc6b0dbbd4e077dfdc4e9996a727575526f5142b81a80a3cbd58e0910226080f8230f59d9818cee8a395aee498547eb10e38d74150f30baaa583e41601d83f5d423283ec0a06b886c5b55c69a2781b32c982c36ca462d1a69f2cbfa7a6656630cfc6ad77988860be18734a9cc60d3b2d3a30c36f8f1d31ec844317565343ff", 0x0, 0x1}, {0xb, 0xf, &(0x7f00000003c0)="e2d2dd641b6cadbc35f4a9c5b3729d", 0x1}, {0x0, 0x81, &(0x7f0000000400)="145ab01a2027f63e46982e6d6d70dd85fec7cc8831b7318afc3b3477528d8cca71e3623b2b437671d15f3d41cf2c48b6d20c3e35c86057e7163c5de91d07db6b6158982695d74a0590d067392e9f1bde3b1e44eb1ed4962ae708da95eab417f32ccbfd2e03948e7f66dc89e900f0311c827e6ecce8dc0c1767e62a4335760ece4e", 0x1}]}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) (async) write$tun(r0, &(0x7f00000005c0)={@val={0x0, 0x805}, @void, @ipv6=@gre_packet={0xd, 0x6, "949552", 0x3dc, 0x2f, 0xff, @mcast2, @mcast1, {[@hopopts={0x3a, 0x8, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x37}}, @generic={0x4, 0x29, "07bd9d4e3fbe3c1b8a9f879a978125e0d6ea2101511e1e7791b20e48db7d78d233fb7f90ab4f0129e6"}]}, @routing={0x5e, 0xc, 0x0, 0xe, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @private0, @loopback]}, @fragment={0x84, 0x0, 0xfe, 0x1, 0x0, 0x9, 0x68}, @routing={0x3c, 0x0, 0x0, 0x10}, @routing={0x29, 0xa, 0x1, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote]}, @srh={0x2, 0x4, 0x4, 0x2, 0x6, 0x40, 0x4, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2]}, @dstopts={0x32, 0xb, '\x00', [@pad1, @generic={0xc, 0x51, "79f2d389be273ebb0c6c711e3bd75a2971d4bcf1a9cfdd6b58b1a9f8e44120318c78c6f8dab3a9cde1f0da8716d47be0342b297aa5ff3b3ed85d50374b7bc1d08db84200a241c4dc592d715015be4d822c"}, @ra={0x5, 0x2, 0x1}]}, @routing={0x2e, 0x6, 0x2, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x23}, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @srh={0x2e, 0x6, 0x4, 0x3, 0xe, 0x20, 0x2, [@loopback, @private2, @local]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x2f, 0x2, [0x0], "3f5a4ad4679fd545ec9217a312e6b6b3f8f0e19d0f07795655bfc14aa2661205f58f6646f7edaef7983647d14a37f4"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0xd]}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [], "be27b74a0ecf4edc39319068e23d7238b0564544ec889ff2d879bb26209609f3cb965413dc3a6e1d687b6cb7551c04977ad7d715d4cd8d360bf28d9b07f4394abfb5188090c5b2fb5997cdc06c36f4f0426930bb092eded874bc876226e8a8ca12178889fa5da0fe6441bd5f9c80486b0499a7c80bc69bda9a06e1809d2d7a6314d8873e7e26bfeac8fdb1760d8601b6ace5fcb588554a10c643b33c873886c63df0b3caef638cd974a3cd50ba3662b43dd1dede7686ff4b7eed2d4dadab330c577f2a00f6d61cf6"}, {0x8, 0x88be, 0x0, {{0x7, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x1, {{0xe, 0x2, 0x3, 0x1, 0x1, 0x3, 0x5, 0x81}, 0x2, {0x1ff, 0x0, 0x3, 0x1f, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "f2ae0089558209a27c5ee0c3ceadc1e16502121ff9a548ff291ec35c73dff878638173757a4575e889172548a7437205194311179b6a9499c29ed0bc28f131b5afce3b7d384a294dd3f79e6329caa0ebd524ae7bf8a1cf04622c6ac764a5e9bf4ccf513be4c6f8721cad68c861854cf92b4ff71fda22ba884df95a4bef856c5475dfb9b319"}}}}}, 0x408) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000b00)={r1, &(0x7f0000000a00)='$\x00', 0x1, &(0x7f0000000a40)={@align=0x7, {0x5, 0x772, 0x7fffffff, 0xc78}}, 0xff, &(0x7f0000000a80)={@_ha_fsid}, &(0x7f0000000ac0)=0x8}) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000d40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x140, r3, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xf}]}, @ETHTOOL_A_FEATURES_WANTED={0x118, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x8f, 0x5, "3abae5ebecdfef96901913f2ad6904f5ea98b5cc689533128ef3c8f3d5b3d19edcf0e7fdca058eae9f1f7e5846d2a6791c0928069c8efce890714071c17a62ca9515050a9684c7e7e1cc5986aa19b4fd23377f04f5ed0bf67cdfec2fe41dedceb67ca22694f364196c62094e57bfc72a9126bba357b6c75c6f2377c3ea7a34ca82b0cbefeeabe32bb98ad4"}, @ETHTOOL_A_BITSET_VALUE={0x83, 0x4, "3287e3f48041d3675df68f9f484c41908d694075974ba9fe58caaefc5b73f6b54a845d9807c73f5152757763694ee64645d61880f271f9833127e7ca6797981491ec18c833530e2ff35bcb6c91a59bff09ead0e8cf5f88db25f339f61c5a7c40c9795c8c483d2a2f953e6a68bcffc121bd0fa766caecb3417311af37649959"}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000805}, 0x400c000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000d80)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e24, 0x6, @private1, 0x6}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e24, @broadcast}], 0x4c) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000e40), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r4, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xea}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40400}, 0x4000000) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000f40)={0x5, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000f80)=r5, 0x4) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000fc0)) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000001000)={@loopback, @multicast2, 0x0}, &(0x7f0000001040)=0xc) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000001080)={@broadcast, @local, r6}, 0xc) recvfrom$inet(r2, &(0x7f00000010c0)=""/4096, 0x1000, 0x10000, &(0x7f00000020c0)={0x2, 0x4e21, @loopback}, 0x10) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000002200)={r0, &(0x7f0000002100)=' \x01\x00', 0x200003, &(0x7f0000002140)={@_ha_fsid={[0x8, 0x7]}, {0x1, 0x9, 0x9}}, 0xdec, &(0x7f0000002180)={@_ha_fsid}, &(0x7f00000021c0)=0x5}) ioctl$XFS_IOC_FSBULKSTAT(r7, 0xc0205865, &(0x7f0000002440)={&(0x7f0000002240)=0x9, 0x80000001, &(0x7f0000002280)=[{}, {}], &(0x7f0000002400)}) (async) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000002480)={0x5}, 0x4) r8 = socket(0x22, 0x2, 0x6) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f00000024c0)={0x0, 'syzkaller0\x00'}, 0x18) (async) r9 = socket$netlink(0x10, 0x3, 0x4) connect$inet(r8, &(0x7f0000002500)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002580), r7) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f00000026c0)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002680)={&(0x7f00000025c0)={0xa4, r10, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2f}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xcc}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) sendmsg$kcm(r8, &(0x7f0000002b80)={&(0x7f0000002700)=@tipc=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002780)="e2046459df3fca2f6b22b409a95fed3fe41fec3c47e6b77f1a59a955118981a7b61d8abcb7c718c1f3f76c56e79e151c09e9bc305657b5aaf011108e52368e803b02a8a3e67cdc151ee9ff54628d10ea0cc4bacf513c7e94e62cf7c5ab4d41692b5d3117e59c0c48", 0x68}, {&(0x7f0000002800)="21442eb68c3760f33d23729ba0dc01615944e5b0e14635fe2b529d1d8f1d7511376831e48f9b9e88fdc60cd6a504f429a7dd83d767aa67f236d5eff5ba4e3dde8de5241d", 0x44}, {&(0x7f0000002880)="cf94b4326a14b3126da33596d27fb745b4e56a20a03b3e26670448ac426729e2cbc5433062ec3a05a37be3e7469b174afc81fbca1f372449a03f373dcc9949e7b3f8392a0506051090d229f072650511", 0x50}, {&(0x7f0000002900)="995191a5e5e187d36b596ef45d6028cccf1101d605cbf92ab6049f0b9234941969a05725ecaab759db293b9b57103ed25f8d3509773bf52efddb33bd3923a036dde6f4ea49ba34b0e93f8ed8e9", 0x4d}, {&(0x7f0000002980)="e6113f003b4f3b3fa2b208da4e16a070ff07da4debfc60c0e5475fbf143f9b6f559b607485a135a72948dbfcaedaba0b59b801e9beb24431f1cffdb3f95b38f6f21604bdd47fc0953815d7563b3c7d51c8d6fb9d67fd905ddce01b", 0x5b}], 0x5, &(0x7f0000002a80)=[{0xc8, 0x10c, 0x7fff, "ec49e7c6d8ef0067b0b08f26a8d0be866d8e542108b00bf07359187fd6b2204fa9c5bf5a4fea03808413c63d2b9da48baa82c6aa6182114edbd90d3e234518a98680c93abf23f3abc8c690e021375577be5c5a3e8332bc976eddc81f7adb52a739e2d63fb273c343448daa132ef4fdc5772bf00431873de0df238c1772928b25ebf61a3e24ddf040609a08d7ee188f3970d539c58084516ff9d9ee7cb0aa645122933d422fc626157c61b445f89a2ce29627c68a5e86"}], 0xc8}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r9, &(0x7f0000002f00)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002c40)={0x244, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8e6}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x80000001}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x40}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7c8}, {0x6, 0x11, 0xffff}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x101}, {0x8, 0x15, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7f}, {0x6, 0x11, 0x3ff}, {0x8, 0x15, 0x6f}}]}, 0x244}, 0x1, 0x0, 0x0, 0xc040}, 0x800) 3.204297481s ago: executing program 0 (id=7514): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000076000d0b"], 0x18}}, 0x0) socket(0x2a, 0x1, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x9, 0x3, 0x238, 0xb8, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0x1a0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@icmp={{0x28}, {0x11, "78ed", 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xff, 'netpci0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x21, 0x1, 0x60}, 0x0, 0xc8, 0xe8, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xe}}, @common=@ah={{0x30}, {[0xffffcfdf, 0x6], 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[], &(0x7f0000000640)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x60}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000300000000000000000000008500000087000000850000000800000095"], &(0x7f0000000780)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000840)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0x7, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000080) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x18, 0x1409, 0x10, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) unshare(0x40000000) 2.863596358s ago: executing program 9 (id=7515): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) ioctl$BTRFS_IOC_ENCODED_READ(r3, 0x80809440, &(0x7f0000001c80)={&(0x7f0000001c40)=[{&(0x7f0000000c00)="4a23883d7bb4dc5a02d4448e63a481323d5064ddaf94ab24aecd42b7b6228b2d6c08cbacc0de1c13167e7c86408edce3e5d4ee3949bda45dd20701a45818ceb4f31fd9ce96ab9b317e0753feab8e1cdbf3bed170ea432f1f1f52b09a319bcdea1b2160ad71df9d0744421a9500f239cc91d113fafe7b103e564d96052b2f6ec1914931d35dcd4a7353d33144dac656b109b20b67764fb270e4765d46d1f5f3d882fbe1fa47c1cfceacd10e248d500ff18536ecc16e34fa5dd56667c7052180f15378081cf7097dc4e07153808ac9a7ab7f05b494c6eca2f09c7cf81354fef2b39cdc05e8c85555d40c5347e6dd6d3b69b9136860435d14e41135c06df40ae17bd006ecb30958f18b39a1248c4c25fc4227cd1e7b04ac1d6eb0b0354ac9ba8276023601b3cc33ff19e8f599e5f956176b21a54321b2602c979c73cbbcfa9bb60651f153bea8e9457cdbb1fec3bfa3a59db1bd6ac42e8f1a1ad04040bc03ef34e905e93334873d282ae1b045bed9b91533fa961716f8180208342f2da7392f48e1deb724908a87e089384e50453b05d9d74521ce779aee5793b31f570e1ba1e0ed53215772b8b7efce977eae1bfb2b1da0b75f64e574c67e18d88e99f440c7532ad90030fd4c870e73bd8b67b8ab9798dbb242596f2b3efe91e5fe16e40ad3bae77428354652769e7a13f3245b67fa4f05da4351f51f9a3432b97ef73bf4137c23da19cb553e79589a7f13af1dea93c97385e1cacd771a9a257efffed6e9e021f07e482e63197465bfed7fa242d92740f64825cd8f68f54b46f1575e0eec0f7a01f86a6074927457b03a775b4d8077ebff98140e26ddcc092c952d10ab0a4db6efc13afae5780ae91dee14cfa461842171396ac7e2c93261d6f82468fbe164e7823cc642d7f5142c1887b1b66e3615122db6ccf16d4d2ee5b2903af2a85e09b9cdf71eef6523361fd69a061d029c387cd3ab249242b5e8d60f214719dfb6c81639c1170dd5c512cdc35bf2249ae77a93e5fbedfb2f795dc565c0539192e819592a24e416b63c76b252641643f0aa6184c39a7f90ac9505e782f1703af5505bd3d201bb3e99b6ef69e104c8a2848b04050259c7da3a8a38d72d00e7dab53f6a851ceb8efdc1d6f4df7b96d27f88a0908ba0f633ddf450bb64013be693f641ccdadcd34e0d95e4bdc95799383e3b7b2878331460caa3d2a65968e6fbe54f5861f2bc0585c7177fce5842ceb9b95dd1068fddbddfb6fe9296799acd245f995ee3fb23a83b1d9315c84b4acc920a6152f9d008277fe7f53822abc88c526eb10aed1b631e098b995793abc0648efdb24c03a76b8a61e31ef53d51f017dac320f1d02182bcde59197fdd12b8bf6706f399ccfc10cfd82d05eec81a02f3899a5dc92f5b719d207d85b75ae6fdb31099cd97c1f19e4bf35cb0a594096571bc255f918b4ed7e5f1f1486385d37e009f8c35216efb8a3265a1b35f350741709ebce34cdf2fdf038ac527c199ab94b9679f864cd845385f45fd2900d485c479acb6895c5a7800c92b79306bee3678f55f42faf191d2b52024432c3019f083d69173334ff84b534de0b6081d2a41d87b9618cfe321d5789dcf523e3219f4d641cc90a33ef2f70e26eb43d072f7556719706738c09eda434875cb8588610f3ca22aa0f770ccfac97288f47a6a8fd2e640e8a0ee28f6ecb4782d30686661c040ed753a070002f368a685475b29df5a3f04e67e24a513415bec84c1234ce0b40bdd2863e758804f39d712b0221a1ae1a1b4a9f7d072dc5d123e8e8ecbb39d0c7638a6b9f7d6518fe9bd3a587fe7c56aa36c8ebec1970e5ef9fc7733a7303a94f5c61a7f42fe37a7bda1403b66c52cf862349438a45ddfc42bccfeb93f8486fe6ce84afa889fa6026a1d75fc399fb227eadbbc9d60eae01e128059d80f35527027e92f559256c464d3705ebefa1b99fbf44b7815ff3854faa41b271a4041f45741c0564b573a693ec0069b91283311948aa9c0553034ca93ed4204df938bd7f8904eac67a8059b7bad92560bb04352b9a974e0661c1fe9000f293d2bc621c3f8b9e12637f8501bb2f13a4044b037bea38efaa7d20b0e90e0b0485c83d9f2a2792864637fdd08a037ea970917d7ec972b809de789b5e1288877b9bf08e944c6e36df4225a02bd8e407c1cc928e65e5e5d7105355905fb7ebd194aa0584dbc38b5817e30afb092b9901bd85690b38443f3545ccc0d180ffb477796ce45292fdf2febebcef202d3b851624b4a8371996a84b17d8117924990444d5d7926a2cea81898a6001b2feb39b8030372a23c9409d171c775657600524e963912111d2f23db6c93085b62df6734fe2fe04edbdaed8910a95fdc982f7fa19d0604c491fdb9d60d375f4ab18bacca5c19bc344b81c24feef090a75839d7509cd2d5823bca34d68f3ae814b5146b3d4df0e04649f0629c744ff9f51b1a259450c18c7e76c92b95e55b8b4b11fe059f079c8b2cf6d1470a9398cb9c407be3e47f5f638fa039fbd4cdab3ddefa82dbf1fbffad39727817ac2355951083f8aa43b8a94c328e471e9f4be6403d5908eee7639e92fc812d1778ba68fc5454c4d4147c9f9a79dc93394ed07cbfb466985e351e8947f160431081e395e39f64df31cb8ff0da15370ea6e1bc583678eee3d8790188b5f80d67384b842765c2b23d4a32b57b3719d27728fe978c46b863ada80fefd77479d64a27850f01cbadb841a49200fce81fd362d959715ba3e77c3f32e9bf13033e644324a3b1cad4c03592aabe4bb6f2cb6a9df2ea391d4623fd1c9dabc1fa90d09ed4c629220850e84c0a0f1058750a21873d48a35cca9b51308458e69aeb52b5b2885eb63ea6b1bc80db91f3e10c7c1fb8cec9d859400073a2dbf79076d66a14d2f3f3a449ae1159fee482eb1b382a735a3671d08e4a8d8e619faa9c7df8edfc6a4deaad9af3b94c4be9e89f2fc0226cee24a63fdc1ee7d95df5fbbeac85b7716574bfb9ebb80675958e21d5eedd92303626277e7605f0e55df31fade75818c074966c17e7f2b13c746da1f2c4a2e103b5461cbacab4d716556bcd650b0b0bea9e166a7c5b63995ec75ff51fa5be1d9da8b6791371ddf3ce80719306de4b805ab93ee78ad7f37335310d837f473839a50c0c5bbd4ab2e503ac6e4baec2bd582e5f736e63b1ae82bc24506a34e5d30caeffc1af32bc2b64b2c7b33e0d3f39c4e6fb75c7584dbca73481af25f6ed9eb0e4b26b5e6bed9ef062482ca5ee0d9d40c7a07a1eb7c9e9e758ad7a2b93634c59a5de06ca82df32c2c76e6921d0dbfb7f7364bcd3e5208840a8a98633fa5d097764c696e3d009253fca4a5188f03bbbed193d362f39d8a8ba275540d97b1e101458ab61498c64299700f771801cd49b1704a84dd34bd30c1674de0736d856338ba7079336b8fe272f0a4463540490579e6330ccbed722c6092cda29804a05a585e87ed7643bf81b18fff7259414a9ecb07de1b8385ca9547c58adb13c22f7b860b8685f1fa3e20e6c62190a878508fd30470c4458e0e5af749840f6a10029f9d72ba5877206eff766e66acc5f5a0c594ce3f82747bf3388d81df46c463f0a28589749d4cf39b4f1a42373b399e509f0dc1428d70e1036c15e26f5f2ebf1a4ff68ab64926557d50f0ce5754b26ec8ef41cf77aa42fed8b2f1b0ed17d7a7a45e61d07b1ac6030b0bbd9702c016dcde6b0bf2aec244c2276bae2bfa5dc446afcb7daa5e7070e8879d81b5d034dd14f518824e74b9e06933a768295e57a5d9c55ff0e723b1a1e6195619a771389a3b4d14330f5f4f240d0acb7737bf42c0284c5b3c48c88d70c9bf50aa06721d6e82dcfbc17eb5d3d9150f4fe90ad8e18fb82f23b1ce6a40936ae62993ada4ccd5e247b1078d54ed5770696934ae0cfbafc4b27e900e68d29ff2295bdc6c9030e5cac0c35e376411004cd6a89562d4660eb041929f7f499713ab89c2756598f8772248a8a8212d5305fa62c2727d631f732e01d4295e821849558c21bc50a9540a0adaffc2ec81fd3f6160557cc3035e0800bbf9ba21bb92ad7ec18efe1e3c2108bb9b30acd187c7805aeed58f05a2052f85a6c979472954a9039c0671d2aec4bca52073d7e7b2006bfd8726130c9d72ee1349caa2e02ee1620e5c5fd3df1ff074a3898d573732f0fff3ee9d50a43fe468401bd49a8f78bd8c24af6eb81becc7c1c3e3fb2cc01c2b811e443b032f6a7fa51063de414c24ca7caf6798bff871f0f35cf1e093fc53477540abb790d19e182a5b55806b78068858d752ec59e8e4323bf8da3c54d31b24c0021e99fe9a1f384586252911e614ea54cfde882894d53db7494f1c9a7d9add2cee40d197f040bcba969dceb42ea71f5d442b4988941e0b87d3bde4e8aa22d7a647b0837b405013641caa78727d45091d9e50d6c3e37fd953a8c650c7e9a4300e90a74f00cd54f085095e10ca116ec4bb2b99f917b630db937014a49abbd49a45bc6fb1e8e131dd73c6f5170e8e30e855d94e77e47a515fd1b7029b8a1a8a71e03ab14e10b0f6f7a81901fb5dc241f903fb0fac24537456b146ab17c73941bd8fa3905d9aa279a11e619f61a58b409d1408bbc5f0d3543794aa28e61cc6060523a046cfc21e4017cab8bcf2d7b7bdf53d9e96c55f121a2843676f988fbac73a956392ca24192bb46a785406752d509bee7f62c8a060a77dbb1281e697d7b9fdff540fb783017664e5e66cf0eb04be3e481307d48f3cbd16af0257a55c091bfe8fb6ad6ff7858fbdd03a425de3417cb2d9dfa38ce01b7145ee34dff8afd68e4545f446e64998497e89a54b65d00180c7eb98531cb4a9b5cc12cdb20631e77474cf1dee0c767ac5b409a5544df32cd41dffd1ee2c0292353bd85ec6b803807b7049b63ecb4af7c869508da0bcbd45bd27e0a1b9bf6c4ce20fa33349aeccd589d243e2c08ea1d658a3ec6800146ef08dfac12baa0220396726563ee56759578bac8a9b3eced28e46325aee64cbd64ba7681370002a9ed21eb4cb5446042a0ab8adf91c2bf7699ef672686f4bfa180878436f34d24ae600d0fd885e6370d69148d1aa32aa65e81ae05c8e2ee0d332cc92269d56fcbfb004f279b1e7c700fd3e5c237ef3caa8b61d54e761f482b31d529164d5d2a30748ebc7cbb6ba76a7210e763cc4e8799216ff53c6cc036df1dec4b0e305148c6f8b1ec5f0b7d8b1e5d37aeeada62c79fb1cf5567062b09c6634e8f6c1c8ea6766a084865d87b78a3ce816047a65b055596c62b5a94882c739354889991e9a9cf2aebac11c0226ee78966175cbb897f0ca7cb13d6709015413c03baa44fdddebe844e2a1fc14010caad0338ad3a720dd92e36206eafd4b55e3e58a3fe185c903233933ee27e95d79fee650bd9792d4ce10eb85d9b6dddd4f93c66bf3bc98f8b8504aedf5b7b90377132369b5f7e6ff826cfd5fb1ff6f17b018fc172e5cea55f89b393c4274f6a714fd9938c1c5d6e416beddf01cbd326eda9ec8bb3389c215b929bac035a85ec18d027dd48d26c868acc710749022340ac0ebc481aa54bc27b119f2ce6d1ed95dea05c998c2b04704dc1f60f183bbd724d99cea81a926b0be00f937da0bf572ba55e87f40e78688764a6efc20426687da057d8e64d8de5a093d4574eda893ee287b770fc38dcf9d5580d69af8395ab15d8cbe7a173951541bb4a564228d5024bb1795fb34b07962ebea62631a96bba1785f0fc7b4418aa5855ce035289def39b4036974610a8997c4945e1b019d3ea59a0a3744a388ae395c842a5dcd857cfa178c1", 0x1000}, {&(0x7f0000001c00)="e479f697", 0x4}], 0x2, 0x7fff, 0x0, 0x2, 0x5ccd, 0x0, 0x7, 0x800}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000081}, 0x84) r5 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$sock(r5, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x18}}], 0x1, 0x20044000) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x4c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0}, {0x0, 0x1}, {0x7, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff0, 0x3}}, @TCA_FW_INDEV={0x14, 0x3, 'team0\x00'}]}}]}, 0x4c}}, 0x0) r6 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r6, &(0x7f0000000580)=[{{&(0x7f0000000600)={0x2, 0x10, @remote}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000680)="a905000000007464000100000000000000e5c06417e436a106993e1e5ad8311dabcd25ca", 0x24}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x18, 0x0, 0x0, [0x1]}]}}}], 0x18}}], 0x2, 0x0) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000900)=@base={0x11, 0x5, 0x4, 0x78, 0x40230, 0xffffffffffffffff, 0x0, '\x00', r4, 0xffffffffffffffff, 0xfffffffd}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x38, r10, 0x50dc85624ea6cf59, 0x70bd25, 0x1, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x0, 0x6, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c001}, 0x400c088) sendmsg$IPVS_CMD_DEL_SERVICE(r8, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb0, r10, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3730}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20008050}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0xa, &(0x7f0000000a40)=@framed={{0x18, 0x8, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfff8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @generic={0x69, 0x0, 0x0, 0x4415}, @initr0={0x18, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0xffffffd0}, @exit]}, &(0x7f0000000ac0)='GPL\x00', 0x8, 0xde, &(0x7f0000000b00)=""/222, 0x41000}, 0x94) sendmsg$FOU_CMD_GET(r8, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040000) 2.521394044s ago: executing program 8 (id=7516): bind$inet6(0xffffffffffffffff, &(0x7f0000001980)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f00000019c0), 0x0, 0x12080, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000001a00)=0x5, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, &(0x7f0000001a40)={0xa, 0x4e20, 0x8, @private0}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) close(0x3) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x1, 0x8, &(0x7f0000001bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001e40)=r1, 0x4) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000001ec0)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r2, &(0x7f0000001f00)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8d}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)=ANY=[@ANYRES32=r3], 0x18}}, 0x0) recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=""/121, 0x79}, {&(0x7f00000002c0)=""/4091, 0xffb}], 0x2}, 0x6}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x8bfffe}], 0x4, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000012c0), 0x40241, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f00000000c0)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f00000013c0), 0x10) sendmmsg(r6, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001700)=';', 0x1}], 0x1}}], 0x1, 0x2400c890) r7 = accept4$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x80808}, {{0x0, 