last executing test programs: 6m34.366647417s ago: executing program 0 (id=68): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x0, 0x0, 0x0, 0x4, 0xfa, &(0x7f0000000140)=""/250}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) socket(0x2, 0x3, 0xff) syz_emit_ethernet(0x22, &(0x7f00000001c0)={@broadcast, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x9, 0x14, 0x64, 0x0, 0x3, 0xff, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}}}}}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x28, r4, 0x5, 0x0, 0x1dffe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff03}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="310300000000fcdbdf250900000008000300", @ANYRES32=r7, @ANYBLOB="080006"], 0x24}}, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'caif0\x00', {0x800005}, 0x5}) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000007c0)={0x30, r1, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1e790d70ba2e82adeeb2de6fa5"}]}, 0x30}}, 0x4000) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r8) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, r10, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x840}, 0x4000) 6m34.06126284s ago: executing program 0 (id=74): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6(0xa, 0x2, 0x0) unshare(0x20400) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000008c0)=@nat={'nat\x00', 0x1b, 0x5, 0x558, 0x210, 0x210, 0xffffffff, 0x398, 0x210, 0x488, 0x488, 0xffffffff, 0x488, 0x488, 0x5, &(0x7f0000000340), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @local, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0xffff00, 0xffffff00, 0xff000000, 0xff000000], 'veth0_to_batadv\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x2, 0xb, 0x2, 0x28}, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0xf, @ipv6=@private1, @ipv4=@remote, @icmp_id=0x68, @gre_key}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xffffff00, 0xff, 0xffffff00], [0xffffff00, 0xff, 0xffffffff, 0xff000000], 'wlan0\x00', 'pimreg\x00', {0xff}, {}, 0x3c, 0x2c, 0x0, 0x50}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d2], 0x40, 0x2, 0x3}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, @ipv6=@private1, @port=0x4e21, @icmp_id=0x66}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0x0, 0xff], [0xffffffff, 0x0, 0xff000000, 0xff], 'team0\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0xff, 0xd, 0x6, 0x10}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@icmp6={{0x28}, {0xf, '\td', 0x1}}, @common=@srh1={{0x90}, {0x11, 0x1, 0x4, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @local}, @private2, @dev={0xfe, 0x80, '\x00', 0x13}, [0xff, 0xff, 0xff000000, 0xffffffff], [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 0x1178be81ab556be9, 0x40}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xc, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x7, @ipv4=@rand_addr=0x64010100, @ipv6=@empty, @icmp_id=0x68, @gre_key=0x10}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)={0x30, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xd, 0x0, 0x0, 0x0, @str='l2_drops\x00'}, @generic]}, 0x30}], 0x1}, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) sendmmsg(r2, &(0x7f0000005d00)=[{{&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}}], 0x1, 0x44080) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x4c, r4, 0x1, 0x0, 0x25dfdbfb, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x87}}]}, 0x4c}}, 0x0) setsockopt$sock_timeval(r1, 0x1, 0xd, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r7, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00'], 0x68}, 0x9}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtaction={0xb0, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x9c, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x0, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x4, 0x0, 0x3, 0xe}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xb0}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x4) 6m33.789269414s ago: executing program 0 (id=79): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x7, 0x40, 0xe48, 0x100, {{0xa, 0x4, 0x3, 0x2, 0x28, 0x64, 0x0, 0x8, 0x0, 0x0, @empty, @multicast1, {[@timestamp_prespec={0x44, 0x4, 0x6f, 0x3, 0x1}, @rr={0x7, 0xf, 0xf6, [@empty, @broadcast, @broadcast]}]}}}}}) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140ffffffff0c00018008000140c0ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000010c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYBLOB="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", @ANYBLOB="20000100"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r5) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000280)=ANY=[@ANYRES64=r6, @ANYRESDEC=r4, @ANYRESDEC=r6, @ANYRES32, @ANYRESOCT=r1, @ANYRES8=r4, @ANYRES64=r1, @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004000) 6m33.689446786s ago: executing program 2 (id=80): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x22, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) (async) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000340)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0x4a) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'veth0_vlan\x00', 0x0}) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x20, 0x140b, 0x8, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) r9 = gettid() setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000440)=0x7, 0x4) (async) r10 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r10, 0x6a, 0x1, 0x0, &(0x7f0000000640)) (async) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000304f9fffffffedbdf2500007400", @ANYRES32=r8, @ANYBLOB="049c01000750050008001300", @ANYRES32=r9, @ANYBLOB="12e1e6af9dd60e9179d66b87bb814f95def52c515538ce63295b7134cb96cfb36f1cbd2ffad19265b6f2352f1199cf057ebe7991c54eaad944d6e96bc67a64bd4b78473ae9899568229914b302b7aa2b3ea58613797866ef307a9edb728676fa7f0bee1305960d996fd861ee4c62d8e58130f060e0a8445cc36be131"], 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x0) write$cgroup_pid(r4, &(0x7f0000000000)=r9, 0x12) 6m33.529460992s ago: executing program 2 (id=81): r0 = socket$inet(0xa, 0x80000, 0x2) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e004b05000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1], 0x28}}, 0x0) (async, rerun: 32) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async, rerun: 32) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000002c00)) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) writev(0xffffffffffffffff, &(0x7f0000002a40)=[{&(0x7f0000001080)="06be483d50e56b293fb46151f322fb36fded610a39bfb113d911cc8d5240b5d5ca15efbcbb2a5bb85faa3c2e59ca526e0d91783a76db9d67caf3ac7b8863037301eacf5a5c795e60e54d41aace7663b169777c3865b8368cee5cd57a4bd2efa2b410eaadf9dd4b0032aeaeb905e8451b61ace306b77c5b4ad92391a8f8e1451b4fbe64eb39318e27300b99642a9ddb4d7ea42608e080a318ad656d1af3b861e7a88f756231b7ca7aa2d3c4c939617fb2a6a5f0923417d6001d2ac013e327085ceaace2457c121bca10", 0xc9}, {&(0x7f0000001180)="226836f994342108740197e59b0f6f247f533adb", 0x14}, {&(0x7f00000011c0)="4fa1b093af9fae65", 0x8}, {&(0x7f0000002940)="fd71824345a331860d6b1be96c56652539e8369e9c490b862877901ac105e36a176c0086c8066e5d227329ee243883d11ff1da619457ee451f4d511e808642b381600fef2d380cbb84135987f18efea98fe268b956a7962c574c0cc147e3f0566f00c0d77a3eb81aab824cbb55986a8a63075c48fe5835103e38cf1c3ec08b82571df76610b4fb52af3ae7ff68815644f65bcc1c2df2101588c4d4d3183d7c4dcaa1440b360d714bfa0ad73bc191983fa20d030eb02779116cb771d5df515b38441b6f51f5b877ba9f8aae301f14fdb9819e95ffc62e", 0xd6}, {&(0x7f0000001200)="a88c", 0x2}, {&(0x7f0000001240)="c60b0b7bee4cf66fba74f710bd267676", 0x10}], 0x6) close(0x4) (async) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001040)={0x1, 0x58, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x1, 0x3, 0x0, 0x3, 0x30, 0x8}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x94) (async, rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x680700, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) sendmmsg$inet6(r5, &(0x7f0000002600)=[{{&(0x7f00000002c0)={0xa, 0x4e21, 0x7fffffff, @rand_addr=' \x01\x00', 0x7}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000300)="3dceda93b4c73ef780db4a5cdbdb842e26a44b587d231be4fbbc0bd9b1bb8845a903d514069b057549bafecea034a6c1e2a10579423e3080815819fcea605a492c06a50567439caba50f98dc45a2e02e1549d715353f03ad35c06a0c42fefd38163a78bd1d8511376ed1afef620ff9c461af35", 0x73}, {&(0x7f0000000380)="917683da8f76f7b84571cf6007128eb6f4a81f642818b434500d57a524d59e073eb619c99301d43df21e4c2454881d42f5dcdb871d60ff12eed87c84ae66f7e55207defca28c9344ad9b5711d28505f81cdcb48d6e541703a08292b161d8704ffff4694cc7331c0fcd327da0b3948dda47addf4ca71e24f5f0b30fefc1eff576dece0bbc568d37c1d459aaf6c4023f5135eca2f4db990cde23132b1753de406bcb15b774aca9d3088b0bf96374ffd6e8fc5205f4215eefb7f9c8", 0xba}, {&(0x7f0000000440)="bd505ad965bc7f4ea3972b9efdafcb838aadf7fd6286724c9c63ddbb85ac4b72aeb35cf17a317b24547958", 0x2b}, {&(0x7f0000000480)="dfa7e3e768b29296b400b89d6769bad4dfda6588b7aa678f62480b40c282565877d3d5987b38d936250e9ae253a3988ea708085b020c7bfe3bd0b6270c8928d9a2d33e6ad2bf7cc883ad8a15410a536d145d99a9016842afa96f08559422ee404c4f85bf2adffdf620946f233dfdb51f2649b7afa3292170c258a875cd8100915a9b3cc9022a4f2ac9acc47e80c1b2fccd2013d882f0a2f40c2dab197a1bcce89e4fa985b0072ba3d4a14bac730509a3e78d02a58de1697b362f2aa875aedd79f9ac6b97f26fca6a148dcfe2c45e449a2bf138e221ddd8a27c3c712217c90520aa", 0xe1}, {&(0x7f0000000580)="89bb316ba1179d1a1e2ea377e004cdb410b5ff9328475de51b51f85387df2675f25371567bd80030fd8650d82c382407034dae4ea28db27325ad12bea9f4e1018e2df4228e31e93fe78364f75df11614c9fbb9325021f8fb3c9dcf9f34ad70", 0x5f}, {&(0x7f0000000600)="b18b96181659073b9f71b1b8097e6e7ff43c3290ef891379218ee5d17b1eba38d6145e99d2184f59839e7554484051a162d886978b2868afcc162738d76da44b488699da0dddc5dad8a6b630394408b94419bdca8001719e0ed651563d56cd5ecc29116c2cbd085397519705468ed8b7e5274561348f5a0f5d1b756c93fac26a96f7e98a462e48f8418edad21cba97e7d9163247aadfaff6dce44dbf7f122acfbc254a9a606713cbd9f4e19a81", 0xad}, {&(0x7f00000006c0)="c6edc22f4f5fee78d9993ce2431ee9fc57f36ec2533b092f7c10a7661f9141080be60224ab08bc097fb44d2c0f0d045552a36f017d696deefab9e966453cdaf3e9737131c815dde433307ae89f0d122c822c7fec85d6b6c2", 0x58}], 0x7, &(0x7f0000002c40)=ANY=[@ANYBLOB="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"], 0x328}}, {{&(0x7f0000000b00)={0xa, 0x4e21, 0xfffffff9, @mcast1, 0x8}, 0x1c, &(0x7f0000000f40)=[{&(0x7f0000000b40)="c2882ebc3d4ce2d2dc40ce80d6e901ccb6cb5f085326acd640ea5896561826a8ef60cd4485501615e1cbf1c2c43579d6b3a3026b34666f5f2959f0c7174d0604fdd5d06e2f008175756d4590eff73f92b3c1ffd36742fc87ce99d64bf781352946014578be4af05d2e17f09cf4187d76fe4bc69f9ae5f7b27c0a7de69b2e4852195aefea5003279c06c37055381d1ccb181484ab7b5ff9206b235a882e969dd23479dd40d67e4967d924a928c6d89101c3791b7bd0362dcba5ce4b099c862121d83b1e2e", 0xc4}, {&(0x7f0000000c40)="357ef1df62a1df498b3e4fa303ca23097e333ad4bcc4d4199f07015f635e933c5a83a1ecd2b8e7d1df818f9ab1e9add57b67c4c15f0be7bdd1ff5abb3cb69876b3855a5bd8eefcd711c94e7f24068934428f209639c77faa1acc53da4c91b2dd6b089d13027672d0a44390d2eed301dc9e418dab8d306c3fcfdb130936eea870fa57eb0d487ee841413250c7c41e39baf90b99da55fd21085af649ca38bcc5570f577dce7493d46f57826c5801b5590b72ca998b24fa64de6cfeee8a9102f589cfdc7dd9ea2a94661100539ff02d0769876cfd98a5d3ebd94ae5495f01379457e3f0fb65574bcbcc7094470a0afa10c985fe2586c2928d", 0xf7}, {&(0x7f0000000d40)="38fc65549ecb26a5c873b3274d3d8865be2b895480bef7dc803449a3ea17aa97a63fe2ca0126313d2d5b8e", 0x2b}, {&(0x7f0000000d80)="77bb219955dbc51ae87589cf599acfc3", 0x10}, {&(0x7f0000000dc0)="4dd2ccb34630a6fc8e4011c4bf554587bd310201396fc4081a178d46c8181088c4dd5f8db0108bc0d61e6b22055066fb6ad1d82824c0ac677927322d45496cfa42", 0x41}, {&(0x7f0000000e40)="b9d9059be877bb0d988541608c0509e34e7a9df9eaaccd8bac03ca610c0410000c9739d91ab03efeeebe2555511d5f", 0x2f}, {&(0x7f0000000e80)="f9af14248db97d5fb74fb1dd52cb6fed3dbb5c505a743a910f0059bff87154b329cc45f137309964e7d1c1cff1ae7ddff4b18e889c137e8d0ce41dc643331b267cc6465cd981f41372d9c0c954ea6df79defc17bda0f048b9ef1d7974a4c51483123ae0fe1709f56e254a87c8c7b1dc4bb4cd56d66bfb52fbe1b52bb41c322915498b58925350444f1996270d4252cf40d1fb195322cd086", 0x98}], 0x7, &(0x7f00000026c0)=ANY=[@ANYBLOB="480000000000000029000000390000006c0601f100000000fe8000000000000000000000000000aa00000000000000000000ffffe0000002fc000000000000000000000000000001240000000000000029000000320000000000000000000000000000000000000171d1e345922c179e69913c9954124a78c2c725dd7c2383567fb3cabf56f329a4c34112ffd7f4", @ANYRES32=r6, @ANYBLOB="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"], 0x240}}, {{&(0x7f00000012c0)={0xa, 0x4e23, 0xffffaebd, @loopback, 0x401}, 0x1c, &(0x7f0000002580)=[{&(0x7f0000001300)="4ce18745f90bfc44093dac69726b50368402d5f73b4fdc8ebdd7ce168096e460bc6bbf23d9d315c983490518724cc5f848ee95481ada0fbc53274b1dee96af505d0d1d51466482869d185a9da0fe3a7b854338ac600d0253cf5a3d40840063d71ab3b9efe1c62f134ad148ee16915bf060bb730a18e2c62500d258", 0x7b}, {&(0x7f0000001380)="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", 0x1000}, {&(0x7f0000002380)="04939b36764aef7a2cb997119b418c00ad953edbd4ef510495e69192f46b4bd288efa41a2f4b16a74e4d9721663b25b1d70d8f92468bd806c7887ffd7dc00cb64edd42f091be35ac1c021ee4e0dc50e31842675adafd21f31a0dbdcc77ec05c9485c", 0x62}, {&(0x7f0000002400)="2f315639837cd73e339742ac48278773c92c2a92523c9c72f5bc6ffb8f651aecd78887ad7353a7f2cf79864c3d5c69a8dad76c7f715421311cc21074fc9d462a", 0x40}, {&(0x7f0000002440)="e9b09be95a377f09bd300d3d0800ae6fd732defcf5a363a7f6e40b5f9c3e446fbab46141ab3a25184850005ab8a1284651d04fc490faacc42f5cb67baea4f6533775ce0bfd4dd58f6e5ebe3223ecd50757c0bceda4abde86dbfdaa8502432ee1eb1136852e54b1ffc94e59d2efe7cdbad29c3f0e15b0ba810e0a5e0b688afaf5acd355e85b28bb78a88611c87cb00bb5f734140431b58f", 0x97}, {&(0x7f0000002500)="30ec1359277ae440448cb987a965421489e7bf348d4c50347f201fe258213d7f75ead28c131150b327e4739262498c74f8e4f4f215dd06bae7437f7531d2f111d1218c66536b396469e882bf145374d9e9e49d17ac36429ad2ca550d7af1b07b251f08ccf8d5693be4fda719fd1f4697", 0x70}], 0x6}}], 0x3, 0x4000800) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0x4, @mcast1}, 0x1c) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r10) sendmsg$NLBL_MGMT_C_ADD(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="180100234b0900a98900", @ANYRES16=r11, @ANYBLOB="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"], 0x11c}}, 0x0) listen(r0, 0x8) (async) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xf3}], 0x1) 6m33.513372512s ago: executing program 0 (id=82): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f00000002c0)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x48, &(0x7f0000000040)=0x9, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) listen(r4, 0xef8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r9 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r10, {}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x0, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x2}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_int(r3, 0x1, 0x45, &(0x7f0000000000), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000000000000000000203000000020000000000000700000000000000000000000d02000000000051"], 0x0, 0x40}, 0x20) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x1000}) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000002000010300000000000000000200000000000000000000000c64109d22679f076f739649209d2c0ba376286ba9aa615b1d1bdf385d57018e84ab455dc32161c3b64ea28a7dc7eca4d5ca527b82574be9052996d3c8c1d2c71d68abcde45d4eac3abbb151822ecd20139e86346c"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r13, 0x8983, &(0x7f00000000c0)={0x6, 'bridge_slave_1\x00', {0x3}, 0x8}) 6m33.332381884s ago: executing program 2 (id=84): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xed4, 0x7, 0xfffffffb, 0x9, 0x0, 0x2, 0xa, 0x3f56}}) 6m32.993484691s ago: executing program 2 (id=89): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x48000) r1 = socket$inet(0x2, 0x3, 0x2) r2 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc) close(0x3) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_getnexthop={0x38, 0x6a, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NHA_MASTER={0x8, 0xa, 0x1}, @NHA_MASTER={0x8}, @NHA_FDB={0x4}, @NHA_MASTER={0x8}, @NHA_GROUPS={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f00000002c0)=""/8, &(0x7f0000000300)=0x8) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32, @ANYBLOB="050001"], 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}]}}}]}, 0x48}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0], 0x248}, 0x1, 0x0, 0x0, 0x48885}, 0x20) 6m32.945049557s ago: executing program 0 (id=91): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x17, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0xc1}, [@map_idx_val={0x18, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2812}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xcf, &(0x7f0000000a00)=""/207, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x8, 0x1, 0x24}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000340)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x0, 0x5, 0x0, 0x3}, {0x3, 0x3, 0x7, 0xa}, {0x4, 0x2, 0xa, 0xb}, {0x2, 0x5, 0x3, 0x1}, {0x4, 0x4, 0xe, 0x4}, {0x3, 0x2, 0x7, 0x3}], 0x10, 0x20000000}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=@ipv6_newnexthop={0x24, 0x68, 0x0, 0x80000, 0x25dfdbfb, {0x2}, [@NHA_GROUP_TYPE, @NHA_OIF={0x8}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x64, 0x65, 0x2, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0xf3}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_FD={0x8, 0x6, r0}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x4}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x4, 0x10000, 0x6}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000880)={r2, @in={{0x2, 0x4, @multicast2}}, [0x6, 0xfdc1, 0x2, 0x0, 0x140000000, 0x10001, 0x2, 0xfffffffffffffffb, 0xffffffff, 0x5, 0x6, 0x4, 0x3ff, 0x5, 0xfffffffffffffff7]}, &(0x7f0000000080)=0x100) r3 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000bc0)={r2, @in6={{0xa, 0x4e21, 0x0, @empty}}, 0xa, 0x7, 0x7, 0x0, 0x80, 0xffffff89, 0x4f}, &(0x7f0000000780)=0x9c) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000c80)=0x3, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCADDDLCI(r5, 0x8980, &(0x7f0000000cc0)={'vlan0\x00', 0x5}) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r7, @ANYBLOB="20000100", @ANYRES32=r5], 0x38}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xc09, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50081}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x48}}, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 6m32.9249653s ago: executing program 2 (id=92): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c000000"], 0x0, 0x5}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) socket$inet(0x2, 0x3, 0x0) 6m32.503309152s ago: executing program 0 (id=94): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWSET={0xd4, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFTA_SET_DESC={0x88, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x84, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x57}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0xfc}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)='%+9llu \x00'}, 0x20) (async) r2 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000180)=@id, &(0x7f00000001c0)=0x10, 0x80800) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000200)=0x4186, 0x4) 6m32.193064329s ago: executing program 32 (id=94): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWSET={0xd4, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFTA_SET_DESC={0x88, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x84, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x57}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0xfc}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)='%+9llu \x00'}, 0x20) (async) r2 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000180)=@id, &(0x7f00000001c0)=0x10, 0x80800) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000200)=0x4186, 0x4) 6m32.17861415s ago: executing program 2 (id=97): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfd6d}, 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x29, 0x73, 0xb, 0x3ff, 0x20, @dev={0xfe, 0x80, '\x00', 0x14}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x7800, 0x7, 0x3}}) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)=@deltclass={0x38, 0x29, 0x300, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xe, 0x6}, {0x4, 0xb}, {0xc, 0xb}}, [@tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_red={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x840) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd0}}, 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940001000000fcffc50000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x90) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e22, @multicast1}}}, &(0x7f0000000040)=0x84) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0xc, 0x0, r4, 0x5, '\x00', r8, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="8b80000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="f5db0052aa45ba6f48c33cbcbf26f9a09a4736066de7b0a645f4ed0b899cef5b55bb74aaf9a3b06cdce01fbfec20"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) 6m31.90693006s ago: executing program 33 (id=97): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfd6d}, 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x29, 0x73, 0xb, 0x3ff, 0x20, @dev={0xfe, 0x80, '\x00', 0x14}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x7800, 0x7, 0x3}}) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)=@deltclass={0x38, 0x29, 0x300, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xe, 0x6}, {0x4, 0xb}, {0xc, 0xb}}, [@tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_red={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x840) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd0}}, 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940001000000fcffc50000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x90) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e22, @multicast1}}}, &(0x7f0000000040)=0x84) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0xc, 0x0, r4, 0x5, '\x00', r8, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="8b80000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="f5db0052aa45ba6f48c33cbcbf26f9a09a4736066de7b0a645f4ed0b899cef5b55bb74aaf9a3b06cdce01fbfec20"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) 1m29.393800846s ago: executing program 4 (id=3838): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007110797f0000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = socket(0x2, 0x2, 0x1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000001280)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000001240)={&(0x7f0000001340)=ANY=[@ANYBLOB='\b'], 0xffeb}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r2}, 0x10) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x33}}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x114, 0x1f, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="f4f0a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x114}], 0x1}, 0x0) 1m29.175017409s ago: executing program 4 (id=3842): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x48010009}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_TUPLE_ORIG={0x64, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @local}}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x40805}, 0x4000805) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x0, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0xffff0000, 0xc11270e446e71eb1, 0x0, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x2, 0xb7, 0x4, 0xe8, 0x6, 0x1268, 0xb2a}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0x39, 0x2, 0x0, 0x1, {0x8}}}}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x40}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x22000094) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x8}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r4, 0x35, 0x1, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x4, 0x4) 1m28.878385548s ago: executing program 4 (id=3848): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0x1e, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xc2, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x10, 0x1, 0x8, 0x8f, {{0xf, 0x4, 0x2, 0x9, 0x3c, 0x66, 0x0, 0x0, 0x2f, 0x0, @empty, @local, {[@end, @lsrr={0x83, 0x7, 0xa0, [@private=0xa010102]}, @ssrr={0x89, 0x1f, 0x51, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast1, @rand_addr=0x64010102, @rand_addr=0x64010102, @remote, @multicast2]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x0, 0xd1, 0x7, 0x9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x32}, 0x8, 0x8000, 0x2, 0xffff}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @broadcast}, &(0x7f0000000600)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000640)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe5, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0xfb, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={0x1, 0x58, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b00)={0x11, 0x0, 0x0}, &(0x7f0000000b40)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d40)={'erspan0\x00', &(0x7f0000000c00)={'tunl0\x00', 0x0, 0x61, 0x20, 0xa, 0x0, {{0x46, 0x4, 0x1, 0x8, 0x118, 0x66, 0x0, 0xb, 0x2f, 0x0, @multicast1, @private=0xa010100, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0x1b, 0x17, [@multicast2, @multicast2, @empty, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x29}]}, @timestamp_prespec={0x44, 0x4c, 0xa4, 0x3, 0x0, [{@local, 0x7f80}, {@remote, 0x6d7d}, {@rand_addr=0x64010101}, {@broadcast, 0x1ff}, {@broadcast}, {@dev={0xac, 0x14, 0x14, 0x3b}}, {@private=0xa010101, 0x2}, {@empty, 0x5}, {@rand_addr=0x64010102, 0x25}]}, @timestamp={0x44, 0x24, 0xcc, 0x0, 0x3, [0x5, 0x7d75, 0x0, 0x1, 0x1, 0x8001, 0x6, 0x6]}, @lsrr={0x83, 0xb, 0x52, [@local, @remote]}, @rr={0x7, 0x7, 0x5, [@local]}, @end, @timestamp_addr={0x44, 0x4c, 0xda, 0x1, 0xa, [{@multicast1, 0x6}, {@empty, 0x6ef48}, {@rand_addr=0x64010100, 0x5}, {@multicast1, 0xfff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@multicast2, 0x1}, {@loopback, 0x7}, {@empty, 0x8}, {@remote, 0x60}]}, @cipso={0x86, 0x12, 0x3, [{0x6, 0x8, "a4861310b771"}, {0x5, 0x4, "1671"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000e00)={'sit0\x00', &(0x7f0000000d80)={'gre0\x00', 0x0, 0x8770, 0x40, 0x8, 0x87, {{0x14, 0x4, 0x0, 0x28, 0x50, 0x68, 0x0, 0x6c, 0x0, 0x0, @private=0xa010101, @remote, {[@generic={0x82, 0x4, "49cf"}, @noop, @ssrr={0x89, 0x7, 0xce, [@multicast1]}, @generic={0x44, 0xb, "8c12eb78ccccd6584f"}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0x80, 0x0, 0x5, [0xe6, 0x1, 0x7, 0x9]}, @lsrr={0x83, 0x7, 0x82, [@local]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001340)={&(0x7f0000000e80)={0x484, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [{{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x79862885}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r15}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r16}}}]}}]}, 0x484}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x28, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xa000}, 0x8000) r17 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r17, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000014c0)="8df28ff693a105e64e5723c1d38b8509f14883ef0dfd0c55764d9cc90662d43700dc6594c5be0985cf40cc5cbc22424b4002b33466d1311524026a238d216f212f2c7c554c5c80f798ee8dfc31c385ad5630bd1223e3b95fd22dfe02694aad1bec42e58704baef5f50c1c1dc8489dc395b9ade748d2d3c2686a190abb2fc124c652475601b5b6b47ed38071c6bd7e346c4977e71e455d2194dd8a6831b795f768aea618029b5fb857b3667ebc137864e8722939e", 0xb4}, {&(0x7f0000001580)="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", 0x1000}], 0x2, &(0x7f00000025c0)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback, r9}}}, @hopopts_2292={{0x58, 0x29, 0x36, {0x3c, 0x7, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x3b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x2}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x1, 0x3c, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, @remote]}}}, @rthdr={{0x78, 0x29, 0x39, {0x1f, 0xc, 0x1, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x27}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1d}, @mcast2, @loopback]}}}, @rthdr={{0x48, 0x29, 0x39, {0x0, 0x6, 0x1, 0x2, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}], 0x1d0}, 0x80) r18 = syz_genetlink_get_family_id$batadv(&(0x7f0000002840), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000002940)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002900)={&(0x7f0000002880)={0x54, r18, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000084}, 0x8040) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002a40)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x2000c800) r19 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r19, &(0x7f0000002e80)={&(0x7f0000002a80)=@caif=@dbg={0x25, 0x81, 0x9}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002b00)="fe734063105651ae2ce86340d5a56d844214805afabe6a861aa4b26d5c1e837f325dbda9dfefcfc55af75faf4995200931fb14aa6694fe3bf67431249868bbb843e4cb4dcb27a1f6c448bbebba1b01164f54ba31c4f38d8c744952f30b0c1d03db3faa5fbbb8c0d32123c40da72f4552ff7c0e4d0f54cc449f6f92189b25051a571c2feb8f01ce9e8f4d5768323ab8e8c7fbaedbfc5183f2126b6a65231e32cc31ba42945d465e13f138adc05785e750b68434c9262e51fefda1b0188b066f641b89acd82927df77b277b7f57d58cc21d60de4eacb946ed95fe6737686031fd79fb0e05742518cf3e5f8", 0xea}, {&(0x7f0000002c00)="aea3b64853835b27c21f1ee67c7aa70c0ec8133bbdb79409454d4c748244436ef7f568efd9d25d4b81a87074909a56c3faff06a060b7905de2c3f0a84cd0a5c9c1594479c2b933dce10815fa0057ac7d57c327c0fa528a66dc9632fc39774b391c8209916edd2dff936d5e5a923bd27efd513583b90b781fbafe21a2875985b8a545ec7430d90b1dd51d0cee1eda01a76ff7e77ccc62c2711a8f1c5e73bdfb4c10c721ea2f06816365b98276ac933a52424f10edacb325cc86a7806fa35b27f9ada38798555694809b0a878f3b92fbad34029fbc7c9a4a", 0xd7}, {&(0x7f0000002d00)="8ce2b919295a4c56dbe095c6313fac21d6aebbae9541b58eeaff0bb5de6086b7bee62b52939b99ba5d971de9973dcbcfd279dc7decfac356d69345cb921a7f1ed1ee7c254c5be2de45924f646a65057083d0c114f1db5dd8505995cb828b527cd527c4978855e232db37eab1577eebb318428e38de8c1b30f83a3d593fa9ce18f3e3a7c6ef4e9e76f6617eb5b5048c849a007ee48998ea06817cd2d2ee8350419a46bdd31077ec82934a04140637894119c555f5b5a43c24774a31dab9faed9b78034dcd2497c77929e29077c9566f5686919097566408c90b05b57cd2a8055b7dcb31974e5653589f65a8", 0xeb}, {&(0x7f0000002e00)="5a131bc9c197663317b17ec742b5114c416e2caa5349392b", 0x18}], 0x4}, 0x20000880) r20 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r20, 0x8933, &(0x7f0000002ec0)={'batadv_slave_0\x00'}) r21 = openat$tun(0xffffffffffffff9c, &(0x7f0000002f00), 0x220100, 0x0) ioctl$TUNSETIFF(r21, 0x400454ca, &(0x7f0000002f40)={'pim6reg0\x00', 0x20}) 1m28.513926092s ago: executing program 4 (id=3853): unshare(0x24060400) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0xc, [@fwd={0xd}, @const={0x10, 0x0, 0x0, 0xa, 0x2}, @enum={0x2, 0x9, 0x0, 0x6, 0x4, [{0x10, 0x4}, {0x2, 0x2}, {0x5, 0x5}, {0xa, 0x81}, {0x3}, {0xf, 0x81}, {0x7}, {0x4, 0x356}, {0x0, 0x6}]}]}, {0x0, [0x5f, 0x5f, 0x61, 0x61, 0x5f, 0x0, 0x2e, 0x5f, 0x5f, 0x0]}}, &(0x7f0000000280)=""/126, 0x90, 0x7e, 0x0, 0xa, 0x10000}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x4, 0x2003, 0x62c4a, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000080)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r1}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xb, &(0x7f0000000340)=""/233, 0x0, 0x11}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x1000000, '\x00', 0x0, r0, 0x4, 0x4, 0x2}, 0x50) 1m28.376320647s ago: executing program 4 (id=3856): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000910442000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x41) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)="607be25f2ef1280ed2c663ad71511dde7f74dd31fb0e5a9dbe2ee7745c3636ae33443fa73a387c92566fc67599610cabb9a3fcc284c5d0e7824e32b0d8fd3acef8af71e5f4784bd40778d418042d76c4e25c840db0b8022dddb286e48c9d34d0bcfe943d2cb2b3e77998406bdc487c63740e9d450f16ca09323f1ffa6c83e41bd8da053dfd564f5ebf6bf529217bec9611005a3955f9082f30027a5a7fb021a5eaf79760c0ab0f42ca4b091855c9c192f234f9e3f5ada9", 0xb7}], 0x1}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r10 = syz_open_procfs$namespace(r8, &(0x7f0000001780)='ns/ipc\x00') r11 = socket$nl_rdma(0x10, 0x3, 0x14) getpid() sendmmsg$unix(r7, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r8, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1c000000000100000000000000000800", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r10, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r10, @ANYRES32], 0x58, 0x800}}], 0x2, 0x0) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={0x0, r6, r9}, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000500)={r11, 0x880, 0x4, 0x4}) connect$can_j1939(r12, &(0x7f0000000580)={0x1d, r5, 0x3, {0x2, 0xf0, 0x1}}, 0x18) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r12, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x50, 0x140f, 0x4, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) getsockname$l2tp6(r13, &(0x7f0000000200)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000004c0)=0x20) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0xf, @loopback, 0x7fff}, 0x1c) 1m28.000870183s ago: executing program 4 (id=3864): socket$vsock_stream(0x28, 0x1, 0x0) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 64) sendmmsg$sock(r0, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004fc0)="14733f9daa4e98c0c2", 0x9}], 0x1}}], 0x1, 0x0) (rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (async) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x4c, 0x0, 0x0) (async, rerun: 64) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32) ioctl$BTRFS_IOC_FS_INFO(r9, 0x8400941f, 0x0) (rerun: 32) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r8) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x44, r10, 0x1, 0xfffffffd, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xfd}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async, rerun: 64) r11 = socket(0x40000000015, 0x5, 0x0) (rerun: 64) setsockopt$sock_int(r11, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) (async) connect$pppl2tp(r11, &(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3, 0x2, 0x3, 0x4}}, 0x2e) bind$inet(r11, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async, rerun: 32) sendmmsg$inet(r11, &(0x7f00000013c0)=[{{&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001400)=[@ip_tos_int={{0x14}}], 0x18}}], 0x1, 0x4000000) (rerun: 32) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@can_newroute={0x154, 0x18, 0x1, 0x70bd2d, 0x1, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "8ca5be073cff296e"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x1, 0xff, 0x0, 0x0, 0x1, "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", 0x0, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0x0, 0x8}}]}, 0x154}, 0x1, 0x0, 0x0, 0x44004}, 0x49080) (async) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r10, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xab4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 1m12.859682208s ago: executing program 34 (id=3864): socket$vsock_stream(0x28, 0x1, 0x0) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 64) sendmmsg$sock(r0, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004fc0)="14733f9daa4e98c0c2", 0x9}], 0x1}}], 0x1, 0x0) (rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (async) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x4c, 0x0, 0x0) (async, rerun: 64) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32) ioctl$BTRFS_IOC_FS_INFO(r9, 0x8400941f, 0x0) (rerun: 32) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r8) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x44, r10, 0x1, 0xfffffffd, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xfd}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async, rerun: 64) r11 = socket(0x40000000015, 0x5, 0x0) (rerun: 64) setsockopt$sock_int(r11, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) (async) connect$pppl2tp(r11, &(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3, 0x2, 0x3, 0x4}}, 0x2e) bind$inet(r11, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async, rerun: 32) sendmmsg$inet(r11, &(0x7f00000013c0)=[{{&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001400)=[@ip_tos_int={{0x14}}], 0x18}}], 0x1, 0x4000000) (rerun: 32) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@can_newroute={0x154, 0x18, 0x1, 0x70bd2d, 0x1, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "8ca5be073cff296e"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x1, 0xff, 0x0, 0x0, 0x1, "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", 0x0, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0x0, 0x8}}]}, 0x154}, 0x1, 0x0, 0x0, 0x44004}, 0x49080) (async) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r10, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xab4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 4.149465572s ago: executing program 6 (id=4708): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000100009050000000000000000b1ff2e5c5360538c5698b6b7f39c417223b4d07456d68ee6758887d396e5c839d5a9000080afc7872d3c4a648166b916526af53872845d1f1ac1df1d4db700301c32882813fb5aad2faf74aaeeb870af1ed5a0fd551829fcd1dcccc26cf6a064e1c271394e2ef9ba127e7a8091b7ae725cf193b9cf29aa4de9082491d489819b"], 0xe0}], 0x1}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x9) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x4, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000001780)={0x1, 'vlan1\x00', {}, 0x8}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r5, 0x2, 0x2000, 0x100002, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x85}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20085}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x120, r5, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xfffffffa, 0x33}}}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x1, 0x0, 0x0, {0x800, 0x5, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x300, 0x40, 0x2}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac04}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x890d}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac08}, @NL80211_ATTR_WPA_VERSIONS={0x8}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_PMK={0x2d, 0xfe, "d2c078e20bd03bc9344ad9e7405a4b42898055ba10f518c9a192ea6e790030fa598c5d325d1bb5483f"}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x20, {0x1ee7, 0x5, 0x1ff, 0x100}}}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x400000, {0x9d, 0x0, 0x3899, 0x2}}}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb3}], @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x300, {0x2, 0x6, 0x0, 0x10}}}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0xe000, {0x2, 0x5, 0x7, 0x5}}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8004}, 0x40001) 3.722830949s ago: executing program 7 (id=4714): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x2e8}}], 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r3 = gettid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=r3) 3.605720886s ago: executing program 7 (id=4716): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000240)={0x0, 'dvmrp1\x00', {0x3}, 0x77}) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40000) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x1}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$alg(0x26, 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) recvmsg$unix(r4, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x3}, 0x0) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000018000000080000004300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\t\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r6, &(0x7f0000001240), 0x0}, 0x20) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff02c}, {0x80000006, 0xfc, 0x0, 0xfffffffd}]}, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 3.163356116s ago: executing program 6 (id=4726): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01400000000200000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff07000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x24000899}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x460, 0x2e0, 0x0, 0x0, 0x220, 0x130, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x6, &(0x7f0000000100), {[{{@ip={@multicast1, @remote, 0xff, 0x0, 'vlan1\x00', 'xfrm0\x00', {0xff}, {}, 0x73}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@multicast1, @rand_addr=0x64010101, 0xffffffff, 0xffffffff, 'wg0\x00', 'wg0\x00', {}, {}, 0x5e, 0x2, 0x40}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x1a}}}, {{@ip={@private=0x7ff, @dev={0xac, 0x14, 0x14, 0x3a}, 0xff, 0xff000000, 'batadv0\x00', 'veth0_to_batadv\x00', {}, {}, 0x33, 0x2, 0x69}, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@ah={{0x30}, {[0x866, 0x80000001]}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x5}}}, {{@ip={@multicast1, @multicast1, 0xff000000, 0x0, 'vcan0\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x21, 0x0, 0x42}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x6}}}, {{@ip={@broadcast, @local, 0xffffff00, 0xff, 'veth1_to_hsr\x00', 'ip6erspan0\x00', {}, {0xff}, 0x8, 0x2, 0x50}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0xd0}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x4}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x3}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) 2.905627802s ago: executing program 1 (id=4731): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000080)={@rand_addr=0x64010102, @multicast2=0xe0000300, 0xffff, "ff00000058b274e6d845167fefe42897ae48fc3c7b00000000000000fcff00", 0x4, 0xc, 0x6, 0x6}, 0x3c) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000040)=0x582, 0x4) 2.869489087s ago: executing program 6 (id=4732): r0 = socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000180)=@int=0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000240)={r6, 0x20, "d656c9a61490b7e8773ca55437fa234c0170c8cbe5ebdd2be9"}, &(0x7f0000000180)=0xfc86) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@getchain={0x24, 0x65, 0xfcd66a900070b049, 0x0, 0x2, {0x0, 0x0, 0x0, r7, {}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e20, @multicast1}}, 0x0, 0x0, 0x4c, 0x0, "8d44a977c77e047f10383de957bb5b4459f9f701ca0eb87123068569d40cfa677e61fa045aba77ac64a3ba055fc32d594f90f05ad0c6b3936882421a28b8358738b3041c1ffc88f55863943f96682ce9"}, 0xd8) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x2e8}}], 0x2, 0x0) 2.80722619s ago: executing program 1 (id=4733): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) pipe(&(0x7f0000000080)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') r5 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x76, &(0x7f00000001c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x40, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a300", 0x0, 0x33, 0x0, @mcast1, @private2, [@dstopts={0x4}], "0b0b79279cea4588"}}}}}}}, 0x0) write(r5, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_getaddrlabel={0x24, 0x4a, 0x300, 0x70bd2b, 0x25dfdbff, {0xa, 0x0, 0x8, 0x0, r1, 0x3000}, [@IFAL_LABEL={0x8, 0x2, 0xa}]}, 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) pread64(r5, &(0x7f0000000340)=""/255, 0xff, 0xd59) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000180001000000000000000000020000000000000900000000040500000000000000000200"], 0x28}}, 0x0) 2.736774658s ago: executing program 5 (id=4735): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="180300002e00010003000000fcdbdf2505034dd803249d79d22eda00", @ANYRES32=0x0, @ANYBLOB="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"], 0x318}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r1, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb9, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x8d, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800b000100736f636b6574000014000280080002400000001908000140000000010900010073797a30000000000900020073797a320000000014000000110001000000000000000000005dffffffffffffff5b81b82b0b2b04debc103d8e28273efd5f25aa48b5a4ebd8f210bddef728a6fd"], 0x7c}}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, r7, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newtaction={0x68, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 2.645665862s ago: executing program 7 (id=4736): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r0, &(0x7f0000000140)="9f", 0x1, 0x4040000, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x440000, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x1, 0x10, 0xe], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x2, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r13, {0x8000}, {0xffff, 0xffff}, {0x2, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r14, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) socket$nl_generic(0x10, 0x3, 0x10) 2.568027117s ago: executing program 5 (id=4737): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x51}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x22, 0x0, &(0x7f0000000100)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2000, 0xab00, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x20, 0x0, 0x2b, 0x2f, 0x0, @empty=0x2f, @multicast1}}}}) 2.366990395s ago: executing program 5 (id=4739): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0xc98, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0xbc8, 0xffffffff, 0xffffffff, 0xbc8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x8e0, 0x908, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0xd8800000, 0x1}, {0xec, 0x2}, {0x6, 0x3}, {0x80}, {0x6, 0x2}, {0x10000, 0x2}, {0xd}, {0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x4}], [{0x9, 0xfffffffb}, {0x7, 0x7}, {0x2, 0x80000000}, {0x9, 0x1}, {0x799, 0x8001}, {0x0, 0x2}, {0xc2, 0x5}, {0x8, 0x1000}, {0x40, 0x9}, {0xff, 0x81}, {0x636, 0x6}], 0x6}, {[{0x8, 0x2}, {0xe000}, {0xb8b4, 0x1}, {0x3c5f9b87, 0x3}, {0x3, 0x1}, {}, {0x29b5, 0x2}, {0x54a2f77, 0x3}, {0x3, 0x3}, {0x1000, 0x2}, {0x1, 0x2}], [{0x6, 0x5}, {0x5, 0x7}, {0x2, 0x3}, {0x80000000, 0x2}, {0xee84, 0x8000}, {0x9, 0x9}, {0x3800000, 0x3}, {0x800, 0x9}, {0xfffffffa, 0x1}, {0x0, 0x2}, {0x7, 0x7}], 0x4, 0x3}, {[{0x286f, 