last executing test programs: 2m57.703401706s ago: executing program 4 (id=2555): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0x0, 0x6c8) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(r5, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r3, &(0x7f0000000400)={@val={0xa, 0x806}, @void, @eth={@random="000000000400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0xc, 0x11, 0xff, @private2, @mcast2, {[], {0x4f19, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x8, 0x100, @void}}}}}}}}}, 0x46) connect$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400, @local}}, 0x24) r7 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000a0000000000000004000000850000002e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000500000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000006"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r10, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000100)={0x4c, r11, 0x1, 0x70bd28, 0x255fdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x13}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x4c}}, 0x0) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x18, 0x500}}], 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 2m56.536676405s ago: executing program 4 (id=2562): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) socket$igmp(0x2, 0x3, 0x2) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x48, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff3}, {0xc, 0xffff}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'veth0_to_batadv\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaa9bb08004500452c00000000002f9078ac1e0001e00000010000655800189078040000000000000086ddffff00000000"], 0xfdef) socket$key(0xf, 0x3, 0x2) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002e40)={&(0x7f0000002e00)=ANY=[@ANYBLOB='(', @ANYRES16, @ANYBLOB="79a82dbd7000ffdbdf2501000000000000000c4100000007001473797a"], 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x24000084) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x4) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x50) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3000, 0x1000000000000008) (async) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000140)={'wg0\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x3b, 0x2, [{0xffff, 0xffffff80}, {0x0, 0xc2}]}}) (async) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000880)='m', 0x1}], 0x1}, 0x5) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000100), 0x4) (async) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, 0x0, 0x0) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000300004000000000ff3f000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m55.277873341s ago: executing program 4 (id=2573): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x26, 0x6a, 0x46, 0x3, 0x0, 0x85, 0x6, 0x21, 0xe6, 0x0, 0x81, 0x4c, 0x2, 0x3}, 0xe) (async) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000280)=@in6={0xa, 0x4e22, 0x1000, @dev={0xfe, 0x80, '\x00', 0x31}, 0x730}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x8040000) (async) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xe}, 0x8) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) (async, rerun: 32) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x8, 0x1, 0x142}, &(0x7f0000000040)=0x10) (rerun: 32) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={r3, 0x5}, 0x8) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) (rerun: 64) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000100)=0x4) (async) socket$kcm(0x29, 0x0, 0x0) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xa, 0x32, 0xffffffffffffffff, 0x0) 2m53.990419989s ago: executing program 4 (id=2576): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}}, 0x20008000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'gretap0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x8000, 0x20, 0xffff, 0x1, {{0x14, 0x4, 0x0, 0x15, 0x50, 0x67, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x4}, @dev={0xac, 0x14, 0x14, 0x14}, {[@timestamp={0x44, 0x1c, 0x1c, 0x0, 0x8, [0x4, 0xfffffffa, 0x3, 0x80, 0x2, 0x7]}, @timestamp_prespec={0x44, 0x14, 0x57, 0x3, 0x0, [{@remote, 0x6f29bd73}, {@multicast2, 0x702d}]}, @end, @generic={0x88, 0xa, "fc6838fd412f63db"}]}}}}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xcac48dc4}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x8000, 0x7800, 0x1, 0x4, {{0x1f, 0x4, 0x1, 0x38, 0x7c, 0x64, 0x0, 0x1, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x1a}, {[@lsrr={0x83, 0xb, 0xf1, [@loopback, @dev={0xac, 0x14, 0x14, 0x2d}]}, @ssrr={0x89, 0x13, 0x6d, [@local, @empty, @dev={0xac, 0x14, 0x14, 0x37}, @multicast1]}, @cipso={0x86, 0x1b, 0x3, [{0x1, 0x6, "59d02109"}, {0x7, 0xf, "fae0efbe1876c640a88385fb6d"}]}, @timestamp={0x44, 0x18, 0xed, 0x0, 0xb, [0x6, 0x6, 0xfff, 0x2, 0x3]}, @timestamp_addr={0x44, 0xc, 0x3e, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x13}, 0x2}]}, @timestamp={0x44, 0x8, 0xc8, 0x0, 0x3, [0x1]}, @noop]}}}}}) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xac, r4, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x77}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4a}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffe}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xd}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3d}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40010}, 0x8040) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r8) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000000c0)={0x0, 0xa1ff, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01fffff0000000000000200100000c000280080002006c6f0000180003800400010008000200050000000800040076"], 0x38}}, 0x0) 2m50.332873884s ago: executing program 4 (id=2583): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14}}, 0x28}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYRES64=r0], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[], 0x38}}, 0x0) sendmsg$inet(r4, 0x0, 0x2004010) listen(r3, 0xc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r8, 0x8982, &(0x7f0000000080)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r10, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x0) 2m49.297519254s ago: executing program 4 (id=2593): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x4200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280200001900010028bd7000fbdbdf251d01090050001280adfdd58033ac20d9db2597515873def3351bf11d66e8632c47544ac4a8a74aec90d7faba3dc1cdbd588d2dccd5f20dc35eb9a20452580c01ca5021c7bf57b3cb27d51cf9e00e6c4264000000c4010680c0"], 0x228}, 0x1, 0x0, 0x0, 0x5}, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x4c, r6, 0x917, 0x0, 0x3, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x25}}]}, 0x4c}}, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000002280)={'ip6erspan0\x00', @random}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r8}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={&(0x7f0000000040)="852dba2640bd4c597c9f57a3e5964bf18dc504fb50975efc407e65544d3109bafc4e987734884b5352642379d77e644130f94fc9b684fe05eaa761637fc49e665eafd6ac3bae81a8a82139f48204fb97b9bbf5c75a5e771190127d6e4d8ee2bf54212a4900d507", &(0x7f0000000140)=""/91, &(0x7f0000000240)="b656f5554ad99a89b8b6cc0e9ea7d3d963a17a7710dd256ab1d7dfade73a0ea92f5723e68405bc8936a4409af9dcac34ddbcc682efe5a86c4bf8e1f85edb3e9cbe3d0953760417554cd74bdc787a01abe042fe4076970ac5056dab7ba4035546834bdfcd21892cdcbd1cb5439890e515828d98d1c8bb137859616d9a37903c38075995f88c32cc92084abc08eebd5bba1865bb0d3811849e", &(0x7f0000000300)="66c6a8be45ef34dfb88f2dd77a92506d1af5b7fdca", 0x1, r9}, 0x38) 2m43.382579833s ago: executing program 1 (id=2617): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_MASTER={0x8, 0x3a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004804}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x2000c851}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}]}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x24000850}, 0x4000040) r2 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r5, r3, 0x25, 0x0, @val=@netkit={@void, @value=r5}}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x6}, @md5sig={0x1d, 0x12, "ac3272000000006f00"}]}}}}}}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x20}, 0x0) 2m43.145065126s ago: executing program 1 (id=2620): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, 0x0, 0x0) syz_emit_ethernet(0x8c, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000011f4ffee22d1fa9c12290599e59878d6ebb2d4a692e7eecc76b9513feec585ec9baf402f76a4eca43bb38e571c50747e16367dc1d0079cf48b1c2cd5b3adea96dbae013732c5bb7d3b11d74aadc957ca725ae9a4e429b98c9c17d0f8970cd2ab949ff44820555be8f1d15c7880f84ad5a6586a728e7b9d347b89de33e0bb27868cb590d80b2a6398a26d7e99a472cf1b75312eaaf5fc609a168840bb4ab02688a189d13342f39b32a2fc3e96aecf93182595210e04c998220dca19578b450c923095b38261f2516f8a9fa1b5d96edd7ee1cdf686bf6bd42295"], 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000080)={0x8}, 0x1) sendto$inet6(r2, &(0x7f0000000040)='l', 0x1, 0x20000010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="1a", 0x1, 0x20044084, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r6) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x28, r7, 0x1, 0x80000, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}}, 0x40000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f0000000a80)={&(0x7f00000000c0), 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x5c, r7, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f0000000380)=ANY=[@ANYBLOB='b *:* r\n)'], 0xa) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @empty}]}}}]}, 0x4c}}, 0x0) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="f0000000100033060000000000002000fe8000000000000000000000000000aaac1414bb000000000000000000000000ffff3ffe4e2180010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d532000000ac1414bb0000000000000000000000002003000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000500000000000000feffff7e00000000000000004000000000000000000000000400000000000000000000000000000003000000040000000200000025bd7000003500000a000401c25c000000000000"], 0xf0}}, 0x24008800) unshare(0x6a020400) 2m40.904226783s ago: executing program 1 (id=2636): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000100)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0xee, &(0x7f00000001c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x37, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x49, 0x4, 0x2, 0x0, 0x1}, 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x72, 0xffffffffffffffff, 0x2bebc000) unshare(0x22020400) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "399421fe8a4c9563", "00b147fbbfc100", "d6dc09ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x4b0}], 0x1, 0x0, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r3, &(0x7f00000003c0), &(0x7f0000000580)=@tcp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f00000003c0), &(0x7f0000000300)=@tcp, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x40, r5, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x41, 0x5f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x40}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet_icmp(0x2, 0x2, 0x1) 2m37.966655164s ago: executing program 1 (id=2639): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x25, 0x200, 0x70bd28, 0x25dfdbff, 0xffc00, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x28001}, 0x4095) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20400c5}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x20040815) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000400), r1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000540)={'gre0\x00', &(0x7f0000000440)={'syztnl0\x00', r0, 0x8000, 0x7, 0x5a, 0x2, {{0x31, 0x4, 0x2, 0x8, 0xc4, 0x68, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp_addr={0x44, 0x3c, 0x94, 0x1, 0xd, [{@loopback, 0x9}, {@local, 0x7}, {@private=0xa010102}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x649db051}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x213}, {@multicast1, 0x9}, {@broadcast, 0xb29f}]}, @timestamp_addr={0x44, 0xc, 0x8f, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x27}, 0x8001}]}, @cipso={0x86, 0x41, 0x3, [{0x7, 0xa, "9cc2557226d86eb8"}, {0x6, 0x7, "e281ae2aa2"}, {0x2, 0x8, "51610f807300"}, {0x1, 0xb, "20a3c318b84eebd5ea"}, {0x5, 0x11, "7c12828ae96ba2337bf9508d24b802"}, {0x7, 0x6, "9eb09d60"}]}, @timestamp={0x44, 0x20, 0xaf, 0x0, 0x1, [0x0, 0x6, 0x4, 0x7, 0x4, 0x5, 0x100]}, @ra={0x94, 0x4}, @noop]}}}}}) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, r3, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_AF={0x5}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x2d}}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010100}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x70}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000680)="e90ece8d0e34c1be03c8766dbc0918ab6a7d4d2059ec51b020ecc6a5cc3b6dda9808d8f3ee222289b7941115d750f2248f68f962fafdfe963dd8bfc02de4f9e39c4cb77bf46bb0d2c7445054f8783ece613a74073ba865934f0d814ea4b6a47205067869f21dc13de7212d703857f7bee6c1b32013ec76edfb30f2f83bd0d409d787f5b9b2bd3213b2b505f9290f2242ee9ccae86c2c92cf2b4222", 0x9b) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000740)={'\x00', 0x200}) r5 = socket(0xec2511d281eeb850, 0x8080b, 0x9) bind$802154_dgram(r5, &(0x7f0000000780)={0x24, @none={0x0, 0x3}}, 0x14) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f00000007c0)={'ip_vti0\x00', {0x2, 0x0, @multicast1}}) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@deltaction={0x24, 0x31, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x24}}, 0x40000) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000900)={r6}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffff4144}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7fffffff}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x85}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0xc1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000ac0)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000d00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x1b4, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r8, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000ec0)=0x1, 0x4) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000f00)=0x8000) sendmsg$NL80211_CMD_DEL_PMK(r5, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x44, r8, 0x212, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8e0000, 0x32}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000011c0)={'syztnl2\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x3, 0x0, 0xa, @private1, @private1, 0x10, 0x700, 0x7, 0x70b}}) 2m37.723803027s ago: executing program 1 (id=2643): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000340)="8ecd25f2", 0x4}], 0x1}, 0x0) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002) r6 = socket$netlink(0x10, 0x3, 0x5) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000040)={r6}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000006400000000000000000085000000c500000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m37.535303445s ago: executing program 1 (id=2645): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003f000500010000000000000001010000000000000f0001006f76732d73060000006d0000080002"], 0x30}}, 0x4000) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000a00000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000270001031dbd5002fadbdf2501"], 0x14}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r3}, 0x8) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000400)={r2}, 0x8) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r8, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r6], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r8, @fallback=0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000f00)={{r2}, &(0x7f0000000e80), &(0x7f0000000ec0)='%ps \x00'}, 0x20) ioctl$sock_SIOCGSKNS(r11, 0x894c, &(0x7f0000000200)=0xffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r12}, &(0x7f0000000280), &(0x7f0000000240)=r9}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000000c0)=r13, 0x4) sendmsg$inet(r11, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2m34.242368546s ago: executing program 32 (id=2593): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x4200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280200001900010028bd7000fbdbdf251d01090050001280adfdd58033ac20d9db2597515873def3351bf11d66e8632c47544ac4a8a74aec90d7faba3dc1cdbd588d2dccd5f20dc35eb9a20452580c01ca5021c7bf57b3cb27d51cf9e00e6c4264000000c4010680c0"], 0x228}, 0x1, 0x0, 0x0, 0x5}, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x4c, r6, 0x917, 0x0, 0x3, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x25}}]}, 0x4c}}, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000002280)={'ip6erspan0\x00', @random}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r8}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={&(0x7f0000000040)="852dba2640bd4c597c9f57a3e5964bf18dc504fb50975efc407e65544d3109bafc4e987734884b5352642379d77e644130f94fc9b684fe05eaa761637fc49e665eafd6ac3bae81a8a82139f48204fb97b9bbf5c75a5e771190127d6e4d8ee2bf54212a4900d507", &(0x7f0000000140)=""/91, &(0x7f0000000240)="b656f5554ad99a89b8b6cc0e9ea7d3d963a17a7710dd256ab1d7dfade73a0ea92f5723e68405bc8936a4409af9dcac34ddbcc682efe5a86c4bf8e1f85edb3e9cbe3d0953760417554cd74bdc787a01abe042fe4076970ac5056dab7ba4035546834bdfcd21892cdcbd1cb5439890e515828d98d1c8bb137859616d9a37903c38075995f88c32cc92084abc08eebd5bba1865bb0d3811849e", &(0x7f0000000300)="66c6a8be45ef34dfb88f2dd77a92506d1af5b7fdca", 0x1, r9}, 0x38) 2m22.333632448s ago: executing program 33 (id=2645): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003f000500010000000000000001010000000000000f0001006f76732d73060000006d0000080002"], 0x30}}, 0x4000) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000a00000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000270001031dbd5002fadbdf2501"], 0x14}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r3}, 0x8) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000400)={r2}, 0x8) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r8, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r6], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r8, @fallback=0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000f00)={{r2}, &(0x7f0000000e80), &(0x7f0000000ec0)='%ps \x00'}, 0x20) ioctl$sock_SIOCGSKNS(r11, 0x894c, &(0x7f0000000200)=0xffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r12}, &(0x7f0000000280), &(0x7f0000000240)=r9}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000000c0)=r13, 0x4) sendmsg$inet(r11, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 34.389971174s ago: executing program 0 (id=3293): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000040)=0xfffffffe, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)={0x50, 0x12, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x1, {}, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}}, 0x0) (async) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)={0x50, 0x12, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x1, {}, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}}, 0x0) 34.1456283s ago: executing program 0 (id=3296): r0 = socket(0x1e, 0x1, 0x3) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x700, 0x4, 0x1, 0x6, {{0x3b, 0x4, 0x3, 0x39, 0xec, 0x64, 0x0, 0x4, 0x4, 0x0, @private=0xa010102, @private=0xa010101, {[@lsrr={0x83, 0x23, 0xd3, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @private=0xa010101, @broadcast, @broadcast, @remote, @multicast1, @local]}, @cipso={0x86, 0x16, 0x2, [{0x1, 0x10, "4afed250bc93b0382dd7d43e1253"}]}, @timestamp_addr={0x44, 0x24, 0x3d, 0x1, 0x0, [{@rand_addr=0x64010102, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@broadcast, 0x1}, {@multicast1, 0x5}]}, @noop, @timestamp={0x44, 0x18, 0xeb, 0x0, 0xb, [0x3, 0x7, 0x6, 0xfffffffa, 0x5]}, @cipso={0x86, 0x3c, 0x0, [{0x0, 0x9, "874a9145042306"}, {0x6, 0x11, "72173072e9625e70a2a2faff7ef6d7"}, {0x6, 0x3, 'f'}, {0x0, 0x2}, {0x2, 0xb, "a5d28cfc0cd0ba24c3"}, {0x6, 0xc, "32d1f5ffec8c3ffbb3c3"}]}, @timestamp_prespec={0x44, 0xc, 0x20, 0x3, 0x7, [{@multicast1, 0xe5}]}, @lsrr={0x83, 0x17, 0xe4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @loopback, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xb}]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x0, 0x7, 0x0, 0x0, 0x15, @dev={0xfe, 0x80, '\x00', 0x24}, @mcast2, 0x40, 0x8000, 0x812, 0x4}}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000001740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001700)={&(0x7f0000000300)={0x13f8, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x2}, @ETHTOOL_A_EEE_MODES_OURS={0x1358, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xf4, 0x5, "c49a8244b5a28f4921c6ef48fa21ae671371b6ebef94840d336f46ccac80b4a3f7d20112021c16b2f1489fbd9bf682c56c79b35e735cef7d6c9b9fc48c5d856b5fbc4067a062555a1edbdcb3db0a1010213cbbde5775d5ef9b0aa9b7593681eed78d2bbfca0d0ad7bc8a3042ac75bafdc9668498bb9e7414ddbf66d81357b6c56ffa3b23814166204eaae590af158394a9416d8fc218a05ecf91c7c8057564b9136b157bc563295c8eba06011a6bc94855e235727b340f4abb1fb44cde23802c660f75c12bd43311449f6f3ff6841740d4fccba4037897df2b7caf09efc5619311e8aa079080bf58ec5ad2d6175ec007"}, @ETHTOOL_A_BITSET_BITS={0x160, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '()*)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '}-\x98\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '$:[/[{%:)[:.[\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '\'K~%}}%\x12^%.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '}&\')\'&[\x12-..+>\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '(.!/\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ',{$:-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x95}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, ',#$/%}^-\\,{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, ']}*.