0xffffffffffffff8b, &(0x7f00000017c0), 0x2c, 0x0, 0x64}, 0x1ff}], 0x2, 0x20022, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001300)={'syzkaller1\x00', 0xc201}) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 2.341961735s ago: executing program 3 (id=7517): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b80), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000bc0)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xb, &(0x7f0000000340)=0x3ff, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd26, 0x2, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2, 0x8}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000cc0)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$kcm(0x2, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = gettid() sendmsg$AUDIT_SET(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x3e9, 0x400, 0x70bd29, 0x25dfdbfb, {0x1, 0x0, 0x1, r6, 0x3, 0x9, 0x5, 0x7, 0x0, 0x8, 0x7}, ["", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c805}, 0x800) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$AUTOFS_IOC_FAIL(r4, 0x9361, 0x100000000) sendmsg$TIPC_NL_BEARER_DISABLE(r5, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c010000", @ANYRES16=r7, @ANYBLOB="08002cbd7000fddbdf2502010000000000000000038008000100070000000800010007000000080002007f00000008000100d500000008000100060000000800020009000000080002000200000004000a0000000000000000000400040044000380080001000d00000008000200f400000008000100e2030000080002000200000008000200fe0c00000800020001000000080001000100000008000200050000002c000380080001000300000008000200ff0000000800020080000000080001000400000008000100480000000800010004000000140003800800020006000000080002000008097826404e19bcd3010065746800240007800c000400080000000000000008000200010000000c0003000500000000000000480007800c00040003000000000000000c0003000e0000000000000008000200090000000800020001000000080001000000800008000100000200000c000300014000000000008024000680040002000800060057000000120003006d1e10931a1738256cd6346559160000"], 0x18c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000d00)={'syzkaller1\x00', @broadcast}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000600)={'ip_vti0\x00', &(0x7f0000000580)={'tunl0\x00', 0x0, 0x40, 0x7f20, 0x11, 0x1, {{0x18, 0x4, 0x1, 0x8, 0x60, 0x67, 0x0, 0x0, 0x2f, 0x0, @multicast1, @loopback, {[@timestamp_addr={0x44, 0x44, 0x30, 0x1, 0x5, [{@remote}, {@private=0xa010101, 0xdd2}, {@loopback, 0x400}, {@empty, 0x1}, {@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x5}, {@remote}, {@loopback, 0x8}]}, @rr={0x7, 0x7, 0xc0, [@multicast2]}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@newchain={0x44, 0x64, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xa, 0xffff}, {0xfff2, 0xf}, {0x0, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x4, 0xcf}}, @TCA_CHAIN={0x8, 0xb, 0x1000}]}, 0x44}, 0x1, 0x0, 0x0, 0x600c800}, 0x10014) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="080086dd0700020000002b000000431d00670064000081219078ac1414aae00000028635000055c48797a68da1d6050708f9101316b5980212d3501190b82392888d476fa30000004e224e210431907834599df78b692baf69b83d8e52d3fdea959352"], 0x75) 2.292776942s ago: executing program 9 (id=7518): pipe(&(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x80, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@enum64={0x3, 0x6, 0x0, 0x13, 0x1, 0x1, [{0x1, 0x20003, 0x1}, {0x2, 0x7, 0x1}, {0x5, 0x9, 0x3}, {0x5, 0x2, 0x3}, {0x4, 0x78}, {0xc, 0xa, 0xd302}]}]}, {0x0, [0x2e, 0x61, 0x61, 0x5f, 0x5f, 0x61, 0x5f]}}, &(0x7f00000006c0)=""/237, 0x75, 0xed, 0x1}, 0x28) 2.265798179s ago: executing program 7 (id=7519): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r1, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0x40001) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0xc805ea60b127f85d}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2d, &(0x7f0000000340)=0x481, 0x4) recvmmsg(r3, &(0x7f0000005ac0)=[{{&(0x7f0000000380)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/167, 0xa7}, {&(0x7f00000014c0)=""/58, 0x3a}], 0x3}, 0x5015a82b}, {{&(0x7f0000001540)=@qipcrtr, 0x80, &(0x7f0000001600)=[{&(0x7f00000015c0)=""/10, 0xa}], 0x1, &(0x7f0000001640)=""/121, 0x79}, 0x9}, {{&(0x7f00000016c0)=@nl, 0x80, &(0x7f0000001780)=[{&(0x7f0000001740)=""/63, 0x3f}], 0x1, &(0x7f00000017c0)=""/190, 0xbe}, 0x5}, {{&(0x7f0000001880)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001900)=""/232, 0xe8}], 0x1, &(0x7f0000001a40)=""/136, 0x88}, 0x1}, {{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000002180)=[{&(0x7f0000001b80)=""/192, 0xc0}, {&(0x7f0000001c40)=""/164, 0xa4}, {&(0x7f0000001d00)=""/168, 0xa8}, {&(0x7f0000001dc0)=""/34, 0x22}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/205, 0xcd}, {&(0x7f0000001f40)=""/204, 0xcc}, {&(0x7f0000002040)=""/161, 0xa1}, {&(0x7f0000002100)=""/94, 0x5e}], 0x9, &(0x7f0000002240)=""/201, 0xc9}, 0x3}, {{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000002340)=""/187, 0xbb}, {&(0x7f0000002400)=""/107, 0x6b}], 0x2, &(0x7f00000024c0)=""/4096, 0x1000}, 0x5}, {{&(0x7f00000034c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000005a00)=[{&(0x7f0000003540)=""/137, 0x89}, {&(0x7f0000003600)=""/153, 0x99}, {&(0x7f00000036c0)=""/123, 0x7b}, {&(0x7f0000003740)=""/96, 0x60}, {&(0x7f00000037c0)=""/203, 0xcb}, {&(0x7f00000038c0)=""/32, 0x20}, {&(0x7f0000003900)=""/4096, 0x1000}, {&(0x7f0000004900)=""/4096, 0x1000}, {&(0x7f0000005900)=""/229, 0xe5}], 0x9}, 0x2}], 0x7, 0x41, &(0x7f0000005c80)={0x0, 0x3938700}) write(r3, &(0x7f0000005cc0)="119e0a0f361724fa2ef92417835a90fecd41aab8d7536659b26dcee2b8be05cd1f36caa898b7c5ce9be78c", 0x2b) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000005d40), r3) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000005e00)={&(0x7f0000005d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005dc0)={&(0x7f0000005d80)={0x1c, r5, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0xc000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005e80), r4) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000005f80)={&(0x7f0000005e40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005f40)={&(0x7f0000005ec0)={0x7c, r6, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY={0x50, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x13, 0x4, "316c8b662eb20cec1a98df69e96fc3"}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_SEQ={0x5, 0x4, "c0"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000006000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000006140)={&(0x7f0000005fc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000006100)={&(0x7f0000006040)={0xa8, r6, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}], @NL80211_ATTR_FILS_KEK={0x35, 0xf2, "1f6de5eace67cf3aea0c39708976a25f39fc173ab8ab78807c00cd43f0364577c1ab702ac8f028b43e01d33acd592cf28b"}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6007}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac09}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac05, 0x3e1ee5d2e8ccd3e7, 0xfac02]}]]}, 0xa8}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendto$inet6(r3, &(0x7f0000006180)="54bd6a89c44e48351c78fe0e778fe1068965a0c5172b9dafb2edaf4ee70dc6f87cf6b765d0befc90efb80dcfa2151c3a453ce70714fa7e3260b2c2838ed789b573161a54b25ddb51f7314343249f7f046f87e1078e0998a76e871d36a7db34d792cc26c1b3dad756bfa2b6a463edeca0932459a206c151e0c9ecb044168bedb4666f9a27be2b91784346a78f3660028404b3f148c50de143fb92bcd5c4", 0x9d, 0x10, &(0x7f0000006240)={0xa, 0x4e22, 0x4000, @loopback, 0x2}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000074c0)={r3, 0x0, 0x1000, 0xfa, &(0x7f0000006280)="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", &(0x7f0000007280)=""/250, 0x10000, 0x0, 0x8c, 0x4e, &(0x7f0000007380)="e12cc1916d6f4863d889fe2df1956ceee39f9ab506b748a083c91a4f8cdff3ea08934516366b9538dcfb21ef4d98e012318655982aaea9227ee973ba0b46da0e42c0cfb8eb9f17968f29e2bb4ee149eed7d13020add45fe2e236a3da3b1feb3afb888acb08a5f96cd9ffef4c8ee4582204e656f658a01d22d2930e6cd24d1608b8d2ce30ea89dff72140640b", &(0x7f0000007440)="bcc849ce638f2a9b0986f3dfd5f3009dd28ce368c19fe825e36c14fea41fc7ce4da0a6f0f69f021579e25fcb53b6c0ee59d1d750dac4a4c8423adc94696c0f278c517b60b5a090e11fa09f0c797f", 0x7, 0x0, 0x9}, 0x50) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000007700)={&(0x7f0000007540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000076c0)={&(0x7f0000007580)={0x130, r6, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8000000, 0x7f}}}}, [@NL80211_ATTR_KEYS={0xf8, 0x51, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "252e49b5623a62c0d49dce208b"}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_SEQ={0xc, 0x4, "9f92eb743435b559"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "e1cd26761d"}, @NL80211_KEY_SEQ={0x5, 0x4, "ff"}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "679b1e3c88"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "baaa81fdbd60512852270dcb80"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x6, 0x4, "b6b2"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}]}, 0x130}}, 0x815) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000007780)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000007840)={&(0x7f0000007740)={0x10, 0x0, 0x0, 0x2464c6be712f40e2}, 0xc, &(0x7f0000007800)={&(0x7f00000077c0)={0x24, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10004}, 0x4008000) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000007980)={r4, &(0x7f0000007880)='nl802154\x00', 0x400000, &(0x7f00000078c0)={@_ha_fsid={[0x6, 0x1be3]}, {0x7fff, 0x9, 0x7921, 0xab4d}}, 0x8, &(0x7f0000007900), &(0x7f0000007940)=0x3}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000007a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r9, &(0x7f0000007ac0)={&(0x7f00000079c0), 0xc, &(0x7f0000007a80)={&(0x7f0000007a40)={0x28, r6, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x101, 0xb}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}}, 0x10) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000007c00)={&(0x7f0000007b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000007bc0)={&(0x7f0000007b40)={0x64, r6, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x4a}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x2}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_ADMITTED_TIME={0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x801) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000007c40)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) setsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f0000007cc0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) socket$tipc(0x1e, 0x2, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000007d00), 0x4) r11 = socket(0x23, 0x800, 0x9) bind$nfc_llcp(r11, &(0x7f0000007d40)={0x27, r8, 0x1, 0x1, 0xcf, 0x8, "d8833accd452858d35ea25d6d345a8e0adc0a5225aff7415d37149d08de63cd1e5413ec066f023e6ecdffec64f09b28f98468d6e58aeb47f99a488743ab736", 0x5}, 0x60) 1.812983584s ago: executing program 7 (id=7520): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000280)=ANY=[], 0x128) (async) socket$unix(0x1, 0x5, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x6d}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x4}]}}}]}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x4880}, 0x2404c810) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) (async) bind$packet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000002c0)=0x1) 1.680936996s ago: executing program 9 (id=7521): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x49}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x28}}, 0x0) (fail_nth: 2) 1.616525864s ago: executing program 3 (id=7522): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000340)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x32, 0x0, 0xa}, 0x28) (async, rerun: 32) setsockopt(r0, 0x0, 0x484, &(0x7f0000000380)="060000007f00000100150000000000006d6800"/44, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="b4", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000000000000000100000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x18}, 0xc020) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000480)=@o_path={&(0x7f0000000440)='./file0\x00', 0xffffffffffffffff, 0x4000, r1}, 0x18) (async, rerun: 32) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000002c0)={0x1, 0x2, 0x1000, 0x12, &(0x7f0000000200)="93eccbe570ea5098eb8afe25b2697ffe66c0", 0x53, 0x0, &(0x7f0000000240)="ca62a169847b2cd03d8a92483b66e37c617590b26f08d2a073be43e9d7ec657a27c3a215b87624acf259aa6d5f46eb4d950f651b90068d466ef57063e6cb26fb5c5a352d493081391a405f61710475ad3e1e3a"}) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000f30a000000000000000000000700000004000014a600fefff0ffffff95"], &(0x7f00000007c0)='GPL\x00', 0x1}, 0x94) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x6, 0x4, 0x80c, 0x40}, 0x50) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000030000004200000040"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000780)={r4}, 0xc) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000800)={0x11, 0x4, {0xc60, @usage=0x7f, 0x0, 0x4, 0x0, 0x10001, 0x9, 0x100, 0x4, @struct={0xd9d, 0x5}, 0x6, 0x4, [0xc, 0xffffffffffff8001, 0x5, 0x8a, 0x0, 0x3]}, {0x4, @struct={0x1, 0x3}, 0x0, 0x7, 0x1, 0x8, 0x4, 0x5, 0x5, @struct={0xc, 0xd89}, 0x1ff, 0xcf5, [0x401, 0x0, 0x0, 0x4009, 0xdc2, 0x6]}, {0x2a653214, @struct={0x0, 0x400}, 0x0, 0x4, 0x2, 0x1, 0x6, 0x6, 0x420, @struct={0xffffff80, 0x8}, 0x46, 0x6, [0xd, 0x1, 0x4, 0x80000001, 0xb, 0x3]}, {0x4f68000000, 0x101, 0xfffffffffffffffb}}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000c00)={r5, 0x5, 0x4}) (async) socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 64) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x8800) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={0x0}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000010c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000001140)={0x5, 0x0, 0x2}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async, rerun: 32) r6 = socket$pppoe(0x18, 0x1, 0x0) (rerun: 32) connect$pppoe(r6, &(0x7f00000011c0)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) (async, rerun: 64) openat$ppp(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) (rerun: 64) 1.227449051s ago: executing program 7 (id=7523): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000080000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x78bd28, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f00000000c0)={0x28, 0x0, 0x2710}, 0x10) r7 = accept(r5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x14, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r8, &(0x7f00000004c0), &(0x7f0000000500)=@tcp6=r7}, 0x20) poll(&(0x7f0000000540), 0x55, 0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}}, 0x884) 1.110681958s ago: executing program 9 (id=7524): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xd, 0x8, 0x9, 0x1818, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1, 0xe}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r2, 0x4) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r3}, 0x8) read(r4, &(0x7f00000002c0)=""/185, 0xb9) r5 = accept4$unix(r4, 0x0, &(0x7f00000005c0), 0x80000) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000600)) read(r4, 0x0, 0x60) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xd1, 0x78c1, 0x400, 0x0, r1, 0x0, '\x00', 0x0, r4, 0x3, 0x4, 0x1, 0x8}, 0x50) r6 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000400), 0x4) recvmmsg(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/58, 0x3a}], 0x1, &(0x7f0000000500)=""/12, 0xc}, 0x90}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f0000000580)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) syz_emit_ethernet(0x86, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x2, '\x00', [@ra={0x5, 0x89}, @ra={0x5, 0x2, 0xe}, @jumbo={0xc2, 0x4, 0x55}, @pad1]}]}}}}}}}, 0x0) 661.865405ms ago: executing program 8 (id=7525): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x108, 0x30, 0x1, 0x0, 0x0, {}, [{0xf4, 0x1, [@m_gact={0xf0, 0x1, 0x0, 0x0, {{0x9}, {0xc4, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x1, 0xfffffffffffffffc, 0x5, 0x716c}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x9, 0x1, 0x9, 0x7ad}}, @TCA_GACT_PROB={0xc, 0x3, {0x3, 0xa68, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0xffffffff, 0x400, 0x7, 0xffff, 0x9}}, @TCA_GACT_PARMS={0xfdb9, 0x2, {0x8, 0x5, 0x20000000, 0xfffffffa, 0x9927}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x253f, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1c90, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0xdda1, 0x3ceb, 0x10000000, 0x4, 0xde7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1000100, 0x1ff, 0xcd479737abc61d79, 0x4, 0x76}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a85, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x108}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x10000000, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_TTL={0x5, 0x2, 0x8}}]}, 0x30}}, 0x0) (async) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) 443.0104ms ago: executing program 9 (id=7526): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x2, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80008000}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xffff7fff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x7, &(0x7f0000000480)=0x9, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x4, &(0x7f0000000340)=@framed={{}, [@generic={0x71, 0x0, 0x1, 0x90}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f0000000640)=""/42, &(0x7f0000000680)=0x2a) bind$tipc(r2, &(0x7f00000003c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r3, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)={r1}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000500)=@assoc_value={0x0}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000580)={r8, 0x186, 0x20}, &(0x7f00000005c0)=0xc) setsockopt$inet_sctp_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r5, 0x84, 0x83, &(0x7f0000000600)={r8, 0x1}, 0x8) bind$tipc(r3, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0, @ANYBLOB="11ad74ee0eb8b3f88d7966c9c86b2964c6d7c1ebcd42680f11c4f53dff5398bcbec758aabd768ba7e676c3c213484867934333b8e53b7fa0232ce3a893d315eaf514c8a7d12904abaa30a5109f8aac2b156fab169a0899052cf62634eb94707837561584d76d829d6fb6d9222b077df933e50fd1740abbc6f8197e0eb595a86e562a2a64e1b234a49cc672d6d24951f42e59894ba6fb46ba2b91575242"], 0x50}}, 0x85) 23.620416ms ago: executing program 8 (id=7527): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)='GPL\x00'}, 0x48) 0s ago: executing program 9 (id=7528): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='devices.list\x00', 0x26e1, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000900)={r0, &(0x7f0000000680)='tbf\x00', 0xafd92dc728de2376, &(0x7f00000006c0)={@_ha_fsid={[0xb2fa, 0x6]}, {0x0, 0x50c0, 0x7, 0x8}}, 0x7fffffff, &(0x7f0000000700), &(0x7f0000000740)=0x8}) close(r0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r1, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x8010) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0xbfff8000}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000440)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r9, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) write$nbd(r6, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0xf0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x8080, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c0001800800014000000004540000000e0a01010000000000000000020000000900020073797a31000000000900010073797a30000000002800038024000080100001800c0001000000000000000000"], 0x100}}, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) kernel console output (not intermixed with test programs): ex [ 1503.271168][ T2358] netlink: 100 bytes leftover after parsing attributes in process `syz.7.6429'. [ 1503.285716][ T2360] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6431'. [ 1503.285884][ T2360] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6431'. [ 1503.455827][ T2365] netlink: 'syz.7.6429': attribute type 29 has an invalid length. [ 1503.462437][ T2365] netlink: 'syz.7.6429': attribute type 29 has an invalid length. [ 1503.676429][ T2373] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6432'. [ 1503.685828][ T2372] netlink: 'syz.7.6429': attribute type 29 has an invalid length. [ 1504.184334][ T2383] veth1_vlan: left promiscuous mode [ 1504.190310][ T2383] veth0_vlan: left promiscuous mode [ 1504.208324][ T2383] veth0_vlan: entered promiscuous mode [ 1504.223582][ T2383] veth1_vlan: entered promiscuous mode [ 1504.239629][ T2383] veth1_macvtap: left promiscuous mode [ 1504.241061][ T2383] veth0_macvtap: left promiscuous mode [ 1504.255224][ T2383] veth0_macvtap: entered promiscuous mode [ 1504.256379][ T2383] tipc: Resetting bearer [ 1504.256651][ T2383] veth1_macvtap: entered promiscuous mode [ 1504.290565][ T2383] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1504.302696][ T2383] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1504.303923][ T2383] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1504.307094][ T2383] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1504.328760][ T2383] macsec0: entered allmulticast mode [ 1504.328782][ T2383] veth1_macvtap: entered allmulticast mode [ 1504.328826][ T2383] macsec0: entered promiscuous mode [ 1504.424035][ T2383] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1504.443866][ T2383] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1504.852607][T28703] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1504.897097][T28696] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1504.923217][T12820] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1504.923843][T12820] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1505.057576][T12836] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1505.604517][ T2425] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6441'. [ 1505.639598][ T2427] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6442'. [ 1505.639640][ T2427] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6442'. [ 1505.853101][ T2437] pimreg: entered allmulticast mode [ 1505.858793][ T2433] pimreg: left allmulticast mode [ 1506.488234][ T2354] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1507.088903][T10129] IPVS: starting estimator thread 0... [ 1507.110202][ T2465] __nla_validate_parse: 1 callbacks suppressed [ 1507.110224][ T2465] netlink: 112 bytes leftover after parsing attributes in process `syz.5.6452'. [ 1507.174871][ T2473] IPVS: using max 27 ests per chain, 64800 per kthread [ 1507.491781][ T13] net_ratelimit: 43 callbacks suppressed [ 1507.491875][ T13] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1507.619420][ T1049] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1507.734508][ T1049] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1507.861902][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1508.289937][ T2496] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6454'. [ 1508.306051][T12836] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1508.323429][T29860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1508.333364][ T2492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6454'. [ 1508.490086][ T2492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6454'. [ 1508.647101][ T2492] ifb0: entered allmulticast mode [ 1508.657037][ T2492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6454'. [ 1508.810469][ T2492] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1508.814825][ T8917] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1508.921993][ T1049] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1508.953775][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1508.962188][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1509.040717][ T13] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1509.260434][ T2524] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 1509.298355][ T2524] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6459'. [ 1511.282590][ T2583] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6470'. [ 1511.434296][ T2585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6471'. [ 1511.617404][ T2586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6471'. [ 1512.643929][ T8917] net_ratelimit: 40 callbacks suppressed [ 1512.643980][ T8917] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1512.730088][ T2615] netlink: 'syz.9.6479': attribute type 11 has an invalid length. [ 1512.756377][T28703] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1512.978685][T28696] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1512.983046][T31407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1513.102256][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1513.107318][T28696] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1513.203109][T32439] Bluetooth: hci2: command 0x0405 tx timeout [ 1513.211973][T28703] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1513.329285][T12820] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1513.447779][ T8917] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1513.538631][T29860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1515.060843][ T2654] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6491'. [ 1515.108997][ T2657] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6492'. [ 1515.162616][ T2657] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1515.167129][ T2657] bond1 (unregistering): Released all slaves [ 1516.089861][ T2683] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 1516.301393][ T2681] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6496'. [ 1517.442022][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1517.598424][ T2725] netlink: 'syz.7.6507': attribute type 30 has an invalid length. [ 1517.598650][ T2725] netlink: 'syz.7.6507': attribute type 30 has an invalid length. [ 1517.598864][ T2725] netlink: 'syz.7.6507': attribute type 30 has an invalid length. [ 1517.599069][ T2725] netlink: 'syz.7.6507': attribute type 30 has an invalid length. [ 1517.599329][ T2725] netlink: 'syz.7.6507': attribute type 30 has an invalid length. [ 1517.599532][ T2725] netlink: 'syz.7.6507': attribute type 30 has an invalid length. [ 1517.656993][T12817] net_ratelimit: 46 callbacks suppressed [ 1517.657014][T12817] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1517.679400][ T2725] netlink: 'syz.7.6507': attribute type 30 has an invalid length. [ 1517.679622][ T2725] netlink: 'syz.7.6507': attribute type 30 has an invalid length. [ 1517.679834][ T2725] netlink: 'syz.7.6507': attribute type 30 has an invalid length. [ 1517.680036][ T2725] netlink: 'syz.7.6507': attribute type 30 has an invalid length. [ 1517.693385][T29865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1518.009741][T28704] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1518.031399][ T2745] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6511'. [ 1518.172342][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1518.176692][ T2730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6509'. [ 1518.387601][T12826] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1518.727670][T29860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1518.766418][T12820] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1518.782827][ T2752] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6511'. [ 1518.782935][ T2749] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6511'. [ 1518.788821][ T2732] syzkaller1: entered promiscuous mode [ 1518.788889][ T2732] syzkaller1: entered allmulticast mode [ 1518.947645][ T2777] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6512'. [ 1519.057102][T31402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1519.222090][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1519.265959][T29865] tipc: Resetting bearer [ 1519.291439][T12820] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1519.543399][ T2781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6514'. [ 1519.831318][ T2797] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6518'. [ 1519.949364][ T2779] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1519.977818][ T2782] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1519.989569][ T2783] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1520.469934][ T2811] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6521'. [ 1521.495480][ T2852] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6526'. [ 1522.480093][ T2885] veth0_to_bridge: entered promiscuous mode [ 1522.505118][ T2885] macvtap1: entered allmulticast mode [ 1522.505145][ T2885] veth0_to_bridge: entered allmulticast mode [ 1522.675164][T12820] net_ratelimit: 39 callbacks suppressed [ 1522.675225][T12820] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1522.782784][T12826] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1522.884568][T29860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1522.908023][ T8917] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1522.960245][ T5297] veth0_vlan: left promiscuous mode [ 1523.119753][T29865] veth0_vlan: entered promiscuous mode [ 1523.158206][T12820] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1523.203246][ T1049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1523.313105][ T4206] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1523.426119][T28703] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1523.471909][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1523.546189][T12826] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1524.137991][ T2920] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6537'. [ 1524.245831][ T2922] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6538'. [ 1525.269423][ T2945] netlink: 'syz.7.6543': attribute type 11 has an invalid length. [ 1525.669895][ T2953] validate_nla: 23 callbacks suppressed [ 1525.669942][ T2953] netlink: 'syz.8.6544': attribute type 1 has an invalid length. [ 1526.040162][ T2975] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6544'. [ 1526.093588][ T2975] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6544'. [ 1526.310679][ T2974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1526.311423][ T2974] bridge0: port 1(bridge_slave_0) entered disabled state [ 1526.357870][ T2975] bond8: (slave bridge6): making interface the new active one [ 1526.358489][ T2975] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 1526.502929][ T2981] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6547'. [ 1527.039800][ T2990] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6549'. [ 1527.691873][ C0] net_ratelimit: 41 callbacks suppressed [ 1527.691921][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1527.767925][ T3003] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6551'. [ 1527.774343][ T8917] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1527.882125][ T8917] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1527.904851][ T3007] veth1_macvtap: left allmulticast mode [ 1527.905073][ T3007] veth1_macvtap: left promiscuous mode [ 1527.935685][ T3007] veth1_macvtap: entered promiscuous mode [ 1527.935708][ T3007] veth1_macvtap: entered allmulticast mode [ 1527.938758][ T3007] netlink: 'syz.7.6553': attribute type 2 has an invalid length. [ 1527.938779][ T3007] netlink: 228 bytes leftover after parsing attributes in process `syz.7.6553'. [ 1528.002730][T12826] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1528.083468][T29865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.163605][T31404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.181852][T25529] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1528.241924][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.242371][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.242717][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1529.965150][ T3044] bond1: option fail_over_mac: invalid value (127) [ 1529.999499][ T3044] bond1 (unregistering): Released all slaves [ 1530.129153][ T3055] netlink: 'syz.5.6562': attribute type 2 has an invalid length. [ 1530.214795][ T3051] netlink: 1 bytes leftover after parsing attributes in process `syz.7.6563'. [ 1530.358766][ T3055] !: entered promiscuous mode [ 1530.530013][ T3060] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6562'. [ 1530.530661][ T3066] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6562'. [ 1530.719323][ T3060] !: left promiscuous mode [ 1530.721311][ T3070] netlink: 'syz.0.6566': attribute type 1 has an invalid length. [ 1530.727990][ T3056] netlink: 'syz.5.6562': attribute type 2 has an invalid length. [ 1530.733907][ T3076] netlink: 'syz.5.6562': attribute type 2 has an invalid length. [ 1530.800340][ T3068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1530.877999][ T3068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1531.290178][ T3056] !: entered promiscuous mode [ 1531.631741][ T3089] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6568'. [ 1531.723756][ T3093] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6568'. [ 1531.736122][ T3092] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6568'. [ 1531.814074][ T3097] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6570'. [ 1531.824981][T32439] Bluetooth: unknown link type 128 [ 1532.497962][T27950] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1532.821957][ C0] net_ratelimit: 31 callbacks suppressed [ 1532.822005][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1533.293644][T29860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1533.821996][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1533.843703][T27950] Bluetooth: hci2: command 0x0405 tx timeout [ 1534.093154][T28703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.097217][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1534.247590][T31404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.334287][T29860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.893431][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1535.370650][T29865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1535.932372][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1535.933240][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1537.832280][T28703] net_ratelimit: 16 callbacks suppressed [ 1537.832306][T28703] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1537.942350][ T8917] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1537.951902][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1538.052674][ T1049] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1538.432562][ T1050] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1538.484326][T29861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1538.544206][ T13] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1538.673233][ T1049] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1538.787384][ T3157] vlan2: entered allmulticast mode [ 1538.856721][ T3162] syzkaller0: entered promiscuous mode [ 1538.856748][ T3162] syzkaller0: entered allmulticast mode [ 1538.910879][ T8917] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1539.121948][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1539.435707][ T3181] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6593'. [ 1539.435739][ T3181] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6593'. [ 1539.737738][ T3188] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6595'. [ 1539.737873][ T3188] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6595'. [ 1539.766374][ T3198] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6594'. [ 1539.835819][ T3199] Bluetooth: hci0: unsupported parameter 5135 [ 1539.835845][ T3199] Bluetooth: hci0: unsupported parameter 8192 [ 1539.835859][ T3199] Bluetooth: hci0: unsupported parameter 5135 [ 1539.835871][ T3199] Bluetooth: hci0: unsupported parameter 8192 [ 1541.122006][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1541.211460][ T3220] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6599'. [ 1542.748261][ T3250] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6604'. [ 1542.961948][ C1] net_ratelimit: 34 callbacks suppressed [ 1542.961973][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1542.962350][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1543.015055][ T4169] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1543.211878][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1543.364422][T31404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1543.406691][ T3279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6610'. [ 1543.409339][ T3271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1543.433958][T28703] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1543.544414][ T13] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1543.684217][T29863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1543.748211][T28703] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1543.869009][T28703] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1544.581348][ T3288] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6612'. [ 1546.230653][ T3344] FAULT_INJECTION: forcing a failure. [ 1546.230653][ T3344] name failslab, interval 1, probability 0, space 0, times 0 [ 1546.230686][ T3344] CPU: 1 UID: 0 PID: 3344 Comm: syz.7.6626 Not tainted syzkaller #0 PREEMPT(full) [ 1546.230708][ T3344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1546.230720][ T3344] Call Trace: [ 1546.230729][ T3344] [ 1546.230739][ T3344] dump_stack_lvl+0xe8/0x150 [ 1546.230777][ T3344] should_fail_ex+0x3eb/0x540 [ 1546.230808][ T3344] should_failslab+0xa8/0x100 [ 1546.230832][ T3344] __kmalloc_cache_noprof+0x9e/0x600 [ 1546.230858][ T3344] ? __kmalloc_cache_noprof+0x148/0x600 [ 1546.230881][ T3344] ? sctp_add_bind_addr+0x8c/0x370 [ 1546.230905][ T3344] ? sctp_add_bind_addr+0x8c/0x370 [ 1546.230936][ T3344] sctp_add_bind_addr+0x8c/0x370 [ 1546.230967][ T3344] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1546.230996][ T3344] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1546.231027][ T3344] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1546.231057][ T3344] ? sctp_v4_is_any+0x35/0x60 [ 1546.231082][ T3344] ? sctp_copy_one_addr+0x93/0x360 [ 1546.231112][ T3344] sctp_bind_addr_copy+0xb3/0x3c0 [ 1546.231139][ T3344] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1546.231166][ T3344] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1546.231190][ T3344] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1546.231221][ T3344] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1546.231251][ T3344] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1546.231278][ T3344] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1546.231307][ T3344] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 1546.231339][ T3344] __sctp_connect+0x5cb/0xdc0 [ 1546.231381][ T3344] ? __pfx___sctp_connect+0x10/0x10 [ 1546.231421][ T3344] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1546.231452][ T3344] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 1546.231480][ T3344] sctp_getsockopt_connectx3+0x227/0x360 [ 1546.231510][ T3344] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 1546.231541][ T3344] ? sctp_getsockopt+0x12f/0xb90 [ 1546.231572][ T3344] ? __local_bh_enable_ip+0xd6/0x140 [ 1546.231604][ T3344] sctp_getsockopt+0x984/0xb90 [ 1546.231633][ T3344] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1546.231663][ T3344] do_sock_getsockopt+0x4aa/0x640 [ 1546.231692][ T3344] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1546.231734][ T3344] ? __fget_files+0x3a2/0x420 [ 1546.231758][ T3344] ? __fget_files+0x2a/0x420 [ 1546.231791][ T3344] __x64_sys_getsockopt+0x1a4/0x240 [ 1546.231825][ T3344] do_syscall_64+0x166/0x520 [ 1546.231849][ T3344] ? trace_irq_disable+0x3b/0x140 [ 1546.231876][ T3344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.231897][ T3344] ? clear_bhb_loop+0x70/0xc0 [ 1546.231921][ T3344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.231941][ T3344] RIP: 0033:0x7f2196f9fb19 [ 1546.231961][ T3344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1546.231978][ T3344] RSP: 002b:00007f21951f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1546.232001][ T3344] RAX: ffffffffffffffda RBX: 00007f2197225fa0 RCX: 00007f2196f9fb19 [ 1546.232015][ T3344] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000005 [ 1546.232028][ T3344] RBP: 00007f21951f6090 R08: 0000200000000100 R09: 0000000000000000 [ 1546.232041][ T3344] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002 [ 1546.232053][ T3344] R13: 00007f2197226038 R14: 00007f2197225fa0 R15: 00007ffcaa5e5b18 [ 1546.232088][ T3344] [ 1546.275895][T27950] Bluetooth: unknown link type 231 [ 1546.275952][T27950] Bluetooth: hci1: connection err: -111 [ 1547.268673][ T3371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6631'. [ 1548.059764][ T1049] net_ratelimit: 51 callbacks suppressed [ 1548.059813][ T1049] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1548.254621][ T3385] IPv6: NLM_F_CREATE should be specified when creating new route [ 1548.254744][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.254757][ T3385] IPv6: NLM_F_CREATE should be set when creating new route [ 1548.255132][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.255483][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.255790][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.267306][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.267641][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.267920][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.268191][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.268493][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.268761][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.279399][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.279682][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.279955][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.280223][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.280525][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.300989][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.301361][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.301937][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.302210][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.332074][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.332452][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.332767][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.349770][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.355451][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.355739][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.356029][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.356330][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.356604][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.367784][ T3397] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6636'. [ 1548.384700][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.385022][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.385317][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.390187][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.390510][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.399590][ T3399] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6636'. [ 1548.400816][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.401106][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.401444][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.410596][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.420386][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.420717][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.421020][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.437175][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.446765][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1548.451233][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.452152][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.452466][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.452737][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.465476][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.465791][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.466073][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.466368][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.466637][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.466921][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.506524][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.506830][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.507118][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.510440][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.525586][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.525926][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.529538][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.529820][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.530098][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.552420][ T1049] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1548.557331][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.557654][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.557935][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.559908][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.560349][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1548.655988][ T3397] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input10 [ 1548.669226][ T4169] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1548.780943][ T1049] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1548.885994][ T4169] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1548.947558][T29861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1548.992192][ T13] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1549.014350][ T3409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1549.102369][ T4169] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1549.212903][T12820] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1549.639462][ T3428] netlink: 'syz.7.6646': attribute type 2 has an invalid length. [ 1549.705316][ T3428] !: entered promiscuous mode [ 1549.766167][ T3432] netlink: 'syz.9.6648': attribute type 1 has an invalid length. [ 1549.766230][ T3432] netlink: 'syz.9.6648': attribute type 3 has an invalid length. [ 1549.766265][ T3432] netlink: 224 bytes leftover after parsing attributes in process `syz.9.6648'. [ 1550.681041][ T3461] x_tables: duplicate underflow at hook 1 [ 1551.865427][ T3474] ip_vti0: entered allmulticast mode [ 1552.139589][ T3479] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6658'. [ 1552.474818][ T3486] syzkaller1: entered promiscuous mode [ 1552.474914][ T3486] syzkaller1: entered allmulticast mode [ 1552.632142][ T3489] netlink: 'syz.0.6662': attribute type 1 has an invalid length. [ 1553.012394][ T3489] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1553.123006][T29861] net_ratelimit: 38 callbacks suppressed [ 1553.123030][T29861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1553.274281][T12842] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1553.532242][ T1049] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1553.571831][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1553.642714][T12842] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1553.754053][ T8917] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1553.866366][ T4206] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1553.899237][ T3516] netlink: 244 bytes leftover after parsing attributes in process `syz.8.6665'. [ 1553.973352][ T1049] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1554.018466][ T3522] netlink: 'syz.9.6667': attribute type 1 has an invalid length. [ 1554.130995][ T3532] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6667'. [ 1554.163025][T29865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1554.251416][ T3522] bond1: entered promiscuous mode [ 1554.259578][ T3522] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1554.262603][ T4206] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1554.412878][ T3532] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1554.439907][ T3532] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1554.439974][ T3532] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1554.518333][ T3532] bond1: (slave wireguard0): making interface the new active one [ 1554.518360][ T3532] wireguard0: entered promiscuous mode [ 1554.539278][ T3543] netlink: 3576 bytes leftover after parsing attributes in process `syz.8.6670'. [ 1554.540648][ T3532] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 1555.334362][ T3550] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1556.090069][ T3565] netlink: 164 bytes leftover after parsing attributes in process `syz.8.6677'. [ 1556.359380][ T3568] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6679'. [ 1556.579919][ T3571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6680'. [ 1556.779802][ T3585] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6683'. [ 1558.098242][ T3601] netlink: 'syz.8.6686': attribute type 1 has an invalid length. [ 1558.098312][ T3601] netlink: 'syz.8.6686': attribute type 2 has an invalid length. [ 1558.134480][T12842] net_ratelimit: 43 callbacks suppressed [ 1558.134502][T12842] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1558.246769][T10129] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1558.327590][T29865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1558.353320][ T4169] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1558.463016][T28703] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1558.572702][ T4169] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1558.576241][T31407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1558.682539][T28703] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1558.699774][ T3607] openvswitch: netlink: Message has 1 unknown bytes. [ 1558.699813][ T3607] openvswitch: netlink: Actions may not be safe on all matching packets [ 1559.627437][ T3630] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6693'. [ 1559.650437][ T3630] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6693'. [ 1559.650573][ T3630] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6693'. [ 1559.650635][ T3630] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6693'. [ 1559.714976][ T3630] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6693'. [ 1562.443077][ T3677] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6705'. [ 1563.206230][T12842] net_ratelimit: 54 callbacks suppressed [ 1563.206277][T12842] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1563.313358][ T1049] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1563.422773][T12820] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1563.434004][ T3694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6708'. [ 1563.523921][T29863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1563.535539][ T1049] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1563.544167][ T3694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6708'. [ 1563.588218][ T3704] siw: device registration error -23 [ 1563.598833][ T3705] syz_tun: entered allmulticast mode [ 1563.606561][ T3708] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6711'. [ 1563.619234][ T3705] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20000 [ 1563.643823][T10129] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1563.674111][ T3704] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2 [ 1563.768947][ T3705] dvmrp6: entered allmulticast mode [ 1563.772235][T28704] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1563.885357][ T1050] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1563.938102][ T3718] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6713'. [ 1563.946917][ T3719] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6713'. [ 1563.971924][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1564.054822][T28704] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1564.066959][ T3723] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6714'. [ 1564.067358][ T3723] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6714'. [ 1564.067574][ T3723] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6714'. [ 1564.067797][ T3723] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6714'. [ 1564.392836][ T3704] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1565.442226][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1565.957957][T29865] bridge0: entered promiscuous mode [ 1566.534022][T32439] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1566.544868][T32439] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1566.562560][T32439] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1566.573846][T32439] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1566.579179][T32439] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1566.824573][ T3771] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1567.688963][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1567.688988][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1567.767349][ T3805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1568.087007][ T3815] netlink: 'syz.8.6735': attribute type 34 has an invalid length. [ 1568.087075][ T3815] __nla_validate_parse: 66 callbacks suppressed [ 1568.087112][ T3815] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6735'. [ 1568.328081][ T13] net_ratelimit: 40 callbacks suppressed [ 1568.328106][ T13] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1568.449436][ T3815] netlink: 'syz.8.6735': attribute type 14 has an invalid length. [ 1568.691021][ T3827] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6737'. [ 1568.691087][ T3827] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6737'. [ 1568.724324][T27950] Bluetooth: hci3: command tx timeout [ 1568.725466][T29863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1569.161832][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1569.421945][ T8917] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1569.552309][T12842] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1569.558221][ T3778] rxe_eth0 speed is unknown, defaulting to 1000 [ 1569.664434][ T8917] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1569.741810][ T3852] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1569.762474][T29863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1569.772158][ T13] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1569.884150][ T13] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1569.957342][ T3849] netlink: 'syz.7.6739': attribute type 1 has an invalid length. [ 1570.067923][ T3849] netlink: 'syz.7.6739': attribute type 10 has an invalid length. [ 1570.067948][ T3849] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6739'. [ 1570.086197][ T3849] dummy0: entered promiscuous mode [ 1570.114341][ T8917] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1570.685499][ T3867] lo: left promiscuous mode [ 1570.803147][T27950] Bluetooth: hci3: command tx timeout [ 1571.198266][ T3778] lo speed is unknown, defaulting to 1000 [ 1571.594142][ T3879] netlink: 'syz.9.6745': attribute type 9 has an invalid length. [ 1571.987421][ T3881] bond8: option mode: invalid value (7) [ 1572.043210][ T3890] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6748'. [ 1572.074229][ T3881] bond8 (unregistering): Released all slaves [ 1572.778659][ T3778] wg2 speed is unknown, defaulting to 1000 [ 1572.882790][T27950] Bluetooth: hci3: command tx timeout [ 1573.493060][ T1049] net_ratelimit: 33 callbacks suppressed [ 1573.493084][ T1049] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1573.638801][T12820] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1573.756071][T28704] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1573.922734][T29863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1573.925995][ T13] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1573.948501][T31407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1574.035172][ T1049] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1574.145862][ T3911] netlink: 'syz.8.6754': attribute type 2 has an invalid length. [ 1574.145887][ T3911] netlink: 224 bytes leftover after parsing attributes in process `syz.8.6754'. [ 1574.443541][ T3916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6755'. [ 1574.492295][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1574.533059][ T3922] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6755'. [ 1574.714793][T28703] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1574.962452][T27950] Bluetooth: hci3: command tx timeout [ 1574.963989][T29865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1575.280416][ T3778] bridge0: port 1(bridge_slave_0) entered blocking state [ 1575.280611][ T3778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1575.281342][ T3778] bridge_slave_0: entered allmulticast mode [ 1575.315581][ T3778] bridge_slave_0: entered promiscuous mode [ 1575.331997][ T3778] bridge0: port 2(bridge_slave_1) entered blocking state [ 1575.332189][ T3778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1575.332359][ T3778] bridge_slave_1: entered allmulticast mode [ 1575.335869][ T3778] bridge_slave_1: entered promiscuous mode [ 1575.469577][ T3778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1575.488487][ T3778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1575.598179][ T3778] team0: Port device team_slave_0 added [ 1575.623256][ T3778] team0: Port device team_slave_1 added [ 1575.838818][ T3778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1575.838837][ T3778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1575.838864][ T3778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1575.906836][ T3778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1575.906856][ T3778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1575.906882][ T3778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1576.109765][ T3778] hsr_slave_0: entered promiscuous mode [ 1576.121081][ T3778] hsr_slave_1: entered promiscuous mode [ 1576.132707][ T3778] debugfs: 'hsr0' already exists in 'hsr' [ 1576.132728][ T3778] Cannot create hsr debugfs directory [ 1577.564494][ T3927] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1577.565092][ T3928] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1578.293539][ T3956] netlink: 'syz.0.6763': attribute type 5 has an invalid length. [ 1578.335791][ T3961] x_tables: duplicate entry at hook 3 [ 1578.641905][ C0] net_ratelimit: 21 callbacks suppressed [ 1578.641963][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1578.678302][ T3969] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6765'. [ 1578.815577][ T1050] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1579.124797][T29863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1579.357678][T10129] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1579.488499][ T3969] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1579.642046][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1579.743267][ T3988] netlink: 'syz.7.6768': attribute type 4 has an invalid length. [ 1579.839835][ T3989] netlink: 'syz.7.6768': attribute type 4 has an invalid length. [ 1580.073408][T31407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1580.162900][T29865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1580.463721][T12842] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1580.632195][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1580.666049][ T3969] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6765'. [ 1580.731193][T12820] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1580.766652][ T3976] netlink: 'syz.9.6765': attribute type 10 has an invalid length. [ 1580.766677][ T3976] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6765'. [ 1580.936442][ T3982] pimreg: entered allmulticast mode [ 1580.952799][ T4169] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1580.961721][ T3969] bond2: entered promiscuous mode [ 1580.961813][ T3969] bond2: entered allmulticast mode [ 1580.965489][ T3979] pimreg: left allmulticast mode [ 1581.212811][ T3971] dummy0: left promiscuous mode [ 1581.218124][ T3971] dummy0: left allmulticast mode [ 1581.238273][ T3971] team0: Port device dummy0 removed [ 1581.275794][ T3971] dummy0: entered promiscuous mode [ 1581.275994][ T3971] dummy0: entered allmulticast mode [ 1581.293716][ T3971] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1581.365184][ T3976] bond2: (slave dummy0): Releasing backup interface [ 1581.386144][ T3976] dummy0: left allmulticast mode [ 1581.919873][T12842] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.556381][T12842] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.897068][T12842] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.167720][ T4028] netlink: 'syz.0.6775': attribute type 1 has an invalid length. [ 1583.167745][ T4028] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.6775'. [ 1583.321129][ T4026] netlink: 80 bytes leftover after parsing attributes in process `syz.7.6776'. [ 1583.422056][ T4028] syzkaller0: entered allmulticast mode [ 1583.761963][ C0] net_ratelimit: 14 callbacks suppressed [ 1583.762013][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1583.895599][T28704] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1583.922023][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1583.922443][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1583.922779][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1583.923125][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1584.000518][ T3778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1584.039948][ T3778] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1584.089713][ T3778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1584.135966][ T3778] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1584.138826][ T3778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1584.161845][T27950] Bluetooth: hci1: command 0x0406 tx timeout [ 1584.185674][ T3778] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1584.212974][ T8917] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1584.213693][ T3778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1584.304566][ T3778] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1584.356844][T12842] bridge_slave_1: left allmulticast mode [ 1584.356874][T12842] bridge_slave_1: left promiscuous mode [ 1584.357108][T12842] bridge0: port 2(bridge_slave_1) entered disabled state [ 1584.405305][T29860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1584.427553][T12842] bridge_slave_0: left allmulticast mode [ 1584.427581][T12842] bridge_slave_0: left promiscuous mode [ 1584.429868][T12842] bridge0: port 1(bridge_slave_0) entered disabled state [ 1584.781827][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1585.442660][T29863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1585.530074][ T4076] netlink: 'syz.7.6785': attribute type 1 has an invalid length. [ 1585.530143][ T4076] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6785'. [ 1585.760491][T12842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1585.795196][T12842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1585.815303][T12842] bond0 (unregistering): Released all slaves [ 1586.144990][T12842] !: left promiscuous mode [ 1586.285570][T12842] tipc: Left network mode [ 1586.710444][ T4104] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6787'. [ 1586.805755][ T4104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6787'. [ 1586.834504][ T4106] netlink: 220 bytes leftover after parsing attributes in process `syz.8.6789'. [ 1587.097311][ T3778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1587.553089][ T4119] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6791'. [ 1587.558101][T12826] IPVS: starting estimator thread 0... [ 1587.642856][ T4121] IPVS: using max 28 ests per chain, 67200 per