0x1}, {0x554b, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x5}, {0x9, 0x1}, {0x6000000, 0x3}, {0x400, 0x3}, {0x9, 0x2}, {0x8001, 0x2}, {0xc5bf}], [{0x6, 0x7f}, {0x5, 0xfffffff9}, {0x7, 0x8}, {0xb, 0x3}, {0x8, 0x9}, {0x2}, {0x7}, {0x7, 0x1000}, {0xfff, 0x2e4}, {0x0, 0x400}, {0x0, 0x8}], 0xb, 0x4}, {[{0x5, 0x2}, {0x2, 0x1}, {0x6, 0x3}, {0xfffffffc, 0x1}, {0x4, 0x3}, {0x10001}, {0xca0, 0x2}, {0x10, 0x1}, {0x8, 0x1}, {0x6796, 0x3}, {0x8, 0x1}], [{0x6, 0x6}, {0x1, 0x7}, {0x5, 0x9}, {0xffff, 0x2}, {0xc, 0x5}, {0x51a3, 0x3}, {0x8, 0x5}, {0xfffffff7, 0x9}, {0xd0, 0x1}, {0xfffffff8, 0x8}, {0x7656, 0x2}], 0x7}, {[{0x2, 0x2}, {0x10001}, {0x4eb}, {0x10000, 0x3}, {0x2, 0x2}, {0x3}, {0x81}, {0x4, 0x1}, {0x10001, 0x2}, {0x9, 0x3}, {0x1, 0x2}], [{0x4}, {0x0, 0x400}, {0xd9a8, 0x7}, {0x1000, 0x8f8}, {0x3, 0x10001}, {0x3, 0x7c67}, {0x6, 0x80}, {0xfffffff9, 0x2}, {0xffff, 0x2}, {0x1000, 0x9}, {0x3, 0x2}], 0x1, 0x4}, {[{0xabb918, 0x1}, {0x3, 0x1}, {0x8, 0x2}, {0x9, 0x1}, {0x2}, {0x9, 0x1}, {0x80000000, 0x3}, {0x1, 0x2}, {0x0, 0xc49aafde8229cbf1}, {0x4, 0x1}, {0x3, 0x2}], [{0x8b, 0x9}, {0x6, 0x553}, {0x1, 0xe0}, {0x3, 0x4ad}, {0x0, 0x10001}, {0x1, 0x2}, {0xd1, 0x100}, {0x6, 0x7641}, {0x3, 0xfffffffc}, {0x2, 0x4}, {0x9, 0x2}], 0x1, 0x1}, {[{0x8015, 0x3}, {0x3, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x37b, 0x3}, {0x5}, {0x2, 0x3}, {0x1, 0x2}, {0x7f}, {0x6, 0x2}, {0xfffffff6, 0x2}], [{0x9, 0x7}, {0x8, 0x7}, {0x6, 0x4}, {0x800, 0x80000001}, {0x0, 0x10000}, {0x2, 0x3b58}, {0x4ca7ea08, 0x8001}, {0x0, 0xa9b}, {0x1ff}, {0x5, 0x2}, {0x8, 0x4}], 0xa, 0xb}, {[{0x10001, 0x3}, {0x3}, {0xc, 0x1}, {0x7a, 0x3}, {0x6, 0x1}, {0x80000001, 0x3}, {0x3, 0x2}, {0xa}, {0x401, 0x1}, {0x9}, {0x1, 0x2}], [{0x200, 0x1}, {0x8, 0x1aaa}, {0x706, 0x9}, {0x9, 0x2}, {0x4, 0x7}, {0x5, 0x9}, {0x3}, {0x5, 0xbf789c5e}, {0x8, 0x3}, {0x7, 0x10001}, {0x1}], 0xa, 0x1}, {[{0xc2}, {0x5, 0x1}, {0x7cd72bba}, {0x8, 0x2}, {0x400}, {0x7ff, 0x3}, {0x10001}, {0xe1a}, {0x9, 0x3}, {0xfffffffc, 0x3}, {0x9}], [{0x10, 0x4}, {0x1, 0x10000}, {0xbf9, 0x6}, {0x4}, {0x101, 0x8}, {0x100, 0x4}, {0x0, 0xb6e}, {0x7f, 0x8}, {0x9, 0x7}, {0xffff, 0x92a}, {0xd, 0x2}], 0x9, 0x2}, {[{0x8, 0x3}, {0x80000001}, {0x8, 0x3}, {0x4, 0x2}, {0x1, 0x3}, {0x4}, {0x4, 0x1}, {0x1, 0x3}, {0xc, 0x3}, {0x101, 0x2}, {0x1}], [{0x4, 0x3}, {0x0, 0x8}, {0xffffe5cb, 0x1}, {0x7f, 0xfffffff4}, {0x40, 0xffffffff}, {0x2, 0x7}, {0x7fff, 0x6}, {0x0, 0x8}, {0xffffff2e, 0x7ff}, {0x40, 0xa}, {0x3, 0x7}], 0x6, 0x2}, {[{0x1ff}, {0x5, 0x2}, {0x10001, 0x1}, {0x2, 0x2}, {0xff, 0x1}, {0x1, 0x1}, {0x800, 0x3}, {0x80000001, 0x2}, {0x1ef6, 0x2}, {0x1, 0x2}, {0xba, 0x3}], [{0x18d, 0x7}, {0x0, 0x2}, {0xdf91, 0x1}, {0xe08, 0x6}, {0x4, 0x7ff}, {0xa64, 0x101}, {0x7, 0x4}, {0x401, 0x2}, {0x7ff}, {0x0, 0xd4}, {0xef}], 0x2, 0x7}]}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xc4, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xcf8) 2.365856033s ago: executing program 7 (id=4740): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, 0x14, 0x7a3cc0df0763377f, 0x0, 0x0, {0x10, 0x24}}, 0x14}}, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r1, 0x29, 0x31, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="440100001a0001000000000000000000000000000000000000e6ff0000000000000000000000000000003300000000000d6352742a3badee0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e40010000000000000000000000000000000033000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000008001600810000004c0014"], 0x144}}, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}}, 0x44080) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xcc2}, 0x1c) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x64, 0x1, 0x9, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xffffff80}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048004}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xcc}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r8 = socket$kcm(0x10, 0x100000000002, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x180, r6, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0x4}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x18}, @NL80211_ATTR_IE={0x10d, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x7}, 0x5, 0x3, @device_b, 0x4, 0x1, 0x5eb}}, @measure_req={0x26, 0x24, {0x8, 0x37, 0xa3, "932e63627f0e3ef2742c880ca3863f05e5d04cf8e75dfd14f8dc066270c8297c03"}}, @perr={0x84, 0xca, {0x5, 0xe, [{{0x0, 0x1}, @device_b, 0x4, @value, 0x2b}, {{}, @device_a, 0xd, @void, 0x35}, {{0x0, 0x1}, @device_b, 0x3, @value, 0x9}, {{}, @broadcast, 0x8, @void, 0x28}, {{}, @broadcast, 0x9, @void, 0x15}, {{}, @device_b, 0xbc, @void, 0x31}, {{}, @device_b, 0x0, @void, 0x38}, {{0x0, 0x1}, @broadcast, 0x1, @value=@device_b, 0x25}, {{}, @broadcast, 0x7, @void, 0xc}, {{}, @device_b, 0x9, @void, 0xd}, {{}, @device_a, 0x319, @void, 0x9}, {{}, @device_b, 0xe1, @void, 0x27}, {{}, @device_b, 0x80000000, @void, 0x2a}, {{}, @broadcast, 0x6, @void, 0x3}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x1a, 0x2a, [@peer_mgmt={0x75, 0x14, {0x0, 0x6, @void, @void, @val="7c96ba0f6b36379cdbcfc755de5a52f2"}}]}, @NL80211_ATTR_IE={0xf, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @challenge={0x10, 0x1, 0x32}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x40}, 0x401c800) 2.237029573s ago: executing program 5 (id=4742): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01400000000200000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff07000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x24000899}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x4}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x3}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) 2.220542166s ago: executing program 1 (id=4743): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="db84feca8d5a50353cb7c7275c787114", 0x10) (async, rerun: 32) r1 = socket(0x10, 0x3, 0x0) (rerun: 32) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000200)=@newqdisc={0x7c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_cake={{0x9}, {0x46, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0xb}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x7c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="256089a5dcf33aa5501f1778e67823f72decd21947cbe0c24034f95b5eed6fa5538ee8473b7ee2a1ffcc1592dc27136140bb54895bbd1bfccf801fd34e597ce185c155e35cd27668dc2be3536a91741c8553e41987f8968ec74e9748100a9f45fa8ab4bf144c0fd5e949c130a70f8a6c704af44f7685ce4e858092f67cbaf4ce6c75bd4487c39db117812560351d2ff10953de8b386067b9cda49f00"/165, @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000000000000c4100000014001462726f6164636173742d6c696e6b0000"], 0x30}}, 0x0) 2.210373911s ago: executing program 3 (id=4744): r0 = socket(0x10, 0x1, 0xffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8929, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) 2.101921851s ago: executing program 3 (id=4745): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000400000700000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b0000000000"], 0x30}}, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, 'lo\x00'}}, 0x1e) 2.096145346s ago: executing program 5 (id=4746): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 1.96162639s ago: executing program 3 (id=4747): mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0xc, 0x1, [{0x7f, 0x0, 0x1}, {0x200}]}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x0) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008000000", @ANYBLOB="ffff"], 0x40}, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x1000) 1.921274394s ago: executing program 6 (id=4748): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80014040}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x74, r1, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r1, 0x1, 0x400000, 0x25dfdbf9, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c080}, 0x4004000) 1.900584609s ago: executing program 1 (id=4749): r0 = socket$inet6(0xa, 0x4, 0x9) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'team0\x00', {0x2, 0x0, @remote}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff"], 0x3}}, 0x0) r2 = epoll_create1(0x0) (async, rerun: 64) r3 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 64) sendmsg$AUDIT_ADD_RULE(r3, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x43c, 0x3f3, 0x100, 0x70bd27, 0x25dfdbfd, {0x3, 0x0, 0x2e, [0x5, 0x5, 0x4, 0x7, 0x6, 0x6, 0x10001, 0xb, 0x8001, 0x8, 0x8, 0x7, 0x7, 0x800, 0x8, 0x9, 0x2, 0x6, 0x5, 0x0, 0x9, 0x9, 0x1000, 0x7, 0xe, 0x3, 0x5, 0xffff, 0x4, 0xc647, 0x6, 0x0, 0x1, 0x6, 0x8, 0xfffffff7, 0xb, 0xd, 0x4, 0x1d7, 0x1, 0x0, 0x6, 0x2, 0x7fff, 0x7, 0xe3, 0x4, 0x7, 0x80, 0x84f1, 0xfffffc01, 0x1b, 0x9, 0xa, 0x6, 0x1, 0x58, 0x1, 0x7, 0x5, 0x4, 0x4, 0x4f], [0x3ff, 0x81, 0x857, 0x8, 0x11500756, 0x80000001, 0x8, 0x0, 0x0, 0x3, 0x6, 0x6, 0x5, 0x27, 0x2, 0x7, 0xe9e, 0xc, 0x9, 0x1, 0x6, 0x400, 0x6, 0x7, 0x5, 0x0, 0x687, 0x1a, 0x800, 0xfffffff8, 0x3, 0x2, 0x7, 0x7fffffff, 0x4, 0x3, 0x8, 0x61, 0x5, 0x3f4, 0x1, 0x81, 0x7fff, 0x2, 0x0, 0x1, 0xfff, 0x1ff, 0x10000, 0xa, 0x80, 0x437, 0x9, 0x2, 0x3, 0x4b1, 0x0, 0x6, 0x3, 0x6, 0xfc, 0x30f6, 0x0, 0x1a12b584], [0x8, 0x5, 0x10, 0xe20, 0x9, 0xffffffff, 0x401, 0x5, 0x3, 0x5, 0xff, 0x5, 0x100, 0xfffffff0, 0x379b, 0xd, 0x7f11, 0x6, 0x3ff, 0xfffffff7, 0x5, 0x1000, 0x0, 0x4, 0x4, 0x6, 0xfffffff7, 0xfffffe00, 0x400, 0x10, 0xb0, 0x6, 0x0, 0x7, 0xffff, 0x2, 0x7, 0x35, 0xfffffc01, 0x4, 0xc, 0x4, 0x8000, 0xdaf, 0x6, 0x9, 0x3, 0x6, 0x10, 0x0, 0x9, 0x7, 0x1, 0x8e6c, 0x2, 0x3, 0x0, 0x3, 0x0, 0x4, 0x2, 0xa2, 0x5, 0x8], [0x8, 0x2, 0x5, 0xed5f, 0x9b64, 0x9, 0x4, 0xd2, 0x100, 0x80, 0x9, 0x3, 0x100, 0x9, 0x4, 0x5, 0xfffffffd, 0x3, 0x5, 0xfffffffa, 0xbf, 0xf, 0x1a, 0xfffffbff, 0x400, 0xfffffff9, 0xffff, 0x3ff, 0x0, 0x7, 0xf, 0xe00, 0x0, 0x0, 0x3, 0x1, 0x2, 0x200000, 0xf9, 0x4, 0x861, 0x7fffffff, 0x6, 0xfffffffe, 0x8, 0x3, 0x5, 0x4, 0x0, 0xb7d, 0xfabf, 0x4, 0x6, 0xfffffffe, 0x4, 0x0, 0xfffffff7, 0x7fff, 0x6, 0x2, 0x1e63, 0x5, 0x0, 0x5], 0x1b, ['\x00', '^^\x00', 'syz1\x00', '\x00', '-,+\x00', '\x00', 'syz0\x00', '!\x00', 'syz1\x00']}, ["", "", "", "", "", ""]}, 0x43c}, 0x1, 0x0, 0x0, 0x10000810}, 0x20040880) (async) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)) (async) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async, rerun: 64) r5 = socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_getnexthop={0x18, 0x6a, 0x0, 0x70bd27, 0x25dfdbfc}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e, 0x1}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) close(r7) 1.813647944s ago: executing program 3 (id=4750): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@private1={0xfc, 0x1, '\x00', 0x3}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x24}, 0x9, 0x8, 0x0, 0x0, 0x4, 0x200002}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0x2260}}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x38, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x9, 0x1, @l2={'eth', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001e008d2a00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="000002"], 0x1c}, 0x1, 0x0, 0x0, 0x4040084}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@private1={0xfc, 0x1, '\x00', 0x3}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x24}, 0x9, 0x8, 0x0, 0x0, 0x4, 0x200002}) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) (async) socket$unix(0x1, 0x2, 0x0) (async) sendmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0x2260}}], 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x38, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x9, 0x1, @l2={'eth', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001e008d2a00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="000002"], 0x1c}, 0x1, 0x0, 0x0, 0x4040084}, 0x0) (async) 1.751508282s ago: executing program 6 (id=4751): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8915, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8915, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r4, 0x6, 0x100}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={r4, 0x6c, &(0x7f0000000000)=[@in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, @in6={0xa, 0x4e22, 0x5141, @rand_addr=' \x01\x00', 0x9}]}, &(0x7f00000000c0)=0x10) 1.728863743s ago: executing program 1 (id=4752): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20}, {0x6}]}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a32000000002800038024000080090026400000000018000b80140001800a0001006c696d697400000004fe02800900010073797a30"], 0xd8}}, 0x0) 1.62537504s ago: executing program 6 (id=4753): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bond0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS={0x8}]}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xb, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xb, 0x3, 0xa7, 0x101, 0xd8d6, 0x4001}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) 1.604520049s ago: executing program 1 (id=4754): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r2) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000050000000c001600010000000014000800"/46], 0x34}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x10, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x42) 1.417883381s ago: executing program 7 (id=4755): syz_emit_ethernet(0x86, &(0x7f0000000300)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x2, @local, @local, {[@rr={0x7, 0x3}, @ssrr={0x89, 0x7, 0x9d, [@empty]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000003a00010020000000000000000a000000140001"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, r2, 0xd574370038829967, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x11c, r2, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xb8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_ID={0x90, 0x3, "6039181a7e2f6df0595aa6838a810c6d383061a2eb2b4665e89aa7e6f4186bc40c109d6d3127ca34596cab5f463cbd7dbd06beab6138a93f137115de12e56ce18432d3873f3866cf2c0540fb70619a5cd2c35c5374bb3a415c981948456f996643382997fcaba95c33cde589662d963b8bf2b5e7f117e506cce73c10078ed69e85939cac9b90893c91a04a79"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffff800}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffb2ff76a9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x50}, 0x4c800) 44.235957ms ago: executing program 7 (id=4756): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @private=0xa010102}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r1, 0xfffffff0}, 0x8) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000100)=0x5, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000140)={r2, 0x1000, 0xffffffff7fffffff, 0x10000}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000180)={0x0, 0x80, 0x8000, 0x1, 0xb6d, 0x80000000, 0x1ff, 0x9, r1}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x68, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x3, @private2, 0xffff}, @in6={0xa, 0x4e21, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e24, @local}]}, &(0x7f0000000280)=0x10) sendmsg$nl_route(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@getnexthop={0x44, 0x6a, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NHA_MASTER={0x8, 0xa, 0x2}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_FDB={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4041}, 0x14) getsockopt$IP_SET_OP_GET_BYINDEX(r3, 0x1, 0x53, &(0x7f0000000400)={0x7, 0x7, 0x2}, &(0x7f0000000440)=0x28) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000480)=""/4096, &(0x7f0000001480)=0x1000) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001500), r3) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000001880)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001840)={&(0x7f0000001540)={0x2cc, r5, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x399a}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0xe8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4af}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbef}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'pimreg1\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x4c014}, 0x20040000) pipe(&(0x7f00000018c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000001940)={0x0, @multicast2, @empty}, &(0x7f0000001980)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000019c0)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000001ac0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)=@ipv6_delroute={0x48, 0x19, 0x400, 0x70bd27, 0x25dfdbfb, {0xa, 0x14, 0x20, 0x7f, 0xfc, 0x0, 0xfd}, [@RTA_OIF={0x8, 0x4, r8}, @RTA_PREF={0x5, 0x14, 0x9}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x4, 0xe, r9}}, @RTA_PRIORITY={0x8, 0x6, 0x1000}, @RTA_IIF={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4814}, 0x60c0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000001b00), r10) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000001d00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001b80)={0x110, r5, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffff801}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4a8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x45}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9c0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3e, @empty, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x98dd, @remote, 0x9}}}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}]}, 0x110}, 0x1, 0x0, 0x0, 0xbefc2c47441bd110}, 0x4000) ioctl$F2FS_IOC_FLUSH_DEVICE(r7, 0x4008f50a, &(0x7f0000001d40)={0x10, 0x7}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001dc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x40, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r12, 0x8983, &(0x7f0000001ec0)={0x8, 'veth1_virt_wifi\x00', {'geneve0\x00'}, 0x1000}) bpf$ENABLE_STATS(0x20, &(0x7f0000001f00), 0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f0000001f40)) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r13, 0x84, 0x7c, &(0x7f0000001f80)={r1, 0x8, 0x3}, &(0x7f0000001fc0)=0x8) 43.568959ms ago: executing program 3 (id=4757): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES8=r0, @ANYRES32=0xee00, @ANYRESHEX], 0x128}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040084}, 0x4008) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000f7ff06000000000000000000fe80000000000000000000000000001be0000002000000000000000000000000ffff0000000000000008efb729000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000b40000000000000200000000000000000000007ffffffe0000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) 43.26129ms ago: executing program 5 (id=4758): r0 = socket$inet6(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000002280)=""/4086, &(0x7f0000000040)=0xff6) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaa3d63403aaaaaaaa0180c2001f196871f19a000086dd2c7b57843c127eb9cd602a84350014060000000000000400"], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000f020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, 0x0, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null]}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x1, 'dh\x00', 0x0, 0x85, 0x4080069}, 0x2c) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001800dd8d0000000000000000020002000000000500000000060015000200000014001680100008800c0001800600010000000000"], 0x38}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r1], 0xb8}, 0x1, 0x0, 0x0, 0x134}, 0x480d4) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000040)) setsockopt$MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x4e20, 0x9, @remote, 0x7fff}, {0xa, 0x4e20, 0x80000001, @remote, 0x2}, 0xffffffffffffffff, {[0xfffffffe, 0xe2, 0x81, 0x0, 0x4, 0x8, 0x4, 0x2]}}, 0x5c) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) accept$netrom(r2, &(0x7f00000001c0)={{0x3, @rose}, [@default, @rose, @rose, @default, @null, @null, @netrom, @rose]}, &(0x7f0000000240)=0x48) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000280)=0xfffffffffffffe01, 0x8) setsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f00000000c0), 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) 0s ago: executing program 3 (id=4759): r0 = socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000180)=@int=0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000240)={r6, 0x20, "d656c9a61490b7e8773ca55437fa234c0170c8cbe5ebdd2be9"}, &(0x7f0000000180)=0xfc86) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@getchain={0x24, 0x65, 0xfcd66a900070b049, 0x0, 0x2, {0x0, 0x0, 0x0, r7, {}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e20, @multicast1}}, 0x0, 0x0, 0x4c, 0x0, "8d44a977c77e047f10383de957bb5b4459f9f701ca0eb87123068569d40cfa677e61fa045aba77ac64a3ba055fc32d594f90f05ad0c6b3936882421a28b8358738b3041c1ffc88f55863943f96682ce9"}, 0xd8) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x2e8}}], 0x2, 0x0) kernel console output (not intermixed with test programs): attribute type 1 has an invalid length. [ 361.290051][T17533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.311865][T17755] sctp: [Deprecated]: syz.4.3376 (pid 17755) Use of int in max_burst socket option. [ 361.311865][T17755] Use struct sctp_assoc_value instead [ 361.423108][T17757] 8021q: adding VLAN 0 to HW filter on device bond3 [ 361.433734][T17757] bond2: (slave bond3): making interface the new active one [ 361.442082][T17757] bond2: (slave bond3): Enslaving as an active interface with an up link [ 361.498783][T17533] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.513570][ T6344] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.520822][ T6344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.536412][T17769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3378'. [ 361.580882][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.588063][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.786622][T17779] netlink: 'syz.3.3381': attribute type 64 has an invalid length. [ 361.967303][T17792] netlink: 'syz.5.3385': attribute type 10 has an invalid length. [ 361.967703][T17533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.987028][T17792] batadv0: entered allmulticast mode [ 361.997042][T17792] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 362.323142][T17812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.426330][T17816] netlink: 'syz.5.3391': attribute type 21 has an invalid length. [ 362.473085][T17533] veth0_vlan: entered promiscuous mode [ 362.505218][ T5836] Bluetooth: hci1: command tx timeout [ 362.528721][T17533] veth1_vlan: entered promiscuous mode [ 362.574189][T17823] bridge_slave_1: left allmulticast mode [ 362.583221][T17823] bridge_slave_1: left promiscuous mode [ 362.620572][T17823] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.637394][T17823] bridge_slave_0: left allmulticast mode [ 362.643348][T17823] bridge_slave_0: left promiscuous mode [ 362.650445][T17823] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.769691][T17533] veth0_macvtap: entered promiscuous mode [ 362.785272][T17533] veth1_macvtap: entered promiscuous mode [ 362.823903][T17533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.846050][T17533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.893190][ T196] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.917256][ T196] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.950496][ T196] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.963936][ T196] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.302697][ T6344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.320713][ T6344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.380016][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.391973][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.415271][T17852] dvmrp0: entered allmulticast mode [ 363.653827][T17872] __nla_validate_parse: 11 callbacks suppressed [ 363.653846][T17872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3408'. [ 363.654531][T17870] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 364.399803][T17926] netlink: 'syz.4.3415': attribute type 27 has an invalid length. [ 364.585539][ T5836] Bluetooth: hci1: command tx timeout [ 365.288571][T17964] netlink: 'syz.1.3429': attribute type 1 has an invalid length. [ 365.296667][T17964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3429'. [ 365.974600][T18006] netlink: 'syz.4.3444': attribute type 1 has an invalid length. [ 365.983672][T18006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3444'. [ 366.125979][T18019] netlink: 'syz.4.3448': attribute type 1 has an invalid length. [ 366.162295][T18018] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 366.227987][T18021] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3449'. [ 366.298332][T18029] netlink: 'syz.4.3452': attribute type 1 has an invalid length. [ 366.327907][T18030] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3451'. [ 366.347018][T17965] netlink: 'syz.3.3427': attribute type 16 has an invalid length. [ 366.360368][T17965] netlink: 'syz.3.3427': attribute type 17 has an invalid length. [ 366.361149][T18032] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3449'. [ 366.432650][T18033] bond5 (unregistering): Released all slaves [ 366.501518][T17965] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 366.537318][T18038] ip6tnl1: entered promiscuous mode [ 366.542661][T18038] ip6tnl1: entered allmulticast mode [ 366.577383][T18029] lo: entered allmulticast mode [ 366.583060][T18029] lo: left allmulticast mode [ 366.795334][T18054] netlink: 'syz.6.3458': attribute type 1 has an invalid length. [ 366.804917][T18054] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3458'. [ 367.168155][T18073] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3463'. [ 367.274938][T18077] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3466'. [ 367.313840][T18079] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3467'. [ 367.491784][T18086] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20001 [ 368.177362][T18134] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 368.191401][T18134] bond4 (unregistering): Released all slaves [ 368.257164][T18136] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 368.328914][T18136] bond4 (unregistering): Released all slaves [ 368.666500][T18162] netlink: 'syz.3.3493': attribute type 1 has an invalid length. [ 368.680191][T18162] netlink: 'syz.3.3493': attribute type 1 has an invalid length. [ 368.874160][T18180] netlink: 'syz.1.3499': attribute type 1 has an invalid length. [ 368.901545][T18182] __nla_validate_parse: 7 callbacks suppressed [ 368.901561][T18182] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3498'. [ 368.976131][T18180] bond2: entered promiscuous mode [ 368.981624][T18180] 8021q: adding VLAN 0 to HW filter on device bond2 [ 368.990709][T18182] bridge_slave_1: left allmulticast mode [ 368.998697][T18182] bridge_slave_1: left promiscuous mode [ 369.004596][T18182] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.013911][T18182] bridge_slave_0: left allmulticast mode [ 369.020508][T18182] bridge_slave_0: left promiscuous mode [ 369.027971][T18182] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.144305][T18180] bond2: (slave bridge0): making interface the new active one [ 369.154484][T18180] bridge0: entered promiscuous mode [ 369.160803][T18180] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 369.236318][T18205] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.244037][T18205] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.283638][T18209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3506'. [ 369.283843][T18205] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.299787][T18205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.307401][T18205] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.314566][T18205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.359370][T18205] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 369.507289][T18218] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.536560][T18218] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.580389][T18213] team_slave_0: entered promiscuous mode [ 369.586710][T18213] team_slave_1: entered promiscuous mode [ 369.597766][T18213] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 369.606923][T18213] team0: Device macvtap1 is already an upper device of the team interface [ 369.617700][T18213] team_slave_0: left promiscuous mode [ 369.623213][T18213] team_slave_1: left promiscuous mode [ 369.675626][T18217] geneve2: entered promiscuous mode [ 369.690815][T18217] geneve2: entered allmulticast mode [ 369.749752][T18229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3513'. [ 369.847373][T18218] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.879955][T18218] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.931877][T18240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3517'. [ 369.950507][ T36] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 369.959663][ T36] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 369.979026][T18240] bridge_slave_1: left allmulticast mode [ 369.985116][T18240] bridge_slave_1: left promiscuous mode [ 369.995981][T18240] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.032781][T18240] bridge_slave_0: left allmulticast mode [ 370.043623][T18240] bridge_slave_0: left promiscuous mode [ 370.051858][T18240] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.187184][T18242] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3518'. [ 370.199069][T18259] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3521'. [ 370.302392][T18261] netem: change failed [ 370.420464][T18275] validate_nla: 2 callbacks suppressed [ 370.420484][T18275] netlink: 'syz.4.3529': attribute type 10 has an invalid length. [ 370.525489][T18275] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 370.595852][T18284] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3532'. [ 370.635189][T18284] xt_limit: Overflow, try lower: 271964/0 [ 370.646113][T18284] xt_limit: Overflow, try lower: 271964/0 [ 370.657310][T18284] xt_limit: Overflow, try lower: 271964/0 [ 370.708871][T18296] netlink: 'syz.6.3536': attribute type 10 has an invalid length. [ 370.725471][T18296] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 370.868034][T18308] lo speed is unknown, defaulting to 1000 [ 370.882030][T18308] lo speed is unknown, defaulting to 1000 [ 370.900738][T18308] lo speed is unknown, defaulting to 1000 [ 370.947482][T18308] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 371.022588][T18316] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 371.039767][T18308] lo speed is unknown, defaulting to 1000 [ 371.055527][T18308] lo speed is unknown, defaulting to 1000 [ 371.091154][T18308] lo speed is unknown, defaulting to 1000 [ 371.103493][T18308] lo speed is unknown, defaulting to 1000 [ 371.113530][T18308] lo speed is unknown, defaulting to 1000 [ 371.127897][T18320] netlink: 51 bytes leftover after parsing attributes in process `syz.4.3543'. [ 371.138267][T18308] lo speed is unknown, defaulting to 1000 [ 371.148912][T18320] Bluetooth: MGMT ver 1.23 [ 371.172103][T18308] lo speed is unknown, defaulting to 1000 [ 371.196772][T18308] lo speed is unknown, defaulting to 1000 [ 371.257519][T18308] lo speed is unknown, defaulting to 1000 [ 371.289933][T18331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3547'. [ 371.310947][T18328] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 371.322787][T18332] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3546'. [ 371.323427][T18328] bond4 (unregistering): Released all slaves [ 371.472856][T18218] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.495220][T18218] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.510797][T18218] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 371.606526][T18218] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.625207][T18218] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.637363][T18218] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 371.884898][ T36] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.898230][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 371.954917][ T36] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 371.989117][ T36] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.001978][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 372.022232][ T36] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 372.103943][ T6344] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.132897][ T6344] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 372.142027][ T6344] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 372.188878][ T6344] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.211881][ T6344] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 372.246680][ T6344] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 372.284973][ T30] audit: type=1107 audit(1761616861.226:5): pid=18387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 373.081029][T18441] syzkaller1: entered promiscuous mode [ 373.187443][T18441] syzkaller1: entered allmulticast mode [ 373.789213][T18472] geneve2: entered promiscuous mode [ 373.794459][T18472] geneve2: entered allmulticast mode [ 373.806751][T18476] netlink: 'syz.3.3594': attribute type 9 has an invalid length. [ 373.850749][ T36] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 373.880744][ T36] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 373.913589][ T36] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 373.932145][ T36] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 373.950882][T18482] __nla_validate_parse: 5 callbacks suppressed [ 373.950898][T18482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3597'. [ 374.010832][T18472] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.024530][T18472] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.045434][T18484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3597'. [ 374.047902][T18472] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 374.123249][T18452] xt_hashlimit: max too large, truncated to 1048576 [ 374.253300][T18472] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.318952][T18498] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3600'. [ 374.336608][T18472] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.374915][T18472] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 374.530957][T18472] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.559523][T18472] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.577756][T18472] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 374.693078][T18472] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.714729][T18514] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3602'. [ 374.722995][T18526] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3608'. [ 374.728311][T18472] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.764013][T18472] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 374.838351][T18532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3609'. [ 374.858448][T18534] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3610'. [ 374.940063][ T6344] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.951597][ T6344] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 374.960607][ T6344] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 374.982467][ T1169] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.996715][ T1169] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 375.006028][ T1169] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 375.014499][T18541] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 375.048706][ T6344] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.057747][ T6344] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 375.066961][ T6344] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 375.111553][T18541] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3612'. [ 375.163712][ T6344] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.172703][ T6344] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 375.181395][ T6344] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 375.243066][T18545] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3614'. [ 375.259319][T18545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3614'. [ 375.463011][T18554] pim6reg: entered allmulticast mode [ 375.513261][T18561] netlink: 'syz.4.3619': attribute type 13 has an invalid length. [ 375.600657][T18552] IPVS: persistence engine module ip_vs_pe_À not found [ 375.718881][T18578] tipc: Started in network mode [ 375.720099][T18582] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 4, id = 0 [ 375.734029][T18578] tipc: Node identity 6eb9b78b70bc, cluster identity 4711 [ 375.757136][T18578] tipc: Enabled bearer , priority 0 [ 375.781185][T18568] tipc: Resetting bearer [ 375.815844][T18567] tipc: Disabling bearer [ 375.837027][T18581] netlink: 'syz.3.3623': attribute type 12 has an invalid length. [ 376.145577][T18607] bond0: (slave bridge0): Releasing backup interface [ 376.165957][T18607] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.173420][T18607] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.212525][T18618] IPVS: set_ctl: invalid protocol: 8 10.1.1.1:20002 [ 376.221993][T18620] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 376.222429][T18607] bridge_slave_0: left allmulticast mode [ 376.245806][T18607] bridge_slave_0: left promiscuous mode [ 376.251782][T18607] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.262589][T18607] bridge_slave_1: left allmulticast mode [ 376.273823][T18607] bridge_slave_1: left promiscuous mode [ 376.280446][T18607] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.297089][T18607] bond0: (slave bond_slave_0): Releasing backup interface [ 376.310172][T18607] bond0: (slave bond_slave_1): Releasing backup interface [ 376.332045][T18607] team0: Port device team_slave_0 removed [ 376.359168][T18607] team0: Port device team_slave_1 removed [ 376.366163][T18607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.373788][T18607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.383699][T18607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.391303][T18607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.400960][T18607] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 376.432723][T18622] tipc: Started in network mode [ 376.441213][T18622] tipc: Node identity 1e916588ce1e, cluster identity 4711 [ 376.448973][T18622] tipc: Enabled bearer , priority 0 [ 376.537856][T18626] syzkaller0: entered promiscuous mode [ 376.546758][T18626] syzkaller0: entered allmulticast mode [ 376.567772][T18620] tipc: Resetting bearer [ 376.622885][T18609] tipc: Resetting bearer [ 376.679803][T18609] tipc: Disabling bearer [ 376.691928][T18637] tipc: Enabling not permitted [ 376.699155][T18637] tipc: Enabling of bearer rejected, failed to enable media [ 376.719952][T18642] tipc: Enabled bearer , priority 0 [ 376.738741][T18642] syzkaller0: entered promiscuous mode [ 376.749690][T18642] syzkaller0: entered allmulticast mode [ 376.808964][T18642] tipc: Resetting bearer [ 376.822202][T18641] tipc: Resetting bearer [ 376.883636][T18641] tipc: Disabling bearer [ 377.605920][T18696] syzkaller0: entered promiscuous mode [ 377.611426][T18696] syzkaller0: entered allmulticast mode [ 377.676537][T18696] netlink: 'syz.3.3662': attribute type 7 has an invalid length. [ 377.837797][T18709] 8021q: adding VLAN 0 to HW filter on device bond6 [ 377.883887][T18718] bond6: entered allmulticast mode [ 378.038875][T18727] netlink: 'syz.4.3671': attribute type 1 has an invalid length. [ 378.254507][T18742] netlink: 'syz.4.3677': attribute type 7 has an invalid length. [ 378.337903][T18737] sit0: left promiscuous mode [ 378.456584][T18737] batadv0: left allmulticast mode [ 378.539449][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880294e5000: rx timeout, send abort [ 378.549610][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802174cc00: rx timeout, send abort [ 378.558124][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880294e5000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 378.572803][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802174cc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 378.601582][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.732541][T18737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.769746][T18737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.117779][T18737] bond1: left promiscuous mode [ 379.188354][T18740] geneve2: entered promiscuous mode [ 379.284522][ T36] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.304197][ T36] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 379.328589][ T36] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.349844][ T36] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 379.386953][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 379.451818][ T36] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.474709][ T36] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 379.516795][ T36] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.527739][ T36] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 379.598305][T18731] tipc: Resetting bearer [ 379.664251][T18784] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 379.676373][T18784] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 379.705790][T18784] gretap1: entered promiscuous mode [ 379.711667][T18784] gretap1: entered allmulticast mode [ 379.722341][T18731] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 379.735199][T18731] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 379.872207][T18731] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 379.886618][T18731] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 379.938530][T18731] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 379.953672][T18731] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 379.994660][T18731] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 380.001017][T18731] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 380.018607][T18731] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 380.025000][T18731] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 380.206641][T18807] __nla_validate_parse: 20 callbacks suppressed [ 380.206660][T18807] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3696'. [ 380.250866][T18811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3697'. [ 380.329569][T18816] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3699'. [ 380.341542][T18813] bond8: option min_links: invalid value (18446744073709551611) [ 380.351112][T18813] bond8: option min_links: allowed values 0 - 2147483647 [ 380.360948][T18813] bond8 (unregistering): Released all slaves [ 380.403368][T18821] netlink: 'syz.1.3701': attribute type 32 has an invalid length. [ 380.418560][T18820] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3700'. [ 380.530940][T18826] netlink: 'syz.1.3702': attribute type 8 has an invalid length. [ 380.835167][T18850] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3708'. [ 380.861475][T18845] syzkaller1: entered promiscuous mode [ 380.867140][T18845] syzkaller1: entered allmulticast mode [ 380.911930][T18854] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3711'. [ 381.031089][T18864] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3715'. [ 381.127870][T18868] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 381.133963][T18868] syzkaller1: Refused to change device type [ 381.272488][T18881] tipc: Trying to set illegal importance in message [ 382.971511][T18895] tap0: tun_chr_ioctl cmd 1074025677 [ 382.977084][T18895] tap0: linktype set to 65534 [ 383.121975][T18908] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3727'. [ 383.207159][T18910] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3729'. [ 383.285049][T18919] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3732'. [ 383.507296][T18930] netlink: 'syz.3.3736': attribute type 75 has an invalid length. [ 383.621155][T18932] pim6reg1: entered promiscuous mode [ 383.626634][T18932] pim6reg1: entered allmulticast mode [ 383.715052][ T25] block nbd5: Possible stuck request ffff88802521e000: control (read@0,1024B). Runtime 270 seconds [ 383.726226][ T25] block nbd5: Possible stuck request ffff88802521e1c0: control (read@1024,1024B). Runtime 270 seconds [ 383.757822][ T25] block nbd5: Possible stuck request ffff88802521e380: control (read@2048,1024B). Runtime 270 seconds [ 383.770467][ T25] block nbd5: Possible stuck request ffff88802521e540: control (read@3072,1024B). Runtime 270 seconds [ 384.069729][T18976] netlink: 'syz.4.3753': attribute type 16 has an invalid length. [ 384.078699][T18976] netlink: 'syz.4.3753': attribute type 17 has an invalid length. [ 384.143289][T18982] netlink: 'syz.6.3756': attribute type 1 has an invalid length. [ 384.154461][T18976] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 384.412198][T18999] veth0: entered promiscuous mode [ 384.460634][T19002] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 384.504353][T19004] 8021q: VLANs not supported on ip_vti0 [ 384.757018][T19019] tls_set_device_offload: netdev not found [ 385.215442][T19051] __nla_validate_parse: 11 callbacks suppressed [ 385.215462][T19051] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3774'. [ 385.472524][T19065] hsr0 speed is unknown, defaulting to 1000 [ 385.497675][T19065] hsr0 speed is unknown, defaulting to 1000 [ 385.514601][T19065] hsr0 speed is unknown, defaulting to 1000 [ 385.540962][T19065] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 385.599912][T19065] hsr0 speed is unknown, defaulting to 1000 [ 385.609331][T19065] hsr0 speed is unknown, defaulting to 1000 [ 385.617927][T19065] hsr0 speed is unknown, defaulting to 1000 [ 385.634538][T19065] hsr0 speed is unknown, defaulting to 1000 [ 385.645290][T19065] hsr0 speed is unknown, defaulting to 1000 [ 385.653260][T19065] hsr0 speed is unknown, defaulting to 1000 [ 385.661652][T19065] hsr0 speed is unknown, defaulting to 1000 [ 385.691907][T19065] hsr0 speed is unknown, defaulting to 1000 [ 385.716093][T19065] hsr0 speed is unknown, defaulting to 1000 [ 385.829412][T19078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3788'. [ 385.863138][T19082] netlink: 'syz.5.3790': attribute type 6 has an invalid length. [ 385.919437][T19086] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3791'. [ 385.949720][T19086] netlink: 'syz.6.3791': attribute type 39 has an invalid length. [ 385.986455][T19078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3788'. [ 386.004933][T19078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3788'. [ 386.407810][T19097] sctp: [Deprecated]: syz.6.3795 (pid 19097) Use of int in max_burst socket option. [ 386.407810][T19097] Use struct sctp_assoc_value instead [ 386.488124][T19104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3797'. [ 386.557666][T19104] netlink: 'syz.4.3797': attribute type 11 has an invalid length. [ 386.672918][T19117] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3801'. [ 386.708979][T19125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.757623][T19127] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3801'. [ 386.799653][T19129] netlink: zone id is out of range [ 386.817455][T19129] netlink: zone id is out of range [ 386.841717][T19129] netlink: zone id is out of range [ 386.856637][T19129] netlink: zone id is out of range [ 386.861948][T19129] netlink: zone id is out of range [ 386.878276][T19129] netlink: zone id is out of range [ 386.916005][T19129] netlink: zone id is out of range [ 386.929620][T19129] netlink: zone id is out of range [ 387.069849][T19144] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3811'. [ 387.301022][T19155] netlink: 'syz.5.3815': attribute type 1 has an invalid length. [ 387.310005][T19160] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3816'. [ 387.312768][T19155] netlink: 'syz.5.3815': attribute type 12 has an invalid length. [ 387.354370][T19155] bond4: option primary_reselect: invalid value (255) [ 387.363559][T19155] bond4 (unregistering): Released all slaves [ 387.489403][T19173] veth0_to_team: entered promiscuous mode [ 387.505374][T19173] veth0_to_team: left allmulticast mode [ 388.063290][T19211] netlink: 'syz.4.3834': attribute type 12 has an invalid length. [ 388.063689][T19212] netlink: 'syz.4.3834': attribute type 12 has an invalid length. [ 388.178830][T19211] bond8: option primary_reselect: invalid value (255) [ 388.185242][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 388.223587][T19211] bond8 (unregistering): Released all slaves [ 388.346082][T19212] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 388.381361][T19229] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 388.400108][T19229] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 388.453846][T19209] lo speed is unknown, defaulting to 1000 [ 388.478716][T19209] hsr0 speed is unknown, defaulting to 1000 [ 388.763240][T19246] netlink: 'syz.1.3840': attribute type 4 has an invalid length. [ 388.777989][T19253] xt_recent: Unsupported userspace flags (000000b1) [ 389.004182][T19257] netlink: 'syz.6.3847': attribute type 3 has an invalid length. [ 389.045049][T19257] netlink: 'syz.6.3847': attribute type 3 has an invalid length. [ 389.998794][T19323] sctp: [Deprecated]: syz.5.3866 (pid 19323) Use of int in max_burst socket option. [ 389.998794][T19323] Use struct sctp_assoc_value instead [ 390.029627][T19321] tipc: Enabling of bearer rejected, media not registered [ 390.170358][ C1] vcan0: j1939_tp_rxtimer: 0xffff888051247800: rx timeout, send abort [ 390.607807][T19342] net_ratelimit: 388 callbacks suppressed [ 390.607825][T19342] openvswitch: netlink: Missing key (keys=40, expected=80) [ 390.655529][T19344] gtp1: entered promiscuous mode [ 390.670516][ C1] vcan0: j1939_tp_rxtimer: 0xffff888051246c00: rx timeout, send abort [ 390.678860][ C1] vcan0: j1939_tp_rxtimer: 0xffff888051247800: abort rx timeout. Force session deactivation [ 390.695404][T19344] gtp1: entered allmulticast mode [ 390.709147][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 390.828059][T19342] bond4: option mode: invalid value (133) [ 390.896678][T19357] __nla_validate_parse: 11 callbacks suppressed [ 390.896698][T19357] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3877'. [ 390.918967][T19342] bond4 (unregistering): Released all slaves [ 390.959119][ C1] vcan0: j1939_tp_rxtimer: 0xffff888051247000: rx timeout, send abort [ 391.003819][T19362] sctp: [Deprecated]: syz.1.3880 (pid 19362) Use of int in max_burst socket option. [ 391.003819][T19362] Use struct sctp_assoc_value instead [ 391.079423][T19365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3877'. [ 391.467461][ C1] vcan0: j1939_tp_rxtimer: 0xffff888051247000: abort rx timeout. Force session deactivation [ 391.490833][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 391.740815][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805844c000: rx timeout, send abort [ 392.081905][T19405] sctp: [Deprecated]: syz.5.3891 (pid 19405) Use of int in max_burst socket option. [ 392.081905][T19405] Use struct sctp_assoc_value instead [ 392.156471][T19410] veth0: entered promiscuous mode [ 392.173942][T19413] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3892'. [ 392.249161][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805844c000: abort rx timeout. Force session deactivation [ 392.277519][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 392.409862][T19429] netlink: 'syz.1.3897': attribute type 11 has an invalid length. [ 392.419531][T19429] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3897'. [ 392.432056][T19430] sch_tbf: burst 5 is lower than device syzkaller0 mtu (313) ! [ 392.452066][T19435] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3899'. [ 392.465313][T19435] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3899'. [ 392.485992][T19435] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3899'. [ 392.489818][T19434] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 392.527581][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805646d000: rx timeout, send abort [ 392.595843][T19442] netlink: 'syz.6.3901': attribute type 6 has an invalid length. [ 392.724569][T19451] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3905'. [ 392.731364][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805124b000: rx timeout, send abort [ 392.741813][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805124b400: rx timeout, send abort [ 392.750315][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805124b000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 392.764694][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805124b400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 392.797903][T19455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3906'. [ 392.968309][T19470] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3910'. [ 393.035862][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805646d000: abort rx timeout. Force session deactivation [ 393.071235][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 393.321205][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806a75d000: rx timeout, send abort [ 393.630898][T19502] tipc: Started in network mode [ 393.640369][T19502] tipc: Node identity 124cefa383e1, cluster identity 4711 [ 393.647874][T19502] tipc: Enabled bearer , priority 0 [ 393.655777][T19502] syzkaller0: entered promiscuous mode [ 393.661268][T19502] syzkaller0: entered allmulticast mode [ 393.686734][T19502] tipc: Resetting bearer [ 393.695975][T19502] openvswitch: netlink: IP tunnel dst address not specified [ 393.708120][T19501] tipc: Resetting bearer [ 393.730120][T19501] tipc: Disabling bearer [ 393.829510][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806a75d000: abort rx timeout. Force session deactivation [ 393.863996][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 393.979693][T19513] vlan0: entered promiscuous mode [ 394.113982][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806a75c800: rx timeout, send abort [ 394.375521][T19543] netlink: 'syz.5.3932': attribute type 1 has an invalid length. [ 394.446453][T19543] bond4: (slave gretap1): making interface the new active one [ 394.456552][T19543] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 394.490135][T19543] 8021q: adding VLAN 0 to HW filter on device bond4 [ 394.592752][T19556] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 394.604556][T19556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.622271][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806a75c800: abort rx timeout. Force session deactivation [ 394.647664][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 394.663408][T19565] sctp: [Deprecated]: syz.1.3938 (pid 19565) Use of int in max_burst socket option. [ 394.663408][T19565] Use struct sctp_assoc_value instead [ 394.740751][ T24] IPVS: starting estimator thread 0... [ 394.829529][T19573] netlink: 'syz.1.3941': attribute type 1 has an invalid length. [ 394.835715][T19568] IPVS: using max 34 ests per chain, 81600 per kthread [ 394.897629][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805586b800: rx timeout, send abort [ 394.951703][T19581] 8021q: adding VLAN 0 to HW filter on device bond4 [ 394.962055][T19581] bond3: (slave bond4): making interface the new active one [ 394.970448][T19581] bond3: (slave bond4): Enslaving as an active interface with an up link [ 394.999717][T19570] pim6reg: entered allmulticast mode [ 395.022655][T19584] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 395.109621][T19587] mac80211_hwsim hwsim39 syzkaller0: left promiscuous mode [ 395.117790][T19587] mac80211_hwsim hwsim39 syzkaller0: left allmulticast mode [ 395.316230][T19589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.333995][T19589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.359466][T19589] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 395.369592][T19589] bond0 (unregistering): Released all slaves [ 395.405898][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805586b800: abort rx timeout. Force session deactivation [ 395.429233][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 395.596085][T19614] sctp: [Deprecated]: syz.6.3951 (pid 19614) Use of int in max_burst socket option. [ 395.596085][T19614] Use struct sctp_assoc_value instead [ 395.679202][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804fa3cc00: rx timeout, send abort [ 395.934387][T19641] __nla_validate_parse: 21 callbacks suppressed [ 395.934403][T19641] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3961'. [ 396.086313][T19650] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3965'. [ 396.098618][T19650] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 396.168312][T19654] sctp: [Deprecated]: syz.6.3966 (pid 19654) Use of int in max_burst socket option. [ 396.168312][T19654] Use struct sctp_assoc_value instead [ 396.187490][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804fa3cc00: abort rx timeout. Force session deactivation [ 396.218874][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 396.429801][T19664] tipc: Enabled bearer , priority 0 [ 396.438553][T19664] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 396.468829][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a56bc00: rx timeout, send abort [ 396.570830][T19671] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3973'. [ 396.684644][T19675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.885858][T19680] netlink: 'syz.1.3976': attribute type 12 has an invalid length. [ 396.977315][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a56bc00: abort rx timeout. Force session deactivation [ 397.006151][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 397.256119][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807eb2a000: rx timeout, send abort [ 397.549424][ T981] tipc: Node number set to 4164266279 [ 397.769223][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807eb2a000: abort rx timeout. Force session deactivation [ 397.798664][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 398.050694][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880696eb000: rx timeout, send abort [ 398.418642][T19680] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 398.419154][T19683] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3977'. [ 398.559022][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880696eb000: abort rx timeout. Force session deactivation [ 398.580369][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 398.613510][T19709] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3984'. [ 398.731340][T19709] bond0 (unregistering): left promiscuous mode [ 398.737699][T19709] bond_slave_0: left promiscuous mode [ 398.743383][T19709] bond_slave_1: left promiscuous mode [ 398.750521][T19709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.761200][T19709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.770724][T19709] bond0 (unregistering): Released all slaves [ 398.821349][T18752] lo speed is unknown, defaulting to 1000 [ 398.830338][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806a80bc00: rx timeout, send abort [ 399.034230][T19726] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3988'. [ 399.062159][T19732] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3989'. [ 399.120303][T19737] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 399.127739][T19737] IPv6: NLM_F_CREATE should be set when creating new route [ 399.135010][T19737] IPv6: NLM_F_CREATE should be set when creating new route [ 399.143946][T19737] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 399.181244][T19750] syz.5.3992: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 399.197563][T19750] CPU: 0 UID: 0 PID: 19750 Comm: syz.5.3992 Not tainted syzkaller #0 PREEMPT(full) [ 399.197590][T19750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 399.197614][T19750] Call Trace: [ 399.197622][T19750] [ 399.197631][T19750] dump_stack_lvl+0x189/0x250 [ 399.197661][T19750] ? lockdep_hardirqs_on+0x9c/0x150 [ 399.197686][T19750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 399.197728][T19750] warn_alloc+0x214/0x310 [ 399.197755][T19750] ? stack_depot_save_flags+0x40/0x860 [ 399.197787][T19750] ? __pfx_warn_alloc+0x10/0x10 [ 399.197815][T19750] ? kasan_save_track+0x3e/0x80 [ 399.197838][T19750] ? __kasan_kmalloc+0x93/0xb0 [ 399.197864][T19750] ? xsk_setsockopt+0x4dc/0x8d0 [ 399.197882][T19750] ? do_sock_setsockopt+0x17c/0x1b0 [ 399.197899][T19750] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 399.197914][T19750] ? do_syscall_64+0xfa/0xfa0 [ 399.197935][T19750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.197964][T19750] __vmalloc_node_range_noprof+0x125/0x12d0 [ 399.198030][T19750] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 399.198060][T19750] ? __kasan_kmalloc+0x93/0xb0 [ 399.198094][T19750] vmalloc_user_noprof+0xad/0xf0 [ 399.198119][T19750] ? xskq_create+0xbf/0x170 [ 399.198141][T19750] xskq_create+0xbf/0x170 [ 399.198165][T19750] xsk_init_queue+0xb0/0x110 [ 399.198189][T19750] xsk_setsockopt+0x4dc/0x8d0 [ 399.198212][T19750] ? __pfx_xsk_setsockopt+0x10/0x10 [ 399.198236][T19750] ? __pfx_aa_sk_perm+0x10/0x10 [ 399.198263][T19750] ? aa_sock_opt_perm+0xff/0x1b0 [ 399.198291][T19750] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 399.198309][T19750] ? __pfx_xsk_setsockopt+0x10/0x10 [ 399.198331][T19750] do_sock_setsockopt+0x17c/0x1b0 [ 399.198352][T19750] __x64_sys_setsockopt+0x13f/0x1b0 [ 399.198375][T19750] do_syscall_64+0xfa/0xfa0 [ 399.198396][T19750] ? lockdep_hardirqs_on+0x9c/0x150 [ 399.198418][T19750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.198436][T19750] ? clear_bhb_loop+0x60/0xb0 [ 399.198459][T19750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.198482][T19750] RIP: 0033:0x7f98d3f8efc9 [ 399.198499][T19750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.198515][T19750] RSP: 002b:00007f98d4ece038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 399.198536][T19750] RAX: ffffffffffffffda RBX: 00007f98d41e5fa0 RCX: 00007f98d3f8efc9 [ 399.198550][T19750] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 399.198561][T19750] RBP: 00007f98d4011f91 R08: 0000000000000004 R09: 0000000000000000 [ 399.198573][T19750] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.198585][T19750] R13: 00007f98d41e6038 R14: 00007f98d41e5fa0 R15: 00007ffc5f3cd2c8 [ 399.198618][T19750] [ 399.198732][T19750] Mem-Info: [ 399.338673][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806a80bc00: abort rx timeout. Force session deactivation [ 399.341512][T19750] active_anon:4775 inactive_anon:0 isolated_anon:0 [ 399.341512][T19750] active_file:3597 inactive_file:40020 isolated_file:0 [ 399.341512][T19750] unevictable:2868 dirty:96 writeback:0 [ 399.341512][T19750] slab_reclaimable:12983 slab_unreclaimable:124914 [ 399.341512][T19750] mapped:31462 shmem:3468 pagetables:972 [ 399.341512][T19750] sec_pagetables:0 bounce:0 [ 399.341512][T19750] kernel_misc_reclaimable:0 [ 399.341512][T19750] free:1301173 free_pcp:11513 free_cma:0 [ 399.362407][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 399.367727][T19750] Node 0 active_anon:19100kB inactive_anon:0kB active_file:14388kB inactive_file:159880kB unevictable:10636kB isolated(anon):0kB isolated(file):0kB mapped:126748kB dirty:380kB writeback:0kB shmem:13236kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15676kB pagetables:3740kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 399.483391][T19756] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3991'. [ 399.580880][T19750] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 399.611738][T19750] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 399.612399][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a38ec00: rx timeout, send abort [ 399.642536][T19750] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 399.656208][T19750] Node 0 DMA32 free:1287260kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19100kB inactive_anon:0kB active_file:14388kB inactive_file:159880kB unevictable:13736kB writepending:380kB zspages:0kB present:3129332kB managed:2565180kB mlocked:12200kB bounce:0kB free_pcp:31524kB local_pcp:13016kB free_cma:0kB [ 399.691298][T19750] lowmem_reserve[]: 0 0 0 0 0 [ 399.697933][T19750] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 399.728593][T19750] lowmem_reserve[]: 0 0 0 0 0 [ 399.733477][T19750] Node 1 Normal free:3898272kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13984kB local_pcp:3680kB free_cma:0kB [ 399.771498][T19750] lowmem_reserve[]: 0 0 0 0 0 [ 399.776566][T19750] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 399.790094][T19750] Node 0 DMA32: 145*4kB (UME) 9*8kB (UE) 2*16kB (ME) 114*32kB (UM) 21*64kB (UME) 32*128kB (UME) 18*256kB (UME) 2*512kB (M) 16*1024kB (UME) 9*2048kB (UME) 302*4096kB (UM) = 1287212kB [ 399.808928][T19750] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 399.821628][T19750] Node 1 Normal: 208*4kB (UME) 52*8kB (UME) 48*16kB (UME) 154*32kB (UME) 48*64kB (UME) 9*128kB (UME) 4*256kB (UME) 4*512kB (UME) 3*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3898272kB [ 399.841210][T19750] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 399.851300][T19750] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 399.860796][T19750] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 399.877779][T19750] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 399.902534][T19778] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 399.931146][T19750] 48056 total pagecache pages [ 399.997471][T19750] 0 pages in swap cache [ 400.001682][T19750] Free swap = 124996kB [ 400.014589][T19750] Total swap = 124996kB [ 400.019866][T19750] 2097051 pages RAM [ 400.030319][T19750] 0 pages HighMem/MovableOnly [ 400.053918][T19750] 424114 pages reserved [ 400.059079][T19750] 0 pages cma reserved [ 400.149847][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a38ec00: abort rx timeout. Force session deactivation [ 400.159898][T19789] sctp: [Deprecated]: syz.5.3998 (pid 19789) Use of int in max_burst socket option. [ 400.159898][T19789] Use struct sctp_assoc_value instead [ 400.198862][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 400.277943][T19801] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3999'. [ 400.339268][T19805] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4003'. [ 400.397725][T19807] bond0: (slave macvlan2): Error -22 calling dev_set_mtu [ 400.423209][T19808] bond0: (slave macvlan2): Error -22 calling dev_set_mtu [ 400.448852][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a38c000: rx timeout, send abort [ 400.480544][T19813] syzkaller1: entered promiscuous mode [ 400.486773][T19813] syzkaller1: entered allmulticast mode [ 400.617194][T19818] netlink: 'syz.1.4009': attribute type 13 has an invalid length. [ 400.625417][T19818] netlink: 'syz.1.4009': attribute type 58 has an invalid length. [ 400.957176][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a38c000: abort rx timeout. Force session deactivation [ 400.989486][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 401.239476][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a38d000: rx timeout, send abort [ 401.287146][T19859] tipc: Enabled bearer , priority 0 [ 401.295679][T19859] syzkaller0: entered promiscuous mode [ 401.301374][T19859] syzkaller0: entered allmulticast mode [ 401.341659][T19859] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 401.348342][T19861] netlink: 'syz.6.4021': attribute type 2 has an invalid length. [ 401.357510][T19861] netlink: 'syz.6.4021': attribute type 1 has an invalid length. [ 401.377121][T19861] netlink: 'syz.6.4021': attribute type 8 has an invalid length. [ 401.406009][T19859] tipc: Resetting bearer [ 401.512026][T19857] tipc: Resetting bearer [ 401.529716][T19857] tipc: Disabling bearer [ 401.542780][T19870] syzkaller1: entered promiscuous mode [ 401.549964][T19870] syzkaller1: entered allmulticast mode [ 401.747778][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a38d000: abort rx timeout. Force session deactivation [ 401.782159][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 401.818912][T19887] netlink: 'syz.3.4029': attribute type 1 has an invalid length. [ 401.892461][T19895] __nla_validate_parse: 2 callbacks suppressed [ 401.892478][T19895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4029'. [ 401.893116][T19887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.915927][T19890] smc: net device gre0 applied user defined pnetid SYZ1 [ 401.930185][T19887] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4029'. [ 401.951919][T19891] smc: net device gre0 erased user defined pnetid SYZ1 [ 402.032129][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806aafb000: rx timeout, send abort [ 402.121053][T19901] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4033'. [ 402.140932][T19905] SET target dimension over the limit! [ 402.161583][T19901] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4033'. [ 402.526188][T19928] block nbd3: Unsupported socket: should be TCP or UNIX. [ 402.540486][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806aafb000: abort rx timeout. Force session deactivation [ 402.567937][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 402.675005][T19931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4043'. [ 402.731559][T19931] bond5: entered promiscuous mode [ 402.738713][T19931] 8021q: adding VLAN 0 to HW filter on device bond5 [ 402.749529][T19939] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 402.817900][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806aafac00: rx timeout, send abort [ 402.921826][T19946] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4048'. [ 403.048272][T19957] netlink: 'syz.6.4050': attribute type 29 has an invalid length. [ 403.077727][T19957] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4050'. [ 403.110783][T19966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4052'. [ 403.121034][T19966] openvswitch: netlink: Missing key (keys=40, expected=80) [ 403.123649][T19967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4053'. [ 403.242719][T19976] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4054'. [ 403.326173][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806aafac00: abort rx timeout. Force session deactivation [ 403.360781][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 403.397866][T19984] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 403.610728][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806aaf9800: rx timeout, send abort [ 403.732515][T19992] netlink: 'syz.5.4063': attribute type 2 has an invalid length. [ 403.868008][T19992] 9: entered promiscuous mode [ 404.119040][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806aaf9800: abort rx timeout. Force session deactivation [ 404.147374][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 404.262516][T20054] tipc: Enabling of bearer rejected, already enabled [ 404.286214][T20054] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 404.397342][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804fe63c00: rx timeout, send abort [ 404.587957][T20070] netlink: 'syz.5.4086': attribute type 1 has an invalid length. [ 404.809456][T20084] netlink: 'syz.1.4090': attribute type 6 has an invalid length. [ 404.825183][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 404.906067][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804fe63c00: abort rx timeout. Force session deactivation [ 404.932437][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 405.081894][T20096] nbd: must specify a size in bytes for the device [ 405.182405][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ddf1c00: rx timeout, send abort [ 405.277285][T20101] delete_channel: no stack [ 405.562167][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 405.572872][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 405.583590][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 405.594377][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 405.612463][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 405.628803][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 405.639747][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 405.652412][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 405.664380][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 405.678420][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 405.690682][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ddf1c00: abort rx timeout. Force session deactivation [ 405.726061][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 405.976009][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a3a0800: rx timeout, send abort [ 406.147501][T20114] lo speed is unknown, defaulting to 1000 [ 406.160251][T20131] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 406.171944][T20114] hsr0 speed is unknown, defaulting to 1000 [ 406.190633][T20131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.461244][T20114] chnl_net:caif_netlink_parms(): no params data found [ 406.484250][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a3a0800: abort rx timeout. Force session deactivation [ 406.509780][T20144] delete_channel: no stack [ 406.516639][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 406.718030][T20159] validate_nla: 1 callbacks suppressed [ 406.718046][T20159] netlink: 'syz.1.4115': attribute type 39 has an invalid length. [ 406.738383][T20114] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.746424][T20114] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.753704][T20114] bridge_slave_0: entered allmulticast mode [ 406.764116][T20114] bridge_slave_0: entered promiscuous mode [ 406.770249][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805651a000: rx timeout, send abort [ 406.838129][T20114] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.849250][T20114] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.859570][T20114] bridge_slave_1: entered allmulticast mode [ 406.875764][T20114] bridge_slave_1: entered promiscuous mode [ 406.995956][T20114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.029985][T20114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.040813][T20184] delete_channel: no stack [ 407.056378][T20178] delete_channel: no stack [ 407.070272][ T24] IPVS: starting estimator thread 0... [ 407.174834][T20190] IPVS: using max 31 ests per chain, 74400 per kthread [ 407.263771][T20114] team0: Port device team_slave_0 added [ 407.270309][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805651a000: abort rx timeout. Force session deactivation [ 407.282868][T20114] team0: Port device team_slave_1 added [ 407.297679][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 407.416837][T20114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.423825][T20114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.449978][T20114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.495199][T20114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.503546][T20114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.532561][T20114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.547644][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ac2b800: rx timeout, send abort [ 407.570258][T20218] tipc: Enabling of bearer rejected, already enabled [ 407.616961][T20219] tipc: Enabling of bearer rejected, already enabled [ 407.706034][ T52] Bluetooth: hci3: command tx timeout [ 407.724226][T20114] hsr_slave_0: entered promiscuous mode [ 407.741796][T20114] hsr_slave_1: entered promiscuous mode [ 407.749580][T20114] debugfs: 'hsr0' already exists in 'hsr' [ 407.768594][T20114] Cannot create hsr debugfs directory [ 407.787098][T20224] __nla_validate_parse: 12 callbacks suppressed [ 407.787114][T20224] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4133'. [ 408.055947][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ac2b800: abort rx timeout. Force session deactivation [ 408.084342][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 408.310306][T20114] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 408.326782][T20250] IPv6: NLM_F_REPLACE set, but no existing node found! [ 408.334305][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ac2bc00: rx timeout, send abort [ 408.348064][T20114] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 408.471661][T20114] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 408.508135][T20253] netlink: 'syz.5.4141': attribute type 3 has an invalid length. [ 408.527170][T20114] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 408.573571][T20261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4142'. [ 408.724212][T20114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.792479][T20114] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.821243][T19762] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.828446][T19762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.842587][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ac2bc00: abort rx timeout. Force session deactivation [ 408.874076][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 408.878714][T19762] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.892224][T19762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.932626][T20277] delete_channel: no stack [ 408.956603][T20114] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 408.968621][T20114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 409.124039][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804f271000: rx timeout, send abort [ 409.275548][T20289] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4151'. [ 409.462384][T20114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.632377][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804f271000: abort rx timeout. Force session deactivation [ 409.644701][T20310] netlink: 'syz.5.4158': attribute type 7 has an invalid length. [ 409.653001][T20310] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4158'. [ 409.662484][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 409.755806][T20310] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4158'. [ 409.778108][T20310] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4158'. [ 409.797396][ T52] Bluetooth: hci3: command tx timeout [ 409.912115][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e20c400: rx timeout, send abort [ 409.975492][T20324] netlink: 'syz.3.4162': attribute type 1 has an invalid length. [ 410.076324][T20324] 8021q: adding VLAN 0 to HW filter on device bond3 [ 410.165703][T20334] bond3: (slave veth5): Enslaving as an active interface with a down link [ 410.332332][T20114] veth0_vlan: entered promiscuous mode [ 410.367173][T20114] veth1_vlan: entered promiscuous mode [ 410.420671][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e20c400: abort rx timeout. Force session deactivation [ 410.439187][T20349] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4171'. [ 410.448635][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 410.465437][T20114] veth0_macvtap: entered promiscuous mode [ 410.486469][T20114] veth1_macvtap: entered promiscuous mode [ 410.507520][T20351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4172'. [ 410.529679][T20351] bridge_slave_0: default FDB implementation only supports local addresses [ 410.578396][T20114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.629150][T20114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.643462][T20359] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4176'. [ 410.691069][T19769] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.698466][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d06c400: rx timeout, send abort [ 410.707742][T19769] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.757610][T19769] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.781288][T19769] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.843766][T20371] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4179'. [ 410.855531][T20371] netlink: 'syz.5.4179': attribute type 20 has an invalid length. [ 410.920862][T20371] netlink: 'syz.5.4179': attribute type 20 has an invalid length. [ 410.940618][ T36] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.956277][ T36] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.969182][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880213fd400: rx timeout, send abort [ 410.977637][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880213fd800: rx timeout, send abort [ 410.986534][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880213fd400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 411.000929][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880213fd800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 411.055059][ T36] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.065438][ T36] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.092299][T19767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.125095][T19767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.203398][T19767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.208060][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d06c400: abort rx timeout. Force session deactivation [ 411.211390][T19767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.240934][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 411.375499][T20402] sctp: [Deprecated]: syz.5.4187 (pid 20402) Use of int in max_burst socket option. [ 411.375499][T20402] Use struct sctp_assoc_value instead [ 411.490911][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058223800: rx timeout, send abort [ 411.874919][ T52] Bluetooth: hci3: command tx timeout [ 411.999242][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058223800: abort rx timeout. Force session deactivation [ 412.026656][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 412.041374][T20440] veth1_to_bond: entered allmulticast mode [ 412.133380][T20444] sctp: [Deprecated]: syz.7.4201 (pid 20444) Use of int in max_burst socket option. [ 412.133380][T20444] Use struct sctp_assoc_value instead [ 412.276635][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058222c00: rx timeout, send abort [ 412.706580][T20474] xt_CT: You must specify a L4 protocol and not use inversions on it [ 412.747499][T20474] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 412.785234][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058222c00: abort rx timeout. Force session deactivation [ 412.806638][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 412.820543][T20480] __nla_validate_parse: 10 callbacks suppressed [ 412.820563][T20480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4211'. [ 412.843456][T20481] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4212'. [ 412.930423][T20486] sctp: [Deprecated]: syz.5.4214 (pid 20486) Use of int in max_burst socket option. [ 412.930423][T20486] Use struct sctp_assoc_value instead [ 412.934112][T20476] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4210'. [ 413.056576][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807cd06400: rx timeout, send abort [ 413.072137][T20492] netlink: 'syz.3.4215': attribute type 29 has an invalid length. [ 413.228179][T20496] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4216'. [ 413.251570][T20496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.266304][T20496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.278202][T20496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.288186][T20496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.398185][T20503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.565212][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807cd06400: abort rx timeout. Force session deactivation [ 413.587835][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 413.727171][T20525] sctp: [Deprecated]: syz.7.4225 (pid 20525) Use of struct sctp_assoc_value in delayed_ack socket option. [ 413.727171][T20525] Use struct sctp_sack_info instead [ 413.752676][T20525] netlink: 'syz.7.4225': attribute type 1 has an invalid length. [ 413.781800][T20529] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 413.804832][ T25] block nbd5: Possible stuck request ffff88802521e000: control (read@0,1024B). Runtime 300 seconds [ 413.822809][ T25] block nbd5: Possible stuck request ffff88802521e1c0: control (read@1024,1024B). Runtime 300 seconds [ 413.836232][ T25] block nbd5: Possible stuck request ffff88802521e380: control (read@2048,1024B). Runtime 300 seconds [ 413.847380][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058318400: rx timeout, send abort [ 413.856128][ T25] block nbd5: Possible stuck request ffff88802521e540: control (read@3072,1024B). Runtime 300 seconds [ 413.914542][T20534] sctp: [Deprecated]: syz.6.4227 (pid 20534) Use of int in max_burst socket option. [ 413.914542][T20534] Use struct sctp_assoc_value instead [ 413.951253][ T5836] Bluetooth: hci3: command tx timeout [ 414.271355][T20552] mac80211_hwsim hwsim43 ÿ: renamed from wlan1 [ 414.283568][T20553] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4233'. [ 414.347431][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058318400: abort rx timeout. Force session deactivation [ 414.382001][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 414.465724][T20561] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 414.631933][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056280400: rx timeout, send abort [ 414.689244][T20572] sctp: [Deprecated]: syz.6.4239 (pid 20572) Use of int in max_burst socket option. [ 414.689244][T20572] Use struct sctp_assoc_value instead [ 414.708092][T20575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4240'. [ 414.950986][T20584] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4242'. [ 415.140255][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056280400: abort rx timeout. Force session deactivation [ 415.170627][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 415.193338][T20596] IPVS: Scheduler module ip_vs_sip not found [ 415.220290][T20585] netlink: 'syz.5.4243': attribute type 1 has an invalid length. [ 415.393249][T20609] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4248'. [ 415.404075][T20609] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4248'. [ 415.418974][T20609] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4248'. [ 415.420599][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056281800: rx timeout, send abort [ 415.585266][T20621] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 415.663993][T20617] tipc: Started in network mode [ 415.690716][T20617] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 415.715359][T20617] tipc: Enabled bearer , priority 10 [ 415.810829][T20630] sctp: [Deprecated]: syz.7.4254 (pid 20630) Use of int in max_burst socket option. [ 415.810829][T20630] Use struct sctp_assoc_value instead [ 415.936116][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056281800: abort rx timeout. Force session deactivation [ 415.958631][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 416.207470][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806ad46000: rx timeout, send abort [ 416.715816][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806ad46000: abort rx timeout. Force session deactivation [ 416.738105][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 416.834957][ T981] tipc: Node number set to 10005162 [ 416.988096][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806ab2d000: rx timeout, send abort [ 417.496389][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806ab2d000: abort rx timeout. Force session deactivation [ 417.521685][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 417.771709][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030173000: rx timeout, send abort [ 418.279994][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030173000: abort rx timeout. Force session deactivation [ 418.306301][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 418.556305][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030172000: rx timeout, send abort [ 419.064578][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030172000: abort rx timeout. Force session deactivation [ 419.099931][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 419.349959][ C1] vcan0: j1939_tp_rxtimer: 0xffff888050fefc00: rx timeout, send abort [ 419.858327][ C1] vcan0: j1939_tp_rxtimer: 0xffff888050fefc00: abort rx timeout. Force session deactivation [ 419.884789][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 420.134845][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806adc6800: rx timeout, send abort [ 420.643235][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806adc6800: abort rx timeout. Force session deactivation [ 420.673581][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 420.923648][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056557c00: rx timeout, send abort [ 421.431938][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056557c00: abort rx timeout. Force session deactivation [ 421.453335][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 421.703383][ C1] vcan0: j1939_tp_rxtimer: 0xffff888021740000: rx timeout, send abort [ 422.211641][ C1] vcan0: j1939_tp_rxtimer: 0xffff888021740000: abort rx timeout. Force session deactivation [ 422.232978][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 422.483024][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880694eb400: rx timeout, send abort [ 422.991294][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880694eb400: abort rx timeout. Force session deactivation [ 423.018559][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 423.268601][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804fa38000: rx timeout, send abort [ 423.776877][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804fa38000: abort rx timeout. Force session deactivation [ 423.806205][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 424.056192][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804fa38400: rx timeout, send abort [ 424.564463][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804fa38400: abort rx timeout. Force session deactivation [ 424.591780][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 424.841815][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804fa38800: rx timeout, send abort [ 425.350198][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804fa38800: abort rx timeout. Force session deactivation [ 425.379504][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 425.629539][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804fa38c00: rx timeout, send abort [ 426.138070][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804fa38c00: abort rx timeout. Force session deactivation [ 426.169330][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 426.419350][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804fa39000: rx timeout, send abort [ 426.927604][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804fa39000: abort rx timeout. Force session deactivation [ 426.947900][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 427.197916][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804fa39400: rx timeout, send abort [ 427.706162][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804fa39400: abort rx timeout. Force session deactivation [ 427.740685][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 427.990703][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804fa39800: rx timeout, send abort [ 428.499061][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804fa39800: abort rx timeout. Force session deactivation [ 428.528383][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 428.778414][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804fa39c00: rx timeout, send abort [ 429.286679][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804fa39c00: abort rx timeout. Force session deactivation [ 429.318985][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 429.569003][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804fa3a000: rx timeout, send abort [ 430.077255][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804fa3a000: abort rx timeout. Force session deactivation [ 430.112729][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 430.362775][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804fa3a400: rx timeout, send abort [ 430.871039][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804fa3a400: abort rx timeout. Force session deactivation [ 430.897321][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 431.147327][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804fa3a800: rx timeout, send abort [ 431.655583][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804fa3a800: abort rx timeout. Force session deactivation [ 431.685859][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 431.935856][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804fa3ac00: rx timeout, send abort [ 432.444108][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804fa3ac00: abort rx timeout. Force session deactivation [ 432.470395][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 432.720423][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804fa3b000: rx timeout, send abort [ 433.228693][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804fa3b000: abort rx timeout. Force session deactivation [ 433.260977][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 433.511003][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804fa3b400: rx timeout, send abort [ 434.019289][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804fa3b400: abort rx timeout. Force session deactivation [ 434.054622][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 434.304661][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804fa3b800: rx timeout, send abort [ 434.812972][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804fa3b800: abort rx timeout. Force session deactivation [ 434.834326][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 435.084377][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804fa3bc00: rx timeout, send abort [ 435.592659][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804fa3bc00: abort rx timeout. Force session deactivation [ 435.627972][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 435.877996][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030624000: rx timeout, send abort [ 436.386468][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030624000: abort rx timeout. Force session deactivation [ 436.418802][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 436.668816][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030624400: rx timeout, send abort [ 437.177076][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030624400: abort rx timeout. Force session deactivation [ 437.207352][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 437.457378][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030624800: rx timeout, send abort [ 437.965909][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030624800: abort rx timeout. Force session deactivation [ 437.994301][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 438.105459][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 438.244348][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030624c00: rx timeout, send abort [ 438.752726][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030624c00: abort rx timeout. Force session deactivation [ 438.776041][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 439.026076][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030625000: rx timeout, send abort [ 439.534341][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030625000: abort rx timeout. Force session deactivation [ 439.559740][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 439.809776][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030625400: rx timeout, send abort [ 440.318054][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030625400: abort rx timeout. Force session deactivation [ 440.351399][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888051246c00: connection exists (fe ff). last cmd: 20 [ 440.509367][T20659] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4262'. [ 440.509408][T20663] sctp: [Deprecated]: syz.7.4266 (pid 20663) Use of int in max_burst socket option. [ 440.509408][T20663] Use struct sctp_assoc_value instead [ 440.526076][T20661] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4263'. [ 440.551253][T20661] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4263'. [ 440.578052][T20659] 8021q: adding VLAN 0 to HW filter on device bond5 [ 440.601384][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030625800: rx timeout, send abort [ 440.729942][T20677] FAULT_INJECTION: forcing a failure. [ 440.729942][T20677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.743687][T20677] CPU: 1 UID: 0 PID: 20677 Comm: syz.5.4268 Not tainted syzkaller #0 PREEMPT(full) [ 440.743714][T20677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 440.743725][T20677] Call Trace: [ 440.743732][T20677] [ 440.743741][T20677] dump_stack_lvl+0x189/0x250 [ 440.743770][T20677] ? __pfx____ratelimit+0x10/0x10 [ 440.743792][T20677] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.743816][T20677] ? __pfx__printk+0x10/0x10 [ 440.743835][T20677] ? __might_fault+0xb0/0x130 [ 440.743871][T20677] should_fail_ex+0x414/0x560 [ 440.743901][T20677] _copy_from_iter+0x1de/0x1790 [ 440.743927][T20677] ? rcu_is_watching+0x15/0xb0 [ 440.743950][T20677] ? kmalloc_reserve+0xbd/0x290 [ 440.743976][T20677] ? __pfx__copy_from_iter+0x10/0x10 [ 440.743998][T20677] ? __build_skb_around+0x262/0x3f0 [ 440.744024][T20677] ? netlink_sendmsg+0x642/0xb30 [ 440.744038][T20677] ? skb_put+0x11b/0x210 [ 440.744054][T20677] netlink_sendmsg+0x6b2/0xb30 [ 440.744077][T20677] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.744102][T20677] ? aa_sock_msg_perm+0xf1/0x1d0 [ 440.744124][T20677] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 440.744139][T20677] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.744162][T20677] __sock_sendmsg+0x21c/0x270 [ 440.744183][T20677] ____sys_sendmsg+0x505/0x830 [ 440.744205][T20677] ? __pfx_____sys_sendmsg+0x10/0x10 [ 440.744229][T20677] ? import_iovec+0x74/0xa0 [ 440.744250][T20677] ___sys_sendmsg+0x21f/0x2a0 [ 440.744268][T20677] ? __pfx____sys_sendmsg+0x10/0x10 [ 440.744314][T20677] ? __fget_files+0x2a/0x420 [ 440.744328][T20677] ? __fget_files+0x3a0/0x420 [ 440.744352][T20677] __x64_sys_sendmsg+0x19b/0x260 [ 440.744370][T20677] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 440.744394][T20677] ? __pfx_ksys_write+0x10/0x10 [ 440.744419][T20677] ? do_syscall_64+0xbe/0xfa0 [ 440.744441][T20677] do_syscall_64+0xfa/0xfa0 [ 440.744459][T20677] ? lockdep_hardirqs_on+0x9c/0x150 [ 440.744478][T20677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.744494][T20677] ? clear_bhb_loop+0x60/0xb0 [ 440.744512][T20677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.744527][T20677] RIP: 0033:0x7f98d3f8efc9 [ 440.744543][T20677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.744556][T20677] RSP: 002b:00007f98d4ece038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.744573][T20677] RAX: ffffffffffffffda RBX: 00007f98d41e5fa0 RCX: 00007f98d3f8efc9 [ 440.744584][T20677] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 440.744594][T20677] RBP: 00007f98d4ece090 R08: 0000000000000000 R09: 0000000000000000 [ 440.744604][T20677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.744614][T20677] R13: 00007f98d41e6038 R14: 00007f98d41e5fa0 R15: 00007ffc5f3cd2c8 [ 440.744641][T20677] [ 441.109671][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030625800: abort rx timeout. Force session deactivation [ 441.151097][T20662] team0 (unregistering): Port device team_slave_0 removed [ 441.163953][T20662] team0 (unregistering): Port device team_slave_1 removed [ 441.326456][T10460] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.353391][T10460] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 441.367055][T10460] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 441.467996][T10460] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.499238][T10460] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 441.517205][T10460] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 441.563582][T20696] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4275'. [ 441.668027][T10460] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.729875][T10460] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 441.744183][T10460] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 441.842376][T20719] FAULT_INJECTION: forcing a failure. [ 441.842376][T20719] name failslab, interval 1, probability 0, space 0, times 0 [ 441.872392][T20719] CPU: 0 UID: 0 PID: 20719 Comm: syz.7.4279 Not tainted syzkaller #0 PREEMPT(full) [ 441.872419][T20719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 441.872430][T20719] Call Trace: [ 441.872437][T20719] [ 441.872445][T20719] dump_stack_lvl+0x189/0x250 [ 441.872475][T20719] ? __pfx____ratelimit+0x10/0x10 [ 441.872497][T20719] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.872520][T20719] ? __pfx__printk+0x10/0x10 [ 441.872545][T20719] ? __pfx___might_resched+0x10/0x10 [ 441.872563][T20719] ? fs_reclaim_acquire+0x7d/0x100 [ 441.872592][T20719] should_fail_ex+0x414/0x560 [ 441.872623][T20719] should_failslab+0xa8/0x100 [ 441.872643][T20719] __kmalloc_noprof+0xcb/0x7f0 [ 441.872666][T20719] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 441.872695][T20719] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 441.872725][T20719] genl_family_rcv_msg_doit+0xb8/0x300 [ 441.872757][T20719] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 441.872787][T20719] ? apparmor_capable+0x137/0x1b0 [ 441.872809][T20719] ? bpf_lsm_capable+0x9/0x20 [ 441.872830][T20719] ? security_capable+0x7e/0x2e0 [ 441.872866][T20719] genl_rcv_msg+0x60e/0x790 [ 441.872894][T20719] ? __pfx_genl_rcv_msg+0x10/0x10 [ 441.872912][T20719] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 441.872930][T20719] ? __pfx_nl80211_vendor_cmd+0x10/0x10 [ 441.872952][T20719] ? __pfx_nl80211_post_doit+0x10/0x10 [ 441.872985][T20719] netlink_rcv_skb+0x208/0x470 [ 441.873009][T20719] ? __lock_acquire+0xab9/0xd20 [ 441.873026][T20719] ? __pfx_genl_rcv_msg+0x10/0x10 [ 441.873048][T20719] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 441.873092][T20719] ? down_read+0x1ad/0x2e0 [ 441.873119][T20719] genl_rcv+0x28/0x40 [ 441.873137][T20719] netlink_unicast+0x82f/0x9e0 [ 441.873169][T20719] ? __pfx_netlink_unicast+0x10/0x10 [ 441.873195][T20719] ? netlink_sendmsg+0x642/0xb30 [ 441.873209][T20719] ? skb_put+0x11b/0x210 [ 441.873229][T20719] netlink_sendmsg+0x805/0xb30 [ 441.873256][T20719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.873285][T20719] ? aa_sock_msg_perm+0xf1/0x1d0 [ 441.873315][T20719] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 441.873333][T20719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.873359][T20719] __sock_sendmsg+0x21c/0x270 [ 441.873385][T20719] ____sys_sendmsg+0x505/0x830 [ 441.873410][T20719] ? __pfx_____sys_sendmsg+0x10/0x10 [ 441.873439][T20719] ? import_iovec+0x74/0xa0 [ 441.873464][T20719] ___sys_sendmsg+0x21f/0x2a0 [ 441.873486][T20719] ? __pfx____sys_sendmsg+0x10/0x10 [ 441.873548][T20719] ? __fget_files+0x2a/0x420 [ 441.873565][T20719] ? __fget_files+0x3a0/0x420 [ 441.873592][T20719] __x64_sys_sendmsg+0x19b/0x260 [ 441.873614][T20719] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 441.873648][T20719] ? __pfx_ksys_write+0x10/0x10 [ 441.873676][T20719] ? do_syscall_64+0xbe/0xfa0 [ 441.873702][T20719] do_syscall_64+0xfa/0xfa0 [ 441.873721][T20719] ? lockdep_hardirqs_on+0x9c/0x150 [ 441.873742][T20719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.873761][T20719] ? clear_bhb_loop+0x60/0xb0 [ 441.873783][T20719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.873800][T20719] RIP: 0033:0x7f5b3578efc9 [ 441.873816][T20719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.873831][T20719] RSP: 002b:00007f5b365ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.873857][T20719] RAX: ffffffffffffffda RBX: 00007f5b359e5fa0 RCX: 00007f5b3578efc9 [ 441.873871][T20719] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 441.873882][T20719] RBP: 00007f5b365ee090 R08: 0000000000000000 R09: 0000000000000000 [ 441.873893][T20719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.873903][T20719] R13: 00007f5b359e6038 R14: 00007f5b359e5fa0 R15: 00007fff47d74048 [ 441.873936][T20719] [ 441.896121][T20721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4278'. [ 442.383966][T20721] 8021q: adding VLAN 0 to HW filter on device bond6 [ 442.432100][T10460] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.470220][T10460] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 442.515582][T10460] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 442.737590][T20752] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.790454][T20756] erspan0: entered promiscuous mode [ 442.809243][T20767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4293'. [ 442.850166][T20769] netlink: 'syz.5.4292': attribute type 9 has an invalid length. [ 442.858976][T20754] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4289'. [ 442.916350][T20772] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4289'. [ 442.939269][T20772] netlink: 'syz.6.4289': attribute type 1 has an invalid length. [ 442.969202][T20772] netlink: 'syz.6.4289': attribute type 1 has an invalid length. [ 442.999321][T20772] netlink: 'syz.6.4289': attribute type 2 has an invalid length. [ 443.007954][T20772] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4289'. [ 443.163265][T20752] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.393074][T20752] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.598700][T20752] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.877800][ T25] block nbd5: Possible stuck request ffff88802521e000: control (read@0,1024B). Runtime 330 seconds [ 443.888870][ T25] block nbd5: Possible stuck request ffff88802521e1c0: control (read@1024,1024B). Runtime 330 seconds [ 443.900679][ T25] block nbd5: Possible stuck request ffff88802521e380: control (read@2048,1024B). Runtime 330 seconds [ 443.912562][ T25] block nbd5: Possible stuck request ffff88802521e540: control (read@3072,1024B). Runtime 330 seconds [ 444.490117][T10460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.503496][T10460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.519452][T10460] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 444.529105][T10460] bond0 (unregistering): Released all slaves [ 444.546813][T10460] bond1 (unregistering): (slave bond2): Releasing backup interface [ 444.556137][T10460] bond1 (unregistering): Released all slaves [ 444.699909][T10460] bond2 (unregistering): Released all slaves [ 444.712576][T10460] bond3 (unregistering): Released all slaves [ 444.726687][T10460] bond4 (unregistering): Released all slaves [ 444.742661][T10460] bond5 (unregistering): Released all slaves [ 444.867589][T10460] bond6 (unregistering): Released all slaves [ 444.883093][T10460] bond7 (unregistering): Released all slaves [ 444.964847][T19762] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.102444][T19762] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.119481][T10460] tipc: Left network mode [ 445.143864][T19762] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.202397][ T196] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.250738][T20855] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4307'. [ 445.359337][T20862] xt_time: unknown flags 0xf4 [ 445.397910][T20862] netlink: 'syz.5.4311': attribute type 17 has an invalid length. [ 445.434619][T20871] netlink: 'syz.3.4315': attribute type 2 has an invalid length. [ 445.817890][T20884] __nla_validate_parse: 2 callbacks suppressed [ 445.817907][T20884] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4318'. [ 445.833014][T20891] sctp: [Deprecated]: syz.1.4321 (pid 20891) Use of int in maxseg socket option. [ 445.833014][T20891] Use struct sctp_assoc_value instead [ 445.924171][T20891] IPv6: sit1: Disabled Multicast RS [ 445.936070][T20891] sit1: entered allmulticast mode [ 446.144566][T20900] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4325'. [ 446.225805][T20900] netlink: 'syz.5.4325': attribute type 21 has an invalid length. [ 446.229385][T20897] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 446.233658][T20900] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4325'. [ 446.233737][T20900] netlink: 'syz.5.4325': attribute type 5 has an invalid length. [ 446.316687][T20900] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4325'. [ 446.374580][T10460] hsr_slave_0: left promiscuous mode [ 446.383605][T10460] hsr_slave_1: left promiscuous mode [ 446.390492][T10460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.409480][T10460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.436169][T10460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.445298][T10460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.467581][T10460] veth1_macvtap: left promiscuous mode [ 446.473390][T10460] veth0_macvtap: left promiscuous mode [ 446.479493][T10460] º: left promiscuous mode [ 446.484429][T10460] veth0_vlan: left promiscuous mode [ 446.986041][T10460] team0 (unregistering): Port device team_slave_1 removed [ 447.032757][T10460] team0 (unregistering): Port device team_slave_0 removed [ 447.605992][T20923] tap0: tun_chr_ioctl cmd 1074025678 [ 447.614977][T20923] tap0: group set to 0 [ 447.642545][T20931] tipc: MTU too low for tipc bearer [ 447.693497][T20931] tipc: MTU too low for tipc bearer [ 448.275228][T20981] pimreg3: entered allmulticast mode [ 448.551229][T20993] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4347'. [ 448.893215][T21012] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 449.218696][T21038] netlink: 14544 bytes leftover after parsing attributes in process `syz.7.4362'. [ 449.303405][T21045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4365'. [ 449.326696][T21045] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4365'. [ 449.621871][T21065] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4372'. [ 450.284436][T21104] x_tables: duplicate underflow at hook 2 [ 450.585535][T21114] C: renamed from lo [ 450.593719][T21114] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 450.627748][T21114] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4389'. [ 450.667288][T21122] netlink: 'syz.3.4390': attribute type 4 has an invalid length. [ 450.741240][T21124] netlink: 'syz.3.4390': attribute type 4 has an invalid length. [ 450.825243][T21130] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4391'. [ 451.171151][T21144] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4395'. [ 451.192675][T21144] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4395'. [ 451.212801][T21149] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4397'. [ 451.222412][T21144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4395'. [ 451.276808][T21155] netlink: 'syz.5.4399': attribute type 1 has an invalid length. [ 451.371588][T21155] 8021q: adding VLAN 0 to HW filter on device bond6 [ 451.380571][T21164] macsec0: mtu less than device minimum [ 451.459937][T21156] bond6: (slave veth3): Enslaving as an active interface with a down link [ 451.650431][T21183] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4407'. [ 451.766496][T21186] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4408'. [ 452.073815][T21205] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4416'. [ 452.079038][T21203] tipc: Enabling of bearer rejected, already enabled [ 452.093346][T21205] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4416'. [ 452.336592][T21220] --map-set only usable from mangle table [ 452.378926][T21224] openvswitch: netlink: IP tunnel dst address not specified [ 452.509013][T21230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4424'. [ 452.660800][T21242] netlink: 'syz.7.4428': attribute type 1 has an invalid length. [ 452.703588][T21242] 8021q: adding VLAN 0 to HW filter on device bond1 [ 452.744262][T21242] bond1: (slave geneve2): making interface the new active one [ 452.788228][T21242] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 452.822213][T20940] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 452.897830][T20940] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 452.925839][T20940] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 452.945528][T20940] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 453.323444][T21286] netlink: zone id is out of range [ 453.356432][T21286] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 453.385903][T21286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.409617][T21287] tipc: Enabled bearer , priority 0 [ 453.475745][T21287] syzkaller0: entered promiscuous mode [ 453.486085][T21287] syzkaller0: entered allmulticast mode [ 453.621577][T21290] tipc: Resetting bearer [ 453.673400][T21284] tipc: Resetting bearer [ 453.702516][T21284] tipc: Disabling bearer [ 454.493542][T21312] netlink: 'syz.3.4448': attribute type 11 has an invalid length. [ 455.020471][T21345] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.604064][T21330] delete_channel: no stack [ 455.970858][T21374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.992361][T21374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.009636][T21374] bond0 (unregistering): Released all slaves [ 456.166011][T21391] __nla_validate_parse: 10 callbacks suppressed [ 456.166040][T21391] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4467'. [ 456.285033][T21396] xt_limit: Overflow, try lower: 271964/0 [ 456.387611][T21405] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4474'. [ 456.531481][T21414] geneve3: entered promiscuous mode [ 456.538951][T20935] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.550502][T21413] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 456.570520][T20935] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.620270][T20935] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.653652][T20935] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.797374][T21427] netlink: 'syz.3.4480': attribute type 8 has an invalid length. [ 457.241847][T21446] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4486'. [ 457.667133][T21456] tipc: Started in network mode [ 457.672154][T21456] tipc: Node identity 06bf051333b3, cluster identity 4711 [ 457.679905][T21456] tipc: Enabled bearer , priority 0 [ 457.687937][T21456] syzkaller0: entered promiscuous mode [ 457.693712][T21456] syzkaller0: entered allmulticast mode [ 458.164644][T21476] veth9: entered allmulticast mode [ 458.171826][T21449] tipc: Resetting bearer [ 458.210562][T21449] tipc: Disabling bearer [ 458.258004][T21476] veth11: entered allmulticast mode [ 458.389725][T21488] bond5: option arp_all_targets: invalid value (18446744073709551613) [ 458.413041][T21488] bond5 (unregistering): Released all slaves [ 458.513559][T21501] netlink: 256 bytes leftover after parsing attributes in process `syz.7.4500'. [ 458.536381][T21269] Set syz1 is full, maxelem 65536 reached [ 458.589918][T21501] bond0: option all_slaves_active: invalid value (216) [ 458.600651][T21501] bond0 (unregistering): Released all slaves [ 458.646942][T21506] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4502'. [ 458.858831][T21514] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4502'. [ 458.979909][T21522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.161056][T21532] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4507'. [ 459.288735][T21540] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4509'. [ 459.312602][T21540] netlink: 'syz.5.4509': attribute type 1 has an invalid length. [ 459.468535][T21545] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 459.528129][T21540] veth9: entered promiscuous mode [ 459.537870][T21540] bond7: (slave veth9): Enslaving as a backup interface with a down link [ 459.601260][T21552] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4513'. [ 459.722703][T21564] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4515'. [ 459.761968][T21564] xfrm1: entered promiscuous mode [ 459.815757][T21564] xfrm1: entered allmulticast mode [ 460.067885][T21584] netlink: 'syz.3.4520': attribute type 3 has an invalid length. [ 460.642607][T21626] netlink: 'syz.7.4533': attribute type 11 has an invalid length. [ 460.751888][T21639] netlink: 'syz.6.4535': attribute type 6 has an invalid length. [ 460.809326][T21644] netlink: 'syz.5.4538': attribute type 1 has an invalid length. [ 460.972054][T21653] 8021q: adding VLAN 0 to HW filter on device bond2 [ 460.982918][T21653] bond0: (slave bond2): Enslaving as an active interface with an up link [ 461.364016][T21686] vlan2: entered promiscuous mode [ 461.387362][T21686] bond0: entered promiscuous mode [ 461.443941][T21694] xt_TCPMSS: Only works on TCP SYN packets [ 461.510739][T21691] xt_CT: No such helper "syz1" [ 461.545376][T21697] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 462.275427][T21754] __nla_validate_parse: 17 callbacks suppressed [ 462.275444][T21754] netlink: 7064 bytes leftover after parsing attributes in process `syz.6.4569'. [ 462.311050][T21754] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 462.343631][T21753] tipc: Enabled bearer , priority 10 [ 462.481278][T21763] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 462.599491][T21771] netlink: 'syz.1.4574': attribute type 1 has an invalid length. [ 462.716142][T21781] netlink: 112 bytes leftover after parsing attributes in process `syz.6.4575'. [ 462.820936][T21787] netlink: 1196 bytes leftover after parsing attributes in process `syz.5.4578'. [ 463.419097][T21819] veth0: entered promiscuous mode [ 463.462185][T21824] mac80211_hwsim hwsim39 syzkaller0: left promiscuous mode [ 463.524194][T21825] ip6gre2: entered allmulticast mode [ 463.602972][T21831] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4590'. [ 463.757830][T21838] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4595'. [ 463.771256][T21841] tipc: Enabled bearer , priority 0 [ 463.779695][T21841] syzkaller0: entered promiscuous mode [ 463.788035][T21839] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4595'. [ 463.798995][T21841] syzkaller0: entered allmulticast mode [ 463.852950][T21841] tipc: Resetting bearer [ 463.854491][T21842] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20000 [ 463.869771][T21835] tipc: Resetting bearer [ 463.889305][T21835] tipc: Disabling bearer [ 463.991314][T21849] tipc: Enabled bearer , priority 0 [ 464.001574][T21849] syzkaller0: entered promiscuous mode [ 464.019528][T21849] syzkaller0: entered allmulticast mode [ 464.102474][T21862] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4602'. [ 464.133441][T21849] tipc: Resetting bearer [ 464.225263][T21848] tipc: Resetting bearer [ 464.291236][T21882] netlink: 'syz.1.4605': attribute type 1 has an invalid length. [ 464.307813][T21848] tipc: Disabling bearer [ 464.319482][T21818] veth0: left promiscuous mode [ 464.396522][T21886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4607'. [ 464.406611][T21886] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 464.414413][T21884] bond8: (slave geneve2): making interface the new active one [ 464.427952][T21884] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 464.515494][T21900] IPVS: set_ctl: invalid protocol: 42 10.1.1.0:20001 [ 464.631845][T21910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4609'. [ 464.670116][T21910] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4609'. [ 465.057790][T21932] SET target dimension over the limit! [ 465.451625][T21925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.486435][T21925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.685876][T21925] team1: left promiscuous mode [ 465.690860][T21925] team1: left allmulticast mode [ 465.697185][T21925] ip6erspan0: left promiscuous mode [ 465.702740][T21925] ip6erspan0: left allmulticast mode [ 465.720208][T21925] bond2: left promiscuous mode [ 465.730470][T21925] bridge0: left promiscuous mode [ 465.739494][T21925] mac80211_hwsim hwsim39 syzkaller0: left allmulticast mode [ 465.758263][T21925] bond5: left promiscuous mode [ 465.779060][T18754] lo speed is unknown, defaulting to 1000 [ 465.795538][T18754] syz2: Port: 1 Link DOWN [ 465.805311][T20944] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.830535][T20944] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.990105][T20944] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.000612][T20944] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.334471][ T30] audit: type=1107 audit(1761616955.276:6): pid=22003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 466.396003][T22011] bridge0: port 1(syz_tun) entered blocking state [ 466.527144][T22011] bridge0: port 1(syz_tun) entered disabled state [ 466.533820][T22011] syz_tun: entered allmulticast mode [ 466.580699][T22016] netlink: 'syz.5.4636': attribute type 10 has an invalid length. [ 466.587500][T22011] syz_tun: entered promiscuous mode [ 467.034573][T22062] FAULT_INJECTION: forcing a failure. [ 467.034573][T22062] name failslab, interval 1, probability 0, space 0, times 0 [ 467.116388][T22062] CPU: 1 UID: 0 PID: 22062 Comm: syz.5.4652 Not tainted syzkaller #0 PREEMPT(full) [ 467.116415][T22062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 467.116426][T22062] Call Trace: [ 467.116433][T22062] [ 467.116441][T22062] dump_stack_lvl+0x189/0x250 [ 467.116469][T22062] ? __pfx____ratelimit+0x10/0x10 [ 467.116494][T22062] ? __pfx_dump_stack_lvl+0x10/0x10 [ 467.116521][T22062] ? __pfx__printk+0x10/0x10 [ 467.116545][T22062] ? __pfx___might_resched+0x10/0x10 [ 467.116563][T22062] ? fs_reclaim_acquire+0x7d/0x100 [ 467.116593][T22062] should_fail_ex+0x414/0x560 [ 467.116623][T22062] should_failslab+0xa8/0x100 [ 467.116643][T22062] __kmalloc_cache_noprof+0x6f/0x6f0 [ 467.116667][T22062] ? call_usermodehelper_setup+0x8e/0x270 [ 467.116683][T22062] ? trace_kmalloc+0x1f/0xd0 [ 467.116703][T22062] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 467.116732][T22062] call_usermodehelper_setup+0x8e/0x270 [ 467.116747][T22062] ? __pfx_free_modprobe_argv+0x10/0x10 [ 467.116770][T22062] __request_module+0x39f/0x5e0 [ 467.116794][T22062] ? __pfx___request_module+0x10/0x10 [ 467.116827][T22062] ? security_capable+0x7e/0x2e0 [ 467.116854][T22062] ? dev_load+0x21/0x1f0 [ 467.116875][T22062] dev_load+0x190/0x1f0 [ 467.116899][T22062] dev_ioctl+0x384/0x1150 [ 467.116926][T22062] sock_do_ioctl+0x22c/0x300 [ 467.116950][T22062] ? __pfx_sock_do_ioctl+0x10/0x10 [ 467.116987][T22062] sock_ioctl+0x576/0x790 [ 467.117009][T22062] ? __pfx_sock_ioctl+0x10/0x10 [ 467.117033][T22062] ? __fget_files+0x3a0/0x420 [ 467.117055][T22062] ? __fget_files+0x2a/0x420 [ 467.117075][T22062] ? bpf_lsm_file_ioctl+0x9/0x20 [ 467.117095][T22062] ? __pfx_sock_ioctl+0x10/0x10 [ 467.117114][T22062] __se_sys_ioctl+0xfc/0x170 [ 467.117138][T22062] do_syscall_64+0xfa/0xfa0 [ 467.117157][T22062] ? lockdep_hardirqs_on+0x9c/0x150 [ 467.117178][T22062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.117196][T22062] ? clear_bhb_loop+0x60/0xb0 [ 467.117216][T22062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.117234][T22062] RIP: 0033:0x7f98d3f8efc9 [ 467.117249][T22062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.117264][T22062] RSP: 002b:00007f98d4ece038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 467.117284][T22062] RAX: ffffffffffffffda RBX: 00007f98d41e5fa0 RCX: 00007f98d3f8efc9 [ 467.117297][T22062] RDX: 0000200000000100 RSI: 0000000000008946 RDI: 0000000000000005 [ 467.117309][T22062] RBP: 00007f98d4ece090 R08: 0000000000000000 R09: 0000000000000000 [ 467.117320][T22062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.117330][T22062] R13: 00007f98d41e6038 R14: 00007f98d41e5fa0 R15: 00007ffc5f3cd2c8 [ 467.117358][T22062] [ 467.145547][T22067] netlink: 'syz.3.4653': attribute type 2 has an invalid length. [ 467.428573][T22067] netlink: 'syz.3.4653': attribute type 1 has an invalid length. [ 467.446406][T22078] tipc: Enabled bearer , priority 0 [ 467.461159][T22078] syzkaller0: entered promiscuous mode [ 467.467049][T22078] syzkaller0: entered allmulticast mode [ 467.526005][T22078] tipc: Resetting bearer [ 467.543371][T22072] tipc: Resetting bearer [ 467.586156][T22072] tipc: Disabling bearer [ 467.902711][T22097] netlink: 'syz.3.4661': attribute type 13 has an invalid length. [ 467.914187][T22102] __nla_validate_parse: 24 callbacks suppressed [ 467.914208][T22102] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4662'. [ 468.073769][T22102] bond3: option xmit_hash_policy: invalid value (64) [ 468.084637][T22102] bond3 (unregistering): Released all slaves [ 468.110457][T22086] lo speed is unknown, defaulting to 1000 [ 468.122727][T22086] hsr0 speed is unknown, defaulting to 1000 [ 468.182469][T22115] FAULT_INJECTION: forcing a failure. [ 468.182469][T22115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.215176][T22115] CPU: 0 UID: 0 PID: 22115 Comm: syz.1.4667 Not tainted syzkaller #0 PREEMPT(full) [ 468.215202][T22115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 468.215212][T22115] Call Trace: [ 468.215220][T22115] [ 468.215227][T22115] dump_stack_lvl+0x189/0x250 [ 468.215256][T22115] ? __pfx____ratelimit+0x10/0x10 [ 468.215278][T22115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 468.215301][T22115] ? __pfx__printk+0x10/0x10 [ 468.215333][T22115] should_fail_ex+0x414/0x560 [ 468.215371][T22115] _copy_to_user+0x31/0xb0 [ 468.215401][T22115] simple_read_from_buffer+0xe1/0x170 [ 468.215435][T22115] proc_fail_nth_read+0x1b3/0x220 [ 468.215459][T22115] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 468.215509][T22115] ? rw_verify_area+0x2a6/0x4d0 [ 468.215531][T22115] ? __lock_acquire+0xab9/0xd20 [ 468.215546][T22115] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 468.215569][T22115] vfs_read+0x200/0xa30 [ 468.215591][T22115] ? fdget_pos+0x247/0x320 [ 468.215613][T22115] ? __pfx___mutex_lock+0x10/0x10 [ 468.215636][T22115] ? __pfx_vfs_read+0x10/0x10 [ 468.215659][T22115] ? __fget_files+0x2a/0x420 [ 468.215681][T22115] ? __fget_files+0x3a0/0x420 [ 468.215696][T22115] ? __fget_files+0x2a/0x420 [ 468.215723][T22115] ksys_read+0x145/0x250 [ 468.215744][T22115] ? __fget_files+0x2a/0x420 [ 468.215761][T22115] ? __pfx_ksys_read+0x10/0x10 [ 468.215788][T22115] ? do_syscall_64+0xbe/0xfa0 [ 468.215813][T22115] do_syscall_64+0xfa/0xfa0 [ 468.215833][T22115] ? lockdep_hardirqs_on+0x9c/0x150 [ 468.215854][T22115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.215872][T22115] ? clear_bhb_loop+0x60/0xb0 [ 468.215894][T22115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.215918][T22115] RIP: 0033:0x7f3efb98d9dc [ 468.215934][T22115] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 468.215949][T22115] RSP: 002b:00007f3efc886030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 468.215968][T22115] RAX: ffffffffffffffda RBX: 00007f3efbbe5fa0 RCX: 00007f3efb98d9dc [ 468.215981][T22115] RDX: 000000000000000f RSI: 00007f3efc8860a0 RDI: 0000000000000006 [ 468.215992][T22115] RBP: 00007f3efc886090 R08: 0000000000000000 R09: 0000000000000000 [ 468.216003][T22115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.216013][T22115] R13: 00007f3efbbe6038 R14: 00007f3efbbe5fa0 R15: 00007ffcd7645e78 [ 468.216042][T22115] [ 468.594373][T22124] x_tables: unsorted underflow at hook 2 [ 468.832929][T22145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4673'. [ 468.833751][T22152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4675'. [ 468.957322][T22156] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4676'. [ 469.121100][T22149] tipc: Enabled bearer , priority 0 [ 469.196376][T22149] syzkaller0: entered promiscuous mode [ 469.203472][T22149] syzkaller0: entered allmulticast mode [ 469.210389][T22149] tipc: Resetting bearer [ 469.226257][T22148] tipc: Resetting bearer [ 470.894366][T22148] tipc: Disabling bearer [ 470.904284][T22172] netlink: 284 bytes leftover after parsing attributes in process `syz.1.4678'. [ 471.324539][T22210] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4691'. [ 471.593240][T22226] ip6t_srh: unknown srh invflags 4000 [ 471.681217][T22227] tipc: Enabled bearer , priority 0 [ 471.710234][T22221] tipc: Enabling of bearer rejected, already enabled [ 471.750327][T22227] syzkaller0: entered promiscuous mode [ 471.766543][T22227] syzkaller0: entered allmulticast mode [ 471.772943][T22227] tipc: Resetting bearer [ 471.807790][T22219] tipc: Resetting bearer [ 471.920890][T22245] netlink: 'syz.1.4702': attribute type 9 has an invalid length. [ 472.794920][ T10] tipc: Node number set to 503691147 [ 473.500878][T22219] tipc: Disabling bearer [ 473.509740][T22234] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4699'. [ 473.664834][T22259] xt_CONNSECMARK: invalid mode: 0 [ 473.768074][T22269] tipc: Enabling of bearer rejected, already enabled [ 473.932074][T22285] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4708'. [ 473.948262][ T25] block nbd5: Possible stuck request ffff88802521e000: control (read@0,1024B). Runtime 360 seconds [ 473.963169][ T25] block nbd5: Possible stuck request ffff88802521e1c0: control (read@1024,1024B). Runtime 360 seconds [ 473.974351][ T25] block nbd5: Possible stuck request ffff88802521e380: control (read@2048,1024B). Runtime 360 seconds [ 473.985749][ T25] block nbd5: Possible stuck request ffff88802521e540: control (read@3072,1024B). Runtime 360 seconds [ 474.021693][T22289] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4711'. [ 474.042280][T22289] vlan2: entered allmulticast mode [ 474.048991][T22289] mac80211_hwsim hwsim40 wlan0: entered allmulticast mode [ 474.063624][T22289] syzkaller0: entered promiscuous mode [ 474.069958][T22289] syzkaller0: entered allmulticast mode [ 474.295829][T22308] tipc: Enabled bearer , priority 0 [ 474.452870][T22318] ip6t_srh: unknown srh invflags 4000 [ 474.541337][T22322] netlink: 'syz.1.4723': attribute type 1 has an invalid length. [ 474.572784][T22326] netlink: 'syz.5.4724': attribute type 1 has an invalid length. [ 474.590453][T22322] 8021q: adding VLAN 0 to HW filter on device bond9 [ 474.600351][T22326] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 474.629356][T22322] veth3: entered promiscuous mode [ 474.660316][T22322] bond9: (slave veth3): Enslaving as an active interface with a down link [ 474.726780][T22329] veth5: entered promiscuous mode [ 474.732528][T22337] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4726'. [ 474.742630][T22329] bond9: (slave veth5): Enslaving as an active interface with a down link [ 474.761391][T22339] netlink: 'syz.3.4727': attribute type 1 has an invalid length. [ 474.932905][T22351] lo: Caught tx_queue_len zero misconfig [ 475.061204][T22298] tipc: Disabling bearer [ 475.111506][T22365] netlink: 772 bytes leftover after parsing attributes in process `syz.5.4735'. [ 475.137304][T22367] ip6t_srh: unknown srh invflags 4000 [ 475.189005][T22369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4733'. [ 475.234197][T22369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4733'. [ 475.320940][T22373] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 475.468576][T22379] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 475.533719][T22383] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4740'. [ 475.544650][T22383] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4740'. [ 475.590130][T22385] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4742'. [ 475.760326][T22393] tipc: Enabled bearer , priority 0 [ 475.841317][T22393] syzkaller0: entered promiscuous mode [ 475.847594][T22393] syzkaller0: entered allmulticast mode [ 475.859699][T22393] tipc: Resetting bearer [ 475.902673][T22392] tipc: Resetting bearer [ 477.666571][T22392] tipc: Disabling bearer [ 477.911793][T22441] [ 477.914161][T22441] ====================================================== [ 477.921180][T22441] WARNING: possible circular locking dependency detected [ 477.928190][T22441] syzkaller #0 Not tainted [ 477.932583][T22441] ------------------------------------------------------ [ 477.939580][T22441] syz.5.4758/22441 is trying to acquire lock: [ 477.945623][T22441] ffffffff8f425a98 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 477.954924][T22441] [ 477.954924][T22441] but task is already holding lock: [ 477.962372][T22441] ffff88804f19ab70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 477.971755][T22441] [ 477.971755][T22441] which lock already depends on the new lock. [ 477.971755][T22441] [ 477.982158][T22441] [ 477.982158][T22441] the existing dependency chain (in reverse order) is: [ 477.991159][T22441] [ 477.991159][T22441] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 477.999315][T22441] lock_acquire+0x120/0x360 [ 478.004333][T22441] _raw_spin_lock_bh+0x36/0x50 [ 478.009608][T22441] nr_rt_device_down+0x12a/0x720 [ 478.015064][T22441] nr_device_event+0x137/0x150 [ 478.020600][T22441] notifier_call_chain+0x1b6/0x3e0 [ 478.026252][T22441] __dev_notify_flags+0x18d/0x2e0 [ 478.031804][T22441] netif_change_flags+0xe8/0x1a0 [ 478.037260][T22441] dev_change_flags+0x130/0x260 [ 478.042630][T22441] dev_ioctl+0x7b4/0x1150 [ 478.047626][T22441] sock_do_ioctl+0x22c/0x300 [ 478.052731][T22441] sock_ioctl+0x576/0x790 [ 478.057571][T22441] __se_sys_ioctl+0xfc/0x170 [ 478.062765][T22441] do_syscall_64+0xfa/0xfa0 [ 478.067776][T22441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.074173][T22441] [ 478.074173][T22441] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 478.081980][T22441] lock_acquire+0x120/0x360 [ 478.086999][T22441] _raw_spin_lock_bh+0x36/0x50 [ 478.092271][T22441] nr_rt_device_down+0xa9/0x720 [ 478.097624][T22441] nr_device_event+0x137/0x150 [ 478.102902][T22441] notifier_call_chain+0x1b6/0x3e0 [ 478.108521][T22441] __dev_notify_flags+0x18d/0x2e0 [ 478.114054][T22441] netif_change_flags+0xe8/0x1a0 [ 478.119495][T22441] dev_change_flags+0x130/0x260 [ 478.124855][T22441] dev_ioctl+0x7b4/0x1150 [ 478.129784][T22441] sock_do_ioctl+0x22c/0x300 [ 478.134880][T22441] sock_ioctl+0x576/0x790 [ 478.139721][T22441] __se_sys_ioctl+0xfc/0x170 [ 478.144815][T22441] do_syscall_64+0xfa/0xfa0 [ 478.149825][T22441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.156221][T22441] [ 478.156221][T22441] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 478.164112][T22441] validate_chain+0xb9b/0x2140 [ 478.169381][T22441] __lock_acquire+0xab9/0xd20 [ 478.174559][T22441] lock_acquire+0x120/0x360 [ 478.179639][T22441] _raw_spin_lock_bh+0x36/0x50 [ 478.184918][T22441] nr_remove_neigh+0x25/0xe0 [ 478.190024][T22441] nr_add_node+0x1d9f/0x2570 [ 478.195114][T22441] nr_rt_ioctl+0xc12/0xd50 [ 478.200034][T22441] sock_do_ioctl+0xdc/0x300 [ 478.205043][T22441] sock_ioctl+0x576/0x790 [ 478.209875][T22441] __se_sys_ioctl+0xfc/0x170 [ 478.215066][T22441] do_syscall_64+0xfa/0xfa0 [ 478.220263][T22441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.226685][T22441] [ 478.226685][T22441] other info that might help us debug this: [ 478.226685][T22441] [ 478.237002][T22441] Chain exists of: [ 478.237002][T22441] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 478.237002][T22441] [ 478.250813][T22441] Possible unsafe locking scenario: [ 478.250813][T22441] [ 478.258247][T22441] CPU0 CPU1 [ 478.263594][T22441] ---- ---- [ 478.268945][T22441] lock(&nr_node->node_lock); [ 478.273693][T22441] lock(nr_node_list_lock); [ 478.280783][T22441] lock(&nr_node->node_lock); [ 478.288135][T22441] lock(nr_neigh_list_lock); [ 478.292801][T22441] [ 478.292801][T22441] *** DEADLOCK *** [ 478.292801][T22441] [ 478.300921][T22441] 1 lock held by syz.5.4758/22441: [ 478.306025][T22441] #0: ffff88804f19ab70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 478.315759][T22441] [ 478.315759][T22441] stack backtrace: [ 478.321657][T22441] CPU: 1 UID: 0 PID: 22441 Comm: syz.5.4758 Not tainted syzkaller #0 PREEMPT(full) [ 478.321674][T22441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 478.321683][T22441] Call Trace: [ 478.321690][T22441] [ 478.321698][T22441] dump_stack_lvl+0x189/0x250 [ 478.321720][T22441] ? __pfx_dump_stack_lvl+0x10/0x10 [ 478.321738][T22441] ? __pfx__printk+0x10/0x10 [ 478.321751][T22441] ? stack_trace_save+0x9c/0xe0 [ 478.321773][T22441] print_circular_bug+0x2ee/0x310 [ 478.321792][T22441] check_noncircular+0x134/0x160 [ 478.321811][T22441] validate_chain+0xb9b/0x2140 [ 478.321834][T22441] __lock_acquire+0xab9/0xd20 [ 478.321849][T22441] ? nr_remove_neigh+0x25/0xe0 [ 478.321865][T22441] lock_acquire+0x120/0x360 [ 478.321877][T22441] ? nr_remove_neigh+0x25/0xe0 [ 478.321896][T22441] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 478.321918][T22441] ? nr_remove_neigh+0x25/0xe0 [ 478.321934][T22441] _raw_spin_lock_bh+0x36/0x50 [ 478.321949][T22441] ? nr_remove_neigh+0x25/0xe0 [ 478.321965][T22441] nr_remove_neigh+0x25/0xe0 [ 478.321981][T22441] nr_add_node+0x1d9f/0x2570 [ 478.321998][T22441] ? dev_get_by_name+0x21/0x200 [ 478.322014][T22441] ? dev_get_by_name+0x21/0x200 [ 478.322028][T22441] ? dev_get_by_name+0x21/0x200 [ 478.322042][T22441] ? nr_call_to_digi+0x136/0x1b0 [ 478.322058][T22441] nr_rt_ioctl+0xc12/0xd50 [ 478.322076][T22441] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 478.322090][T22441] ? lockdep_hardirqs_on+0x9c/0x150 [ 478.322110][T22441] ? apparmor_capable+0x137/0x1b0 [ 478.322128][T22441] ? capable+0x89/0xe0 [ 478.322141][T22441] ? nr_ioctl+0x1b1/0x3b0 [ 478.322155][T22441] sock_do_ioctl+0xdc/0x300 [ 478.322173][T22441] ? __pfx_sock_do_ioctl+0x10/0x10 [ 478.322194][T22441] sock_ioctl+0x576/0x790 [ 478.322211][T22441] ? __pfx_sock_ioctl+0x10/0x10 [ 478.322227][T22441] ? __fget_files+0x3a0/0x420 [ 478.322240][T22441] ? __fget_files+0x2a/0x420 [ 478.322253][T22441] ? bpf_lsm_file_ioctl+0x9/0x20 [ 478.322268][T22441] ? __pfx_sock_ioctl+0x10/0x10 [ 478.322283][T22441] __se_sys_ioctl+0xfc/0x170 [ 478.322301][T22441] do_syscall_64+0xfa/0xfa0 [ 478.322319][T22441] ? lockdep_hardirqs_on+0x9c/0x150 [ 478.322335][T22441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.322348][T22441] ? clear_bhb_loop+0x60/0xb0 [ 478.322363][T22441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.322377][T22441] RIP: 0033:0x7f98d3f8efc9 [ 478.322391][T22441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.322404][T22441] RSP: 002b:00007f98d4ead038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 478.322419][T22441] RAX: ffffffffffffffda RBX: 00007f98d41e6090 RCX: 00007f98d3f8efc9 [ 478.322430][T22441] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000006 [ 478.322439][T22441] RBP: 00007f98d4011f91 R08: 0000000000000000 R09: 0000000000000000 [ 478.322448][T22441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.322457][T22441] R13: 00007f98d41e6128 R14: 00007f98d41e6090 R15: 00007ffc5f3cd2c8 [ 478.322473][T22441] [ 478.626448][T21965] IPVS: starting estimator thread 0... [ 478.641703][T22427] batadv_slave_0: entered promiscuous mode [ 478.647616][T22427] batadv_slave_0: entered allmulticast mode [ 478.714950][T22445] IPVS: using max 74 ests per chain, 177600 per kthread