-),$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '&#\xe0/:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '/\xd1*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2c}, @ETHTOOL_A_BITSET_MASK={0xd4, 0x5, "b6759310604440d778be5939ece2a3aa7f709f0e88f8b777c0ecb235b3dba6bdfdf43cfa10e5a688698b2b6f28ffbd2a6ed6f2f853917f256e8e39bb23691f1fb9a01965577ffda4a49624c09f351637b7ae3fe55dc2bdbeb2034a33c3439448952b34668ed3eb4924c6c53d68e3f75e8ac1551468b7a5c10f544e106091a854abe9f5988f0032a4c82f8527055bb0b035fb1bd967f75cc10f6dd916b87cd7bc2fe416f1475b15752c46621bca895a995bb19906cb49fcea405dfba509c25c5e0a480cc9ce31bdf3b6c8e0428abcae4f"}]}, @ETHTOOL_A_EEE_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x13f8}}, 0x4040014) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000001780)) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, r5, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x14, 0x7, '/usr/sbin/cupsd\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:system_map_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001980), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x2c, r7, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44010}, 0x20000000) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000001b80)={r6, &(0x7f0000001a80)='\\\\\x00', 0x0, &(0x7f0000001ac0)={@align=0x9, {0x6, 0x8001, 0x4, 0x7}}, 0x5, &(0x7f0000001b00), &(0x7f0000001b40)=0x5}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002c80)={r8, 0x20, &(0x7f0000002c40)={&(0x7f0000001bc0)=""/100, 0x64, 0x0, &(0x7f0000001c40)=""/4096, 0x1000}}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r9, &(0x7f0000002e40)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x881011}, 0xc, &(0x7f0000002e00)={&(0x7f0000002d00)={0xd4, 0x3, 0x1, 0x301, 0x0, 0x0, {0x5}, [@CTA_LABELS={0x24, 0x16, 0x1, 0x0, [0x6, 0x5, 0x0, 0xbd, 0x5, 0xfffffffa, 0x81, 0x2251]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6c}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4a}]}, @CTA_FILTER={0x3c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x11}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd12}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x406}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1000}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x400}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xc40}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x100}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4d}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000080}, 0xc800) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000002e80)=@buf) getsockopt$IP_VS_SO_GET_VERSION(r9, 0x0, 0x480, &(0x7f0000002ec0), &(0x7f0000002f00)=0x40) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000002f80), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(r10, &(0x7f0000003040)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003000)={&(0x7f0000002fc0)={0x14, r11, 0x400, 0x70bd28, 0x25dfdbff, {}, ["", ""]}, 0x14}}, 0xa0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000003080)={'HL\x00'}, &(0x7f00000030c0)=0x1e) r12 = socket$inet_smc(0x2b, 0x1, 0x0) close(r12) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r6, 0xc0096616, &(0x7f0000003100)) bind$l2tp(r8, &(0x7f0000003140)={0x2, 0x0, @multicast1}, 0x10) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000032c0)={&(0x7f0000003180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4b, 0x4b, 0xa, [@datasec={0x8, 0x5, 0x0, 0xf, 0x3, [{0x3, 0x9, 0x8}, {0x2, 0x975f, 0x3}, {0x5, 0xc0c, 0x3}, {0x1, 0x4, 0x2}, {0x2, 0x7ff, 0x5438}], "54d986"}]}, {0x0, [0x5f, 0x61, 0x30, 0x5f, 0x0, 0x30, 0x0, 0x2e]}}, &(0x7f0000003200)=""/162, 0x6e, 0xa2, 0x0, 0x6, 0x10000, @value=r8}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000003300)=@bloom_filter={0x1e, 0x9, 0x6a6, 0xfffffff1, 0xab848608192b6681, 0x1, 0x7, '\x00', r3, r13, 0x0, 0x2, 0x1, 0xa, @void, @value, @value=r8}, 0x50) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000003480)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003440)={&(0x7f0000003400)={0x20, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x60}}}}}, 0x20}}, 0x4) 33.955027288s ago: executing program 0 (id=3297): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x4000080) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x4, 0xe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000100000085000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r10, 0x0, 0xfffffffffffffffc}, 0x10) sendmsg$unix(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r11 = socket$pppl2tp(0x18, 0x1, 0x1) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000080)=[{0x25, 0x1, 0x2, 0x10001}, {0x7, 0xd9, 0x9, 0xfffffff7}, {0x84, 0x9, 0xff, 0x3}, {0x6, 0x2, 0x4, 0x4}]}, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r3) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000400)={&(0x7f0000000140), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r13, 0x0, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44) connect$pppl2tp(r11, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x830}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @multicast2}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000000c0)) 33.322472592s ago: executing program 0 (id=3304): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000fefffffffffffd8000000000000000000000000000bbac1414bb000000000000000000000000ffffff2b6b57a470b83fce00000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c"], 0x1ac}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0700000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000097264f1a47734b68000000000000000000000000000000000000f552734104b9c5ede431060fcb2360e16ceda07fb8c874cbc0d69a78fceb44a6672ea483f1ddc772d3d09dcf361f6b5bd80d8c9ae7bd06a2c5e40832c8253fbb992121ea169a9923e8d8618d48204aae6acf6c24ca968ade4dbca5f39e9c01db553f00e4e93b6333165c26fb58fce4eefae7faac3027d23265fb2af9c42083c4c708644c5a6b15a46708554204d7556c05831b87142f22a93eea663c915e43e86b4e21bba37c6c33cfad0beafcbefadc07e5d8742d38f69f2d"], 0x50) poll(&(0x7f00000007c0)=[{r7, 0x2008}, {0xffffffffffffffff, 0x100}, {r6}, {r0, 0xb300}, {r7, 0x11}, {0xffffffffffffffff, 0x2204}, {r0, 0x100}, {0xffffffffffffffff, 0x7010}], 0x8, 0x400) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r7, 0xffffffffffffffff, 0x7}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r6, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x7c, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xf, 0x12, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@alu={0x4, 0x1, 0x8, 0xa, 0x7, 0x6, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x1, 0xc0, &(0x7f00000001c0)=""/192, 0x41000, 0x40, '\x00', 0x0, @fallback=0x1f, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1, 0x5, 0x5, 0x2}, 0x10, r8, 0xffffffffffffffff, 0x3, &(0x7f0000000640)=[r6, r1], &(0x7f00000006c0)=[{0x0, 0x3, 0xf, 0x7}, {0x2, 0x5, 0xa, 0x4}, {0x5, 0x5, 0xd0, 0xb}], 0x10, 0xe496}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) ioctl$TUNSETNOCSUM(r6, 0xc040ff0b, 0x200000000013) 33.025790665s ago: executing program 0 (id=3310): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = accept$inet(r0, 0x0, &(0x7f0000000200)) sendmmsg(r2, &(0x7f0000000480), 0x0, 0x24010083) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r4, &(0x7f0000002340)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x6, @mcast1, 0xf9af}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="140000000000000029"], 0x30}}], 0x1, 0x20000000) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000010400000083000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980), 0x0, 0x20008000) shutdown(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', r3, 0x2b, 0x7, 0x7, 0x5, 0x3c, @empty, @loopback, 0x80, 0x80, 0x8, 0x136}}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000800) r7 = socket(0x10, 0x803, 0x0) recvmmsg(r7, 0x0, 0x0, 0x2040000, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r8, &(0x7f0000000140)={&(0x7f00000002c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000340)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000240)={0x0, 0xb, 0x1, [0x2]}, 0xa) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="480000001000ffff29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="172000002120000008000500", @ANYRES32=r3, @ANYBLOB="140012800c0001006d6163766c616e00040002800a000100aaaeaaaaaabb0000"], 0x48}}, 0x8004042) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000080)={@private=0xa010102, @remote, @broadcast}, 0xc) 29.388885573s ago: executing program 0 (id=3319): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000680000006800000002000000000000000000000d0a000000000000000700000604"], &(0x7f0000000f40)=""/4089, 0x82, 0xff9, 0x1}, 0x28) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x4008001}, 0x4008090) 23.854666381s ago: executing program 2 (id=3350): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000dd6c3a9e3f159701682b63c9046dfc2679745a7e0beb72387eaeabf665f2caacd4175704af995244c61af164bba1125c4d2137947a87cdf1717a589885d06e1a4be776e3572fab0c37e596", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x3, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000101000000000000030000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa900000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000680)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0xa}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000002500)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0xa, 0xe81, 0x3, @empty, @local, 0x7800, 0x7800, 0xfffff965, 0x79}}) socket(0x9, 0x80000, 0x4) sendmmsg$inet(r2, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000001140)="b9628be4f1ca885dbe865ee9b93fb44d8ba5465043a9aa96796ac3364ae68c498f4335b16d47212c9bd3e67868f33ac1d724176fceeef154f60e293b76c1428918eeb0585bc07e3204b849a44498e687e6b68fb5be14f021530b7bab104be86bfb6b7c02fdad3b06fc7be50d612bf5d39586e6c4c6b7d672e3af06934dcc2e140a76a6c28b924215f9614b811a3d9a65f7d602821633700605a08c68d0b56cc56559ee3fc32b4d6d324b11b09b7594fcca6cb50f0a67b4854c85eb7ce749c014302e651990fcd69f9690801c5a1d153bc725c28361c79dd493711190b9633a6857b99f092d2753eef80923760335fee0a8ff35ceef48f6846532db582f4f5701c78209728e91e206e69265e2ebcbb6f6c8355085826ed62bda968c17538889a7b0ead43b487595eb9821e7051700f0d5053611854308acd8f4e9ed78bf0e1ec25268d2c89d1367bdaf3432a2a189ef8b7e705ee12cb934ba4e38e42a4e2ff1917265759b1c5ee30d96fbf7b8abbc333a41dc1c207c03ff035aedfc35ad836d7dc93f60533dadaa78602bdcf6564341eeda47b1536a6c7754f5c0b72b740b6b0f78348cb8da16622dbe46a274c34b7e6a75cf4f41a690f26792c5bf4e8c1ab6ec95f6e94585cccf90f177dd2d3dec48ab4c1eb4b3b1b92f67a9b8c3439260aca5db738c50a40dc06769a2476e2dd0eb770201b4d20b02ae091470ebda872dbf03105b0028c7799324479433f5ab18a17623ffd9c4108b85635101d62a25bc994f3f4942a9d17a5c6be353b5ddceaa2ee57f2c4ad33a7dbe86edd1ec3eec461e84e74f5b40de0b347ceca8e2b9d3744a6be4b5695ad86e990a6d0de047acb440a8ee09554fabb417f340ad229e69027c7d36b9b6b944c6f45c775a32419e3805c27d768e89679e309bd740666529e74545a1e0af2f422f01a087896652b798cc5adc8b9f0c14e89f7b0c3e65fbc45a9251c507ea4bcccb37b63939f1b2c0abb77ad6f1d14cefe196efe378d2217982ed4b737bbbb0fc5b3fb23ff80a2bf96c005221f3e13f46f4cf28c8f539dd802dc5a47cddf6a3841413c507f50a18249a9651d0f04077fe596fe1552520864f1b2a8970c66a0b8f7bfedfaa33111a3e6c2dd1a4891969c0e72a1bf3d21d31483bf8607502cda3706e4ff0dcf5e36f400813859e1e3677fb8d6bb68f1147f074eb27c7841c1d4a88d59099afc80011092b7612eeed28f7ecbb75809cd2efcb1363aa08de3f8fd7be81dff189ccc57527f3aa2d670bf4ff2ed9b28d7e5f6049428e0e0af98ffbd29214762584c4b9257347a997ae73a84c42a9ecb1d5ba2b08dba7244aca3b6cccc549a2eeb3f169b32ab5ec05b73ba206aaafd8ceb230f29d6ef3e6f856f2124e50efe4f0dce0ae80a5e7ffb68bd3cff95ea7d3a0dd1bee616e3b5adb9ad3474bacbd49c5e97f20ade8ec3c3dd80896d1b9e642d20ca96acd63a3050b202032e608f1c102a61473aca00607bf805a0bf0d85e0cf05688604f0787177af0593dcb23ef4ed4d4b715b091f4e0d4d4015371b130d5b892246411402c80158653f1417aaa9780277becce1d34ee38228444e5c41cfad72ee2beac2aaaa19912c7b23983721fc78273fd1488acb3ea5221e860521aedc3443faa932055d82959b1df2f7ced60a05e6a9e4c906012f55a54cfdadec69062ce677e8c99bdb38e4d17ce81badcb459beb501d8bc1c501354208a1780dc3ce39bd590d2b5a73222be6df5e6cd9e0c5028e47291d674b6646fe47b7aec818abb314345d767eb2da0963a0211285f485b29446ea5fa3a9536663adf5b344c3955044e7be4087b3e0245c254629df09d7b0cfe5b2a791a1ddbfdf26c21c79fe0a57b7936ed2e8d517a3b3b0b084b18114ce861b35abb07da396dd29983bff21817c90e9596dd56995cb2cba4d786c5f6ddae9c3c88acd67d5106c6caf09bea8beca547013bea48bd5ffe8d90d360c2fba40a3ffdfc18587c46222b317221ae8d1299a0a44550800d28ed20c558cfa10bcab928aeea9b33da77488f29dabde7a4f0b1a55a1237b7289611789e58af6e60402bcf7987b70fcfa17c760fbb3d2f5c502cad80143c67252e52e4f7499960cec6b0604bb7c65fd4992eb36c23c07f2c8aaf892db41fe47faff36ab70e8e63a60f80ea68b91f1182db143f8645ba15101d15554c4a4d1f856071d206a5a4d63bec476d01a69af480f53ee8c9fe1175bf4facfe9bca1e5f1374cd1041bc11ac90bd8529f9dcd52d44dd4e0a3569af1fb8ee67d7c3229515e3740cb41d464009b70297eabc7d821a937265489d5dbec8970287186aa02cb1e29e7138acd3e15ced320119f4a241f1073dba097d68326cb3522c6b8e048430d26c9f5ff65562708362c9ae50353a3055e12a40917688a55a9dee1d3aee171b4860ca39d1a3845467cb6b9d74784626ef4a1b565d6274aa468f22e97ba33259a9e2692eb0932d5cf6dec429c208c0ef5277503b444a64872412055af46b0c9e892e4a0de2e811211f8af54dd5be1532d9da04c24595d41fc67476ff770277d29fd0f3e3c041216f6eced2172e09669d32da80fcea8782e1bad6c2d740b74dcc173f6233cf969d1dc5e7331e8f723ed4c38259498a2e3d9b68c100ca0161c702ceda17501b5dc8f77be233d67dbd5c2b4c49aeec105192795fbb5012cec4f9c01dd934baaa3a4e5b43a400e243e3bb498ce091dd5a7472c20268ac38072330936c4279c512c98143b89cb4e0c54a0c5e69403e39e2b6477a874c705e442e8bd48d07adce18173c7e83083a2ba5e6c5956c4e27942a6d8e10410d136cd95ec00486edd8ac2abd25704e50ce1fe694fbae9fcb0d9ba0d141bb6e907f686f1289ce174097159314eb6f51dd3bb3458f9ee716d2be74e79fd0b511d13050600d753dc9eb52a21af503355ff143ef862e1146741b46039efd717ec09b7c522b6a718bcc85be784584e850a76a370e8e0617226645f3cf579015c9a8757061d2af56be84b6ed10571991e4aae9ac688320734adde3199e96d672d91490377f21cadce28bbd1cb591b428cd66a62952b968b97ab65bc1feb8bcb00daaefa29cad6242cebd5af0d29a6b21027f8792a614dc507470ba4cae2ec1e83932207377025b5fefd276f55c7f23bfff7c1f372cdcc7491f46f34f4a2cd6dfd4810a21a4cbd297a734dd87d4670bca7b434227070f1b50c74140f755145c2ad9c27bbb5d246ac4ce1b3f2b04f00241c51d383ed09eaa43deaf4181298c1cb9450d3ffa75a25dabe747e00b90176cf338807c6fa5c8a7346488e542af058e9f49c482dabf93b988ba29dd49f696cc59675d84c43e5aec59c4031cc003c2a90b0d63adc52b799ba5a050b153d5b868b135549dc2461fe8e23098887832a52c38575821e8236bfaf3121ad0c6dae0b745e1a8e6a7668987670fbd0bba063c1396e3a4297d69090635d0ba198e909455da76f5de0d320eeb36065117a37a01d80789c37f529408dbde1f4f880b680cf7b8631b65f7f0355f86ab39806205ae129d1fbbcd3205f0d58866f87aadfa847b32237881ec6587871b2487c5bbe248dacdcce4f07a2f2a3fafbc0abb060a1e96a0e275775b81a830c82e0e5a780ebb387dc9128d9783fe2a7ed1e55c109941c89b3c4e476ba05c67f218366f7536fda67d344693e9480389abba5260916c6d2bfeee9a93a2c1538f6827863679eac8d887c8f7dced3451e3ba71049b315417ae195cea9e610bbb1882bb720f253b75881dc20684ed22549525ab1cea2b9327a96298499c116f527d41672e61d365d75136057c2439d3d0fb1333947b84ff8a25643e4edc380c6f20289c16ade8e520aa1e82eb6640e0e265aabbbc3e27fb9392bdb2726fe8d6b57b26bc026827a13e7fd0cdf453e518ba124211695536f4bad7e004c5e41feb6eaa503ec1b97866b63489dd121b1e99c7ca55d97e7798564e69dc4d5377968e0b7bb42077566935cb07cfd203e9ef5edc071f9aa403b7f8317b38f9e849b9734b4749c4c434a63d70209c1c476fec3772f30f26f6be43dd41c721c1776d9bf8645451edfb4ab5a6c89704c16956f1c62b175d8467b13b6aec0a9da40036ac8bde94c26ab286c5bd71d1f3269ce51403686600ca9b7e9f3da769c19e3f752ab6c988faad915e9a3121c7f2271a245ba528da376a4578586a3130b9938a416394c02abf1650557f46a99532c7eb1308b1a815c1794d6983a14dd1df7320adad60c8c49643443571cc28ccea15d35b9354d0a88d408cc9430759846178b39cba6f9f2221ff1d235c720850ba852e434d29f2a47a0a574f4a0dbb90aa7fbb204e2c85fed0a6f022f2992f55f39fcda50b9f6aea9a03a882bf762c846beb38fada25bd62b2591b0708660acf9af4c61a4faa49d3ad423f722f2bb9a244159e33d473be8e1796ecb1a08bb70f9306b1f29cc53813115ba80154d43c697a7a39c5d799f6f3456bdedfbff6a36ad3af3197baabb65c65a7c7c31f06860c0e426e0785706b5a7e363911b49ce3259e073128be2e3f75434d0d22ca075c1fb58dbbbce5ae349102bea1bf622042b8f8b0707775b4787b9bc4b281aa96f4c2f21d654c1fc3ca2bd0348872a4f82a6b94e6f80ed001f5ed70b22d6fc899768a6533b2e5cae5d11210bca1602e1a588f89de9ded6f8a6ab256b67ba123e7986c8f09616650bd4a1a4091b740356ab7da1395e5fc00309230b98de5171d862cec07660fb67bc01a90a69d6cd023fdf5fd515f3e1e129537ff741cae52fcc33debd45fd8e606be549a116ffcb8d8e55f427f5630bccd9b3e1467960e8508eef5935ce77d4881a841ec3388b2123620dc0c3b7d642823b4a1168eea6f96d8f171dc63bcf8eb0b05f200202adc6e019027232955b15a3ef8647a8174f47ceef66304e61575cd20238290623e98c3c9939e61e11ee3ac8310c69115696fdc294f2ae05cf9e71d0353493ae54e4a773f1b68e8e98e027a508729caf56cb227b04c61eb09d35c22c49a89f09b0111c8a0ea6069b180570d8af3bf087d5534faca5f4b1123141f008130b529c9a60cfae8cc7dca337a1c6918f8d30b948efa3ae1833c974d3443935cc9f52873fdc356e445531602dbc1a20a4c69a8d13366afd77c81567605fbf88db2b858fe913f0bc50413f87002a32610f863cfa468bf46c594760ac23b777ee9539a0fba58b8011f3744e933298c88e7eb92dcf0dc0a718863a447f774783e4de117546faaf277fce3c10cd02ad7489655d8a0425f9d0b99ba336b38c78986cefd877c106d269508a505f70a97071293593693ec0a40ed9805fc19dc1ae4bb4679040cfdf4492fd3ccb9fe8f8e91a1c8b9b0afe1ad126a7dc627762a579688eabbe2a8012f7d67c49371fff33bfb1a50040fcc3da924dccffc0a15f66c3c3cbcbe84c1c71f14961a0d1844c2938b95b5f9ab51ed7b28b690dc8f6fe799c73c2de223a3401d019e330beed07d4642149452b765dba16d8cef5bd0b849b4c08c87db5f7964739495ca300b0b3413f26b83f7650e0f793362f25d71a301d269f3e45a13a4605ca9f5b07d6f8aa0a83878af7b83539c9f70d6874b244b4f42df0849017c39795cac2d6f7d60f5a736928bd485e08b701efcee3b3ace956ca811dd06ebefea103e1776f1f9fdb2c2698456220c11ee121ff22f83fe3861de88df88bad4456a1b9e1c760d7511389740430870e79093f76c8a212045a81cba887a9ca6bbb9d1dabe1b13faa4e951ccdcb2d5814f36631df5ac6b5d2898571468081c3dd395710bd56ded", 0x1000}, {&(0x7f0000002140)="eb34da19bf4d834f9a2a37fc3ee545ed753daab08ee9ff34919f37f367d1f9c479feea1418c457ad1910f344b1eb94f6f7a4d96807ae1e425267ec690d764fc48238a1c24a8047e4ddcf986d5ff515422f1f5414749b39202fb51b741b2f", 0x5e}, {&(0x7f00000021c0)="1d1e3b81ecb766a7325b978a78ed14bdbee33b9441a4a4f65160f6551bda62262611e5e955b3a94e6de00c84aaf0d4d6fba22f1f3e8cdddf1db029c2f34e333e980fcf21d569ba9452cf84dd0a6803bfee39e76ea9bc1bcc47ca201166c8e76c8b6b10c6744db036472610a4dab2bc09ad0f7f90e9873cff3ee9e48604e251794791d010f27e5cfb3077c9b4cd2d102119556380d208cb47d1448bb511631fa3ef1c7a9b75", 0xa5}, {&(0x7f0000002280)="7c4bc306f36c863a0519966039518f4c8e7366cf0b9e437c03ce4b784899ae153eb2a1702df970efd19472ffd4a6ffae488d5a08445c93e933a0f4b90bbeeb80fc8bc9380a8065baef75dd7e080509abfce32f886c0d5905c2abeaca6e468a0eabddd104f8bfde0f3fe55b6964105ba6c433faca9567be920300f8d0e7f8097f97be", 0x82}, {&(0x7f0000002340)="ec93acdae79d6dc5b42c0ec10275d6b5b6fc09eaee0eb216a39aed5951131b1f65f135100103b37be80d1bf0fcc4355a7af3a36726b196ea2d10b86bb7a0a85d8a1437ae6b745ac8f0872993f3547f223aa8643f3f9b5315ca13ac1e3bd81fc1d277bd21596fd7fbe1686c3a48eebbadcae0d28a9dac858de4f7dd66c4730eb349c5fe2bcfa43570bbde822098c2d07b05a51d7b48210648c9e586b918958714b4bbfd057e6bf234016b88d459c59c15", 0xb0}, {&(0x7f0000002400)="cc8369f44e0a0a1da4f5f9b830ddb4a8523bbc328ca130f656697939a6686c9a9508352a01589f34e2f82115cd598297af723ad4c9a2d72a459e45a3", 0x3c}, {&(0x7f0000002440)="dcfa53fe1fc012296b9909e5e55e8c5e626c6b08a6ee2a4b706c01cb6335746ecc4d9c311db5a992fca62f616aecf7e51c5eff62a9ec37d24f", 0x39}], 0x7, &(0x7f00000025c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_retopts={{0xdc, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xec, 0x3, 0x3, [{@private=0x6, 0x3}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x8}]}, @ssrr={0x89, 0x7, 0x1a, [@multicast2]}, @rr={0x7, 0x13, 0x8, [@multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x40}, @multicast2]}, @ssrr={0x89, 0x23, 0xb9, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast2, @remote, @multicast1, @private=0xa010101, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0xa3, 0x1, 0xc, [{@local, 0x8}, {@remote, 0x7}]}, @timestamp={0x44, 0x24, 0xaa, 0x0, 0xf, [0x2, 0xa88, 0x4, 0x6, 0x9, 0x8, 0x509, 0x1]}, @ssrr={0x89, 0x13, 0xf8, [@empty, @empty, @local, @dev={0xac, 0x14, 0x14, 0xf}]}, @timestamp_addr={0x44, 0x24, 0x94, 0x1, 0x6, [{@broadcast, 0x498c}, {@empty, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x6}, {@empty, 0x1}]}, @timestamp={0x44, 0x8, 0xf4, 0x0, 0x4, [0xe311]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @broadcast, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8d39}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x160}}, {{&(0x7f0000002740)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f00000029c0)=[{&(0x7f0000002780)="fead8a3fd9fc38e4ee59bb5daaf7c3013fb59120f3f6b7a0d43e5e54e14eac73690347ee8575444504eaeb724b4b1ebbd432b13861175e463dd0dde1700ddc05d1ed1f83d8008c6fa183248ae8aa788dda61a0dcd0dd6567f3ac4307", 0x5c}, {&(0x7f0000002800)="cdbf92b1b595d101b1756fe03e5035c56676561d92c2f2378701eb8427faddac1b021c9372c8a18b1c727dd0223c46519df3ce76f92932215f5956b0a703436ea6ba2661ce37b57bbceb687d3217e2b9285304b7c31036272f58e962259b895ffbf3be0dad50cae9d1eeb2ee643b707d6f94c00fd8be8e49ee3e3e18f0aac8db93b1b04484a7b47b7e0306b2f215261bf911a7a5d04800542491fc2157e9cea2bbf1a22ee37fd18d2f5c132b557ef1f23fd743ee41b59539f70be77c6ce77903360d95f73bd0319f", 0xc8}, {&(0x7f0000002900)="16f90a32b8e809828668e0ab1f7582a16c22809d791994dfc036028587fbe5d739430e739cb2932f5eb08174012a7d344d49c34c3da891175db92dac3e9512fdc893889a5e95a4f239a4d842131b21e2150de1c2e8f0cfe5d2ae37ef9a804f2e9f94fe8143a706848a0b2add7e732be51b3ecf46b7bfefc69436ba9b2b15718398a21d9546cecbce8b3b797fb2b1f6c14c18617524e4448d2775189e16fde62661a8224351a8c5c3af84f3cef8c3", 0xae}], 0x3, &(0x7f0000002a00)}}, {{0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f0000002a40)="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", 0x1000}, {&(0x7f0000003a40)="367244c3e623514613305ab9bc4f785816e62f9374206b61ce1cd1318396531aea12b01d270e649739c92e7672cdb4fb35753b3d115a23576c", 0x39}], 0x2, &(0x7f0000003ac0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x30}}, {{0x0, 0x0, &(0x7f0000003ec0)=[{&(0x7f0000003b00)="3306d4e581d6735d8e9bd1f12b6c239ed8f66a1062f419bffbf41fb8c8a6a395358fa42fea04cf94baa517e007c10d55cc4b847e54664466007e5f00aa4c701a2bc67b742ccdbbc39e078c32561f4a4346b616b22d1878547e1113b3ca00fbf1456bb99616f1b4dd2ea81539a6150308cc34f195551feb6d965657cd527a55b8a77e47868ce4e17d23d88db34e1c1c5430ad5e8a376754f9f668e98c2385f2848debd75189d1b7df6d6291ea506b81ba0573c983d848e5d6fffd9df39e2bb84133616796a924a6822d486442a1708db347f301a9dbeb7c", 0xd7}, {&(0x7f0000003c00)="6b549299e1df7315c95ef39a142cad207ba4426398757ba7599176e4145227f4317ba61ae2c4ae783a14d0980a2ac4bdd5747e30fedfa24069bc725d7b2650d2e4bf7fb9b0d106304c3194db3df0ac7710e062a770f94b433c53babc3b91d8f6a5028ff21fff321ab1602ce851a676716ccc6b9b23", 0x75}, {&(0x7f0000003c80)="84786abf9ba6e703756016476af5e3096dc45b8758a7d5fce8ee13b8da78ce3049235a34611033b13cb36d00e7f48ccf1be09bf4fc2f1f7c3073553cabc14306abadac546fce9ae51f7eb95a5b8ac90b9a99806d5d8011fad830604614c14e987ce958324997c0de22e31fb0ddb475195ed8d301ad4060924c74cf243fcbfdd2bfbbf6daa6b78cc8e36ca6152f6f7f7e82d190554ac60720792df1dddf82e34a6430cd9df8183d905d01a336405e54c0e73af8a438059cf8a9e03fc5fb6d32abb27187155cf04d1604e8a4d8eabb2f1b9880a3", 0xd3}, {&(0x7f0000003d80)="46bb33b2dc51eb33675a4a364344f865fe100f49a9911de3c6003e72c9f5fa4decfb4e12f6d14985be227b9e0a5ad5fb1c68ed09a05f725697acb8064ede1c2942b9f4a0cd3ae542ec4d19cfb87446539cf4b4b094b64d0f077360342829c91bb64b9244757a55b340114e7046df5afdae7f7cdbc0c556d787bf7ad77a68170ed52617769d049da140e0bec7b2f8c1dc9225aea2305c375a2c072e92da0d107740d617c9f923b8aae966afb3f7be6e4496b7609fee24dde74a44584b9fd758c990197b3289c36a601ddd08b939e44e412ef0ad9cb2e3616d6ebb9cee02857c667bce7aad6d24f046d11d44bf83de7a", 0xef}, {&(0x7f0000003e80)="ec470bf7072ece9a425b952d978938b258a659328c31ae31c5746b20bfa965b210c64bbd305e4831b83dd15771a6857ab451ac4106998a1f91", 0x39}], 0x5}}], 0x4, 0x4000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000217b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e02742e86c0d85ff9782764532db", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$rxrpc(0x21, 0x2, 0x2) 23.522194257s ago: executing program 2 (id=3355): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000011c0), r0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f00000014c0)=""/4075, 0xfeb}, {&(0x7f00000000c0)=""/4092, 0xffc}, {&(0x7f00000010c0)=""/242, 0xf2}], 0x3, 0x5, 0x45) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r1], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async, rerun: 64) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001440)=@o_path={&(0x7f0000001400)='./file0\x00', 0x0, 0x10, r0}, 0x18) (async, rerun: 64) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002700)={0x2, 0x0}, 0x8) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000002840)={r1, &(0x7f0000002740)='^\x00', 0x2000, &(0x7f0000002780)={@align=0x7, {0x800, 0x6, 0x9, 0xb18b}}, 0xe141, &(0x7f00000027c0), &(0x7f0000002800)=0x10000}) bpf$PROG_LOAD(0x5, &(0x7f0000002880)={0x1a, 0xd, &(0x7f0000002940)=ANY=[@ANYBLOB="18000000a29804000000000000008500000007", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a40000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) (async) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x78, r7, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc75}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x34000441}, 0x4) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0x42, 0x4, 0x2e8, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x3e020000, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x122}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@ip={@rand_addr=0x64010101, @empty, 0xffffffff, 0xffffffff, 'batadv_slave_1\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x4, 0x2, 0x47}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r9) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000001340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001380)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000025c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002bbd7000fedbdf251200000028000180140002007465616d5f736c6176655f30000000000800030002000000080101006af8d4d7d49b53c30241495c56aa73a1e89d0f258dd4cfd38eee8dbe34e86c478319855e21ad45c5d2b7cd5bd3010a4c2d6c93cedb3b19ba968687f4ef99f17583e8ac2545874e52478f3e988687cf140b8f1933830413b303d3a9e5c074ec5222a187eda116f1effe23103b9d8a19af1cc136f279b431e01615a69f5bfcf0df3d66655352ba222bc9859f0812890f3513af9d073587ba565af730ed87cd83257eff0af18399cdaf5ae5c2ffa2afbc05f33e9103eac0caa55cdfb3f280c9e7", @ANYRES32=r11, @ANYBLOB="0800060001040000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x44) (async, rerun: 64) recvmsg$unix(r8, &(0x7f0000000700)={&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000001480)=[{&(0x7f0000000440)=""/171, 0xab}, {&(0x7f0000000000)=""/64, 0x40}, {&(0x7f00000024c0)=""/236, 0xec}], 0x3, &(0x7f0000000680)}, 0x8000) (rerun: 64) 23.06441969s ago: executing program 5 (id=3357): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000faffffff2e0000000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x24040) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000003f0007012bbd700000000000037c"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) sendto$inet(r0, &(0x7f0000000040)="2467e99c1ebb650e724747af0626f3a299ff72933b16723c0aeab5cb6ca7dd557b", 0x21, 0x884, &(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000c400000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) 23.01547941s ago: executing program 2 (id=3358): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xfffffffe}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x2c}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x14, &(0x7f0000000380)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@tail_call], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000450001000200080004000000030000000400cb80100001800c00108008000200050000000c0002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r8], 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_FW_DOWNLOAD(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, '/)+:^,'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x28}, 0x1, 0x0, 0x0, 0x88040}, 0x20000080) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0xac, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xf, 0xe}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x0, [0x0, 0xe, 0xa, 0x2, 0x0, 0x9, 0x9, 0x5, 0x10, 0x7, 0x8, 0x3, 0x2, 0x6, 0xd, 0xd], 0x1, [0x1, 0x2883, 0x85, 0x1, 0x10, 0x0, 0x9, 0x7, 0x7ff, 0xc, 0x4, 0x6, 0x42d, 0x8, 0x200, 0x4], [0x36e, 0xd, 0xeed, 0x5, 0x200, 0x1, 0x32c4, 0x0, 0x5, 0x0, 0x10, 0x7, 0x200, 0x29, 0xffff, 0x3]}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x4}}]}]}, 0xac}}, 0x40044) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xd6}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 22.908206561s ago: executing program 5 (id=3359): r0 = socket(0x23, 0x2, 0xfffffff8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={r2, 0x1}, &(0x7f00000000c0)=0x8) r4 = accept4$inet(r0, &(0x7f0000000100)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10, 0x80000) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e24, @broadcast}, 0x10) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6, 0x2c032, r4, 0x956ca000) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'vxcan1\x00'}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) r6 = socket$inet_sctp(0x2, 0x0, 0x84) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000240)="74e9df7294dd43b840a272f7ab5f0e334cf6e378187e2c95a8b96bfe066d23b277aba80e174d1de7d8bfad1572e7e8dc2f6eaab70b2681409bc0958ba419b21ea17ee3c2c0d72853085426256b551a66f1b89903dc5cbcf8cb1abf0320f32b223fcd74cd81b574c4eb204ffdee0c642e2e7cf71f61b0f1961b5495", 0x7b}], 0x1) getsockopt$inet_mreq(r5, 0x0, 0x20, &(0x7f0000000300)={@multicast2, @initdev}, &(0x7f0000000340)=0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_MESH(r7, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x57}}}}, ["", "", ""]}, 0x20}}, 0x1) bind$bt_hci(r0, &(0x7f0000000480)={0x1f, 0x1, 0x3}, 0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'nr0\x00', &(0x7f00000004c0)=@ethtool_cmd={0x6, 0x4, 0x285, 0x6e4, 0x7, 0xff, 0x1, 0x7, 0xff, 0x6, 0x10000, 0x4000000, 0xe700, 0xd, 0xd, 0xa41, [0x0, 0x7]}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@ipv4_newnexthop={0x24, 0x68, 0x100, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0x3, 0x0, 0x13}, [@NHA_BLACKHOLE={0x4}, @NHA_OIF={0x8, 0x5, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000090) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000000680)={r3, 0x4c, "0c2165d5706c944c88f4707c091c51f05516ca405227196e586fe600c6ebb00d8d83ba1ccd93d3d58601e3522b8ede1b65fb2bf6ee6a53b3f9e443bdce2c7fb2942ae71453827323c46c5ee5"}, &(0x7f0000000700)=0x54) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000740)={r9, 0x6}, 0x8) r10 = accept(0xffffffffffffffff, &(0x7f00000007c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, &(0x7f0000000840)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r10) socket$inet6(0xa, 0xa, 0x9) r11 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$6lowpan_control(r11, &(0x7f00000008c0)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0xb2, 0x8, &(0x7f0000000980)="3e57a9e9c88378b8d3c526f9eeb99fe421142eb71ac50d95ecf36074e20a5143b77c1038ed0be92951294d4a0e43c2e033283585772fcd0dcfe1a126081eb59720087c643eda6c21f1b0451075603a9aa6fff870a2622c5c21cec512e437df785d32e726ae228093f49c1ca28b4faf6c0dde46c911c863c534533de4e4d1cbbcda3bb590c0b9179edcd08cb7616be74f55140fd9496c636e5a0f76ca9ba355e5c5890a86906e4532d74a8e41f7655608a7dc", &(0x7f0000000a40)=""/8, 0x9, 0x0, 0x85, 0x82, &(0x7f0000000a80)="3523c0b4f521e590dc9e9dd8e34f6aed3031e5ae007015acdb4458b1dd84c5d77e4655e36561b3daa0232207020848f65cb2fa0b4b45ed5e6ef2e69629c8e1ddeb94640a1e295b976dbd18e08714fca6d141215484b530c1913adffe47acd5cc435be2a8a9d8b810a5cd0d9d7cccb9414a154f84286992f6f78a282d072f10acd9d3c9fe49", &(0x7f0000000b40)="d566edeed603eb530146982120bad310d0927e03cbf3809dff67eb3474c7ec77b75b11cf87effb9bc40d00d47162febad1fd94315b95e7557c205bf38c9dc267f1f1112af3b7b9e6c00ab4dd08e65d1a653125aceb65c4fd336b883840aa2bda199b937cdcb27e5ccb628e05f2520dc4a25e0219085e4b719422f435230dd8fa42f6", 0x2, 0x0, 0x6}, 0x50) 22.702593316s ago: executing program 2 (id=3362): socket$kcm(0x2, 0x200000000000001, 0x106) (async) r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB='\n\x00\x00\x00\x00\b\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0a00000006000000081700000500000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc) (async) close(0x3) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0600000004000000040000000001"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x2}, 0x50) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002f40)={r0, 0x20, &(0x7f0000002f00)={&(0x7f0000000a00)=""/238, 0xee, 0x0, &(0x7f0000001f00)=""/4087, 0xff7}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000140)=0x80) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r10}, 0xc) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001ec0)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) (async) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r11}, &(0x7f0000000280), &(0x7f0000000500)=r13}, 0x20) 22.36240577s ago: executing program 2 (id=3364): socket$inet(0x2, 0x1, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) (async) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x4, r2, 0x4000000000000000}, 0x38) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) r3 = socket(0x40000000015, 0x5, 0x0) (async) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="180000d885000000100100000c000000aa000000000000001000518400000000100100000c001e00"], 0x28}, 0x800) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) r5 = epoll_create1(0x0) (async) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0xffff, 0x6}, 0x10) r7 = socket(0x26, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) recvmmsg$unix(r6, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0) (async) read$alg(r6, &(0x7f0000000000)=""/24, 0x18) (async) close(r7) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000000)={0x2000}) (async) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r8 = socket(0x11, 0x2, 0x0) setsockopt(r8, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) socket$kcm(0x10, 0x2, 0x0) 22.357749035s ago: executing program 5 (id=3366): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xcf) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x5, 0x2, 0xa}, 0x1c) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0x7, 0xffff}, {0xd, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x2, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xeb079ff12b0a88d2}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0x85) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000150041000000ebe803bee7ea2d"], 0x225c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000094) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r9, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r10, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x0, 0x5}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000440)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x80, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1000000}, 0x4000010) 22.290454357s ago: executing program 3 (id=3367): r0 = socket$inet6(0xa, 0x800000000000800, 0xffffffff) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x27b, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2, 0x7}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x200010, 0x40, 0x3, 0x41, r1, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) write(r0, &(0x7f0000000240)="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", 0x107) 22.125527487s ago: executing program 3 (id=3368): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, &(0x7f0000000080)="2edf011682e6a524d42ab4dfe8a506d534e2f3b440ba", &(0x7f0000000100)=""/81}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x6, 0x4, 0x2001, 0x81, r0, 0x4}, 0x50) r2 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) close(r0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000011000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000340)="196a348fbba6e75ce3e37fd3d3fc", 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_channels={0x3d, 0x9, 0xb987, 0x1, 0x6, 0x0, 0x0, 0x2, 0x1}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10000) unshare(0x2c020400) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000680)={0x18, 0x0, {0x103, @remote, 'sit0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000000040)) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r7, 0x40047438, &(0x7f0000000040)) writev(r7, &(0x7f00000002c0)=[{&(0x7f00000006c0)="dc7a169efa", 0x5}], 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x64, 0x10, 0x40d, 0x70bd2e, 0x25dfdbfc, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bond={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x100}, @IFLA_BOND_PRIMARY={0x8, 0xb, r9}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x2}, @IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_ARP_INTERVAL={0x8}, @IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xb2c}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040c0}, 0x8000) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000540)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e1e, @multicast1}, {0x2, 0xe20, @rand_addr=0x64010101}, 0x110, 0x0, 0x0, 0x0, 0xc, &(0x7f0000000040)='ip6_vti0\x00', 0xffffffffffffffff, 0x2, 0x3}) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$PPPIOCGFLAGS(r10, 0x8004745a, &(0x7f0000000440)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) setsockopt$XDP_TX_RING(r10, 0x11b, 0x3, &(0x7f0000000480), 0x4) 849.819948ms ago: executing program 3 (id=3374): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000009, 0x31, 0xffffffffffffffff, 0x7c5c6000) socket$can_bcm(0x1d, 0x2, 0x2) pselect6(0x40, &(0x7f0000000080)={0x7fff, 0x81, 0x101, 0x4, 0x0, 0x7, 0x215, 0x1}, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 849.630535ms ago: executing program 3 (id=3375): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={0x2c, 0x26, 0x109, 0x870bd22, 0xfffffff9, {0x2}, [@nested={0x8, 0x3d, 0x0, 0x1, [@nested={0x4, 0x122}]}, @typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}, @typed={0x8, 0x3e, 0x0, 0x0, @fd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f00000002c0)=0xa, 0x4) recvmmsg(r2, &(0x7f0000005100)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x40010160, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x60}}, 0x0) 849.106873ms ago: executing program 6 (id=3376): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000000000000100000000000001"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x40, '\x00', 0x0, r0, 0x5, 0x2}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x124, 0x24, 0x8, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x5, 0xf}, {0xfff1, 0x9}, {0x5, 0xe}}, [@TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x0, 0x3, 0x5, 0x0, 0x2, 0x9, 0x5}}, {0xe, 0x2, [0x8, 0x5, 0x5, 0xa88, 0x5]}}, {{0x1c, 0x1, {0x7, 0x6, 0x5, 0x6e, 0x2, 0x0, 0x4, 0x2}}, {0x8, 0x2, [0xf, 0xffff]}}, {{0x1c, 0x1, {0xa, 0x7, 0xf, 0x6, 0x2, 0x8000000, 0xffffffff, 0x1}}, {0x6, 0x2, [0x9]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffff}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x296}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xb97}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xc99d}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x1ff}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x10}]}}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfa, 0x4, 0x5, 0xb, 0x1, 0x6, 0xd, 0x9}}, {0x16, 0x2, [0x7, 0xe, 0x9, 0xae, 0xe, 0x1, 0x9, 0xed6, 0xffff]}}]}]}, 0x124}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e00", 0x38) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000480)={0x1, 0x7, "5a8609", 0x8, 0x8}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1}, [@FRA_DST={0x8, 0x1, @empty}]}, 0x24}}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) (async) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x10, r1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @fallback=0x29, r9}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x6, '\x00', r8, r9, 0x0, 0x0, 0x5}, 0x50) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x20, 0x7800, 0xc9, 0x8, {{0xd, 0x4, 0x2, 0x35, 0x34, 0x66, 0x0, 0x8, 0x4, 0x0, @multicast1, @empty, {[@ssrr={0x89, 0x17, 0xd7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @loopback, @private=0xa010101]}, @timestamp={0x44, 0x8, 0xfd, 0x0, 0x8, [0x6]}, @end]}}}}}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={r11, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) syz_emit_ethernet(0x14c, &(0x7f0000000d40)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x13e, 0x100, 0x0, 0x9, 0x11, 0x0, @empty, @multicast1}, {0x100, 0x4e20, 0x12a, 0x0, @gue={{0x2, 0x1, 0x2, 0x7, 0x0, @val=0x80}, "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"}}}}}}, 0x0) 847.095999ms ago: executing program 3 (id=3377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, 0x0, 0x8, 0x105, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1e000000}]}]}, 0x3c}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001110040001400020010000c000900090073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x48, r4, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}]}, 0x48}}, 0x400400c) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x40408c0}, 0x80) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000240)={0x0, 0x8000, 0xdf02}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000640)={r7, 0x581a2b46, 0x400}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x52, 0xffffffffffffffff, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8) recvfrom$l2tp6(r8, &(0x7f00000000c0)=""/125, 0x7d, 0x40008002, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x20) 845.779931ms ago: executing program 6 (id=3378): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041dfffff00000000080020409111c5000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@getchain={0x24, 0x66, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xe, 0x4}, {0xc, 0xfff3}, {0xfff1, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 844.936771ms ago: executing program 34 (id=3319): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000680000006800000002000000000000000000000d0a000000000000000700000604"], &(0x7f0000000f40)=""/4089, 0x82, 0xff9, 0x1}, 0x28) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x4008001}, 0x4008090) 844.906008ms ago: executing program 6 (id=3380): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newnexthop={0x18, 0x68, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x3, 0x0, 0x9}}, 0x18}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 841.030458ms ago: executing program 2 (id=3381): mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r2, 0xaa0f4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000500"/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, 0xffffffffffffffff, 0xe6905000) (async) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, 0xffffffffffffffff, 0xe6905000) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0xb11e000) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x3, 0x3033, r1, 0x0) (async) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x3, 0x3033, r1, 0x0) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r1, 0x0) (async) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r1, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r6) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r6) r7 = socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x138, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8814}, 0x24008004) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r11, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r7, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r11, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18, &(0x7f00000001c0)={&(0x7f0000000140)="5ab37158946b88213a", 0x9}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000000) readv(r7, &(0x7f0000000980)=[{&(0x7f0000002600)=""/4115, 0x1013}, {0x0}], 0x2) (async) readv(r7, &(0x7f0000000980)=[{&(0x7f0000002600)=""/4115, 0x1013}, {0x0}], 0x2) 840.562197ms ago: executing program 3 (id=3382): bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000001100)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000001300)=0x10, 0x4) bind$xdp(r1, &(0x7f0000001400)={0x2c, 0x1a, 0x0, 0x0, r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0xf0ffffff, {0x0, 0x0, 0x74, r3, {0x10, 0x7}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r5, &(0x7f0000001600)='\x00\x00\x00\x00', &(0x7f0000001700)=@udp=r1}, 0x20) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f0000002000)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0xb7, 0x2}, @generic={0xb7, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x33}, @generic={0x95}], &(0x7f0000003000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000004000)={r6, 0x0, 0xe, 0x0, &(0x7f0000005000)="00112233445566778899aabbccdd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r7, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xfffffffc}], 0x400000000000146, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 840.331134ms ago: executing program 5 (id=3383): r0 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x8, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x3, [@restrict={0x6, 0x0, 0x0, 0xb, 0x3}, @var={0x6, 0x0, 0x0, 0xe, 0x2}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x1, 0x5}, @enum64={0x10, 0x6, 0x0, 0x13, 0x1, 0x0, [{0xc, 0x9, 0x200}, {0xc, 0x5, 0x34b4}, {0xd, 0x5, 0x49f8}, {0xf, 0x2, 0xd7}, {0x9, 0x9, 0x6}, {0xb, 0x7, 0x3fe0000}]}, @typedef={0xc, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x30]}}, &(0x7f0000000600)=""/73, 0xa7, 0x49, 0x0, 0x2, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0xffff, 0x0}, 0x8) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000780)=@generic={&(0x7f0000000740)='./file0\x00'}, 0x18) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x4000, r0}, 0x18) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2a46, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000100)='blkio.bfq.idle_time\x00', 0x0, 0x0) readv(r9, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{0x1, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1, 0x19, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xff}, [@exit, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_fd={0x18, 0x4, 0x1, 0x0, r2}]}, &(0x7f0000000340)='syzkaller\x00', 0x5, 0xc6, &(0x7f0000000440)=""/198, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x2a, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x3, 0xe, 0x401, 0x2}, 0x10, r4, r5, 0xa, &(0x7f0000000a40)=[r6, r7, r9, r10, r11], &(0x7f0000000a80)=[{0x5, 0x5, 0x3, 0x2}, {0x5, 0x2, 0x4, 0x4}, {0x2, 0x1, 0x8, 0xf}, {0x4, 0x1, 0x3, 0x9}, {0x0, 0x4, 0x0, 0x6}, {0x4, 0x3, 0x4, 0x6}, {0x2, 0x4, 0x1, 0x9}, {0x2, 0x1, 0xf, 0x7}, {0x5, 0x1, 0x7, 0x4}, {0x2, 0x2, 0x8}], 0x10, 0x7}, 0x94) unshare(0x8000400) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080), 0x4) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000000f7ff0000000000000a20000000000a01030000000000000000010000020900010073797a310000000034000000030a01020000000000000000010000000900030073797a310000000008000a40000000040900010073797a31000000002c000000050a0102000000000000000001002000090003"], 0xa8}}, 0x8000) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000354000000120a01010000000000000000020000000900010073797a30000000000900020073797a3000000000080003400000000320000480060001"], 0xa4}}, 0x20000000) sendmsg$NFNL_MSG_ACCT_NEW(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x2c, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFACCT_PKTS={0xc}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240208c0}, 0x4004090) 712.593105ms ago: executing program 6 (id=3384): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x3, 0x1, 0x0, 0x8}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 665.76298ms ago: executing program 5 (id=3385): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000edffffffffffff17110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3}, 0x18) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000edffffffffffff17110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3}, 0x18) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) (async) 477.636965ms ago: executing program 5 (id=3386): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26}, 0x28) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0a00000006000000080000000800000040000000", @ANYRES32, @ANYBLOB="000b000000000000000000000000000000000000d8bb1cdc85f9223523a5ae872c24284c80f6b6ce4dc89cd6b1249abb15107702ac598c3e2d04dad120e4ff371eb9a9db259f8ba441989d825cdb3e0479af47480707123bec6840dc7fdbfdbd5ddf97ccabea469800ccde5fb03a69198877ecd9f4874fa98734e10da416399468ea3667b8274d45282be1917f8655", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r3, @ANYBLOB="101000000000000008000d7fff000000e4031680e00301800c00070000000000adffffff0c00", @ANYRES32=r3, @ANYBLOB="eb91"], 0x40c}}, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'tunl0\x00', 0x6bf1c2d5adba8c32}) socket$igmp6(0xa, 0x3, 0x2) (async) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8"], 0x48}}, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="20000000130001000300"/20, @ANYBLOB="010000"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="180800ec0c00000000000006000000001801efcbd386a57c21a5f13908c5f237154eceedf763784057a70386ef91089426db27e0577bdf5604c7771e732384da13e58dc0ed010400000000000095a1969c00d463b2ed086bf7df81ebdb8dd9be956dad8b384e197c599b268d385194b832ce6f6d2f253fd6478653fbca0a560bd8619201c90a3c828fbd6999b9ae859e783c7b78f6608e1a5a44d7b657ba373e092da985aab6f3d5e77ba27e11a72d9266b4994b7e8e645d33f12d88e96be831647ab8ef45391a01"], 0x0, 0x2808, 0x0, 0x0, 0x0, 0x72, '\x00', r8, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x2) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r11 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r11, 0x107, 0xb, 0x0, &(0x7f0000000040)) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000009, 0x4000010, r1, 0x3e001000) (async) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 439.367496ms ago: executing program 6 (id=3387): r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x80400) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'netdevsim0\x00', 0x2}) recvfrom$x25(r0, &(0x7f00000000c0)=""/50, 0x32, 0x100, &(0x7f0000000100), 0x12) pread64(r0, &(0x7f0000000140)=""/43, 0x2b, 0x6) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(0xffffffffffffffff, 0x40106e8c, &(0x7f0000000180)=[0x6c, 0x9]) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x104, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xa}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SOCKETS={0x7c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0xf, 0xa, 'netdevsim0\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}]}, 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x8800) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000640)={'gretap0\x00', 0x0, 0x40, 0x7810, 0x0, 0xc3f3, {{0x6, 0x4, 0x2, 0x3b, 0x18, 0x64, 0x0, 0x31, 0x29, 0x0, @loopback, @broadcast, {[@ra={0x94, 0x4, 0x1}]}}}}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffffffffffff, 0x9, '\x00', r15, r5, 0x2, 0x5, 0x3}, 0x50) ioctl$sock_proto_private(r4, 0x89ec, &(0x7f0000000740)) ioctl$OCFS2_IOC_RESVSP64(r7, 0x4030582a, &(0x7f0000000780)={0x0, 0x2, 0x2, 0x3, 0x189, 0x3}) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x78, 0x0, 0x7, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xffffffffffffffff}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xdaff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff8}]}, 0x78}, 0x1, 0x0, 0x0, 0xc0}, 0x20040040) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000900)={r9, 0x3, 0xa38a, 0x9}) ioctl$SIOCGETMIFCNT_IN6(r16, 0x89e0, &(0x7f0000000940)) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000a80)={r14, &(0x7f0000000980)='\x00', 0x0, &(0x7f00000009c0)={@align=0x81, {0x40dd, 0x0, 0x8, 0x3ff}}, 0x5, &(0x7f0000000a00)={@_ha_fsid}, &(0x7f0000000a40)}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r17, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x7c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xb}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r15}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r15}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x800) setsockopt$IPT_SO_SET_REPLACE(r17, 0x0, 0x40, &(0x7f0000000c40)=@filter={'filter\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0x258, 0x108, 0x0, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x4, &(0x7f0000000c00), {[{{@ip={@rand_addr=0x64010101, @broadcast, 0x0, 0xff, 'wlan1\x00', 'ip6gretap0\x00', {}, {0xff}, 0xc, 0x2, 0x12}, 0x0, 0x98, 0x108, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x2}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x7f, 0x7, 0x0, 0x0, "6ea927cb0482ec116bceffeddcea6e4f7c02dc99bf18a91fa9a6935a0fe13228da070242d1c4372c908810e10e302a46f8bb40bd75dfc02bb10fd1d86ee2ea56"}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xff, 'caif0\x00', 'veth0_vlan\x00', {}, {}, 0xbb, 0x0, 0x13}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@ah={{0x30}, {[0x7, 0x1262]}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0xe, 0x1, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x6, 0x2, [0x1c, 0x19, 0x23, 0xd, 0x11, 0x3b, 0x6, 0x18, 0xd, 0x38, 0x37, 0xe, 0x1, 0x3c, 0x3], 0x1, 0x8, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x39}, @empty, 0x0, 0xff, 'pim6reg1\x00', 'veth1_vlan\x00', {0xff}, {0xff}, 0x88, 0x1, 0x26}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x101, 0x401], 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) ppoll(&(0x7f0000001080)=[{r5, 0x4122}, {r14, 0x8000}], 0x2, &(0x7f0000001100)={r18, r19+60000000}, &(0x7f0000001140)={[0xffffffffffffffff]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 6 (id=3388): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x40, &(0x7f00000000c0)={@_ha_fsid={[0x9, 0x9]}, {0xfffb, 0x2, 0xdf9, 0x4}}, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x5}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000640)={{r0}, r1, 0x10, @unused=[0x6, 0x2, 0x2, 0x5], @name="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"}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0xa, 0x1, 0x0, r0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): t minimum of 512 [ 430.950710][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 430.950892][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 430.951051][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 431.586154][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 431.586284][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 432.537498][T17021] syzkaller0: entered promiscuous mode [ 432.537520][T17021] syzkaller0: entered allmulticast mode [ 432.560967][ T6145] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.565067][ T6158] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.565608][ T6158] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.565642][ T6158] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.779218][T17064] __nla_validate_parse: 29 callbacks suppressed [ 432.779236][T17064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2607'. [ 432.899739][T17069] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 433.048578][T17071] netlink: NAT attribute has 8 unknown bytes [ 433.048611][T17071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.145018][T17081] xt_IDLETIMER: timeout value is zero [ 433.304094][T17091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2612'. [ 433.507537][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 433.507708][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 433.939091][T17110] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2615'. [ 434.067931][T17115] veth0_to_bond: entered allmulticast mode [ 434.158031][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 434.158429][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 434.158571][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 434.489304][T17134] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2623'. [ 434.788366][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 434.788621][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 435.424621][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 435.425971][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 435.433699][T17164] ip_tables: iptables: counters copy to user failed while replacing table [ 435.469911][T17164] netlink: 'syz.3.2628': attribute type 1 has an invalid length. [ 435.563940][T17164] 8021q: adding VLAN 0 to HW filter on device bond8 [ 435.574499][T17167] bond7: (slave veth0_to_bond): Releasing active interface [ 435.583844][T17164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2628'. [ 435.666644][T17167] bond8: (slave veth0_to_bond): making interface the new active one [ 435.667927][T17167] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 435.739944][T17171] macvlan2: entered promiscuous mode [ 435.739966][T17171] macvlan2: entered allmulticast mode [ 435.741887][T17171] bond8: entered promiscuous mode [ 435.741905][T17171] veth0_to_bond: entered promiscuous mode [ 435.743462][T17171] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 435.744068][T17171] bond8: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 435.744145][T17171] bond8: left promiscuous mode [ 435.744153][T17171] veth0_to_bond: left promiscuous mode [ 435.897558][T17175] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2630'. [ 436.066505][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 436.257884][T17188] syzkaller0: entered promiscuous mode [ 436.257905][T17188] syzkaller0: entered allmulticast mode [ 436.937661][T17208] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2636'. [ 437.350192][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 437.350375][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 437.350525][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 439.257827][T17199] tipc: Enabling of bearer rejected, failed to enable media [ 439.259709][T17194] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 439.264000][T17201] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 439.268087][ C0] sctp_transport_update_pmtu: 2 callbacks suppressed [ 439.268111][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 439.301398][T17208] gretap0: entered promiscuous mode [ 439.355990][ T6150] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.356093][ T6150] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.356128][ T6150] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.356160][ T6150] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.886514][T17251] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2644'. [ 439.907747][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 439.907917][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 440.056263][T17255] ovs-s: entered promiscuous mode [ 440.116242][T17255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2645'. [ 440.125386][T17255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.556009][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 440.596882][T17277] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2647'. [ 441.187269][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 441.187427][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 441.187601][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 441.316578][T17289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2649'. [ 441.372633][T17294] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2650'. [ 441.827098][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 441.827269][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 442.156318][T17301] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2652'. [ 442.465953][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 442.563114][T17326] sctp: [Deprecated]: syz.2.2658 (pid 17326) Use of int in maxseg socket option. [ 442.563114][T17326] Use struct sctp_assoc_value instead [ 442.711160][T17333] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2660'. [ 442.715050][T17333] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2660'. [ 442.822778][T17338] netlink: 'syz.0.2662': attribute type 7 has an invalid length. [ 442.872454][T17341] netlink: 'syz.0.2663': attribute type 1 has an invalid length. [ 442.906373][T17341] netlink: 'syz.0.2663': attribute type 1 has an invalid length. [ 442.906893][T17341] netlink: 'syz.0.2663': attribute type 1 has an invalid length. [ 442.907243][T17341] netlink: 'syz.0.2663': attribute type 1 has an invalid length. [ 442.907985][T17341] netlink: 'syz.0.2663': attribute type 1 has an invalid length. [ 442.908625][T17341] netlink: 'syz.0.2663': attribute type 1 has an invalid length. [ 442.909118][T17341] netlink: 'syz.0.2663': attribute type 1 has an invalid length. [ 442.909581][T17341] netlink: 'syz.0.2663': attribute type 1 has an invalid length. [ 442.910059][T17341] netlink: 'syz.0.2663': attribute type 1 has an invalid length. [ 443.300280][T17354] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2665'. [ 443.300687][T17354] v: entered promiscuous mode [ 443.562511][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 443.578160][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 443.586284][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 443.588445][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 443.590305][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 443.612997][ T5628] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 443.623852][ T5628] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 443.624154][ T5628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 443.625745][ T5628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 443.626332][ T5628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 443.723947][T17354] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 443.723983][T17354] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 443.724019][T17354] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 443.834129][T17354] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 444.322698][T17381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2671'. [ 444.386907][ C0] sctp_transport_update_pmtu: 1 callbacks suppressed [ 444.386928][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 444.387105][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 444.611500][T17387] geneve5: entered promiscuous mode [ 444.624466][ T6149] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 37287 - 0 [ 444.625845][ T6145] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 37287 - 0 [ 444.626171][ T6145] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 37287 - 0 [ 444.626229][ T6145] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 37287 - 0 [ 445.665861][ T52] Bluetooth: hci5: command tx timeout [ 445.665909][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 445.781994][T17416] __nla_validate_parse: 1 callbacks suppressed [ 445.782014][T17416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2678'. [ 446.309206][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 446.309401][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 446.309583][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 446.309756][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 446.309914][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 446.527299][T17426] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2681'. [ 446.677887][T17421] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 446.677928][T17421] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 446.677946][T17421] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 446.812653][T17430] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2682'. [ 446.812689][T17430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2682'. [ 446.976618][T17358] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.979762][T17358] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.979911][T17358] bridge_slave_0: entered allmulticast mode [ 446.983348][T17358] bridge_slave_0: entered promiscuous mode [ 447.024739][T17358] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.024916][T17358] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.025062][T17358] bridge_slave_1: entered allmulticast mode [ 447.030105][T17358] bridge_slave_1: entered promiscuous mode [ 447.232216][T17358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.240866][T17358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.287205][T17358] team0: Port device team_slave_0 added [ 447.291756][T17358] team0: Port device team_slave_1 added [ 447.396215][T17358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.396232][T17358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.396252][T17358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.403820][T17358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.403836][T17358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.403858][T17358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.557931][T17453] sctp: [Deprecated]: syz.2.2687 (pid 17453) Use of int in max_burst socket option deprecated. [ 447.557931][T17453] Use struct sctp_assoc_value instead [ 447.595325][T17358] hsr_slave_0: entered promiscuous mode [ 447.597872][T17358] hsr_slave_1: entered promiscuous mode [ 447.598287][T17358] debugfs: 'hsr0' already exists in 'hsr' [ 447.598304][T17358] Cannot create hsr debugfs directory [ 447.744643][ T52] Bluetooth: hci5: command tx timeout [ 447.805249][T17455] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2688'. [ 448.228851][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 448.229007][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 448.456854][T17358] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 448.470300][T17358] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 448.471157][T17358] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 448.499436][T17358] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 448.501367][T17358] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 448.509611][T17358] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 448.510643][T17358] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 448.541827][T17358] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 448.722349][T17358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.743688][T17358] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.762415][ T6158] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.762481][ T6158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.792691][ T6158] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.792799][ T6158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.848427][T17478] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2694'. [ 448.848458][T17478] validate_nla: 28 callbacks suppressed [ 448.848498][T17478] netlink: 'syz.0.2694': attribute type 8 has an invalid length. [ 448.848509][T17478] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2694'. [ 449.019525][T17484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2695'. [ 449.073744][T17485] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2695'. [ 449.073911][T17485] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2695'. [ 449.516017][ C0] sctp_transport_update_pmtu: 1 callbacks suppressed [ 449.516042][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 449.556368][T17358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.763432][T17513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.825546][ T52] Bluetooth: hci5: command tx timeout [ 449.925663][T17358] veth0_vlan: entered promiscuous mode [ 449.940451][T17358] veth1_vlan: entered promiscuous mode [ 449.980261][T17358] veth0_macvtap: entered promiscuous mode [ 449.993956][T17358] veth1_macvtap: entered promiscuous mode [ 450.042117][T17358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.060978][T17358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.124815][ T6150] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.124866][ T6150] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.124893][ T6150] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.124920][ T6150] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.261003][ T6150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.261024][ T6150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.352123][ T219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.352143][ T219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.887833][T17550] __nla_validate_parse: 64 callbacks suppressed [ 450.887852][T17550] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2666'. [ 450.887865][T17550] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2666'. [ 450.888082][T17550] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2666'. [ 450.888095][T17550] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2666'. [ 451.129528][T17560] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2704'. [ 451.129563][T17560] netlink: 'syz.2.2704': attribute type 8 has an invalid length. [ 451.129579][T17560] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2704'. [ 451.178896][T17562] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2705'. [ 451.190422][T17563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2704'. [ 451.190458][T17563] netlink: 'syz.2.2704': attribute type 8 has an invalid length. [ 451.190473][T17563] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2704'. [ 451.224505][T17562] netlink: 'syz.0.2705': attribute type 10 has an invalid length. [ 451.224519][T17562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2705'. [ 451.425988][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 451.907720][ T52] Bluetooth: hci5: command tx timeout [ 452.032456][T17594] netlink: 'syz.5.2713': attribute type 1 has an invalid length. [ 452.065502][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 452.112284][T17597] sctp: [Deprecated]: syz.0.2714 (pid 17597) Use of struct sctp_assoc_value in delayed_ack socket option. [ 452.112284][T17597] Use struct sctp_sack_info instead [ 452.209162][T17602] netlink: 'syz.0.2716': attribute type 8 has an invalid length. [ 452.270123][T17605] netlink: 'syz.0.2716': attribute type 8 has an invalid length. [ 452.716021][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 452.910797][T17614] netlink: 'syz.5.2719': attribute type 5 has an invalid length. [ 452.943387][T17614] netlink: 'syz.5.2719': attribute type 5 has an invalid length. [ 453.356731][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 453.357296][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 453.372138][T17634] netlink: 'syz.0.2726': attribute type 1 has an invalid length. [ 453.540571][T17635] gretap0: entered allmulticast mode [ 453.549761][T17635] bond10: (slave gretap0): making interface the new active one [ 453.552289][T17635] bond10: (slave gretap0): Enslaving as an active interface with an up link [ 453.979645][T17627] syzkaller1: entered promiscuous mode [ 453.979668][T17627] syzkaller1: entered allmulticast mode [ 453.992157][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 454.998881][T17676] netlink: 'syz.0.2737': attribute type 10 has an invalid length. [ 455.379455][ T5628] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 455.388855][ T5628] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 455.395189][ T5628] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 455.412901][ T5628] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 455.413606][ T5628] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 455.487129][T17681] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.487786][T17681] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.936767][T17681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.971528][T17681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.322100][T17690] tipc: Enabling of bearer rejected, failed to enable media [ 456.338744][ T6150] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.339648][ T6150] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.339699][ T6150] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.339733][ T6150] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.547754][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 457.097835][T17719] Cannot find set identified by id 2 to match [ 457.099184][T17720] __nla_validate_parse: 14 callbacks suppressed [ 457.099199][T17720] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2745'. [ 457.099224][T17720] netlink: 'syz.0.2745': attribute type 8 has an invalid length. [ 457.099235][T17720] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2745'. [ 457.156708][T17721] FAULT_INJECTION: forcing a failure. [ 457.156708][T17721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.156738][T17721] CPU: 0 UID: 0 PID: 17721 Comm: syz.0.2745 Not tainted syzkaller #0 PREEMPT(full) [ 457.156759][T17721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 457.156771][T17721] Call Trace: [ 457.156779][T17721] [ 457.156787][T17721] dump_stack_lvl+0xe8/0x150 [ 457.156819][T17721] should_fail_ex+0x410/0x560 [ 457.156847][T17721] _copy_from_iter+0x1d3/0x1660 [ 457.156871][T17721] ? __alloc_skb+0x27a/0x7a0 [ 457.156896][T17721] ? __alloc_skb+0x27a/0x7a0 [ 457.156920][T17721] ? __alloc_skb+0x27a/0x7a0 [ 457.156943][T17721] ? __pfx__copy_from_iter+0x10/0x10 [ 457.156963][T17721] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 457.156994][T17721] ? __alloc_skb+0x27a/0x7a0 [ 457.157014][T17721] ? __alloc_skb+0x27a/0x7a0 [ 457.157042][T17721] ? netlink_sendmsg+0x650/0xb40 [ 457.157153][T17721] ? skb_put+0x112/0x210 [ 457.157180][T17721] netlink_sendmsg+0x6c0/0xb40 [ 457.157209][T17721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.157237][T17721] ? apparmor_socket_sendmsg+0x98/0x360 [ 457.157262][T17721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.157280][T17721] sock_sendmsg_nosec+0x13a/0x180 [ 457.157304][T17721] ____sys_sendmsg+0x54e/0x850 [ 457.157336][T17721] ? __pfx_____sys_sendmsg+0x10/0x10 [ 457.157372][T17721] ? import_iovec+0x73/0xa0 [ 457.157399][T17721] ___sys_sendmsg+0x2a5/0x360 [ 457.157423][T17721] ? __lock_acquire+0x747/0x2de0 [ 457.157448][T17721] ? __pfx____sys_sendmsg+0x10/0x10 [ 457.157479][T17721] ? kstrtouint+0x6e/0xe0 [ 457.157554][T17721] ? __fget_files+0x2a/0x420 [ 457.157578][T17721] ? __fget_files+0x3a2/0x420 [ 457.157613][T17721] __sys_sendmmsg+0x273/0x4d0 [ 457.157645][T17721] ? __pfx___sys_sendmmsg+0x10/0x10 [ 457.157681][T17721] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 457.157776][T17721] ? ksys_write+0x242/0x270 [ 457.157813][T17721] ? __pfx_ksys_write+0x10/0x10 [ 457.157847][T17721] __x64_sys_sendmmsg+0xa0/0xc0 [ 457.157875][T17721] do_syscall_64+0x166/0x520 [ 457.157899][T17721] ? trace_irq_disable+0x3b/0x140 [ 457.157919][T17721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.157938][T17721] ? clear_bhb_loop+0x70/0xc0 [ 457.157962][T17721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.157981][T17721] RIP: 0033:0x7facdaf9e159 [ 457.157999][T17721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.158014][T17721] RSP: 002b:00007facd91f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 457.158035][T17721] RAX: ffffffffffffffda RBX: 00007facdb226090 RCX: 00007facdaf9e159 [ 457.158049][T17721] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000005 [ 457.158062][T17721] RBP: 00007facd91f6090 R08: 0000000000000000 R09: 0000000000000000 [ 457.158073][T17721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.158091][T17721] R13: 00007facdb226128 R14: 00007facdb226090 R15: 00007ffc40a8dd98 [ 457.158123][T17721] [ 457.504483][ T52] Bluetooth: hci6: command tx timeout [ 457.978263][T17746] openvswitch: netlink: Flow actions attr not present in new flow. [ 457.992724][T17750] openvswitch: netlink: Flow actions attr not present in new flow. [ 458.209811][T17758] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2755'. [ 458.209843][T17758] netlink: 'syz.5.2755': attribute type 8 has an invalid length. [ 458.209854][T17758] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2755'. [ 458.264416][T17759] FAULT_INJECTION: forcing a failure. [ 458.264416][T17759] name failslab, interval 1, probability 0, space 0, times 0 [ 458.264446][T17759] CPU: 0 UID: 0 PID: 17759 Comm: syz.5.2755 Not tainted syzkaller #0 PREEMPT(full) [ 458.264467][T17759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 458.264478][T17759] Call Trace: [ 458.264486][T17759] [ 458.264494][T17759] dump_stack_lvl+0xe8/0x150 [ 458.264526][T17759] should_fail_ex+0x410/0x560 [ 458.264554][T17759] should_failslab+0xa8/0x100 [ 458.264580][T17759] __kmalloc_cache_noprof+0xa3/0x600 [ 458.264601][T17759] ? rtnl_newlink+0x147/0x1c30 [ 458.264694][T17759] ? rtnl_newlink+0x147/0x1c30 [ 458.264721][T17759] rtnl_newlink+0x147/0x1c30 [ 458.264750][T17759] ? __lock_acquire+0x747/0x2de0 [ 458.264773][T17759] ? __pfx_rtnl_newlink+0x10/0x10 [ 458.264800][T17759] ? __lock_acquire+0x747/0x2de0 [ 458.264825][T17759] ? __lock_acquire+0x747/0x2de0 [ 458.264867][T17759] ? lock_acquire+0x115/0x350 [ 458.264893][T17759] ? lock_acquire+0x115/0x350 [ 458.264922][T17759] ? is_bpf_text_address+0x26/0x2b0 [ 458.264962][T17759] ? __lock_acquire+0x747/0x2de0 [ 458.264988][T17759] ? __kernel_text_address+0xd/0x30 [ 458.265023][T17759] ? unwind_get_return_address+0x4d/0x90 [ 458.265056][T17759] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 458.265084][T17759] ? arch_stack_walk+0xfb/0x150 [ 458.265122][T17759] ? lock_acquire+0x115/0x350 [ 458.265141][T17759] ? __pfx_rtnl_newlink+0x10/0x10 [ 458.265177][T17759] ? __pfx_rtnl_newlink+0x10/0x10 [ 458.265200][T17759] rtnetlink_rcv_msg+0x802/0xc00 [ 458.265222][T17759] ? netlink_sendmsg+0x5d4/0xb40 [ 458.265245][T17759] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 458.265268][T17759] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 458.265292][T17759] ? __lock_acquire+0x747/0x2de0 [ 458.265324][T17759] netlink_rcv_skb+0x226/0x4a0 [ 458.265354][T17759] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 458.265379][T17759] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 458.265411][T17759] ? netlink_deliver_tap+0x2e/0x1b0 [ 458.265430][T17759] ? netlink_deliver_tap+0x2e/0x1b0 [ 458.265455][T17759] netlink_unicast+0x7bd/0x940 [ 458.265530][T17759] netlink_sendmsg+0x813/0xb40 [ 458.265560][T17759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 458.265587][T17759] ? apparmor_socket_sendmsg+0x98/0x360 [ 458.265611][T17759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 458.265629][T17759] sock_sendmsg_nosec+0x13a/0x180 [ 458.265653][T17759] ____sys_sendmsg+0x54e/0x850 [ 458.265683][T17759] ? __pfx_____sys_sendmsg+0x10/0x10 [ 458.265718][T17759] ? import_iovec+0x73/0xa0 [ 458.265746][T17759] ___sys_sendmsg+0x2a5/0x360 [ 458.265770][T17759] ? __lock_acquire+0x747/0x2de0 [ 458.265793][T17759] ? __pfx____sys_sendmsg+0x10/0x10 [ 458.265825][T17759] ? kstrtouint+0x6e/0xe0 [ 458.265877][T17759] ? __fget_files+0x2a/0x420 [ 458.265902][T17759] ? __fget_files+0x3a2/0x420 [ 458.265937][T17759] __sys_sendmmsg+0x273/0x4d0 [ 458.265969][T17759] ? __pfx___sys_sendmmsg+0x10/0x10 [ 458.266004][T17759] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 458.266046][T17759] ? ksys_write+0x242/0x270 [ 458.266076][T17759] ? __pfx_ksys_write+0x10/0x10 [ 458.266111][T17759] __x64_sys_sendmmsg+0xa0/0xc0 [ 458.266139][T17759] do_syscall_64+0x166/0x520 [ 458.266163][T17759] ? trace_irq_disable+0x3b/0x140 [ 458.266182][T17759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.266201][T17759] ? clear_bhb_loop+0x70/0xc0 [ 458.266224][T17759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.266243][T17759] RIP: 0033:0x7fae9db9e159 [ 458.266260][T17759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.266276][T17759] RSP: 002b:00007fae9e9ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 458.266297][T17759] RAX: ffffffffffffffda RBX: 00007fae9de26090 RCX: 00007fae9db9e159 [ 458.266310][T17759] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000005 [ 458.266323][T17759] RBP: 00007fae9e9ce090 R08: 0000000000000000 R09: 0000000000000000 [ 458.266334][T17759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.266361][T17759] R13: 00007fae9de26128 R14: 00007fae9de26090 R15: 00007ffdfa2dbce8 [ 458.266388][T17759] [ 458.476073][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 458.643228][T17756] netlink: 'syz.0.2754': attribute type 1 has an invalid length. [ 458.680115][T17756] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2754'. [ 458.680263][T17756] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2754'. [ 458.680385][T17756] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2754'. [ 458.680533][T17756] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2754'. [ 458.680656][T17756] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2754'. [ 458.680791][T17756] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2754'. [ 459.246388][ T6145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.246409][ T6145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.584368][ T52] Bluetooth: hci6: command tx timeout [ 459.735234][T17686] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.735408][T17686] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.735530][T17686] bridge_slave_0: entered allmulticast mode [ 459.741194][T17686] bridge_slave_0: entered promiscuous mode [ 459.746520][T17686] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.748227][T17686] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.748344][T17686] bridge_slave_1: entered allmulticast mode [ 459.805360][T17686] bridge_slave_1: entered promiscuous mode [ 459.977365][T17686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.020628][T17686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.428193][T17686] team0: Port device team_slave_0 added [ 460.514019][T17816] Cannot find set identified by id 0 to match [ 460.528215][T17686] team0: Port device team_slave_1 added [ 460.766841][T17686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.766859][T17686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.766881][T17686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.817183][T17686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.817201][T17686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.817224][T17686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.026074][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 461.241139][T17825] bridge0: entered allmulticast mode [ 461.330790][T17686] hsr_slave_0: entered promiscuous mode [ 461.361428][T17686] hsr_slave_1: entered promiscuous mode [ 461.362187][T17686] debugfs: 'hsr0' already exists in 'hsr' [ 461.375461][T17686] Cannot create hsr debugfs directory [ 461.667216][ T52] Bluetooth: hci6: command tx timeout [ 462.310968][T17861] syzkaller0: entered promiscuous mode [ 462.310992][T17861] syzkaller0: entered allmulticast mode [ 462.950101][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 463.369864][T17881] __nla_validate_parse: 14 callbacks suppressed [ 463.369883][T17881] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2779'. [ 463.369902][T17881] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2779'. [ 463.744730][ T52] Bluetooth: hci6: command tx timeout [ 465.460082][T17686] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 465.486783][T17686] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 465.522227][T17686] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 465.538872][T17686] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 465.540994][T17686] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 465.562956][T17686] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 465.563854][T17686] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 465.601343][T17686] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 466.110069][T17686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.115395][T17917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2785'. [ 466.133297][T17917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2785'. [ 466.213835][T17686] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.249613][T17927] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 466.291116][ T6158] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.291233][ T6158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.336465][ T6158] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.336571][ T6158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.807849][T17940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2788'. [ 466.927435][T17940] bridge0: port 2(batadv1) entered blocking state [ 466.928383][T17940] bridge0: port 2(batadv1) entered disabled state [ 466.928534][T17940] batadv1: entered allmulticast mode [ 466.932654][T17940] batadv1: entered promiscuous mode [ 467.263521][ T6155] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.294973][ T6149] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.295014][ T6149] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.295045][ T6149] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.404976][ T6167] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 467.404994][ T6167] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 467.431557][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 467.431731][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 467.668196][T17957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2791'. [ 467.668266][T17957] netlink: 'syz.2.2791': attribute type 2 has an invalid length. [ 467.668279][T17957] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2791'. [ 467.771797][T17961] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2793'. [ 467.771830][T17961] netlink: 'syz.3.2793': attribute type 8 has an invalid length. [ 467.771841][T17961] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2793'. [ 467.831613][T17965] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2793'. [ 467.831645][T17965] netlink: 'syz.3.2793': attribute type 8 has an invalid length. [ 468.066262][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 468.201918][T17951] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 468.296018][T17686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.422104][T17971] __nla_validate_parse: 1 callbacks suppressed [ 468.422122][T17971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2794'. [ 468.717126][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 468.717329][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 468.831305][T17686] veth0_vlan: entered promiscuous mode [ 468.887452][T17987] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2798'. [ 468.910832][T17990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.978608][T17686] veth1_vlan: entered promiscuous mode [ 469.117658][T17686] veth0_macvtap: entered promiscuous mode [ 469.149598][T17686] veth1_macvtap: entered promiscuous mode [ 469.171699][T17686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.250260][T17686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.304779][ T6145] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.304831][ T6145] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.304863][ T6145] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.304892][ T6145] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.664136][ T219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.664154][ T219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.853105][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.853126][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.894871][T18015] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2803'. [ 469.984682][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 470.001211][T18020] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2804'. [ 470.001243][T18020] netlink: 'syz.2.2804': attribute type 8 has an invalid length. [ 470.001255][T18020] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2804'. [ 470.055546][T18022] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2804'. [ 470.055584][T18022] netlink: 'syz.2.2804': attribute type 8 has an invalid length. [ 470.055596][T18022] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2804'. [ 470.072689][T18015] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2803'. [ 470.106172][T18022] FAULT_INJECTION: forcing a failure. [ 470.106172][T18022] name failslab, interval 1, probability 0, space 0, times 0 [ 470.106201][T18022] CPU: 0 UID: 0 PID: 18022 Comm: syz.2.2804 Not tainted syzkaller #0 PREEMPT(full) [ 470.106221][T18022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 470.106232][T18022] Call Trace: [ 470.106239][T18022] [ 470.106248][T18022] dump_stack_lvl+0xe8/0x150 [ 470.106280][T18022] should_fail_ex+0x410/0x560 [ 470.106308][T18022] should_failslab+0xa8/0x100 [ 470.106332][T18022] __kmalloc_cache_noprof+0xa3/0x600 [ 470.106349][T18022] ? rcu_is_watching+0x16/0xb0 [ 470.106371][T18022] ? __hw_addr_create+0x62/0x240 [ 470.106487][T18022] ? __hw_addr_create+0x62/0x240 [ 470.106519][T18022] __hw_addr_create+0x62/0x240 [ 470.106550][T18022] __hw_addr_add_ex+0x1ce/0x520 [ 470.106584][T18022] dev_addr_init+0x15a/0x240 [ 470.106612][T18022] ? __pfx_dev_addr_init+0x10/0x10 [ 470.106642][T18022] ? __kvmalloc_node_noprof+0x345/0x820 [ 470.106673][T18022] alloc_netdev_mqs+0x2b4/0x12a0 [ 470.106691][T18022] ? __pfx_snprintf+0x10/0x10 [ 470.106711][T18022] ? __pfx_hsr_dev_setup+0x10/0x10 [ 470.106775][T18022] rtnl_create_link+0x321/0xd70 [ 470.106802][T18022] rtnl_newlink_create+0x258/0x7b0 [ 470.106835][T18022] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 470.106866][T18022] ? __pfx___mutex_lock+0x10/0x10 [ 470.106902][T18022] ? ns_capable+0x89/0xe0 [ 470.106932][T18022] rtnl_newlink+0x167a/0x1c30 [ 470.106973][T18022] ? __pfx_rtnl_newlink+0x10/0x10 [ 470.107008][T18022] ? __lock_acquire+0x747/0x2de0 [ 470.107038][T18022] ? __lock_acquire+0x747/0x2de0 [ 470.107074][T18022] ? lock_acquire+0x115/0x350 [ 470.107101][T18022] ? lock_acquire+0x115/0x350 [ 470.107131][T18022] ? is_bpf_text_address+0x26/0x2b0 [ 470.107161][T18022] ? __lock_acquire+0x747/0x2de0 [ 470.107189][T18022] ? __kernel_text_address+0xd/0x30 [ 470.107209][T18022] ? unwind_get_return_address+0x4d/0x90 [ 470.107231][T18022] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 470.107250][T18022] ? arch_stack_walk+0xfb/0x150 [ 470.107304][T18022] ? __pfx_rtnl_newlink+0x10/0x10 [ 470.107327][T18022] rtnetlink_rcv_msg+0x802/0xc00 [ 470.107349][T18022] ? netlink_sendmsg+0x5d4/0xb40 [ 470.107371][T18022] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 470.107393][T18022] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 470.107418][T18022] ? __lock_acquire+0x747/0x2de0 [ 470.107452][T18022] netlink_rcv_skb+0x226/0x4a0 [ 470.107473][T18022] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 470.107498][T18022] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 470.107533][T18022] ? netlink_deliver_tap+0x2e/0x1b0 [ 470.107551][T18022] ? netlink_deliver_tap+0x2e/0x1b0 [ 470.107577][T18022] netlink_unicast+0x7bd/0x940 [ 470.107616][T18022] netlink_sendmsg+0x813/0xb40 [ 470.107646][T18022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 470.107675][T18022] ? apparmor_socket_sendmsg+0x98/0x360 [ 470.107700][T18022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 470.107718][T18022] sock_sendmsg_nosec+0x13a/0x180 [ 470.107742][T18022] ____sys_sendmsg+0x54e/0x850 [ 470.107775][T18022] ? __pfx_____sys_sendmsg+0x10/0x10 [ 470.107810][T18022] ? import_iovec+0x73/0xa0 [ 470.107836][T18022] ___sys_sendmsg+0x2a5/0x360 [ 470.107861][T18022] ? __lock_acquire+0x747/0x2de0 [ 470.107884][T18022] ? __pfx____sys_sendmsg+0x10/0x10 [ 470.107917][T18022] ? kstrtouint+0x6e/0xe0 [ 470.107964][T18022] ? __fget_files+0x2a/0x420 [ 470.107994][T18022] ? __fget_files+0x3a2/0x420 [ 470.108030][T18022] __sys_sendmmsg+0x273/0x4d0 [ 470.108062][T18022] ? __pfx___sys_sendmmsg+0x10/0x10 [ 470.108098][T18022] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 470.108140][T18022] ? ksys_write+0x242/0x270 [ 470.108170][T18022] ? __pfx_ksys_write+0x10/0x10 [ 470.108204][T18022] __x64_sys_sendmmsg+0xa0/0xc0 [ 470.108232][T18022] do_syscall_64+0x166/0x520 [ 470.108255][T18022] ? trace_irq_disable+0x3b/0x140 [ 470.108272][T18022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.108291][T18022] ? clear_bhb_loop+0x70/0xc0 [ 470.108313][T18022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.108332][T18022] RIP: 0033:0x7f5aafd9e159 [ 470.108349][T18022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.108365][T18022] RSP: 002b:00007f5ab0d07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 470.108385][T18022] RAX: ffffffffffffffda RBX: 00007f5ab0026090 RCX: 00007f5aafd9e159 [ 470.108398][T18022] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000005 [ 470.108411][T18022] RBP: 00007f5ab0d07090 R08: 0000000000000000 R09: 0000000000000000 [ 470.108422][T18022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 470.108433][T18022] R13: 00007f5ab0026128 R14: 00007f5ab0026090 R15: 00007ffc7dddb598 [ 470.108465][T18022] [ 470.602045][ T52] block nbd3: Receive control failed (result -32) [ 470.783914][T18030] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20004 [ 471.023979][T18047] netlink: 9900 bytes leftover after parsing attributes in process `syz.5.2807'. [ 471.024005][T18047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.453089][T18060] dummy0: entered promiscuous mode [ 471.558178][T18064] netlink: 'syz.5.2814': attribute type 2 has an invalid length. [ 471.628673][T18067] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2813'. [ 471.710357][T18073] netlink: 'syz.5.2816': attribute type 8 has an invalid length. [ 471.762154][T18076] netlink: 'syz.5.2816': attribute type 8 has an invalid length. [ 471.790654][T18069] 8021q: adding VLAN 0 to HW filter on device bond11 [ 471.844807][T18056] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.845883][ T50] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.845922][ T50] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.898683][T18074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.901334][T18077] netlink: 'syz.0.2815': attribute type 2 has an invalid length. [ 471.927124][T18074] bond11: (slave bond0): making interface the new active one [ 471.930697][T18074] bond11: (slave bond0): Enslaving as an active interface with an up link [ 471.931463][T12153] syz1: Port: 1 Link ACTIVE [ 472.115777][T18069] bond11 (unregistering): (slave bond0): Releasing active interface [ 472.119448][T18069] bond11 (unregistering): Released all slaves [ 472.193709][T18077] : entered promiscuous mode [ 472.201323][T12150] syz1: Port: 1 Link DOWN [ 472.204677][T12900] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.193733][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 473.195737][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 473.829063][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 474.471301][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 475.270671][T18100] erspan0: entered promiscuous mode [ 475.272355][T18100] vlan2: entered promiscuous mode [ 475.301354][T18106] veth0: entered promiscuous mode [ 475.315290][T18106] veth0: left promiscuous mode [ 475.426493][T18108] __nla_validate_parse: 12 callbacks suppressed [ 475.426512][T18108] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2823'. [ 475.748268][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 475.748451][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 476.023415][T18131] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2829'. [ 476.023450][T18131] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2829'. [ 476.088545][T18136] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2828'. [ 476.088579][T18136] netlink: 'syz.3.2828': attribute type 8 has an invalid length. [ 476.088591][T18136] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2828'. [ 476.149111][T18142] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2828'. [ 476.153201][T18142] netlink: 'syz.3.2828': attribute type 8 has an invalid length. [ 476.153219][T18142] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2828'. [ 476.204107][T18142] FAULT_INJECTION: forcing a failure. [ 476.204107][T18142] name failslab, interval 1, probability 0, space 0, times 0 [ 476.204136][T18142] CPU: 1 UID: 0 PID: 18142 Comm: syz.3.2828 Not tainted syzkaller #0 PREEMPT(full) [ 476.204157][T18142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 476.204168][T18142] Call Trace: [ 476.204176][T18142] [ 476.204184][T18142] dump_stack_lvl+0xe8/0x150 [ 476.204217][T18142] should_fail_ex+0x410/0x560 [ 476.204247][T18142] should_failslab+0xa8/0x100 [ 476.204288][T18142] __kmalloc_cache_noprof+0xa3/0x600 [ 476.204305][T18142] ? rcu_is_watching+0x16/0xb0 [ 476.204334][T18142] ? __hw_addr_create+0x62/0x240 [ 476.204358][T18142] ? __hw_addr_create+0x62/0x240 [ 476.204390][T18142] __hw_addr_create+0x62/0x240 [ 476.204418][T18142] __hw_addr_add_ex+0x1ce/0x520 [ 476.204450][T18142] dev_addr_init+0x15a/0x240 [ 476.204478][T18142] ? __pfx_dev_addr_init+0x10/0x10 [ 476.204507][T18142] ? __kvmalloc_node_noprof+0x345/0x820 [ 476.204538][T18142] alloc_netdev_mqs+0x2b4/0x12a0 [ 476.204555][T18142] ? __pfx_snprintf+0x10/0x10 [ 476.204575][T18142] ? __pfx_hsr_dev_setup+0x10/0x10 [ 476.204600][T18142] rtnl_create_link+0x321/0xd70 [ 476.204625][T18142] rtnl_newlink_create+0x258/0x7b0 [ 476.204659][T18142] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 476.204688][T18142] ? __pfx___mutex_lock+0x10/0x10 [ 476.204722][T18142] ? ns_capable+0x89/0xe0 [ 476.204751][T18142] rtnl_newlink+0x167a/0x1c30 [ 476.204813][T18142] ? __pfx_rtnl_newlink+0x10/0x10 [ 476.204833][T18142] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 476.204850][T18142] ? netlink_deliver_tap+0x19c/0x1b0 [ 476.204866][T18142] ? netlink_unicast+0x781/0x940 [ 476.204890][T18142] ? netlink_sendmsg+0x813/0xb40 [ 476.204907][T18142] ? sock_sendmsg_nosec+0x13a/0x180 [ 476.204925][T18142] ? ____sys_sendmsg+0x54e/0x850 [ 476.204948][T18142] ? ___sys_sendmsg+0x2a5/0x360 [ 476.204971][T18142] ? __sys_sendmmsg+0x273/0x4d0 [ 476.204994][T18142] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 476.205017][T18142] ? do_syscall_64+0x166/0x520 [ 476.205040][T18142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.205095][T18142] ? kasan_quarantine_put+0xbb/0x1f0 [ 476.205115][T18142] ? lockdep_hardirqs_on+0x7b/0x110 [ 476.205144][T18142] ? nlmon_xmit+0xb0/0x100 [ 476.205288][T18142] ? kmem_cache_free+0x182/0x650 [ 476.205324][T18142] ? __lock_acquire+0x747/0x2de0 [ 476.205352][T18142] ? __dev_queue_xmit+0x29b/0x3820 [ 476.205413][T18142] ? __local_bh_enable_ip+0xd6/0x140 [ 476.205437][T18142] ? lockdep_hardirqs_on+0x7b/0x110 [ 476.205488][T18142] ? __pfx_rtnl_newlink+0x10/0x10 [ 476.205510][T18142] rtnetlink_rcv_msg+0x802/0xc00 [ 476.205537][T18142] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 476.205560][T18142] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 476.205587][T18142] ? __copy_skb_header+0xa3/0x4a0 [ 476.205625][T18142] netlink_rcv_skb+0x226/0x4a0 [ 476.205646][T18142] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 476.205671][T18142] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 476.205704][T18142] ? netlink_deliver_tap+0x2e/0x1b0 [ 476.205723][T18142] ? netlink_deliver_tap+0x2e/0x1b0 [ 476.205748][T18142] netlink_unicast+0x7bd/0x940 [ 476.205786][T18142] netlink_sendmsg+0x813/0xb40 [ 476.205816][T18142] ? __pfx_netlink_sendmsg+0x10/0x10 [ 476.205844][T18142] ? apparmor_socket_sendmsg+0x98/0x360 [ 476.205868][T18142] ? __pfx_netlink_sendmsg+0x10/0x10 [ 476.205886][T18142] sock_sendmsg_nosec+0x13a/0x180 [ 476.205910][T18142] ____sys_sendmsg+0x54e/0x850 [ 476.205942][T18142] ? __pfx_____sys_sendmsg+0x10/0x10 [ 476.205978][T18142] ? import_iovec+0x73/0xa0 [ 476.206006][T18142] ___sys_sendmsg+0x2a5/0x360 [ 476.206031][T18142] ? __lock_acquire+0x747/0x2de0 [ 476.206055][T18142] ? __pfx____sys_sendmsg+0x10/0x10 [ 476.206086][T18142] ? kstrtouint+0x6e/0xe0 [ 476.206134][T18142] ? __fget_files+0x2a/0x420 [ 476.206158][T18142] ? __fget_files+0x3a2/0x420 [ 476.206194][T18142] __sys_sendmmsg+0x273/0x4d0 [ 476.206225][T18142] ? __pfx___sys_sendmmsg+0x10/0x10 [ 476.206262][T18142] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 476.206302][T18142] ? ksys_write+0x242/0x270 [ 476.206342][T18142] ? __pfx_ksys_write+0x10/0x10 [ 476.206376][T18142] __x64_sys_sendmmsg+0xa0/0xc0 [ 476.206403][T18142] do_syscall_64+0x166/0x520 [ 476.206424][T18142] ? trace_irq_disable+0x3b/0x140 [ 476.206442][T18142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.206460][T18142] ? clear_bhb_loop+0x70/0xc0 [ 476.206481][T18142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.206498][T18142] RIP: 0033:0x7f831c39e159 [ 476.206516][T18142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.206531][T18142] RSP: 002b:00007f831d21f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 476.206550][T18142] RAX: ffffffffffffffda RBX: 00007f831c626090 RCX: 00007f831c39e159 [ 476.206564][T18142] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000005 [ 476.206576][T18142] RBP: 00007f831d21f090 R08: 0000000000000000 R09: 0000000000000000 [ 476.206587][T18142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 476.206597][T18142] R13: 00007f831c626128 R14: 00007f831c626090 R15: 00007ffc24d493a8 [ 476.206630][T18142] [ 476.757964][T18153] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2834'. [ 476.788975][T18153] ip6tnl1: entered allmulticast mode [ 477.037494][T18160] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2837'. [ 477.232278][T18160] veth3: entered allmulticast mode [ 477.256463][T18173] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2840'. [ 477.259297][T18173] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 478.396528][ T5628] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 478.403007][ T5628] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 478.405410][ T5628] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 478.411264][ T5628] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 478.414872][ T5628] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 478.798611][T18212] bridge0: port 3(syz_tun) entered blocking state [ 478.798721][T18212] bridge0: port 3(syz_tun) entered disabled state [ 478.798905][T18212] syz_tun: entered allmulticast mode [ 478.803538][T18212] syz_tun: entered promiscuous mode [ 478.835735][T18214] syzkaller0: left promiscuous mode [ 478.835754][T18214] syzkaller0: left allmulticast mode [ 478.884151][T18217] tipc: Started in network mode [ 478.884177][T18217] tipc: Node identity 92066beac969, cluster identity 4711 [ 478.899524][T18217] tipc: Enabled bearer , priority 0 [ 479.043488][T18217] tipc: Disabling bearer [ 479.391769][T18238] netlink: 'syz.0.2854': attribute type 18 has an invalid length. [ 479.394153][T18239] netlink: 'syz.0.2854': attribute type 18 has an invalid length. [ 480.046216][T18267] xt_IDLETIMER: label is empty or not nul-terminated [ 480.265373][T18260] bridge1: entered allmulticast mode [ 480.544567][ T5628] Bluetooth: hci7: command tx timeout [ 480.866417][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 480.866604][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 481.022340][T18301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.099319][T18309] __nla_validate_parse: 11 callbacks suppressed [ 481.099340][T18309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2870'. [ 481.099368][T18309] netlink: 'syz.0.2870': attribute type 8 has an invalid length. [ 481.099380][T18309] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2870'. [ 481.953208][T18326] netlink: 68756 bytes leftover after parsing attributes in process `syz.3.2875'. [ 481.983962][T18331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2873'. [ 481.984042][T18331] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2873'. [ 482.146293][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 482.262081][T18338] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2878'. [ 482.311246][T18341] netlink: 'syz.3.2877': attribute type 21 has an invalid length. [ 482.337337][T18341] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2877'. [ 482.337372][T18341] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2877'. [ 482.623317][T18205] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.623426][T18205] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.623560][T18205] bridge_slave_0: entered allmulticast mode [ 482.631588][ T5628] Bluetooth: hci7: command tx timeout [ 482.657436][T18205] bridge_slave_0: entered promiscuous mode [ 482.662137][T18205] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.662235][T18205] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.662625][T18205] bridge_slave_1: entered allmulticast mode [ 482.668400][T18205] bridge_slave_1: entered promiscuous mode [ 482.888134][T18205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.928516][T18205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.050307][T18205] team0: Port device team_slave_0 added [ 483.063595][T18205] team0: Port device team_slave_1 added [ 483.085190][T18360] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2883'. [ 483.331658][T18367] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 483.333313][T18367] team0: Device ipvlan2 is already an upper device of the team interface [ 483.428133][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 483.460795][T18205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.460812][T18205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.460835][T18205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.527860][T18205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.527876][T18205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.527898][T18205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.668153][T18380] rt_mt6_check: 23 callbacks suppressed [ 483.668172][T18380] ip6t_rt: unknown flags 1F [ 483.794079][T18205] hsr_slave_0: entered promiscuous mode [ 483.801789][T18205] hsr_slave_1: entered promiscuous mode [ 483.803751][T18205] debugfs: 'hsr0' already exists in 'hsr' [ 483.803770][T18205] Cannot create hsr debugfs directory [ 484.155640][T18391] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2889'. [ 484.159017][T18390] netlink: 'syz.5.2889': attribute type 83 has an invalid length. [ 484.704624][ T5628] Bluetooth: hci7: command tx timeout [ 485.984456][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 486.013484][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 486.013687][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 486.013855][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 486.014018][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 486.014186][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 486.014403][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 486.014559][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 486.014746][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 486.630856][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 486.784401][ T5628] Bluetooth: hci7: command tx timeout [ 487.825901][T18426] __nla_validate_parse: 1 callbacks suppressed [ 487.825920][T18426] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2896'. [ 487.958385][T18435] ip6tnl1: left allmulticast mode [ 487.959581][T18435] bridge1: left allmulticast mode [ 488.038916][T18425] xt_CT: No such helper "snmp" [ 488.071634][T18435] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2895'. [ 488.343069][T18205] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.587648][T18205] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.777695][T18205] bond0: (slave netdevsim1): Releasing backup interface [ 488.842787][T18205] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.073819][T18442] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 489.101133][T18205] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.147858][T18469] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2902'. [ 489.734817][T18485] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2905'. [ 489.748407][T18485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.770286][T18205] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 489.811001][T18205] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 489.813946][T18205] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 489.889501][T18205] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 489.918443][T18487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2906'. [ 489.918465][T18487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2906'. [ 489.957415][T18205] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 489.999420][T18205] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 490.003886][T18205] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 490.040177][T18205] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 490.092395][T18475] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2904'. [ 490.092977][T18475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2904'. [ 490.220938][T18205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.254552][T18205] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.282749][T18056] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.282860][T18056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.330114][T18056] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.330215][T18056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.423044][T18497] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 490.803248][T18506] netlink: 'syz.5.2909': attribute type 1 has an invalid length. [ 491.011512][T18506] 8021q: adding VLAN 0 to HW filter on device bond1 [ 491.111007][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 491.111198][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 491.111382][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 491.111539][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 491.111703][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 491.111879][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 491.112032][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 491.420815][T18518] syzkaller0: entered promiscuous mode [ 491.420837][T18518] syzkaller0: entered allmulticast mode [ 492.111567][T18205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.201758][T18563] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 492.265247][T18205] veth0_vlan: entered promiscuous mode [ 492.291192][T18205] veth1_vlan: entered promiscuous mode [ 492.418200][T18205] veth0_macvtap: entered promiscuous mode [ 492.471656][T18205] veth1_macvtap: entered promiscuous mode [ 492.507625][T18571] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2920'. [ 492.523595][T18583] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2917'. [ 492.544902][T18205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.573815][T18205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.600256][T18056] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.600334][T18056] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.600364][T18056] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.005185][T12900] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.200199][T18594] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2925'. [ 493.207636][ T6161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.207654][ T6161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.247945][ T5628] block nbd4: Receive control failed (result -32) [ 493.317547][T12900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.317561][T12900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.030303][T18624] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2929'. [ 494.077565][T18627] x_tables: duplicate entry at hook 1 [ 494.275881][T18631] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2930'. [ 494.374485][T18627] netlink: 'syz.5.2930': attribute type 1 has an invalid length. [ 495.341094][T18667] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2940'. [ 495.341336][T18666] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2941'. [ 495.341373][T18666] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2941'. [ 495.394869][T18665] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2941'. [ 495.534901][T18677] tipc: Started in network mode [ 495.534930][T18677] tipc: Node identity 26de8feb73b3, cluster identity 4711 [ 495.535073][T18677] tipc: Enabled bearer , priority 1 [ 495.539083][T18677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.590310][T18663] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2942'. [ 495.590637][T18663] unsupported nlmsg_type 40 [ 495.602283][T18682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.696062][T18677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.780934][T18676] tipc: Resetting bearer [ 495.876658][T18676] tipc: Disabling bearer [ 496.124730][T18684] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2944'. [ 496.217189][T18690] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2946'. [ 496.230130][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 496.230297][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 496.230479][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 496.230662][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 496.230829][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 496.230971][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 498.362504][T18759] block nbd5: server does not support multiple connections per device. [ 498.392964][T18759] block nbd5: shutting down sockets [ 498.496752][T18760] ovs-s!!: entered promiscuous mode [ 498.958651][T18788] __nla_validate_parse: 3 callbacks suppressed [ 498.958678][T18788] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2967'. [ 499.038420][T18791] netlink: 'syz.5.2969': attribute type 9 has an invalid length. [ 499.247493][T18800] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2970'. [ 499.899335][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 499.903001][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 499.920813][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 499.933245][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 499.942372][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 499.943168][T18814] netlink: 'syz.0.2975': attribute type 10 has an invalid length. [ 499.943969][T18814] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 499.967770][T18814] team0: Port device netdevsim1 added [ 500.089483][T18814] netlink: 'syz.0.2975': attribute type 10 has an invalid length. [ 500.109686][T18815] netlink: 'syz.0.2975': attribute type 10 has an invalid length. [ 500.273796][T18814] team0: Port device netdevsim1 removed [ 500.304210][T18814] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 500.441385][T18815] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 500.762704][T18843] sctp: [Deprecated]: syz.2.2981 (pid 18843) Use of int in max_burst socket option. [ 500.762704][T18843] Use struct sctp_assoc_value instead [ 501.389752][T12149] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 501.405456][T18880] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 501.627357][T18871] sctp: [Deprecated]: syz.2.2984 (pid 18871) Use of int in max_burst socket option deprecated. [ 501.627357][T18871] Use struct sctp_assoc_value instead [ 502.074749][ T5628] Bluetooth: hci1: command tx timeout [ 502.158391][T18910] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2992'. [ 502.160352][T18910] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2992'. [ 502.242739][T18910] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2992'. [ 502.859291][T18936] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2997'. [ 502.859328][T18936] netlink: 'syz.6.2997': attribute type 8 has an invalid length. [ 502.859340][T18936] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2997'. [ 503.004138][T18938] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2997'. [ 503.004173][T18938] netlink: 'syz.6.2997': attribute type 8 has an invalid length. [ 503.004197][T18938] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2997'. [ 503.167693][T18947] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2999'. [ 503.483351][T18958] netlink: 'syz.5.3002': attribute type 21 has an invalid length. [ 504.144894][ T5628] Bluetooth: hci1: command tx timeout [ 504.181468][T18986] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 504.183824][T18991] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 504.229431][T18996] __nla_validate_parse: 6 callbacks suppressed [ 504.229451][T18996] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3010'. [ 504.229475][T18996] netlink: 'syz.6.3010': attribute type 8 has an invalid length. [ 504.229488][T18996] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3010'. [ 504.277099][T18988] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3010'. [ 504.277134][T18988] netlink: 'syz.6.3010': attribute type 8 has an invalid length. [ 504.277146][T18988] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3010'. [ 504.583951][T19007] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3013'. [ 504.583974][T19007] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3013'. [ 504.599469][T18816] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.599871][T18816] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.600097][T18816] bridge_slave_0: entered allmulticast mode [ 504.605355][T18816] bridge_slave_0: entered promiscuous mode [ 504.614116][T18816] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.615914][T18816] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.616050][T18816] bridge_slave_1: entered allmulticast mode [ 504.624932][T18816] bridge_slave_1: entered promiscuous mode [ 504.860241][T19007] vlan0: entered promiscuous mode [ 505.008573][T19010] bond1: entered promiscuous mode [ 505.008598][T19010] bond1: entered allmulticast mode [ 505.009465][T19010] 8021q: adding VLAN 0 to HW filter on device bond1 [ 505.046090][T18816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.046962][T19026] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3016'. [ 505.058547][T18816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.146576][T18816] team0: Port device team_slave_0 added [ 505.149973][T18816] team0: Port device team_slave_1 added [ 505.192639][T18816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.192656][T18816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.192677][T18816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.229005][T18816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.229021][T18816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.229043][T18816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.370229][T19029] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3017'. [ 505.370304][T19029] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3017'. [ 505.404916][T19033] geneve2: entered promiscuous mode [ 505.438551][T18816] hsr_slave_0: entered promiscuous mode [ 505.439567][T18816] hsr_slave_1: entered promiscuous mode [ 505.440410][T18816] debugfs: 'hsr0' already exists in 'hsr' [ 505.440430][T18816] Cannot create hsr debugfs directory [ 505.465724][T18056] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.466494][ T6156] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.466530][ T6156] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.466562][ T6156] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.940906][T19046] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3022'. [ 506.141046][T18816] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.141082][T18816] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.167895][T19049] veth0_vlan: left promiscuous mode [ 506.167919][T19049] veth0_vlan: entered promiscuous mode [ 506.167932][T19049] veth0_vlan: entered allmulticast mode [ 506.225032][ T5628] Bluetooth: hci1: command tx timeout [ 506.291112][T18816] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.291147][T18816] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.470688][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 506.470871][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 506.471046][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 506.471210][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 506.471362][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 506.471516][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 506.642656][T18816] bond0: (slave netdevsim1): Releasing backup interface [ 506.660946][T18816] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.660979][T18816] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.662101][T19069] netlink: 'syz.0.3028': attribute type 1 has an invalid length. [ 507.079066][T19085] dvmrp0: entered allmulticast mode [ 507.109974][T19085] dvmrp1: entered allmulticast mode [ 507.111043][T19085] dvmrp0: left allmulticast mode [ 507.111147][T19085] dvmrp1: left allmulticast mode [ 507.560591][T19092] macsec0: entered promiscuous mode [ 507.621614][T18816] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.621648][T18816] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.889372][T19100] IPv6: NLM_F_CREATE should be specified when creating new route [ 507.889457][T19100] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 507.889467][T19100] IPv6: NLM_F_CREATE should be set when creating new route [ 507.889507][T19100] IPv6: NLM_F_CREATE should be set when creating new route [ 507.889531][T19100] IPv6: NLM_F_CREATE should be set when creating new route [ 507.957972][T19084] macsec0: left promiscuous mode [ 508.305568][ T5628] Bluetooth: hci1: command tx timeout [ 508.862778][T18816] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 508.884382][T18816] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 508.885255][T18816] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 508.914061][T18816] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 508.932990][T18816] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 508.953392][T18816] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 508.954235][T18816] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 508.972430][T18816] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 509.020189][T19126] batman_adv: batadv0: Adding interface: syzkaller0 [ 509.020205][T19126] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.020232][T19126] batman_adv: batadv0: Interface activated: syzkaller0 [ 509.380146][T19123] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 509.458726][T19123] batman_adv: batadv0: Removing interface: syzkaller0 [ 509.459907][T19155] xt_CONNSECMARK: invalid mode: 254 [ 509.543137][T18816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.587843][T18816] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.618108][ T6152] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.618219][ T6152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.653149][ T6152] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.653270][ T6152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.694034][T19161] __nla_validate_parse: 5 callbacks suppressed [ 509.694054][T19161] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3045'. [ 510.044805][T19172] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3047'. [ 510.044836][T19172] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3047'. [ 510.160964][T19180] syzkaller1: entered promiscuous mode [ 510.160986][T19180] syzkaller1: entered allmulticast mode [ 510.207166][T19180] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3050'. [ 510.436397][T19190] ip_tables: iptables: counters copy to user failed while replacing table [ 510.498826][T19192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3052'. [ 510.709486][T19199] netlink: 'syz.2.3054': attribute type 1 has an invalid length. [ 510.843751][T19209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3056'. [ 510.844232][T19207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3054'. [ 510.921662][T19213] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3054'. [ 510.942201][T19199] bond1: entered promiscuous mode [ 510.942627][T19199] 8021q: adding VLAN 0 to HW filter on device bond1 [ 510.964637][T19205] netlink: 'syz.5.3055': attribute type 1 has an invalid length. [ 511.013345][T19204] 8021q: adding VLAN 0 to HW filter on device bond1 [ 511.013718][T19204] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 511.013736][T19204] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 511.058226][T19204] bond1: (slave gre1): making interface the new active one [ 511.058258][T19204] gre1: entered promiscuous mode [ 511.078778][T19204] bond1: (slave gre1): Enslaving as an active interface with an up link [ 511.097922][T19204] netlink: 'syz.2.3054': attribute type 11 has an invalid length. [ 511.142762][T19207] bond1 (unregistering): (slave gre1): Releasing backup interface [ 511.142787][T19207] gre1: left promiscuous mode [ 511.160303][T19207] bond1 (unregistering): Released all slaves [ 511.600780][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 511.600966][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 511.601133][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 511.601330][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 511.601502][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 511.601699][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 511.848511][T18816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.063019][T18816] veth0_vlan: entered promiscuous mode [ 512.101931][T18816] veth1_vlan: entered promiscuous mode [ 512.229905][T18816] veth0_macvtap: entered promiscuous mode [ 512.243314][T18816] veth1_macvtap: entered promiscuous mode [ 512.302281][T18816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.366466][T18816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.435721][ T6156] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.466972][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.467932][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.561573][ T6143] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.620964][T12900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.621015][T12900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.702812][ T6156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.702832][ T6156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.384653][T19283] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3065'. [ 513.516373][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 514.156361][T19289] syzkaller0: entered promiscuous mode [ 514.156383][T19289] syzkaller0: entered allmulticast mode [ 514.190232][T19315] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3068'. [ 514.192660][T19315] vlan0: entered promiscuous mode [ 514.417227][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 514.423573][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 514.436166][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 514.449908][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 514.450538][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 514.706508][T19338] __nla_validate_parse: 3 callbacks suppressed [ 514.706527][T19338] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3071'. [ 514.921674][T19342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3071'. [ 515.126807][T19347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3072'. [ 515.126930][T19347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.204844][T19347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.336411][T19355] netlink: 'syz.2.3074': attribute type 1 has an invalid length. [ 515.519739][T19355] bond1: entered promiscuous mode [ 515.520434][T19355] bond1: entered allmulticast mode [ 515.521071][T19355] 8021q: adding VLAN 0 to HW filter on device bond1 [ 515.575660][T19366] nbd: socks must be embedded in a SOCK_ITEM attr [ 515.808977][ T7633] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.809012][ T7633] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 37287 - 0 [ 516.008081][T19372] bond1: Removing last arp target with arp_interval on [ 516.251636][T19385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3081'. [ 516.418594][ T7633] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.418629][ T7633] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 37287 - 0 [ 516.544655][ T5628] Bluetooth: hci3: command tx timeout [ 516.691761][ T7633] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.691796][ T7633] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 37287 - 0 [ 516.708852][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 516.709034][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 516.709198][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 516.709362][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 516.709526][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 517.161891][ T7633] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.161926][ T7633] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 37287 - 0 [ 517.214461][T19410] netlink: 'syz.6.3085': attribute type 4 has an invalid length. [ 517.282339][T19408] netlink: 'syz.6.3085': attribute type 4 has an invalid length. [ 517.453139][T19415] netlink: 'syz.2.3086': attribute type 16 has an invalid length. [ 517.453161][T19415] netlink: 'syz.2.3086': attribute type 17 has an invalid length. [ 517.630858][T19415] vlan0: left promiscuous mode [ 517.789783][T19415] bond1: left promiscuous mode [ 517.789810][T19415] bond1: left allmulticast mode [ 518.200681][T19429] netlink: 'syz.6.3089': attribute type 1 has an invalid length. [ 518.279678][T19427] bond2: option arp_all_targets: invalid value (3) [ 518.296771][T19427] bond2 (unregistering): Released all slaves [ 518.624817][ T5628] Bluetooth: hci3: command tx timeout [ 518.629910][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 518.746918][T19441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3091'. [ 518.746941][T19441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3091'. [ 519.034553][T19317] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.034724][T19317] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.034855][T19317] bridge_slave_0: entered allmulticast mode [ 519.036656][T19317] bridge_slave_0: entered promiscuous mode [ 519.108723][T19317] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.108913][T19317] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.109049][T19317] bridge_slave_1: entered allmulticast mode [ 519.110853][T19317] bridge_slave_1: entered promiscuous mode [ 519.170295][T19317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.173317][T19317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.227477][T19317] team0: Port device team_slave_0 added [ 519.230317][T19317] team0: Port device team_slave_1 added [ 519.275200][T19317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.275216][T19317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.275237][T19317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.277402][T19317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.277414][T19317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.277435][T19317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.928057][ T7633] batman_adv: batadv0: Removing interface: ip6gretap1 [ 520.038147][T19480] atomic_op ffff88801eef79e0 conn xmit_atomic 0000000000000000 [ 520.391007][ T7633] bond10 (unregistering): (slave gretap0): Releasing active interface [ 520.705730][ T5628] Bluetooth: hci3: command tx timeout [ 520.752303][ T7633] bond5 (unregistering): (slave geneve4): Releasing active interface [ 520.874783][ T7633] bond0 (unregistering): Released all slaves [ 520.881744][ T7633] bond1 (unregistering): Released all slaves [ 520.915178][ T7633] bond2 (unregistering): Released all slaves [ 520.940186][ T7633] bond3 (unregistering): Released all slaves [ 520.970878][ T7637] smbdirect: ib_dev[syz1] removed [ 520.973748][ T7633] bond4 (unregistering): (slave veth7): Releasing backup interface [ 520.992995][ T7633] bond4 (unregistering): Released all slaves [ 521.043235][ T7633] bond5 (unregistering): Released all slaves [ 521.088765][ T7633] bond6 (unregistering): Released all slaves [ 521.122188][ T7633] bond7 (unregistering): Released all slaves [ 521.142554][ T7633] bond8 (unregistering): Released all slaves [ 521.162671][ T7633] bond9 (unregistering): Released all slaves [ 521.189621][ T7633] bond10 (unregistering): Released all slaves [ 521.217768][ T7633] bond11 (unregistering): Released all slaves [ 521.320161][T19459] vlan2: entered promiscuous mode [ 521.320184][T19459] team0: entered promiscuous mode [ 521.320196][T19459] team_slave_0: entered promiscuous mode [ 521.320421][T19459] team_slave_1: entered promiscuous mode [ 521.376208][T19317] hsr_slave_0: entered promiscuous mode [ 521.378377][T19317] hsr_slave_1: entered promiscuous mode [ 521.380689][T19317] debugfs: 'hsr0' already exists in 'hsr' [ 521.380707][T19317] Cannot create hsr debugfs directory [ 521.404632][T19461] netlink: 280 bytes leftover after parsing attributes in process `syz.6.3094'. [ 521.448713][T19476] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3094'. [ 521.480716][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 521.481134][T19485] veth0_to_bond: entered allmulticast mode [ 521.484565][T19478] syzkaller1: entered promiscuous mode [ 521.484583][T19478] syzkaller1: entered allmulticast mode [ 521.503685][T19497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3097'. [ 521.679901][T19500] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3098'. [ 521.695735][ T7633] ovs-s: left promiscuous mode [ 521.829955][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 521.830129][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 521.830274][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 521.830406][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 521.903456][ T7633] : left promiscuous mode [ 521.951816][T19509] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3100'. [ 522.106532][T19505] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.107147][T19505] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.406824][T19505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.440817][T19505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.724898][ T7637] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.724932][ T7637] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.724995][ T7637] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.725018][ T7637] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.725049][ T7637] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.725071][ T7637] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.725103][ T7637] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.725125][ T7637] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.726802][ T7633] ovs-s!!: left promiscuous mode [ 522.784817][ T5628] Bluetooth: hci3: command tx timeout [ 522.873945][T19528] netlink: 'syz.6.3101': attribute type 1 has an invalid length. [ 522.873960][T19528] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3101'. [ 522.900190][T19528] netlink: 'syz.6.3101': attribute type 3 has an invalid length. [ 522.920756][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 523.053176][ T7633] tipc: Disabling bearer [ 523.078007][ T7633] tipc: Left network mode [ 523.698723][T19532] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3102'. [ 523.698794][T19532] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3102'. [ 524.673660][T19584] gre1: entered promiscuous mode [ 525.061594][T19599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3110'. [ 525.289383][T19603] bond_slave_0: entered promiscuous mode [ 525.289404][T19603] bond_slave_0: entered allmulticast mode [ 525.769619][T19613] Bluetooth: hci0: unsupported parameter 5161 [ 525.769642][T19613] Bluetooth: hci0: unsupported parameter 8192 [ 525.769664][T19613] Bluetooth: hci0: unsupported parameter 5161 [ 525.769676][T19613] Bluetooth: hci0: unsupported parameter 8192 [ 526.155432][T19619] ipt_ECN: cannot use operation on non-tcp rule [ 526.262747][T19624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3116'. [ 526.262821][T19624] netlink: 'syz.3.3116': attribute type 1 has an invalid length. [ 526.952538][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 526.952743][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 527.355547][T19317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 527.405182][T19317] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 527.480803][T19317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 527.517868][T19317] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 527.529283][T19317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 527.563227][T19317] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 527.628295][T19317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 527.676212][T19317] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 529.006469][T19693] __nla_validate_parse: 1 callbacks suppressed [ 529.006487][T19693] netlink: 3472 bytes leftover after parsing attributes in process `syz.6.3124'. [ 529.273139][ T7633] hsr_slave_0: left promiscuous mode [ 530.146269][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 530.744007][T19711] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 530.781966][T19317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.827330][T19317] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.875066][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.875196][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.022236][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.022336][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.082646][T19730] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3130'. [ 531.247199][T19730] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3130'. [ 531.257316][T19730] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3130'. [ 531.525206][T19737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3131'. [ 531.944156][ T7633] IPVS: stop unused estimator thread 0... [ 532.067172][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 532.689076][T19782] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 532.839158][T19786] tc_dump_action: action bad kind [ 533.117115][T19317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.421719][T19317] veth0_vlan: entered promiscuous mode [ 533.491150][T19317] veth1_vlan: entered promiscuous mode [ 533.541623][T19813] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3142'. [ 533.761012][T19317] veth0_macvtap: entered promiscuous mode [ 533.787745][T19317] veth1_macvtap: entered promiscuous mode [ 533.830152][T19317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.852215][T19317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.935351][ T7633] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.935396][ T7633] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.935427][ T7633] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.935458][ T7633] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.055623][T19833] syzkaller1: entered promiscuous mode [ 534.055646][T19833] syzkaller1: entered allmulticast mode [ 534.127228][T19839] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3147'. [ 534.272627][T19829] netlink: 'syz.5.3145': attribute type 4 has an invalid length. [ 534.272658][T19829] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3145'. [ 534.383302][T19829] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 534.434923][T19861] netlink: 'syz.2.3149': attribute type 1 has an invalid length. [ 534.491425][ T6158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.491446][ T6158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.551305][T19865] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3149'. [ 534.578749][T19839] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3147'. [ 534.647044][T19865] 8021q: adding VLAN 0 to HW filter on device bond2 [ 534.745811][T19870] 8021q: adding VLAN 0 to HW filter on device bond2 [ 534.792672][T19870] bond2: (slave geneve2): making interface the new active one [ 534.801848][T19870] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 534.828251][ T6143] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 534.835059][ T6143] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 534.864064][ T6157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.864093][ T6157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.927217][ T59] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 534.928847][ T59] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 535.064204][T19891] netlink: 'syz.3.3151': attribute type 16 has an invalid length. [ 535.064225][T19891] netlink: 'syz.3.3151': attribute type 17 has an invalid length. [ 535.157407][T19891] bond_slave_0: left promiscuous mode [ 535.157449][T19891] bond_slave_0: left allmulticast mode [ 535.221490][T19891] 8021q: adding VLAN 0 to HW filter on device bond1 [ 535.233780][T19891] gre1: left promiscuous mode [ 535.325126][T19903] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3154'. [ 535.325850][T19903] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3154'. [ 535.384007][T19906] netlink: 100 bytes leftover after parsing attributes in process `syz.6.3154'. [ 536.475486][T19942] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 536.752561][T19954] syzkaller0: entered promiscuous mode [ 536.752584][T19954] syzkaller0: entered allmulticast mode [ 536.758820][T19954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3162'. [ 537.073545][T19957] tipc: Started in network mode [ 537.073591][T19957] tipc: Node identity , cluster identity 4711 [ 537.073607][T19957] tipc: Failed to obtain node identity [ 537.073632][T19957] tipc: Enabling of bearer rejected, failed to enable media [ 537.199832][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 537.200043][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 537.200411][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 537.200723][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 539.623986][T20006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3168'. [ 539.771093][T20007] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3167'. [ 539.837086][T20007] syzkaller1: entered promiscuous mode [ 539.837112][T20007] syzkaller1: entered allmulticast mode [ 539.860903][T20007] xt_hashlimit: max too large, truncated to 1048576 [ 539.861020][T20007] xt_hashlimit: overflow, try lower: 0/0 [ 540.129615][T20025] netlink: 868 bytes leftover after parsing attributes in process `syz.3.3172'. [ 540.131007][T20020] netlink: 'syz.0.3171': attribute type 5 has an invalid length. [ 540.276999][T20029] netlink: 'syz.0.3173': attribute type 16 has an invalid length. [ 540.689421][T20042] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3174'. [ 540.800550][T20057] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3177'. [ 541.202806][T20074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3183'. [ 541.606723][T20097] tipc: Enabling of bearer rejected, failed to enable media [ 542.063671][T20105] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3190'. [ 542.163238][T20107] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3190'. [ 542.268027][T20105] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3190'. [ 542.306537][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 542.308621][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 542.308773][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 542.308911][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 542.380778][T20107] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3190'. [ 544.783638][T20134] batadv0: entered promiscuous mode [ 544.784026][T20134] macvlan2: entered promiscuous mode [ 544.789736][T20136] __nla_validate_parse: 1 callbacks suppressed [ 544.789752][T20136] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3196'. [ 544.789774][T20136] netlink: 'syz.3.3196': attribute type 3 has an invalid length. [ 544.802384][T20134] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 544.803073][T20134] batadv0: left promiscuous mode [ 544.867477][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 545.024086][T20141] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3198'. [ 545.166230][T20147] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3200'. [ 545.272066][T20154] netlink: 5 bytes leftover after parsing attributes in process `syz.6.3202'. [ 545.302822][T20151] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3199'. [ 545.442166][T20154] syzkaller0: entered promiscuous mode [ 545.442187][T20154] syzkaller0: entered allmulticast mode [ 545.533161][T20165] netlink: 'syz.2.3204': attribute type 2 has an invalid length. [ 545.643135][T20173] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3206'. [ 545.789308][T20171] 8021q: adding VLAN 0 to HW filter on device bond1 [ 546.178857][T20200] netlink: 'syz.6.3214': attribute type 1 has an invalid length. [ 546.221223][T20190] syzkaller0: entered promiscuous mode [ 546.221245][T20190] syzkaller0: entered allmulticast mode [ 546.335399][T20200] bond2: entered promiscuous mode [ 546.346895][T20200] 8021q: adding VLAN 0 to HW filter on device bond2 [ 546.409716][T20203] 8021q: adding VLAN 0 to HW filter on device bond2 [ 546.410206][T20203] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 546.410226][T20203] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 546.416450][T20208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3215'. [ 546.431837][T20203] bond2: (slave xfrm1): making interface the new active one [ 546.431856][T20203] xfrm1: entered promiscuous mode [ 546.481543][T20203] xfrm1: left promiscuous mode [ 547.446758][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 547.446910][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 547.447025][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 547.447156][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 547.447289][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 547.447423][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 549.386189][T20205] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3213'. [ 549.766645][T20224] C: renamed from veth1_to_team (while UP) [ 549.770347][T20224] netlink: 'syz.2.3217': attribute type 1 has an invalid length. [ 549.770365][T20224] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3217'. [ 549.770757][T20224] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 549.998108][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 550.031865][T20243] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3221'. [ 550.108871][T20235] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 550.111549][T20249] @0Ù: renamed from bond_slave_1 (while UP) [ 550.741425][T20273] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3226'. [ 550.741449][T20273] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3226'. [ 550.741462][T20273] netlink: 'syz.0.3226': attribute type 6 has an invalid length. [ 550.741474][T20273] netlink: 'syz.0.3226': attribute type 5 has an invalid length. [ 550.741484][T20273] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3226'. [ 550.741673][T20273] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3226'. [ 550.741687][T20273] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3226'. [ 550.741700][T20273] netlink: 'syz.0.3226': attribute type 6 has an invalid length. [ 550.741710][T20273] netlink: 'syz.0.3226': attribute type 5 has an invalid length. [ 550.741720][T20273] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3226'. [ 550.741895][T20273] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3226'. [ 550.741909][T20273] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3226'. [ 550.741921][T20273] netlink: 'syz.0.3226': attribute type 6 has an invalid length. [ 550.741932][T20273] netlink: 'syz.0.3226': attribute type 5 has an invalid length. [ 550.741943][T20273] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3226'. [ 550.742117][T20273] netlink: 'syz.0.3226': attribute type 6 has an invalid length. [ 550.742129][T20273] netlink: 'syz.0.3226': attribute type 5 has an invalid length. [ 550.742312][T20273] netlink: 'syz.0.3226': attribute type 6 has an invalid length. [ 550.742323][T20273] netlink: 'syz.0.3226': attribute type 5 has an invalid length. [ 551.126448][T20289] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.127076][T20289] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.267184][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 551.841223][T20317] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 552.103040][T20327] macvtap1: entered allmulticast mode [ 552.103062][T20327] veth0_to_bridge: entered allmulticast mode [ 552.151864][T20327] veth0_to_bridge: left allmulticast mode [ 552.529532][T20335] x_tables: duplicate underflow at hook 3 [ 552.562991][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 552.563172][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 552.563334][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 552.563530][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 553.842106][T20392] dummy0: entered promiscuous mode [ 553.864745][T20392] macvlan2: entered promiscuous mode [ 553.883986][T20392] dummy0: left promiscuous mode [ 554.466147][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 556.562814][T20411] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 556.596260][T20411] bond3 (unregistering): Released all slaves [ 556.600444][T20426] __nla_validate_parse: 26 callbacks suppressed [ 556.600462][T20426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3253'. [ 556.739905][T20432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3253'. [ 556.774225][T20413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3249'. [ 557.125579][T20433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3253'. [ 557.150504][T20441] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3255'. [ 557.461371][T20445] validate_nla: 7 callbacks suppressed [ 557.461391][T20445] netlink: 'syz.2.3258': attribute type 8 has an invalid length. [ 557.469859][T20445] x_tables: duplicate underflow at hook 1 [ 557.470417][T20445] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3258'. [ 557.680546][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 557.680729][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 557.680888][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 557.681048][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 558.043503][T20466] netlink: 'syz.2.3265': attribute type 49 has an invalid length. [ 558.288326][T20477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3267'. [ 558.498835][T20496] netlink: 136 bytes leftover after parsing attributes in process `syz.5.3271'. [ 558.691177][T20503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3272'. [ 558.691217][T20503] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3272'. [ 558.721866][T20503] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 558.734506][T12904] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 558.734569][T12904] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 558.734608][T12904] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 558.734637][T12904] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 560.128518][T20514] geneve2: entered promiscuous mode [ 561.189612][T20477] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 561.207197][T20516] netlink: 'syz.6.3275': attribute type 10 has an invalid length. [ 561.603023][T20539] tipc: Enabling of bearer rejected, failed to enable media [ 562.427208][T20575] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3284'. [ 562.434172][T20574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3288'. [ 562.624567][T20577] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 562.683921][T20579] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3290'. [ 562.790411][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 562.790573][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 562.790736][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 562.791116][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 563.067820][T20588] ip6gretap1: entered allmulticast mode [ 563.069210][T20588] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 563.069829][T20588] batman_adv: batadv0: Adding interface: ip6gretap1 [ 563.069841][T20588] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.069868][T20588] batman_adv: batadv0: Interface activated: ip6gretap1 [ 563.095161][T20585] netlink: 'syz.2.3292': attribute type 1 has an invalid length. [ 563.095180][T20585] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3292'. [ 563.476383][T20602] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3295'. [ 563.621575][T20608] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3299'. [ 563.813807][T20609] bond2 (unregistering): Released all slaves [ 564.440386][T20635] netlink: 'syz.3.3308': attribute type 2 has an invalid length. [ 564.443974][T20635] 8021q: VLANs not supported on ip6_vti0 [ 564.483701][T20638] tipc: Started in network mode [ 564.483731][T20638] tipc: Node identity fe3258afcf36, cluster identity 4711 [ 564.493925][T20638] tipc: Enabled bearer , priority 0 [ 564.561335][T20638] syzkaller0: entered promiscuous mode [ 