kthread [ 1588.063483][T28704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1588.063509][T28704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1588.280067][ T3778] 8021q: adding VLAN 0 to HW filter on device team0 [ 1588.635327][ T1049] bridge0: port 1(bridge_slave_0) entered blocking state [ 1588.635449][ T1049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1588.766179][T12826] bridge0: port 2(bridge_slave_1) entered blocking state [ 1588.766321][T12826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1588.859171][ T4136] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6794'. [ 1588.859196][ T4136] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6794'. [ 1588.859220][ T4136] netlink: 'syz.8.6794': attribute type 11 has an invalid length. [ 1588.859259][ T4136] netlink: 'syz.8.6794': attribute type 14 has an invalid length. [ 1588.952020][ C0] net_ratelimit: 18 callbacks suppressed [ 1588.952098][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1588.983529][ T4169] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1589.092615][ T8917] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1589.215096][ T4141] netlink: 'syz.8.6797': attribute type 4 has an invalid length. [ 1589.232637][T12826] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1589.295618][T31404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.342815][ T1049] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1589.514660][T12820] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1589.605061][T29860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.641932][T12820] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1589.681918][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1590.771316][ T4168] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6799'. [ 1591.327265][ T4177] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6800'. [ 1591.958926][ T4186] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6802'. [ 1592.300654][ T4186] bond13: (slave bond_slave_0): Device is not bonding slave [ 1592.300680][ T4186] bond13: option active_slave: invalid value (bond_slave_0) [ 1592.339358][ T4186] bond13 (unregistering): Released all slaves [ 1592.588132][T12842] hsr_slave_0: left promiscuous mode [ 1592.607428][T12842] hsr_slave_1: left promiscuous mode [ 1592.608616][T12842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1592.608637][T12842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1592.609805][T12842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1592.609823][T12842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1592.698919][T12842] veth1_macvtap: left promiscuous mode [ 1592.698988][T12842] veth0_macvtap: left promiscuous mode [ 1592.699113][T12842] veth1_vlan: left promiscuous mode [ 1592.699185][T12842] veth0_vlan: left promiscuous mode [ 1593.361315][ T4208] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6804'. [ 1593.381324][ T4209] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6804'. [ 1594.231941][ C0] net_ratelimit: 25 callbacks suppressed [ 1594.232002][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1594.300380][T12842] team0 (unregistering): Port device team_slave_1 removed [ 1594.352352][T12842] team0 (unregistering): Port device team_slave_0 removed [ 1594.767558][ T4222] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6805'. [ 1594.769025][ T4222] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6805'. [ 1594.802051][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1594.802410][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1594.802730][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1594.803078][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1594.807882][T29865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1595.074571][ T8917] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1595.141973][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1595.313482][ T4200] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1595.362998][T31403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1595.546784][ T4221] vxcan3: entered allmulticast mode [ 1596.047941][ T4239] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6807'. [ 1596.048006][ T4239] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6807'. [ 1596.048097][ T4239] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6807'. [ 1596.159166][ T4245] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6807'. [ 1596.235987][T12842] IPVS: stop unused estimator thread 0... [ 1597.834667][ T4273] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6813'. [ 1597.855518][ T3778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1598.380936][ T3778] veth0_vlan: entered promiscuous mode [ 1598.438292][ T3778] veth1_vlan: entered promiscuous mode [ 1598.586708][ T4284] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6816'. [ 1598.662663][T31403] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1598.944518][ T3778] veth0_macvtap: entered promiscuous mode [ 1598.979498][ T3778] veth1_macvtap: entered promiscuous mode [ 1599.159191][ T3778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1599.214818][ T3778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1599.334546][T10129] net_ratelimit: 30 callbacks suppressed [ 1599.334568][T10129] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1599.381828][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1599.420747][T25529] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.420960][T25529] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.421112][T25529] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.460646][ T4304] netlink: 88 bytes leftover after parsing attributes in process `syz.9.6820'. [ 1599.526442][T28696] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1599.532744][T12842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.550229][T31402] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1599.695316][T12842] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1599.861550][T25529] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1600.006405][T29865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1600.031112][ T4203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1600.031135][ T4203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1600.036878][T25529] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1600.326638][T10129] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1600.331867][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1600.371284][ T4321] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6824'. [ 1600.402346][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1600.540864][T12842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1600.540888][T12842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1600.713357][ T4328] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6826'. [ 1600.751099][ T4323] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6825'. [ 1600.756119][ T4324] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6825'. [ 1601.008797][ T4332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1601.868100][ T4357] macsec0: entered promiscuous mode [ 1601.898834][ T4361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6829'. [ 1601.899979][ T4357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6829'. [ 1601.914392][ T4361] veth1_macvtap: left promiscuous mode [ 1602.095550][ T4361] macsec0 (unregistering): left promiscuous mode [ 1603.107821][ T4387] netlink: 'syz.0.6835': attribute type 1 has an invalid length. [ 1603.107885][ T4387] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6835'. [ 1603.255716][ T4391] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6835'. [ 1603.873525][ T4395] can: request_module (can-proto-4) failed. [ 1604.396431][T28696] net_ratelimit: 44 callbacks suppressed [ 1604.396462][T28696] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1604.502855][ T4169] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1604.562801][T31401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1604.592156][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1604.618895][ T4417] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6842'. [ 1604.632835][T12842] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1604.744033][ T4201] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1604.914200][ T1050] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1605.024055][T12842] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1605.144309][T12842] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1605.203874][T29861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1606.676305][ T4480] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11 [ 1606.954929][ T4475] syzkaller1: entered promiscuous mode [ 1606.954994][ T4475] syzkaller1: entered allmulticast mode [ 1606.967668][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805510d800: rx timeout, send abort [ 1607.010310][ T4469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6854'. [ 1607.459985][ T4495] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6861'. [ 1607.472607][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805510d800: abort rx timeout. Force session deactivation [ 1609.187151][ T4536] netlink: 'syz.7.6869': attribute type 21 has an invalid length. [ 1609.402851][T28696] net_ratelimit: 43 callbacks suppressed [ 1609.402877][T28696] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1609.479690][T29865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1609.512551][ T1050] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1609.610378][T12842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1609.623594][T12820] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1609.731898][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1609.732809][T12820] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1609.850251][T12842] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1609.953584][T25529] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1609.983309][ T4560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6873'. [ 1610.103110][T12820] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1610.352582][ T4559] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6875'. [ 1610.396207][ T4566] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6876'. [ 1611.619454][ T4597] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6882'. [ 1611.620461][ T4599] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6882'. [ 1612.937650][ T4623] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6887'. [ 1613.832980][ T4653] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6891'. [ 1613.864433][ T4639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6890'. [ 1614.046787][ T4657] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6892'. [ 1614.581816][ T8917] net_ratelimit: 43 callbacks suppressed [ 1614.581840][ T8917] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1614.643213][T29862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1614.696706][ T1049] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1614.806109][T28696] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1614.911930][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1614.913041][T28696] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1615.026945][ T4203] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1615.133336][ T1049] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1615.244200][ T4200] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1615.352622][T12842] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1615.967904][ T30] audit: type=1800 audit(1794156072.044:33): pid=4698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6899" name="blkio.bfq.time_recursive" dev="tmpfs" ino=866 res=0 errno=-22 [ 1616.302873][ T4704] netlink: 'syz.3.6900': attribute type 11 has an invalid length. [ 1616.416407][ T4710] batadv_slave_1: entered promiscuous mode [ 1616.509329][ T4714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6900'. [ 1616.509501][ T4714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1616.553529][ T4712] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6902'. [ 1616.669840][ T4714] batadv_slave_1 (unregistering): left promiscuous mode [ 1616.669969][ T4714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1617.303078][ T4723] netlink: 'syz.8.6905': attribute type 3 has an invalid length. [ 1617.303103][ T4723] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6905'. [ 1617.591436][ T4721] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6904'. [ 1617.661110][ T4730] batman_adv: batadv0: Adding interface: ipvlan0 [ 1617.661151][ T4730] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1617.661213][ T4730] batman_adv: batadv0: Interface activated: ipvlan0 [ 1617.830975][ T4725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1617.969177][ T4739] netlink: 72 bytes leftover after parsing attributes in process `syz.9.6910'. [ 1618.523098][ T30] audit: type=1800 audit(1794156074.604:34): pid=4756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6899" name="blkio.bfq.time_recursive" dev="tmpfs" ino=866 res=0 errno=-22 [ 1619.418201][ T4777] netlink: 112 bytes leftover after parsing attributes in process `syz.8.6912'. [ 1619.424281][ T4774] veth1_macvtap: left allmulticast mode [ 1619.424798][ T4774] veth1_macvtap: left promiscuous mode [ 1619.515572][ T4782] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6914'. [ 1619.515597][ T4782] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6914'. [ 1619.515616][ T4782] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6914'. [ 1619.761438][ T4774] macsec0: left allmulticast mode [ 1619.762883][ T4774] macsec0: left promiscuous mode [ 1619.972155][T31403] net_ratelimit: 44 callbacks suppressed [ 1619.972201][T31403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1620.152926][T29862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1620.154447][T12826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1620.166593][T29862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1620.197364][T29861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1620.201853][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1620.635948][ T4801] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6917'. [ 1621.125419][ T4169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1621.180515][ T4778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1621.181290][ T4778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1621.211827][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1621.232319][T29863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1622.281927][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1622.775917][ T4778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1623.475649][ T4778] batman_adv: batadv0: Interface deactivated: ipvlan0 [ 1623.786844][ T4778] tipc: Resetting bearer [ 1624.120110][ T4803] __nla_validate_parse: 1 callbacks suppressed [ 1624.120132][ T4803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6918'. [ 1624.181108][ T4807] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6919'. [ 1624.413548][ T4200] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1624.414890][ T4200] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1624.414928][ T4200] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1624.414962][ T4200] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1624.959263][ T4856] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1624.996264][ T4870] net_ratelimit: 13 callbacks suppressed [ 1624.996312][ T4870] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1625.042785][T12826] netdevsim netdevsim7 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 1625.222887][T28704] netdevsim netdevsim7 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 1625.225074][T12820] netdevsim netdevsim7 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 1625.234610][T12842] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1625.234651][T12842] netdevsim netdevsim7 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 1625.343526][T25529] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1625.366562][ T4876] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6925'. [ 1625.402000][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1625.428715][ T4873] netlink: 636 bytes leftover after parsing attributes in process `syz.8.6925'. [ 1625.443822][T29861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1625.452753][ T4200] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1625.562975][ T4200] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1625.726737][ T4880] ip6erspan0: entered allmulticast mode [ 1625.729273][ T4883] netlink: 'syz.3.6926': attribute type 5 has an invalid length. [ 1625.732146][T25529] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1625.752095][ T4882] netlink: 'syz.0.6927': attribute type 2 has an invalid length. [ 1625.752114][ T4882] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6927'. [ 1625.769948][ T4880] netlink: 'syz.3.6926': attribute type 39 has an invalid length. [ 1625.959050][ T4882] netlink: 'syz.0.6927': attribute type 10 has an invalid length. [ 1625.959088][ T4882] dummy0: left promiscuous mode [ 1625.995563][ T4882] team0: Port device dummy0 added [ 1626.006455][T12842] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1626.034939][ T4882] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1626.118184][T25529] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1627.139317][ T4920] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6935'. [ 1627.274868][ T4923] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6933'. [ 1627.660694][ T5297] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1627.695083][ T4927] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6937'. [ 1627.766729][ T4930] netdevsim netdevsim8 netdevsim0: left promiscuous mode [ 1627.766759][ T4930] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 1628.162916][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1628.387579][ T4944] netlink: 104 bytes leftover after parsing attributes in process `syz.7.6942'. [ 1628.912772][ T4955] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6944'. [ 1629.026208][ T4956] netlink: 'syz.9.6945': attribute type 1 has an invalid length. [ 1629.048202][T32439] Bluetooth: hci3: link tx timeout [ 1629.048238][T32439] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1629.053871][T32439] Bluetooth: hci3: link tx timeout [ 1629.053907][T32439] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1629.361910][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1629.503159][ T4973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6948'. [ 1629.609893][ T4982] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6950'. [ 1629.623067][T32439] Bluetooth: unknown link type 128 [ 1629.640647][ T4973] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1629.720263][ T4980] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6949'. [ 1630.089906][ T4200] net_ratelimit: 45 callbacks suppressed [ 1630.089931][ T4200] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1630.194548][T12842] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1630.303007][ T1050] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1630.414430][ T4200] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1630.581923][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1630.643316][ T4831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1630.681154][ T5010] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6956'. [ 1630.703047][ T1049] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1630.713927][ T5020] syzkaller0: left promiscuous mode [ 1630.713948][ T5020] syzkaller0: left allmulticast mode [ 1630.815987][ T1050] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1630.923412][ T1050] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1631.033536][ T4200] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1631.088137][ T5025] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6958'. [ 1631.123100][T32439] Bluetooth: hci3: command 0x0406 tx timeout [ 1631.263941][ T5027] netlink: 'syz.8.6958': attribute type 29 has an invalid length. [ 1631.623387][ T5297] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1631.682747][T27950] Bluetooth: hci5: command 0x0405 tx timeout [ 1631.983430][ T5046] netlink: 'syz.3.6962': attribute type 1 has an invalid length. [ 1632.638476][ T5064] x_tables: duplicate underflow at hook 1 [ 1633.305191][ T5079] netlink: 68 bytes leftover after parsing attributes in process `syz.9.6967'. [ 1633.495151][ T5084] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6970'. [ 1635.181717][ T1050] net_ratelimit: 51 callbacks suppressed [ 1635.181744][ T1050] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1635.301001][T25529] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1635.402870][ T1050] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1635.512455][T10129] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1635.547863][ T5125] netlink: 'syz.9.6979': attribute type 1 has an invalid length. [ 1635.602590][T31404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1635.622580][ T1050] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1635.732626][T12842] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1635.816886][ T5297] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1635.846398][T29861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1635.856786][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1635.862242][T12820] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1636.799504][ T5145] ip6t_rpfilter: unknown options [ 1636.819673][ T5145] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6984'. [ 1636.834834][ T5145] 8021q: VLANs not supported on sit0 [ 1637.311105][ T5158] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6987'. [ 1637.780599][ T30] audit: type=1800 audit(1794156093.854:35): pid=5177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.6992" name=CB dev="tmpfs" ino=2245 res=0 errno=-22 [ 1638.128996][ T5188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6994'. [ 1638.142558][ T5188] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6994'. [ 1638.413541][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1639.449177][ T5191] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6995'. [ 1639.893888][ T5297] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1639.924857][ T5218] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input12 [ 1640.087028][ T5231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7003'. [ 1640.132839][ T5230] netlink: 'syz.9.7002': attribute type 4 has an invalid length. [ 1640.132903][ T5230] netlink: 5620 bytes leftover after parsing attributes in process `syz.9.7002'. [ 1640.323790][ T1050] net_ratelimit: 36 callbacks suppressed [ 1640.323812][ T1050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.440245][ T5231] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1640.463410][T12842] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1640.572076][ T4200] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1640.682031][T12820] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1640.794596][T10129] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1640.903470][T12820] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1640.941807][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1641.020354][T12826] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1641.049438][ T4831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1641.128783][T10129] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1641.371559][ T5266] netlink: 'syz.8.7007': attribute type 1 has an invalid length. [ 1641.371584][ T5266] netlink: 244 bytes leftover after parsing attributes in process `syz.8.7007'. [ 1641.610527][ T5279] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7009'. [ 1644.399532][ T5352] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7028'. [ 1645.040645][ T5378] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7029'. [ 1645.040719][ T5378] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1645.089858][ T5374] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7032'. [ 1645.089887][ T5374] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7032'. [ 1645.089904][ T5374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7032'. [ 1645.104429][ T5374] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7032'. [ 1645.362339][ C0] net_ratelimit: 37 callbacks suppressed [ 1645.362381][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1645.363135][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1645.363881][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1645.411949][ T5385] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7033'. [ 1645.491909][T12820] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1645.531348][ T5389] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7033'. [ 1645.604794][ T4200] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1645.712407][T12826] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1645.831941][T28696] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1645.942005][ T8917] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1646.053800][ T8917] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1646.088284][T12842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1646.368824][ T5404] bond9: option mode: invalid value (7) [ 1646.382672][ T5404] bond9 (unregistering): Released all slaves [ 1647.184353][ T5430] x_tables: duplicate underflow at hook 1 [ 1647.216572][ T5430] Bluetooth: MGMT ver 1.23 [ 1647.221988][ T5430] sctp: [Deprecated]: syz.7.7042 (pid 5430) Use of int in maxseg socket option. [ 1647.221988][ T5430] Use struct sctp_assoc_value instead [ 1647.870482][ T5297] veth1_macvtap: entered promiscuous mode [ 1649.029232][ T5464] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7047'. [ 1649.233038][ T5469] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7047'. [ 1650.290269][ T5497] netlink: 'syz.8.7053': attribute type 4 has an invalid length. [ 1650.383578][ C0] net_ratelimit: 47 callbacks suppressed [ 1650.383623][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1650.407969][T28704] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1650.408739][ T4831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1650.535164][T12820] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1650.644459][T12820] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1650.753183][ T1050] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1650.813594][T31405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1650.882488][T12820] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1650.994772][T12842] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1651.106600][T12842] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1651.596373][ T5455] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1651.875515][ T5510] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7058'. [ 1652.124028][ T5512] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7059'. [ 1653.799746][ T5558] syzkaller0: entered promiscuous mode [ 1653.799771][ T5558] syzkaller0: entered allmulticast mode [ 1654.113515][ T5576] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7072'. [ 1654.196153][ T5576] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1654.265654][ T5579] lo: entered promiscuous mode [ 1654.265853][ T5579] bond13: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1654.280429][ T5579] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1654.347640][ T5579] bond13: (slave lo): Enslaving as an active interface with an up link [ 1655.041995][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1655.492547][ T4200] net_ratelimit: 42 callbacks suppressed [ 1655.492572][ T4200] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1655.531799][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1655.606710][ T4200] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1655.683151][T29861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1655.722751][ T4169] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1655.840294][T10129] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1655.943116][T12826] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1656.013577][ T5537] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1656.059747][T25529] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1656.120025][ T5607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7076'. [ 1656.120053][ T5607] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7076'. [ 1656.120069][ T5607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7076'. [ 1656.120276][ T5607] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7076'. [ 1656.120293][ T5607] netlink: 'syz.0.7076': attribute type 6 has an invalid length. [ 1656.184616][ T5612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7076'. [ 1656.184642][ T5612] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7076'. [ 1656.184660][ T5612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7076'. [ 1656.184846][ T5612] netlink: 'syz.0.7076': attribute type 6 has an invalid length. [ 1656.187189][ T4200] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1656.306168][ T1050] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1657.040380][ T5636] __nla_validate_parse: 5 callbacks suppressed [ 1657.040405][ T5636] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7078'. [ 1660.047254][ T5641] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1660.339695][ T5683] netlink: 'syz.9.7091': attribute type 11 has an invalid length. [ 1660.447964][ T5689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7095'. [ 1660.465254][ T5688] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7093'. [ 1660.465287][ T5688] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7093'. [ 1660.507707][ T5691] IPVS: set_ctl: invalid protocol: 255 100.1.1.2:20000 [ 1660.510050][ T5691] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20265 [ 1660.614506][ T5698] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7092'. [ 1660.711925][ C0] net_ratelimit: 47 callbacks suppressed [ 1660.711984][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1660.846020][T10129] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1660.884919][ T4831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1660.900682][ T5709] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1660.988400][ T4169] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1661.097589][T25529] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1661.474225][T10129] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1661.475830][ T5730] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7103'. [ 1661.542227][ T5736] xt_hashlimit: size too large, truncated to 1048576 [ 1661.582827][T25529] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1661.664591][ T5723] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7103'. [ 1661.692890][T12842] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1661.807195][ T4200] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1661.842192][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1662.523579][ T5757] can: request_module (can-proto-0) failed. [ 1662.778118][ T5782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7110'. [ 1662.778143][ T5782] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7110'. [ 1662.778160][ T5782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7110'. [ 1663.624427][ T5799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7115'. [ 1663.644230][ T30] audit: type=1804 audit(1794156119.714:36): pid=5798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.7114" name="/newroot/289/memory.events" dev="tmpfs" ino=1497 res=1 errno=0 [ 1663.644287][ T30] audit: type=1800 audit(1794156119.714:37): pid=5798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.7114" name="memory.events" dev="tmpfs" ino=1497 res=0 errno=-22 [ 1663.650914][ T30] audit: type=1804 audit(1794156119.734:38): pid=5798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.7114" name="/newroot/289/memory.events" dev="tmpfs" ino=1497 res=1 errno=0 [ 1663.930424][ T5808] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7118'. [ 1664.039597][ T5811] netlink: 96 bytes leftover after parsing attributes in process `syz.7.7118'. [ 1664.078680][ T5811] netlink: 96 bytes leftover after parsing attributes in process `syz.7.7118'. [ 1664.297713][ T5821] netlink: 'syz.0.7119': attribute type 30 has an invalid length. [ 1664.330537][ T5813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7119'. [ 1664.358593][ T5814] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7118'. [ 1664.391285][ T5823] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1664.487860][ T5799] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7115'. [ 1664.563134][T27950] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1665.789091][ T1049] net_ratelimit: 44 callbacks suppressed [ 1665.789115][ T1049] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1665.893396][ T1049] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1665.922288][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1666.002871][ T4845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1666.004087][T10129] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1666.113058][T10129] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1666.225307][ T4203] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1666.243829][ T4832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1666.334973][T28704] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1666.445085][ T4200] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1666.969251][ T5870] netlink: 'syz.0.7131': attribute type 1 has an invalid length. [ 1667.126921][ T5870] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1667.127488][ T5864] tc_dump_action: action bad kind [ 1668.247368][ T5890] bond2: option updelay: invalid value (18446744073709518847) [ 1668.247396][ T5890] bond2: option updelay: allowed values 0 - 2147483647 [ 1668.285495][ T5890] bond2 (unregistering): Released all slaves [ 1668.637147][ T5887] ovs-dp0: entered promiscuous mode [ 1670.379312][ T5954] netlink: 'syz.0.7147': attribute type 1 has an invalid length. [ 1670.379334][ T5954] nbd: error processing sock list [ 1670.379624][ T5954] block nbd10: shutting down sockets [ 1670.505200][ T5937] rxe_eth0 speed is unknown, defaulting to 1000 [ 1670.891746][T12826] net_ratelimit: 43 callbacks suppressed [ 1670.891804][T12826] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1670.962132][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1670.962617][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1671.047171][ T4169] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1671.072070][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1671.153634][T10129] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1671.371582][T12826] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1671.447249][ T4832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1671.676457][T25529] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1671.737081][ T5977] __nla_validate_parse: 5 callbacks suppressed [ 1671.737102][ T5977] netlink: 71 bytes leftover after parsing attributes in process `syz.3.7153'. [ 1671.894130][ T5978] SET target dimension over the limit! [ 1672.067878][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7151'. [ 1672.206452][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1672.722258][T27950] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1672.722861][T27950] Bluetooth: hci3: command 0x0406 tx timeout [ 1673.227772][ T6005] 8021q: VLANs not supported on xfrm0 [ 1673.348240][ T5937] lo speed is unknown, defaulting to 1000 [ 1674.516448][ T6045] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7163'. [ 1674.904596][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7164'. [ 1674.957885][ T5937] wg2 speed is unknown, defaulting to 1000 [ 1676.042372][T28696] net_ratelimit: 31 callbacks suppressed [ 1676.042435][T28696] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1676.241059][T28704] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1676.368470][ T1049] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1676.471934][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1676.476580][ T1049] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1676.581682][ T1049] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1676.641337][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7172'. [ 1676.652282][ T4832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1676.662602][ T6085] ip6tnl0: entered promiscuous mode [ 1676.700083][ T8917] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1676.823849][T28696] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1676.942077][ T4200] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1676.962680][T27950] Bluetooth: hci3: command 0x0406 tx timeout [ 1678.446486][ T6115] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7181'. [ 1679.356539][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7184'. [ 1679.640325][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7182'. [ 1679.653140][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7182'. [ 1679.705155][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7182'. [ 1679.842366][T27950] Bluetooth: hci3: command 0x0406 tx timeout [ 1679.842434][ T5776] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1680.124590][ T6151] netlink: 'syz.9.7187': attribute type 9 has an invalid length. [ 1680.465183][ T6164] netlink: 'syz.3.7190': attribute type 5 has an invalid length. [ 1680.692360][ T6167] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 1681.133135][T12826] net_ratelimit: 36 callbacks suppressed [ 1681.133158][T12826] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1681.201843][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1681.202261][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1681.202654][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1681.243554][ T8917] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1681.336230][ T6180] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7194'. [ 1681.407709][ T4845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1681.529543][ T4203] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1681.662216][T10129] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1681.672016][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1681.844661][T29862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1682.428486][ T6207] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7197'. [ 1683.978497][ T6227] gre2: entered promiscuous mode [ 1683.995171][ T6237] netlink: 'syz.7.7202': attribute type 1 has an invalid length. [ 1684.498347][ T6245] dummy0: left promiscuous mode [ 1684.499675][ T6245] batman_adv: batadv0: Adding interface: dummy0 [ 1684.499692][ T6245] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1684.499910][ T6245] batman_adv: batadv0: Interface activated: dummy0 [ 1684.701424][ T6237] geneve3: entered promiscuous mode [ 1685.057889][ T6259] ip6gretap0: entered promiscuous mode [ 1685.116086][ T6259] ip6gretap0: left promiscuous mode [ 1685.632078][ T6265] erspan0: entered promiscuous mode [ 1685.973838][ T6280] xt_IDLETIMER: label is empty or not nul-terminated [ 1686.210378][ T1050] net_ratelimit: 54 callbacks suppressed [ 1686.210402][ T1050] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1686.312725][T28696] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1686.423919][ T1049] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1686.534510][ T1049] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1686.645477][ T4169] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1686.752372][T28696] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1686.862233][T28696] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1686.951851][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1686.974810][T28704] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1687.042035][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1687.088595][T25529] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1687.220057][ T6303] tipc: Enabled bearer , priority 10 [ 1687.349935][ T6302] IPv6: Can't replace route, no match found [ 1687.647533][ T6319] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7220'. [ 1687.665573][ T6318] netlink: 256 bytes leftover after parsing attributes in process `syz.9.7219'. [ 1687.967173][ T6298] tipc: Disabling bearer [ 1688.059948][ T6319] xt_NETMAP: bad MAP_IPS. [ 1688.770845][ T6344] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7226'. [ 1688.771242][ T6344] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7226'. [ 1688.890778][ T6348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7225'. [ 1688.968752][ T6351] Bluetooth: ISO socket layer initialized [ 1689.135605][ T6341] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7225'. [ 1689.156797][ T6362] netlink: 'syz.3.7228': attribute type 10 has an invalid length. [ 1689.711309][ T6371] wg1: entered promiscuous mode [ 1690.199365][ T6395] netlink: 44 bytes leftover after parsing attributes in process `syz.8.7235'. [ 1690.364930][ T6395] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7235'. [ 1690.365041][ T6395] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7235'. [ 1691.058035][ T6422] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7238'. [ 1691.211865][T12820] net_ratelimit: 41 callbacks suppressed [ 1691.211890][T12820] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1691.282206][T29862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1691.434559][T28704] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1691.548475][T12820] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1691.796323][ T4201] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1691.901850][T12820] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1692.011836][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1692.015669][T28704] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1692.082398][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1692.083149][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1693.003864][ T6479] tipc: Started in network mode [ 1693.003963][ T6479] tipc: Node identity 72ba2fbf380f, cluster identity 4711 [ 1693.004553][ T6479] tipc: Enabled bearer , priority 0 [ 1693.125924][ T6470] tipc: Resetting bearer [ 1693.405010][ T6470] tipc: Disabling bearer [ 1693.891118][ T6521] __nla_validate_parse: 2 callbacks suppressed [ 1693.891179][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7254'. [ 1693.952234][ T6521] bridge_slave_1: left allmulticast mode [ 1693.952321][ T6521] bridge_slave_1: left promiscuous mode [ 1693.953217][ T6521] bridge0: port 2(bridge_slave_1) entered disabled state [ 1694.062102][ T6521] bridge_slave_0: left allmulticast mode [ 1694.062129][ T6521] bridge_slave_0: left promiscuous mode [ 1694.080768][ T6521] bridge0: port 1(bridge_slave_0) entered disabled state [ 1694.116004][ T6537] netlink: 48 bytes leftover after parsing attributes in process `syz.8.7253'. [ 1695.069963][ T6555] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7259'. [ 1695.296051][ T6569] syzkaller0: entered promiscuous mode [ 1695.296118][ T6569] syzkaller0: entered allmulticast mode [ 1695.918683][ T6588] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7265'. [ 1696.293506][T12836] net_ratelimit: 41 callbacks suppressed [ 1696.293530][T12836] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1696.318814][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1696.406811][ T6534] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1696.482958][ T4832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1696.512916][ T6533] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1696.622574][ T6534] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1696.702400][ T6610] syzkaller1: entered promiscuous mode [ 1696.702425][ T6610] syzkaller1: entered allmulticast mode [ 1696.802441][T31405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1696.882933][ T6534] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1696.951939][ T6618] netlink: 'syz.7.7275': attribute type 61 has an invalid length. [ 1696.995024][ T6533] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1697.231823][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1697.439082][ T6634] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7279'. [ 1697.663686][ T6638] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1698.120773][ T6645] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7283'. [ 1698.187264][ T6650] netlink: 'syz.3.7282': attribute type 1 has an invalid length. [ 1698.268684][ T6653] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7282'. [ 1698.360350][ T6650] bond2: option mode: invalid value (7) [ 1698.379038][ T6650] bond2 (unregistering): Released all slaves [ 1698.525768][ T6670] netlink: 'syz.3.7282': attribute type 10 has an invalid length. [ 1698.525831][ T6670] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7282'. [ 1699.426624][ T6686] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7291'. [ 1699.479677][ T6688] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7291'. [ 1699.507115][ T6685] syzkaller1: entered promiscuous mode [ 1699.507137][ T6685] syzkaller1: entered allmulticast mode [ 1699.811122][ T6694] bond13: (slave lo): Releasing backup interface [ 1699.849732][ T6694] bond13: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1699.998903][ T6700] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7295'. [ 1700.519414][ T6694] vlan0: entered promiscuous mode [ 1700.638736][ T4832] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1701.075030][ T6722] netlink: 'syz.3.7300': attribute type 49 has an invalid length. [ 1701.088393][ T6712] : option downdelay: invalid value (18446744073709547007) [ 1701.088419][ T6712] : option downdelay: allowed values 0 - 2147483647 [ 1701.108090][ T6712]  (unregistering): Released all slaves [ 1701.212429][T29863] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1701.411824][ C0] net_ratelimit: 30 callbacks suppressed [ 1701.411882][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1701.532159][ T6534] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1701.688103][ T4832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1701.728319][ T6715] : option downdelay: invalid value (18446744073709547007) [ 1701.728345][ T6715] : option downdelay: allowed values 0 - 2147483647 [ 1701.738268][ T6715]  (unregistering): Released all slaves [ 1701.932914][T12817] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1701.950863][ T6725] 8021q: VLANs not supported on syzkaller0 [ 1701.963097][ T6534] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1702.073014][T12817] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1702.184793][ T6525] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1702.266015][ T6743] netlink: 'syz.0.7303': attribute type 11 has an invalid length. [ 1702.266043][ T6743] netlink: 'syz.0.7303': attribute type 11 has an invalid length. [ 1702.266056][ T6743] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7303'. [ 1702.292646][ T6525] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1702.410351][ T6533] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1702.441850][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1702.451653][ T6746] sctp: [Deprecated]: syz.3.7304 (pid 6746) Use of int in max_burst socket option deprecated. [ 1702.451653][ T6746] Use struct sctp_assoc_value instead [ 1702.498801][ T6746] sctp: [Deprecated]: syz.3.7304 (pid 6746) Use of int in max_burst socket option deprecated. [ 1702.498801][ T6746] Use struct sctp_assoc_value instead [ 1702.512845][T12817] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1702.624873][ T6749] netlink: 44 bytes leftover after parsing attributes in process `syz.9.7305'. [ 1702.624940][ T6749] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7305'. [ 1702.785936][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7305'. [ 1702.994549][ T6524] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1702.994814][ T6524] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1703.684124][T29863] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1704.060918][ T6775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7313'. [ 1704.134007][ T6775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7313'. [ 1704.134044][ T6775] netlink: 'syz.3.7313': attribute type 15 has an invalid length. [ 1704.201261][ T6777] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7314'. [ 1704.244679][ T6534] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 1704.245086][ T6534] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 1704.245171][ T6534] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 1704.245233][ T6534] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 1704.253266][ T6775] netlink: 'syz.3.7313': attribute type 15 has an invalid length. [ 1704.759072][ T6787] __nla_validate_parse: 4 callbacks suppressed [ 1704.759093][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7318'. [ 1704.759108][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7318'. [ 1704.759131][ T6787] netlink: 'syz.3.7318': attribute type 18 has an invalid length. [ 1705.825303][ T6809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7323'. [ 1706.299719][ T6813] bridge8: entered promiscuous mode [ 1706.299777][ T6813] bridge8: entered allmulticast mode [ 1706.542262][ T6533] net_ratelimit: 45 callbacks suppressed [ 1706.542284][ T6533] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1706.610794][ T6821] sctp: [Deprecated]: syz.0.7328 (pid 6821) Use of int in max_burst socket option. [ 1706.610794][ T6821] Use struct sctp_assoc_value instead [ 1706.620175][ T6823] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7329'. [ 1706.628575][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1706.652715][ T6504] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1706.763730][ T6533] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1706.799493][ T6823] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 1706.800872][ T6824] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 1706.801918][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1706.802298][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1706.802646][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1706.803197][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1706.873593][ T6524] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1706.884580][T29863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1706.985859][T12836] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1707.004411][ T6831] sctp: [Deprecated]: syz.8.7330 (pid 6831) Use of int in maxseg socket option. [ 1707.004411][ T6831] Use struct sctp_assoc_value instead [ 1707.813751][ T6857] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1707.904635][ T6862] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7337'. [ 1708.440445][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7338'. [ 1709.066138][ T6889] netlink: 84 bytes leftover after parsing attributes in process `syz.7.7345'. [ 1709.075475][ T6889] netlink: 'syz.7.7345': attribute type 26 has an invalid length. [ 1709.350492][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7344'. [ 1709.350669][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7344'. [ 1709.350826][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7344'. [ 1711.049937][ T6937] block nbd10: server does not support multiple connections per device. [ 1711.053397][ T6937] block nbd10: shutting down sockets [ 1711.089426][ T6937] __nla_validate_parse: 62 callbacks suppressed [ 1711.089447][ T6937] netlink: 176 bytes leftover after parsing attributes in process `syz.3.7352'. [ 1711.346244][ T6947] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7353'. [ 1711.347713][ T6946] tap0: tun_chr_ioctl cmd 1074025680 [ 1711.397771][ T6941] IPVS: Scheduler module ip_vs_sip not found [ 1711.690247][ T6949] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7355'. [ 1711.734071][ T6949] net_ratelimit: 41 callbacks suppressed [ 1711.734094][ T6949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1711.752004][T12836] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1711.831839][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1711.863906][ T6503] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1711.974740][ T6524] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1712.004890][ T4845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1712.082319][T29863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1712.083401][ T6503] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1712.145992][ T6956] openvswitch: netlink: Key 6 has unexpected len 13 expected 2 [ 1712.192328][ T4203] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1712.498686][ T6964] netlink: 'syz.7.7361': attribute type 89 has an invalid length. [ 1712.556237][ T6968] netlink: 'syz.3.7363': attribute type 31 has an invalid length. [ 1713.143543][ T6983] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1713.184472][ T6980] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1713.715951][ T7001] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7372'. [ 1713.716158][ T7002] netlink: 'syz.0.7374': attribute type 62 has an invalid length. [ 1713.817947][ T6996] block nbd0: reconnected socket [ 1713.845944][ T6996] netlink: 'syz.3.7371': attribute type 9 has an invalid length. [ 1713.849547][ T6999] netlink: 'syz.3.7371': attribute type 9 has an invalid length. [ 1714.167476][ T5776] block nbd0: Receive control failed (result -32) [ 1714.275667][ T7011] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7376'. [ 1714.333718][ T7011] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7376'. [ 1714.415755][ T7015] netlink: 'syz.7.7378': attribute type 10 has an invalid length. [ 1714.440418][ T7015] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1714.442282][ T7015] team0: Port device netdevsim1 added [ 1714.460672][ T7017] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1714.460906][ T7018] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7379'. [ 1714.562088][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1714.747528][ T7024] netlink: 'syz.3.7380': attribute type 30 has an invalid length. [ 1715.542768][ T7055] sctp: [Deprecated]: syz.7.7387 (pid 7055) Use of int in max_burst socket option. [ 1715.542768][ T7055] Use struct sctp_assoc_value instead [ 1715.575986][ T7055] netlink: 'syz.7.7387': attribute type 1 has an invalid length. [ 1715.607709][ T7055] erspan0: entered promiscuous mode [ 1715.622666][ T7057] netlink: 'syz.7.7387': attribute type 1 has an invalid length. [ 1715.944443][ T7062] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7390'. [ 1716.049891][ T7065] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7392'. [ 1716.772868][ T13] net_ratelimit: 45 callbacks suppressed [ 1716.772892][ T13] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1716.896356][T12817] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1716.939726][ T7091] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7394'. [ 1717.002662][T12836] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1717.032047][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1717.113033][ T6534] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1717.231123][T12836] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1717.282936][T29863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1717.334668][ T6528] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1717.436413][ T7097] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7396'. [ 1717.450509][ T6524] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1717.552715][T12836] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1717.658484][ T7099] netlink: 'syz.3.7398': attribute type 4 has an invalid length. [ 1717.686604][ T7100] netlink: 'syz.3.7398': attribute type 4 has an invalid length. [ 1717.771290][ T7100] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 1719.055965][ T7133] netlink: 'syz.3.7407': attribute type 1 has an invalid length. [ 1719.830737][ T7146] netlink: 'syz.8.7412': attribute type 3 has an invalid length. [ 1720.103366][ T7150] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.7414'. [ 1720.216694][ T7150] ip6tnl1: entered allmulticast mode [ 1720.255429][ T7155] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.7414'. [ 1720.283841][ T7157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1720.289384][ T7157] batman_adv: batadv0: Removing interface: ipvlan0 [ 1720.594003][ T7168] bond11: Removing last arp target with arp_interval on [ 1720.594060][ T7168] bond11: Removing last ns target with arp_interval on [ 1720.840702][T12836] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1720.844267][T12836] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1720.865122][T29863] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1720.944941][T29863] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1721.126333][T29863] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1721.469968][ T7195] sctp: [Deprecated]: syz.3.7424 (pid 7195) Use of int in max_burst socket option. [ 1721.469968][ T7195] Use struct sctp_assoc_value instead [ 1721.470871][ T7197] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7424'. [ 1721.502784][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7428'. [ 1721.629976][T27950] Bluetooth: hci5: unexpected event for opcode 0x0c6d [ 1721.958343][ T7215] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7426'. [ 1722.321051][ T7205] gretap0: entered promiscuous mode [ 1722.331808][ C0] net_ratelimit: 45 callbacks suppressed [ 1722.331845][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1722.378831][ T6525] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1722.482451][T29863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1722.689505][ T7218] vti0: entered promiscuous mode [ 1722.689530][ T7218] vti0: entered allmulticast mode [ 1722.803940][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1722.804922][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1722.805854][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1722.983800][ T6525] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1723.091950][ T6524] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1723.220751][ T6525] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1723.252125][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1724.738330][ T7274] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7439'. [ 1725.020393][ T7280] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7442'. [ 1725.114320][ T7282] syzkaller1: entered promiscuous mode [ 1725.114345][ T7282] syzkaller1: entered allmulticast mode [ 1725.201774][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1725.841306][ T7309] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7446'. [ 1726.273246][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7437'. [ 1726.273292][ T7257] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7437'. [ 1726.388143][ T7319] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7448'. [ 1726.389246][ T7320] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7448'. [ 1726.632736][ T13] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 1726.632774][ T13] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1727.431973][ C0] net_ratelimit: 44 callbacks suppressed [ 1727.432031][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.626939][ T7347] xt_hashlimit: size too large, truncated to 1048576 [ 1727.639317][ T6524] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1727.734050][ T7346] netlink: 45349 bytes leftover after parsing attributes in process `syz.8.7457'. [ 1727.734832][ T7346] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 1727.778887][ T7346] 0ªX¹¦Dö»: entered allmulticast mode [ 1727.787786][ T6522] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1727.844396][T29862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.894738][T12826] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1728.176623][ T7346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1728.207933][ T6525] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1728.228718][ T7356] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7459'. [ 1728.468388][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1728.472476][ T6525] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1728.527424][ T7362] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7462'. [ 1728.583111][ T13] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1728.863711][ T7368] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7463'. [ 1728.866290][ T7368] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7463'. [ 1728.897378][ T7368] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7463'. [ 1728.918604][ T7382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7464'. [ 1728.930141][ T7368] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7463'. [ 1729.157714][ T7382] bond3: entered promiscuous mode [ 1729.164132][ T7382] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1729.169458][ T7386] syzkaller0: left promiscuous mode [ 1729.169513][ T7386] syzkaller0: left allmulticast mode [ 1729.409485][ T7359] virtio_blk virtio6: 1/0/0 default/read/poll queues [ 1729.411974][ T7359] virtio_blk virtio6: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 1729.534751][ T7391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7466'. [ 1729.704247][ T7391] bond4: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 1729.726049][ T7391] bond4 (unregistering): Released all slaves [ 1730.301077][ T7405] syzkaller0: entered promiscuous mode [ 1730.301102][ T7405] syzkaller0: entered allmulticast mode [ 1730.489841][ T7411] tipc: Enabled bearer , priority 0 [ 1730.549376][ T7400] tipc: Resetting bearer [ 1730.565286][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1730.766846][ T7400] tipc: Disabling bearer [ 1730.877458][ T7416] netlink: 'syz.3.7472': attribute type 4 has an invalid length. [ 1730.877483][ T7416] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7472'. [ 1731.011720][ T7427] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 1731.011787][ T7427] syzkaller1: ignored: set checksum enabled [ 1732.294903][ T7449] vlan4: entered promiscuous mode [ 1732.483116][ T6533] net_ratelimit: 32 callbacks suppressed [ 1732.483139][ T6533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1732.531923][ T7454] openvswitch: netlink: Invalid VLAN frame [ 1732.543421][T12817] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1732.651846][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1732.654396][T12826] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1732.752706][ T7459] __nla_validate_parse: 2 callbacks suppressed [ 1732.752768][ T7459] netlink: 200 bytes leftover after parsing attributes in process `syz.3.7483'. [ 1732.770461][ T6503] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1732.902162][T12826] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1733.023474][ T6522] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1733.126009][T29862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.142032][ T6534] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1733.283085][ T7472] syzkaller0: left allmulticast mode [ 1734.226706][ T7495] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7493'. [ 1734.409690][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1734.433337][ T7499] netlink: 48 bytes leftover after parsing attributes in process `syz.8.7495'. [ 1734.926605][ T7506] netlink: 'syz.9.7496': attribute type 1 has an invalid length. [ 1734.926668][ T7506] netlink: 'syz.9.7496': attribute type 1 has an invalid length. [ 1734.926705][ T7506] netlink: 'syz.9.7496': attribute type 1 has an invalid length. [ 1734.926766][ T7506] netlink: 272 bytes leftover after parsing attributes in process `syz.9.7496'. [ 1734.927191][ T7506] netlink: 76 bytes leftover after parsing attributes in process `syz.9.7496'. [ 1735.214988][ T7512] netlink: 9 bytes leftover after parsing attributes in process `syz.7.7500'. [ 1736.163139][ T7540] x_tables: duplicate underflow at hook 1 [ 1736.956505][ T7564] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7509'. [ 1737.545510][ T6522] net_ratelimit: 45 callbacks suppressed [ 1737.545536][ T6522] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1737.607271][T12817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1737.641229][ T7579] x_tables: duplicate underflow at hook 3 [ 1737.652724][ T6493] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1737.695058][ T7579] rxe_eth0 speed is unknown, defaulting to 1000 [ 1737.773477][T12817] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1737.887152][T12826] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1737.891863][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1737.995655][ T6503] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1738.106770][ T6524] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1738.128819][ T7586] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7515'. [ 1738.162046][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.162534][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.213142][ T7579] lo speed is unknown, defaulting to 1000 [ 1738.358705][ T7588] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7515'. [ 1738.780493][ T7595] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7517'. [ 1738.897475][ T7595] syzkaller1: entered promiscuous mode [ 1738.897500][ T7595] syzkaller1: entered allmulticast mode [ 1739.294771][ T7613] FAULT_INJECTION: forcing a failure. [ 1739.294771][ T7613] name failslab, interval 1, probability 0, space 0, times 0 [ 1739.294843][ T7613] CPU: 0 UID: 0 PID: 7613 Comm: syz.9.7521 Not tainted syzkaller #0 PREEMPT(full) [ 1739.294871][ T7613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1739.294884][ T7613] Call Trace: [ 1739.294893][ T7613] [ 1739.294904][ T7613] dump_stack_lvl+0xe8/0x150 [ 1739.294946][ T7613] should_fail_ex+0x3eb/0x540 [ 1739.294980][ T7613] ? __alloc_skb+0x1db/0x7a0 [ 1739.295005][ T7613] should_failslab+0xa8/0x100 [ 1739.295030][ T7613] ? __alloc_skb+0x1db/0x7a0 [ 1739.295049][ T7613] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 1739.295079][ T7613] ? __alloc_skb+0x1db/0x7a0 [ 1739.295108][ T7613] __alloc_skb+0x1db/0x7a0 [ 1739.295134][ T7613] netlink_sendmsg+0x5cd/0xb20 [ 1739.295165][ T7613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1739.295192][ T7613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1739.295213][ T7613] ? sock_sendmsg_nosec+0x13c/0x190 [ 1739.295247][ T7613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1739.295266][ T7613] sock_sendmsg_nosec+0x14e/0x190 [ 1739.295298][ T7613] ____sys_sendmsg+0x54e/0x850 [ 1739.295329][ T7613] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1739.295363][ T7613] ? import_iovec+0x73/0xa0 [ 1739.295395][ T7613] ___sys_sendmsg+0x2a5/0x360 [ 1739.295417][ T7613] ? __lock_acquire+0x747/0x2de0 [ 1739.295456][ T7613] ? __pfx____sys_sendmsg+0x10/0x10 [ 1739.295489][ T7613] ? check_preemption_disabled+0x6/0xd0 [ 1739.295552][ T7613] ? __fget_files+0x3a2/0x420 [ 1739.295579][ T7613] ? __fget_files+0x2a/0x420 [ 1739.295615][ T7613] __x64_sys_sendmsg+0x1b1/0x290 [ 1739.295642][ T7613] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1739.295690][ T7613] do_syscall_64+0x166/0x520 [ 1739.295724][ T7613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1739.295746][ T7613] ? clear_bhb_loop+0x70/0xc0 [ 1739.295772][ T7613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1739.295792][ T7613] RIP: 0033:0x7f3bfc99fb19 [ 1739.295813][ T7613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1739.295829][ T7613] RSP: 002b:00007f3bfd8fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1739.295852][ T7613] RAX: ffffffffffffffda RBX: 00007f3bfcc25fa0 RCX: 00007f3bfc99fb19 [ 1739.295867][ T7613] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1739.295881][ T7613] RBP: 00007f3bfd8fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1739.295894][ T7613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1739.295906][ T7613] R13: 00007f3bfcc26038 R14: 00007f3bfcc25fa0 R15: 00007ffcc9a3c1c8 [ 1739.295941][ T7613] [ 1739.674529][ T6533] IPVS: starting estimator thread 0... [ 1739.768688][ T7616] IPVS: using max 26 ests per chain, 62400 per kthread [ 1739.994890][ T7579] wg2 speed is unknown, defaulting to 1000 [ 1740.232045][ T7625] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7523'. [ 1740.677280][ T7631] netlink: 108 bytes leftover after parsing attributes in process `syz.8.7525'. [ 1740.703736][ T7632] macvlan4: entered promiscuous mode [ 1740.703761][ T7632] macvlan4: entered allmulticast mode [ 1740.704959][ T7632] bond9: entered promiscuous mode [ 1740.705127][ T7632] bond9: entered allmulticast mode [ 1740.705833][ T7632] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1740.794825][ T7632] bond9: left allmulticast mode [ 1740.794855][ T7632] bond9: left promiscuous mode [ 1740.949191][ T7643] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7528'. [ 1741.124715][ T7645] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1741.184030][ T7643] [ 1741.186426][ T7643] ====================================================== [ 1741.193489][ T7643] WARNING: possible circular locking dependency detected [ 1741.200593][ T7643] syzkaller #0 Not tainted [ 1741.205023][ T7643] ------------------------------------------------------ [ 1741.212050][ T7643] syz.9.7528/7643 is trying to acquire lock: [ 1741.218043][ T7643] ffff888058a2d018 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb6/0x2f0 [ 1741.227038][ T7643] [ 1741.227038][ T7643] but task is already holding lock: [ 1741.234424][ T7643] ffff888029ab3d68 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 1741.243894][ T7643] [ 1741.243894][ T7643] which lock already depends on the new lock. [ 1741.243894][ T7643] [ 1741.254316][ T7643] [ 1741.254316][ T7643] the existing dependency chain (in reverse order) is: [ 1741.263345][ T7643] [ 1741.263345][ T7643] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 1741.271277][ T7643] __mutex_lock+0x197/0x15a0 [ 1741.276427][ T7643] elevator_change+0x1af/0x480 [ 1741.281741][ T7643] elevator_set_none+0xb5/0x140 [ 1741.287141][ T7643] blk_mq_update_nr_hw_queues+0x60b/0x1b70 [ 1741.293516][ T7643] nbd_start_device+0x189/0xb30 [ 1741.298991][ T7643] nbd_genl_connect+0x167d/0x1cd0 [ 1741.304554][ T7643] genl_family_rcv_msg_doit+0x233/0x340 [ 1741.310647][ T7643] genl_rcv_msg+0x614/0x7a0 [ 1741.315696][ T7643] netlink_rcv_skb+0x226/0x4a0 [ 1741.321011][ T7643] genl_rcv+0x28/0x40 [ 1741.325537][ T7643] netlink_unicast+0x8ef/0xa80 [ 1741.330851][ T7643] netlink_sendmsg+0x7f0/0xb20 [ 1741.336161][ T7643] sock_sendmsg_nosec+0x14e/0x190 [ 1741.341737][ T7643] ____sys_sendmsg+0x54e/0x850 [ 1741.347046][ T7643] ___sys_sendmsg+0x2a5/0x360 [ 1741.352277][ T7643] __x64_sys_sendmsg+0x1b1/0x290 [ 1741.357757][ T7643] do_syscall_64+0x166/0x520 [ 1741.362896][ T7643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1741.369333][ T7643] [ 1741.369333][ T7643] -> #5 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 1741.377965][ T7643] blk_alloc_queue+0x544/0x690 [ 1741.383277][ T7643] __blk_mq_alloc_disk+0x194/0x390 [ 1741.388933][ T7643] nbd_dev_add+0x494/0xb60 [ 1741.393884][ T7643] nbd_init+0x168/0x1f0 [ 1741.398656][ T7643] do_one_initcall+0x250/0x870 [ 1741.403960][ T7643] do_initcall_level+0x10a/0x1a0 [ 1741.409509][ T7643] do_initcalls+0x59/0xa0 [ 1741.414389][ T7643] kernel_init_freeable+0x29d/0x3e0 [ 1741.420127][ T7643] kernel_init+0x22/0x1d0 [ 1741.424997][ T7643] ret_from_fork+0x514/0xb70 [ 1741.430133][ T7643] ret_from_fork_asm+0x1a/0x30 [ 1741.435438][ T7643] [ 1741.435438][ T7643] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 1741.442676][ T7643] fs_reclaim_acquire+0x71/0x100 [ 1741.448166][ T7643] __kmalloc_cache_node_noprof+0x66/0x620 [ 1741.454427][ T7643] create_worker+0x112/0x7c0 [ 1741.459560][ T7643] workqueue_prepare_cpu+0xe4/0x170 [ 1741.465303][ T7643] cpuhp_invoke_callback+0x434/0x810 [ 1741.471138][ T7643] _cpu_up+0x2ce/0x5b0 [ 1741.475749][ T7643] cpu_up+0x1d2/0x220 [ 1741.480280][ T7643] cpuhp_bringup_mask+0xb2/0x1a0 [ 1741.485792][ T7643] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 1741.492148][ T7643] bringup_nonboot_cpus+0x17/0x30 [ 1741.497717][ T7643] smp_init+0x32/0x110 [ 1741.502328][ T7643] kernel_init_freeable+0x27f/0x3e0 [ 1741.508057][ T7643] kernel_init+0x22/0x1d0 [ 1741.512932][ T7643] ret_from_fork+0x514/0xb70 [ 1741.518060][ T7643] ret_from_fork_asm+0x1a/0x30 [ 1741.523369][ T7643] [ 1741.523369][ T7643] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 1741.531124][ T7643] cpus_read_lock+0x3d/0x160 [ 1741.536260][ T7643] static_key_slow_inc+0x12/0x30 [ 1741.541775][ T7643] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 1741.548038][ T7643] nbd_genl_foreach_sock+0x265/0x450 [ 1741.553871][ T7643] nbd_genl_reconfigure+0xbbb/0x1040 [ 1741.559690][ T7643] genl_family_rcv_msg_doit+0x233/0x340 [ 1741.565780][ T7643] genl_rcv_msg+0x614/0x7a0 [ 1741.570825][ T7643] netlink_rcv_skb+0x226/0x4a0 [ 1741.576131][ T7643] genl_rcv+0x28/0x40 [ 1741.580649][ T7643] netlink_unicast+0x8ef/0xa80 [ 1741.585958][ T7643] netlink_sendmsg+0x7f0/0xb20 [ 1741.591252][ T7643] sock_sendmsg_nosec+0x14e/0x190 [ 1741.596813][ T7643] ____sys_sendmsg+0x54e/0x850 [ 1741.602112][ T7643] ___sys_sendmsg+0x2a5/0x360 [ 1741.607330][ T7643] __x64_sys_sendmsg+0x1b1/0x290 [ 1741.612808][ T7643] do_syscall_64+0x166/0x520 [ 1741.617942][ T7643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1741.624375][ T7643] [ 1741.624375][ T7643] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 1741.632043][ T7643] __mutex_lock+0x197/0x15a0 [ 1741.637188][ T7643] nbd_queue_rq+0x373/0xff0 [ 1741.642228][ T7643] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1741.648320][ T7643] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1741.655190][ T7643] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1741.661708][ T7643] blk_mq_run_work_fn+0x167/0x2f0 [ 1741.667271][ T7643] process_scheduled_works+0xc3d/0x1630 [ 1741.673365][ T7643] worker_thread+0xa47/0xfb0 [ 1741.678501][ T7643] kthread+0x38b/0x480 [ 1741.683110][ T7643] ret_from_fork+0x514/0xb70 [ 1741.688239][ T7643] ret_from_fork_asm+0x1a/0x30 [ 1741.693543][ T7643] [ 1741.693543][ T7643] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 1741.700770][ T7643] __mutex_lock+0x197/0x15a0 [ 1741.705911][ T7643] nbd_queue_rq+0xc1/0xff0 [ 1741.710867][ T7643] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1741.716953][ T7643] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1741.723820][ T7643] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1741.730337][ T7643] blk_mq_run_work_fn+0x167/0x2f0 [ 1741.735903][ T7643] process_scheduled_works+0xc3d/0x1630 [ 1741.741999][ T7643] worker_thread+0xa47/0xfb0 [ 1741.747145][ T7643] kthread+0x38b/0x480 [ 1741.751759][ T7643] ret_from_fork+0x514/0xb70 [ 1741.756889][ T7643] ret_from_fork_asm+0x1a/0x30 [ 1741.762193][ T7643] [ 1741.762193][ T7643] -> #0 (set->srcu){.+.+}-{0:0}: [ 1741.769341][ T7643] __lock_acquire+0x164c/0x2de0 [ 1741.774736][ T7643] lock_sync+0xb3/0x130 [ 1741.779435][ T7643] __synchronize_srcu+0xca/0x2f0 [ 1741.784915][ T7643] elevator_switch+0x1e8/0x7b0 [ 1741.790227][ T7643] elevator_change+0x2fa/0x480 [ 1741.795543][ T7643] elevator_set_default+0x375/0x440 [ 1741.801295][ T7643] blk_register_queue+0x404/0x4f0 [ 1741.806859][ T7643] __add_disk+0x6b8/0xdb0 [ 1741.811720][ T7643] add_disk_fwnode+0x100/0x3a0 [ 1741.817026][ T7643] nbd_dev_add+0x733/0xb60 [ 1741.821983][ T7643] nbd_genl_connect+0x96c/0x1cd0 [ 1741.827460][ T7643] genl_family_rcv_msg_doit+0x233/0x340 [ 1741.833549][ T7643] genl_rcv_msg+0x614/0x7a0 [ 1741.838597][ T7643] netlink_rcv_skb+0x226/0x4a0 [ 1741.843905][ T7643] genl_rcv+0x28/0x40 [ 1741.848428][ T7643] netlink_unicast+0x8ef/0xa80 [ 1741.853738][ T7643] netlink_sendmsg+0x7f0/0xb20 [ 1741.859035][ T7643] sock_sendmsg_nosec+0x14e/0x190 [ 1741.864606][ T7643] ____sys_sendmsg+0x54e/0x850 [ 1741.869908][ T7643] ___sys_sendmsg+0x2a5/0x360 [ 1741.875130][ T7643] __x64_sys_sendmsg+0x1b1/0x290 [ 1741.880611][ T7643] do_syscall_64+0x166/0x520 [ 1741.885749][ T7643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1741.892182][ T7643] [ 1741.892182][ T7643] other info that might help us debug this: [ 1741.892182][ T7643] [ 1741.902421][ T7643] Chain exists of: [ 1741.902421][ T7643] set->srcu --> &q->q_usage_counter(io)#53 --> &q->elevator_lock [ 1741.902421][ T7643] [ 1741.916173][ T7643] Possible unsafe locking scenario: [ 1741.916173][ T7643] [ 1741.923683][ T7643] CPU0 CPU1 [ 1741.929061][ T7643] ---- ---- [ 1741.934475][ T7643] lock(&q->elevator_lock); [ 1741.939086][ T7643] lock(&q->q_usage_counter(io)#53); [ 1741.947015][ T7643] lock(&q->elevator_lock); [ 1741.954149][ T7643] sync(set->srcu); [ 1741.958064][ T7643] [ 1741.958064][ T7643] *** DEADLOCK *** [ 1741.958064][ T7643] [ 1741.966211][ T7643] locks held by syz.9.7528/7643: 6, last CPU#1: [ 1741.972538][ T7643] #0: ffffffff916f7ba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1741.980774][ T7643] #1: ffffffff916f79e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1741.989777][ T7643] #2: ffff888058ae21c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 1742.000170][ T7643] #3: ffff888029ab3df0 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4f0 [ 1742.010024][ T7643] #4: ffff888029ab3878 (&q->q_usage_counter(queue)#58){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 1742.020936][ T7643] #5: ffff888029ab3d68 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 1742.030801][ T7643] [ 1742.030801][ T7643] stack backtrace: [ 1742.036705][ T7643] CPU: 1 UID: 0 PID: 7643 Comm: syz.9.7528 Not tainted syzkaller #0 PREEMPT(full) [ 1742.045997][ T7643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1742.056069][ T7643] Call Trace: [ 1742.059364][ T7643] [ 1742.062307][ T7643] dump_stack_lvl+0xe8/0x150 [ 1742.066920][ T7643] print_circular_bug+0x2e2/0x300 [ 1742.071973][ T7643] check_noncircular+0x12f/0x150 [ 1742.076942][ T7643] __lock_acquire+0x164c/0x2de0 [ 1742.081817][ T7643] ? lockdep_unlock+0x5c/0xd0 [ 1742.086510][ T7643] ? __lock_acquire+0x1511/0x2de0 [ 1742.091563][ T7643] lock_sync+0xb3/0x130 [ 1742.095739][ T7643] ? __synchronize_srcu+0xb6/0x2f0 [ 1742.100878][ T7643] ? __synchronize_srcu+0xb6/0x2f0 [ 1742.106015][ T7643] __synchronize_srcu+0xca/0x2f0 [ 1742.110978][ T7643] ? __pfx___synchronize_srcu+0x10/0x10 [ 1742.116544][ T7643] ? do_raw_spin_lock+0x12b/0x2f0 [ 1742.121593][ T7643] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1742.127481][ T7643] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 1742.133051][ T7643] ? synchronize_srcu+0x20c/0x270 [ 1742.138097][ T7643] elevator_switch+0x1e8/0x7b0 [ 1742.142894][ T7643] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 1742.148376][ T7643] elevator_change+0x2fa/0x480 [ 1742.153165][ T7643] ? do_raw_spin_unlock+0xf5/0x200 [ 1742.158292][ T7643] elevator_set_default+0x375/0x440 [ 1742.163509][ T7643] ? __pfx_elevator_set_default+0x10/0x10 [ 1742.169262][ T7643] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 1742.176366][ T7643] ? blk_crypto_sysfs_register+0x11c/0x170 [ 1742.182225][ T7643] blk_register_queue+0x404/0x4f0 [ 1742.187277][ T7643] __add_disk+0x6b8/0xdb0 [ 1742.191651][ T7643] add_disk_fwnode+0x100/0x3a0 [ 1742.196448][ T7643] nbd_dev_add+0x733/0xb60 [ 1742.200897][ T7643] ? __pfx_nbd_dev_add+0x10/0x10 [ 1742.205868][ T7643] ? __pfx_nbd_genl_foreach_sock+0x10/0x10 [ 1742.211699][ T7643] ? bpf_lsm_capable+0x9/0x20 [ 1742.216388][ T7643] ? security_capable+0x7e/0x2c0 [ 1742.221346][ T7643] ? radix_tree_lookup+0x240/0x290 [ 1742.226553][ T7643] nbd_genl_connect+0x96c/0x1cd0 [ 1742.231535][ T7643] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1742.236941][ T7643] ? rcu_is_watching+0x16/0xb0 [ 1742.241741][ T7643] ? trace_kmalloc+0x2a/0xf0 [ 1742.246359][ T7643] ? __kmalloc_noprof+0x387/0x710 [ 1742.251413][ T7643] ? __nla_parse+0x40/0x60 [ 1742.255865][ T7643] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1742.262223][ T7643] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1742.268592][ T7643] genl_family_rcv_msg_doit+0x233/0x340 [ 1742.274172][ T7643] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1742.280270][ T7643] ? __lock_acquire+0x747/0x2de0 [ 1742.285240][ T7643] genl_rcv_msg+0x614/0x7a0 [ 1742.289767][ T7643] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1742.294816][ T7643] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1742.300222][ T7643] netlink_rcv_skb+0x226/0x4a0 [ 1742.305016][ T7643] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1742.310063][ T7643] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1742.315378][ T7643] ? down_read+0x2b9/0x320 [ 1742.319820][ T7643] genl_rcv+0x28/0x40 [ 1742.323817][ T7643] netlink_unicast+0x8ef/0xa80 [ 1742.328610][ T7643] netlink_sendmsg+0x7f0/0xb20 [ 1742.333383][ T7643] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1742.338687][ T7643] ? aa_sock_msg_perm+0x144/0x210 [ 1742.343737][ T7643] ? apparmor_socket_sendmsg+0x98/0x360 [ 1742.349310][ T7643] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1742.354623][ T7643] sock_sendmsg_nosec+0x14e/0x190 [ 1742.359677][ T7643] ____sys_sendmsg+0x54e/0x850 [ 1742.364466][ T7643] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1742.369778][ T7643] ? import_iovec+0x73/0xa0 [ 1742.374303][ T7643] ___sys_sendmsg+0x2a5/0x360 [ 1742.378997][ T7643] ? __lock_acquire+0x747/0x2de0 [ 1742.383960][ T7643] ? __pfx____sys_sendmsg+0x10/0x10 [ 1742.389172][ T7643] ? futex_wait+0x2a2/0x390 [ 1742.393749][ T7643] ? __fget_files+0x3a2/0x420 [ 1742.398451][ T7643] ? __fget_files+0x2a/0x420 [ 1742.403058][ T7643] __x64_sys_sendmsg+0x1b1/0x290 [ 1742.408020][ T7643] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1742.413504][ T7643] do_syscall_64+0x166/0x520 [ 1742.418108][ T7643] ? trace_irq_disable+0x3b/0x140 [ 1742.423163][ T7643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1742.429256][ T7643] ? clear_bhb_loop+0x70/0xc0 [ 1742.433962][ T7643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1742.439869][ T7643] RIP: 0033:0x7f3bfc99fb19 [ 1742.444299][ T7643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1742.463935][ T7643] RSP: 002b:00007f3bfd8fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1742.472377][ T7643] RAX: ffffffffffffffda RBX: 00007f3bfcc25fa0 RCX: 00007f3bfc99fb19 [ 1742.480366][ T7643] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 1742.488359][ T7643] RBP: 00007f3bfca37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1742.493383][ T7647] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7528'. [ 1742.493420][ T7647] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7528'. [ 1742.514189][ T7643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1742.522173][ T7643] R13: 00007f3bfcc26038 R14: 00007f3bfcc25fa0 R15: 00007ffcc9a3c1c8 [ 1742.530164][ T7643] [ 1742.647772][ T6533] net_ratelimit: 28 callbacks suppressed [ 1742.647797][ T6533] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1742.792140][ T6528] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1742.864693][T31404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1742.903638][ T6528] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1742.920241][ T7652] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7528'. [ 1742.920269][ T7652] nbd: device at index 64 is going down [ 1742.981642][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1743.022746][ T6522] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1743.054600][ T7654] udevd[7654]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1743.057880][ T7653] udevd[7653]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1743.143324][ T6528] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1743.253391][T12826] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1743.372861][ T6522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1743.373236][ T6528] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1747.702017][ T6528] net_ratelimit: 50 callbacks suppressed [ 1747.702074][ T6528] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1747.763684][T29862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1747.822117][ T6529] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1747.845052][ T6529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1747.931583][ T6493] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1748.041888][ T6493] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1748.162119][ T6529] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1748.201616][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.281692][T12826] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1748.401802][ T6533] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1751.041603][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured!