last executing test programs: 3.917802159s ago: executing program 1 (id=464): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000240)={r0, &(0x7f0000000000)='GPL\x00', 0x40800, &(0x7f0000000040)={@align=0xf1, {0x3, 0x6, 0x2, 0x1}}, 0x12000000, &(0x7f00000001c0), &(0x7f0000000200)=0x30}) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0x1, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe}, 0x38}, 0x1, 0x0, 0x0, 0x1c004}, 0x800) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x19, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000020000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000ad0a060000000000b500ffff000000001801000020646c2500000000002020207b1af8ff00000000bfa10000000000000701000009000000b702000008000000b7030000050008008500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x24}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r3, r4, 0x6, 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x11, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000009000000000000000004000018110000", @ANYRES32=r1, @ANYBLOB="0000010000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018570000010000000000000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000540)='GPL\x00', 0x100, 0x27, &(0x7f0000000580)=""/39, 0x41000, 0x2, '\x00', 0x0, @fallback=0xf, r1, 0x8, &(0x7f00000005c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r2, 0x6, &(0x7f0000000600)=[r0, r1, r0], &(0x7f0000000640)=[{0x1, 0x1, 0xb, 0x5}, {0x0, 0x2, 0xe, 0x5}, {0x3, 0x1, 0xe, 0x7}, {0x4, 0x3, 0xe, 0xa}, {0x4, 0x1, 0x8, 0x3}, {0x0, 0x4, 0xa}], 0x10, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r1}, &(0x7f0000000380), &(0x7f00000007c0)=r5}, 0x20) 3.635368864s ago: executing program 3 (id=468): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r1 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@enum={0x5, 0x3, 0x0, 0x6, 0x4, [{0x1}, {0x7, 0x5}, {0x6, 0xffff}]}]}, {0x0, [0x5f, 0x5f, 0x2e, 0x51, 0x5f, 0x5f, 0x2e, 0x61]}}, &(0x7f0000000540)=""/191, 0x46, 0xbf, 0x1}, 0x28) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000000c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 3.235827783s ago: executing program 3 (id=473): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7fff, 0xa, 0x41, 0x400}, {0xf43a, 0x5, 0xcb, 0xff}]}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @local}]}}}]}, 0x48}}, 0x2000000) 3.024883384s ago: executing program 3 (id=474): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000240)={0x0, 'bridge_slave_1\x00', {0x20000001}, 0x764}) socket(0x840000000002, 0x3, 0x100) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES8=r1], 0x50) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x4, 0x8, 0xd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r4, 0x0, 0x0}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="804001001025040005001000050000000bf7fb336f4ae39f"], 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 2.885781835s ago: executing program 1 (id=476): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x34, 0x32, 0xe72c5f922f23cad9, 0x70bd27, 0x25dfdbf7, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c844}, 0x4000000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000016c0)={r3, @in6={{0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}}}, &(0x7f0000001780)=0x84) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x40d}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000440)="8000", 0x2, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @broadcast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x16, 0x5, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x1, 0x6, 0x1, 0x0, 0xfffffffffffffff8}, @ldst={0x0, 0x0, 0x4, 0x2, 0x3, 0x2, 0x3}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r11, 0x0, 0x482, 0x0, &(0x7f0000000d80)) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="2400000001010101000000000000000002000000040002800c00198008000200110000008435bf019fb0205d88ffb9752a7c2a41d507e6c59bf846be1192e1f9e6e4287341b64ec620ef32a89ebe2e74578d34f199a29494a08dde84e92874412b7d70b3dd9bc1574cacd9257c9b8148a9aa3a1e71f16c8dd908ec2d97afc128eeba79f5eba43d3f02aa1a40c623e07468d26f4704565882b30dc50b24d42563d66b3f77f8a0a943f2ef7bb11120ed6b"], 0x24}, 0x1, 0x0, 0x0, 0x40044081}, 0x0) 2.883187253s ago: executing program 2 (id=478): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000b00000040000580070001"], 0x54}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)={0x18, 0x44, 0x107, 0x70bd2b, 0x25dfdbfa, {0x3, 0x7c}, [@generic='g']}, 0x18}, 0x1, 0x0, 0x0, 0xc090}, 0xc000) 2.710584983s ago: executing program 2 (id=480): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000280), &(0x7f0000000300)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r1, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r2, 0x4) close(0x4) 2.58510449s ago: executing program 3 (id=481): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffc, @mcast2, 0x2}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) writev(r0, &(0x7f0000000300)=[{&(0x7f0000001240)='{', 0x1}], 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x1c, r4, 0x401, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) pipe(0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.freeze\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200)=0x10001, 0x12) sendfile(r7, r6, 0x0, 0xf03a0005) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x14, 0x32, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r10, 0xffffffffffffffff, 0x3, 0x0, @void}, 0x10) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0xfffe}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0xa00}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r11}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.583400838s ago: executing program 2 (id=482): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f00000000c0)={0x1, 0x2, 0x400}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f000000c640)={0x0, 0x0, &(0x7f000000c600)={&(0x7f00000007c0)=@ipv4_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1e}, [@FRA_FLOW={0x8, 0xb, 0x3}, @FRA_SRC={0x8, 0x2, @local}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xe9}]}, 0x38}, 0x1, 0x0, 0x0, 0x6044001}, 0x4000054) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x100003}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x4, 0x20000000, 0x80000008, 0x308}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x4) r8 = socket$kcm(0x29, 0x2, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r9, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="6ab964ac4223"], 0xfdef) r10 = epoll_create1(0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000005c0), 0xce, r11}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r11, &(0x7f0000000400)='m', &(0x7f0000000280)=""/169}, 0x20) ioctl$FS_IOC_SETFLAGS(r10, 0x40088a01, &(0x7f0000000000)=0x10) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r8, &(0x7f0000000340)={0x17bf0d7acc1b9916}) sendmsg$inet(r8, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x40) 2.550599149s ago: executing program 4 (id=483): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0600000004000000040000001000000001110400", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0002020000000000bf3049830b5dcdd046e7fede"], 0x50) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r4) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000880)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fcdbdf250300000080fe0300fe000000bb2a00070073797374656d5f753a6f626a6563745f723a6d6f64756c65735f6f626a6563745f743a73300000001400060076657468305f746f5f6272696467650014000200fe80000000000000000000000000002ceddeca0e9b55d6dc8efd76054d0f9b30e5b7b83244d1d1d8759f47d12b0c30e6a97046f21ada5ad060bc35d5f1b836146af10fe3044e4ffb133a250415523743b404bca4e94b146b88dececca600e80f61e708e26e96877af6affb0150fe87b903205785b163da47127fc26caf40a5f0ff4981"], 0x7c}, 0x1, 0x0, 0x0, 0x10018081}, 0x400a0) sendmsg$tipc(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000880}, 0x4004089) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000023bfa400000000000007040000f8ffffffb705000008000000850000001900000095"], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r7, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x40, 0x3}, 0x3}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r9, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/167, 0xa7}], 0x1}, 0xfff}], 0x1, 0x122, 0x0) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r11, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r13 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r13) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r12, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) sendmmsg$inet(r8, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000005c0)={@loopback, 0x0}, &(0x7f0000000600)=0x14) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000200), 0x4) openat$cgroup_ro(r9, &(0x7f0000000840)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x355c}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='GPL\x00', 0x1000, 0x1f, &(0x7f0000000080)=""/31, 0x40f00, 0x66, '\x00', r14, @sk_reuseport=0x27}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 2.053000952s ago: executing program 1 (id=485): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0xb9e626244d36e03c, 0x300) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000000)=0x4, 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="e7669525784732d9bc746fd37f744faff1289d9fa0fabd430a12479cbf65e751ac7b20e6fadd1e9c8bb26982438acf9a37427d04cde11534e49bb4c94e8ca22a5a60482419817f01a8b0b9ad7f63c49a5cd934d035bd7e3ca7281110060841aa106c2e9167f42633633d435820e847af7a9d24a3a55c9c35faec0f0797ce180d14f4e610a3a174919b15fd2144f19b5eef621fc4a3aa02275d6befd33ea4dd6e91d6efcff6c58f064c12be1f919c72fa4456d38f0ba463e8a64b4e63c0431934940fff3f11a6e02b3672d4a2dae33150038ce1950af2afd5554c0e02f26a588c071b8cc3303d30277015c61955285814", 0xf0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x64, 0x0, 0x0, 0xc, 0x81, 0xa8}, &(0x7f0000000240)=0x20) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000280)={'bond0\x00', {0x2, 0x0, @multicast1}}) sendmsg$sock(r3, &(0x7f00000006c0)={&(0x7f00000002c0)=@ll={0x11, 0xd, r2, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000340)="bb49d3b30f9d27560ace2c4026a97d965f1247e733d527fd326b4864805f01d0989ad152ab39c984f689afc224701deba8cb38f08630f2d03eab5cfe257b327c1b5cf1bed2ccdfd03d1a8e86ab6c86a9431dc99ce34e3bf43a681e72b0ea33ceaa3acf3a12724c284199246a2e90fc796ae2289c7bb87b75adf420936358d1436d6c9d5abcd9a18b109c4d3a85d2d9b374bc058b172d6a586530a324caad7c08d19341c6cce35418189776f9610baf43ac60c38881b493ec128dc87631137441c650ce09d5d197e845db19f754dc030266a8185dbb85267e833b5b5f356187dcba03a97d7df510a6fc", 0xe9}, {&(0x7f0000000440)="662c06d3", 0x4}, {&(0x7f0000000480)="78179f5f6dc982b929759aaadd9a24e5f5952c8429ff9fc1e8a1760c8083f28b51b8dd7e3d8bee69e10a75351fc0b9728f0b4c56a6fedb1c0112ffc3c56bf5740522e1f747c19eb1c0d22b795e95b8386681ed251803a1e8a0574563792c96fa156178287b0537079d8d423b9eb65811afac86efb085d57d1b94f4dbcf2d999ceefeb61d4f4f9f05143e6c35d9e8fcb9186c727d0b7bfa06dfb3f4f5443eb2c371e9c77e0574b6e79b9e4616f3e809cc04ca28d44a849ca378c7a591ae58d51f235bd7d503ee6de385fb547507d0b47c504bb2f1c41383a28e8f86", 0xdb}, {&(0x7f0000000580)="318e87a6c04c7718436039f3ba21b385acd72fe5d769963095496188ce38afb66611943d7ef3e28f0b9cfd31e46633350c94437407f8c0116191ddf3f7d59a376fd1b266b1a2f84728b11daaff7e49a608054297af", 0x55}], 0x4, &(0x7f0000000640)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0xdec00000}}], 0x48}, 0x0) r4 = accept4(r0, &(0x7f0000000700)=@tipc=@name, &(0x7f0000000780)=0x80, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000940)={'syztnl2\x00', &(0x7f0000000800)={'ip_vti0\x00', r2, 0x40, 0x7800, 0x1000, 0x7, {{0x46, 0x4, 0x0, 0x3, 0x118, 0x68, 0x0, 0x5, 0x2f, 0x0, @multicast2, @local, {[@cipso={0x86, 0x26, 0x3, [{0x0, 0x2}, {0xd, 0xd, "e7d3601f05f9ae01e4f2bf"}, {0x6, 0xa, "51723b017285fa55"}, {0x0, 0x7, "8cf498d4f5"}]}, @cipso={0x86, 0x28, 0x2, [{0x6, 0x11, "ccec27b0a50d16ae5ffd9690b550d9"}, {0x7, 0x3, "11"}, {0x0, 0x5, "21b412"}, {0x0, 0x9, "8d4a92db7a83fd"}]}, @ssrr={0x89, 0x23, 0x3a, [@multicast2, @local, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @loopback, @local, @dev={0xac, 0x14, 0x14, 0xb}]}, @end, @rr={0x7, 0x1b, 0xdd, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x21}, @remote]}, @ssrr={0x89, 0x13, 0x8f, [@multicast1, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x2b, 0xd, [@remote, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @local, @local, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x20}, @multicast2]}, @ra={0x94, 0x4}, @cipso={0x86, 0x31, 0x2, [{0x7, 0x6, 'hgI.'}, {0x1, 0x12, "d075b12a349a13c01b618691caee4b98"}, {0x6, 0x2}, {0x0, 0x6, "640bd84b"}, {0x1, 0xb, "ce9eb43b97338c0a8b"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000a80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x9c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0xd56b}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20}, 0x20000000) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r4) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xc0, r6, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0xc0}}, 0x8000) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000c80)=0xfffffffd, 0x4) r7 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r7, 0x0, 0x31, &(0x7f0000000cc0)=0x7, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d00), 0x27d4ffcc253a479d, 0x0) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000d40)={r2, 0x1, 0x6, @remote}, 0x10) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000d80), &(0x7f0000000dc0)=0x4) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000e00)) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000e40)={0x7, 0x8}, 0x2) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r4) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x20, r9, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x65}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x237a924641cb59a4}, 0x40800) ioctl$BTRFS_IOC_SET_FEATURES(r8, 0x40309439, &(0x7f0000000fc0)={0x0, 0x3, 0x10}) getpeername$packet(r1, &(0x7f0000001000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001040)=0x14) socket$netlink(0x10, 0x3, 0x5) sendmsg$nl_route(r4, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)=@getnetconf={0x14, 0x52, 0x20, 0x70bd28, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4004800) sendmsg$can_bcm(r4, &(0x7f00000012c0)={&(0x7f0000001180)={0x1d, r10}, 0x10, &(0x7f0000001280)={&(0x7f0000001200)={0x1, 0x26, 0x1, {0x77359400}, {}, {0x1, 0x1, 0x1}, 0x1, @canfd={{0x3, 0x0, 0x1, 0x1}, 0x18, 0x3, 0x0, 0x0, "9aa37ec92fc0735d7cabe1c211f4ac9d8d7fcff6fb50ef2a06398b176f7a6e82d84dd3f621cecf51c3a0b561605d4bed23dac132801eb050a469849e9fbf4ca1"}}, 0x80}}, 0x10) 2.048231154s ago: executing program 0 (id=486): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00Z\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000280)={r4}, &(0x7f00000002c0)=0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x78, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r5, 0x8010671f, &(0x7f0000000500)={&(0x7f00000003c0)=""/87, 0x57}) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) write$nci(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="7103"], 0xb6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x53, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48c8}, 0x4011) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10500, 0x0) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r1) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xa0, r11, 0x200, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x22}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8000}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x101}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x58, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b609010000ffffff640000000000000018010000646c6c2500000000002020207b9af8ff000000004c9100000000000037010000f8ffffffb702000008000000b7030000ffffffff15000000060000005f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.874979283s ago: executing program 1 (id=487): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000007d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0f00000004000000080000000b"], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x20040080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r2, 0x7, 0x0, @val=@tcx={@void, @value=r1}}, 0x1c) r5 = socket(0x1e, 0x4, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r0}, 0x18) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$inet6(0xa, 0x2, 0x0) close(r8) r9 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000008400000000000000ffff"], 0x18, 0x20000001}, 0x20008000) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x73, 0x0, &(0x7f0000000100)) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r10, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x8, @loopback, 0x5}, @in6={0xa, 0x4e21, 0x600, @local}], 0x38) socket$l2tp6(0xa, 0x2, 0x73) 1.610728313s ago: executing program 0 (id=488): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f00000001c0)="b700001811005abeef4ba0d598", 0xd}, {&(0x7f0000000200)="37a8a6c41ef711513a5555633f6e4259616da007f3c18c191f", 0x19}], 0x3) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x2400c801) sendmsg$netlink(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000002f80)={0xfdc, 0x26, 0x20, 0x70bd29, 0x25dfdbfb, "", [@nested={0x5b5, 0xad, 0x0, 0x1, [@nested={0x40, 0x50, 0x0, 0x1, [@typed={0x14, 0x13f, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0x8, 0x10, 0x0, 0x0, @fd}, @nested={0x4, 0xbf}, @typed={0x8, 0x80, 0x0, 0x0, @fd}, @typed={0x14, 0xb8, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @typed={0x8, 0x90, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x6e, 0x101, 0x0, 0x0, @binary="5c1f016c8da7585cedb2a1a50adbe5ffce6cb4fa38bf512d7b23160dfc26794c5799a9b373b44992e6eed3a052c578c5f47a149e69c8a64b62081d7a782c87831bf1cd74a13e08b102446d80d2e708b5a7b257a67df9bc990ea4584d86c732097d1ec8701f32e117f5f7"}, @nested={0x175, 0x45, 0x0, 0x1, [@nested={0x4, 0x155}, @generic="4a3dd5390760c16083014040e1138a558c30b2ca5f591d56f60ff8b3e7e2265b8c89454fdde84daf67f603ec1081515d76a05f86e226ad445585e538c307e102fa700fcee11e69d19def7e239ad97128173643346fa0d6f1e4e7494e589f84a7e7ce6a1b4032a3450274e1dc34fd35575f0601c3924dd9ad7ab17fe6fb4a991e7c509a52513e115b753a430394d30eb83a83c1d40dabe7812a5f6b7e260c92ab70d79b6b01831a82", @typed={0x8, 0x4a, 0x0, 0x0, @fd=r3}, @generic="4ce4d3cfcbaf83a9de4b9231c7df34d9253fa36e5166a0390e80be13821f716fa2b9874fcc6bf046af191f0d39be2d4f0b2f5e0ec7c11b8014204264a8042bd38dd7f13bdcb15309054458a59b55909f82fa45c4ef65ec69762abf12488e58fdcee25733c1a29c9ebe2814efae91061bed1305163958db8cc06914d61b34b61ea6d4a6f6f9a3d331e01f014f264d1b899173d5975f071b8922cfb6d4f487c155c8e7dfca66d2aa5509af6cdde7fab82ed9be3a5fe704b7272fbd5bef77"]}, @generic="1831eddbaee413599883e3dcdf3c0263bde4f88bd5fe9a03acc10c078cb98ba0dd43c89cd32f7a23a2a16ad5f6388fc334a249ccdbea6a3603bf60420d94a14062eda10986a984c621beb93bafbe", @generic="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", @typed={0x8, 0x119, 0x0, 0x0, @uid}, @generic="d3da9907592218c93c567e3d9de4cfce8231ccdbc18c220541c002f7c634d36d3b5d3374bafbe5fe7bc79ef14165faea24855a1e6dcd59773a20f41d0b301d5c10f9c3237e62135b2dae54c8489a36b1b10745984eef88f1043e1b1fd4344023e9e33039d635c8a269523d6bfa189d09ae270662ecdfae9f100019c6e92d5494107c6dc2e67a3f0b220c82aeee78b7cf015c2969df7ebba7e4c13efdd4ccb3daaa3ed037f22ae4a6e0fee1a2d62177383daa205e0bebf0c3", @nested={0x16d, 0x67, 0x0, 0x1, [@generic="43ec014663b033576057ff77a1a4b58648dccd05da52005d9dba6b39d1ea75737686d2821dd715f12b6b911d4d6cfa783a0c7b8c665a84805d581e5e249c39ee", @nested={0x4, 0xe6}, @nested={0x4, 0x53}, @typed={0x8, 0x111, 0x0, 0x0, @fd}, @generic="b5942c6b87b702176a5d32acaa03439394dd9b1d65a7992ebcdf26b1327d535e6b27a935a1331fe931799ca43bf50aade0eede8e0aec49020b85c19eb64da8f678c82e339785c085fe0d97b75b32c217b5f4f3fb9bb31616521ec4ba14fe255288f79d99e6e0c8037b51c2a998ef03ab", @typed={0x4, 0xc1}, @typed={0x14, 0x32, 0x0, 0x0, @ipv6=@empty}, @generic="0759c31aca81afdbc87b48c7ed475a6fa6c0a58556b978920533343e5f176bb9f0825a7d84f188ac99b2fd6527fef7a0662c45d8762eff1663164bbaab446c4f0e338722633308fe411dd533366eeb935cddbe66aace8fbf822b041da92d1e6657e1d86b902300c465499c3f190b0f13f07b9c97cd16dde38a5764acb1cc54b752a3689813", @nested={0x4, 0x114}, @typed={0x8, 0x15e, 0x0, 0x0, @uid}]}, @typed={0x5, 0x4, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x110, 0x0, 0x0, @u32=0x9}, @nested={0x271, 0x10e, 0x0, 0x1, [@generic="57e8ffcb2bc260118b25a8ee0c74e708632bca9b75c4f6d0ddd76ab41d562100b1a7633b26807dea0340bb40d4996e3e0262453086806566d71066cf2f939111ecb87510a1ed858e83f75564cb5af9234b97df137f90e0db5f32b59d583e417953a7edbb9106e5db377509851eddf8868df2d900cec9409b9c9cb6c57a4cc165120b439cb066a8", @generic="dc38e6d49f1063114ef63e4549b563b04dd9b50f1d047f6a5f455fee3795f87c25433a79e76fa622831dfa4aa7a3f6843bd055a165d2592ab3f9439d2fad3b1dd48435b2dcde35e4b1768f0ef910b2851f7421be209fb212d0ea641349356e9f1e6c2c707b20ac2be67d660ae8b9c369654c148ad8cc48d8568d415eee71fc60e8af5262172d1edda985ca3959176dbde7bfa30068e2a31742e0ee9489b0", @typed={0x14, 0xe8, 0x0, 0x0, @ipv6=@loopback}, @nested={0x18, 0x2c, 0x0, 0x1, [@typed={0xc, 0xc8, 0x0, 0x0, @u64=0x6}, @nested={0x4, 0xab}, @nested={0x4, 0x42}]}, @typed={0x8, 0xa, 0x0, 0x0, @u32=0x8}, @generic="0372d0aa7bf39d458e2820ec817ac701b3cc00b6812327e061ceca81831553f4caa2cf83faf45a0b628f769ef9be46a3ffb927fb21b75aae52532c813fb868bc7fd1cbb67f325baa7b6519966d344846003eaf3e65f690b55ce4df3ad84fb00107ffe79eb6296ac3e9bdb87d525151ab488655355a31", @generic="403ca75a54a998dd18387aaea26ff31f770c212b9c098c24ad662aca47abba6a94a1de45dacaf011c3df838473c80e9a82365007e30cb8fe2cca7c7a3a40576077ea7e864114e5afa29f51da4d0cd1de8a8e8407de1c9249446c80a9e0bef1f20b2a561116c1d78eac1f4ad71b0180ec2053f4e74f0d0b34852ef33a209516b73da5", @typed={0x8, 0x164, 0x0, 0x0, @uid}, @typed={0xc, 0xf, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0xc, 0x0, 0x0, @pid}]}, @typed={0xc, 0x12e, 0x0, 0x0, @u64=0x7}, @nested={0x78c, 0x85, 0x0, 0x1, [@nested={0x8, 0xbe, 0x0, 0x1, [@nested={0x4, 0x11}]}, @nested={0x77d, 0x10a, 0x0, 0x1, [@typed={0x8, 0xf8, 0x0, 0x0, @u32=0xe39f}, @generic="5d5bd9df3448094da7e6a371b24fb236a60548c26f245771a60f947c76922588c0deb4b4c01f35b739f40a22f593a783058c5d33064dd6f45cad692b24b23777215ef61a63c389010eac7cb4c7beb61b69b060fb326a542a5b396abcdc7017b04fde4c9b75ece49d10e66b7e2612d591385d9ba295bf3a6ec3014e8c096014504da9ec36b9742c461aadb88503b5a6308bd827efb7e9cc1df4d15da3c3504b732bb8e820e1cb4bab1966199022c51e8c0f5207a3a6377b5b6e1e99f12aa42149115554566d22e8d4ae0c708c58b4", @generic="822c523896363245d5e101d142ed6951a059899589ae50b2487be15c3c99772ff7049554d60c185c90a773f5a623102bb024eb3e263ae7a15f0c980bcf5854422f0518b8136f54a6a25e299957f7d79bf7131c543497bcbb87b9d306c4f1febcdb70f6fcbd20f66276d45a3e28b099df4871e32733ed89de0ea98eed86b753ce32694ff53739fe484afa761b6a5772f9cf3121b2792f316687f757f37535965f9ea3b46b7318b0ca95c4c433911d8fd8caacbfd778d81cdbfeb4697440fef0e7fcfb9bb589f418571e329ca07735cdc16f2c7f52bf9366834400b747", @generic="6effe9cd6348f2d70f2e65b560b234148a488f49def595aca0973a61b32f002cb6c70f3d5eef2193942278109d85a69ce242572083c439de4603b6a8bb352b7e90ce90e8e7cb99", @typed={0xc, 0x133, 0x0, 0x0, @u64=0x9}, @generic="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"]}]}]}, 0xfdc}, {0x0}], 0x2, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0xa, 0x1011, &(0x7f0000000840)=""/4113, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 1.607536385s ago: executing program 3 (id=489): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x3, 0x9, [0x5, 0x7, 0x2, 0xfff, 0x0, 0x2, 0x2, 0x0, 0x4]}, &(0x7f0000000200)=0x1a) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={r3, @in6={{0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, 0x5, 0x0, 0x80000003, 0x104, 0xe2d8f2eb1d010935, 0x7, 0x6}, 0x9c) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r3, 0x9d}, 0x8) 1.576838591s ago: executing program 1 (id=490): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, 0x0, 0xc0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001440)=ANY=[@ANYBLOB="1400000030000103000000000000000001"], 0x114}], 0x1}, 0x0) recvmmsg(r4, &(0x7f00000065c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a30000000001400038008000140000000000800024000"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r5, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000001640)=""/197, 0xc5}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/167, 0xa7}, {&(0x7f0000001740)=""/4076, 0xfec}], 0x5}, 0x2}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x3}], 0x7, 0x100, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='nv', 0x2) syz_emit_ethernet(0x6a, &(0x7f0000000340)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}, {}, {0xdd86}}}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r1, &(0x7f0000000240)="c9", 0x1, 0x4044880, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000040200081200000000000000a24500b7586c90e502e3bd05350b64dcbdc64c5f781baa4992e93b25c5728ef1c3e7f29ece63247c20dc96c1c635d94a69cecaffdcea7ac940232fd3fa1fdbf00f06ec4d43d33ac567a2a9845e44a6bfcb5988b352275f058437f56505bb3f72931efb6ffb8c53a744456f34804dc5b04ae576bf5fe3e2e4238ad4866a5c5dc0aac8a51e3164b80d40cdd3ff9fe40a7aff0887d2df8afce38c1c322a4df65e650b0fb78d93da378119203c43b07476078d4ee632a4e5ddefe31f7b9f1c7502f25446d9c04857acd097615d22a531b3", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32], 0x50) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 1.550979737s ago: executing program 2 (id=491): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000010280)=0x6, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_buf(r3, 0x0, 0x9, &(0x7f0000000300)=""/137, &(0x7f00000003c0)=0x89) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x8070bd28, 0xfffffffa, {0x2, 0x18, 0x1ef, 0x0, r2}, [@IFA_ADDRESS={0x8, 0x1, @broadcast}, @IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1e}}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x871ac4b32833d133}, 0x4890) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x2c}}, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x0, 0xffffffffffffffbd, 0x0, &(0x7f00000002c0)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2c29ae499b3f581", 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x29, 0x2, 0xff, 0x8, 0x45, @empty, @private2, 0x781, 0x8, 0x10001, 0x1ff}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r6, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x110, r7, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x40}, 0x804) (async) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084) (async) socket(0x10, 0x803, 0x0) pipe(0x0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) (async) r13 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r13, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async) sendmsg$nl_route_sched(r11, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0) 1.400737557s ago: executing program 4 (id=492): syz_emit_ethernet(0x56, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800200600fe88000000000000000000000000ff01fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80d2794fea7818000417c9f4982202000000"], 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800200600fe88000000000000000000000000ff01fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80d2794fea7818000417c9f4982202000000"], 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '-!*-\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000084) 1.324607611s ago: executing program 4 (id=493): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r5, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000100)={{0x2, 0x4e1c, @broadcast}, {0x304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x7e, {0x2, 0x4e22, @empty}}) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x290) close(0x3) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) r8 = socket(0x2, 0x80805, 0x0) close(0x3) r9 = socket(0x2, 0x80805, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x7a, &(0x7f0000000340)={r11, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x84, &(0x7f0000000440)={r11, @in={{0x2, 0x4e23, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) recvmmsg(r10, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)=""/56, 0x38}], 0x1}, 0x7}, {{&(0x7f0000000540)=@can, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/24, 0x18}, {&(0x7f0000000600)=""/10, 0xa}, {&(0x7f0000000640)=""/118, 0x76}], 0x3, &(0x7f0000000740)=""/217, 0xd9}, 0x3}, {{0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d80)=""/4096, 0x1000}, 0x4}], 0x3, 0x2000, &(0x7f0000001e40)={0x0, 0x3938700}) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000100)=0x1, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 1.260684332s ago: executing program 0 (id=494): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000001c0), 0x37) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xfffffffffffffdf5, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000200)={0x1d, r5}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r6, @ANYRES64=r5, @ANYRES64=r5, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000d40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x9, [@typedef={0x3, 0x0, 0x0, 0x8, 0x2}, @union={0x9, 0x4, 0x0, 0x5, 0x1, 0x4, [{0x1, 0xfffffffe, 0x2}, {0x2, 0x5, 0xb}, {0x9, 0x1, 0x6}, {0x0, 0x4, 0x3189}]}, @func={0x7, 0x0, 0x0, 0xc, 0x4}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x1, 0x1}, @restrict={0x7, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x5f, 0x61, 0x5f, 0x30, 0x0, 0x2e, 0x61]}}, &(0x7f0000000980)=""/156, 0x91, 0x9c, 0x1, 0x400}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0xdc9b, 0x7}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r9, 0x0, &(0x7f0000000340)=""/55}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r9, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40)={0x1, 0xffffffffffffffff}, 0x4) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000002000000010000000000000000000000000000001181ec1a"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xde, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r13}, &(0x7f0000000180), &(0x7f0000000280)=r12}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x38, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x1, 0x3, 0x5, 0xa, 0x2, 0xfffffffffffffff0}, @ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2ee2}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffeff}}, @map_fd={0x18, 0x2, 0x1, 0x0, r1}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x29c2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x20, '\x00', r5, 0x25, r7, 0x8, &(0x7f0000000a80)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x4, 0x3, 0x5ea, 0xfffffff8}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000c00)=[r8, r9, 0x1, r10, r11, r0, r13], &(0x7f0000000c40)=[{0x0, 0x5, 0x10, 0xc}, {0x1, 0x5, 0x0, 0x4}, {0x5, 0x1, 0xe, 0x2}], 0x10, 0x200}, 0x94) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r14 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r14, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x1}, 0x20) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000006"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r15, &(0x7f0000000100)="072ed06c1729b36f3825917c2640b3e523e62500622b0e51410ab6c028d1ab54a1213ef0f822df35bf22183dc147764c1330b37e1af2d8983aae167a0493772e6f7e003484b5ee8b9f1275b810fd2479555e8f2aaf132f6af2590e2396f1161a408a88", &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r15, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.126177694s ago: executing program 1 (id=495): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000580)=[{&(0x7f0000000080)="580000001400ff2340834b80040d8c560a067f0258ff0000000000000006000000000000005f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810ee0000408c56040000", 0x58}], 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)={0x14, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfb, {0xa, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x20048024}, 0x4008030) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r7, 0x1}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000140)={0x4}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x20004004) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0x64, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x82}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xffc, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_LINK={0x8}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) r10 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r10, &(0x7f00000001c0)={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r10, 0x6, 0xc, &(0x7f0000000100)=0x8, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r11 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r11, 0x29, 0x1b, &(0x7f0000000540)="598db5038ec9c37e4409c3d6abb333c2b1651bc3", 0x14) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x0) 776.288793ms ago: executing program 4 (id=496): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1c, 0xd, 0x0, &(0x7f0000000200)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x8994, &(0x7f0000000000)={'bond0\x00', @ifru_mtu=0x140000}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f0000000080), 0x10) socket$kcm(0x1e, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000420001080000000000000000030100000f0000003c00010000112233445567778899aabb86dd2c00001c00002c0001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e3b6704000280040003"], 0x5c}}, 0x0) socket(0x10, 0x803, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a3000"], 0x80}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r4, @ANYRES8=r6, @ANYRES64=r8, @ANYRESDEC=r7, @ANYBLOB="00cef4e1", @ANYRES32=r6, @ANYRESHEX=r2, @ANYRES64=r9], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x40000) 719.351001ms ago: executing program 0 (id=497): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xfffff}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x0, 0x2}, @union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x4e}, 0x28) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@delqdisc={0x24, 0x25, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="bc0000000002010400000000000000000a000007300001802c0001801400030000000000000000000000ffffac1414bb14000402000000000000000000000000000000003c0003800c00028005000100890000002c00018014000300fe88000300000000000000000000000114000400fc0200000000000000000000000000013c0002802c00018014000300fc010000000000000000f9ffffffff001400040000000000000000000000ffff640101020c000280050001"], 0xbc}, 0x1, 0x0, 0x0, 0x24000801}, 0x20000004) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x44014}, 0x40010) 540.805345ms ago: executing program 3 (id=498): r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080), &(0x7f00000000c0)=0x8) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="15fcc71b8bba4f15d4cb2145e8cfe68195f4e50f8f131f28dc21b764611f4c89e48bc898bb8dda795eb29d9d031bc557a256b0fb307d50b7cba62ab00b2b1df4fee5d50f0734fbb391009d98679b16561f00e6097e83e15a1c002de126a340090a6acd33b246f728416a93dd5216320c0fa04ee611b6c908394a0119428b060c7dcf8251cc696dd537ae5f8f73e3b15c9c51215636b2524f5b4b2cb934577f4c106bccbd89faa63559e534c532ba18e1a9617a8f037788c28fbabdc28da9c804b0dc59127acc92c1df3600c600682ed283371173209e6b772a3ccc725255ae2d2ca43a56b1b1813345d61954b3b4", 0xee) (async) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x7, 0x101}, &(0x7f00000002c0)=0x8) (rerun: 64) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000300)={r2, 0x5, 0xbb, "287e1a1bbc5f3ae8600e93a82a8051eee9a4c21b0bd7b48c2e663f74f07cfb940f091b5357a3d128126ff588bf0d3b7e89a2651e866a36683047e480b78d84e6ba15e77ede58f773d18a62be56d4bd33c8863fcae8a3724c3f2bdb4d3cd30fe661f423997c69dfe268880c518867818b7858dc0639cde1af8e621bfdfb20e3df53ecbbc58def6cbd2f1088aa82e4bd2bf09519a8808478f0ab4059829178d61267166a89889cfa5017fa01162ef3ad85928c34b608efa908bd1c34"}, 0xc3) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x800e, 0x8, 0x0, 0x9, {{0x19, 0x4, 0x2, 0x23, 0x64, 0x66, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@cipso={0x86, 0x38, 0x3, [{0x5, 0x11, "4909e9a222a22c205349948186bac9"}, {0x7, 0x2}, {0x7, 0x10, "cf931377d50a039a155db4335b36"}, {0x7, 0xf, "816af6492807a7ba79aed732a9"}]}, @end, @timestamp_addr={0x44, 0x14, 0xf8, 0x1, 0x6, [{@multicast2, 0x2}, {@remote, 0x5}]}]}}}}}) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000500)={'icmp\x00'}, &(0x7f0000000540)=0x1e) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000580)=@int=0x10001, 0x4) r4 = getpid() r5 = getuid() (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0xc) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000640)={r4, r5, r6}, 0xc) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000006c0)={0x1, &(0x7f0000000680)=[{0x1, 0x90, 0x5, 0x41}]}, 0x10) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg(r7, &(0x7f0000000c00)={&(0x7f0000000700)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000780)="6ef2524d8dac3b9a8a4980978fd1c18f600affb55afee4ebce31574c290916bb35c5366565623198d2bf79a71655bf897fede7e059e0f2fed5eb0504777b24f8e2c679daccbbd3089e15d06c943d42e6aa1f0efa65be6cf8f8442ecdc16c08aae81164e566e2a3d9bc6bdbd42f9829482a8e9e1ff0f8d3837629b7371da07439c9fde5c9172370217988fc73378105d6f9009e1242ef34fdc62c76b4bfd802dbdfd0504ef5171dc02401140a9c71c017119e6cc5b4420e2f37aa4b945f9d877b191d12499d71a44f8377ab0e6fa4363b88b365306f6def", 0xd7}], 0x1, &(0x7f00000008c0)=[{0xf8, 0x107, 0x3, "9aeb733db5c551194685489736499d87b0372a8e0b14090f7f2465f9b2f0f487af829a8749c5c6110e8c336764a3a95a3d36b4f9b6be4641cd0a52cd33b9395978d281572bb1ad6388fe7b82c7ba4f1762fc57855bc02b21d8374c26100ab3a296ebe2153827c503fef5d89c7e9e9146e0677f1b2008d21ff512292c48f502e1a3841a4bfa96400c3f424b1b2fcb43813fe45faf9e788e24dd183b4beb57aff269847a5a3e3fca411b1316a50eef988431981940f10d9b744941849fec56b5d26e7947e216ddf778014142f82507d7f8096ec6f5f3cdb05c44fcf88d9a24b7b00c0952"}, {0xa8, 0x109, 0x100, "6391ad7b36c337a1f194bbfbd1bb158b1efc3cec372268e68216280726adf930298e8a851293698d05a59510a63a135a6e49a043f88b62a097af99495e7280258649967d05e1cfcde9bcd1bc0ac65b45359adb3f4c2bb6a5a09f54a52a108a64b80e8776befec11275802f9eab77cee70e5245c6110cd9c779736bd3d2910f1d3bec063aa6c51b42a4b1d3cd468fd0ec1f"}, {0xc8, 0xff, 0x4, "a2893648ab5cdf8870e97c52e3691656fd80e16531a9e4707c316e171fa4799da1bb39d33809d25c835045434442bd3f0bf96b88c9653f04a0b855c27930b18b282fbffa501b90da71402745aab8e409eb2b098aec3ddaad488360cea2dff56d44221b3844a7a9e08dc9222ab46990e8c32665f256a98701cff5bfbfabd9739992f4d15928ce0e303ab263991ca65a1804e6f6fe472641ab4ba913a8732a7666ad2145a6d80eb058cf7ba2d6f600353614637b85cac2"}, {0x58, 0x10d, 0x0, "be2c8cb5a38908aa005ab0acdedc2f2ebe196effa381c42b8350da59fbc8c6d5f4145597467cd3d22515e8479ed96585c38597cdbe878e836b8c2c5030e53b31ea382b2956"}, {0x58, 0x0, 0xbf, "6fa1232e61e09b9a2ab66b6791d8c53b317d93a53bf6d8f29a38f8dbc5c3b2c6ec76cef4b471bb770b47423795dc8a97fdcea9ccbe20c1c028e16e42dbb77124c1dbf4"}], 0x318}, 0x4000000) (async, rerun: 64) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r8, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x54, r9, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x20, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x54}, 0x1, 0x0, 0x0, 0x410}, 0x4000000) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000e00), &(0x7f0000000e40)=0x4) (async) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000e80)) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000f40)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_TRIGGER_SCAN(r11, &(0x7f0000001240)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001200)={&(0x7f0000000f80)={0x26c, r12, 0x1a, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x244, 0x84, 0x0, 0x1, [{0xb0, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="789ba1bc71b9"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x9}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x2}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xa0}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xfffffffc}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4f6}, @NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xc}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xf19}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x4}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1ff}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}]}, {0x88, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4cbbd097}, @NL80211_BAND_LC={0x8, 0x5, 0x101}, @NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8001}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xffffffff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xa377}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="65eacdc037b4"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x23, 0x1, @random="6da1e9250d274cedc068c0072e0b5ac486ef00999a2ade9b0cdaab38d02500"}]}, {0x9c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xd, 0x1, @random="cdf9119e016a3f9cd9"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="60afcb7dd27e"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="d1c0a98c4812"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x9}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xffff216d}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2f5}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x1}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x4}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1}, @NL80211_BAND_LC={0x8, 0x5, 0x1}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7}]}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xb, 0x1, @random="3769500d78cd94"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x5}, @NL80211_BAND_LC={0x8, 0x5, 0x3db}, @NL80211_BAND_5GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x3}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x15, 0x1, @random="7726c2a1826db73417d0a0c0aea942809a"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x800}, 0x4008844) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f0000001b40)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001400)={0x6e4, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb56}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r3}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1e7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r3}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6b}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xde}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r3}, {0xc0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x6e4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) 533.405542ms ago: executing program 0 (id=499): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffc, @mcast2, 0x2}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) writev(r0, &(0x7f0000000300)=[{&(0x7f0000001240)='{', 0x1}], 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x1c, r4, 0x401, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) pipe(0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.freeze\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200)=0x10001, 0x12) sendfile(r7, r6, 0x0, 0xf03a0005) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x14, 0x32, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r10, 0xffffffffffffffff, 0x3, 0x0, @void}, 0x10) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0xfffe}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0xc00}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r11}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 525.528057ms ago: executing program 4 (id=500): setsockopt(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x2, &(0x7f0000000040)=@raw=[@map_fd={0x18, 0x6}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401"], 0x78}}, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 471.842972ms ago: executing program 2 (id=501): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8001, 0xc3, 0x9}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x483) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000480)=r0, 0x4) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)=0xfffffffc) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x400, 0x0, 0x150, 0x150, 0x0, 0xf8010000, 0x330, 0x238, 0x238, 0x330, 0x238, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @empty, [], [], 'veth0_to_team\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@eui64={{0x28}}, @common=@inet=@sctp={{0x148}, {[0x4e22], [], [0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd], 0x0, [], 0x1, 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', {0x4}}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) r3 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r3, 0x0, 0xf, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f00000001c0)) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)="7db49fdb07ac1af786f979a7c4c98f4a30507687a32c16c61e034cb67357e38da3fbe77aa31c827b802222469f1809decbb3a12e1757d1ac4ca0cfbbc289bc69b43b1b7d2e896183837a7224005c40412d2937969050f4a048a1af3723b7dc", 0x5f}, {&(0x7f0000000600)="a55b2c8f73dfa037f58774af75d97ac0c02173e2c7efc30f342a5e29dfdc47280776b0deecfb7e4911e4dd33096e8823fb8ba706e431aa", 0x37}], 0x2, &(0x7f0000000740)=[@assoc={0x18, 0x117, 0x4, 0x86}], 0x18, 0xc840}], 0x1, 0x84) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000140)={0x0, @aes128, 0x0, @desc1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)={0x34, r7, 0x1, 0x70bd2b, 0xa5dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffffffc8, 0x23}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x8044) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000100)=0xffff0000) 164.851925ms ago: executing program 2 (id=502): pipe(&(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000040000000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) recvmmsg(r5, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}, 0x98}], 0x1, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x28, &(0x7f0000000040)=0x80000004, 0x4) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r6, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000000)=[{r4, 0xa43c}, {r3, 0x4221}], 0x2, 0x0, 0x0, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x46}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x3, @local}, {0x1, @remote}, 0x4a, {0x2, 0x0, @remote}, 'veth1_to_bridge\x00'}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008000) 69.126661ms ago: executing program 4 (id=503): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x7de, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="050000"], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) (async) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 0s ago: executing program 0 (id=504): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1940000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002dbd7000ffdbdf25150000000c009900dbad000a001a0008021100000000000a000600ffffffffff0000000a00060008021100000100006dfca9f593ae4ea5b7eddafa2cfc89ff6300ab1ec5d12cdc3aa50c8f9ca47794bacaa15d87cfc8f75c858f734f9a2ba8c72b2a1ed8b7320800bddb068a75cfc05a3bae5038baa171d14933246059e39088e57c05f55dc329ea0ab832aa95f8b214a8d0e0d64f0f6304081db9a0f7c508f1190000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x14) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000000000010000000000000000000500000a14000000090afe6d010400000000000000000a0000043c0000000c0a01010000000000000000000000060900020073797a31000000000900010073797a3100000000100003800c000080080001800400010034000000000a010200000000000000000200000008000240000000010900010073797a31000000000c0004400000000000000002140000001100010000000000000000000100000a"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.20' (ED25519) to the list of known hosts. [ 72.446563][ T5606] cgroup: Unknown subsys name 'net' [ 72.565252][ T5606] cgroup: Unknown subsys name 'cpuset' [ 72.568313][ T5606] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.976949][ T5606] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.225670][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.227618][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.235931][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.250341][ T5631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.251651][ T5636] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.251968][ T5631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.252886][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.253320][ T5631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.253437][ T5631] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.262613][ T5636] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.262955][ T5636] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.263050][ T5636] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.263390][ T5636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.264874][ T5631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.266491][ T5636] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.270003][ T5636] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.271346][ T5636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.271740][ T5636] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.272842][ T5632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.273116][ T5632] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.274425][ T5636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.274974][ T5636] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.288976][ T5632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.289345][ T5632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.297707][ T5632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.251637][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.251811][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.251952][ T5616] bridge_slave_0: entered allmulticast mode [ 78.253959][ T5616] bridge_slave_0: entered promiscuous mode [ 78.312146][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.312242][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.312364][ T5616] bridge_slave_1: entered allmulticast mode [ 78.313919][ T5616] bridge_slave_1: entered promiscuous mode [ 78.358921][ T52] Bluetooth: hci3: command tx timeout [ 78.358925][ T5632] Bluetooth: hci0: command tx timeout [ 78.359190][ T5632] Bluetooth: hci4: command tx timeout [ 78.359199][ T52] Bluetooth: hci2: command tx timeout [ 78.363118][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.363205][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.363334][ T5617] bridge_slave_0: entered allmulticast mode [ 78.364726][ T5617] bridge_slave_0: entered promiscuous mode [ 78.431341][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.431488][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.431602][ T5617] bridge_slave_1: entered allmulticast mode [ 78.432679][ T5617] bridge_slave_1: entered promiscuous mode [ 78.438989][ T4935] Bluetooth: hci1: command tx timeout [ 78.440283][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.440569][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.440665][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.441044][ T5618] bridge_slave_0: entered allmulticast mode [ 78.443579][ T5618] bridge_slave_0: entered promiscuous mode [ 78.475998][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.476095][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.476221][ T5621] bridge_slave_0: entered allmulticast mode [ 78.478501][ T5621] bridge_slave_0: entered promiscuous mode [ 78.482032][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.482121][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.482575][ T5621] bridge_slave_1: entered allmulticast mode [ 78.484274][ T5621] bridge_slave_1: entered promiscuous mode [ 78.539018][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.553246][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.553343][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.553449][ T5618] bridge_slave_1: entered allmulticast mode [ 78.556148][ T5618] bridge_slave_1: entered promiscuous mode [ 78.623847][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.640137][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.642278][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.644650][ T5616] team0: Port device team_slave_0 added [ 78.659433][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.659541][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.659649][ T5619] bridge_slave_0: entered allmulticast mode [ 78.662639][ T5619] bridge_slave_0: entered promiscuous mode [ 78.685789][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.712262][ T5616] team0: Port device team_slave_1 added [ 78.714794][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.715119][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.715210][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.716305][ T5619] bridge_slave_1: entered allmulticast mode [ 78.720123][ T5619] bridge_slave_1: entered promiscuous mode [ 78.797177][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.822034][ T5621] team0: Port device team_slave_0 added [ 78.823901][ T5617] team0: Port device team_slave_0 added [ 78.851950][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.853722][ T5621] team0: Port device team_slave_1 added [ 78.855632][ T5617] team0: Port device team_slave_1 added [ 78.856539][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.856551][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.856569][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.862355][ T5618] team0: Port device team_slave_0 added [ 78.865725][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.915370][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.915390][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.915412][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.919478][ T5618] team0: Port device team_slave_1 added [ 79.009195][ T5619] team0: Port device team_slave_0 added [ 79.009899][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.009913][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.009933][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.011587][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.011601][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.011619][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.015208][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.015237][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.015262][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.017404][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.017419][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.017440][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.025501][ T5619] team0: Port device team_slave_1 added [ 79.047154][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.047172][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.047193][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.075304][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.075319][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.075339][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.183575][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.183609][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.183630][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.308720][ T5616] hsr_slave_0: entered promiscuous mode [ 79.310311][ T5616] hsr_slave_1: entered promiscuous mode [ 79.312132][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.312146][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.312168][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.350781][ T5617] hsr_slave_0: entered promiscuous mode [ 79.352562][ T5617] hsr_slave_1: entered promiscuous mode [ 79.353628][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 79.353721][ T5617] Cannot create hsr debugfs directory [ 79.387234][ T5618] hsr_slave_0: entered promiscuous mode [ 79.390824][ T5618] hsr_slave_1: entered promiscuous mode [ 79.392157][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 79.392182][ T5618] Cannot create hsr debugfs directory [ 79.403531][ T5621] hsr_slave_0: entered promiscuous mode [ 79.405746][ T5621] hsr_slave_1: entered promiscuous mode [ 79.406506][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 79.406525][ T5621] Cannot create hsr debugfs directory [ 79.635660][ T5619] hsr_slave_0: entered promiscuous mode [ 79.636406][ T5619] hsr_slave_1: entered promiscuous mode [ 79.636845][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 79.636863][ T5619] Cannot create hsr debugfs directory [ 80.102912][ T5617] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.124783][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.127251][ T5617] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.151476][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.156619][ T5617] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.162306][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.163860][ T5617] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.182025][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.255916][ T5616] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.269032][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.276112][ T5616] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.283073][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.283995][ T5616] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.292901][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.302408][ T5616] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.320047][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.428017][ T5621] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.432131][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.433201][ T5621] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.436582][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.439211][ T4935] Bluetooth: hci2: command tx timeout [ 80.439246][ T4935] Bluetooth: hci3: command tx timeout [ 80.439265][ T4935] Bluetooth: hci4: command tx timeout [ 80.439285][ T4935] Bluetooth: hci0: command tx timeout [ 80.499044][ T5621] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.503843][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.504839][ T5621] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.512931][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.523077][ T52] Bluetooth: hci1: command tx timeout [ 80.626834][ T5618] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.633507][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.635824][ T5618] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.652843][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.670623][ T5618] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.675934][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.676606][ T5618] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.682449][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.689820][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.759707][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.791390][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.851319][ T1229] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.851439][ T1229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.853790][ T5619] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.856791][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.857825][ T5619] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.880734][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.906505][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.923040][ T5619] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.932224][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.933732][ T5619] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.952034][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.957435][ T1042] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.957616][ T1042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.960050][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.960146][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.011608][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.011674][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.071691][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.139746][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.162455][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.191359][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.191422][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.232077][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.232174][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.256789][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.360401][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.360505][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.362673][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.362780][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.654258][ T5621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.715185][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.894602][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.935155][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.935296][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.020172][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.020260][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.437822][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.518899][ T52] Bluetooth: hci0: command tx timeout [ 82.518945][ T52] Bluetooth: hci4: command tx timeout [ 82.518967][ T52] Bluetooth: hci3: command tx timeout [ 82.518987][ T52] Bluetooth: hci2: command tx timeout [ 82.588884][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.602713][ T4935] Bluetooth: hci1: command tx timeout [ 82.838767][ T5616] veth0_vlan: entered promiscuous mode [ 82.923121][ T5616] veth1_vlan: entered promiscuous mode [ 82.970599][ T5617] veth0_vlan: entered promiscuous mode [ 83.026258][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.051282][ T5617] veth1_vlan: entered promiscuous mode [ 83.096139][ T5616] veth0_macvtap: entered promiscuous mode [ 83.136151][ T5616] veth1_macvtap: entered promiscuous mode [ 83.170806][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.262412][ T5617] veth0_macvtap: entered promiscuous mode [ 83.267112][ T5617] veth1_macvtap: entered promiscuous mode [ 83.305661][ T5618] veth0_vlan: entered promiscuous mode [ 83.324846][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.344329][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.361483][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.379895][ T5618] veth1_vlan: entered promiscuous mode [ 83.428473][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.443739][ T143] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.444004][ T143] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.444037][ T143] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.538732][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.538781][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.538831][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.538862][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.591533][ T1229] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.695756][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.713371][ T5618] veth0_macvtap: entered promiscuous mode [ 83.770349][ T5618] veth1_macvtap: entered promiscuous mode [ 83.800452][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.800481][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.864987][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.865010][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.907392][ T1229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.907414][ T1229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.944323][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.971987][ T5619] veth0_vlan: entered promiscuous mode [ 83.979548][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.996692][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.996713][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.061177][ T5619] veth1_vlan: entered promiscuous mode [ 84.091882][ T5621] veth0_vlan: entered promiscuous mode [ 84.094947][ T5616] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.152009][ T5621] veth1_vlan: entered promiscuous mode [ 84.218178][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.219026][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.219066][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.219098][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.369737][ T5619] veth0_macvtap: entered promiscuous mode [ 84.378724][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.378744][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.411379][ T5619] veth1_macvtap: entered promiscuous mode [ 84.475082][ T5621] veth0_macvtap: entered promiscuous mode [ 84.513108][ T5816] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3'. [ 84.532319][ T5621] veth1_macvtap: entered promiscuous mode [ 84.535331][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.535360][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.554851][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.569503][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.600784][ T4935] Bluetooth: hci2: command tx timeout [ 84.600824][ T4935] Bluetooth: hci3: command tx timeout [ 84.600846][ T4935] Bluetooth: hci4: command tx timeout [ 84.600984][ T4935] Bluetooth: hci0: command tx timeout [ 84.674532][ T5821] xt_TCPMSS: Only works on TCP SYN packets [ 84.679555][ T52] Bluetooth: hci1: command tx timeout [ 84.681323][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.681486][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.681531][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.681565][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.710534][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.736234][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.821820][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.953624][ T1229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.953646][ T1229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.979298][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.979576][ T1229] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.985598][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 85.061331][ T5829] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 85.072112][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.084357][ T5824] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 85.136608][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.136623][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.225204][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.225224][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.376277][ T5833] Zero length message leads to an empty skb [ 85.392578][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.392600][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.629625][ T5838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 85.781115][ T5847] netlink: 'syz.1.2': attribute type 5 has an invalid length. [ 85.781139][ T5847] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'. [ 85.998655][ T5857] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13'. [ 85.998676][ T5857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'. [ 86.041858][ T5858] syz.2.10 uses obsolete (PF_INET,SOCK_PACKET) [ 86.870311][ T5913] xt_l2tp: unknown flags: e7 [ 86.964147][ T5916] netlink: 72 bytes leftover after parsing attributes in process `syz.4.21'. [ 86.982184][ T52] block nbd0: Receive control failed (result -32) [ 86.984357][ T4935] block nbd0: Receive control failed (result -32) [ 87.016092][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'. [ 87.016116][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'. [ 87.112515][ T5922] netlink: 'syz.4.22': attribute type 11 has an invalid length. [ 87.133677][ T25] cfg80211: failed to load regulatory.db [ 87.410013][ T5924] netlink: 'syz.3.23': attribute type 34 has an invalid length. [ 87.410036][ T5924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23'. [ 87.509668][ T5924] bond1: option lacp_strict: invalid value (16) [ 87.689181][ T5924] bond1 (unregistering): Released all slaves [ 87.754674][ T5941] netlink: 76 bytes leftover after parsing attributes in process `syz.4.28'. [ 88.429525][ T5963] tc_dump_action: action bad kind [ 88.451126][ T5972] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 88.477402][ T5974] netlink: 'syz.3.37': attribute type 1 has an invalid length. [ 88.595456][ T5978] bridge1: entered promiscuous mode [ 88.754763][ T5984] workqueue: name exceeds WQ_NAME_LEN. Truncating to: '>N95xhˉpn [ 89.092072][ T5993] warning: `syz.0.44' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.484059][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.485191][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.647925][ T6009] __nla_validate_parse: 4 callbacks suppressed [ 89.655619][ T6009] netlink: 60 bytes leftover after parsing attributes in process `syz.2.48'. [ 89.705216][ T6016] openvswitch: netlink: Duplicate key (type 0). [ 89.716969][ T6016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.49'. [ 89.731088][ T6016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.49'. [ 89.785838][ T5994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.811734][ T5994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.158553][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.158595][ T6019] tap0: tun_chr_ioctl cmd 1074025676 [ 90.158612][ T6019] tap0: owner set to 0 [ 90.375820][ T6024] pim6reg: entered allmulticast mode [ 90.429287][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.430978][ T1229] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.431025][ T1229] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.724766][ T6046] netlink: 'syz.2.54': attribute type 21 has an invalid length. [ 90.783505][ T6047] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 91.180738][ T6066] netlink: 72 bytes leftover after parsing attributes in process `syz.3.59'. [ 91.183968][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'. [ 91.223222][ T6067] netlink: 96 bytes leftover after parsing attributes in process `syz.1.55'. [ 91.413873][ T6070] netlink: 40 bytes leftover after parsing attributes in process `syz.3.60'. [ 91.483547][ T6065] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.485545][ T6065] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.752691][ T6083] netlink: 48 bytes leftover after parsing attributes in process `syz.3.62'. [ 91.802971][ T6065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.824870][ T6065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.991731][ T143] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.002650][ T1229] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.003491][ T1229] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.003528][ T1229] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.220880][ T6100] lo speed is unknown, defaulting to 1000 [ 92.221574][ T6100] lo speed is unknown, defaulting to 1000 [ 92.272147][ T6100] lo speed is unknown, defaulting to 1000 [ 92.288789][ T6100] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 92.288828][ T6100] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 92.288862][ T6100] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 92.295073][ T6100] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 92.467526][ T6110] xt_socket: unknown flags 0x4 [ 92.504560][ T6100] lo speed is unknown, defaulting to 1000 [ 92.506536][ T6115] netlink: 72 bytes leftover after parsing attributes in process `syz.2.70'. [ 92.529497][ T6100] lo speed is unknown, defaulting to 1000 [ 92.583666][ T6100] lo speed is unknown, defaulting to 1000 [ 92.585720][ T6100] lo speed is unknown, defaulting to 1000 [ 92.587550][ T6100] lo speed is unknown, defaulting to 1000 [ 92.819604][ T6126] netlink: 28 bytes leftover after parsing attributes in process `syz.2.72'. [ 94.068941][ T6183] block nbd1: Unsupported socket: should be TCP or UNIX. [ 94.069445][ T6183] block nbd1: shutting down sockets [ 94.670193][ T31] audit: type=1804 audit(1790263161.827:2): pid=6201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.92" name="/newroot/26/cgroup.controllers" dev="tmpfs" ino=150 res=1 errno=0 [ 94.675971][ T31] audit: type=1800 audit(1790263161.827:3): pid=6201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.92" name="cgroup.controllers" dev="tmpfs" ino=150 res=0 errno=0 [ 95.216197][ T5875] hid-generic 0005:16C0:0009.0001: item fetching failed at offset 0/1 [ 95.237600][ T5875] hid-generic 0005:16C0:0009.0001: probe with driver hid-generic failed with error -22 [ 95.774680][ T6239] netlink: 'syz.2.103': attribute type 1 has an invalid length. [ 95.879342][ T6244] __nla_validate_parse: 2 callbacks suppressed [ 95.879363][ T6244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.104'. [ 95.917518][ T1042] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.917760][ T1042] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.917812][ T1042] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.917847][ T1042] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.256629][ T6252] Bluetooth: MGMT ver 1.23 [ 96.882382][ T6285] netlink: 36 bytes leftover after parsing attributes in process `syz.0.117'. [ 96.899574][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.117'. [ 96.899596][ T6285] netlink: 24 bytes leftover after parsing attributes in process `syz.0.117'. [ 96.899609][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.117'. [ 96.899620][ T6285] netlink: 'syz.0.117': attribute type 5 has an invalid length. [ 97.370333][ T6299] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 97.370372][ T6299] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 97.370408][ T6299] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 97.376220][ T6299] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 97.519910][ T6299] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 97.581784][ T6312] netlink: 20 bytes leftover after parsing attributes in process `syz.2.126'. [ 97.709502][ T6315] netlink: 'syz.4.125': attribute type 10 has an invalid length. [ 97.716288][ T6307] smbdirect: ib_dev[syz_device_name_32_chars_1234567] renamed to [sy] [ 97.762622][ T6315] team0: Port device dummy0 added [ 97.769627][ T6315] netlink: 'syz.4.125': attribute type 10 has an invalid length. [ 97.844955][ T6315] team0: Port device dummy0 removed [ 98.852838][ T6369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.137'. [ 98.949062][ T6371] netlink: 48 bytes leftover after parsing attributes in process `syz.4.138'. [ 99.181148][ T6382] netlink: zone id is out of range [ 99.181163][ T6382] netlink: zone id is out of range [ 99.181169][ T6382] netlink: zone id is out of range [ 99.181175][ T6382] netlink: zone id is out of range [ 99.181212][ T6382] netlink: zone id is out of range [ 99.181218][ T6382] netlink: zone id is out of range [ 99.181224][ T6382] netlink: zone id is out of range [ 99.181229][ T6382] netlink: zone id is out of range [ 99.185752][ T6387] netlink: 32 bytes leftover after parsing attributes in process `syz.0.141'. [ 99.195114][ T6378] tipc: Enabling of bearer rejected, failed to enable media [ 99.264987][ T6382] Set syz1 is full, maxelem 1029 reached [ 99.591011][ T6402] tipc: Started in network mode [ 99.591044][ T6402] tipc: Node identity ac14140f, cluster identity 4711 [ 99.606331][ T6402] tipc: New replicast peer: 255.255.255.255 [ 99.613727][ T6402] tipc: Enabled bearer , priority 10 [ 99.687393][ T6410] netlink: 44 bytes leftover after parsing attributes in process `syz.2.146'. [ 99.750292][ T6414] ip6gretap0: entered promiscuous mode [ 99.751615][ T6414] vlan2: entered promiscuous mode [ 99.756685][ T6410] Bluetooth: ISO socket layer initialized [ 99.847240][ T6423] vlan2: entered promiscuous mode [ 100.332596][ T6443] syzkaller0: entered promiscuous mode [ 100.332623][ T6443] syzkaller0: entered allmulticast mode [ 100.568854][ T6458] ip6t_hbh: Not strict - not implemented [ 100.870286][ T6477] ip_tables: iptables: counters copy to user failed while replacing table [ 100.987698][ T6479] __nla_validate_parse: 2 callbacks suppressed [ 100.987719][ T6479] netlink: 24 bytes leftover after parsing attributes in process `syz.2.162'. [ 102.368931][ T6458] netlink: 56 bytes leftover after parsing attributes in process `syz.3.159'. [ 102.371559][ T30] tipc: Node number set to 2886997007 [ 102.433450][ T6483] netlink: 40 bytes leftover after parsing attributes in process `syz.1.163'. [ 102.433781][ T6483] netlink: 40 bytes leftover after parsing attributes in process `syz.1.163'. [ 102.722095][ T6494] netlink: 'syz.2.167': attribute type 4 has an invalid length. [ 102.729171][ T6496] syzkaller1: entered promiscuous mode [ 102.729190][ T6496] syzkaller1: entered allmulticast mode [ 103.091055][ T4935] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 103.209590][ T6515] tipc: Started in network mode [ 103.209621][ T6515] tipc: Node identity a2412ebe1f94, cluster identity 4711 [ 103.213324][ T6515] tipc: Enabled bearer , priority 0 [ 103.215500][ T6515] syzkaller0: entered promiscuous mode [ 103.215521][ T6515] syzkaller0: entered allmulticast mode [ 103.267330][ T6515] tipc: Resetting bearer [ 103.692209][ T6534] netlink: 28 bytes leftover after parsing attributes in process `syz.1.177'. [ 103.692246][ T6534] netlink: 28 bytes leftover after parsing attributes in process `syz.1.177'. [ 103.730657][ T6536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.178'. [ 103.755909][ T6537] netlink: 28 bytes leftover after parsing attributes in process `syz.1.177'. [ 103.755945][ T6537] netlink: 28 bytes leftover after parsing attributes in process `syz.1.177'. [ 103.915388][ T6511] tipc: Resetting bearer [ 103.971501][ T6511] tipc: Disabling bearer [ 104.322470][ T6551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.180'. [ 104.331148][ T6552] syzkaller0: entered promiscuous mode [ 104.331167][ T6552] syzkaller0: entered allmulticast mode [ 104.466163][ T6557] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 104.466283][ T6557] syzkaller1: linktype set to 825 [ 104.581138][ T6560] gretap1: entered promiscuous mode [ 104.805084][ T6561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.807133][ T6561] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.855083][ T6561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.961858][ T6561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.963946][ T6561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.996455][ T6561] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 104.996479][ T6561] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.019094][ T6584] Bluetooth: MGMT ver 1.23 [ 105.019149][ T6584] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 105.045890][ T6561] veth1_vlan: left promiscuous mode [ 105.047444][ T6561] veth0_vlan: left promiscuous mode [ 105.064845][ T6561] veth0_vlan: entered promiscuous mode [ 105.067236][ T6561] veth1_vlan: entered promiscuous mode [ 105.084452][ T6561] veth1_macvtap: left promiscuous mode [ 105.085690][ T6561] veth0_macvtap: left promiscuous mode [ 105.086747][ T6561] veth0_macvtap: entered promiscuous mode [ 105.087884][ T6561] veth1_macvtap: entered promiscuous mode [ 105.119532][ T6561] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.120557][ T6561] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.122165][ T6561] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.123201][ T6561] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.186931][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.187028][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.207401][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.207504][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.440641][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.459255][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.459416][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.459582][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.489334][ T1042] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.490171][ T1042] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.490204][ T1042] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.490265][ T1042] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.580053][ T6594] IPVS: set_ctl: invalid protocol: 75 127.0.0.1:20004 [ 105.704613][ T6601] net_ratelimit: 3 callbacks suppressed [ 105.704634][ T6601] ip_tables: iptables: counters copy to user failed while replacing table [ 107.706811][ T6565] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 107.850985][ T6606] syzkaller0: entered promiscuous mode [ 107.851006][ T6606] syzkaller0: entered allmulticast mode [ 108.012553][ T6609] __nla_validate_parse: 1 callbacks suppressed [ 108.012571][ T6609] netlink: 28 bytes leftover after parsing attributes in process `syz.1.198'. [ 108.048039][ T6619] netlink: 'syz.4.197': attribute type 1 has an invalid length. [ 108.048061][ T6619] netlink: 224 bytes leftover after parsing attributes in process `syz.4.197'. [ 108.937286][ T6663] s: renamed from veth0 (while UP) [ 108.965211][ T6663] IPVS: set_ctl: invalid protocol: 41 172.30.1.4:20002 [ 109.178108][ T6671] syzkaller0: entered promiscuous mode [ 109.178134][ T6671] syzkaller0: entered allmulticast mode [ 109.608872][ T6701] netlink: 'syz.4.213': attribute type 1 has an invalid length. [ 111.564588][ T6726] netlink: 28 bytes leftover after parsing attributes in process `syz.1.216'. [ 111.872712][ T6690] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 111.875496][ T6701] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 111.933210][ T6705] bridge1: entered promiscuous mode [ 111.971034][ T6731] xt_cgroup: invalid path, errno=-2 [ 112.147751][ T6736] netlink: 'syz.4.220': attribute type 62 has an invalid length. [ 112.923979][ T6777] syz.2.228: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 112.924120][ T6777] CPU: 1 UID: 0 PID: 6777 Comm: syz.2.228 Not tainted syzkaller #0 PREEMPT(full) [ 112.924142][ T6777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.924161][ T6777] Call Trace: [ 112.924172][ T6777] [ 112.924180][ T6777] dump_stack_lvl+0xe8/0x150 [ 112.924217][ T6777] warn_alloc+0x24d/0x270 [ 112.924236][ T6777] ? kasan_save_track+0x4f/0x80 [ 112.924255][ T6777] ? kasan_save_track+0x3e/0x80 [ 112.924274][ T6777] ? __pfx_warn_alloc+0x10/0x10 [ 112.924289][ T6777] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 112.924314][ T6777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.924350][ T6777] __vmalloc_node_range_noprof+0x127/0x1540 [ 112.924400][ T6777] ? rcu_is_watching+0x16/0xb0 [ 112.924428][ T6777] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 112.924455][ T6777] ? __kmalloc_cache_noprof+0x321/0x600 [ 112.924474][ T6777] ? __kmalloc_cache_noprof+0x14d/0x600 [ 112.924493][ T6777] ? xskq_create+0x56/0x220 [ 112.924519][ T6777] xskq_create+0x148/0x220 [ 112.924541][ T6777] ? xsk_init_queue+0x8a/0xe0 [ 112.924562][ T6777] xsk_init_queue+0x8a/0xe0 [ 112.924582][ T6777] xsk_setsockopt+0x52a/0x960 [ 112.924604][ T6777] ? __pfx_xsk_setsockopt+0x10/0x10 [ 112.924622][ T6777] ? __pfx_aa_sk_perm+0x10/0x10 [ 112.924650][ T6777] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 112.924673][ T6777] ? __pfx_xsk_setsockopt+0x10/0x10 [ 112.924701][ T6777] do_sock_setsockopt+0x17c/0x1b0 [ 112.924728][ T6777] __x64_sys_setsockopt+0x13d/0x1b0 [ 112.924756][ T6777] do_syscall_64+0x166/0x520 [ 112.924777][ T6777] ? trace_irq_disable+0x3b/0x140 [ 112.924796][ T6777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.924815][ T6777] ? clear_bhb_loop+0x70/0xc0 [ 112.924838][ T6777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.924853][ T6777] RIP: 0033:0x7f3dbd39e159 [ 112.924879][ T6777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.924894][ T6777] RSP: 002b:00007f3dbe1d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 112.924911][ T6777] RAX: ffffffffffffffda RBX: 00007f3dbd625fa0 RCX: 00007f3dbd39e159 [ 112.924923][ T6777] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 112.924933][ T6777] RBP: 00007f3dbd43506b R08: 0000000000000004 R09: 0000000000000000 [ 112.924944][ T6777] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.924954][ T6777] R13: 00007f3dbd626038 R14: 00007f3dbd625fa0 R15: 00007ffc69f3c268 [ 112.924984][ T6777] [ 112.924995][ T6777] Mem-Info: [ 112.925004][ T6777] active_anon:5945 inactive_anon:0 isolated_anon:0 [ 112.925004][ T6777] active_file:0 inactive_file:43256 isolated_file:0 [ 112.925004][ T6777] unevictable:0 dirty:58 writeback:0 [ 112.925004][ T6777] slab_reclaimable:10511 slab_unreclaimable:94313 [ 112.925004][ T6777] mapped:30510 shmem:560 pagetables:1208 [ 112.925004][ T6777] sec_pagetables:0 bounce:0 [ 112.925004][ T6777] kernel_misc_reclaimable:0 [ 112.925004][ T6777] free:1328940 free_pcp:16402 free_cma:0 [ 112.925050][ T6777] Node 0 active_anon:23780kB inactive_anon:0kB active_file:0kB inactive_file:172812kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122040kB dirty:228kB writeback:0kB shmem:2240kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12924kB pagetables:4684kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 112.925107][ T6777] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 112.925158][ T6777] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 112.925210][ T6777] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 112.925246][ T6777] Node 0 DMA32 free:1357372kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23780kB inactive_anon:0kB active_file:0kB inactive_file:172812kB unevictable:0kB writepending:228kB zspages:0kB present:3129332kB managed:2546920kB mlocked:0kB bounce:0kB free_pcp:65608kB local_pcp:17864kB free_cma:0kB [ 112.925300][ T6777] lowmem_reserve[]: 0 0 0 0 0 [ 112.926900][ T6777] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 112.926962][ T6777] lowmem_reserve[]: 0 0 0 0 0 [ 112.926998][ T6777] Node 1 Normal free:3943028kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 112.927051][ T6777] lowmem_reserve[]: 0 0 0 0 0 [ 112.927094][ T6777] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 112.927234][ T6777] Node 0 DMA32: 737*4kB (UME) 775*8kB (UME) 416*16kB (UME) 583*32kB (UM) 161*64kB (UME) 49*128kB (UM) 19*256kB (UME) 4*512kB (UME) 7*1024kB (UME) 1*2048kB (M) 315*4096kB (M) = 1357404kB [ 112.927389][ T6777] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 112.927478][ T6777] Node 1 Normal: 1*4kB (M) 4*8kB (UM) 3*16kB (UM) 9*32kB (UM) 6*64kB (UM) 5*128kB (UM) 5*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 0*2048kB 961*4096kB (M) = 3943028kB [ 112.927611][ T6777] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 112.927625][ T6777] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 112.927650][ T6777] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 112.927664][ T6777] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 112.927678][ T6777] 43812 total pagecache pages [ 112.927689][ T6777] 0 pages in swap cache [ 112.927696][ T6777] Free swap = 124996kB [ 112.927703][ T6777] Total swap = 124996kB [ 112.927711][ T6777] 2097051 pages RAM [ 112.927717][ T6777] 0 pages HighMem/MovableOnly [ 112.927723][ T6777] 428705 pages reserved [ 112.927729][ T6777] 0 pages cma reserved [ 113.543441][ T6777] netlink: 32 bytes leftover after parsing attributes in process `syz.2.228'. [ 113.830225][ T6808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.232'. [ 114.737560][ T6824] veth3: entered promiscuous mode [ 114.737582][ T6824] veth3: entered allmulticast mode [ 114.750922][ T6824] bridge1: port 1(veth3) entered blocking state [ 114.751035][ T6824] bridge1: port 1(veth3) entered disabled state [ 114.753312][ T6824] bridge1: port 1(veth3) entered blocking state [ 114.753419][ T6824] bridge1: port 1(veth3) entered forwarding state [ 114.774061][ T12] bridge1: port 1(veth3) entered disabled state [ 114.853813][ T6840] syzkaller0: entered promiscuous mode [ 114.853836][ T6840] syzkaller0: entered allmulticast mode [ 114.873974][ T6840] vlan0: entered promiscuous mode [ 114.874233][ T6840] vlan0: entered allmulticast mode [ 114.874247][ T6840] veth0_vlan: entered allmulticast mode [ 115.047427][ T6846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.242'. [ 115.182134][ T6848] netlink: 68 bytes leftover after parsing attributes in process `syz.4.243'. [ 116.627300][ T6795] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 117.104197][ T6869] syzkaller0: entered promiscuous mode [ 117.104219][ T6869] syzkaller0: entered allmulticast mode [ 117.126563][ T6869] tipc: Started in network mode [ 117.126594][ T6869] tipc: Node identity b29b3980b997, cluster identity 4711 [ 117.134632][ T6869] tipc: Enabled bearer , priority 0 [ 117.155191][ T6868] tipc: Resetting bearer [ 117.220341][ T6868] tipc: Disabling bearer [ 117.271190][ T6872] netlink: 28 bytes leftover after parsing attributes in process `syz.2.250'. [ 117.271216][ T6872] netlink: 28 bytes leftover after parsing attributes in process `syz.2.250'. [ 117.491741][ T6893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.255'. [ 117.491774][ T6893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.255'. [ 117.587141][ T6901] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 117.973151][ T6915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.258'. [ 118.147591][ T6912] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 118.156190][ T6912] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 118.221321][ T6920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.545902][ T6932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'. [ 118.849770][ T6948] netlink: 40 bytes leftover after parsing attributes in process `syz.2.266'. [ 119.234542][ T6933] gre1: entered promiscuous mode [ 119.345203][ T6951] ip_tables: iptables: counters copy to user failed while replacing table [ 119.354397][ T6945] netlink: 36 bytes leftover after parsing attributes in process `syz.1.265'. [ 119.411181][ T6953] netlink: 40 bytes leftover after parsing attributes in process `syz.0.268'. [ 119.452758][ T6953] hsr_slave_1 (unregistering): left promiscuous mode [ 119.503941][ T6954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.268'. [ 119.579201][ T6956] ip6t_ah: unknown flags 4 [ 119.589773][ T6956] ip6t_ah: unknown flags 4 [ 119.862787][ T6978] netlink: 20 bytes leftover after parsing attributes in process `syz.0.273'. [ 120.024095][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.276'. [ 121.030894][ T7035] netlink: 20 bytes leftover after parsing attributes in process `syz.3.281'. [ 121.059504][ T7031] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 121.086089][ T7038] netlink: 'syz.3.281': attribute type 1 has an invalid length. [ 121.086109][ T7038] netlink: 'syz.3.281': attribute type 2 has an invalid length. [ 121.086120][ T7038] netlink: 'syz.3.281': attribute type 3 has an invalid length. [ 121.086131][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.281'. [ 121.170164][ T7035] geneve2: entered promiscuous mode [ 121.522735][ T7045] netlink: 'syz.1.285': attribute type 10 has an invalid length. [ 121.522757][ T7045] netlink: 40 bytes leftover after parsing attributes in process `syz.1.285'. [ 122.643736][ T7096] netlink: 'syz.1.294': attribute type 1 has an invalid length. [ 123.203594][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.300'. [ 123.343788][ T7111] syzkaller0: entered promiscuous mode [ 123.343813][ T7111] syzkaller0: entered allmulticast mode [ 126.595492][ T7160] syzkaller0: entered promiscuous mode [ 126.595514][ T7160] syzkaller0: entered allmulticast mode [ 126.596643][ T7160] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 126.844578][ T7176] __nla_validate_parse: 2 callbacks suppressed [ 126.844597][ T7176] netlink: 24 bytes leftover after parsing attributes in process `syz.3.313'. [ 126.844615][ T7176] netlink: 40 bytes leftover after parsing attributes in process `syz.3.313'. [ 126.937735][ T7176] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 126.937761][ T7176] bond1: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 126.963647][ T7176] bond1 (unregistering): Released all slaves [ 127.004520][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.316'. [ 127.090836][ T7194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.318'. [ 127.091818][ T7194] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 127.201769][ T7190] syzkaller0: entered promiscuous mode [ 127.201790][ T7190] syzkaller0: entered allmulticast mode [ 127.303198][ T7190] tipc: Started in network mode [ 127.304515][ T7190] tipc: Node identity 16d481367be4, cluster identity 4711 [ 127.304788][ T7190] tipc: Enabled bearer , priority 0 [ 127.320865][ T7189] tipc: Resetting bearer [ 127.350858][ T7189] tipc: Disabling bearer [ 127.395671][ T7199] tipc: New replicast peer: 255.255.255.255 [ 127.396698][ T7199] tipc: Enabled bearer , priority 10 [ 127.397335][ T7199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.319'. [ 127.401630][ T7199] netlink: 'syz.4.319': attribute type 1 has an invalid length. [ 127.443217][ T7208] netlink: 40 bytes leftover after parsing attributes in process `syz.1.321'. [ 127.444816][ T7208] nbd: must specify at least one socket [ 127.445683][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.321'. [ 127.475032][ T7199] bond1: entered promiscuous mode [ 127.477889][ T7199] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.499960][ T7208] netlink: 32 bytes leftover after parsing attributes in process `syz.1.321'. [ 127.542436][ T7211] tc_dump_action: action bad kind [ 127.867382][ T7226] netlink: 24 bytes leftover after parsing attributes in process `syz.0.327'. [ 127.956752][ T7229] netlink: 'syz.0.327': attribute type 4 has an invalid length. [ 127.956772][ T7229] netlink: 152 bytes leftover after parsing attributes in process `syz.0.327'. [ 127.984218][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055482000: rx timeout, send abort [ 127.993817][ T7229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.484538][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055483800: rx timeout, send abort [ 128.485368][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055482000: abort rx timeout. Force session deactivation [ 128.487423][ T7215] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 128.506833][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888055483800: connection exists (fe ff). last cmd: 20 [ 128.538942][ T5874] tipc: Node number set to 185350528 [ 128.756782][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079959400: rx timeout, send abort [ 128.946580][ T7257] lo speed is unknown, defaulting to 1000 [ 129.007892][ T7261] netlink: 'syz.1.335': attribute type 1 has an invalid length. [ 129.256854][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079959400: abort rx timeout. Force session deactivation [ 129.467218][ T7270] tc_dump_action: action bad kind [ 129.484170][ T7267] syzkaller1: entered promiscuous mode [ 129.484192][ T7267] syzkaller1: entered allmulticast mode [ 129.943581][ T7284] lo speed is unknown, defaulting to 1000 [ 130.368191][ T7285] openvswitch: netlink: IPv4 tun info is not correct [ 130.796691][ T7299] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.797400][ T7299] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.844939][ T7319] netlink: 'syz.4.350': attribute type 1 has an invalid length. [ 131.116288][ T7299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.153678][ T7299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.670994][ T5745] s`z1: Port: 1 Link DOWN [ 131.694688][ T7319] bond2: entered promiscuous mode [ 131.694728][ T7319] bond2: entered allmulticast mode [ 131.695092][ T7319] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.720587][ T7320] erspan1: entered allmulticast mode [ 131.864270][ T7330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.868690][ T1167] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.870893][ T1167] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.870931][ T1167] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.870961][ T1167] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.976057][ T7323] syz.1.352 (7323) used greatest stack depth: 17440 bytes left [ 132.015198][ T7332] tc_dump_action: action bad kind [ 132.129235][ T7338] __nla_validate_parse: 6 callbacks suppressed [ 132.129254][ T7338] netlink: 11575 bytes leftover after parsing attributes in process `syz.4.356'. [ 132.129274][ T7338] netlink: 116 bytes leftover after parsing attributes in process `syz.4.356'. [ 132.626049][ T7364] netlink: 'syz.0.364': attribute type 1 has an invalid length. [ 132.667781][ T7364] bond1: option mode: invalid value (8) [ 132.677781][ T7364] bond1 (unregistering): Released all slaves [ 132.945657][ T36] IPVS: starting estimator thread 0... [ 133.028553][ T7384] IPVS: using max 31 ests per chain, 74400 per kthread [ 133.164254][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.385550][ T7397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.371'. [ 133.823581][ T7407] tc_dump_action: action bad kind [ 134.422414][ T7423] syzkaller0: entered promiscuous mode [ 134.422437][ T7423] syzkaller0: entered allmulticast mode [ 134.456766][ T7423] tipc: Enabled bearer , priority 0 [ 134.503009][ T7423] tipc: Resetting bearer [ 134.592620][ T7423] tipc: Disabling bearer [ 134.616122][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.379'. [ 134.636876][ T7432] ip6gre1: entered promiscuous mode [ 134.636891][ T7432] ip6gre1: entered allmulticast mode [ 134.789833][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.380'. [ 134.827065][ T7437] netlink: 'syz.4.380': attribute type 19 has an invalid length. [ 134.833179][ T7439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.379'. [ 134.837041][ T7439] netlink: 28 bytes leftover after parsing attributes in process `syz.0.379'. [ 134.859244][ T7440] netlink: 32 bytes leftover after parsing attributes in process `syz.2.381'. [ 134.859425][ T7440] netlink: 32 bytes leftover after parsing attributes in process `syz.2.381'. [ 134.859589][ T7440] netlink: 32 bytes leftover after parsing attributes in process `syz.2.381'. [ 135.108167][ T7449] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 135.256732][ T7453] syzkaller0: entered promiscuous mode [ 135.256756][ T7453] syzkaller0: entered allmulticast mode [ 135.281784][ T7453] tipc: Started in network mode [ 135.281816][ T7453] tipc: Node identity 76c6f61e2a02, cluster identity 4711 [ 135.282082][ T7453] tipc: Enabled bearer , priority 0 [ 135.314016][ T7452] tipc: Resetting bearer [ 135.381483][ T7466] netlink: 'syz.2.386': attribute type 11 has an invalid length. [ 135.384113][ T7452] tipc: Disabling bearer [ 135.701204][ T7482] ip_tables: iptables: counters copy to user failed while replacing table [ 136.101700][ T7503] syzkaller1: entered allmulticast mode [ 136.694821][ T36] IPVS: starting estimator thread 0... [ 136.697545][ T7534] ip6gre1: entered promiscuous mode [ 136.697565][ T7534] ip6gre1: entered allmulticast mode [ 136.787521][ T7542] IPVS: using max 26 ests per chain, 62400 per kthread [ 137.051573][ T7549] syzkaller0: entered promiscuous mode [ 137.051594][ T7549] syzkaller0: entered allmulticast mode [ 137.084799][ T7549] tipc: Enabled bearer , priority 0 [ 137.095302][ T7548] tipc: Resetting bearer [ 137.129782][ T7548] tipc: Disabling bearer [ 137.189120][ T50] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 137.189339][ T50] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 137.219607][ T5874] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 137.254424][ T7572] nft_compat: unsupported protocol 0 [ 137.275223][ T7559] __nla_validate_parse: 21 callbacks suppressed [ 137.275242][ T7559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.406'. [ 137.275274][ T7559] netlink: 'syz.0.406': attribute type 11 has an invalid length. [ 137.275415][ T7559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.406'. [ 137.275432][ T7559] netlink: 'syz.0.406': attribute type 11 has an invalid length. [ 137.318810][ T7577] netlink: 4564 bytes leftover after parsing attributes in process `syz.3.411'. [ 137.399473][ T5875] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 137.478585][ T5875] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 137.667220][ T7590] bond1 (unregistering): Released all slaves [ 137.728927][ T7593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.414'. [ 137.834973][ T7597] bond1 (unregistering): Released all slaves [ 137.854240][ T7551] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 138.081559][ T7606] netlink: 24 bytes leftover after parsing attributes in process `syz.4.418'. [ 138.121594][ T7613] netlink: 148 bytes leftover after parsing attributes in process `syz.1.422'. [ 138.137034][ T7609] sctp: [Deprecated]: syz.0.419 (pid 7609) Use of int in maxseg socket option. [ 138.137034][ T7609] Use struct sctp_assoc_value instead [ 138.149271][ T7606] netlink: 'syz.4.418': attribute type 3 has an invalid length. [ 138.345498][ T7620] netlink: 'syz.1.423': attribute type 1 has an invalid length. [ 138.517642][ T7620] netlink: 28 bytes leftover after parsing attributes in process `syz.1.423'. [ 138.581570][ T7623] tc_dump_action: action bad kind [ 138.774270][ T7628] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.789854][ T7628] bond1: (slave bond2): making interface the new active one [ 138.791997][ T7628] bond1: (slave bond2): Enslaving as an active interface with an up link [ 138.873197][ T7632] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 138.902234][ T7651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.431'. [ 138.903825][ T7620] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.041556][ T7657] openvswitch: netlink: Key type 9220 is out of range max 32 [ 139.078300][ T4935] Bluetooth: hci0: command 0x0c1a tx timeout [ 139.223936][ T7654] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 139.223963][ T7654] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 139.384558][ T7677] netlink: 'syz.0.437': attribute type 15 has an invalid length. [ 139.604528][ T7683] netlink: 'syz.4.438': attribute type 6 has an invalid length. [ 139.604551][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.438'. [ 139.662871][ T7683] netlink: 'syz.4.438': attribute type 6 has an invalid length. [ 139.662891][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.438'. [ 139.844047][ T7696] netlink: 'syz.4.443': attribute type 23 has an invalid length. [ 139.898261][ T7686] syzkaller0: entered promiscuous mode [ 139.898282][ T7686] syzkaller0: entered allmulticast mode [ 139.949890][ T7698] openvswitch: netlink: IP tunnel dst address not specified [ 140.241367][ T7705] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 141.323114][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 142.781129][ T7736] veth1_macvtap: left promiscuous mode [ 143.203496][ T7751] __nla_validate_parse: 1 callbacks suppressed [ 143.203554][ T7751] netlink: 28 bytes leftover after parsing attributes in process `syz.3.457'. [ 143.204882][ T7757] netlink: 20 bytes leftover after parsing attributes in process `syz.4.460'. [ 143.206301][ T7757] netlink: 16 bytes leftover after parsing attributes in process `syz.4.460'. [ 143.355389][ T7762] Bluetooth: MGMT ver 1.23 [ 143.926430][ T7798] tc_dump_action: action bad kind [ 144.000864][ T7803] netlink: 36 bytes leftover after parsing attributes in process `syz.2.467'. [ 144.433101][ T7817] netlink: 84 bytes leftover after parsing attributes in process `syz.4.471'. [ 144.632377][ T5281] veth1_macvtap: entered promiscuous mode [ 144.717565][ T7835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.474'. [ 144.723245][ T7832] sctp: [Deprecated]: syz.1.476 (pid 7832) Use of int in max_burst socket option. [ 144.723245][ T7832] Use struct sctp_assoc_value instead [ 144.749664][ T7837] netlink: 52 bytes leftover after parsing attributes in process `syz.2.478'. [ 144.825204][ T7832] syzkaller0: entered promiscuous mode [ 144.825225][ T7832] syzkaller0: entered allmulticast mode [ 144.925268][ T7843] team0: Device wg1 is of different type [ 144.971270][ T7843] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 145.005401][ T7845] netlink: 60 bytes leftover after parsing attributes in process `syz.0.479'. [ 145.005660][ T7845] unsupported nlmsg_type 40 [ 145.048214][ T7844] netlink: 'syz.2.482': attribute type 1 has an invalid length. [ 145.107587][ T7849] netlink: 104 bytes leftover after parsing attributes in process `syz.4.483'. [ 145.241421][ T4935] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 145.241981][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 145.546483][ T7850] bond2: option arp_validate: invalid value (1048579) [ 145.562820][ T7850] bond2 (unregistering): Released all slaves [ 145.600508][ T7855] tc_dump_action: action bad kind [ 145.635814][ T1167] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 145.650867][ T7857] bond2: option arp_validate: invalid value (1048579) [ 145.657229][ T7857] bond2 (unregistering): Released all slaves [ 145.692285][ T7880] netlink: 56 bytes leftover after parsing attributes in process `syz.1.487'. [ 145.749699][ T7872] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 147.140227][ T7937] netlink: 'syz.4.500': attribute type 3 has an invalid length. [ 147.140245][ T7937] netlink: 'syz.4.500': attribute type 7 has an invalid length. [ 147.177548][ T7934] tc_dump_action: action bad kind [ 149.798509][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 165.798430][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 197.798484][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 240.177418][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.198256][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 345.147832][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 345.162394][ C0] rcu: 1-...!: (1 GPs behind) idle=4f0c/1/0x4000000000000000 softirq=26626/26631 fqs=2 [ 345.172140][ C0] rcu: (detected by 0, t=10505 jiffies, g=26573, q=1269 ncpus=2) [ 345.179975][ C0] Sending NMI from CPU 0 to CPUs 1: [ 345.185211][ C1] NMI backtrace for cpu 1 [ 345.185239][ C1] CPU: 1 UID: 0 PID: 7917 Comm: syz.1.495 Not tainted syzkaller #0 PREEMPT(full) [ 345.185280][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 345.185291][ C1] RIP: 0010:check_preemption_disabled+0x1/0xd0 [ 345.185329][ C1] Code: 20 a0 6d 8c 48 c7 c6 60 a0 6d 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 53 65 8b 05 db fd ae 07 65 48 8b 0d ab fd ae 07 85 c9 [ 345.185343][ C1] RSP: 0018:ffffc90000a18c70 EFLAGS: 00000046 [ 345.185363][ C1] RAX: ffffffffffffffff RBX: 0000000000000002 RCX: 0000000000000000 [ 345.185375][ C1] RDX: 0000000001000001 RSI: ffffffff8e69c415 RDI: ffffffff8c6da080 [ 345.185388][ C1] RBP: ffff8880276a8bb0 R08: ffff888054ff0c83 R09: 1ffff1100a9fe190 [ 345.185401][ C1] R10: dffffc0000000000 R11: ffffed100a9fe191 R12: 0000000000000000 [ 345.185413][ C1] R13: 0000000000000000 R14: ffff888053edc2c0 R15: ffff8880276a8000 [ 345.185426][ C1] FS: 00007f1913c156c0(0000) GS:ffff888124dca000(0000) knlGS:0000000000000000 [ 345.185441][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 345.185453][ C1] CR2: 000020000026a030 CR3: 0000000055a1c000 CR4: 00000000003526f0 [ 345.185469][ C1] Call Trace: [ 345.185478][ C1] [ 345.185487][ C1] lock_release+0x263/0x3c0 [ 345.185508][ C1] ? advance_sched+0x99a/0xc80 [ 345.185528][ C1] _raw_spin_unlock+0x16/0x50 [ 345.185547][ C1] advance_sched+0x99a/0xc80 [ 345.185571][ C1] ? __pfx_advance_sched+0x10/0x10 [ 345.185588][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 345.185622][ C1] hrtimer_interrupt+0x4cd/0xaa0 [ 345.185659][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 345.185681][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 345.185709][ C1] [ 345.185715][ C1] [ 345.185722][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 345.185741][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x80 [ 345.185769][ C1] Code: 8b 3d e4 ad a6 0c 48 89 de 5b e9 83 85 64 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d 78 8d cd 11 65 48 8b 15 78 8d cd 11 f7 c2 00 01 00 ff [ 345.185783][ C1] RSP: 0018:ffffc90007327a00 EFLAGS: 00000282 [ 345.185798][ C1] RAX: ffffffff821ebc31 RBX: ffff8880276a85c0 RCX: 0000000000000046 [ 345.185811][ C1] RDX: 0000000000000000 RSI: ffffffff8e69c415 RDI: ffffffff8c6da080 [ 345.185823][ C1] RBP: 00000000000000a9 R08: ffffc90007327af7 R09: 0000000000000000 [ 345.185834][ C1] R10: ffffc90007327ac0 R11: fffff52000e64f5f R12: dffffc0000000000 [ 345.185847][ C1] R13: 1ffff11004ed50b8 R14: ffffffff8c6ba480 R15: ffff888025c74c80 [ 345.185864][ C1] ? __might_fault+0xa1/0x130 [ 345.185892][ C1] __might_fault+0xa1/0x130 [ 345.185918][ C1] _copy_from_user+0x28/0xb0 [ 345.185941][ C1] ___sys_recvmsg+0x173/0x5a0 [ 345.185968][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 345.186009][ C1] do_recvmmsg+0x31a/0x7f0 [ 345.186036][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 345.186061][ C1] ? hook_file_ioctl+0x1f2/0x600 [ 345.186085][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 345.186115][ C1] __x64_sys_recvmmsg+0x198/0x250 [ 345.186141][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 345.186171][ C1] do_syscall_64+0x166/0x520 [ 345.186193][ C1] ? trace_irq_disable+0x3b/0x140 [ 345.186211][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.186229][ C1] ? clear_bhb_loop+0x70/0xc0 [ 345.186249][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.186267][ C1] RIP: 0033:0x7f1912d9e159 [ 345.186288][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.186302][ C1] RSP: 002b:00007f1913c15028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 345.186319][ C1] RAX: ffffffffffffffda RBX: 00007f1913026090 RCX: 00007f1912d9e159 [ 345.186332][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006 [ 345.186343][ C1] RBP: 00007f1912e3506b R08: 0000000000000000 R09: 0000000000000000 [ 345.186354][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 345.186365][ C1] R13: 00007f1913026128 R14: 00007f1913026090 R15: 00007ffe0b1bac58 [ 345.186385][ C1] [ 345.598346][ C0] rcu: rcu_preempt kthread starved for 10335 jiffies! g26573 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 345.609384][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 345.619471][ C0] rcu: RCU grace-period kthread stack dump: [ 345.625444][ C0] task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 345.639237][ C0] Call Trace: [ 345.642534][ C0] [ 345.645471][ C0] __schedule+0x17db/0x58f0 [ 345.650013][ C0] ? __lock_acquire+0x747/0x2de0 [ 345.654974][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 345.660116][ C0] ? __pfx___schedule+0x10/0x10 [ 345.664994][ C0] ? lock_acquire+0x115/0x350 [ 345.669698][ C0] ? schedule+0x90/0x2b0 [ 345.673957][ C0] schedule+0x164/0x2b0 [ 345.678127][ C0] schedule_timeout+0x152/0x2c0 [ 345.683066][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 345.688541][ C0] ? __pfx_process_timeout+0x10/0x10 [ 345.693871][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 345.699884][ C0] ? prepare_to_swait_event+0x322/0x350 [ 345.705555][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 345.710425][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 345.717107][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 345.722390][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 345.727599][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 345.733419][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 345.738021][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 345.743230][ C0] ? __kthread_parkme+0x71/0x1f0 [ 345.748182][ C0] ? __kthread_parkme+0x199/0x1f0 [ 345.753219][ C0] kthread+0x38b/0x480 [ 345.757296][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 345.762502][ C0] ? __pfx_kthread+0x10/0x10 [ 345.767096][ C0] ret_from_fork+0x514/0xb70 [ 345.771801][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 345.776957][ C0] ? __switch_to+0xc89/0x1420 [ 345.781664][ C0] ? __pfx_kthread+0x10/0x10 [ 345.786310][ C0] ret_from_fork_asm+0x1a/0x30 [ 345.791107][ C0] [ 345.794317][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 345.800727][ C0] CPU: 0 UID: 0 PID: 50 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 345.810117][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 345.820172][ C0] Workqueue: writeback wb_workfn (flush-8:0) [ 345.826174][ C0] RIP: 0010:smp_call_function_many_cond+0x61e/0x1500 [ 345.832947][ C0] Code: b6 04 04 84 c0 0f 85 d5 03 00 00 44 8b 3b 44 89 fe 83 e6 01 31 ff e8 31 56 0c 00 41 83 e7 01 75 07 e8 26 51 0c 00 eb 3f f3 90 <48> b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 75 0f f7 03 01 [ 345.853072][ C0] RSP: 0018:ffffc90000bb6120 EFLAGS: 00000293 [ 345.859239][ C0] RAX: ffffffff81bb817e RBX: ffff8880b87414c8 RCX: ffff8880236d0000 [ 345.867208][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 345.875173][ C0] RBP: ffffc90000bb6270 R08: ffff8880236d159f R09: 1ffff110046da2b3 [ 345.883220][ C0] R10: dffffc0000000000 R11: ffffffff8179dc60 R12: 1ffff110170e8299 [ 345.891189][ C0] R13: 0000000000000001 R14: ffff8880b87414c0 R15: 0000000000000001 [ 345.899156][ C0] FS: 0000000000000000(0000) GS:ffff888124cca000(0000) knlGS:0000000000000000 [ 345.908082][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 345.914665][ C0] CR2: 00007f18f2f1592c CR3: 0000000058b14000 CR4: 00000000003526f0 [ 345.922663][ C0] Call Trace: [ 345.925960][ C0] [ 345.928911][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 345.934133][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 345.939538][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 345.945874][ C0] ? rcu_is_watching+0x16/0xb0 [ 345.950661][ C0] ? trace_tlb_flush+0x3c/0x160 [ 345.955552][ C0] flush_tlb_mm_range+0x8ff/0x1090 [ 345.960683][ C0] ? check_pte+0x2c1/0x380 [ 345.965248][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 345.970802][ C0] ? lock_acquire+0x115/0x350 [ 345.975491][ C0] ? page_table_check_clear+0x124/0x500 [ 345.981053][ C0] ? page_table_check_clear+0x124/0x500 [ 345.986881][ C0] ? page_table_check_clear+0x49d/0x500 [ 345.992426][ C0] ? page_table_check_clear+0x124/0x500 [ 345.997983][ C0] ptep_clear_flush+0x120/0x170 [ 346.002842][ C0] page_vma_mkclean_one+0x4b9/0x840 [ 346.008142][ C0] ? __pfx_page_vma_mkclean_one+0x10/0x10 [ 346.013860][ C0] ? __lock_acquire+0x747/0x2de0 [ 346.018818][ C0] ? lock_acquire+0x115/0x350 [ 346.023503][ C0] page_mkclean_one+0x20c/0x2e0 [ 346.028364][ C0] ? __pfx_page_mkclean_one+0x10/0x10 [ 346.033764][ C0] ? mapping_rmap_tree_iter_first+0x219/0x230 [ 346.039858][ C0] ? __pfx_page_mkclean_one+0x10/0x10 [ 346.045250][ C0] __rmap_walk_file+0x4cd/0x6a0 [ 346.050382][ C0] folio_mkclean+0x2d5/0x3f0 [ 346.054982][ C0] ? __pfx_folio_mkclean+0x10/0x10 [ 346.060122][ C0] ? __pfx_page_mkclean_one+0x10/0x10 [ 346.065517][ C0] ? __pfx_invalid_mkclean_vma+0x10/0x10 [ 346.071162][ C0] ? folio_mapping+0x16f/0x1f0 [ 346.075981][ C0] folio_clear_dirty_for_io+0x190/0x820 [ 346.081568][ C0] ? filemap_get_folios_tag+0x118/0x720 [ 346.087166][ C0] mpage_submit_folio+0x83/0x2a0 [ 346.092131][ C0] mpage_process_page_bufs+0x6bd/0x8a0 [ 346.097639][ C0] mpage_prepare_extent_to_map+0xf92/0x1890 [ 346.103566][ C0] ? process_scheduled_works+0xc3d/0x1630 [ 346.109362][ C0] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 346.116031][ C0] ? kmem_cache_alloc_noprof+0x31f/0x600 [ 346.121706][ C0] ? ext4_init_io_end+0x29/0x130 [ 346.126667][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 346.132336][ C0] ? ext4_init_io_end+0x29/0x130 [ 346.137317][ C0] ext4_do_writepages+0xb8a/0x4770 [ 346.142479][ C0] ? lock_acquire+0x115/0x350 [ 346.147169][ C0] ? lock_acquire+0x115/0x350 [ 346.151860][ C0] ? __pfx_ext4_do_writepages+0x10/0x10 [ 346.157415][ C0] ? __lock_acquire+0x747/0x2de0 [ 346.162366][ C0] ? __lock_acquire+0x747/0x2de0 [ 346.167322][ C0] ? lock_acquire+0x115/0x350 [ 346.172132][ C0] ext4_writepages+0x241/0x3b0 [ 346.176992][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 346.182296][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 346.187428][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 346.192730][ C0] do_writepages+0x338/0x560 [ 346.197345][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 346.202662][ C0] ? reacquire_held_locks+0x117/0x1a0 [ 346.208152][ C0] ? writeback_sb_inodes+0x450/0x1b00 [ 346.213552][ C0] __writeback_single_inode+0x136/0x1220 [ 346.219228][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 346.224487][ C0] writeback_sb_inodes+0x9de/0x1b00 [ 346.230362][ C0] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 346.236098][ C0] ? __pfx_down_read_trylock+0x10/0x10 [ 346.241722][ C0] __writeback_inodes_wb+0x114/0x240 [ 346.247399][ C0] wb_writeback+0x42f/0xad0 [ 346.252195][ C0] ? queue_io+0x281/0x470 [ 346.256566][ C0] ? __pfx_wb_writeback+0x10/0x10 [ 346.261634][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 346.266774][ C0] wb_workfn+0xc92/0x10f0 [ 346.271135][ C0] ? __pfx_wb_workfn+0x10/0x10 [ 346.275928][ C0] ? lock_acquire+0x115/0x350 [ 346.280613][ C0] ? rcu_is_watching+0x16/0xb0 [ 346.285381][ C0] ? process_scheduled_works+0x97a/0x1630 [ 346.291212][ C0] process_scheduled_works+0xc3d/0x1630 [ 346.298140][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 346.304590][ C0] ? assign_work+0x3cf/0x5d0 [ 346.309304][ C0] worker_thread+0xa47/0xfb0 [ 346.313953][ C0] kthread+0x38b/0x480 [ 346.318046][ C0] ? __pfx_worker_thread+0x10/0x10 [ 346.323196][ C0] ? __pfx_kthread+0x10/0x10 [ 346.327829][ C0] ret_from_fork+0x514/0xb70 [ 346.332562][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 346.337695][ C0] ? __switch_to+0xc89/0x1420 [ 346.342471][ C0] ? __pfx_kthread+0x10/0x10 [ 346.347151][ C0] ret_from_fork_asm+0x1a/0x30 [ 346.351971][ C0]