564.561360][T20638] syzkaller0: entered allmulticast mode [ 564.562042][T20638] tipc: Resetting bearer [ 564.794172][T20637] tipc: Resetting bearer [ 566.361002][T20674] openvswitch: netlink: nsh attribute has 5 unknown bytes. [ 567.808569][T20637] tipc: Disabling bearer [ 567.909536][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 567.909713][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 567.909866][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 567.910001][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 567.910132][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 568.000071][T20659] syzkaller0: entered promiscuous mode [ 568.000095][T20659] syzkaller0: entered allmulticast mode [ 568.054479][T20681] netlink: 'syz.2.3317': attribute type 1 has an invalid length. [ 568.219925][ T6903] tipc: Node number set to 822368431 [ 568.479280][T20698] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3321'. [ 568.519749][T20685] xt_policy: output policy not valid in PREROUTING and INPUT [ 568.671406][T20704] netlink: 196 bytes leftover after parsing attributes in process `syz.5.3321'. [ 569.985110][ T5628] Bluetooth: hci5: command 0x0406 tx timeout [ 570.740195][T20681] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 571.047499][T20713] syzkaller0: entered promiscuous mode [ 571.047519][T20713] syzkaller0: entered allmulticast mode [ 571.357538][T20724] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3325'. [ 571.357752][T20724] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 571.363288][T20724] 0ªî{X¹¦: entered allmulticast mode [ 571.363709][T20724] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 571.475559][T20728] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 571.477973][T20728] batman_adv: batadv0: Adding interface: gretap1 [ 571.478089][T20728] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.478117][T20728] batman_adv: batadv0: Interface activated: gretap1 [ 571.502475][T20730] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3328'. [ 571.502502][T20730] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3328'. [ 571.773227][T20742] ip_tables: iptables: counters copy to user failed while replacing table [ 571.891673][T20747] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3333'. [ 572.017986][T20757] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3335'. [ 572.248660][T20766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3337'. [ 572.447820][T20773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3340'. [ 572.670729][ C0] vcan0: j1939_tp_rxtimer: 0xffff888048df8000: rx timeout, send abort [ 572.801513][T20752] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 573.033880][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 573.034041][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 573.034188][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 573.034377][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 573.034524][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 573.034662][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 573.034798][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 573.170782][ C0] vcan0: j1939_tp_rxtimer: 0xffff888048df8000: abort rx timeout. Force session deactivation [ 573.174057][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056ec1c00: rx timeout, send abort [ 573.260182][T20792] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 573.326903][T20797] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 573.496063][T20802] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3348'. [ 573.506107][T20801] netlink: 'syz.3.3348': attribute type 1 has an invalid length. [ 573.540492][T20805] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3349'. [ 573.674107][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056ec1c00: abort rx timeout. Force session deactivation [ 573.978857][T20817] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 573.980610][ T7637] IPVS: starting estimator thread 0... [ 574.022680][T20819] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3354'. [ 574.064505][T20822] IPVS: using max 33 ests per chain, 79200 per kthread [ 574.167318][T20827] ipt_REJECT: ECHOREPLY no longer supported. [ 574.181576][T20827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3355'. [ 574.181803][T20827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3355'. [ 574.182012][T20827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3355'. [ 574.182199][T20827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3355'. [ 574.182394][T20827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3355'. [ 574.182604][T20827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3355'. [ 574.182844][T20827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3355'. [ 574.497616][T20840] netlink: 'syz.2.3358': attribute type 2 has an invalid length. [ 575.061429][T20875] xt_connbytes: Forcing CT accounting to be enabled [ 575.354033][T20881] syzkaller0: entered promiscuous mode [ 575.354056][T20881] syzkaller0: entered allmulticast mode [ 576.361291][T20931] netlink: 'syz.3.3375': attribute type 61 has an invalid length. [ 576.361315][T20931] netlink: 'syz.3.3375': attribute type 62 has an invalid length. [ 576.876567][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 577.288948][T20935] ip_tables: iptables: counters copy to user failed while replacing table [ 578.019527][T20934] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 578.159139][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 578.159316][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 578.159465][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 578.823976][T20939] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 579.015216][ T5628] block nbd5: Receive control failed (result -32) [ 579.016375][T18818] block nbd5: Receive control failed (result -32) [ 579.265035][T18818] Bluetooth: hci1: command 0x0401 tx timeout [ 580.224511][T18818] Bluetooth: hci6: command 0x0406 tx timeout [ 581.996638][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 583.278984][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 583.279178][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 585.186164][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 585.835641][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 588.397047][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 588.397220][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 588.397370][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 593.510193][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 593.510352][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 593.510499][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 593.510823][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 596.623620][T20954] netlink: 'syz.5.3383': attribute type 3 has an invalid length. [ 596.623641][T20954] __nla_validate_parse: 95 callbacks suppressed [ 596.623653][T20954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3383'. [ 596.643834][T20953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3382'. [ 596.643858][T20953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.643875][T20953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.690445][T20953] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 596.690468][T20953] batman_adv: batadv0: Removing interface: ip6gretap1 [ 596.849016][T18818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 596.857897][T18818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 596.871802][T18818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 596.883408][T18818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 596.885256][T18818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 597.050532][T20975] netlink: 964 bytes leftover after parsing attributes in process `syz.5.3386'. [ 597.346974][ T32] INFO: task syz.1.2645:17260 blocked for more than 143 seconds. [ 597.346997][ T32] Not tainted syzkaller #0 [ 597.347007][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 597.347015][ T32] task:syz.1.2645 state:D stack:26272 pid:17260 tgid:17253 ppid:5617 task_flags:0x400140 flags:0x00080002 [ 597.347066][ T32] Call Trace: [ 597.347073][ T32] [ 597.347086][ T32] __schedule+0x17db/0x58f0 [ 597.347150][ T32] ? __pfx___schedule+0x10/0x10 [ 597.347184][ T32] ? schedule+0x90/0x2b0 [ 597.347217][ T32] schedule+0x164/0x2b0 [ 597.347243][ T32] schedule_preempt_disabled+0x13/0x30 [ 597.347287][ T32] __mutex_lock+0x7c1/0x1550 [ 597.347319][ T32] ? __mutex_lock+0x5d4/0x1550 [ 597.347348][ T32] ? nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 597.347469][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 597.347503][ T32] ? kernel_text_address+0xa5/0xe0 [ 597.347528][ T32] ? __kernel_text_address+0xd/0x30 [ 597.347548][ T32] ? unwind_get_return_address+0x4d/0x90 [ 597.347575][ T32] nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 597.347608][ T32] ? stack_trace_save+0xa9/0x100 [ 597.347627][ T32] ? __pfx_stack_trace_save+0x10/0x10 [ 597.347648][ T32] ? stack_depot_save_flags+0x33/0x7f0 [ 597.347675][ T32] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 597.347698][ T32] ? kasan_save_track+0x4f/0x80 [ 597.347718][ T32] ? kasan_save_track+0x3e/0x80 [ 597.347735][ T32] ? __kasan_kmalloc+0x93/0xb0 [ 597.347755][ T32] ? __kmalloc_node_track_caller_noprof+0x4b4/0x720 [ 597.347775][ T32] ? __alloc_skb+0x2c1/0x7a0 [ 597.347799][ T32] ? netlink_dump+0x1e7/0xee0 [ 597.347827][ T32] ? __netlink_dump_start+0x589/0x7b0 [ 597.347854][ T32] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 597.347922][ T32] ? genl_rcv_msg+0x5e1/0x7a0 [ 597.347942][ T32] ? netlink_rcv_skb+0x226/0x4a0 [ 597.347959][ T32] ? genl_rcv+0x28/0x40 [ 597.347976][ T32] ? netlink_unicast+0x7bd/0x940 [ 597.348000][ T32] ? netlink_sendmsg+0x813/0xb40 [ 597.348016][ T32] ? sock_sendmsg_nosec+0x13a/0x180 [ 597.348034][ T32] ? ____sys_sendmsg+0x54e/0x850 [ 597.348057][ T32] ? ___sys_sendmsg+0x2a5/0x360 [ 597.348078][ T32] ? __x64_sys_sendmsg+0x1b1/0x290 [ 597.348114][ T32] ? do_syscall_64+0x166/0x520 [ 597.348139][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.348205][ T32] ? rcu_is_watching+0x16/0xb0 [ 597.348228][ T32] ? trace_kmalloc+0x2a/0xf0 [ 597.348251][ T32] ? __kmalloc_node_track_caller_noprof+0x4d2/0x720 [ 597.348272][ T32] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 597.348291][ T32] ? netlink_dump+0x1e7/0xee0 [ 597.348317][ T32] ? netlink_dump+0x1e7/0xee0 [ 597.348352][ T32] genl_dumpit+0x10b/0x1b0 [ 597.348380][ T32] netlink_dump+0x711/0xee0 [ 597.348421][ T32] ? __pfx_netlink_dump+0x10/0x10 [ 597.348462][ T32] ? genl_start+0x497/0x6d0 [ 597.348493][ T32] __netlink_dump_start+0x589/0x7b0 [ 597.348529][ T32] genl_family_rcv_msg_dumpit+0x213/0x310 [ 597.348557][ T32] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 597.348580][ T32] ? genl_get_cmd+0x523/0x960 [ 597.348608][ T32] ? __pfx_genl_start+0x10/0x10 [ 597.348628][ T32] ? __pfx_genl_dumpit+0x10/0x10 [ 597.348649][ T32] ? __pfx_genl_done+0x10/0x10 [ 597.348674][ T32] ? __lock_acquire+0x747/0x2de0 [ 597.348705][ T32] genl_rcv_msg+0x5e1/0x7a0 [ 597.348736][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 597.348758][ T32] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 597.348796][ T32] netlink_rcv_skb+0x226/0x4a0 [ 597.348816][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 597.348840][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 597.348871][ T32] ? down_read+0x2be/0x330 [ 597.348908][ T32] genl_rcv+0x28/0x40 [ 597.348929][ T32] netlink_unicast+0x7bd/0x940 [ 597.348968][ T32] netlink_sendmsg+0x813/0xb40 [ 597.348998][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 597.349027][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 597.349053][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 597.349071][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 597.349096][ T32] ____sys_sendmsg+0x54e/0x850 [ 597.349128][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 597.349163][ T32] ? import_iovec+0x73/0xa0 [ 597.349190][ T32] ___sys_sendmsg+0x2a5/0x360 [ 597.349223][ T32] ? __lock_acquire+0x747/0x2de0 [ 597.349247][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 597.349276][ T32] ? futex_wait+0x2a2/0x390 [ 597.349349][ T32] ? __fget_files+0x2a/0x420 [ 597.349374][ T32] ? __fget_files+0x3a2/0x420 [ 597.349411][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 597.349444][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 597.349494][ T32] do_syscall_64+0x166/0x520 [ 597.349516][ T32] ? trace_irq_disable+0x3b/0x140 [ 597.349536][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.349555][ T32] ? clear_bhb_loop+0x70/0xc0 [ 597.349578][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.349597][ T32] RIP: 0033:0x7f9fd319e159 [ 597.349616][ T32] RSP: 002b:00007f9fd13d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 597.349636][ T32] RAX: ffffffffffffffda RBX: 00007f9fd3426090 RCX: 00007f9fd319e159 [ 597.349650][ T32] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 597.349662][ T32] RBP: 00007f9fd323506b R08: 0000000000000000 R09: 0000000000000000 [ 597.349674][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.349684][ T32] R13: 00007f9fd3426128 R14: 00007f9fd3426090 R15: 00007ffe4b3b9108 [ 597.349722][ T32] [ 597.349844][ T32] [ 597.349844][ T32] Showing all locks held in the system: [ 597.349856][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 597.349950][ T32] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 597.350099][ T32] locks held by kworker/u8:4/59: 2, on CPU#1: [ 597.350112][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 597.350164][ T32] #1: ffffc9000200fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 597.350256][ T32] locks held by getty/5374: 2, on CPU#0: [ 597.350269][ T32] #0: ffff888036c3b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 597.350393][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 597.350452][ T32] locks held by kworker/u8:40/7636: 4, last CPU#0: [ 597.350465][ T32] #0: ffff888076d70940 ((wq_completion)krds_cp_wq#2/1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 597.350516][ T32] #1: ffffc9000209fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 597.350566][ T32] #2: ffff8880574e4f80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 597.350693][ T32] #3: ffff888044a845e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 597.350780][ T32] locks held by kworker/u8:42/12900: 2, on CPU#0: [ 597.350793][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 597.350841][ T32] #1: ffffc900095ffc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 597.350901][ T32] locks held by syz.4.2593/16980: 2, on CPU#1: [ 597.350914][ T32] #0: ffffffff902c6228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 597.350960][ T32] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 597.351008][ T32] locks held by syz.1.2645/17260: 3, on CPU#1: [ 597.351022][ T32] #0: ffffffff902c6228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 597.351067][ T32] #1: ffff8880467786e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 597.351118][ T32] #2: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 597.351166][ T32] locks held by kworker/u8:46/18056: 2, on CPU#0: [ 597.351178][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 597.351236][ T32] #1: ffffc90004617c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 597.351291][ T32] locks held by syz.0.3319/20687: 2, on CPU#1: [ 597.351304][ T32] #0: ffffffff902c6228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 597.351349][ T32] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 597.351532][ T32] locks held by syz.3.3382/20970: 1, last CPU#1: [ 597.351547][ T32] #0: ffff888028bcdcf8 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x182/0x390 [ 597.351609][ T32] locks held by syz.6.3387/20984: 1, last CPU#0: [ 597.351623][ T32] #0: ffff88802c0369b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 597.351675][ T32] locks held by modprobe/20990: 1, last CPU#0: [ 597.351688][ T32] #0: ffff88807e6769b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 597.351733][ T32] locks held by modprobe/20991: 2, last CPU#1: [ 597.351746][ T32] #0: ffff88804a5aa588 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 597.351797][ T32] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 597.351845][ T32] locks held by modprobe/20992: 1, last CPU#1: [ 597.351857][ T32] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 597.351904][ T32] [ 597.351909][ T32] ============================================= [ 597.351909][ T32] [ 597.351923][ T32] NMI backtrace for cpu 1 [ 597.351936][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 597.351956][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 597.351966][ T32] Call Trace: [ 597.351974][ T32] [ 597.351981][ T32] dump_stack_lvl+0xe8/0x150 [ 597.352010][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 597.352074][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 597.352105][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 597.352130][ T32] sys_info+0x135/0x170 [ 597.352147][ T32] watchdog+0xfd7/0x1030 [ 597.352173][ T32] ? watchdog+0x1c7/0x1030 [ 597.352206][ T32] kthread+0x38b/0x480 [ 597.352223][ T32] ? __pfx_watchdog+0x10/0x10 [ 597.352239][ T32] ? __pfx_kthread+0x10/0x10 [ 597.352257][ T32] ret_from_fork+0x514/0xb70 [ 597.352277][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 597.352293][ T32] ? __switch_to+0xc89/0x1420 [ 597.352330][ T32] ? __pfx_kthread+0x10/0x10 [ 597.352349][ T32] ret_from_fork_asm+0x1a/0x30 [ 597.352392][ T32] [ 597.352399][ T32] Sending NMI from CPU 1 to CPUs 0: [ 597.352429][ C0] NMI backtrace for cpu 0 [ 597.352443][ C0] CPU: 0 UID: 0 PID: 20984 Comm: syz.6.3387 Not tainted syzkaller #0 PREEMPT(full) [ 597.352465][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 597.352476][ C0] RIP: 0010:__update_load_avg_se+0x306/0xbd0 [ 597.352503][ C0] Code: 49 89 d4 49 0f a4 c4 20 41 80 3c 36 00 74 14 e8 d0 93 9b 00 4c 8b 4c 24 10 48 be 00 00 00 00 00 fc ff df 4c 89 a3 10 01 00 00 <48> 8d bb 18 01 00 00 49 89 ff 49 c1 ef 03 41 0f b6 04 37 84 c0 0f [ 597.352519][ C0] RSP: 0018:ffffc90000007ac8 EFLAGS: 00000046 [ 597.352536][ C0] RAX: 00bd043d7c93216c RBX: ffff888020fb5e40 RCX: 7ffffffffffffc00 [ 597.352551][ C0] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: ffff888020fb5f50 [ 597.352564][ C0] RBP: 000000000000049d R08: ffffffff907a697f R09: 0000000000000001 [ 597.352577][ C0] R10: dffffc0000000000 R11: fffffbfff20f4d30 R12: 0000000000bd043d [ 597.352591][ C0] R13: 00000000000003ea R14: 1ffff110041f6bea R15: 0000000000c127ce [ 597.352605][ C0] FS: 0000000000000000(0000) GS:ffff888124cc6000(0000) knlGS:0000000000000000 [ 597.352621][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 597.352634][ C0] CR2: 00007ffaf1eadeb8 CR3: 0000000036e64000 CR4: 00000000003526f0 [ 597.352651][ C0] Call Trace: [ 597.352657][ C0] [ 597.352670][ C0] update_load_avg+0x1a8/0x1920 [ 597.352714][ C0] ? update_curr+0x222/0x470 [ 597.352745][ C0] enqueue_task_fair+0x668/0x1cb0 [ 597.352777][ C0] enqueue_task+0x75/0x410 [ 597.352796][ C0] ttwu_do_activate+0x1c8/0x640 [ 597.352820][ C0] try_to_wake_up+0x82b/0x14d0 [ 597.352844][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 597.352874][ C0] hrtimer_wakeup+0x4e/0x60 [ 597.352902][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 597.352938][ C0] hrtimer_interrupt+0x4cd/0xaa0 [ 597.352981][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 597.353005][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 597.353030][ C0] [ 597.353036][ C0] [ 597.353043][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 597.353064][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 597.353083][ C0] Code: ff ff ff e8 40 dc 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 62 67 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 7f e0 46 0a cc 48 8d 3d 87 6a da [ 597.353098][ C0] RSP: 0018:ffffc90005c8efa0 EFLAGS: 00000296 [ 597.353114][ C0] RAX: b76e3b3f04ee1d00 RBX: 0000000000000000 RCX: 0000000000000046 [ 597.353126][ C0] RDX: 000000001d3361ae RSI: ffffffff8e69ef61 RDI: ffffffff8c6dac80 [ 597.353141][ C0] RBP: ffff88802bd49f40 R08: ffffffff8177f1df R09: 0000000000000000 [ 597.353153][ C0] R10: ffffc90005c8f0d8 R11: ffffffff81b293f0 R12: ffffffff8ed5c920 [ 597.353167][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 597.353181][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 597.353201][ C0] ? unwind_next_frame+0x8f/0x2550 [ 597.353222][ C0] ? __reset_page_owner+0x71/0x1f0 [ 597.353257][ C0] ? unwind_next_frame+0x8f/0x2550 [ 597.353279][ C0] unwind_next_frame+0xac/0x2550 [ 597.353300][ C0] ? unwind_next_frame+0x8f/0x2550 [ 597.353324][ C0] ? save_stack+0x122/0x230 [ 597.353344][ C0] ? unwind_next_frame+0x8f/0x2550 [ 597.353367][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 597.353386][ C0] arch_stack_walk+0x11b/0x150 [ 597.353410][ C0] ? __reset_page_owner+0x71/0x1f0 [ 597.353433][ C0] stack_trace_save+0xa9/0x100 [ 597.353451][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 597.353474][ C0] save_stack+0x122/0x230 [ 597.353496][ C0] ? __pfx_save_stack+0x10/0x10 [ 597.353524][ C0] ? page_ext_put+0x97/0xc0 [ 597.353547][ C0] __reset_page_owner+0x71/0x1f0 [ 597.353570][ C0] free_unref_folios+0xdc2/0x14e0 [ 597.353592][ C0] ? folios_put_refs+0x991/0xb30 [ 597.353636][ C0] folios_put_refs+0x9e9/0xb30 [ 597.353663][ C0] ? arch_do_signal_or_restart+0xbb/0x860 [ 597.353689][ C0] ? exit_to_user_mode_loop+0x10e/0x770 [ 597.353714][ C0] ? do_syscall_64+0x328/0x520 [ 597.353746][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 597.353778][ C0] ? free_swap_cache+0x109/0x300 [ 597.353806][ C0] free_pages_and_swap_cache+0x2ba/0x490 [ 597.353838][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 597.353866][ C0] ? free_pgd_range+0x1356/0x13c0 [ 597.353899][ C0] ? __virt_addr_valid+0x137/0x390 [ 597.353939][ C0] tlb_flush_mmu+0x6d3/0xa30 [ 597.353963][ C0] tlb_finish_mmu+0xf4/0x220 [ 597.353983][ C0] exit_mmap+0x4b2/0x9f0 [ 597.354012][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 597.354053][ C0] ? __pfx_exit_aio+0x10/0x10 [ 597.354088][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 597.354117][ C0] __mmput+0x118/0x420 [ 597.354142][ C0] exit_mm+0x221/0x2d0 [ 597.354162][ C0] do_exit+0x6cd/0x2360 [ 597.354189][ C0] ? __pfx_do_exit+0x10/0x10 [ 597.354207][ C0] ? cgroup1_freezing+0x20/0x350 [ 597.354240][ C0] ? cgroup1_freezing+0x20/0x350 [ 597.354267][ C0] do_group_exit+0x22d/0x2f0 [ 597.354280][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 597.354304][ C0] get_signal+0x121b/0x12c0 [ 597.354327][ C0] ? __asan_memcpy+0x40/0x70 [ 597.354343][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 597.354365][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 597.354394][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 597.354408][ C0] ? rcu_is_watching+0x16/0xb0 [ 597.354427][ C0] do_syscall_64+0x328/0x520 [ 597.354445][ C0] ? trace_irq_disable+0x3b/0x140 [ 597.354460][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.354474][ C0] ? clear_bhb_loop+0x70/0xc0 [ 597.354490][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.354504][ C0] RIP: 0033:0x7f5d0759e159 [ 597.354516][ C0] Code: Unable to access opcode bytes at 0x7f5d0759e12f. [ 597.354524][ C0] RSP: 002b:00007f5d057f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 597.354538][ C0] RAX: fffffffffffffe00 RBX: 00007f5d07825fa8 RCX: 00007f5d0759e159 [ 597.354549][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5d07825fa8 [ 597.354558][ C0] RBP: 00007f5d07825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 597.354567][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.354575][ C0] R13: 00007f5d07826038 R14: 00007fff917ceff0 R15: 00007fff917cf0d8 [ 597.354594][ C0] [ 597.527899][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 598.973635][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 598.982734][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 598.992778][ T32] Call Trace: [ 598.996049][ T32] [ 598.998967][ T32] vpanic+0x56d/0xa60 [ 599.002948][ T32] ? __pfx___schedule+0x10/0x10 [ 599.007789][ T32] ? __pfx_vpanic+0x10/0x10 [ 599.012291][ T32] panic+0xc5/0xd0 [ 599.016005][ T32] ? __pfx_panic+0x10/0x10 [ 599.020413][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 599.025861][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 599.031222][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 599.037367][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 599.043512][ T32] watchdog+0x1030/0x1030 [ 599.047841][ T32] ? watchdog+0x1c7/0x1030 [ 599.052249][ T32] kthread+0x38b/0x480 [ 599.056306][ T32] ? __pfx_watchdog+0x10/0x10 [ 599.060965][ T32] ? __pfx_kthread+0x10/0x10 [ 599.065544][ T32] ret_from_fork+0x514/0xb70 [ 599.070126][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 599.075228][ T32] ? __switch_to+0xc89/0x1420 [ 599.079905][ T32] ? __pfx_kthread+0x10/0x10 [ 599.084485][ T32] ret_from_fork_asm+0x1a/0x30 [ 599.089262][ T32] [ 599.092575][ T32] Kernel Offset: disabled [ 599.096891][ T32] Rebooting in 86400 seconds..